Commit Graph

396 Commits

Author SHA1 Message Date
Petr Menšík
f70050e6d6 Update default configuration from 1.13.0
Add new additions to default configuration. None of them is uncommented,
but some of they changed default values.
2020-12-10 19:46:23 +01:00
Petr Menšík
65b8de222e Update to 1.13.0
Enabled TLS and TCP stream reuse for increased performance.
2020-12-10 12:01:38 +01:00
Petr Menšík
b29f943a4c Build on EPEL without signature check
%gpgverify is defined on RHEL 8 in incompatible way to Fedora. Use it
only on Fedora, leave to manual signatures for other distributions.
2020-11-10 17:11:48 +01:00
Petr Menšík
ac21a84ee9 Enable DNSTAP
Allows easy recording of incoming and outgoing queries.
2020-11-10 17:11:48 +01:00
Petr Menšík
07b18f13c3 Enable DNS over HTTPS 2020-11-10 17:11:48 +01:00
Petr Menšík
ee9c33779e Update config file to 1.12.0
Use new defaults from example.conf in Fedora shipped default file.
Don't include dnstap and DoH features yet.
2020-11-10 17:11:48 +01:00
Petr Menšík
9b40e98f88 Update to 1.12.0
- DNS flag day 2020 applied
- DNS over HTTPS support
- EDNS client tag support

Upstream changelog:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-12-0
2020-11-10 17:11:44 +01:00
Anna Khaitovich
9bf72f2b97 Revert "Rebuilt for rawhide"
This reverts commit 058dac652c.
2020-09-18 14:24:52 +02:00
Anna Khaitovich
058dac652c Rebuilt for rawhide 2020-09-18 13:39:03 +02:00
Petr Menšík
db21e34ec3 Rebuilt for libevent rebase
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2020-09-15 14:59:21 +02:00
Fedora Release Engineering
29d755fba8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-29 13:15:57 +00:00
Tom Stellard
66b41c854a Use make macros
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 14:38:00 +00:00
Miro Hrončok
741df0971d Rebuilt for Python 3.9 2020-05-22 21:10:05 +02:00
Paul Wouters
554ef607af update sources for sig file 2020-05-19 15:18:53 -04:00
Paul Wouters
b2855b7bff * Tue May 19 2020 Paul Wouters <pwouters@redhat.com> - 1.10.1-1
- Resolves: rhbz#1837279 unbound-1.10.1 is available
- Resolves: rhbz#1837598 CVE-2020-12662 unbound: insufficient control of network message volume leads to DoS
- Resolves: rhbz#1837609 CVE-2020-12663 unbound: infinite loop via malformed DNS answers received from upstream servers
- Updated unbound.conf for new options in 1.10.1
2020-05-19 15:12:15 -04:00
Paul Wouters
ed8559effa - Resolves: rhbz#1667742 SELinux is preventing unbound from 'name_bind' accesses on the udp_socket port 61000. 2020-04-29 17:29:43 -04:00
Artem Egorenkov
effb538e20 Upstream isue linked for patch 2020-04-16 17:58:05 +02:00
Artem Egorenkov
4f85ef9c9a bz1824536. Crash on termination fixed. 2020-04-16 16:49:04 +02:00
Petr Menšík
776a059376 Add dnstap and systemd option build support 2020-03-20 12:33:00 +01:00
Petr Menšík
b6d9ed08b0 Add source signature verification 2020-03-19 14:01:50 +01:00
Petr Menšík
c78f3c816f Update to 1.10.0 (#1805199)
Build with a new release.
2020-03-19 13:39:24 +01:00
Petr Menšík
c8f0468078 Use autopatch for new patches
Remove unused patch file, simplify adding a new patch. Just Patch: entry
is required with patch file name, autopatch will apply it.

Use new primary website for unbound upstream.
2020-03-19 11:13:20 +01:00
Fedora Release Engineering
7d6a427be7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-31 02:33:41 +00:00
Paul Wouters
cd68171bad * Fri Dec 13 2019 Paul Wouters <pwouters@redhat.com> - 1.9.6-1
- Resolves: rhbz#1758107 unbound-1.9.5 is available
- Resolves: CVE-2019-18934
2019-12-13 15:20:12 -05:00
Paul Wouters
8890aaa359 * Fri Nov 01 2019 Paul Wouters <pwouters@redhat.com> - 1.9.4-1
- Fix build on rhel/centos systems
- Resolves: rhbz#1767955 (CVE-2019-16866) uninitialized memory accesses leads to crash via a crafted NOTIFY query
2019-11-01 15:15:09 -04:00
Petr Menšík
57baf9aea1 Make obsoleted package removed without asking
Messages provided by dnf are somehow confusing. If user wants more recent
version, let it upgrade without additional flags to dnf.
2019-09-27 00:54:35 +02:00
Petr Menšík
e1df65a0ce Obsolete no longer provided python2 subpackage (#1749400)
Python2 is no longer provided. If one wants to upgrade, python2-unbound
has to be uninstalled. Since nothing directly depends on it and no update
is expected on Fedora 30+, make its uninstall smooth.
2019-09-27 00:15:49 +02:00
Paul Wouters
5bfdf89e03 * Tue Aug 27 2019 Paul Wouters <pwouters@redhat.com> - 1.9.3-1
- Updated to 1.9.3
- Resolves: rhbz#1672578 unbound-1.9.2 is available
- Resolves: rhbz#1694831 [/usr/lib/tmpfiles.d/unbound.conf:1] Line references path below legacy directory /var/run/
- Resolves: rhbz# 1667387 [abrt] unbound: memmove(): unbound killed by SIGABRT
2019-08-27 12:14:51 -04:00
Miro Hrončok
3031aeaab5 Subpackage python2-unbound has been removed 2019-08-22 17:11:45 +02:00
Miro Hrončok
6eaa4e758f Rebuilt for Python 3.8 2019-08-15 19:23:32 +02:00
Zbigniew Jędrzejewski-Szmek
373ff61647 Drop trailing comments afer %endif
RPM 4.15 doesn't like them.
2019-08-05 22:07:17 +02:00
Zbigniew Jędrzejewski-Szmek
98c6ca6194 Remove very old trigger
systemd-sysv-convert was removed many years ago.
2019-08-05 22:03:17 +02:00
Zbigniew Jędrzejewski-Szmek
3ebaa955a5 Drop build-time and install-time requirements on systemd
This follows the semi-recent guideline changes:
https://pagure.io/packaging-committee/pull-request/828
https://pagure.io/packaging-committee/pull-request/890#comment-86419
2019-08-05 22:03:17 +02:00
Fedora Release Engineering
8e665ac699 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-27 02:27:21 +00:00
Fedora Release Engineering
f4336b7b3a - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-03 10:46:32 +00:00
Paul Wouters
d2e15123b5 - Remove KSK-2010 from configs - it has been revoked 2019-01-11 10:37:16 -05:00
Paul Wouters
55f1ad68ab - Another dns64 fixup 2019-01-11 10:37:12 -05:00
Paul Wouters
42a7ed2926 - Updated to 1.8.3 with fixes the dns64 bug and has some other minor fixes 2018-12-11 22:07:23 -05:00
Paul Wouters
6e953c2adb - Fix dns64 allocation in wrong region for returned internal queries. 2018-12-10 15:10:31 -05:00
Paul Wouters
901f4a3b5b new sources 2018-12-04 14:10:46 -05:00
Paul Wouters
2cd0b94125 * Tue Dec 04 2018 Paul Wouters <pwouters@redhat.com> - 1.8.2-1
- Updated to 1.8.2.
- Enabled deny ANY query support and edns-tcp-keepalive
- Set serve-stale timeout to 4h
- Updated unbound.conf for latest options
2018-12-04 13:58:11 -05:00
Petr Menšík
9d074af91d Allow group by default to unbound-control (#1640259)
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-10-22 16:16:09 +02:00
Petr Menšík
3d0c001d3e Update to 1.8.1
Signed-off-by: Petr Menšík <pemensik@redhat.com>
2018-10-08 18:30:41 +02:00
Petr Menšík
b3942245cb - Fix #4188: IPv6 forwarders without ipv6 result in SERVFAIL, fixes
qname minimisation with a forwarder when connectivity has issues
      from rejecting responses.

Resolves: rhbz#1633874
2018-10-01 20:11:11 +02:00
Petr Menšík
787382dfd5 Reset release and add changelog 2018-09-19 22:41:32 +02:00
Petr Menšík
b3bb4ed3ea Rebase to 1.8.0
Remove all patches accepted upstream
2018-09-17 15:30:23 +02:00
Paul Wouters
80badab047 - Ensure if even one of the required files is missing, to restart the keyservice 2018-08-14 22:16:28 -04:00
Paul Wouters
9e1a4984a2 - Fix for restarting unbound service after deleting key/pem files for remote control 2018-08-13 21:36:37 -04:00
Paul Wouters
d7f53648f5 Ensure keygen service is restart as part of the unbound service restart
So if the admin deletes the key/pem files, a systemctl restart unbound
still works (and generates new key/pem files)
2018-08-13 21:35:40 -04:00
Petr Menšík
e60bea7ca0 Release memory in unbound-host
triggered by command:
unbound-host -r -t any -v localhost.
2018-07-31 15:49:56 +02:00