Changes in unbound.init_fedora http://nxr.netbsd.org/rss/src/external/bsd/unbound/dist/contrib/unbound.init_fedora en Copyright 2005 Java branches: 1.1.1;<br/>Initial revision /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1 Sat Aug 20 11:09:32 UTC 2016 christos Import unbound-1.23.1 (previous was 1.19.1)<br/><br/>Unbound 1.23.1<br/>July 16, 2025<br/><br/>This security release fixes the Rebirthday Attack CVE-2025-5994.<br/><br/>This re-opens up resolvers to a birthday paradox, for EDNS client subnet<br/>servers that respond with non-ECS answers. It only affects Unbound when<br/>compiled with --enable-subnet, and subnetmod is enabled with config<br/>options that send ECS information to upstream servers.<br/><br/>The CVE is described here<br/>https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt<br/><br/>We would like to thank Xiang Li (AOSP Lab, Nankai University) for<br/>discovering and responsibly disclosing the vulnerability.<br/><br/>Bug Fixes:<br/><br/>Fix RebirthDay Attack CVE-2025-5994, reported by Xiang Li from<br/>AOSP Lab Nankai University.<br/><br/>Unbound 1.23.0<br/>Apr 24, 2025<br/><br/>This release features changed defaults, fast reload, redis replica,<br/>DNS Error Reporting, and bug fixes.<br/><br/>The fast reload is a feature that is listed as experimental. With<br/>unbound-control fast_reload the server can read the new config in<br/>a thread, and when done only briefly pauses the server to update the<br/>settings. This uses double memory, for like zones from disk or config<br/>that is loaded. It only pauses the server, for like less than a second,<br/>so DNS service is not interrupted by the reload of config. A lot of<br/>config items can be changed, but not all. It has options to print<br/>more information, or memory usage, and there is a list of config<br/>options in the man page.<br/><br/>The redis replica support allows for a redis backend to use a redis<br/>replica. The read commands are sent to the redis replica host, while<br/>the write commands are sent to the redis server. So with several<br/>replicas there can be more readers that all write to the redis server.<br/><br/>With DNS error reporting, RFC9567, enabled with<br/>dns-error-reporting: yes, this uses the error reporting agent to send<br/>failure reports to. The number of error reporting queries is output in<br/>the statistics as num.dns_error_reports.<br/><br/>Some defaults are changed in this release. The resolver.arpa. and<br/>service.arpa. zones are added to the default locally served zones,<br/>this can be disabled with a nodefault local zone. The default for<br/>max-global-quota has changed to 200, after operational feedback.<br/>The defaults from RFC8767 are used by serve-expired-client-timeout<br/>on 1800 milliseconds and serve-expired-ttl on 86400 seconds. If<br/>Unbound is compiled with edns subnet, the default for module-config<br/>is no longer altered, so that compilation with subnet does not<br/>interfere when the server does not use subnet. When edns subnet needs<br/>to be enabled, module-config: "subnetcache validator iterator" should<br/>be explicitly set as configuration in the server: section.<br/><br/>If edns subnet is enabled, the default for<br/>module-config is no longer altered, so that compilation with subnet<br/>does not interfere when the server does not use subnet. When edns subnet<br/>is in use, also module-config: "subnetcache validator iterator" should<br/>be set as configuration in the server: section.<br/><br/>The RC2 has fixes for building on Solaris and portability to Windows,<br/>and fixes a memory leak for DoH.<br/><br/>Features<br/><br/>Increase the default of max-global-quota to 200 from 128 after<br/>operational feedback. Still keeping the possible amplification<br/>factor (CAMP related issues) in the hundreds.<br/>Fix #1175: serve-expired does not adhere to secure-by-default<br/>principle. The default value of serve-expired-client-timeout<br/>is set to 1800 as suggested by RFC8767.<br/>For #1175, the default value of serve-expired-ttl is set to 86400<br/>(1 day) as suggested by RFC8767.<br/>For #1207: [FR] Support for RESINFO RRType 261 (RFC9606), add<br/>LDNS_RR_TYPE_RESINFO similar to LDNS_RR_TYPE_TXT.<br/>Add resolver.arpa and service.arpa to the default locally served<br/>zones.<br/>Merge #1042: Fast Reload. The unbound-control fast_reload is added.<br/>It reads changed config in a thread, then only briefly pauses the<br/>service threads, that keep running. DNS service is only interrupted<br/>briefly, less than a second.<br/>Merge #1019: Redis read-only replica support.<br/>Introduces new 'redis-replica-*' options for the Redis cache backend.<br/>Merge #902: DNS Error Reporting (RFC 9567). Introduces new<br/>configuration option 'dns-error-reporting' and new statistics for<br/>'num.dns_error_reports'.<br/>Bug Fixes<br/><br/>Fix #1154: Tag Incorrectly Applying for Other Interfaces<br/>Using the Same IP. This fix is not for 1.22.0.<br/>Fix #1163: Typos in unbound.conf documentation.<br/>Merge #1159: Stats for discard-timeout and wait-limit.<br/>Add test case for #1159.<br/>Some clean up for stat_values.test.<br/>Merge #1170 from Melroy van den Berg, Fix chroot manpage<br/>description.<br/>Merge #1157 from Liang Zhu, Fix heap corruption when calling<br/>ub_ctx_delete in Windows.<br/>Fix redis that during a reload it does not fail if the redis<br/>server does not connect or does not respond. It still logs the<br/>errors and if the server is up checks expiration features.<br/>Merge #1167: Makefile.in: fix occasional parallel build failures<br/>around bison rule.<br/>Fix SETEX check during Redis (re)initialization.<br/>Fix for the serve expired DNSSEC information fix, it would not allow<br/>current delegation information be updated in cache. The fix allows<br/>current delegation and validation recursion information to be<br/>updated, but as a consequence no longer has certain expired<br/>information around for later dnssec valid expired responses.<br/>Fix to log redis timeout error string on failure.<br/>More descriptive text for 'harden-algo-downgrade'.<br/>Complete fix for max-global-quota to 200.<br/>Fix #1183: the data being used is released in method<br/>nsec3_hash_test_entry.<br/>Fix for #1183: release nsec3 hashes per test file.<br/>Merge #1169 from Sergey Kacheev, fix: lock-free counters for<br/>auth_zone up/down queries.<br/>Fix comparison to help static analyzer.<br/>For #1175, update serve-expired tests.<br/>Merge #1189: Fix the dname_str method to cause conversion errors<br/>when the domain name length is 255.<br/>Merge #1197: dname_str() fixes.<br/>Merge #1198: Fix log-servfail with serve expired and no useful cache<br/>contents.<br/>Safeguard alias loop while looking in the cache for expired answers.<br/>Merge #1187: Create the SSL_CTX for QUIC before chroot and privilege<br/>drop.<br/>Fix typo in log_servfail.tdir test.<br/>Merge #1204: ci: set persist-credentials: false for actions/checkout<br/>per zizmor suggestion.<br/>Merge #1174: Serve expired cache update fixes. Fixes a regression bug<br/>with serve-expired that appeared in 1.22.0 and would not allow the<br/>iterator to update the cache with not-yet-validated entries resulting<br/>in increased outgoing traffic.<br/>Merge #1214: Use TCP_NODELAY on TLS sockets to speed up the TLS<br/>handshake.<br/>Fix #1213: Misleading error message on default access control causing<br/>refuse.<br/>Merge #1221: Consider auth zones when checking for forwarders.<br/>Merge #1222: Unique DoT and DoH SSL contexts to allow for different<br/>ALPN.<br/>Create the quic SSL listening context only when needed.<br/>Fix compile of interface check code when dnscrypt or quic is<br/>disabled.<br/>Fix encoding of RR type ATMA.<br/>Fix to check length in ATMA string to wire.<br/>Merge #1229: check before use daemon->shm_info.<br/>Use the same interface listening port discovery code for all needed<br/>protocols.<br/>Port to string only when needed before getaddrinfo().<br/>Do not open unencrypted channels next to encrypted ones on the same<br/>port.<br/>Merge #1224 from Theo Buehler: Do not use DSA API unless USE_DSA is<br/>set.<br/>Merge #1220 from Petr Men#�k, Add unbound members group access to<br/>control key.<br/>Make the default value of module-config "validator iterator"<br/>regardless of compilation options. --enable-subnet would implicitly<br/>change the value to enable the subnetcache module by default in the<br/>past.<br/>Fix #986: Resolving sas.com with dnssec-validation fails though<br/>signed delegations seem to be (mostly) correct.<br/>Consider reconfigurations when calculating the still_useful_timeout<br/>for servers in the infrastructure cache.<br/>Fix static analysis report about unhandled EOF on error conditions<br/>when reading anchor key files.<br/>Merge #1241: Fix infra-keep-probing for low infra-cache-max-rtt<br/>values.<br/>Fix hash calculation for cachedb to ignore case. Previously, cached<br/>records there were only relevant for same case queries (if not<br/>already in Unbound's internal cache).<br/>Merge #1243: Do not shadow tm on line 236.<br/>Merge #1238: Prefer SOURCE_DATE_EPOCH over actual time.<br/>Add --help output description for the SOURCE_DATE_EPOCH variable.<br/>Fix 'unbound-control flush_negative' when reporting removed data;<br/>reported by David 'eqvinox' Lamparter.<br/>Fix representation of types GPOS and RESINFO, add rdf type for<br/>unquoted str.<br/>Fix #1251: WSAPoll first argument cannot be NULL.<br/>Fix for windows compile create ssl contexts.<br/>Fix print of RR type NSAP-PTR, it is an unquoted string.<br/>Fix #1253: Cache entries fail to be removed from Redis cachedb<br/>backend with unbound-control flush* +c.<br/>Fix for #1253: Fix for redis cachedb backend to expect an integer<br/>reply for the EXPIRE command.<br/>Fix #1254: send failed: Socket is not connected and<br/>remote address is 0.0.0.0 port 53.<br/>Fix #1255: Multiple pinnings to vulnerable copies of libexpat.<br/>For #1255, for ios use an older expat version that does not require<br/>C++11 language features.<br/>For #1255, for ios disable building tests that require C++11.<br/>For #1255, for ios try the latest expat version again.<br/>Fix unit test dname log printout typecast.<br/>Fix for ci test, expat is installed on the osx image.<br/>iana portlist update.<br/>Skip the unit tests for auth_tls.tdir and auth_tls_failcert.tdir.<br/>Fix escape more characters when printing an RR type with an unquoted<br/>string.<br/>Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.<br/>Fix unbound-control test so it counts the new flush_negative output,<br/>also answers the _ta probe from testns and prints command output<br/>and skip a thread specific test when no threads are available.<br/>Fix that ub_event has the facility to deal with callbacks for<br/>fast reload, doq, windows-stop and dnstap.<br/>Fix fast reload test to check if pid exists before acting on it.<br/>Merge #1262 from markyang92, fix build with<br/>'gcc-15 -Wbuiltin-declaration-mismatch' error in compat/malloc.c.<br/>For #1262, ifdef is no longer needed.<br/>Fix #1263: Exempt loopback addresses from wait-limit.<br/>Fix wait-limit-netblock and wait-limit-cookie-netblock config parse<br/>to allow two arguments.<br/>Fix ub_event and include dnstap and win_svc headers.<br/>Fix test for stat_values for wait limit default...<br/><br/>Unbound 1.22.0<br/>Oct 17, 2024<br/><br/>This release has an option to harden against unverified glue, it<br/>is enabled with harden-unverified-glue: yes. It was contributed<br/>by Karthik Umashankar from Microsoft. This protects Unbound against<br/>bad glue, that is out of zone, by performing a lookup for it.<br/>Because it uses the original information as a last resort if nothing<br/>works, it should not give lookup failures, and add protection.<br/><br/>There are options to configure the scrubbing for NS records and<br/>the CNAME scrubbing and the max global quota lookup limit from<br/>previous security fix releases. They can be configured with the<br/>options iter-scrub-ns, iter-scrub-cname and max-global-quota.<br/><br/>For redis use, with cachedb, it is possible to specify the<br/>timeout for the initial connection separately from the timeout<br/>for commands. With the options redis-command-timeout: 20 and<br/>redis-connect-timeout: 200 they can be set separately, for<br/>a longer connect attempt, but a short command timeout to keep<br/>resolution faster.<br/><br/>It is possible to log with ISO8601 format with log-time-iso: yes<br/>this also logs time in milliseconds. Useful if the server writes to<br/>file, syslog may have its own format.<br/><br/>DNS over QUIC is support is added, if compiled with libngtcp2 and<br/>with the openssl+quic that it uses. Use --with-libngtcp2 for that,<br/>and enable it with quic-port: 853. There is a post about it<br/>on https://blog.nlnetlabs.nl/dns-over-quic-in-unbound [that is to<br/>appear after the release].<br/><br/>Features<br/><br/>Add iter-scrub-ns, iter-scrub-cname and max-global-quota<br/>configuration options.<br/>Merge patch to fix for glue that is outside of zone, with<br/>harden-unverified-glue, from Karthik Umashankar (Microsoft).<br/>Enabling this option protects the Unbound resolver against bad<br/>glue, that is unverified out of zone glue, by resolving them.<br/>It uses the records as last resort if there is no other working<br/>glue.<br/>Add redis-command-timeout: 20 and redis-connect-timeout: 200,<br/>that can set the timeout separately for commands and the<br/>connection set up to the redis server. If they are not<br/>specified, the redis-timeout value is used.<br/>Fix #1144: [FR] log timestamps in ISO8601 format with timezone.<br/>This adds the option log-time-iso: yes that logs in ISO8601<br/>format.<br/>Merge #871: DNS over QUIC. This adds quic-port: 853 and<br/>quic-size: 8m that enable dnsoverquic, and the counters<br/>num.query.quic and mem.quic in the statistics output.<br/>The feature needs to be enabled by compiling with libngtcp2,<br/>with --with-libngtcp2=path and libngtcp2 needs openssl+quic,<br/>pass that with --with-ssl=path to compile unbound as well.<br/>Bug Fixes<br/><br/>Fix #1126: unbound-control-setup hangs while testing for openssl<br/>presence starting from version 1.21.0.<br/>Add cross platform freebsd, openbsd and netbsd to github ci.<br/>Fix for char signedness warnings on NetBSD.<br/>Fix #1127: error: "memory exhausted" when defining more than 9994<br/>local-zones.<br/>Fix documentation for cache_fill_missing function.<br/>Fix #1130: Loads of logs: "validation failure: key for validation<br/>. is marked as invalid because of a previous" for<br/>non-DNSSEC signed zone.<br/>Fix that when rpz is applied the message does not get picked up by<br/>the validator. That stops validation failures for the message.<br/>Fix that stub-zone and forward-zone clauses do not exhaust memory<br/>for long content.<br/>Unit test for auth zone transfer TLS, and TLS failure.<br/>Fix to print port number in logs for auth zone transfer activities.<br/>Merge #1132: b.root renumbering.<br/>Fix for #1132, adjusted unit test for change in the test file.<br/>Fix for #1132, comment about adjusted copy of reference check.<br/>Merge #1135: Add new IANA trust anchor.<br/>Fix config file read for dnstap-sample-rate.<br/>Fix alloc-size and calloc-transposed-args compiler warnings.<br/>Fix comment to not trigger doxygen unknown command.<br/>Fix to limit NSEC and NSEC3 TTL when aggressive nsec is<br/>enabled (RFC9077).<br/>Add unit test for ttl limit for aggressive nsec.<br/>Fix and add comments in testdata/val_negcache_ttl.rpl.<br/>Merge #1140: Fix spelling mistake in comments.<br/>Fix doxygen warnings by commenting out CLANG_ASSISTED_PARSING,<br/>CLANG_ADD_INC_PATHS, CLANG_OPTIONS and CLANG_DATABASE_PATH; they were<br/>already disabled.<br/>Fix dns64 with prefetch that the prefetch is stored in cache.<br/>Attempt to further fix doh_downstream_buffer_size.tdir flakiness.<br/>More clear text for prefetch and minimal-responses in the<br/>unbound.conf man page.<br/>Merge #1143: Fix cache update when serve expired is used. Expired<br/>records are favored over resolution and validation failures when<br/>serve-expired is used.<br/>Fix negative cache NSEC3 parameter compares for zero length NSEC3<br/>salt.<br/>Fix unbound dnstap socket test program analyzer warnings about<br/>unused variable assignments and variable initialization.<br/>Fix #1149: unbound-control-setup hangs sometimes depending on<br/>the openssl version.<br/>Fix #1128: Cannot override tcp-upstream and tls-upstream with<br/>forward-tcp-upstream and forward-tls-upstream.<br/>Fix to limit NSEC TTL for messages from cachedb. Fix to limit the<br/>prefetch ttl for messages after a CNAME with short TTL.<br/>Fix for dnstap compile of doqclient with doq disabled.<br/>Fix cookie_file test sporadic fails for time change during<br/>the test.<br/>Fix add reallocarray to alloc stats unit test, and disable<br/>override of strdup in unbound-host, and the result of config<br/>get option is freed properly.<br/>Fix to disable detection of quic configured ports when quic is<br/>not compiled in.<br/>Fix harden-unverified-glue for AAAA cache_fill_missing lookups.<br/>Fix contrib/aaaa-filter-iterator.patch for change in call<br/>signature for cache_fill_missing.<br/>Fix to display warning if quic-port is set but dnsoverquic is not<br/>enabled when compiled.<br/>Fix dnsoverquic to extend the number of streams when one is closed.<br/>Fix for dnstap with dnscrypt and dnstap without dnsoverquic.<br/>Fix for dnsoverquic and dnstap to use the correct dnstap<br/>environment.<br/><br/>Unbound 1.21.1<br/>Oct 4, 2024<br/><br/>This security release fixes CVE-2024-8508.<br/><br/>A vulnerability has been discovered in Unbound when handling replies<br/>with very large RRsets that Unbound needs to perform name compression<br/>for.<br/><br/>Malicious upstreams responses with very large RRsets can cause Unbound<br/>to spend a considerable time applying name compression to downstream<br/>replies. This can lead to degraded performance and eventually denial of<br/>service in well orchestrated attacks.<br/><br/>The vulnerability can be exploited by a malicious actor querying Unbound<br/>for the specially crafted contents of a malicious zone with very large<br/>RRsets.<br/>Before Unbound replies to the query it will try to apply name<br/>compression which was an unbounded operation that could lock the CPU<br/>until the whole packet was complete.<br/><br/>Unbound version 1.21.1 introduces a hard limit on the number of name<br/>compression calculations it is willing to do per packet.<br/>Packets that need more compression will result in semi-compressed<br/>packets or truncated packets, even on TCP for huge messages, to avoid<br/>locking the CPU for long.<br/><br/>This change should not affect normal DNS traffic.<br/><br/>We would like to thank Toshifumi Sakaguchi for discovering and<br/>responsibly disclosing the vulnerability.<br/><br/>Bug Fixes:<br/><br/>Fix CVE-2024-8508, unbounded name compression could lead to denial of<br/>service.<br/><br/>Unbound 1.21.0<br/>Aug 15, 2024<br/><br/>This release has a fix for the CAMP and CacheFlush issues. They have a<br/>low severity for Unbound, since it does not affect Unbound so much.<br/><br/>The Compositional Amplification (CAMP) type of attacks can lead to DoS<br/>attacks against DNS servers. In Unbound legitimate client requests to<br/>the resolvers under typical workload are not directly affected by CAMP<br/>attacks. However we introduce a global quota for 128 outgoing packets<br/>per query (and it's subqueries) that is never reset to prevent the<br/>combination of CAMP with other amplification attacks in the future. We<br/>would like to thank Huayi Duan, Marco Bearzi, Jodok Vieli, and Cagin<br/>Tanir from NetSec group, ETH Zurich for discovering and notifying us<br/>about the issue.<br/><br/>The CacheFlush type of attacks (NSCacheFlush, CNAMECacheFlush) try to<br/>evict cached data by utilizing rogue zones and a steady rogue stream to<br/>a resolver. Based on the zone, the stream, the configured cache size<br/>and the legitimate traffic, Unbound could experience a degradation of<br/>service if a useful entry is evicted and Unbound needs to resolve again.<br/>As a mitigation to the NSCacheFlush attack Unbound is setting a limit<br/>of 20 RRs in an NS RRset. We would like to thank Yehuda Afek, Anat<br/>Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv University and<br/>Reichman University) for discovering and notifying us about the issue.<br/><br/>Other fixes in this release are bug fixes. Also the unbound control<br/>commands that flush the cache can clear both the memory and cachedb<br/>module cache. The ipset module can use BSD pf tables. The new option<br/>dnstap-sample-rate: 100 can be used to log 1/N messages, for use in<br/>high volume server environments where the log server does not keep up.<br/><br/>The new DNSSEC key for the root, 38696 from 2024 has been added. It is<br/>added to the default root keys in unbound-anchor. The content can be<br/>inspected with unbound-anchor -l. Older versions of Unbound can keep<br/>up with the root key with auto-trust-anchor-file that has RFC5011<br/>key rollover. Also unbound-anchor can fetch the keys from the website<br/>with a certificate if needed.<br/><br/>For cookie secrets, it is possible to perform rollover. The file<br/>with cookie secret in use and the staging secret is configured<br/>with cookie-secret-file. With the remote control the rollover can be<br/>performed, add_cookie_secret, activate_cookie_secret, drop_cookie_secret<br/>and print_cookie_secrets can be used for that.<br/><br/>Compared to the RC1, the release has a fix for module loading on Windows,<br/>and a spelling correction.<br/><br/>Features<br/><br/>Fix #1071: [FR] Clear both in-memory and cachedb module cache with<br/>unbound-control flush* commands.<br/>Fix #144: Port ipset to BSD pf tables.<br/>Add dnstap-sample-rate that logs only 1/N messages, for high volume<br/>server environments. Thanks Dan Luther.<br/>Add root key 38696 from 2024 for DNSSEC validation. It is added<br/>to the default root keys in unbound-anchor. The content can be<br/>inspected with unbound-anchor -l.<br/>Merge #1090: Cookie secret file. Adds<br/>cookie-secret-file: "unbound_cookiesecrets.txt" option to store<br/>cookie secrets for EDNS COOKIE secret rollover. The remote control<br/>add_cookie_secret, activate_cookie_secret and drop_cookie_secret<br/>commands can be used for rollover, the command print_cookie_secrets<br/>shows the values in use.<br/>Bug Fixes<br/><br/>Fix CAMP issues with global quota. Thanks to Huayi Duan, Marco<br/>Bearzi, Jodok Vieli, and Cagin Tanir from NetSec group, ETH Zurich.<br/>Fix CacheFlush issues with limit on NS RRs. Thanks to Yehuda Afek,<br/>Anat Bremler-Barr, Shoham Danino and Yuval Shavitt (Tel-Aviv<br/>University and Reichman University).<br/>Merge #1062: Fix potential overflow bug while parsing port in<br/>function cfg_mark_ports.<br/>Fix for #1062: declaration before statement, avoid print of null,<br/>and redundant check for array size.<br/>Fix to squelch udp connect errors in the log at low verbosity about<br/>invalid argument for IPv6 link local addresses.<br/>Fix when the mesh jostle is exceeded that nameserver targets are<br/>marked as resolved, so that the lookup is not stuck on the<br/>requestlist.<br/>Add missing common functions to tdir tests.<br/>Merge #1070: Fix rtt assignement for low values of<br/>infra-cache-max-rtt.<br/>Merge #1069: Fix unbound-control stdin commands for multi-process<br/>Unbounds.<br/>Fix unbound-control commands that read stdin in multi-process<br/>operation (local_zones_remove, local_zones, local_datas_remove,<br/>local_datas, view_local_datas_remove, view_local_datas). They will<br/>be properly distributed to all processes. dump_cache and load_cache<br/>are no longer supported in multi-process operation.<br/>Remove testdata/remote-threaded.tdir. testdata/09-unbound-control.tdir<br/>now checks both single and multi process/thread operation.<br/>Merge #1073: fix null pointer dereference issue in function<br/>ub_ctx_set_fwd.<br/>Fix to print a parse error when config is read with no name for<br/>a forward-zone, stub-zone or view.<br/>Fix for parse end of forward-zone, stub-zone and view.<br/>Fix for #1064: Fix that cachedb expired messages are considered<br/>insecure, and thus can be served to clients when dnssec is enabled.<br/>Fix #1059: Intermittent DNS blocking failure with local-zone and<br/>always_nxdomain. Addition of local_zones dynamically via<br/>unbound-control was not finding the zone's parent correctly.<br/>Fix #1064: Unbound 1.20 Cachedb broken?<br/>Fix unused variable warning on compilation with no thread support.<br/>unbound-control-setup: check openssl availability before doing<br/>anything, patch from Michael Tokarev.<br/>Update patch to remove 'command' shell builtin and update error<br/>text.<br/>Fix to enable that SERVFAIL is cached, for a short period, for more<br/>cases. In the cases where limits are exceeded.<br/>Fix spelling of tcp-idle-timeout docs, from Michael Tokarev.<br/>Merge #1078: Only check old pid if no username.<br/>Fix #1079: tags from tagged rpz zones are no longer honored after<br/>upgrade from 1.19.3 to 1.20.0.<br/>Fix for #1079: fix RPZ taglist in iterator callback that no client<br/>info is like no taglist intersection.<br/>Fix to squelch connection reset by peer errors from log. And fix<br/>that the tcp read errors are labeled as initial for the first calls.<br/>Merge #1080: AddressSanitizer detection in tdir tests and memory leak<br/>fixes.<br/>Fix memory leak when reload_keep_cache is used and num-threads<br/>changes.<br/>Fix memory leak on exit for unbound-dnstap-socket; creates false<br/>negatives during testing.<br/>Fix memory leak in setup of dsa sig.<br/>Fix typos for 'the the' in text.<br/>Fix validation for repeated use of a DNAME record.<br/>Add unit test for validation of repeated use of a DNAME record.<br/>Fix #1091: Build fails with OpenSSL >= 3.0 built with<br/>OPENSSL_NO_DEPRECATED.<br/>Fix #1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by<br/>adding helpful text for the Python interpreter version and allowing<br/>the default pkg-config unavailability error message to be shown.<br/>Fix pkg-config availability check in dnstap/dnstap.m4 and<br/>systemd.m4.<br/>Explicitly set the RD bit for the mesh query flags when prefetching.<br/>These queries have no waiting client but they need to be treated as<br/>recursive.<br/>Fix ip-ratelimit-cookie setting, it was not applied.<br/>Fix to remove unused include from the readzone test program.<br/>Fix unused variable warning in do_cache_remove.<br/>Fix compile warning in worker pthread id printout.<br/>Add unit test skip files and bison and flex output to gitignore.<br/>Fix to use modstack_init in zonemd unit test.<br/>Fix to remove unneeded linebreak in fptr_wlist.c.<br/>Fix compile warnings in fptr_wlist.c.<br/>Fix for repeated use of a DNAME record: first overallocate and then<br/>move the exact size of the init value to avoid false positive heap<br/>overflow reads from address sanitizers.<br/>Fix to print details about the failure to lookup a DNSKEY record<br/>when validation fails due to the missing DNSKEY. Also for key prime<br/>and DS lookups.<br/>Fix for neater printout for error for missing DS response.<br/>Fix neater printout.<br/>Fix #1099: Unbound core dump on SIGSEGV.<br/>Fix for #1099: Fix to check for deleted RRset when the contents<br/>is updated and fetched after it is stored, and also check for a<br/>changed RRset.<br/>Don't check for message TTL changes if the RRsets remain the same.<br/>Fix that validation reason failure that uses string print uses<br/>separate buffer that is passed, from the scratch validation buffer.<br/>Fixup algo_needs_reason string buffer length.<br/>Fix shadowed error string variable in validator dnskey handling.<br/>Update list of known EDE codes.<br/>For #773: In contrib/unbound.service.in set unbound to start after<br/>network-online.target. Also for contrib/unbound_portable.service.in.<br/>Fix #1103: unbound 1.20.0 segmentation fault with nghttp2.<br/>For #1103: fix to also drop mesh state reference when a h2 reply is<br/>dropped.<br/>Add RPZ tag tests in acl_interface.tdir.<br/>For #1102: clearer text for using interface-* options for the<br/>loopback interface.<br/>For #1103: fix to also drop mesh state reference when the discard<br/>limit is reached, when there is an error making a new recursion<br/>state and when the connection is dropped with is_drop.<br/>For #1103: Fix to drop mesh state reference for the http2 stream<br/>associated with the reply, not the currently active stream. And<br/>it does not remove it twice on a mesh_send_reply call. The reply<br/>h2_stream is NULL when not in use, for more initialisation.<br/>Fix dnstap wakeup, a running wakeup timer is left to expire and not<br/>increased, a timer is started when the dtio thread is sleeping,<br/>the timer set disabled when the dtio thread goes to sleep, and<br/>after sleep the thread checks to see if there are messages to log<br/>immediately.<br/>Merge #1110: Make fallthrough explicit for libworker.c.<br/>For #1110: Test for fallthrough attribute in configure and add<br/>fallthrough attribute an...<br/><br/>Unbound 1.20.0<br/>May 8, 2024<br/><br/>This release has a fix for the DNSBomb issue CVE-2024-33655. This has a<br/>low severity for Unbound, since it makes Unbound complicit in targeting<br/>others, but does not affect Unbound so much.<br/><br/>To mitigate the issue new configuration options are introduced.<br/>The options discard-timeout: 1900, wait-limit: 1000<br/>and wait-limit-cookie: 10000 are enabled by default. They limit the<br/>number of outstanding queries that a querier can have. This limits<br/>the reply pulse, and make Unbound less favorable for the issue.<br/>With the config wait-limit-netblock and wait-limit-cookie-netblock<br/>the parameters can be fine tuned for specific destinations.<br/>More information on the attack and Unbound's mitigations are<br/>presented further down.<br/><br/>Other fixes in this release are that Unbound no longer follows symlinks<br/>when truncating the pidfile. Unbound also does not chown the pidfile,<br/>this is for safety reasons. There are also a number of fixes for RPZ, in<br/>handling CNAMEs. There is a memory leak fix for the edns client subnet<br/>cache. For DNSSEC validation a case is fixed when the query is of type<br/>DNAME. The unbound-anchor program is fixed to first write to a temporary<br/>file, before replacing the original. This handles disk full situations,<br/>and because of it unbound-anchor needs permission to create that file,<br/>in the same directory as the original file. There is also a fix for<br/>IP_DONTFRAG, to disable fragmentation instead of the opposite.<br/><br/>The option cache-min-negative-ttl can be used to set the minimum TTL<br/>for negative responses in the cache. It complements existing options to<br/>set the maximum ttl for negative responses and to set the minimum and<br/>maximum ttl but not specifically for negative responses.<br/><br/>The option cachedb-check-when-serve-expired option makes Unbound use<br/>cachedb to check for expired responses, when serve-expired is enabled,<br/>and cachedb is used. It is enabled by default.<br/><br/>The -q option for unbound-checkconf can be added to silence it when<br/>there are no errors.<br/><br/>The DNSBomb vulnerability CVE-2024-33655.<br/><br/>== Summary<br/>The DNSBomb attack, via specially timed DNS queries and answers, can<br/>cause a Denial of Service on resolvers and spoofed targets.<br/><br/>Unbound itself is not vulnerable for DoS, rather it can be used to take<br/>part in a pulsing DoS amplification attack.<br/><br/>Unbound 1.20.0 includes fixes so the impact of the DoS from Unbound<br/>is significantly lower than it used to be and making the attack, and<br/>Unbound's participation, less tempting for attackers.<br/><br/>== Affected products<br/>Unbound up to and including 1.19.3.<br/><br/>== Description<br/>The DNSBomb attack works by sending low-rate spoofed queries for a<br/>malicious zone to Unbound. By controlling the delay of the malicious<br/>authoritative answers, Unbound slowly accumulates pending answers for<br/>the spoofed addresses. When the authoritative answers become available<br/>to Unbound at the same time, Unbound starts serving all the accumulated<br/>queries. This results into large-sized, concentrated response bursts to<br/>the spoofed addresses.<br/><br/>From version 1.20.0 on, Unbound introduces a couple of configuration<br/>options to help mitigate the impact.<br/>Their complete description can be found in the included manpages but<br/>they are also briefly listed here together with their default values for<br/>convenience:<br/><br/>discard-timeout: 1900<br/>After 1900 ms a reply to the client will be dropped.<br/>Unbound would still work on the query but refrain from replying in<br/>order to not accumulate a huge number of "old" replies.<br/>Legitimate clients retry on timeouts.<br/><br/>wait-limit: 1000<br/>wait-limit-cookie: 10000<br/>Limits the amount of client queries that require recursion<br/>(cache-hits are not counted) per IP address. More recursive queries<br/>than the allowed limit are dropped. Clients with a valid EDNS Cookie<br/>can have a different limit, higher by default.<br/>wait-limit: 0 disables all wait limits.<br/><br/>wait-limit-netblock<br/>wait-limit-cookie-netblock<br/>These do not have a default value but they can fine grain<br/>configuration for specific netblocks. With or without EDNS Cookies.<br/><br/>The options above are trying to shrink the DNSBomb window so that the<br/>impact of the DoS from Unbound is significantly lower than it used to be<br/>and making the attack, and Unbound's participation, less tempting for<br/>attackers.<br/><br/>== Acknowledgements<br/>We would like to thank Xiang Li from the Network and Information<br/>Security Lab of Tsinghua University for discovering and disclosing the<br/>attack.<br/><br/>Features<br/><br/>The config for discard-timeout, wait-limit, wait-limit-cookie,<br/>wait-limit-netblock and wait-limit-cookie-netblock was added, for<br/>the fix to the DNSBomb issue.<br/>Merge #1027: Introduce 'cache-min-negative-ttl' option.<br/>Merge #1043 from xiaoxiaoafeifei: Add loongarch support; updates<br/>config.guess(2024-01-01) and config.sub(2024-01-01), verified<br/>with upstream.<br/>Implement cachedb-check-when-serve-expired: yes option, default<br/>is enabled. When serve expired is enabled with cachedb, it first<br/>checks cachedb before serving the expired response.<br/>Fix #876: [FR] can unbound-checkconf be silenced when configuration<br/>is valid?<br/>Bug Fixes<br/><br/>Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li<br/>from the Network and Information Security Lab of Tsinghua University<br/>for reporting it.<br/>Update doc/unbound.doxygen with 'doxygen -u'. Fixes option<br/>deprecation warnings and updates with newer defaults.<br/>Remove unused portion from iter_dname_ttl unit test.<br/>Fix validator classification of qtype DNAME for positive and<br/>redirection answers, and fix validator signature routine for dealing<br/>with the synthesized CNAME for a DNAME without previously<br/>encountering it and also for when the qtype is DNAME.<br/>Fix qname minimisation for reply with a DNAME for qtype CNAME that<br/>answers it.<br/>Fix doc test so it ignores but outputs unsupported doxygen options.<br/>Fix #1021 Inconsistent Behavior with Changing rpz-cname-override<br/>and doing a unbound-control reload.<br/>Merge #1028: Clearer documentation for tcp-idle-timeout and<br/>edns-tcp-keepalive-timeout.<br/>Fix #1029: rpz trigger clientip and action rpz-passthru not working<br/>as expected.<br/>Fix rpz that the rpz override is taken in case of clientip triggers.<br/>Fix that the clientip passthru action is logged. Fix that the<br/>clientip localdata action is logged. Fix rpz override action cname<br/>for the clientip trigger.<br/>Fix to unify codepath for local alias for rpz cname action override.<br/>Fix rpz for cname override action after nsdname and nsip triggers.<br/>Fix that addrinfo is not kept around but copied and freed, so that<br/>log-destaddr uses a copy of the information, much like NSD does.<br/>Merge #1030: Persist the openssl and expat directories for repeated<br/>Windows builds.<br/>Fix that rpz CNAME content is limited to the max number of cnames.<br/>Fix rpz, it follows iterator CNAMEs for nsip and nsdname and sets<br/>the reply query_info values, that is better for debug logging.<br/>Fix rpz that copies the cname override completely to the temp<br/>region, so there are no references to the rpz region.<br/>Add rpz unit test for nsip action override.<br/>Fix rpz for qtype CNAME after nameserver trigger.<br/>Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that<br/>clientip and nsip can give a CNAME.<br/>Fix localdata and rpz localdata to match CNAME only if no direct<br/>type match is available.<br/>Merge #831 from Pierre4012: Improve Windows NSIS installer<br/>script (setup.nsi).<br/>For #831: Format text, use exclamation icon and explicit label<br/>names.<br/>Fix name of unit test for subnet cache response.<br/>Fix #1032: The size of subnet_msg_cache calculation mistake cause<br/>memory usage increased beyond expectations.<br/>Fix for #1032, add safeguard to make table space positive.<br/>Fix comment in lruhash space function.<br/>Fix to add unit test for lruhash space that exercises the routines.<br/>Fix that when the server truncates the pidfile, it does not follow<br/>symbolic links.<br/>Fix that the server does not chown the pidfile.<br/>Fix #1034: DoT forward-zone via unbound-control.<br/>Fix for crypto related failures to have a better error string.<br/>Fix #1035: Potential Bug while parsing port from the "stub-host"<br/>string; also affected forward-zones and remote-control host<br/>directives.<br/>Fix #369: dnstap showing extra responses; for client responses<br/>right from the cache when replying with expired data or<br/>prefetching.<br/>Fix #1040: fix heap-buffer-overflow issue in function cfg_mark_ports<br/>of file util/config_file.c.<br/>For #1040: adjust error text and disallow negative ports in other<br/>parts of cfg_mark_ports.<br/>Fix comment syntax for view function views_find_view.<br/>Fix #595: unbound-anchor cannot deal with full disk; it will now<br/>first write out to a temp file before replacing the original one,<br/>like Unbound already does for auto-trust-anchor-file.<br/>Fixup compile without cachedb.<br/>Add test for cachedb serve expired.<br/>Extended test for cachedb serve expired.<br/>Fix makefile dependencies for fake_event.c.<br/>Fix cachedb for serve-expired with serve-expired-reply-ttl.<br/>Fix to not reply serve expired unless enabled for cachedb.<br/>Fix cachedb for serve-expired with serve-expired-client-timeout.<br/>Fixup unit test for cachedb server expired client timeout with<br/>a check if response if from upstream or from cachedb.<br/>Fixup cachedb to not refetch when serve-expired-client-timeout is<br/>used.<br/>Merge #1049 from Petr Men#�k: Py_NoSiteFlag is not needed since<br/>Python 3.8<br/>Fix #1048: Update ax_pkg_swig.m4 and ax_pthread.m4.<br/>Fix configure, autoconf for #1048.<br/>Add checklock feature verbose_locking to trace locks and unlocks.<br/>Fix edns subnet to sort rrset references when storing messages<br/>in the cache. This fixes a race condition in the rrset locks.<br/>Merge #1053: Remove child delegations from cache when grandchild<br/>delegation...<br/><br/>Unbound 1.19.3<br/>Mar 14, 2024<br/><br/>This release has a number of bug fixes. The CNAME synthesized for a<br/>DNAME record uses the original TTL, of the DNAME record, and that means<br/>it can be cached for the TTL, instead of 0.<br/><br/>There is a fix that when a message was stored in cache, but one of the<br/>RRsets was not updated due to cache policy, it now restricts the message<br/>TTL if the cache version of the RRset has a shorter TTL. It avoids a<br/>bug where the message is not expired, but its contents is expired.<br/><br/>For dnstap, it logs type DoH and DoT correctly, if that is used for<br/>the message.<br/><br/>The b.root-servers.net address is updated in the default root hints.<br/><br/>When performing retries for failed sends, a retry at a smaller UDP size<br/>is now not performed when that attempt is not actually smaller, and at<br/>defaults, since the flag day changes, it is the same size. This makes<br/>it skip the step, it is useless because there is no reduction in size.<br/><br/>Clients with a valid DNS Cookie will bypass the ratelimit, if one is<br/>set. The value from ip-ratelimit-cookie is used for these queries.<br/><br/>Furthermore there is a fix to make correct EDE Prohibited answers for<br/>access control denials, and a fix for EDNS client subnet scope zero<br/>answers.<br/><br/>Features:<br/><br/>Merge PR #973: Use the origin (DNAME) TTL for synthesized CNAMEs as<br/>per RFC 6672.<br/>Bug Fixes:<br/><br/>Fix unit test parse of origin syntax.<br/>Use 127.0.0.1 explicitly in tests to avoid delays and errors on<br/>newer systems.<br/>Fix #964: config.h.in~ backup file in release tar balls.<br/>Merge #968: Replace the obsolescent fgrep with grep -F in tests.<br/>Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.<br/>Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.<br/>Fix dnstap that assertion failed on logging other than UDP and TCP<br/>traffic. It lists it as TCP traffic.<br/>Fix to sync the tests script file common.sh.<br/>iana portlist update.<br/>Updated IPv4 and IPv6 address for b.root-servers.net in root hints.<br/>Update test script file common.sh.<br/>Fix tests to use new common.sh functions, wait_logfile and<br/>kill_from_pidfile.<br/>Fix #974: doc: default number of outgoing ports without libevent.<br/>Merge #975: Fixed some syntax errors in rpl files.<br/>Fix root_zonemd unit test, it checks that the root ZONEMD verifies,<br/>now that the root has a valid ZONEMD.<br/>Update example.conf with cookie options.<br/>Merge #980: DoH: reject non-h2 early. To fix #979: Improve errors<br/>for non-HTTP/2 DoH clients.<br/>Merge #985: Add DoH and DoT to dnstap message.<br/>Fix #983: Sha1 runtime insecure change was incomplete.<br/>Remove unneeded newlines and improve indentation in remote control<br/>code.<br/>Merge #987: skip edns frag retry if advertised udp payload size is<br/>not smaller.<br/>Fix unit test for #987 change in udp1xxx retry packet send.<br/>Merge #988: Fix #981: dump_cache truncates large records.<br/>Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.<br/>Fix to link with libssp for libcrypto and getaddrinfo check for<br/>only header. Also update crosscompile to remove ssp for 32bit.<br/>Merge #993: Update b.root-servers.net also in example config file.<br/>Update workflow for ports to use newer openssl on windows compile.<br/>Fix warning for windres on resource files due to redefinition.<br/>Fix for #997: Print details for SSL certificate failure.<br/>Update error printout for duplicate trust anchors to include the<br/>trust anchor name (relates to #920).<br/>Update message TTL when using cached RRSETs. It could result in<br/>non-expired messages with expired RRSETs (non-usable messages by<br/>Unbound).<br/>Merge #999: Search for protobuf-c with pkg-config.<br/>Fix #1006: Can't find protobuf-c package since #999.<br/>Fix documentation for access-control in the unbound.conf man page.<br/>Merge #1010: Mention REFUSED has the TC bit set with unmatched<br/>allow_cookie acl in the manpage. It also fixes the code to match the<br/>documentation about clients with a valid cookie that bypass the<br/>ratelimit regardless of the allow_cookie acl.<br/>Document the suspend argument for process_ds_response().<br/>Move github workflows to use checkoutv4.<br/>Fix edns subnet replies for scope zero answers to not get stored<br/>in the global cache, and in cachedb, when the upstream replies<br/>without an EDNS record.<br/>Fix for #1022: Fix ede prohibited in access control refused answers.<br/>Fix unbound-control-setup.cmd to use 3072 bits so that certificates<br/>are long enough for newer OpenSSL versions.<br/>Fix TTL of synthesized CNAME when a DNAME is used from cache.<br/>Fix unbound-control-setup.cmd to have CA v3 basicConstraints,<br/>like unbound-control-setup.sh has.<br/><br/>Unbound 1.19.2<br/>Mar 7, 2024<br/><br/>This security release fixes CVE-2024-1931.<br/><br/>NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1<br/>contain a vulnerability that can cause denial of service by a certain<br/>code path that can lead to an infinite loop.<br/><br/>Unbound 1.18.0 introduced a feature that removes EDE records from<br/>responses with size higher than the client's advertised buffer size.<br/>Before removing all the EDE records however, it would try to see if<br/>trimming the extra text fields on those records would result in an<br/>acceptable size while still retaining the EDE codes.<br/>Due to an unchecked condition, the code that trims the text of the EDE<br/>records could loop indefinitely.<br/>This happens when Unbound would reply with attached EDE information on a<br/>positive reply and the client's buffer size is smaller than the needed<br/>space to include EDE records.<br/><br/>The vulnerability can only be triggered when the 'ede: yes' option is<br/>used; non default configuration.<br/><br/>From version 1.19.2 on, the code is fixed to avoid looping indefinitely.<br/><br/>We would like to thank Fredrik Pettai and Patrik Lundin from SUNET for<br/>notifying us about the issue and working with us to identify the<br/>vulnerability.<br/><br/>Bug Fixes:<br/><br/>Fix CVE-2024-1931, Denial of service when trimming EDE text on<br/>positive replies. /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.3 Sat Sep 06 14:24:23 UTC 2025 christos branches: 1.1.1.2.12;<br/>Import unbound 1.9.6:<br/><br/>6 December 2019: Wouter<br/> - Fix ipsecmod compile.<br/> - Fix Makefile.in for ipset module compile, from Adi Prasaja.<br/><br/>5 December 2019: Wouter<br/> - unbound-fuzzers.tar.bz2: three programs for fuzzing, that are 1:1<br/> replacements for unbound-fuzzme.c that gets created after applying<br/> the contrib/unbound-fuzzme.patch. They are contributed by<br/> Eric Sesterhenn from X41 D-Sec.<br/> - tag for 1.9.6rc1.<br/><br/>4 December 2019: Wouter<br/> - Fix lock type for memory purify log lock deletion.<br/> - Fix testbound for alloccheck runs, memory purify and lock checks.<br/> - update contrib/fastrpz.patch to apply more cleanly.<br/> - Fix Make Test Fails when Configured With --enable-alloc-nonregional,<br/> reported by X41 D-Sec.<br/><br/>3 December 2019: Wouter<br/> - Merge pull request #124 from rmetrich: Changed log lock<br/> from 'quick' to 'basic' because this is an I/O lock.<br/> - Fix text around serial arithmatic used for RRSIG times to refer<br/> to correct RFC number.<br/> - Fix Assert Causing DoS in synth_cname(),<br/> reported by X41 D-Sec.<br/> - Fix similar code in auth_zone synth cname to add the extra checks.<br/> - Fix Assert Causing DoS in dname_pkt_copy(),<br/> reported by X41 D-Sec.<br/> - Fix OOB Read in sldns_wire2str_dname_scan(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_str2wire_str_buf(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_b64_pton(),<br/> fixed by check in sldns_str2wire_int16_data_buf(),<br/> reported by X41 D-Sec.<br/> - Fix Insufficient Handling of Compressed Names in dname_pkt_copy(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bound Write Compressed Names in rdata_copy(),<br/> reported by X41 D-Sec.<br/> - Fix Hang in sldns_wire2str_pkt_scan(),<br/> reported by X41 D-Sec.<br/> This further lowers the max to 256.<br/> - Fix snprintf() supports the n-specifier,<br/> reported by X41 D-Sec.<br/> - Fix Bad Indentation, in dnscrypt.c,<br/> reported by X41 D-Sec.<br/> - Fix Client NONCE Generation used for Server NONCE,<br/> reported by X41 D-Sec.<br/> - Fix compile error in dnscrypt.<br/> - Fix _vfixed not Used, removed from sbuffer code,<br/> reported by X41 D-Sec.<br/> - Fix Hardcoded Constant, reported by X41 D-Sec.<br/> - make depend<br/><br/>2 December 2019: Wouter<br/> - Merge pull request #122 from he32: In tcp_callback_writer(),<br/> don't disable time-out when changing to read.<br/><br/>22 November 2019: George<br/> - Fix compiler warnings.<br/><br/>22 November 2019: Wouter<br/> - Fix dname loop maximum, reported by Eric Sesterhenn from X41 D-Sec.<br/> - Add make distclean that removes everything configure produced,<br/> and make maintainer-clean that removes bison and flex output.<br/><br/>20 November 2019: Wouter<br/> - Fix Out of Bounds Read in rrinternal_get_owner(),<br/> reported by X41 D-Sec.<br/> - Fix Race Condition in autr_tp_create(),<br/> reported by X41 D-Sec.<br/> - Fix Shared Memory World Writeable,<br/> reported by X41 D-Sec.<br/> - Adjust unbound-control to make stats_shm a read only operation.<br/> - Fix Weak Entropy Used For Nettle,<br/> reported by X41 D-Sec.<br/> - Fix Randomness Error not Handled Properly,<br/> reported by X41 D-Sec.<br/> - Fix Out-of-Bounds Read in dname_valid(),<br/> reported by X41 D-Sec.<br/> - Fix Config Injection in create_unbound_ad_servers.sh,<br/> reported by X41 D-Sec.<br/> - Fix Local Memory Leak in cachedb_init(),<br/> reported by X41 D-Sec.<br/> - Fix Integer Underflow in Regional Allocator,<br/> reported by X41 D-Sec.<br/> - Upgrade compat/getentropy_linux.c to version 1.46 from OpenBSD.<br/> - Synchronize compat/getentropy_win.c with version 1.5 from<br/> OpenBSD, no changes but makes the file, comments, identical.<br/> - Upgrade compat/getentropy_solaris.c to version 1.13 from OpenBSD.<br/> - Upgrade compat/getentropy_osx.c to version 1.12 from OpenBSD.<br/> - Changes to compat/getentropy files for,<br/> no link to openssl if using nettle, and hence config.h for<br/> HAVE_NETTLE variable.<br/> compat definition of MAP_ANON, for older systems.<br/> ifdef stdint.h inclusion for older systems.<br/> ifdef sha2.h inclusion for older systems.<br/> - Fixed Compat Code Diverging from Upstream, reported by X41 D-Sec.<br/> - Fix compile with --enable-alloc-checks, reported by X41 D-Sec.<br/> - Fix Terminating Quotes not Written, reported by X41 D-Sec.<br/> - Fix Useless memset() in validator, reported by X41 D-Sec.<br/> - Fix Unrequired Checks, reported by X41 D-Sec.<br/> - Fix Enum Name not Used, reported by X41 D-Sec.<br/> - Fix NULL Pointer Dereference via Control Port,<br/> reported by X41 D-Sec.<br/> - Fix Bad Randomness in Seed, reported by X41 D-Sec.<br/> - Fix python examples/calc.py for eval, reported by X41 D-Sec.<br/> - Fix comments for doxygen in dns64.<br/><br/>19 November 2019: Wouter<br/> - Fix CVE-2019-18934, shell execution in ipsecmod.<br/> - 1.9.5 is 1.9.4 with bugfix, trunk is 1.9.6 in development.<br/> - Fix authzone printout buffer length check.<br/> - Fixes to please lint checks.<br/> - Fix Integer Overflow in Regional Allocator,<br/> reported by X41 D-Sec.<br/> - Fix Unchecked NULL Pointer in dns64_inform_super()<br/> and ipsecmod_new(), reported by X41 D-Sec.<br/> - Fix Out-of-bounds Read in rr_comment_dnskey(),<br/> reported by X41 D-Sec.<br/> - Fix Integer Overflows in Size Calculations,<br/> reported by X41 D-Sec.<br/> - Fix Integer Overflow to Buffer Overflow in<br/> sldns_str2wire_dname_buf_origin(), reported by X41 D-Sec.<br/> - Fix Out of Bounds Read in sldns_str2wire_dname(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_bget_token_par(),<br/> reported by X41 D-Sec.<br/><br/>18 November 2019: Wouter<br/> - In unbound-host use separate variable for get_option to please<br/> code checkers.<br/> - update to bison output of 3.4.1 in code repository.<br/> - Provide a prototype for compat malloc to remove compile warning.<br/> - Portable grep usage for reuseport configure test.<br/> - Check return type of HMAC_Init_ex for openssl 0.9.8.<br/> - gitignore .source tempfile used for compatible make.<br/><br/>13 November 2019: Wouter<br/> - iana portlist updated.<br/> - contrib/fastrpz.patch updated to apply for current code.<br/> - fixes for splint cleanliness, long vs int in SSL set_mode.<br/><br/>11 November 2019: Wouter<br/> - Fix #109: check number of arguments for stdin-pipes in<br/> unbound-control and fail if too many arguments.<br/> - Merge #102 from jrtc27: Add getentropy emulation for FreeBSD.<br/><br/>24 October 2019: Wouter<br/> - Fix #99: Memory leak in ub_ctx (event_base will never be freed).<br/><br/>23 October 2019: George<br/> - Add new configure option `--enable-fully-static` to enable full static<br/> build if requested; in relation to #91.<br/><br/>23 October 2019: Wouter<br/> - Merge #97: manpage: Add missing word on unbound.conf,<br/> from Erethon.<br/><br/>22 October 2019: Wouter<br/> - drop-tld.diff: adds option drop-tld: yesno that drops 2 label<br/> queries, to stop random floods. Apply with<br/> patch -p1 < contrib/drop-tld.diff and compile.<br/> From Saksham Manchanda (Secure64). Please note that we think this<br/> will drop DNSKEY and DS lookups for tlds and hence break DNSSEC<br/> lookups for downstream clients.<br/><br/>7 October 2019: Wouter<br/> - Add doxygen comments to unbound-anchor source address code, in #86.<br/><br/>3 October 2019: Wouter<br/> - Merge #90 from vcunat: fix build with nettle-3.5.<br/> - Merge 1.9.4 release with fix for vulnerability CVE-2019-16866.<br/> - Continue with development of 1.9.5.<br/> - Merge #86 from psquarejho: Added -b source address option to<br/> smallapp/unbound-anchor.c, from Lukas Wunner.<br/><br/>26 September 2019: Wouter<br/> - Merge #87 from hardfalcon: Fix contrib/unbound.service.in,<br/> Drop CAP_KILL, use + prefix for ExecReload= instead.<br/><br/>25 September 2019: Wouter<br/> - The unbound.conf includes are sorted ascending, for include<br/> statements with a '*' from glob.<br/><br/>23 September 2019: Wouter<br/> - Merge #85 for #84 from sam-lunt: Add kill capability to systemd<br/> service file to fix that systemctl reload fails.<br/><br/>20 September 2019: Wouter<br/> - Merge #82 from hardfalcon: Downgrade CAP_NET_ADMIN to CAP_NET_RAW<br/> in unbound.service.<br/> - Merge #81 from Maryse47: Consistently use /dev/urandom instead<br/> of /dev/random in scripts and docs.<br/> - Merge #83 from Maryse47: contrib/unbound.service.in: do not fork<br/> into the background.<br/><br/>19 September 2019: Wouter<br/> - Fix #78: Memory leak in outside_network.c.<br/> - Merge pull request #76 from Maryse47: Improvements and fixes for<br/> systemd unbound.service.<br/> - oss-fuzz badge on README.md.<br/> - Fix fix for #78 to also free service callback struct.<br/> - Fix for oss-fuzz build warning.<br/> - Fix wrong response ttl for prepended short CNAME ttls, this would<br/> create a wrong zero_ttl response count with serve-expired enabled.<br/> - Merge #80 from stasic: Improve wording in man page.<br/><br/>11 September 2019: Wouter<br/> - Use explicit bzero for wiping clear buffer of hash in cachedb,<br/> reported by Eric Sesterhenn from X41 D-Sec.<br/><br/>9 September 2019: Wouter<br/> - Fix #72: configure --with-syslog-facility=LOCAL0-7 with default<br/> LOG_DAEMON (as before) can set the syslog facility that the server<br/> uses to log messages.<br/><br/>4 September 2019: Wouter<br/> - Fix #71: fix openssl error squelch commit compilation error.<br/><br/>3 September 2019: Wouter<br/> - squelch DNS over TLS errors 'ssl handshake failed crypto error'<br/> on low verbosity, they show on verbosity 3 (query details), because<br/> there is a high volume and the operator cannot do anything for the<br/> remote failure. Specifically filters the high volume errors.<br/><br/>2 September 2019: Wouter<br/> - ipset module #28: log that an address is added, when verbosity high.<br/> - ipset: refactor long routine into three smaller ones.<br/> - updated Makefile dependencies.<br/><br/>23 August 2019: Wouter<br/> - Fix contrib/fastrpz.patch asprintf return value checks.<br/><br/>22 August 2019: Wouter<br/> - Fix that pkg-config is setup before --enable-systemd needs it.<br/> - 1.9.3rc2 release candidate tag. And this became the 1.9.3 release.<br/> Master is 1.9.4 in development.<br/><br/>21 August 2019: Wouter<br/> - Fix log_dns_msg to log irrespective of minimal responses config.<br/><br/>19 August 2019: Ralph<br/> - Document limitation of pidfile removal outside of chroot directory.<br/><br/>16 August 2019: Wouter<br/> - Fix unittest valgrind false positive uninitialised value report,<br/> where if gcc 9.1.1 uses -O2 (but not -O1) then valgrind 3.15.0<br/> issues an uninitialised value for the token buffer at the str2wire.c<br/> rrinternal_get_owner() strcmp with the '@' value. Rewritten to use<br/> straight character comparisons removes the false positive. Also<br/> valgrinds --expensive-definedness-checks=yes can stop this false<br/> positive.<br/> - Please doxygen's parser for "@" occurrence in doxygen comment.<br/> - Fixup contrib/fastrpz.patch<br/> - Remove warning about unknown cast-function-type warning pragma.<br/><br/>15 August 2019: Wouter<br/> - iana portlist updated.<br/> - Fix autotrust temp file uniqueness windows compile.<br/> - avoid warning about upcast on 32bit systems for autotrust.<br/> - escape commandline contents for -V.<br/> - Fix character buffer size in ub_ctx_hosts.<br/> - 1.9.3rc1 release candidate tag.<br/> - Option -V prints if TCP fastopen is available.<br/><br/>14 August 2019: George<br/> - Fix #59, when compiled with systemd support check that we can properly<br/> communicate with systemd through the `NOTIFY_SOCKET`.<br/><br/>14 August 2019: Wouter<br/> - Generate configlexer with newer flex.<br/> - Fix warning for unused variable for compilation without systemd.<br/><br/>12 August 2019: George<br/> - Introduce `-V` option to print the version number and build options.<br/> Previously reported build options like linked libs and linked modules<br/> are now moved from `-h` to `-V` as well for consistency.<br/> - PACKAGE_BUGREPORT now also includes link to GitHub issues.<br/><br/>1 August 2019: Wouter<br/> - For #52 #53, second context does not close logfile override.<br/> - Fix #52 #53, fix for example fail program.<br/> - Fix to return after failed auth zone http chunk write.<br/> - Fix to remove unused test for task_probe existance.<br/> - Fix to timeval_add for remaining second in microseconds.<br/> - Check repinfo in worker_handle_request, if null, drop it.<br/><br/>29 July 2019: Wouter<br/> - Add verbose log message when auth zone file is written, at level 4.<br/> - Add hex print of trust anchor pointer to trust anchor file temp<br/> name to make it unique, for libunbound created multiple contexts.<br/><br/>23 July 2019: Wouter<br/> - Fix question section mismatch in local zone redirect.<br/><br/>19 July 2019: Wouter<br/> - Fix #49: Set no renegotiation on the SSL context to stop client<br/> session renegotiation.<br/><br/>12 July 2019: Wouter<br/> - Fix #48: Unbound returns additional records on NODATA response,<br/> if minimal-responses is enabled, also the additional for negative<br/> responses is removed.<br/><br/>9 July 2019: Ralph<br/> - Fix in respip addrtree selection. Absence of addr_tree_init_parents()<br/> call made it impossible to go up the tree when the matching netmask is<br/> too specific.<br/><br/>5 July 2019: Ralph<br/> - Fix for possible assertion failure when answering respip CNAME from<br/> cache.<br/><br/>25 June 2019: Wouter<br/> - For #45, check that 127.0.0.1 and ::1 are not used in unbound.conf<br/> when do-not-query-localhost is turned on, or at default on,<br/> unbound-checkconf prints a warning if it is found in forward-addr or<br/> stub-addr statements.<br/><br/>24 June 2019: Wouter<br/> - Fix memleak in unit test, reported from the clang 8.0 static analyzer.<br/><br/>18 June 2019: Wouter<br/> - PR #28: IPSet module, by Kevin Chou. Created a module to support<br/> the ipset that could add the domain's ip to a list easily.<br/> Needs libmnl, and --enable-ipset and config it, doc/README.ipset.md.<br/> - Fix to omit RRSIGs from addition to the ipset.<br/> - Fix to make unbound-control with ipset, remove unused variable,<br/> use unsigned type because of comparison, and assign null instead<br/> of compare with it. Remade lex and yacc output.<br/> - make depend<br/> - Added documentation to the ipset files (for doxygen output).<br/> - Merge PR #6: Python module: support multiple instances<br/> - Merge PR #5: Python module: define constant MODULE_RESTART_NEXT<br/> - Merge PR #4: Python module: assign something useful to the<br/> per-query data store 'qdata'<br/> - Fix python dict reference and double free in config.<br/><br/>17 June 2019: Wouter<br/> - Master contains version 1.9.3 in development.<br/> - Fix #39: In libunbound, leftover logfile is close()d unpredictably.<br/> - Fix for #24: Fix abort due to scan of auth zone masters using old<br/> address from previous scan.<br/><br/>12 June 2019: Wouter<br/> - Fix another spoolbuf storage code point, in prefetch.<br/> - 1.9.2rc3 release candidate tag. Which became the 1.9.2 release<br/> on 17 June 2019.<br/><br/>11 June 2019: Wouter<br/> - Fix that fixes the Fix that spoolbuf is not used to store tcp<br/> pipelined response between mesh send and callback end, this fixes<br/> error cases that did not use the correct spoolbuf.<br/> - 1.9.2rc2 release candidate tag.<br/><br/>6 June 2019: Wouter<br/> - 1.9.2rc1 release candidate tag.<br/><br/>4 June 2019: Wouter<br/> - iana portlist updated.<br/><br/>29 May 2019: Wouter<br/> - Fix to guard _OPENBSD_SOURCE from redefinition.<br/><br/>28 May 2019: Wouter<br/> - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.<br/> - gitignore config.h.in~.<br/><br/>27 May 2019: Wouter<br/> - Fix double file close in tcp pipelined response code.<br/><br/>24 May 2019: Wouter<br/> - Fix that spoolbuf is not used to store tcp pipelined response<br/> between mesh send and callback end.<br/><br/>20 May 2019: Wouter<br/> - Note that so-reuseport at extreme load is better turned off,<br/> otherwise queries are not distributed evenly, on Linux 4.4.x.<br/><br/>16 May 2019: Wouter<br/> - Fix #31: swig 4.0 and python module.<br/><br/>13 May 2019: Wouter<br/> - Squelch log messages from tcp send about connection reset by peer.<br/> They can be enabled with verbosity at higher values for diagnosing<br/> network connectivity issues.<br/> - Attempt to fix malformed tcp response.<br/><br/>9 May 2019: Wouter<br/> - Revert fix for oss-fuzz, error is in that build script that<br/> unconditionally includes .o files detected by configure, also<br/> when the machine architecture uses different LIBOBJS files.<br/><br/>8 May 2019: Wouter<br/> - Attempt to fix build failure in oss-fuzz because of reallocarray.<br/> https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14648.<br/> Does not omit compile flags from commandline.<br/><br/>7 May 2019: Wouter<br/> - Fix edns-subnet locks, in error cases the lock was not unlocked.<br/> - Fix doxygen output error on readme markdown vignettes.<br/><br/>6 May 2019: Wouter<br/> - Fix #29: Solaris 11.3 and missing symbols be64toh, htobe64.<br/> - Fix #30: AddressSanitizer finding in lookup3.c. This sets the<br/> hash function to use a slower but better auditable code that does<br/> not read beyond array boundaries. This makes code better security<br/> checkable, and is better for security. It is fixed to be slower,<br/> but not read outside of the array.<br/><br/>2 May 2019: Wouter<br/> - contrib/fastrpz.patch updated for code changes, and with git diff.<br/> - Fix .gitignore, add pythonmod and dnstap generated files.<br/> And unit test generated files, and generated doc files.<br/><br/>1 May 2019: Wouter<br/> - Update makedist for git.<br/> - Nicer travis output for clang analysis.<br/> - PR #16: XoT support, AXFR over TLS, turn it on with<br/> master: <ip>#<authname> in unbound.conf. This uses TLS to<br/> download the AXFR (or IXFR).<br/><br/>25 April 2019: Wouter<br/> - Fix wrong query name in local zone redirect answers with a CNAME,<br/> the copy of the local alias is in unpacked form.<br/><br/>18 April 2019: Ralph<br/> - Scrub RRs from answer section when reusing NXDOMAIN message for<br/> subdomain answers.<br/> - For harden-below-nxdomain: do not consider a name to be non-exitent<br/> when message contains a CNAME record.<br/><br/>18 April 2019: Wouter<br/> - travis build file.<br/><br/>16 April 2019: Wouter<br/> - Better braces in if statement in TCP fastopen code.<br/> - iana portlist updated.<br/><br/>15 April 2019: Wouter<br/> - Fix tls write event for read state change to re-call SSL_write and<br/> not resume the TLS handshake.<br/><br/>11 April 2019: George<br/> - Update python documentation for init_standard().<br/> - Typos.<br/><br/>11 April 2019: Wouter<br/> - Fix that auth zone uses correct network type for sockets for<br/> SOA serial probes. This fixes that probes fail because earlier<br/> probe addresses are unreachable.<br/> - Fix that auth zone fails over to next master for timeout in tcp.<br/> - Squelch SSL read and write connection reset by peer and broken pipe<br/> messages. Verbosity 2 and higher enables them.<br/><br/>8 April 2019: Wouter<br/> - Fix to use event_assign with libevent for thread-safety.<br/> - verbose information about auth zone lookup process, also lookup<br/> start, timeout and fail.<br/> - Fix #17: Add python module example from Jan Janak, that is a<br/> plugin for the Unbound DNS resolver to resolve DNS records in<br/> multicast DNS [RFC 6762] via Avahi. The plugin communicates<br/> with Avahi via DBus. The comment section at the beginning of<br/> the file contains detailed documentation.<br/> - Fix to wipe ssl ticket keys from memory with explicit_bzero,<br/> if available.<br/><br/>5 April 2019: Wouter<br/> - Fix to reinit event structure for accepted TCP (and TLS) sockets.<br/><br/>4 April 2019: Wouter<br/> - Fix spelling error in log output for event method.<br/><br/>3 April 2019: Wouter<br/> - Move goto label in answer_from_cache to the end of the function<br/> where it is more visible.<br/> - Fix auth-zone NSEC3 response for wildcard nodata answers,<br/> include the closest encloser in the answer.<br/><br/>2 April 2019: Wouter<br/> - Fix auth-zone NSEC3 response for empty nonterminals with exact<br/> match nsec3 records.<br/> - Fix for out of bounds integers, thanks to OSTIF audit. It is in<br/> allocation debug code.<br/> - Fix for auth zone nsec3 ent fix for wildcard nodata.<br/><br/>25 March 2019: Wouter<br/> - Fix that tls-session-ticket-keys: "" on its own in unbound.conf<br/> disables the tls session ticker key calls into the OpenSSL API.<br/> - Fix crash if tls-servic-pem not filled in when necessary.<br/><br/>21 March 2019: Wouter<br/> - Fix #4240: Fix whitespace cleanup in example.conf.<br/><br/>19 March 2019: Wouter<br/> - add type CAA to libpyunbound (accessing libunbound from python).<br/><br/>18 March 2019: Wouter<br/> - Add log message, at verbosity 4, that says the query is encrypted<br/> with TLS, if that is enabled for the query.<br/> - Fix #4239: set NOTIMPL when deny-any is enabled, for RFC8482.<br/><br/>7 March 2019: Wouter<br/> - Fix for #4233: guard use of NDEBUG, so that it can be passed in<br/> CFLAGS into configure. /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.2 Sun Dec 15 15:28:43 UTC 2019 christos branches: 1.1.1.1.2; 1.1.1.1.16; 1.1.1.1.18;<br/>Import unbound 1.5.9 /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.1 Sat Aug 20 11:09:32 UTC 2016 christos Pull up following revision(s) (requested by gutteridge in ticket #162):<br/><br/> distrib/sets/lists/debug/shl.mi: revision 1.385<br/> distrib/sets/lists/base/shl.mi: revision 1.1027<br/> external/bsd/unbound/dist/doc/README.man up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/libunbound.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound-anchor.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound-checkconf.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound-control.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound-host.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound.conf.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/unbound.rst up to 1.1.1.1<br/> external/bsd/unbound/dist/testcode/doqclient.c up to 1.1.1.2<br/> external/bsd/unbound/dist/testcode/unitdoq.c up to 1.1.1.1<br/> external/bsd/unbound/dist/testcode/unitinfra.c up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/view_local_data up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/view_local_data_remove up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values_discard_wait_limit.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/rpz-nx.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/rpz-one.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/rpz-two.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_expired.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_expired_client_timeout.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_expired_reply_ttl.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cached_size.crpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/cachedb_subnet_change.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_subnet_expired.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_subnet_toecs_timeout.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cachedb_val_expired.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/dns64_prefetch_cache.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/dns_error_reporting.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fwd_name_lookup.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_dname_ttl.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_fwdstubauth.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_ghost_grandchild_delegation.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_max_global_quota.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_unverified_glue.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_unverified_glue_fallback.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/local_cnameother.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_clientip_override.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_cname_handle.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_cname_tag.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_nsdname_override.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_nsip_override.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_passthru_clientip.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_qtype_cname.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_val_block.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rrset_use_cached.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/serve_expired_client_timeout_val_bogus.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/serve_expired_client_timeout_val_insecure_delegation.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/serve_expired_ttl_reset.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/serve_expired_val_bogus.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.nsd.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/auth_tls.ub.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/example.com.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/nsd_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/nsd_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/unbound_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls.tdir/unbound_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_scopezero_noedns.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/ttl_max_negative.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/ttl_min_negative.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_cnameqtype_qmin.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_dname_twice.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_dnameqtype.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_dnameqtype_qmin.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_failure_dnskey.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/val_negcache_ttl.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/val_negcache_ttl_prefetch.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.nsd.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/auth_tls_failcert.ub.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/example.com.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/nsd_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/nsd_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/unbound_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_tls_failcert.tdir/unbound_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cookie_file.tdir/cookie_file.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cookie_file.tdir/cookie_file.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cookie_file.tdir/cookie_file.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cookie_file.tdir/cookie_file.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/cookie_file.tdir/cookie_file.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_nsec3_ent_with_out_of_zone_data.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/doq_downstream.testns up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/unbound_server.key up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/doq_downstream.tdir/unbound_server.pem up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_fwdfirstequaltcp.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/auth1.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/auth2.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.conf2 up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.ns1 up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.ns2 up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_fwd.tdir/fast_reload_fwd.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/auth.nlnetlabs.nl.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/fast_reload_most_options.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/fast_reload_most_options.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/fast_reload_most_options.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/fast_reload_most_options.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/fast_reload_most_options.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_most_options.tdir/rpz.nlnetlabs.nl.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_thread.tdir/fast_reload_thread.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_thread.tdir/fast_reload_thread.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_thread.tdir/fast_reload_thread.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_thread.tdir/fast_reload_thread.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fast_reload_thread.tdir/fast_reload_thread.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/log_servfail.tdir/log_servfail.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/log_servfail.tdir/log_servfail.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/log_servfail.tdir/log_servfail.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/log_servfail.tdir/log_servfail.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/log_servfail.tdir/log_servfail.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/after.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/before.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis_replica.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis_replica.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis_replica.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis_replica.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/redis_replica.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/unbound_control.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/unbound_control.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/unbound_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_replica.tdir/unbound_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/example.org.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz.example.com.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz_reload.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz_reload.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz_reload.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz_reload.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_reload.tdir/rpz_reload.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_nsec3_wild_with_out_of_zone_data.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_minimise_chain.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/iter_scrub_promiscuous.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/rpz_cname_wild.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_noecs_mult.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_noecs_refused.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_noecs_support.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_scopezero_global.crpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/after.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/before.zone up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis_reconnect_interval.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis_reconnect_interval.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis_reconnect_interval.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis_reconnect_interval.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/redis_reconnect_interval.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/unbound_control.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/unbound_control.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/unbound_server.key up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/redis_reconnect_interval.tdir/unbound_server.pem up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.conf up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.dsc up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.post up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.pre up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.test up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/subnet_cache_lookup.tdir/subnet_cache_lookup.testns up to 1.1.1.1<br/> external/bsd/unbound/dist/ax_build_date_epoch.m4 up to 1.1.1.1<br/> external/bsd/unbound/dist/ax_pkg_swig.m4 up to 1.1.1.1<br/> external/bsd/unbound/dist/ac_pkg_swig.m4 delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/bad_control.key delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/bad_control.pem delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/bad_server.key delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/bad_server.pem delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.conf delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.dsc delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.post delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.pre delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.test delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/remote-threaded.testns delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/unbound_control.key delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/unbound_control.pem delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/unbound_server.key delete<br/> external/bsd/unbound/dist/testdata/remote-threaded.tdir/unbound_server.pem delete<br/> external/bsd/unbound/dist/Makefile.in up to 1.1.1.10<br/> external/bsd/unbound/dist/aclocal.m4 up to 1.1.1.6<br/> external/bsd/unbound/dist/acx_nlnetlabs.m4 up to 1.1.1.6<br/> external/bsd/unbound/dist/acx_python.m4 up to 1.1.1.6<br/> external/bsd/unbound/dist/ax_pthread.m4 up to 1.1.1.2<br/> external/bsd/unbound/dist/config.guess up to 1.9<br/> external/bsd/unbound/dist/config.h.in up to 1.1.1.10<br/> external/bsd/unbound/dist/config.sub up to 1.8<br/> external/bsd/unbound/dist/configure up to 1.1.1.10<br/> external/bsd/unbound/dist/configure.ac up to 1.1.1.10<br/> external/bsd/unbound/dist/install-sh up to 1.1.1.5<br/> external/bsd/unbound/dist/ltmain.sh up to 1.1.1.3<br/> external/bsd/unbound/dist/systemd.m4 up to 1.1.1.2<br/> external/bsd/unbound/dist/cachedb/cachedb.c up to 1.1.1.9<br/> external/bsd/unbound/dist/cachedb/cachedb.h up to 1.1.1.4<br/> external/bsd/unbound/dist/cachedb/redis.c up to 1.1.1.5<br/> external/bsd/unbound/dist/compat/fake-rfc2553.c up to 1.1.1.2<br/> external/bsd/unbound/dist/compat/malloc.c up to 1.1.1.3<br/> external/bsd/unbound/dist/contrib/aaaa-filter-iterator.patch up to 1.1.1.7<br/> external/bsd/unbound/dist/contrib/rc_d_unbound up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/unbound.init up to 1.1.1.4<br/> external/bsd/unbound/dist/contrib/unbound.init_fedora up to 1.1.1.3<br/> external/bsd/unbound/dist/contrib/unbound.init_yocto up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/unbound.service.in up to 1.1.1.8<br/> external/bsd/unbound/dist/contrib/unbound_portable.service.in up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/android/install_expat.sh up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/ios/install_expat.sh up to 1.1.1.2<br/> external/bsd/unbound/dist/daemon/acl_list.c up to 1.1.1.7<br/> external/bsd/unbound/dist/daemon/acl_list.h up to 1.1.1.6<br/> external/bsd/unbound/dist/daemon/cachedump.c up to 1.1.1.8<br/> external/bsd/unbound/dist/daemon/daemon.c up to 1.1.1.9<br/> external/bsd/unbound/dist/daemon/daemon.h up to 1.1.1.6<br/> external/bsd/unbound/dist/daemon/remote.c up to 1.1.1.10<br/> external/bsd/unbound/dist/daemon/remote.h up to 1.1.1.5<br/> external/bsd/unbound/dist/daemon/stats.c up to 1.1.1.10<br/> external/bsd/unbound/dist/daemon/unbound.c up to 1.1.1.9<br/> external/bsd/unbound/dist/daemon/worker.c up to 1.1.1.10<br/> external/bsd/unbound/dist/daemon/worker.h up to 1.1.1.4<br/> external/bsd/unbound/dist/dns64/dns64.c up to 1.1.1.9<br/> external/bsd/unbound/dist/dnstap/dnstap.c up to 1.1.1.8<br/> external/bsd/unbound/dist/dnstap/dnstap.h up to 1.1.1.5<br/> external/bsd/unbound/dist/dnstap/dnstap.m4 up to 1.1.1.5<br/> external/bsd/unbound/dist/dnstap/dnstap.proto up to 1.1.1.4<br/> external/bsd/unbound/dist/dnstap/dtstream.c up to 1.1.1.5<br/> external/bsd/unbound/dist/dnstap/unbound-dnstap-socket.c up to 1.1.1.4<br/> external/bsd/unbound/dist/doc/Changelog up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/README up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/example.conf.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/libunbound.3.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound-anchor.8.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound-checkconf.8.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound-control.8.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound-host.1.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound.8.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound.conf.5.in up to 1.1.1.10<br/> external/bsd/unbound/dist/doc/unbound.doxygen up to 1.1.1.7<br/> external/bsd/unbound/dist/dynlibmod/dynlibmod.c up to 1.1.1.3<br/> external/bsd/unbound/dist/edns-subnet/addrtree.h up to 1.1.1.4<br/> external/bsd/unbound/dist/edns-subnet/subnetmod.c up to 1.1.1.9<br/> external/bsd/unbound/dist/edns-subnet/subnetmod.h up to 1.1.1.7<br/> external/bsd/unbound/dist/ipsecmod/ipsecmod.c up to 1.1.1.5<br/> external/bsd/unbound/dist/ipset/ipset.c up to 1.1.1.4<br/> external/bsd/unbound/dist/ipset/ipset.h up to 1.1.1.2<br/> external/bsd/unbound/dist/iterator/iter_delegpt.c up to 1.1.1.7<br/> external/bsd/unbound/dist/iterator/iter_delegpt.h up to 1.1.1.8<br/> external/bsd/unbound/dist/iterator/iter_fwd.c up to 1.1.1.7<br/> external/bsd/unbound/dist/iterator/iter_fwd.h up to 1.1.1.3<br/> external/bsd/unbound/dist/iterator/iter_hints.c up to 1.1.1.7<br/> external/bsd/unbound/dist/iterator/iter_hints.h up to 1.1.1.3<br/> external/bsd/unbound/dist/iterator/iter_scrub.c up to 1.1.1.10<br/> external/bsd/unbound/dist/iterator/iter_utils.c up to 1.1.1.9<br/> external/bsd/unbound/dist/iterator/iter_utils.h up to 1.1.1.8<br/> external/bsd/unbound/dist/iterator/iterator.c up to 1.1.1.10<br/> external/bsd/unbound/dist/iterator/iterator.h up to 1.1.1.8<br/> external/bsd/unbound/dist/libunbound/context.c up to 1.1.1.9<br/> external/bsd/unbound/dist/libunbound/libunbound.c up to 1.1.1.9<br/> external/bsd/unbound/dist/libunbound/libworker.c up to 1.1.1.10<br/> external/bsd/unbound/dist/libunbound/unbound.h up to 1.7<br/> external/bsd/unbound/dist/libunbound/python/examples/dnssec_test.py up to 1.1.1.3<br/> external/bsd/unbound/dist/pythonmod/interface.i up to 1.1.1.9<br/> external/bsd/unbound/dist/pythonmod/pythonmod.c up to 1.1.1.7<br/> external/bsd/unbound/dist/pythonmod/pythonmod_utils.c up to 1.1.1.6<br/> external/bsd/unbound/dist/pythonmod/doc/modules/config.rst up to 1.1.1.4<br/> external/bsd/unbound/dist/pythonmod/examples/log.py up to 1.1.1.3<br/> external/bsd/unbound/dist/respip/respip.c up to 1.1.1.7<br/> external/bsd/unbound/dist/respip/respip.h up to 1.1.1.6<br/> external/bsd/unbound/dist/services/authzone.c up to 1.5<br/> external/bsd/unbound/dist/services/authzone.h up to 1.1.1.8<br/> external/bsd/unbound/dist/services/listen_dnsport.c up to 1.1.1.10<br/> external/bsd/unbound/dist/services/listen_dnsport.h up to 1.1.1.8<br/> external/bsd/unbound/dist/services/localzone.c up to 1.1.1.9<br/> external/bsd/unbound/dist/services/localzone.h up to 1.1.1.8<br/> external/bsd/unbound/dist/services/mesh.c up to 1.1.1.10<br/> external/bsd/unbound/dist/services/mesh.h up to 1.1.1.8<br/> external/bsd/unbound/dist/services/modstack.c up to 1.1.1.9<br/> external/bsd/unbound/dist/services/modstack.h up to 1.1.1.4<br/> external/bsd/unbound/dist/services/outside_network.c up to 1.1.1.10<br/> external/bsd/unbound/dist/services/outside_network.h up to 1.1.1.9<br/> external/bsd/unbound/dist/services/rpz.c up to 1.1.1.5<br/> external/bsd/unbound/dist/services/rpz.h up to 1.1.1.4<br/> external/bsd/unbound/dist/services/view.c up to 1.1.1.4<br/> external/bsd/unbound/dist/services/view.h up to 1.1.1.2<br/> external/bsd/unbound/dist/services/cache/dns.c up to 1.1.1.9<br/> external/bsd/unbound/dist/services/cache/dns.h up to 1.1.1.8<br/> external/bsd/unbound/dist/services/cache/infra.c up to 1.1.1.8<br/> external/bsd/unbound/dist/services/cache/infra.h up to 1.1.1.7<br/> external/bsd/unbound/dist/services/cache/rrset.c up to 1.1.1.7<br/> external/bsd/unbound/dist/services/cache/rrset.h up to 1.1.1.5<br/> external/bsd/unbound/dist/sldns/keyraw.c up to 1.1.1.6<br/> external/bsd/unbound/dist/sldns/parse.h up to 1.1.1.4<br/> external/bsd/unbound/dist/sldns/parseutil.c up to 1.1.1.5<br/> external/bsd/unbound/dist/sldns/rrdef.c up to 1.1.1.7<br/> external/bsd/unbound/dist/sldns/rrdef.h up to 1.1.1.7<br/> external/bsd/unbound/dist/sldns/str2wire.c up to 1.1.1.9<br/> external/bsd/unbound/dist/sldns/str2wire.h up to 1.1.1.6<br/> external/bsd/unbound/dist/sldns/wire2str.c up to 1.1.1.8<br/> external/bsd/unbound/dist/sldns/wire2str.h up to 1.1.1.8<br/> external/bsd/unbound/dist/smallapp/unbound-anchor.c up to 1.1.1.9<br/> external/bsd/unbound/dist/smallapp/unbound-checkconf.c up to 1.1.1.10<br/> external/bsd/unbound/dist/smallapp/unbound-control-setup.sh.in up to 1.1.1.4<br/> external/bsd/unbound/dist/smallapp/unbound-control.c up to 1.1.1.10<br/> external/bsd/unbound/dist/smallapp/unbound-host.c up to 1.1.1.8<br/> external/bsd/unbound/dist/smallapp/worker_cb.c up to 1.1.1.7<br/> external/bsd/unbound/dist/testcode/checklocks.c up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/checklocks.h up to 1.1.1.3<br/> external/bsd/unbound/dist/testcode/do-tests.sh up to 1.1.1.6<br/> external/bsd/unbound/dist/testcode/dohclient.c up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/fake_event.c up to 1.1.1.10<br/> external/bsd/unbound/dist/testcode/mini_tdir.sh up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/perf.c up to 1.1.1.8<br/> external/bsd/unbound/dist/testcode/petal.c up to 1.1.1.8<br/> external/bsd/unbound/dist/testcode/readzone.c up to 1.1.1.2<br/> external/bsd/unbound/dist/testcode/replay.c up to 1.1.1.8<br/> external/bsd/unbound/dist/testcode/replay.h up to 1.1.1.7<br/> external/bsd/unbound/dist/testcode/streamtcp.c up to 1.1.1.9<br/> external/bsd/unbound/dist/testcode/testbound.c up to 1.1.1.9<br/> external/bsd/unbound/dist/testcode/testpkts.c up to 1.1.1.10<br/> external/bsd/unbound/dist/testcode/unitauth.c up to 1.1.1.7<br/> external/bsd/unbound/dist/testcode/unitdname.c up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/unitldns.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/unitmain.c up to 1.1.1.10<br/> external/bsd/unbound/dist/testcode/unitmain.h up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/unitneg.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/unitverify.c up to 1.1.1.8<br/> external/bsd/unbound/dist/testcode/unitzonemd.c up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/autotrust_init.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/autotrust_init_ds.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/autotrust_init_sigs.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/autotrust_init_zsk.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/black_data.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/black_prime.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/cachedb_servfail_cname.crpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/common.sh up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/disable_edns_do.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/dns64_lookup.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/domain_insec_ds.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fetch_glue.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/fetch_glue_cname.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/fwd_0ttlservfail.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_cached.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_minimal.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/ipsecmod_bogus_ipseckey.crpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/ipsecmod_enabled.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/ipsecmod_ignore_bogus_ipseckey.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/ipsecmod_max_ttl.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/ipsecmod_strict.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/ipsecmod_whitelist.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_class_any.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_cname_minimise_nx.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_cycle_noh.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_dname_insec.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_dname_yx.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_domain_sale.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_domain_sale_nschange.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_emptydp.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/iter_emptydp_for_glue.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/iter_failreply.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_fwdfirst.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_fwdfirstequal.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_fwdstub.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_fwdstubroot.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_ghost_sub.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_ghost_timewindow.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_got6only.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_hint_lame.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_lame_noaa.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_lame_nosoa.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_mod.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_ns_badip.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_ns_spoof.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_nxns_fallback.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_nxns_parentside.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/iter_pc_a.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_pc_aaaa.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_pcdiff.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_pcdirect.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_pcname.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_pcnamech.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_pcnamechrec.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_pcnamerec.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_pcttl.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_prefetch.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_prefetch_change.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_prefetch_change2.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_prefetch_childns.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_prefetch_fail.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_prefetch_ns.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_primenoglue.rpl up to 1.1.1.7<br/> external/bsd/unbound/dist/testdata/iter_privaddr.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_ranoaa_lame.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_reclame_one.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_reclame_two.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_recurse.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_resolve.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_resolve_minimised.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_resolve_minimised_nx.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_resolve_minimised_refused.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_resolve_minimised_timeout.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_scrub_cname_an.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/iter_scrub_dname_insec.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/iter_scrub_dname_rev.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/iter_scrub_dname_sec.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/iter_scrub_rr_length.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_soamin.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_stub_noroot.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_stubfirst.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/iter_timeout_ra_aaaa.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/local_cname.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/rpz_nsdname.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/rrset_rettl.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/rrset_untrusted.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/rrset_updated.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/serve_expired.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/serve_expired_0ttl_nodata.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_0ttl_nxdomain.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_0ttl_servfail.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_cached_servfail.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_cached_servfail_refresh.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/serve_expired_client_timeout.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_client_timeout_no_prefetch.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/serve_expired_client_timeout_servfail.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_reply_ttl.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/serve_expired_ttl.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/serve_expired_ttl_client_timeout.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/serve_expired_zerottl.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/serve_original_ttl.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/subnet_cached.crpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/subnet_cached_servfail.crpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/subnet_global_prefetch.crpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/subnet_global_prefetch_always_forward.crpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/subnet_global_prefetch_expired.crpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/subnet_global_prefetch_with_client_ecs.crpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/subnet_max_source.crpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/subnet_prefetch.crpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/subnet_val_positive.crpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/subnet_val_positive_client.crpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/test_ldnsrr.4 up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/test_ldnsrr.5 up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/test_ldnsrr.c3 up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/test_ldnsrr.c4 up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/test_ldnsrr.c5 up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/trust_cname_chain.rpl up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/ttl_max.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/ttl_min.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_adbit.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_adcopy.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_cnameqtype.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_cnametocnamewctoposwc.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_cnametodnametocnametopos.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_dnametopos.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_dnametoposwc.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_ds_afterprime.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_faildnskey_ok.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_keyprefetch_verify.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_noadwhennodo.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_nsec3_b3_optout.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_nsec3_b3_optout_negcache.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_nsec3_b4_wild.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_nsec3_cnametocnamewctoposwc.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_positive.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_positive_wc.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/val_qds_badanc.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_qds_oneanc.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_qds_twoanc.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_refer_unsignadd.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_referd.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_referglue.rpl up to 1.1.1.6<br/> external/bsd/unbound/dist/testdata/val_rrsig.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_scrub_rr_length.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/val_spurious_ns.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_stub_noroot.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_ta_algo_dnskey.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_ta_algo_dnskey_dp.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_ta_algo_missing_dp.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_twocname.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_unalgo_anchor.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/val_wild_pos.rpl up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/views.rpl up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/zonemd.example_a5.zone up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/01-doc.tdir/01-doc.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/02-unittest.tdir/02-unittest.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/07-confroot.tdir/07-confroot.pre up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/09-unbound-control.conf up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/09-unbound-control.pre up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/09-unbound-control.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/09-unbound-control.testns up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/local_data up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/local_data_remove up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/local_zones up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/09-unbound-control.tdir/local_zones_remove up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/acl_interface.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/acl_interface.pre up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/acl_interface.tdir/acl_interface.test.scenario up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/auth_axfr.tdir/auth_axfr.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/auth_https.tdir/auth_https.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/blanks_cached_zone.tdir/blanks_cached_zone.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/blanks_https.tdir/blanks_https.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/cachedb_no_store.tdir/cachedb_no_store.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/cachedb_no_store.tdir/cachedb_no_store.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/dnstap.tdir/dnstap.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/dnstap.tdir/dnstap.post up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/dnstap.tdir/dnstap.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/dnstap.tdir/dnstap.testns up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/doh_downstream.tdir/doh_downstream.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/doh_downstream_buffer_size.tdir/doh_downstream_buffer_size.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/doh_downstream_notls.tdir/doh_downstream_notls.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/doh_downstream_post.tdir/doh_downstream_post.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/ede.tdir/ede-auth.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/ede.tdir/ede.conf up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/ede.tdir/ede.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_ancil.tdir/fwd_ancil.post up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/fwd_ancil.tdir/fwd_ancil.pre up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_ancil.tdir/fwd_ancil.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_bogus.tdir/fwd_bogus.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_capsid.tdir/fwd_capsid.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_capsid_fallback.tdir/fwd_capsid_fallback.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_capsid_strip.tdir/fwd_capsid_strip.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_capsid_white.tdir/fwd_capsid_white.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_compress_c00c.tdir/fwd_compress_c00c.conf up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/fwd_edns_bksec.tdir/fwd_edns_bksec.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_edns_probe.tdir/fwd_edns_probe.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_malformed.tdir/fwd_malformed.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_no_edns.tdir/fwd_no_edns.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_oneport.tdir/fwd_oneport.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_oneport.tdir/fwd_oneport.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/fwd_tcp.tdir/fwd_tcp.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_tcp_tc.tdir/fwd_tcp_tc.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_three.tdir/fwd_three.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_three.tdir/fwd_three.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_three_service.tdir/fwd_three_service.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_three_service.tdir/fwd_three_service.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_three_service.tdir/fwd_three_service.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_ttlexpire.tdir/fwd_ttlexpire.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_udp.tdir/fwd_udp.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_udp_with_tcp_upstream.tdir/fwd_udp_with_tcp_upstream.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_udptmout.tdir/fwd_udptmout.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_udptmout.tdir/fwd_udptmout.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_waitudp.tdir/fwd_waitudp.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_waitudp.tdir/fwd_waitudp.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/fwd_zero.tdir/fwd_zero.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/http_user_agent.tdir/http_user_agent.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/ipset.tdir/ipset.pre up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/local_nodefault.tdir/local_nodefault.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/local_norec.tdir/local_norec.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/local_nosnoop.tdir/local_nosnoop.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/padding.tdir/padding.post up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/padding.tdir/padding.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/pymod.tdir/pymod.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/pymod_thread.tdir/pymod_thread.test up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/ratelimit.tdir/ratelimit.testns up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/root_anchor.tdir/root_anchor.pre up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/root_hints.tdir/root_hints.pre up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/root_zonemd.tdir/root_zonemd.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/ssl_req_order.tdir/ssl_req_order.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/stat_timer.tdir/stat_timer.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values.conf up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values.pre up to 1.1.1.3<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values.test up to 1.1.1.5<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values.testns up to 1.1.1.4<br/> external/bsd/unbound/dist/testdata/stat_values.tdir/stat_values_cachedb.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/stub_auth_tc.tdir/stub_auth_tc.test up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/tcp_req_order.tdir/tcp_req_order.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/tcp_reuse.tdir/tcp_reuse.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/tcp_sigpipe.tdir/tcp_sigpipe.conf up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/tls_reuse.tdir/tls_reuse.post up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/zonemd_reload.tdir/zonemd_reload.test up to 1.1.1.2<br/> external/bsd/unbound/dist/util/alloc.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/config_file.c up to 1.1.1.10<br/> external/bsd/unbound/dist/util/config_file.h up to 1.1.1.10<br/> external/bsd/unbound/dist/util/configlexer.c up to 1.1.1.10<br/> external/bsd/unbound/dist/util/configlexer.lex up to 1.1.1.10<br/> external/bsd/unbound/dist/util/configparser.c up to 1.1.1.10<br/> external/bsd/unbound/dist/util/configparser.h up to 1.1.1.10<br/> external/bsd/unbound/dist/util/configparser.y up to 1.1.1.10<br/> external/bsd/unbound/dist/util/edns.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/edns.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/fptr_wlist.c up to 1.1.1.9<br/> external/bsd/unbound/dist/util/fptr_wlist.h up to 1.1.1.6<br/> external/bsd/unbound/dist/util/iana_ports.inc up to 1.1.1.10<br/> external/bsd/unbound/dist/util/locks.h up to 1.1.1.3<br/> external/bsd/unbound/dist/util/log.c up to 1.1.1.8<br/> external/bsd/unbound/dist/util/log.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/mini_event.c up to 1.6<br/> external/bsd/unbound/dist/util/module.c up to 1.1.1.6<br/> external/bsd/unbound/dist/util/module.h up to 1.1.1.8<br/> external/bsd/unbound/dist/util/net_help.c up to 1.1.1.10<br/> external/bsd/unbound/dist/util/net_help.h up to 1.1.1.9<br/> external/bsd/unbound/dist/util/netevent.c up to 1.8<br/> external/bsd/unbound/dist/util/netevent.h up to 1.1.1.9<br/> external/bsd/unbound/dist/util/proxy_protocol.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/random.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/siphash.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/tcp_conn_limit.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/tcp_conn_limit.h up to 1.1.1.2<br/> external/bsd/unbound/dist/util/tube.c up to 1.1.1.6<br/> external/bsd/unbound/dist/util/ub_event.c up to 1.1.1.7<br/> external/bsd/unbound/dist/util/data/dname.c up to 1.1.1.7<br/> external/bsd/unbound/dist/util/data/dname.h up to 1.1.1.7<br/> external/bsd/unbound/dist/util/data/msgencode.c up to 1.1.1.9<br/> external/bsd/unbound/dist/util/data/msgencode.h up to 1.1.1.4<br/> external/bsd/unbound/dist/util/data/msgparse.c up to 1.1.1.8<br/> external/bsd/unbound/dist/util/data/msgparse.h up to 1.1.1.8<br/> external/bsd/unbound/dist/util/data/msgreply.c up to 1.1.1.10<br/> external/bsd/unbound/dist/util/data/msgreply.h up to 1.1.1.10<br/> external/bsd/unbound/dist/util/data/packed_rrset.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/data/packed_rrset.h up to 1.1.1.6<br/> external/bsd/unbound/dist/util/shm_side/shm_main.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/storage/dnstree.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/storage/lookup3.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/storage/lruhash.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/storage/lruhash.h up to 1.1.1.4<br/> external/bsd/unbound/dist/util/storage/slabhash.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/storage/slabhash.h up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/autotrust.c up to 1.1.1.8<br/> external/bsd/unbound/dist/validator/val_anchor.c up to 1.1.1.8<br/> external/bsd/unbound/dist/validator/val_anchor.h up to 1.1.1.6<br/> external/bsd/unbound/dist/validator/val_neg.c up to 1.1.1.7<br/> external/bsd/unbound/dist/validator/val_neg.h up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/val_nsec.c up to 1.1.1.7<br/> external/bsd/unbound/dist/validator/val_nsec.h up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/val_nsec3.c up to 1.1.1.6<br/> external/bsd/unbound/dist/validator/val_nsec3.h up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/val_secalgo.c up to 1.1.1.8<br/> external/bsd/unbound/dist/validator/val_sigcrypt.c up to 1.1.1.9<br/> external/bsd/unbound/dist/validator/val_sigcrypt.h up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/val_utils.c up to 1.1.1.6<br/> external/bsd/unbound/dist/validator/val_utils.h up to 1.1.1.6<br/> external/bsd/unbound/dist/validator/validator.c up to 1.1.1.10<br/> external/bsd/unbound/dist/validator/validator.h up to 1.1.1.7<br/> external/bsd/unbound/dist/winrc/rsrc_anchorupd.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_svcinst.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_svcuninst.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_unbound.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_unbound_anchor.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_unbound_checkconf.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_unbound_control.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/rsrc_unbound_host.rc up to 1.1.1.2<br/> external/bsd/unbound/dist/winrc/setup.nsi up to 1.1.1.4<br/> external/bsd/unbound/dist/winrc/unbound-control-setup.cmd up to 1.1.1.3<br/> external/bsd/unbound/dist/winrc/win_svc.c up to 1.1.1.5<br/> external/bsd/unbound/include/config.h up to 1.14<br/> external/bsd/unbound/lib/libunbound/shlib_version up to 1.8<br/> external/bsd/unbound/lib/libunbound/unbound.expsym up to 1.3<br/><br/>Import Unbound 1.24.2 (fixes CVE-2025-11411). /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.2.12.1 Fri Jan 23 16:15:17 UTC 2026 martin Pull up the following, requested by christos in ticket #604:<br/><br/> external/bsd/unbound/dist/ipset/ipset.c up to 1.1.1.1<br/> external/bsd/unbound/dist/ipset/ipset.h up to 1.1.1.1<br/> external/bsd/unbound/dist/compat/getentropy_freebsd.c up to 1.1.1.1<br/> external/bsd/unbound/dist/contrib/drop-tld.diff up to 1.1.1.1<br/> external/bsd/unbound/dist/contrib/unbound-fuzzers.tar.bz2 up to 1.1.1.1<br/> external/bsd/unbound/dist/doc/README.ipset.md up to 1.1.1.1<br/> external/bsd/unbound/dist/pythonmod/examples/avahi-resolver.py up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/auth_nsec3_ent.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/testdata/fwd_minimal.rpl up to 1.1.1.1<br/> external/bsd/unbound/dist/.travis.yml up to 1.1.1.1<br/> external/bsd/unbound/dist/README.md up to 1.1.1.1<br/> external/bsd/unbound/dist/.gitattributes delete<br/> external/bsd/unbound/dist/.gitignore delete<br/> external/bsd/unbound/dist/Makefile.in up to 1.1.1.5<br/> external/bsd/unbound/dist/aclocal.m4 up to 1.1.1.4<br/> external/bsd/unbound/dist/config.guess up to 1.4<br/> external/bsd/unbound/dist/config.h.in up to 1.1.1.5<br/> external/bsd/unbound/dist/config.sub up to 1.4<br/> external/bsd/unbound/dist/configure up to 1.1.1.5<br/> external/bsd/unbound/dist/configure.ac up to 1.1.1.5<br/> external/bsd/unbound/dist/install-sh up to 1.1.1.3<br/> external/bsd/unbound/dist/cachedb/cachedb.c up to 1.1.1.5<br/> external/bsd/unbound/dist/compat/getentropy_linux.c up to 1.1.1.3<br/> external/bsd/unbound/dist/compat/getentropy_osx.c up to 1.1.1.2<br/> external/bsd/unbound/dist/compat/getentropy_solaris.c up to 1.1.1.2<br/> external/bsd/unbound/dist/compat/getentropy_win.c up to 1.1.1.2<br/> external/bsd/unbound/dist/compat/malloc.c up to 1.1.1.2<br/> external/bsd/unbound/dist/compat/sha512.c up to 1.1.1.3<br/> external/bsd/unbound/dist/compat/snprintf.c up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/README up to 1.1.1.5<br/> external/bsd/unbound/dist/contrib/create_unbound_ad_servers.sh up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/fastrpz.patch up to 1.1.1.4<br/> external/bsd/unbound/dist/contrib/unbound.init up to 1.1.1.3<br/> external/bsd/unbound/dist/contrib/unbound.init_fedora up to 1.1.1.2<br/> external/bsd/unbound/dist/contrib/unbound.service.in up to 1.1.1.3<br/> external/bsd/unbound/dist/daemon/daemon.c up to 1.1.1.5<br/> external/bsd/unbound/dist/daemon/remote.c up to 1.1.1.5<br/> external/bsd/unbound/dist/daemon/stats.c up to 1.1.1.5<br/> external/bsd/unbound/dist/daemon/unbound.c up to 1.1.1.5<br/> external/bsd/unbound/dist/daemon/worker.c up to 1.1.1.5<br/> external/bsd/unbound/dist/dns64/dns64.c up to 1.1.1.4<br/> external/bsd/unbound/dist/dnscrypt/dnscrypt.c up to 1.1.1.4<br/> external/bsd/unbound/dist/doc/Changelog up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/README up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/TODO up to 1.1.1.2<br/> external/bsd/unbound/dist/doc/example.conf.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/libunbound.3.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound-anchor.8.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound-checkconf.8.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound-control.8.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound-host.1.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound.8.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound.conf.5.in up to 1.1.1.5<br/> external/bsd/unbound/dist/doc/unbound.doxygen up to 1.1.1.4<br/> external/bsd/unbound/dist/edns-subnet/subnetmod.c up to 1.1.1.4<br/> external/bsd/unbound/dist/ipsecmod/ipsecmod.c up to 1.1.1.3<br/> external/bsd/unbound/dist/iterator/iter_scrub.c up to 1.1.1.5<br/> external/bsd/unbound/dist/iterator/iter_utils.c up to 1.1.1.5<br/> external/bsd/unbound/dist/iterator/iter_utils.h up to 1.1.1.5<br/> external/bsd/unbound/dist/iterator/iterator.c up to 1.1.1.5<br/> external/bsd/unbound/dist/libunbound/context.c up to 1.1.1.5<br/> external/bsd/unbound/dist/libunbound/context.h up to 1.1.1.4<br/> external/bsd/unbound/dist/libunbound/libunbound.c up to 1.1.1.5<br/> external/bsd/unbound/dist/libunbound/libworker.c up to 1.1.1.5<br/> external/bsd/unbound/dist/libunbound/python/libunbound.i up to 1.1.1.3<br/> external/bsd/unbound/dist/pythonmod/interface.i up to 1.1.1.5<br/> external/bsd/unbound/dist/pythonmod/pythonmod.c up to 1.1.1.4<br/> external/bsd/unbound/dist/pythonmod/doc/examples/example0-1.py up to 1.1.1.3<br/> external/bsd/unbound/dist/pythonmod/doc/examples/example0.rst up to 1.1.1.3<br/> external/bsd/unbound/dist/pythonmod/examples/calc.py up to 1.1.1.2<br/> external/bsd/unbound/dist/pythonmod/examples/edns.py up to 1.1.1.2<br/> external/bsd/unbound/dist/pythonmod/examples/inplace_callbacks.py up to 1.1.1.3<br/> external/bsd/unbound/dist/respip/respip.c up to 1.1.1.3<br/> external/bsd/unbound/dist/services/authzone.c up to 1.1.1.4<br/> external/bsd/unbound/dist/services/authzone.h up to 1.1.1.4<br/> external/bsd/unbound/dist/services/listen_dnsport.c up to 1.1.1.5<br/> external/bsd/unbound/dist/services/localzone.c up to 1.1.1.5<br/> external/bsd/unbound/dist/services/mesh.c up to 1.1.1.5<br/> external/bsd/unbound/dist/services/modstack.c up to 1.1.1.4<br/> external/bsd/unbound/dist/services/outside_network.c up to 1.1.1.5<br/> external/bsd/unbound/dist/services/outside_network.h up to 1.1.1.5<br/> external/bsd/unbound/dist/services/cache/dns.c up to 1.1.1.5<br/> external/bsd/unbound/dist/sldns/parse.c up to 1.1.1.3<br/> external/bsd/unbound/dist/sldns/rrdef.c up to 1.1.1.4<br/> external/bsd/unbound/dist/sldns/sbuffer.c up to 1.1.1.3<br/> external/bsd/unbound/dist/sldns/sbuffer.h up to 1.1.1.4<br/> external/bsd/unbound/dist/sldns/str2wire.c up to 1.1.1.4<br/> external/bsd/unbound/dist/sldns/wire2str.c up to 1.1.1.5<br/> external/bsd/unbound/dist/sldns/wire2str.h up to 1.1.1.4<br/> external/bsd/unbound/dist/smallapp/unbound-anchor.c up to 1.1.1.4<br/> external/bsd/unbound/dist/smallapp/unbound-checkconf.c up to 1.1.1.5<br/> external/bsd/unbound/dist/smallapp/unbound-control.c up to 1.1.1.5<br/> external/bsd/unbound/dist/smallapp/unbound-host.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/asynclook.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/delayer.c up to 1.1.1.3<br/> external/bsd/unbound/dist/testcode/fake_event.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/memstats.c up to 1.1.1.3<br/> external/bsd/unbound/dist/testcode/mini_tdir.sh up to 1.1.1.2<br/> external/bsd/unbound/dist/testcode/perf.c up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/petal.c up to 1.1.1.4<br/> external/bsd/unbound/dist/testcode/streamtcp.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/testbound.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/testpkts.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/unitmain.c up to 1.1.1.5<br/> external/bsd/unbound/dist/testcode/unitmsgparse.c up to 1.1.1.3<br/> external/bsd/unbound/dist/testcode/unitregional.c up to 1.1.1.2<br/> external/bsd/unbound/dist/testdata/auth_nsec3_wild.rpl up to 1.1.1.2<br/> external/bsd/unbound/dist/util/alloc.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/config_file.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/config_file.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/configlexer.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/configlexer.lex up to 1.1.1.5<br/> external/bsd/unbound/dist/util/configparser.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/configparser.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/configparser.y up to 1.1.1.5<br/> external/bsd/unbound/dist/util/fptr_wlist.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/iana_ports.inc up to 1.1.1.5<br/> external/bsd/unbound/dist/util/log.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/mini_event.c up to 1.3<br/> external/bsd/unbound/dist/util/net_help.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/net_help.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/netevent.c up to 1.3<br/> external/bsd/unbound/dist/util/random.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/random.h up to 1.1.1.2<br/> external/bsd/unbound/dist/util/regional.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/ub_event.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/ub_event_pluggable.c up to 1.1.1.3<br/> external/bsd/unbound/dist/util/winsock_event.c up to 1.1.1.3<br/> external/bsd/unbound/dist/util/data/dname.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/data/msgencode.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/data/msgencode.h up to 1.1.1.2<br/> external/bsd/unbound/dist/util/data/msgparse.c up to 1.1.1.4<br/> external/bsd/unbound/dist/util/data/msgreply.c up to 1.1.1.5<br/> external/bsd/unbound/dist/util/data/msgreply.h up to 1.1.1.5<br/> external/bsd/unbound/dist/util/shm_side/shm_main.c up to 1.1.1.2<br/> external/bsd/unbound/dist/util/storage/lookup3.c up to 1.1.1.3<br/> external/bsd/unbound/dist/validator/autotrust.c up to 1.1.1.4<br/> external/bsd/unbound/dist/validator/val_anchor.c up to 1.1.1.4<br/> external/bsd/unbound/dist/validator/val_secalgo.c up to 1.1.1.5<br/> external/bsd/unbound/dist/validator/val_sigcrypt.c up to 1.1.1.4<br/> external/bsd/unbound/dist/validator/validator.c up to 1.1.1.5<br/> external/bsd/unbound/include/config.h up to 1.7<br/> doc/3RDPARTY (manually edited)<br/><br/>Import unbound 1.9.6:<br/><br/>6 December 2019: Wouter<br/> - Fix ipsecmod compile.<br/> - Fix Makefile.in for ipset module compile, from Adi Prasaja.<br/><br/>5 December 2019: Wouter<br/> - unbound-fuzzers.tar.bz2: three programs for fuzzing, that are 1:1<br/> replacements for unbound-fuzzme.c that gets created after applying<br/> the contrib/unbound-fuzzme.patch. They are contributed by<br/> Eric Sesterhenn from X41 D-Sec.<br/> - tag for 1.9.6rc1.<br/><br/>4 December 2019: Wouter<br/> - Fix lock type for memory purify log lock deletion.<br/> - Fix testbound for alloccheck runs, memory purify and lock checks.<br/> - update contrib/fastrpz.patch to apply more cleanly.<br/> - Fix Make Test Fails when Configured With --enable-alloc-nonregional,<br/> reported by X41 D-Sec.<br/><br/>3 December 2019: Wouter<br/> - Merge pull request #124 from rmetrich: Changed log lock<br/> from 'quick' to 'basic' because this is an I/O lock.<br/> - Fix text around serial arithmatic used for RRSIG times to refer<br/> to correct RFC number.<br/> - Fix Assert Causing DoS in synth_cname(),<br/> reported by X41 D-Sec.<br/> - Fix similar code in auth_zone synth cname to add the extra checks.<br/> - Fix Assert Causing DoS in dname_pkt_copy(),<br/> reported by X41 D-Sec.<br/> - Fix OOB Read in sldns_wire2str_dname_scan(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_str2wire_str_buf(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_b64_pton(),<br/> fixed by check in sldns_str2wire_int16_data_buf(),<br/> reported by X41 D-Sec.<br/> - Fix Insufficient Handling of Compressed Names in dname_pkt_copy(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bound Write Compressed Names in rdata_copy(),<br/> reported by X41 D-Sec.<br/> - Fix Hang in sldns_wire2str_pkt_scan(),<br/> reported by X41 D-Sec.<br/> This further lowers the max to 256.<br/> - Fix snprintf() supports the n-specifier,<br/> reported by X41 D-Sec.<br/> - Fix Bad Indentation, in dnscrypt.c,<br/> reported by X41 D-Sec.<br/> - Fix Client NONCE Generation used for Server NONCE,<br/> reported by X41 D-Sec.<br/> - Fix compile error in dnscrypt.<br/> - Fix _vfixed not Used, removed from sbuffer code,<br/> reported by X41 D-Sec.<br/> - Fix Hardcoded Constant, reported by X41 D-Sec.<br/> - make depend<br/><br/>2 December 2019: Wouter<br/> - Merge pull request #122 from he32: In tcp_callback_writer(),<br/> don't disable time-out when changing to read.<br/><br/>22 November 2019: George<br/> - Fix compiler warnings.<br/><br/>22 November 2019: Wouter<br/> - Fix dname loop maximum, reported by Eric Sesterhenn from X41 D-Sec.<br/> - Add make distclean that removes everything configure produced,<br/> and make maintainer-clean that removes bison and flex output.<br/><br/>20 November 2019: Wouter<br/> - Fix Out of Bounds Read in rrinternal_get_owner(),<br/> reported by X41 D-Sec.<br/> - Fix Race Condition in autr_tp_create(),<br/> reported by X41 D-Sec.<br/> - Fix Shared Memory World Writeable,<br/> reported by X41 D-Sec.<br/> - Adjust unbound-control to make stats_shm a read only operation.<br/> - Fix Weak Entropy Used For Nettle,<br/> reported by X41 D-Sec.<br/> - Fix Randomness Error not Handled Properly,<br/> reported by X41 D-Sec.<br/> - Fix Out-of-Bounds Read in dname_valid(),<br/> reported by X41 D-Sec.<br/> - Fix Config Injection in create_unbound_ad_servers.sh,<br/> reported by X41 D-Sec.<br/> - Fix Local Memory Leak in cachedb_init(),<br/> reported by X41 D-Sec.<br/> - Fix Integer Underflow in Regional Allocator,<br/> reported by X41 D-Sec.<br/> - Upgrade compat/getentropy_linux.c to version 1.46 from OpenBSD.<br/> - Synchronize compat/getentropy_win.c with version 1.5 from<br/> OpenBSD, no changes but makes the file, comments, identical.<br/> - Upgrade compat/getentropy_solaris.c to version 1.13 from OpenBSD.<br/> - Upgrade compat/getentropy_osx.c to version 1.12 from OpenBSD.<br/> - Changes to compat/getentropy files for,<br/> no link to openssl if using nettle, and hence config.h for<br/> HAVE_NETTLE variable.<br/> compat definition of MAP_ANON, for older systems.<br/> ifdef stdint.h inclusion for older systems.<br/> ifdef sha2.h inclusion for older systems.<br/> - Fixed Compat Code Diverging from Upstream, reported by X41 D-Sec.<br/> - Fix compile with --enable-alloc-checks, reported by X41 D-Sec.<br/> - Fix Terminating Quotes not Written, reported by X41 D-Sec.<br/> - Fix Useless memset() in validator, reported by X41 D-Sec.<br/> - Fix Unrequired Checks, reported by X41 D-Sec.<br/> - Fix Enum Name not Used, reported by X41 D-Sec.<br/> - Fix NULL Pointer Dereference via Control Port,<br/> reported by X41 D-Sec.<br/> - Fix Bad Randomness in Seed, reported by X41 D-Sec.<br/> - Fix python examples/calc.py for eval, reported by X41 D-Sec.<br/> - Fix comments for doxygen in dns64.<br/><br/>19 November 2019: Wouter<br/> - Fix CVE-2019-18934, shell execution in ipsecmod.<br/> - 1.9.5 is 1.9.4 with bugfix, trunk is 1.9.6 in development.<br/> - Fix authzone printout buffer length check.<br/> - Fixes to please lint checks.<br/> - Fix Integer Overflow in Regional Allocator,<br/> reported by X41 D-Sec.<br/> - Fix Unchecked NULL Pointer in dns64_inform_super()<br/> and ipsecmod_new(), reported by X41 D-Sec.<br/> - Fix Out-of-bounds Read in rr_comment_dnskey(),<br/> reported by X41 D-Sec.<br/> - Fix Integer Overflows in Size Calculations,<br/> reported by X41 D-Sec.<br/> - Fix Integer Overflow to Buffer Overflow in<br/> sldns_str2wire_dname_buf_origin(), reported by X41 D-Sec.<br/> - Fix Out of Bounds Read in sldns_str2wire_dname(),<br/> reported by X41 D-Sec.<br/> - Fix Out of Bounds Write in sldns_bget_token_par(),<br/> reported by X41 D-Sec.<br/><br/>18 November 2019: Wouter<br/> - In unbound-host use separate variable for get_option to please<br/> code checkers.<br/> - update to bison output of 3.4.1 in code repository.<br/> - Provide a prototype for compat malloc to remove compile warning.<br/> - Portable grep usage for reuseport configure test.<br/> - Check return type of HMAC_Init_ex for openssl 0.9.8.<br/> - gitignore .source tempfile used for compatible make.<br/><br/>13 November 2019: Wouter<br/> - iana portlist updated.<br/> - contrib/fastrpz.patch updated to apply for current code.<br/> - fixes for splint cleanliness, long vs int in SSL set_mode.<br/><br/>11 November 2019: Wouter<br/> - Fix #109: check number of arguments for stdin-pipes in<br/> unbound-control and fail if too many arguments.<br/> - Merge #102 from jrtc27: Add getentropy emulation for FreeBSD.<br/><br/>24 October 2019: Wouter<br/> - Fix #99: Memory leak in ub_ctx (event_base will never be freed).<br/><br/>23 October 2019: George<br/> - Add new configure option `--enable-fully-static` to enable full static<br/> build if requested; in relation to #91.<br/><br/>23 October 2019: Wouter<br/> - Merge #97: manpage: Add missing word on unbound.conf,<br/> from Erethon.<br/><br/>22 October 2019: Wouter<br/> - drop-tld.diff: adds option drop-tld: yesno that drops 2 label<br/> queries, to stop random floods. Apply with<br/> patch -p1 < contrib/drop-tld.diff and compile.<br/> From Saksham Manchanda (Secure64). Please note that we think this<br/> will drop DNSKEY and DS lookups for tlds and hence break DNSSEC<br/> lookups for downstream clients.<br/><br/>7 October 2019: Wouter<br/> - Add doxygen comments to unbound-anchor source address code, in #86.<br/><br/>3 October 2019: Wouter<br/> - Merge #90 from vcunat: fix build with nettle-3.5.<br/> - Merge 1.9.4 release with fix for vulnerability CVE-2019-16866.<br/> - Continue with development of 1.9.5.<br/> - Merge #86 from psquarejho: Added -b source address option to<br/> smallapp/unbound-anchor.c, from Lukas Wunner.<br/><br/>26 September 2019: Wouter<br/> - Merge #87 from hardfalcon: Fix contrib/unbound.service.in,<br/> Drop CAP_KILL, use + prefix for ExecReload= instead.<br/><br/>25 September 2019: Wouter<br/> - The unbound.conf includes are sorted ascending, for include<br/> statements with a '*' from glob.<br/><br/>23 September 2019: Wouter<br/> - Merge #85 for #84 from sam-lunt: Add kill capability to systemd<br/> service file to fix that systemctl reload fails.<br/><br/>20 September 2019: Wouter<br/> - Merge #82 from hardfalcon: Downgrade CAP_NET_ADMIN to CAP_NET_RAW<br/> in unbound.service.<br/> - Merge #81 from Maryse47: Consistently use /dev/urandom instead<br/> of /dev/random in scripts and docs.<br/> - Merge #83 from Maryse47: contrib/unbound.service.in: do not fork<br/> into the background.<br/><br/>19 September 2019: Wouter<br/> - Fix #78: Memory leak in outside_network.c.<br/> - Merge pull request #76 from Maryse47: Improvements and fixes for<br/> systemd unbound.service.<br/> - oss-fuzz badge on README.md.<br/> - Fix fix for #78 to also free service callback struct.<br/> - Fix for oss-fuzz build warning.<br/> - Fix wrong response ttl for prepended short CNAME ttls, this would<br/> create a wrong zero_ttl response count with serve-expired enabled.<br/> - Merge #80 from stasic: Improve wording in man page.<br/><br/>11 September 2019: Wouter<br/> - Use explicit bzero for wiping clear buffer of hash in cachedb,<br/> reported by Eric Sesterhenn from X41 D-Sec.<br/><br/>9 September 2019: Wouter<br/> - Fix #72: configure --with-syslog-facility=LOCAL0-7 with default<br/> LOG_DAEMON (as before) can set the syslog facility that the server<br/> uses to log messages.<br/><br/>4 September 2019: Wouter<br/> - Fix #71: fix openssl error squelch commit compilation error.<br/><br/>3 September 2019: Wouter<br/> - squelch DNS over TLS errors 'ssl handshake failed crypto error'<br/> on low verbosity, they show on verbosity 3 (query details), because<br/> there is a high volume and the operator cannot do anything for the<br/> remote failure. Specifically filters the high volume errors.<br/><br/>2 September 2019: Wouter<br/> - ipset module #28: log that an address is added, when verbosity high.<br/> - ipset: refactor long routine into three smaller ones.<br/> - updated Makefile dependencies.<br/><br/>23 August 2019: Wouter<br/> - Fix contrib/fastrpz.patch asprintf return value checks.<br/><br/>22 August 2019: Wouter<br/> - Fix that pkg-config is setup before --enable-systemd needs it.<br/> - 1.9.3rc2 release candidate tag. And this became the 1.9.3 release.<br/> Master is 1.9.4 in development.<br/><br/>21 August 2019: Wouter<br/> - Fix log_dns_msg to log irrespective of minimal responses config.<br/><br/>19 August 2019: Ralph<br/> - Document limitation of pidfile removal outside of chroot directory.<br/><br/>16 August 2019: Wouter<br/> - Fix unittest valgrind false positive uninitialised value report,<br/> where if gcc 9.1.1 uses -O2 (but not -O1) then valgrind 3.15.0<br/> issues an uninitialised value for the token buffer at the str2wire.c<br/> rrinternal_get_owner() strcmp with the '@' value. Rewritten to use<br/> straight character comparisons removes the false positive. Also<br/> valgrinds --expensive-definedness-checks=yes can stop this false<br/> positive.<br/> - Please doxygen's parser for "@" occurrence in doxygen comment.<br/> - Fixup contrib/fastrpz.patch<br/> - Remove warning about unknown cast-function-type warning pragma.<br/><br/>15 August 2019: Wouter<br/> - iana portlist updated.<br/> - Fix autotrust temp file uniqueness windows compile.<br/> - avoid warning about upcast on 32bit systems for autotrust.<br/> - escape commandline contents for -V.<br/> - Fix character buffer size in ub_ctx_hosts.<br/> - 1.9.3rc1 release candidate tag.<br/> - Option -V prints if TCP fastopen is available.<br/><br/>14 August 2019: George<br/> - Fix #59, when compiled with systemd support check that we can properly<br/> communicate with systemd through the `NOTIFY_SOCKET`.<br/><br/>14 August 2019: Wouter<br/> - Generate configlexer with newer flex.<br/> - Fix warning for unused variable for compilation without systemd.<br/><br/>12 August 2019: George<br/> - Introduce `-V` option to print the version number and build options.<br/> Previously reported build options like linked libs and linked modules<br/> are now moved from `-h` to `-V` as well for consistency.<br/> - PACKAGE_BUGREPORT now also includes link to GitHub issues.<br/><br/>1 August 2019: Wouter<br/> - For #52 #53, second context does not close logfile override.<br/> - Fix #52 #53, fix for example fail program.<br/> - Fix to return after failed auth zone http chunk write.<br/> - Fix to remove unused test for task_probe existance.<br/> - Fix to timeval_add for remaining second in microseconds.<br/> - Check repinfo in worker_handle_request, if null, drop it.<br/><br/>29 July 2019: Wouter<br/> - Add verbose log message when auth zone file is written, at level 4.<br/> - Add hex print of trust anchor pointer to trust anchor file temp<br/> name to make it unique, for libunbound created multiple contexts.<br/><br/>23 July 2019: Wouter<br/> - Fix question section mismatch in local zone redirect.<br/><br/>19 July 2019: Wouter<br/> - Fix #49: Set no renegotiation on the SSL context to stop client<br/> session renegotiation.<br/><br/>12 July 2019: Wouter<br/> - Fix #48: Unbound returns additional records on NODATA response,<br/> if minimal-responses is enabled, also the additional for negative<br/> responses is removed.<br/><br/>9 July 2019: Ralph<br/> - Fix in respip addrtree selection. Absence of addr_tree_init_parents()<br/> call made it impossible to go up the tree when the matching netmask is<br/> too specific.<br/><br/>5 July 2019: Ralph<br/> - Fix for possible assertion failure when answering respip CNAME from<br/> cache.<br/><br/>25 June 2019: Wouter<br/> - For #45, check that 127.0.0.1 and ::1 are not used in unbound.conf<br/> when do-not-query-localhost is turned on, or at default on,<br/> unbound-checkconf prints a warning if it is found in forward-addr or<br/> stub-addr statements.<br/><br/>24 June 2019: Wouter<br/> - Fix memleak in unit test, reported from the clang 8.0 static analyzer.<br/><br/>18 June 2019: Wouter<br/> - PR #28: IPSet module, by Kevin Chou. Created a module to support<br/> the ipset that could add the domain's ip to a list easily.<br/> Needs libmnl, and --enable-ipset and config it, doc/README.ipset.md.<br/> - Fix to omit RRSIGs from addition to the ipset.<br/> - Fix to make unbound-control with ipset, remove unused variable,<br/> use unsigned type because of comparison, and assign null instead<br/> of compare with it. Remade lex and yacc output.<br/> - make depend<br/> - Added documentation to the ipset files (for doxygen output).<br/> - Merge PR #6: Python module: support multiple instances<br/> - Merge PR #5: Python module: define constant MODULE_RESTART_NEXT<br/> - Merge PR #4: Python module: assign something useful to the<br/> per-query data store 'qdata'<br/> - Fix python dict reference and double free in config.<br/><br/>17 June 2019: Wouter<br/> - Master contains version 1.9.3 in development.<br/> - Fix #39: In libunbound, leftover logfile is close()d unpredictably.<br/> - Fix for #24: Fix abort due to scan of auth zone masters using old<br/> address from previous scan.<br/><br/>12 June 2019: Wouter<br/> - Fix another spoolbuf storage code point, in prefetch.<br/> - 1.9.2rc3 release candidate tag. Which became the 1.9.2 release<br/> on 17 June 2019.<br/><br/>11 June 2019: Wouter<br/> - Fix that fixes the Fix that spoolbuf is not used to store tcp<br/> pipelined response between mesh send and callback end, this fixes<br/> error cases that did not use the correct spoolbuf.<br/> - 1.9.2rc2 release candidate tag.<br/><br/>6 June 2019: Wouter<br/> - 1.9.2rc1 release candidate tag.<br/><br/>4 June 2019: Wouter<br/> - iana portlist updated.<br/><br/>29 May 2019: Wouter<br/> - Fix to guard _OPENBSD_SOURCE from redefinition.<br/><br/>28 May 2019: Wouter<br/> - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.<br/> - gitignore config.h.in~.<br/><br/>27 May 2019: Wouter<br/> - Fix double file close in tcp pipelined response code.<br/><br/>24 May 2019: Wouter<br/> - Fix that spoolbuf is not used to store tcp pipelined response<br/> between mesh send and callback end.<br/><br/>20 May 2019: Wouter<br/> - Note that so-reuseport at extreme load is better turned off,<br/> otherwise queries are not distributed evenly, on Linux 4.4.x.<br/><br/>16 May 2019: Wouter<br/> - Fix #31: swig 4.0 and python module.<br/><br/>13 May 2019: Wouter<br/> - Squelch log messages from tcp send about connection reset by peer.<br/> They can be enabled with verbosity at higher values for diagnosing<br/> network connectivity issues.<br/> - Attempt to fix malformed tcp response.<br/><br/>9 May 2019: Wouter<br/> - Revert fix for oss-fuzz, error is in that build script that<br/> unconditionally includes .o files detected by configure, also<br/> when the machine architecture uses different LIBOBJS files.<br/><br/>8 May 2019: Wouter<br/> - Attempt to fix build failure in oss-fuzz because of reallocarray.<br/> https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14648.<br/> Does not omit compile flags from commandline.<br/><br/>7 May 2019: Wouter<br/> - Fix edns-subnet locks, in error cases the lock was not unlocked.<br/> - Fix doxygen output error on readme markdown vignettes.<br/><br/>6 May 2019: Wouter<br/> - Fix #29: Solaris 11.3 and missing symbols be64toh, htobe64.<br/> - Fix #30: AddressSanitizer finding in lookup3.c. This sets the<br/> hash function to use a slower but better auditable code that does<br/> not read beyond array boundaries. This makes code better security<br/> checkable, and is better for security. It is fixed to be slower,<br/> but not read outside of the array.<br/><br/>2 May 2019: Wouter<br/> - contrib/fastrpz.patch updated for code changes, and with git diff.<br/> - Fix .gitignore, add pythonmod and dnstap generated files.<br/> And unit test generated files, and generated doc files.<br/><br/>1 May 2019: Wouter<br/> - Update makedist for git.<br/> - Nicer travis output for clang analysis.<br/> - PR #16: XoT support, AXFR over TLS, turn it on with<br/> master: <ip>#<authname> in unbound.conf. This uses TLS to<br/> download the AXFR (or IXFR).<br/><br/>25 April 2019: Wouter<br/> - Fix wrong query name in local zone redirect answers with a CNAME,<br/> the copy of the local alias is in unpacked form.<br/><br/>18 April 2019: Ralph<br/> - Scrub RRs from answer section when reusing NXDOMAIN message for<br/> subdomain answers.<br/> - For harden-below-nxdomain: do not consider a name to be non-exitent<br/> when message contains a CNAME record.<br/><br/>18 April 2019: Wouter<br/> - travis build file.<br/><br/>16 April 2019: Wouter<br/> - Better braces in if statement in TCP fastopen code.<br/> - iana portlist updated.<br/><br/>15 April 2019: Wouter<br/> - Fix tls write event for read state change to re-call SSL_write and<br/> not resume the TLS handshake.<br/><br/>11 April 2019: George<br/> - Update python documentation for init_standard().<br/> - Typos.<br/><br/>11 April 2019: Wouter<br/> - Fix that auth zone uses correct network type for sockets for<br/> SOA serial probes. This fixes that probes fail because earlier<br/> probe addresses are unreachable.<br/> - Fix that auth zone fails over to next master for timeout in tcp.<br/> - Squelch SSL read and write connection reset by peer and broken pipe<br/> messages. Verbosity 2 and higher enables them.<br/><br/>8 April 2019: Wouter<br/> - Fix to use event_assign with libevent for thread-safety.<br/> - verbose information about auth zone lookup process, also lookup<br/> start, timeout and fail.<br/> - Fix #17: Add python module example from Jan Janak, that is a<br/> plugin for the Unbound DNS resolver to resolve DNS records in<br/> multicast DNS [RFC 6762] via Avahi. The plugin communicates<br/> with Avahi via DBus. The comment section at the beginning of<br/> the file contains detailed documentation.<br/> - Fix to wipe ssl ticket keys from memory with explicit_bzero,<br/> if available.<br/><br/>5 April 2019: Wouter<br/> - Fix to reinit event structure for accepted TCP (and TLS) sockets.<br/><br/>4 April 2019: Wouter<br/> - Fix spelling error in log output for event method.<br/><br/>3 April 2019: Wouter<br/> - Move goto label in answer_from_cache to the end of the function<br/> where it is more visible.<br/> - Fix auth-zone NSEC3 response for wildcard nodata answers,<br/> include the closest encloser in the answer.<br/><br/>2 April 2019: Wouter<br/> - Fix auth-zone NSEC3 response for empty nonterminals with exact<br/> match nsec3 records.<br/> - Fix for out of bounds integers, thanks to OSTIF audit. It is in<br/> allocation debug code.<br/> - Fix for auth zone nsec3 ent fix for wildcard nodata.<br/><br/>25 March 2019: Wouter<br/> - Fix that tls-session-ticket-keys: "" on its own in unbound.conf<br/> disables the tls session ticker key calls into the OpenSSL API.<br/> - Fix crash if tls-servic-pem not filled in when necessary.<br/><br/>21 March 2019: Wouter<br/> - Fix #4240: Fix whitespace cleanup in example.conf.<br/><br/>19 March 2019: Wouter<br/> - add type CAA to libpyunbound (accessing libunbound from python).<br/><br/>18 March 2019: Wouter<br/> - Add log message, at verbosity 4, that says the query is encrypted<br/> with TLS, if that is enabled for the query.<br/> - Fix #4239: set NOTIMPL when deny-any is enabled, for RFC8482.<br/><br/>7 March 2019: Wouter<br/> - Fix for #4233: guard use of NDEBUG, so that it can be passed in<br/> CFLAGS into configure. /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.1.18.1 Sun Jan 05 09:51:46 UTC 2020 martin Merge changes from current as of 20200406 /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.1.16.1 Wed Apr 08 14:04:15 UTC 2020 martin Sync with HEAD /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.1.2.2 Wed Sep 14 03:04:07 UTC 2016 pgoyette file unbound.init_fedora was added on branch pgoyette-localcount on 2016-09-14 03:04:07 +0000 /src/external/bsd/unbound/dist/contrib/unbound.init_fedora - 1.1.1.1.2.1 Sat Aug 20 11:09:32 UTC 2016 pgoyette