unbound: Vendor import 1.20.0

Release notes at
https://www.nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/

Security: The DNSBomb vulnerability CVE-2024-33655

Merge commit 'c2a80056864d6eda0398fd127dc0ae515b39752b' into main

unbound: Vendor import 1.19.3

Release notes at
https://www.nlnetlabs.nl/news/2024/Mar/14/unbound-1.19.3-released/

MFC after: 1 week

Merge commit '5a33598e88ad8fbc0affa74dee0a2d8cc4010fbc' into main

unbound: Vendor import 1.19.1

Release notes at
https://www.nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/

Security: CVE-2023-50387, CVE-2023-50868
MFC after: 3 days

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.19.3

Release notes at
https://www.nlnetlabs.nl/news/2024/Mar/14/unbound-1.19.3-released/

MFC after: 1 week

Merge commit '5a33598e88ad8fbc0affa74dee0a2d8cc4010fbc' into main

unbound: Vendor import 1.19.1

Release notes at
https://www.nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/

Security: CVE-2023-50387, CVE-2023-50868
MFC after: 3 days

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.19.1

Release notes at
https://www.nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/

Security: CVE-2023-50387, CVE-2023-50868
MFC after: 3 days

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.17.1

Release notes at
https://www.nlnetlabs.nl/news/2023/Jan/12/unbound-1.17.1-released/.

MFC after: 1 month

Merge commit '7699e1386a16236002b26107ffd2dcbde375e197' into main

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

unbound: Vendor import 1.16.3

Fixes CVE-2022-3204 'Non-Responsive Delegation Attack'.

MFC after: 3 days
Security: CVE-2022-3204
Security: https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
Changelog: https://nlnetlabs.nl/news/2022/Sep/21/unbound-1.16.3-released/

Merge commit '0dde6f4f8e604df8c6fbdab8b4aadb5ddf80c76f' into unbound/main

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.16.2

Security update to unbound.

PR: 265645
Security: CVE-2022-30698, CVE-2022-30699
Security: bc43a578-14ec-11ed-856e-d4c9ef517024
MFC after: 3 days

Merge commit '9b76d32f2310b735dbeb896cbf2776cad61f23e8' into main

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

The unbound-control-setup script needs to be generated so it knows where
to place the keys. Also, the correct umask is 027, not 026, although it's
not likely to make any difference.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.16.1

Merge commit 'd57351465531b38689892ec862de2725b52842dd' into unbound/main2

MFC after: 1 month

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks

unbound: Vendor import 1.14.0

Vendor import GA release of unbound 1.14.0.

MFC after: 2 weeks

Merge commit '9b87431a326169e72d5ca55670cb3c95205aa350' into unbound/main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Merge upstream r4932: turn so-reuseport option off by default.

MFC after: 3 days

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.3. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Upgrade Unbound to 1.7.1.

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.8. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.5. More to follow.

Upgrade Unbound to 1.6.4. More to follow.

Upgrade Unbound to 1.6.3. More to follow.

Upgrade Unbound to 1.6.2. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.