unbound: Vendor import 1.20.0

Release notes at
https://www.nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/

Security: The DNSBomb vulnerability CVE-2024-33655

Merge commit 'c2a80056864d6eda0398fd127dc0ae515b39752b' into main

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

Numerous fixes to make Unbound compile cleanly:

- cast through void * to silence alignment warnings (presumably false
positives resulting from poor API design)

- constify a few function arguments

- move prototypes for callbacks into a common header

- now that the prototypes are in scope, fix instances of function
definitions that don't match the prototype or what the caller
actually passes

- hide a conditionally unused global variable behind the same #ifdef
that controls its use

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

Numerous fixes to make Unbound compile cleanly:

- cast through void * to silence alignment warnings (presumably false
positives resulting from poor API design)

- constify a few function arguments

- move prototypes for callbacks into a common header

- now that the prototypes are in scope, fix instances of function
definitions that don't match the prototype or what the caller
actually passes

- hide a conditionally unused global variable behind the same #ifdef
that controls its use

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

MFC after: 3 days
Security: CVE-2019-18934 (fixed by 1.9.5)

Upgrade Unbound to 1.9.2.

Upgrade to 1.8.1.

Approved by: re (kib)

Upgrade Unbound to 1.8.0. More to follow.

Approved by: re (kib)

Upgrade Unbound to 1.7.2. More to follow.

Approved by: re (kib@)

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902

Upgrade Unbound to 1.7.0. More to follow.

Upgrade Unbound to 1.6.7. More to follow.

Upgrade Unbound to 1.6.6. More to follow.

Upgrade Unbound to 1.6.1. More to follow.

Upgrade Unbound to 1.6.0. More to follow.

Upgrade to Unbound 1.5.10.

Upgrade to Unbound 1.5.9.

Upgrade to Unbound 1.5.8.

Upgrade to Unbound 1.5.7.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

Numerous fixes to make Unbound compile cleanly:

- cast through void * to silence alignment warnings (presumably false
positives resulting from poor API design)

- constify a few function arguments

- move prototypes for callbacks into a common header

- now that the prototypes are in scope, fix instances of function
definitions that don't match the prototype or what the caller
actually passes

- hide a conditionally unused global variable behind the same #ifdef
that controls its use

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902

Don't include the build date or command-line arguments in the binary.

Approved by: re (blanket)

Numerous fixes to make Unbound compile cleanly:

- cast through void * to silence alignment warnings (presumably false
positives resulting from poor API design)

- constify a few function arguments

- move prototypes for callbacks into a common header

- now that the prototypes are in scope, fix instances of function
definitions that don't match the prototype or what the caller
actually passes

- hide a conditionally unused global variable behind the same #ifdef
that controls its use

Approved by: re (blanket)