History log of /freebsd-current/contrib/unbound/services/rpz.c
Revision Date Author Comments
(<<< Hide modified files)
(Show modified files >>>)
# 335c7cda 10-May-2024 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.20.0

Release notes at
https://www.nlnetlabs.nl/news/2024/May/08/unbound-1.20.0-released/

Security: The DNSBomb vulnerability CVE-2024-33655

Merge commit 'c2a80056864d6eda0398fd127dc0ae515b39752b' into main


# 103ba509 13-Nov-2023 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound


# 8f76bb7d 18-Sep-2023 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main


# 865f46b2 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

# 8cee2eba 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

# 64d318ea 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge


# a39a5a69 08-Jun-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month


# 9cf5bc93 17-Feb-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 103ba509 13-Nov-2023 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.19.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.19.0-released/

MFC after: 2 weeks

Merge commit '16fd0b24910488e59ca1941387b9ac7fb646a837' into unbound


# 8f76bb7d 18-Sep-2023 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main


# 865f46b2 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

# 8cee2eba 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

# 64d318ea 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge


# a39a5a69 08-Jun-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month


# 9cf5bc93 17-Feb-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 8f76bb7d 18-Sep-2023 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.18.0

Release notes at
https://www.nlnetlabs.nl/news/2023/Aug/30/unbound-1.18.0-released/

MFC after: 2 weeks

Merge commit '401770e05c71ecb5ae61a59d316069b4b78bf622' into main


# 865f46b2 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main

# 8cee2eba 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

# 64d318ea 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.17.0

Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into new_merge


# a39a5a69 08-Jun-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month


# 9cf5bc93 17-Feb-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 865f46b2 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Reapply Vendor import 1.17.0

Reapply 643f9a0581e8aac7eb790ced1164748939829826. 64d318ea98b7 was a
mismerge during fake rebase. Let's reapply it.

Changes include: Added ACL per interface, proxy protocol and bug fixes.

Announcement: https://nlnetlabs.nl/news/2022/Oct/13/unbound-1.17.0-released/

Merge commit '643f9a0581e8aac7eb790ced1164748939829826' into main


# 8cee2eba 16-Oct-2022 Cy Schubert <cy@FreeBSD.org>

Revert "unbound: Vendor import 1.17.0"

This reverts commit 64d318ea98b7c59f5567d47a9a8474887d8b5cb8, reversing
changes made to 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.

Revert a mismerge which reversed 8063dc03202fad7d6bdf34976bc8556fa3f23fa1.


# a39a5a69 08-Jun-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.16.0

Merge commit '5f9f82264b91e041df7cba2406625146e7268ce4' into main

MFC after: 1 month


# 9cf5bc93 17-Feb-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 9cf5bc93 17-Feb-2022 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.15.0

Vendor import GA release of unbound 1.15.0.

MFC after: 2 weeks


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 24e36522 02-Dec-2021 Cy Schubert <cy@FreeBSD.org>

unbount: Vendor import 1.14.0rc1

This vendor import was requested by glebius@ as it should fix unbound
crashes.

Reported by: glebius
MFC after: 1 week


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663


# 5469a995 17-Aug-2021 Cy Schubert <cy@FreeBSD.org>

unbound: Vendor import 1.13.2

Merge commit '625f1c1312fb7defbd148c8ba121a0cf058707ef'

MFC after: 1 month


# f44e67d1 09-Feb-2021 Cy Schubert <cy@FreeBSD.org>

MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

MFC after: 1 month


# 369c6923 08-Dec-2020 Cy Schubert <cy@FreeBSD.org>

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

MFC after: 1 week
Security: CVE-2020-28935


# c0caa2e2 27-Oct-2020 Cy Schubert <cy@FreeBSD.org>

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC after: 1 month.


# 25039b37 24-Aug-2020 Cy Schubert <cy@FreeBSD.org>

MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

MFH: 1 month


# 091e9e46 21-May-2020 Cy Schubert <cy@FreeBSD.org>

MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
MFC after: 3 days
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663