Commit Graph

115 Commits

Author SHA1 Message Date
Jan Klos 558cbcac46
unbound: update to 1.19.3
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-18 21:26:51 +01:00
Jan Klos 64da1fe3c6 unbound: bump release
Signed-off-by: Jan Klos <jan@klos.xyz>
2024-03-17 09:11:51 +08:00
S. Brusch 35ba14e50c unbound: update to latest upstream release version 1.19.1
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>
2024-02-18 19:30:22 +01:00
Julien Cassette 8d60419251 unbound: fix `create_host_record_from_host` error when `dns` is not set
The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.

Fixes: #22691

Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
2023-11-22 13:19:00 +01:00
Eric Luehrsen 183f166279 unbound: update to 1.19.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2023-11-13 10:52:05 +08:00
Eric Luehrsen 03f70dcfd5 unbound: update to 1.18.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2023-09-09 10:05:22 +02:00
Ted Hess 2a71e17ca1 Unbound: Silence SSL unexpected eof messages
Refs: https://github.com/NLnetLabs/unbound/issues/812
      https://github.com/NLnetLabs/unbound/issues/846

This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package

Signed-off-by: Ted Hess <thess@kitschensync.net>
2023-08-21 16:01:11 -04:00
Josef Schlehofer 97e69ec89c
unbound: update to version 1.17.1
- Refreshed one patch
- Removed deprecated AUTORELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-02-10 15:25:35 +01:00
Eric Luehrsen 6bc0293a73 unbound: update to 1.17.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2022-11-21 18:58:11 +08:00
Josef Schlehofer 027533f9a2
unbound: update to version 1.16.3
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3
- Fixes: CVE-2022-3204

Refreshed one patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-09-25 12:25:59 +02:00
Pascal Ernster 2179432991
unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
2022-08-02 23:43:45 +02:00
Pascal Ernster e702a66058 unbound: update to 1.16.1
Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1

Signed-off-by: Pascal Ernster <git@hardfalcon.net>
2022-07-19 12:29:19 +03:00
Stijn Segers 695e0dbaa4 unbound: update to 1.16.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
2022-06-19 00:44:36 -06:00
Josef Schlehofer 2abe98e134
unbound: update to version 1.15.0
Refresh patch

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-02-11 17:11:44 +01:00
Eric Luehrsen 824aa45133 unbound: update to 1.14.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-12-10 10:50:14 +01:00
Eric Luehrsen 17c25269d7 unbound: update to 1.3.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-08-17 02:24:37 -04:00
Felix Fietkau cc1d0aa3d2 unbound: fix build on non-linux systems
Override places that call uname to detect target features

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-06-16 12:59:00 +02:00
Eric Luehrsen 890cfb3857 unbound: update to 1.13.1
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2021-02-22 19:08:33 +01:00
Eric Luehrsen 79e3a32656 unbound: update to 1.13.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-12-04 11:31:34 -05:00
Eric Luehrsen 2680dc239a unbound: update to 1.1.12
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-11-04 19:25:08 -05:00
Eric Luehrsen b97cdaf612 unbound: improve odhcpd rapid update robustness
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-09-05 10:04:48 -04:00
Jan Pavlinec 2eacaacff3
unbound: add option for dnstap support
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-09-03 17:01:04 +02:00
Eric Luehrsen f8ba0fe7bf unbound: follow resolv.conf.auto to new location
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-08-07 01:30:52 -04:00
Eric Luehrsen 54164792aa unbound: update to 1.11.0
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-07-29 22:55:21 -04:00
Eric Luehrsen e81529596d unbound: improve startup and dhcp script robustness
- prevent rapid overlap in DHCP script updates
- check and allow localhost forwards with specific applications
- add option for rate limiting inbound queries
- change UCI list to table format with Unbound conf references

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-07-12 14:56:46 -04:00
Eric Luehrsen 8e0b2d344e unbound: refactor build options to select switches
The two unique packages "Unbound light" and "Unbound heavy"
were not working well due to the fact that Unbound is mostly
its library. Tools and helpers would crash. Instead a reasonable
default Unbound is built. Also up select options like python
are added. libevent and libpthreads are options to down select.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-27 17:17:41 -04:00
Eric Luehrsen af73a9b9a4 unbound: make option interface_auto default on
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-06-13 15:13:45 -04:00
David Bauer b66955968d unbound: bump PKG_RELEASE
Fixes commit da76aeb24c ("unbound: expose interface-auto to UCI")

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-06-04 16:02:29 +02:00
Josef Schlehofer 8ccff44ad1
unbound: update to version 1.10.1
Fixes:
CVE-2020-12662
CVE-2020-12663

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-05-19 11:23:57 +02:00
Stijn Segers 839c2e3cae unbound: enable ipset support for the unbound-daemon-heavy variant.
This patch enables ipset support in the unbound-daemon-heavy variant. See [1] for
instructions on how to use it.

Also fix a minor typo in the libunbound-light description.

[1] https://github.com/NLnetLabs/unbound/pull/28

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
2020-02-23 16:03:37 +01:00
Stijn Segers f779ef48cd Unbound: update to 1.10.0
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
2020-02-23 12:02:26 +01:00
Eric Luehrsen 6505154a74 unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-01-17 22:41:56 -05:00
Eric Luehrsen b101dd76fb unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-01-11 15:42:03 -05:00
Eric Luehrsen 173f2d6c9f unbound: update to 1.9.6
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-12-18 01:32:30 -05:00
Josef Schlehofer 24667753a2
unbound: Update to version 1.9.5
Fixes CVE-2019-18934

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-11-21 09:01:56 +01:00
Jeffery To 53e1692ae9 treewide: Use default PKG_BUILD_DIR when possible
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-13 02:01:34 +08:00
Josef Schlehofer 1caf170daf
unbound: Update to version 1.9.4
Fixes CVE-2019-16866

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-04 11:58:32 +02:00
Eric Luehrsen c36d8a49fd unbound: update to 1.9.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-08-31 01:12:16 -04:00
Eric Luehrsen fb2757146f unbound: update to 1.9.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-06-19 00:50:28 -04:00
Alexander Ryzhov 4618c74150
unbound: fix library double packing
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
2019-06-06 20:18:27 +03:00
Eric Luehrsen e6812324c6 unbound: add compile options to library and daemon
Two seperate package names were chosen instead of menu selected options
because dependents need a ready (large) package in release directory.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-05-28 09:52:47 +08:00
Eric Luehrsen 1077a04b76 unbound: fix local dns synthesis corner cases
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-04-29 22:34:08 -04:00
Rosen Penev e57a46ab6e unbound: Fix ECC dependency
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-04-05 08:53:53 -03:00
Rosen Penev f6aeed3187
unbound: Make ECDSA support explicit
Added a dependency to OPENSSL_WITH_EC to prevent any build failures.

Switched URLs to HTTPS.

Added PKG_CPE_ID for proper CVE tracking.

Some Makefile reorganization for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-04-01 12:29:17 -07:00
Eric Luehrsen 874b65b3b0 unbound: update to 1.9.1 and remove upstream patches
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2019-03-12 20:02:34 -04:00
Jan Pavlinec f986379802
unbound: update to version 1.9.0
Changes:
-remove old dns64 patch
-refresh openssl deprecated patch
-add DoT error log patch https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-02-11 12:34:22 +01:00
Jan Pavlinec c4a57c3f07
unbound: add patch to fix dns64 crash
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2018-12-19 10:19:06 +01:00
Eric Luehrsen 705335c286 unbound: update to 1.8.3
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-12-12 16:39:02 -05:00
Eric Luehrsen 0b4da5d97d unbound: update to 1.8.2
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-12-05 00:31:05 -05:00
Rosen Penev 1200c508fb unbound: Remove deprecated OpenSSL API
This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 16:32:11 -08:00