Commit Graph

49 Commits

Author SHA1 Message Date
sthen
85f7e7683c add hints for d-root 2013-01-08 10:16:10 +00:00
sthen
08db44bfae update to Unbound 1.4.19, ok jakob@ 2012-12-12 16:00:34 +00:00
brad
968d5b7af3 Bump the ldns dependency up to the latest release.
ok sthen@
2012-11-23 20:49:33 +00:00
sthen
7ce46402a0 We no longer patch the autoconf input files, so switch back to
CONFIGURE_STYLE=gnu - from Brad.
2012-08-05 08:02:11 +00:00
sthen
73f342959a update to unbound 1.4.18; includes a crash fix (assertion failure).
- rc.d script now generates the unbound-control keys if they don't exist
and the sample config file is patched to enable this, various rc.d/unbound
actions depend on this, pointed out/ok aja@
2012-08-04 20:43:54 +00:00
jakob
6d2fa8d519 upgrade to Unbound 1.4.17; from brad 2012-06-08 21:58:17 +00:00
sthen
88ea72915d Change SEPARATE_BUILD=(concurrent|simple) to Yes; bsd.port.mk doesn't
make a distinction between these.  ok aja@ dcoppa@
2012-03-29 13:38:12 +00:00
sthen
3f2cd885f4 Update to unbound 1.4.16
From Brad, was sent to jakob@ a while ago
2012-03-03 11:44:23 +00:00
sthen
42efe7f60b Add a patch to Unbound from upstream correcting a bug resulting
in failure to validate DNSSEC which was introduced in 1.4.15:
http://permalink.gmane.org/gmane.network.dns.unbound.user/2006

Full update to Unbound 1.4.16 can wait until we're done with 5.1

ok ajacoutot@
2012-02-02 13:42:13 +00:00
sthen
b76a65403d update to unbound 1.4.15, from Brad, OK jakob@ 2012-01-26 22:04:03 +00:00
sthen
bcfb306eca Fix to randomize hash function, based on 28c3 congress, reported
by Peter van Dijk. Committed upstream in r2580.

Port diff from Brad, ok jakob@
2012-01-10 22:15:54 +00:00
sthen
0345976a63 Adjust unbound.rc to use unbound-control to stop/start/check Unbound.
Previously if unbound-control was used to restart the daemon, further
use of /etc/rc.d/unbound would no longer match the process title.
Reported by camield@, ok aja@ jakob@
2012-01-09 11:55:10 +00:00
sthen
609d9f15b2 Add a patch from upstream fixing a small memory leak (about 20 bytes when a
tcp or udp send operation towards authority servers failed).  ok jakob@
2012-01-04 21:41:45 +00:00
sthen
fcb33424c5 SECURITY update to Unbound 1.4.14, incorporating various diffs from Brad,
jakob@ and myself. See http://www.unbound.net/downloads/CVE-2011-4528.txt
for more details, summary from the above is below:

--
Unbound crashes when confronted with a non-standard response from a
server for a domain. This domain produces duplicate RRs from a certain
type and is DNSSEC signed.Unbound also crashes when confronted with a
query that eventually, and under specific circumstances, resolves to a
domain that misses expected NSEC3 records.

These two problems were discovered within 24 hours, hence a combined
vulnerability disclosure.

By constructing the non standard responses an attacker can use these
vulnerabilities for a DOS attack.

To our knowledge 'denial of service' is the only type of exploit possible.
--
2011-12-20 10:49:19 +00:00
jakob
264605fac6 upgrade to Unbound 1.4.13 2011-09-17 17:57:38 +00:00
jakob
750a5817f3 Unbound 1.4.12; bugfix release 2011-07-14 09:23:04 +00:00
sthen
2971384363 - fix wrong replyaddr count after jostled queries, which leads to eventual
starvation where the daemon has no replyaddrs left to use. from upstream svn.

- use the new --enable-allsymbols flag, exporting all (including internal)
symbols from libunbound and linking binaries to it. saves 4MB in installed
size on amd64.

ok jakob@
2011-07-01 10:20:02 +00:00
sthen
398afeb365 regenerate patch 2011-07-01 08:27:34 +00:00
jakob
889b9d9187 upgrade to unbound v1.4.11; bugfix release 2011-06-30 18:35:58 +00:00
sthen
d99db5acf5 Update unbound to 1.4.10, fixes CVE-2011-1922 which doesn't affect us -
this is only applicable if assertions are enabled in the arguments to the
configure script which this port doesn't do.

ok jakob@
2011-05-26 19:55:25 +00:00
jakob
a61d1d27f4 update Unbound to version 1.4.9 2011-03-24 20:30:42 +00:00
jakob
d978636a3c upgrade to Unbound 1.4.8; mostly from sthen@ 2011-03-06 09:24:41 +00:00
espie
0397d65db0 new depends 2010-11-19 22:31:32 +00:00
sthen
5c1f7d3519 update unbound to 1.4.7, from Brad. "please commit" jakob@ (maintainer). 2010-11-10 08:29:01 +00:00
sthen
0666992301 fix tabs 2010-10-18 21:50:38 +00:00
espie
47ff75aa46 USE_GROFF=Yes 2010-10-18 18:36:45 +00:00
jakob
a23d402776 update to Unbound v1.4.6 2010-08-22 09:03:11 +00:00
jakob
a8533f1cef upgrade unbound to v1.4.4 2010-06-19 21:26:07 +00:00
jakob
4dba02c51b require libldns.4.3 2010-04-25 21:35:20 +00:00
jakob
fc855435cd upgrade to Unbound v1.4.4 2010-04-23 07:05:02 +00:00
sthen
acc93fda02 update to 1.4.3; ok jakob@ 2010-03-21 13:50:43 +00:00
jakob
b023b4d16a update unbound to 1.4.1 2009-12-18 07:49:22 +00:00
jakob
d4fc627dcd update to unbound v1.4.0 2009-11-27 18:34:25 +00:00
jakob
d9e659ab74 upgrade to Unbound 1.3.4 (security update) 2009-10-09 20:52:43 +00:00
jakob
9e737e73be upgrade to unbound v1.3.3 2009-08-04 15:45:26 +00:00
jakob
80d53eeb56 upgrade to unbound 1.3.1; from brad 2009-07-15 22:18:09 +00:00
jakob
42bc4a94c3 upgrade to Unbound 1.3.0 2009-06-15 19:03:23 +00:00
sthen
6a7f8d0ab9 add the package spec to libldns LIB_DEPENDS in unbound/Makefile,
making it easier to install/update unbound if you have an old libldns
already installed.  ok jakob@
2009-03-16 09:56:15 +00:00
jakob
cded14b4ee update to unbound 1.2.1; from brad 2009-02-10 20:05:26 +00:00
jakob
99b3aec53e A fix from upstream for a race condition which can cause a crash
upon starting up or restarting Unbound.
2009-02-02 07:09:37 +00:00
jakob
9590ff9609 upgrade to unbound v1.2.0; from brad 2009-01-14 17:44:51 +00:00
jakob
5d8b62cb1c merge 2 patches from unbound trunk:
- fixup BSD port for infra host storage. It hashed wrongly.
- do not reopen syslog to avoid dev/log dependency.
2008-12-30 10:40:13 +00:00
sthen
7f80494ed0 WANTLIB+=ssl and bump, ok jakob@ 2008-12-15 22:41:38 +00:00
jakob
cdd6dcbe9b upgrade to unbound v1.1.1 2008-11-20 17:06:59 +00:00
jakob
dc8544a725 upgrade to unbound 1.0.2 2008-08-20 08:25:41 +00:00
jakob
2d9513a060 unbound 1.0.1; bugfix release 2008-07-16 20:34:10 +00:00
naddy
76fca74c8d do not add a build directory to the configured directories for ld.so
ok jakob@
2008-07-02 19:01:41 +00:00
jakob
aee9804355 make unbound use ldns from ports now that ldns 1.3.0 is released. 2008-06-03 15:09:59 +00:00
jakob
72abc03bfb unbound port 2008-05-23 06:52:21 +00:00