| Commit message (Collapse) | Author | Age |
|
|
|
| |
Signed-off-by: Jan Klos <jan@klos.xyz>
|
|
|
|
| |
Signed-off-by: Jan Klos <jan@klos.xyz>
|
|
|
|
|
|
|
|
| |
Maintainer: @EricLuehrsen
Fixes: CVE-2023-50387, CVE-2023-50868
Release notes: https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
Run tested: BPi-R3, mediatek/filogic, OpenWrt 23.05.2
Signed-off-by: S. Brusch <ne20002@gmx.ch>
|
|
|
|
|
|
|
|
|
|
| |
The function `create_host_record_from_host` fails if the `dns` option
is not set in the host entry.
This sets a default to the `dns` variable in order to fix this error.
Fixes: #22691
Signed-off-by: Julien Cassette <julien.cassette@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
Refs: https://github.com/NLnetLabs/unbound/issues/812
https://github.com/NLnetLabs/unbound/issues/846
This is a backport of: https://github.com/NLnetLabs/unbound/commit/d7e7761
and can be removed with the next release/update of the Unbound package
Signed-off-by: Ted Hess <thess@kitschensync.net>
|
|
|
|
|
|
|
| |
- Refreshed one patch
- Removed deprecated AUTORELEASE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
| |
Changelog: https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-16-3
- Fixes: CVE-2022-3204
Refreshed one patch
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
|
|
|
|
|
| |
Maintainer: @EricLuehrsen
Compile tested: x86/64
Run tested: x86/64
Description: Update to 1.16.2, fix CVE-2022-30698 and CVE-2022-30699.
Signed-off-by: Pascal Ernster <git@hardfalcon.net>
|
|
|
|
|
|
|
|
|
| |
Maintainer: @EricLuehrsen
Compile tested: realtek/rtl838x, x86/64
Run tested: realtek/rtl838x, x86/64
Description: Update to 1.16.1
Signed-off-by: Pascal Ernster <git@hardfalcon.net>
|
|
|
|
| |
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
|
|
|
|
|
|
| |
Refresh patch
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
| |
Override places that call uname to detect target features
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
| |
- prevent rapid overlap in DHCP script updates
- check and allow localhost forwards with specific applications
- add option for rate limiting inbound queries
- change UCI list to table format with Unbound conf references
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
The two unique packages "Unbound light" and "Unbound heavy"
were not working well due to the fact that Unbound is mostly
its library. Tools and helpers would crash. Instead a reasonable
default Unbound is built. Also up select options like python
are added. libevent and libpthreads are options to down select.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
|
| |
Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
| |
Fixes commit da76aeb24c1b ("unbound: expose interface-auto to UCI")
Signed-off-by: David Bauer <mail@david-bauer.net>
|
|
|
|
|
|
|
|
| |
Fixes:
CVE-2020-12662
CVE-2020-12663
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
| |
This patch enables ipset support in the unbound-daemon-heavy variant. See [1] for
instructions on how to use it.
Also fix a minor typo in the libunbound-light description.
[1] https://github.com/NLnetLabs/unbound/pull/28
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
|
|
|
|
| |
Signed-off-by: Stijn Segers <foss@volatilesystems.org>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
| |
Fixes CVE-2019-18934
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.
Specifically, the line is removed if the assigned value is:
* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
if it is set, so now this is identical to the default value.
* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)
if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
the same as the previous case
* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
This is the same as the default PKG_BUILD_DIR when there is no
BUILD_VARIANT.
* $(BUILD_DIR)/[name]-$(PKG_VERSION)
where [name] is a string that is identical to PKG_NAME
[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|
|
|
|
|
| |
Fixes CVE-2019-16866
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
|
|
|
|
|
|
|
| |
Two seperate package names were chosen instead of menu selected options
because dependents need a ready (large) package in release directory.
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Added a dependency to OPENSSL_WITH_EC to prevent any build failures.
Switched URLs to HTTPS.
Added PKG_CPE_ID for proper CVE tracking.
Some Makefile reorganization for consistency between packages.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
|
|
|
| |
Changes:
-remove old dns64 patch
-refresh openssl deprecated patch
-add DoT error log patch https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4206
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
| |
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
| |
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
|
|
|
|
|
|
| |
This will become pointless once OpenSSL 1.1.1 enters the tree.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|