NLnetLabs/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7c624d1dcd - auth-load-thread, fix pick up of active transfer after full list. Add unit test for list of auth transfers. auth-load-thread W.C.A. Wijngaards 2026-10-09 15:55:21 +02:00
  • e23010c18e - auth-load-thread, more generic result handling of the thread. W.C.A. Wijngaards 2026-10-09 09:47:13 +02:00
  • ddcbc291fe - auth-load-thread, delete threads postorder. W.C.A. Wijngaards 2026-10-07 11:48:21 +02:00
  • a119b1abc6 - auth-load-thread, init tree after stopping authloadthreads for worker. W.C.A. Wijngaards 2026-10-07 11:26:17 +02:00
  • f62214e714 - auth-load-thread, account write threads, unit test for zonefile write. W.C.A. Wijngaards 2026-10-07 11:10:16 +02:00
  • 3d1aaae57a - auth-load-thread, track thread in worker tree insertion. Remove unused lines from compare function. W.C.A. Wijngaards 2026-10-07 10:30:57 +02:00
  • 614dcbf675 - auth-load-thread, quit auth load threads on exit and reload, and also when fast_reload changes or deletes a zone. W.C.A. Wijngaards 2026-10-06 16:51:23 +02:00
  • add0065c43 - auth-load-thread, write to zonefile polls for thread quit. W.C.A. Wijngaards 2026-10-06 15:07:54 +02:00
  • 3d53f08bd8 - auth-load-thread, write to zonefile with thread. W.C.A. Wijngaards 2026-10-06 14:39:41 +02:00
  • 0dcd4cd2e8 - auth-load-thread, fix unit test for auth load rpz threads check. W.C.A. Wijngaards 2026-10-06 11:45:57 +02:00
  • b449d6f713 - auth-load-thread, documentation for auth-task-threads and tests disable when there is no threading. W.C.A. Wijngaards 2026-10-06 11:44:29 +02:00
  • 6932ae18f5 - auth-load-thread, swap rpz contents, not config. Test for auth load rpz. W.C.A. Wijngaards 2026-10-06 11:29:54 +02:00
  • e2537840ba - auth-load-thread, setup RPZ after IXFR and AXFR processing. W.C.A. Wijngaards 2026-10-06 10:38:32 +02:00
  • b425be8e10 - auth-load-thread, resume waiting transfers. W.C.A. Wijngaards 2026-10-06 09:54:03 +02:00
  • bb408e503c - auth-load-thread, add num auth transfers and wait_transfer list. W.C.A. Wijngaards 2026-10-05 16:44:10 +02:00
  • 8942d11bb3 - auth-load-thread, fix for merge and http chunk list delete. W.C.A. Wijngaards 2026-10-05 09:19:59 +02:00
  • cb027ae649 Merge branch 'master' into auth-load-thread W.C.A. Wijngaards 2026-10-05 09:02:28 +02:00
  • eafb027166 - Document libunbound's context lifetime during an async callback. Thanks to Omar Mousa for the suggestion. master Yorgos Thessalonikefs 2026-10-02 16:01:19 +02:00
  • 40d36cda61 - Fix to allow for large (64Kb) packets with testbound. W.C.A. Wijngaards 2026-09-28 14:47:00 +02:00
  • 8cf2202c52 Changelog note and remove hash call assertion. - Merge #1518 from nshopik: rrset: rehash copies after changing the key. W.C.A. Wijngaards 2026-09-28 11:56:09 +02:00
  • f6fff9efcb rrset: rehash copies after changing the key (#1518) Nikolay Shopik 2026-09-28 12:53:24 +03:00
  • 97c001f9dd - Fix to log the errno for trust anchor write close fail. W.C.A. Wijngaards 2026-09-28 09:40:44 +02:00
  • 1e12bef540 - Update generated man pages. Yorgos Thessalonikefs 2026-09-22 12:17:02 +02:00
  • b49f452f0a - Clarify man page text for harden-short-bufsize. Yorgos Thessalonikefs 2026-09-22 12:14:14 +02:00
  • 8820254637 - Move NORMAL_UDP_SIZE around. Yorgos Thessalonikefs 2026-09-22 12:01:42 +02:00
  • 5483a73856 - Fix #1513: [FR] Size of harden-large-queries in the man page. Yorgos Thessalonikefs 2026-09-22 11:59:45 +02:00
  • 0e2470450c - Fix #1514: [FR] do-not-query-localhost is not including 0.0.0.0/8 and ‘::’ in the manpage. Yorgos Thessalonikefs 2026-09-22 10:43:25 +02:00
  • 65814ad6f3 Changelog entry for #1510: - Merge #1510 from Andy Warner: Move unlink of temp file to before fatal exit. Yorgos Thessalonikefs 2026-09-21 14:13:00 +02:00
  • 97d6cc3643 Merge pull request #1510 from aww-aww/patch-1 Yorgos Thessalonikefs 2026-09-21 14:08:55 +02:00
  • e79365ec61 Move unlink of temp file to before fatal exit Andy Warner 2026-09-21 03:51:24 -06:00
  • a7fc80d8c5 - Unit test for CVE-2026-85501. W.C.A. Wijngaards 2026-09-16 10:47:44 +02:00
  • 5d89e0c2a7 - Unit test for CVE-2026-82717. W.C.A. Wijngaards 2026-09-16 10:44:49 +02:00
  • b45c8b4b53 - The code repository continues with 1.26.2 under development, that includes the changes from before the 1.26.1 commits. W.C.A. Wijngaards 2026-09-16 10:34:06 +02:00
  • a6586ced92 Merge branch 'branch-1.26.1' W.C.A. Wijngaards 2026-09-16 10:26:54 +02:00
  • 13b6717f17 - Fix CVE-2026-85501, Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC. Thanks to Zuyao Xu and Xiang Li from Nankai University, AOSP Lab for the report. In addition, thanks to Qifan Zhang from Palo Alto Networks for a complimentary report. release-1.26.1 branch-1.26.1 W.C.A. Wijngaards 2026-09-16 09:30:25 +02:00
  • 0d4a6a63dd - Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption. Thanks to Ben Morris from Anthropic for the report. W.C.A. Wijngaards 2026-09-16 09:29:32 +02:00
  • bd71e3b8a6 - Fix CVE-2026-77860, 'serve-expired' can bypass Unbound 'wait-limit'. Thanks to Xuanchao Xie, Lutong Chen, and Kaiping Xue from the University of Science and Technology of China (USTC) for the report. W.C.A. Wijngaards 2026-09-16 09:29:04 +02:00
  • 3a6ba0da81 - Unit test for CVE-2026-81642 fix. W.C.A. Wijngaards 2026-09-16 09:28:11 +02:00
  • 3d65973d38 - Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC canonicalization. Thanks to Vlatko Kosturjak with Marlink Cyber, for the report. W.C.A. Wijngaards 2026-09-16 09:27:17 +02:00
  • 565651cd02 - Fix CVE-2026-77955, Possible ZONEMD verification bypass window. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab, for the report. In addition, thanks to Qifan Zhang from Palo Alto Networks for also reporting this issue. W.C.A. Wijngaards 2026-09-16 09:26:00 +02:00
  • 7914901915 - Fix CVE-2026-78227, Use-after-free in DoQ stream output buffer on reset re-transmission. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report. W.C.A. Wijngaards 2026-09-16 09:25:05 +02:00
  • eba3d35ad4 - Fix CVE-2026-82720, Use-after-free in DoH stream cleanup code path. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab, for the report. W.C.A. Wijngaards 2026-09-16 09:24:29 +02:00
  • 8c2e0fd6cc - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report. W.C.A. Wijngaards 2026-09-16 09:18:49 +02:00
  • e619ead2db - Fix CVE-2026-80225, Possible degradation of service from continuous queries on the same TCP/DoT connection. Thanks to Qifan Zhang from Palo Alto Networks for the report. W.C.A. Wijngaards 2026-09-16 09:16:29 +02:00
  • eb86d9bc50 Set version to 1.26.1 W.C.A. Wijngaards 2026-09-16 09:11:14 +02:00
  • 3ad9b6aade - For #1507: TOCTOU race in store_rrsets() can return a CNAME chain whose target owns no address. W.C.A. Wijngaards 2026-09-15 13:03:24 +02:00
  • 5ccee67af2 - Fix to error on missing close parenthesis for zone file read and for url content read. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-10 16:12:49 +02:00
  • b8577a9c04 - Fix to construct the delegation point during DS NS find as a child side delegation point if that was the response. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-10 11:09:39 +02:00
  • 18d9a5519e - Fix to elevate the diagnostic for no matches for a wildcard trusted-keys-file, make it more descriptive, and more man page content for it. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-08 16:01:08 +02:00
  • 2df646e05f - Fix to not change the action override in rpz_config, before the cname override has succeeded. W.C.A. Wijngaards 2026-09-04 17:20:15 +02:00
  • bdfa4d4c5d - Fix to make rpz_config leave the rpz with correct set up on failure. The struct is not half configured on exit. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-04 17:06:34 +02:00
  • bd210d124b - Fix that when a partial EDNS option is in a query, the response is a more RFC conformant FORMERR, since the EDNS option is malformed. Also fix to have an EDNS size for the reply error encoding for failed EDNS parse of the query. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-03 17:20:35 +02:00
  • 11900cc2b0 - Fix that when extended EDNS RCODE does not fit, at short udpsize, the reply is truncated with TC and fix for the rcode in that short reply to be a sensible rcode. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-03 15:27:10 +02:00
  • c04a5efb07 - Fix to reorder SVCB and HTTPS svcparams for unknown RR form zonefile input. If it can not be parsed it is leniently accepted, much like as a secondary it leniently accepts it. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-03 10:59:08 +02:00
  • 1060760650 - Remove unused .travis.yml for ci integration. W.C.A. Wijngaards 2026-09-03 10:25:31 +02:00
  • f251a1157b - Remove unused .travis.yml for ci integration. W.C.A. Wijngaards 2026-09-03 10:24:51 +02:00
  • 292cf6526b - Fix to match NSEC3 hash length to the NSEC3 algorithm, this stops negative cache overdeletion. It also contrains the hash label length and checks if the NSEC nextowner is valid. Thanks to Yuqi Qiu & Xiang Li (Nankai University, AOSP Lab). W.C.A. Wijngaards 2026-09-03 08:38:46 +02:00
  • ac935b9144 - Fix to not commit to have_zone at apply AXFR time for auth zone transfers, so that later failure rolls back to not. The have_zone value is set later when the SOA is retrieved. Also fix to clear the zone data when a transfer does not have a valid SOA record in the zone for it. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-02 11:42:31 +02:00
  • 9dd370ba04 - Fix LOC RR parse to avoid double to uint32 cast overflow. Thanks to Qifan Zhang, Palo Alto Networks, for the report. W.C.A. Wijngaards 2026-09-01 17:21:45 +02:00
  • a6ccb2f74d - Fix to allow block_a and other local-zone types in a view. W.C.A. Wijngaards 2026-09-01 08:48:27 +02:00
  • 32ff948a5b - Fix notify for auth-zone during initial start up. It performs the transfer and not only lookup. W.C.A. Wijngaards 2026-08-26 16:50:33 +02:00
  • 2ec2afd6b0 - Fix #132: Add harden-cname-follow: yes config option, that can be used to disable cname scrubbing. That can be useful for when the traffic is on localhost only. W.C.A. Wijngaards 2026-08-24 16:06:17 +02:00
  • 7fb79b0677 - Fix to defend against double event deletion, that could cause event corruption and use after free, for comm_timer_disable. W.C.A. Wijngaards 2026-08-21 10:29:58 +02:00
  • 48d0aea60a - auth-load-thread, unit test for auth_load_http. W.C.A. Wijngaards 2026-08-11 16:50:24 +02:00
  • 17bbcac979 - auth-load-thread, fix buffer free in http processing. W.C.A. Wijngaards 2026-08-11 16:50:00 +02:00
  • fd8ebbb19c Merge branch 'master' into auth-load-thread W.C.A. Wijngaards 2026-08-11 16:23:20 +02:00
  • 2adbbea365 - auth-load-thread, print thread details in log at high verbosity, 8. W.C.A. Wijngaards 2026-08-11 16:23:03 +02:00
  • 8ee0bca833 - Fix stat_values.tdir test to have less test failures. W.C.A. Wijngaards 2026-08-11 10:07:38 +02:00
  • c58e6add2b - Fix #1492 from zacek: Data race in log_init() on key_created/log_lock when calling ub_ctx_create() concurrently from multiple threads. W.C.A. Wijngaards 2026-08-11 09:42:30 +02:00
  • 156c00a727 Merge branch 'master' into auth-load-thread W.C.A. Wijngaards 2026-08-10 16:42:59 +02:00
  • d753f95956 - auth-load-thread, print time taken during auth load processing. W.C.A. Wijngaards 2026-08-10 16:42:04 +02:00
  • 93a56205cf - Fix #1489 from jplesnik: Replace removed Python 2 C API macros for SWIG 4.5.0 compatibility. W.C.A. Wijngaards 2026-08-07 08:57:32 +02:00
  • 709f622658 Note issue number in Changlog entry. W.C.A. Wijngaards 2026-08-06 17:15:55 +02:00
  • 307fc6f062 - Fix bounds check in packed_rr_to_string, it checked the (#1488) akhanin-dnsf 2026-08-06 10:04:05 -05:00
  • 8b33c5d7ff - Fix #1487: regression in 1.26.0, ipsecmod is now always partly enabled. W.C.A. Wijngaards 2026-08-06 09:46:18 +02:00
  • 36bd52afb9 Fix typo in Changelog. W.C.A. Wijngaards 2026-08-06 09:08:33 +02:00
  • b7d13ff12b - Fix ##1485: the list_forwards command omits port numbers. The list_forwards and list_stubs commands for unbound-control print port and tls auth name. W.C.A. Wijngaards 2026-08-06 09:08:17 +02:00
  • bdfcfb861f - Fix to set makedist.sh to not wget config.sub and config.guess from git repo. The fetch times out, and the version from libtoolize is much more recent now than that it was when the wget was added. W.C.A. Wijngaards 2026-08-04 10:04:34 +02:00
  • b444deffd2 Note 1.26.0 release. W.C.A. Wijngaards 2026-08-04 10:01:59 +02:00
  • ff28b7e5cf - For #1483: The failure reason when an NSEC NXDOMAIN is encountered when looking for an insecure delegation, is fixed to mention the NSEC records, instead of nonexistent NSEC3 records, that it attempted. W.C.A. Wijngaards 2026-07-31 09:53:47 +02:00
  • 79b84bbc91 - Fix #1482: DNS-over-QUIC doesn't work with simple config. That fixes interface-automatic for use with doq service. W.C.A. Wijngaards 2026-07-30 08:24:42 +02:00
  • cbfc3b0342 - Tag for 1.26.0rc1. The repo continues with version 1.26.1. W.C.A. Wijngaards 2026-07-28 09:45:59 +02:00
  • a45da353d3 - Fix to call OPENSSL_cleanup on exit when that is defined. release-1.26.0rc1 release-1.26.0 branch-1.26.0 W.C.A. Wijngaards 2026-07-24 17:04:38 +02:00
  • c21e3ee929 Changelog note for #1479 - Merge #1479 from psumbera: Fix pthread detection on Solaris 11.4. W.C.A. Wijngaards 2026-07-24 15:35:55 +02:00
  • 8a38bed262 Fix pthread detection on Solaris 11.4 (#1479) Petr SumberaandRainer Orth 2026-07-24 15:34:18 +02:00
  • 7cc7a43ff6 Changelog note for #1481. - Fix #1481: Fix to use tls-port after referral if tls-upstream is set. W.C.A. Wijngaards 2026-07-24 15:32:20 +02:00
  • 9bd8df0149 - Fix to use tls-port after referral if tls-upstream is set. W.C.A. Wijngaards 2026-07-24 15:31:06 +02:00
  • 8f7411057f - Fix sign of comparison warning in shared ports setup. W.C.A. Wijngaards 2026-07-24 14:44:44 +02:00
  • ca1fe4f82a - Fix to guard access to shared ports interface array during set up, for analyzer. W.C.A. Wijngaards 2026-07-24 14:38:46 +02:00
  • e183c2c506 - Fix unused variable warnings in shared_ports_fetch_random and shared_ports_return_port when compiled without threads. W.C.A. Wijngaards 2026-07-24 14:37:17 +02:00
  • 52b18fc6f5 Changelog entry for #1480 - Merge #1480 from petrvaganoff: authzone: fix memory leak in xfer_set_masters() error path. W.C.A. Wijngaards 2026-07-24 12:25:34 +02:00
  • e6d00725c2 authzone: fix memory leak in xfer_set_masters() error path (#1480) Petr Vaganov 2026-07-24 17:24:49 +07:00
  • e597711824 - Fix lock test protect for auth zone change. - Fix to lock shared_ports structure during initialisation. - Fix to lock anchor structure when file is set for it in W.C.A. Wijngaards 2026-07-24 12:13:09 +02:00
  • e1e646c6fc - Fix to allow test fake sha1 on systems with possible sha1 support. - Fix to use sha256 for unbound-anchor unit test. - Fix unbound-anchor check for return value of X509_NAME_get_text_by_NID of the emailaddress. W.C.A. Wijngaards 2026-07-24 11:50:15 +02:00
  • fc3b5b4f63 - Update generated man pages. W.C.A. Wijngaards 2026-07-24 10:03:41 +02:00
  • 1e904a3ce5 - set code repository version to 1.26.0. W.C.A. Wijngaards 2026-07-24 09:45:49 +02:00
  • 79e100a7fb - Fix #1477: respip + dns64: dns64 uses A records modified by respip instead of original A records. Adds local-zone types block_a_wdata and block_aaaa_wdata, that are like block_a and block_aaaa, and uses local-data if present. W.C.A. Wijngaards 2026-07-24 09:29:17 +02:00
  • a65d3d7283 - Unit test for block_a and block_aaaa. W.C.A. Wijngaards 2026-07-24 09:03:45 +02:00
  • 3b8766aa43 Changelog note for #1433 - Merge #1433 from jisakiel: Add new static zone type block_aaaa to suppress AAAA queries. W.C.A. Wijngaards 2026-07-24 08:53:30 +02:00
  • c8b3c89a39 Add new static zone type block_aaaa to suppress AAAA queries (#1433) JisakielandJisakiel 2026-07-24 07:52:20 +01:00