Update to 1.22.0

• Files Changed
• Browse Source

Fix version number in changelog

• Files Changed
• Browse Source

- Update to 1.21.0:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
- Update keyring
- Update to 1.21.0:
  Security Fixes:
  * Fix CVE-2024-8508, unbounded name compression could lead to
    denial of service.
    [CVE-2024-8508, bsc#1231284]
- Update keyring

• Files Changed
• Browse Source

- Update to 1.21.0:
  [CVE-2024-43167, bsc#1229068]

• Files Changed
• Browse Source

Update to 1.20.0

• Files Changed
• Browse Source

Update to 1.19.3

• Files Changed
• Browse Source

- Update to 1.19.2 [bsc#1221164, CVE-2024-1931]
- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start
- Use prefixes instead of sudo in unbound.service (boo#1215628)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Update to 1.18.0:

• Files Changed
• Browse Source

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

- openSUSE:Factory libunbound-devel-mini flavor is configured to
  sync build counter with unbound package. This means it always
  triggers a bootstrap no matter which of the packages got
  initially triggered.
  I am not sure if this is needed at all, if yes, please accept
  this request and forward with an explenation.
  If not, just decline it and we will remove the build counter
  syncing in factory as well.
  This adds the !BcntSyncTag: unbound to the mini spec file
  Details:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6GUU6JUQE72WCWEZCSLQYJLVVTNHBVTE/

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

• Files Changed
• Browse Source

- Update to 1.17.1:

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- update to 1.16.3
  fixes Non-Responsive Delegation Attack (CVE-2022-3204)

- update to 1.16.3
  fixes Non-Responsive Delegation Attack (CVE-2022-3204)

• Files Changed
• Browse Source

- update to 1.16.2 (boo#1202031 boo#1202033)
  * Features
    - Merge #718: Introduce infra-cache-max-rtt option to config max
      retransmit timeout.
  * Bug Fixes
    - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
    - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
      one loop pass'.
    - Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on
      outbound tcp sockets.
    - Fix verbose EDE error printout.
    - Fix dname count in sldns parse type descriptor for SVCB and HTTPS.
    - For windows crosscompile, fix setting the IPV6_MTU socket option
      equivalent (IPV6_USER_MTU); allows cross compiling with latest
      cross-compiler versions.
    - Merge PR 714: Avoid treat normal hosts as unresponsive servers.
      And fixup the lock code.
    - iana portlist update.
    - Update documentation for 'outbound-msg-retry:'.
    - Tests for ghost domain fixes.

- update to 1.16.2 (boo#1202031 boo#1202033)
  * Features
    - Merge #718: Introduce infra-cache-max-rtt option to config max
      retransmit timeout.
  * Bug Fixes
    - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
    - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
      one loop pass'.
    - Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

update to 1.15.0 and switching to sysuser

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source