Commit Graph
8613 Commits
Author SHA1 Message Date
W.C.A. Wijngaards ea96dcf166 Merge branch 'master' into auth-load-thread 2026-10-16 11:29:58 +02:00
W.C.A. Wijngaards d648eac68d - Fix unit test for root_zonemd with updated root key. 2026-10-16 11:29:30 +02:00
W.C.A. Wijngaards 0c4b782c8e - auth-load-thread, implement RPZ IXFR copy for auth load thread. Add unit
test for IXFR with auth load thread.
2026-10-15 15:55:33 +02:00
W.C.A. Wijngaards 8f022e1aa5 - auth-load-thread, release thread count when auth load thread is stopped
during fast_reload.
2026-10-15 11:49:57 +02:00
W.C.A. Wijngaards 7380fd7107 - auth-load-thread, unit test that exercises the reload and exit auth load
thread administration.
2026-10-15 11:16:23 +02:00
W.C.A. Wijngaards 456c85544b - auth-load-thread, fix to not log write error when auth load thread receives
a quit signal.
2026-10-15 11:03:45 +02:00
W.C.A. Wijngaards 276a2db8af - auth-load-thread, fix double delete on auth load thread create failure. 2026-10-15 11:00:48 +02:00
W.C.A. Wijngaards 6180f1b6d0 - auth-load-thread, close file when auth load thread receives quit signal. 2026-10-15 10:58:33 +02:00
W.C.A. Wijngaards 0acb0ab631 - auth-load-thread, release thread count when auth load thread is stopped
during reload and exit. Delete resume timer on cleanup for reload and exit.
2026-10-15 10:19:56 +02:00
W.C.A. Wijngaards cd0a585fbe Merge branch 'master' into auth-load-thread 2026-10-13 15:56:17 +02:00
Yorgos Thessalonikefs d1ea227e94 - Fix #1526: Root Server h.root-servers.net has been included for Zone
Transfer Service by including it in the example configuration.
2026-10-13 14:49:39 +02:00
W.C.A. Wijngaards 18d8676e9c - Fix dns64 synthesis and cache with subnet module enabled.
The subnet module stopped a cache store, that caused later
  dns64 replies to have a nodata answer for the AAAA.
2026-10-13 09:51:19 +02:00
W.C.A. Wijngaards 7c624d1dcd - auth-load-thread, fix pick up of active transfer after full list.
Add unit test for list of auth transfers.
2026-10-09 15:55:21 +02:00
W.C.A. Wijngaards e23010c18e - auth-load-thread, more generic result handling of the thread. 2026-10-09 09:47:13 +02:00
W.C.A. Wijngaards ddcbc291fe - auth-load-thread, delete threads postorder. 2026-10-07 11:48:21 +02:00
W.C.A. Wijngaards a119b1abc6 - auth-load-thread, init tree after stopping authloadthreads for worker. 2026-10-07 11:26:17 +02:00
W.C.A. Wijngaards f62214e714 - auth-load-thread, account write threads, unit test for zonefile write. 2026-10-07 11:10:16 +02:00
W.C.A. Wijngaards 3d1aaae57a - auth-load-thread, track thread in worker tree insertion. Remove unused
lines from compare function.
2026-10-07 10:30:57 +02:00
W.C.A. Wijngaards 614dcbf675 - auth-load-thread, quit auth load threads on exit and reload, and also
when fast_reload changes or deletes a zone.
2026-10-06 16:51:23 +02:00
W.C.A. Wijngaards add0065c43 - auth-load-thread, write to zonefile polls for thread quit. 2026-10-06 15:07:54 +02:00
W.C.A. Wijngaards 3d53f08bd8 - auth-load-thread, write to zonefile with thread. 2026-10-06 14:39:41 +02:00
W.C.A. Wijngaards 0dcd4cd2e8 - auth-load-thread, fix unit test for auth load rpz threads check. 2026-10-06 11:45:57 +02:00
W.C.A. Wijngaards b449d6f713 - auth-load-thread, documentation for auth-task-threads and tests disable
when there is no threading.
2026-10-06 11:44:29 +02:00
W.C.A. Wijngaards 6932ae18f5 - auth-load-thread, swap rpz contents, not config. Test for auth load rpz. 2026-10-06 11:29:54 +02:00
W.C.A. Wijngaards e2537840ba - auth-load-thread, setup RPZ after IXFR and AXFR processing. 2026-10-06 10:38:32 +02:00
W.C.A. Wijngaards b425be8e10 - auth-load-thread, resume waiting transfers. 2026-10-06 09:54:03 +02:00
W.C.A. Wijngaards bb408e503c - auth-load-thread, add num auth transfers and wait_transfer list. 2026-10-05 16:44:10 +02:00
W.C.A. Wijngaards 8942d11bb3 - auth-load-thread, fix for merge and http chunk list delete. 2026-10-05 09:19:59 +02:00
W.C.A. Wijngaards cb027ae649 Merge branch 'master' into auth-load-thread 2026-10-05 09:02:28 +02:00
Yorgos Thessalonikefs eafb027166 - Document libunbound's context lifetime during an async callback.
Thanks to Omar Mousa for the suggestion.
2026-10-02 16:01:19 +02:00
W.C.A. Wijngaards 40d36cda61 - Fix to allow for large (64Kb) packets with testbound. 2026-09-28 14:47:00 +02:00
W.C.A. Wijngaards 8cf2202c52 Changelog note and remove hash call assertion.
- Merge #1518 from nshopik: rrset: rehash copies after
  changing the key.
2026-09-28 11:56:09 +02:00
Nikolay ShopikandGitHub f6fff9efcb rrset: rehash copies after changing the key (#1518)
Copied rrsets that got a new owner name or flags kept the hash of
the source, so the rrset cache filed all of them in one hash bin.
Recompute the hash at each such site and assert it on cache update.
2026-09-28 11:53:24 +02:00
W.C.A. Wijngaards 97c001f9dd - Fix to log the errno for trust anchor write close fail. 2026-09-28 09:40:44 +02:00
Yorgos Thessalonikefs 1e12bef540 - Update generated man pages. 2026-09-22 12:17:02 +02:00
Yorgos Thessalonikefs b49f452f0a - Clarify man page text for harden-short-bufsize. 2026-09-22 12:14:14 +02:00
Yorgos Thessalonikefs 8820254637 - Move NORMAL_UDP_SIZE around. 2026-09-22 12:01:42 +02:00
Yorgos Thessalonikefs 5483a73856 - Fix #1513: [FR] Size of harden-large-queries in the man page. 2026-09-22 11:59:45 +02:00
Yorgos Thessalonikefs 0e2470450c - Fix #1514: [FR] do-not-query-localhost is not including
0.0.0.0/8 and ‘::’ in the manpage.
2026-09-22 10:43:25 +02:00
Yorgos Thessalonikefs 65814ad6f3 Changelog entry for #1510:
- Merge #1510 from Andy Warner: Move unlink of temp file to before
  fatal exit.
2026-09-21 14:13:00 +02:00
Yorgos ThessalonikefsandGitHub 97d6cc3643 Merge pull request #1510 from aww-aww/patch-1
Move unlink of temp file to before fatal exit
2026-09-21 14:08:55 +02:00
Andy WarnerandGitHub e79365ec61 Move unlink of temp file to before fatal exit
Ensure temporary file is deleted only on failure. As written this would never be executed.
2026-09-21 03:51:24 -06:00
W.C.A. Wijngaards a7fc80d8c5 - Unit test for CVE-2026-85501. 2026-09-16 10:47:44 +02:00
W.C.A. Wijngaards 5d89e0c2a7 - Unit test for CVE-2026-82717. 2026-09-16 10:44:49 +02:00
W.C.A. Wijngaards b45c8b4b53 - The code repository continues with 1.26.2 under development,
that includes the changes from before the 1.26.1 commits.
2026-09-16 10:34:06 +02:00
W.C.A. Wijngaards a6586ced92 Merge branch 'branch-1.26.1' 2026-09-16 10:26:54 +02:00
W.C.A. Wijngaards 13b6717f17 - Fix CVE-2026-85501, Retrap: Novel Vulnerabilities to launch
Algorithmic Complexity Attacks on DNSSEC. Thanks to Zuyao Xu and
  Xiang Li from Nankai University, AOSP Lab for the report. In
  addition, thanks to Qifan Zhang from Palo Alto Networks for a
  complimentary report.
release-1.26.1
2026-09-16 09:30:25 +02:00
W.C.A. Wijngaards 0d4a6a63dd - Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption.
Thanks to Ben Morris from Anthropic for the report.
2026-09-16 09:29:32 +02:00
W.C.A. Wijngaards bd71e3b8a6 - Fix CVE-2026-77860, 'serve-expired' can bypass Unbound 'wait-limit'.
Thanks to Xuanchao Xie, Lutong Chen, and Kaiping Xue from the
  University of Science and Technology of China (USTC) for the
  report.
2026-09-16 09:29:04 +02:00
W.C.A. Wijngaards 3a6ba0da81 - Unit test for CVE-2026-81642 fix. 2026-09-16 09:28:11 +02:00