Awesome Privacy

Recent Commits

• Yorgos Thessalonikefs (03 Oct 24)

  - The fix for CVE-2024-8508 was part of 1.21.1, a security point release on 1.21.0. The code repository continues with this fix and the version number 1.22.0.

• Yorgos Thessalonikefs (03 Oct 24)

  Merge branch 'release-1.21.1'

• Yorgos Thessalonikefs (03 Oct 24)

  - Fix CVE-2024-8508, unbounded name compression could lead to denial of service.

• Yorgos Thessalonikefs (03 Oct 24)

  - Set version to 1.21.1

• W.C.A. Wijngaards (30 Sept 24)

  - Fix unbound dnstap socket test program analyzer warnings about unused variable assignments and variable initialization.

• W.C.A. Wijngaards (30 Sept 24)

  - Fix negative cache NSEC3 parameter compares for zero length NSEC3 salt.

• W.C.A. Wijngaards (25 Sept 24)

  - Fix #1144: [FR] log timestamps in ISO8601 format with timezone. This adds the option `log-time-iso: yes` that logs in ISO8601 format.

• Yorgos Thessalonikefs (24 Sept 24)

  Changelog entry for #1143: - Merge #1143: Fix cache update when serve expired is used. Expired records are favored over resolution and validation failures when serve-expired is used.

• Yorgos Thessalonikefs (24 Sept 24)

  Fix cache update when serve expired is used (#1143) - Fix cache update when serve expired is used in order to not evict still usable expired records. Modules are forbidden to update the cache if their answer is DNSSEC unchecked or bogus and a valid (expired) entry already exists. Bogus replies from the validator are also discarded in favor of existing (expired) valid replies. - serve-expired-ttl-reset should try to keep expired records in the cache in case they are reset.

• Yorgos Thessalonikefs (24 Sept 24)

  - More clear text for prefetch and minimal-responses in the unbound.conf man page.

• Yorgos Thessalonikefs (24 Sept 24)

  - Attempt to further fix doh_downstream_buffer_size.tdir flakiness.

• Yorgos Thessalonikefs (23 Sept 24)

  - Fix doxygen warnings by commenting out CLANG_ASSISTED_PARSING, CLANG_ADD_INC_PATHS, CLANG_OPTIONS and CLANG_DATABASE_PATH; they were already disabled.

• W.C.A. Wijngaards (23 Sept 24)

  - Fix dns64 with prefetch that the prefetch is stored in cache.

• W.C.A. Wijngaards (17 Sept 24)

  - Add redis-command-timeout: 20 and redis-connect-timeout: 200, that can set the timeout separately for commands and the connection set up to the redis server. If they are not specified, the redis-timeout value is used.

• W.C.A. Wijngaards (16 Sept 24)

  Changelog comment for #1140. - Merge #1140: Fix spelling mistake in comments.

• Tochus (16 Sept 24)

  Fix spelling mistake in comments (#1140) I noticed a spelling mistake in the comments. The term “chain of trust” was incorrectly written as “chainoftrust”. This change corrects the spelling to “chain of trust” which is the correct term used in English.

• Yorgos Thessalonikefs (11 Sept 24)

  - Fix and add comments in testdata/val_negcache_ttl.rpl.

• W.C.A. Wijngaards (10 Sept 24)

  - Add unit test for ttl limit for aggressive nsec.

• W.C.A. Wijngaards (10 Sept 24)

  - Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled (RFC9077).

• Yorgos Thessalonikefs (06 Sept 24)

  - Fix comment to not trigger doxygen unknown command.

• Yorgos Thessalonikefs (06 Sept 24)

  - Fix alloc-size and calloc-transposed-args compiler warnings.

• W.C.A. Wijngaards (05 Sept 24)

  - Fix config file read for dnstap-sample-rate.

• W.C.A. Wijngaards (02 Sept 24)

  Changelog note for #1135 - Merge #1135: Add new IANA trust anchor.

• Keelan Cannoo (02 Sept 24)

  Add new IANA trust anchor (#1135) Signed-off-by: Keelan Cannoo <[email protected]> Co-authored-by: Keelan10 <[email protected]>

• W.C.A. Wijngaards (30 Aug 24)

  - Fix for #1132, comment about adjusted copy of reference check.

• W.C.A. Wijngaards (30 Aug 24)

  Changelog note for #1132 and fix for #1132. - Merge #1132: b.root renumbering. - Fix for #1132, adjusted unit test for change in the test file.

• Loganaden Velvindron (30 Aug 24)

  b.root renumbering (#1132) https://b.root-servers.org/news/2023/05/16/new-addresses.html Worked together with Jaykishan Muktawoa <[email protected]>

• W.C.A. Wijngaards (29 Aug 24)

  - Fix to print port number in logs for auth zone transfer activities.

• W.C.A. Wijngaards (29 Aug 24)

  - Unit test for auth zone transfer TLS, and TLS failure.

• W.C.A. Wijngaards (28 Aug 24)

  - Fix that stub-zone and forward-zone clauses do not exhaust memory for long content.