Unbound

Recent Commits

• Alex Band (08 Jun 26)

  change mailing list to forum

• W.C.A. Wijngaards (03 Jun 26)

  - Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks if there is a reply before cache store, also unbound checks if A and AAAA are malformed for auth-zones. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix that dump_cache has a larger buffer for records, and it checks that an owner name does not collide with BADRR on the input, and changes verbosity on the log of failure in rrset to string. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix that validation canonicalization of domain names in rdata checks for buffer bounds. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix fast_reload for when a ZONEMD lookup is in progress. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix negative cache NSEC3 nodata proof, to use the correct message size. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix PROXYv2 header read and consume, it checks the header size. Thanks to Qifan Zhang, Palo Alto Networks for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix ipset module to use larger domain name buffers, and check buffer lengths. Thanks to Qifan Zhang, Palo Alto Networks for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix that quotation and escaping works the same in auth-zone url content, as in the zonefile read. Thanks to Qifan Zhang, Palo Alto Networks for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix parse of svcbparam ech, it had incorrect length. Thanks to Qifan Zhang, Palo Alto Networks for the report.

• Yorgos Thessalonikefs (03 Jun 26)

  - Fix const as reported by newest compiler warnings.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix negative cache to work with NSEC3 records without salt. Thanks to Xin Wang, Jiapeng Li, and Jiajia Liu, Northwestern Polytechnical University, for the report.

• W.C.A. Wijngaards (03 Jun 26)

  - Fix that the processing of class responses does not have a heap use-after-free. That could happen if at least two distinct classes are configured for resolution. Thanks to Qifan Zhang, Palo Alto Networks for the report. In addition, thanks to Xin Wang, Jiapeng Li, and Jiajia Liu, Northwestern Polytechnical University, for also reporting this.

• W.C.A. Wijngaards (29 May 26)

  - Fix unit test to check for new icannbundle.pem.

• W.C.A. Wijngaards (29 May 26)

  - Update icannbundle.pem certificates in unbound-anchor. It has the public keys for 2009 to 2029 and for 2025 to 2045.

• W.C.A. Wijngaards (29 May 26)

  - iana portlist updated.

• W.C.A. Wijngaards (29 May 26)

  - Fix header_seen detection for trust anchor files, so that it detects the id line.

• W.C.A. Wijngaards (28 May 26)

  - Fix #1457: race condition causes segfault when starting threads.

• W.C.A. Wijngaards (27 May 26)

  - Fix analyzer warning in mesh_new_client.

• W.C.A. Wijngaards (27 May 26)

  - Fix that validator caps number of ANY RRsets it can validate, and the wait timer is shortened. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix ipset module for name too long checks, race conditions on local name buffer, and for socket close race condition. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix that dns64 with subnetcache does not write ECS scoped answers to global cache. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix, in depth, for respip rewrite of dns64 responses. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix manual to document ratelimit, that it is for target nameservers for a domain, and keeps queries limited. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix to decrement the per-netblock tcp connection limits, so it keeps usable. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix to reset the tcp-timeout before applying a load based reduction. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix that msgencode insert_query has the correct assertion, for a local_alias. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix that the ratelimit is decremented on successful referrals. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix to limit the DSNS per-label walk in the iterator. Thanks to Qifan Zhang, Palo Alto Networks, for the report.

• W.C.A. Wijngaards (27 May 26)

  - Fix for autotrust state-file line overflow, that can give hold-down bypass. Thanks to Qifan Zhang, Palo Alto Networks, for the report.