Revisions of unbound

Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1156332 from Jorik Cronenberg's avatar Jorik Cronenberg (jcronenberg) (revision 65)
- Update to 1.19.2 [bsc#1221164, CVE-2024-1931]
- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start
- Use prefixes instead of sudo in unbound.service (boo#1215628)
Ana Guerrero's avatar Ana Guerrero (anag+factory) accepted request 1105588 from Marcus Rueckert's avatar Marcus Rueckert (darix) (revision 61)
- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.

- openSUSE:Factory libunbound-devel-mini flavor is configured to
  sync build counter with unbound package. This means it always
  triggers a bootstrap no matter which of the packages got
  initially triggered.
  I am not sure if this is needed at all, if yes, please accept
  this request and forward with an explenation.
  If not, just decline it and we will remove the build counter
  syncing in factory as well.
  This adds the !BcntSyncTag: unbound to the mini spec file
  Details:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/6GUU6JUQE72WCWEZCSLQYJLVVTNHBVTE/

- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1032866 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 59)
Automatic submission by obs-autosubmit
Richard Brown's avatar Richard Brown (RBrownFactory) accepted request 1006106 from Marcus Rueckert's avatar Marcus Rueckert (darix) (revision 58)
- update to 1.16.3
  fixes Non-Responsive Delegation Attack (CVE-2022-3204)

- update to 1.16.3
  fixes Non-Responsive Delegation Attack (CVE-2022-3204)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 992044 from Marcus Rueckert's avatar Marcus Rueckert (darix) (revision 57)
- update to 1.16.2 (boo#1202031 boo#1202033)
  * Features
    - Merge #718: Introduce infra-cache-max-rtt option to config max
      retransmit timeout.
  * Bug Fixes
    - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
    - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
      one loop pass'.
    - Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on
      outbound tcp sockets.
    - Fix verbose EDE error printout.
    - Fix dname count in sldns parse type descriptor for SVCB and HTTPS.
    - For windows crosscompile, fix setting the IPV6_MTU socket option
      equivalent (IPV6_USER_MTU); allows cross compiling with latest
      cross-compiler versions.
    - Merge PR 714: Avoid treat normal hosts as unresponsive servers.
      And fixup the lock code.
    - iana portlist update.
    - Update documentation for 'outbound-msg-retry:'.
    - Tests for ghost domain fixes.

- update to 1.16.2 (boo#1202031 boo#1202033)
  * Features
    - Merge #718: Introduce infra-cache-max-rtt option to config max
      retransmit timeout.
  * Bug Fixes
    - Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.
    - Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
      one loop pass'.
    - Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on
Fabian Vogt's avatar Fabian Vogt (favogt_factory) accepted request 989870 from Factory Maintainer's avatar Factory Maintainer (factory-maintainer) (revision 56)
Automatic submission by obs-autosubmit
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 974922 from Marcus Rueckert's avatar Marcus Rueckert (darix) (revision 54)
update to 1.15.0 and switching to sysuser
Displaying revisions 1 - 20 of 66
openSUSE Build Service is sponsored by