CVSROOT: /cvs
Module name: src
Changes by: st...@cvs.openbsd.org 2020/05/19 02:48:03
Log message:
import unbound 1.10.1
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.
Status:
Vendor Tag: NLNETLABS
Release Tags: UNBOUND_1_10_1
U src/usr.sbin/unbound/ac_pkg_swig.m4
U src/usr.sbin/unbound/config.guess
U src/usr.sbin/unbound/config.h.in
U src/usr.sbin/unbound/ax_pthread.m4
U src/usr.sbin/unbound/acx_python.m4
C src/usr.sbin/unbound/configure.ac
U src/usr.sbin/unbound/acx_nlnetlabs.m4
U src/usr.sbin/unbound/Makefile.in
C src/usr.sbin/unbound/configure
U src/usr.sbin/unbound/install-sh
U src/usr.sbin/unbound/README.md
U src/usr.sbin/unbound/LICENSE
U src/usr.sbin/unbound/systemd.m4
U src/usr.sbin/unbound/config.sub
U src/usr.sbin/unbound/aclocal.m4
U src/usr.sbin/unbound/ltmain.sh
U src/usr.sbin/unbound/validator/val_nsec.c
U src/usr.sbin/unbound/validator/val_nsec3.h
U src/usr.sbin/unbound/validator/validator.h
U src/usr.sbin/unbound/validator/val_anchor.h
U src/usr.sbin/unbound/validator/val_utils.c
U src/usr.sbin/unbound/validator/validator.c
U src/usr.sbin/unbound/validator/val_neg.h
U src/usr.sbin/unbound/validator/autotrust.c
U src/usr.sbin/unbound/validator/val_kentry.h
U src/usr.sbin/unbound/validator/val_sigcrypt.c
U src/usr.sbin/unbound/validator/val_kcache.h
U src/usr.sbin/unbound/validator/val_nsec.h
U src/usr.sbin/unbound/validator/val_anchor.c
U src/usr.sbin/unbound/validator/val_utils.h
U src/usr.sbin/unbound/validator/val_secalgo.c
U src/usr.sbin/unbound/validator/val_kcache.c
U src/usr.sbin/unbound/validator/val_secalgo.h
U src/usr.sbin/unbound/validator/val_nsec3.c
U src/usr.sbin/unbound/validator/val_neg.c
U src/usr.sbin/unbound/validator/autotrust.h
U src/usr.sbin/unbound/validator/val_kentry.c
U src/usr.sbin/unbound/validator/val_sigcrypt.h
U src/usr.sbin/unbound/services/modstack.c
U src/usr.sbin/unbound/services/view.h
U src/usr.sbin/unbound/services/localzone.c
U src/usr.sbin/unbound/services/mesh.h
U src/usr.sbin/unbound/services/listen_dnsport.c
U src/usr.sbin/unbound/services/view.c
U src/usr.sbin/unbound/services/listen_dnsport.h
U src/usr.sbin/unbound/services/outside_network.c
U src/usr.sbin/unbound/services/authzone.c
U src/usr.sbin/unbound/services/rpz.h
U src/usr.sbin/unbound/services/modstack.h
U src/usr.sbin/unbound/services/outbound_list.c
U src/usr.sbin/unbound/services/outbound_list.h
U src/usr.sbin/unbound/services/outside_network.h
U src/usr.sbin/unbound/services/rpz.c
U src/usr.sbin/unbound/services/localzone.h
U src/usr.sbin/unbound/services/mesh.c
U src/usr.sbin/unbound/services/authzone.h
U src/usr.sbin/unbound/services/cache/infra.h
C src/usr.sbin/unbound/services/cache/dns.c
U src/usr.sbin/unbound/services/cache/dns.h
U src/usr.sbin/unbound/services/cache/rrset.c
U src/usr.sbin/unbound/services/cache/infra.c
U src/usr.sbin/unbound/services/cache/rrset.h
U src/usr.sbin/unbound/iterator/iter_resptype.h
U src/usr.sbin/unbound/iterator/iter_fwd.c
C src/usr.sbin/unbound/iterator/iter_utils.c
C src/usr.sbin/unbound/iterator/iterator.c
U src/usr.sbin/unbound/iterator/iter_scrub.h
U src/usr.sbin/unbound/iterator/iter_resptype.c
C src/usr.sbin/unbound/iterator/iter_delegpt.c
U src/usr.sbin/unbound/iterator/iter_fwd.h
U src/usr.sbin/unbound/iterator/iter_hints.h
C src/usr.sbin/unbound/iterator/iter_scrub.c
U src/usr.sbin/unbound/iterator/iter_donotq.h
U src/usr.sbin/unbound/iterator/iter_priv.c
U src/usr.sbin/unbound/iterator/iter_hints.c
C src/usr.sbin/unbound/iterator/iterator.h
U src/usr.sbin/unbound/iterator/iter_priv.h
U src/usr.sbin/unbound/iterator/iter_donotq.c
U src/usr.sbin/unbound/iterator/iter_utils.h
C src/usr.sbin/unbound/iterator/iter_delegpt.h
U src/usr.sbin/unbound/doc/requirements.txt
C src/usr.sbin/unbound/doc/unbound-checkconf.8.in
U src/usr.sbin/unbound/doc/FEATURES
U src/usr.sbin/unbound/doc/Changelog
U src/usr.sbin/unbound/doc/README.tests
C src/usr.sbin/unbound/doc/example.conf.in
C src/usr.sbin/unbound/doc/libunbound.3.in
C src/usr.sbin/unbound/doc/unbound.conf.5.in
U src/usr.sbin/unbound/doc/README.DNS64
U src/usr.sbin/unbound/doc/README.svn
U src/usr.sbin/unbound/doc/control_proto_spec.txt
U src/usr.sbin/unbound/doc/TODO
C src/usr.sbin/unbound/doc/unbound-host.1.in
C src/usr.sbin/unbound/doc/unbound.8.in
C src/usr.sbin/unbound/doc/unbound-anchor.8.in
U src/usr.sbin/unbound/doc/LICENSE
C src/usr.sbin/unbound/doc/README
U src/usr.sbin/unbound/doc/unbound.doxygen
U src/usr.sbin/unbound/doc/CREDITS
C src/usr.sbin/unbound/doc/unbound-control.8.in
U src/usr.sbin/unbound/doc/README.ipset.md
U src/usr.sbin/unbound/sldns/parseutil.h
U src/usr.sbin/unbound/sldns/wire2str.h
U src/usr.sbin/unbound/sldns/sbuffer.c
U src/usr.sbin/unbound/sldns/parseutil.c
U src/usr.sbin/unbound/sldns/keyraw.h
U src/usr.sbin/unbound/sldns/sbuffer.h
U src/usr.sbin/unbound/sldns/keyraw.c
U src/usr.sbin/unbound/sldns/parse.h
U src/usr.sbin/unbound/sldns/rrdef.h
U src/usr.sbin/unbound/sldns/parse.c
U src/usr.sbin/unbound/sldns/str2wire.h
U src/usr.sbin/unbound/sldns/rrdef.c
U src/usr.sbin/unbound/sldns/pkthdr.h
U src/usr.sbin/unbound/sldns/wire2str.c
U src/usr.sbin/unbound/sldns/str2wire.c
U src/usr.sbin/unbound/edns-subnet/subnet-whitelist.c
U src/usr.sbin/unbound/edns-subnet/subnetmod.c
U src/usr.sbin/unbound/edns-subnet/subnetmod.h
U src/usr.sbin/unbound/edns-subnet/addrtree.h
U src/usr.sbin/unbound/edns-subnet/edns-subnet.c
U src/usr.sbin/unbound/edns-subnet/edns-subnet.h
U src/usr.sbin/unbound/edns-subnet/subnet-whitelist.h
U src/usr.sbin/unbound/edns-subnet/addrtree.c
U src/usr.sbin/unbound/smallapp/unbound-control.c
U src/usr.sbin/unbound/smallapp/unbound-checkconf.c
U src/usr.sbin/unbound/smallapp/unbound-anchor.c
U src/usr.sbin/unbound/smallapp/worker_cb.c
U src/usr.sbin/unbound/smallapp/unbound-host.c
U src/usr.sbin/unbound/smallapp/unbound-control-setup.sh.in
U src/usr.sbin/unbound/libunbound/libunbound.c
U src/usr.sbin/unbound/libunbound/ubsyms.def
U src/usr.sbin/unbound/libunbound/unbound.h
U src/usr.sbin/unbound/libunbound/worker.h
U src/usr.sbin/unbound/libunbound/libworker.c
U src/usr.sbin/unbound/libunbound/unbound-event.h
U src/usr.sbin/unbound/libunbound/context.c
U src/usr.sbin/unbound/libunbound/context.h
U src/usr.sbin/unbound/libunbound/libworker.h
U src/usr.sbin/unbound/respip/respip.c
U src/usr.sbin/unbound/respip/respip.h
U src/usr.sbin/unbound/testcode/checklocks.c
U src/usr.sbin/unbound/testcode/streamtcp.1
U src/usr.sbin/unbound/testcode/unitregional.c
U src/usr.sbin/unbound/testcode/memstats.c
U src/usr.sbin/unbound/testcode/perf.c
U src/usr.sbin/unbound/testcode/testpkts.c
U src/usr.sbin/unbound/testcode/replay.h
U src/usr.sbin/unbound/testcode/unitldns.c
U src/usr.sbin/unbound/testcode/petal.c
U src/usr.sbin/unbound/testcode/do-tests.sh
U src/usr.sbin/unbound/testcode/lock_verify.c
U src/usr.sbin/unbound/testcode/readhex.h
U src/usr.sbin/unbound/testcode/unitneg.c
U src/usr.sbin/unbound/testcode/unitauth.c
U src/usr.sbin/unbound/testcode/streamtcp.c
U src/usr.sbin/unbound/testcode/run_vm.sh
U src/usr.sbin/unbound/testcode/unitecs.c
U src/usr.sbin/unbound/testcode/unitanchor.c
U src/usr.sbin/unbound/testcode/unitmsgparse.c
U src/usr.sbin/unbound/testcode/delayer.c
U src/usr.sbin/unbound/testcode/mini_tpkg.sh
U src/usr.sbin/unbound/testcode/unitmain.h
U src/usr.sbin/unbound/testcode/readhex.c
U src/usr.sbin/unbound/testcode/fake_event.h
U src/usr.sbin/unbound/testcode/checklocks.h
U src/usr.sbin/unbound/testcode/unitmain.c
U src/usr.sbin/unbound/testcode/pktview.c
U src/usr.sbin/unbound/testcode/testpkts.h
U src/usr.sbin/unbound/testcode/asynclook.c
U src/usr.sbin/unbound/testcode/unitverify.c
U src/usr.sbin/unbound/testcode/unitlruhash.c
U src/usr.sbin/unbound/testcode/unitdname.c
U src/usr.sbin/unbound/testcode/replay.c
U src/usr.sbin/unbound/testcode/unitslabhash.c
U src/usr.sbin/unbound/testcode/mini_tdir.sh
U src/usr.sbin/unbound/testcode/fake_event.c
U src/usr.sbin/unbound/testcode/signit.c
U src/usr.sbin/unbound/testcode/testbound.c
U src/usr.sbin/unbound/dnscrypt/dnscrypt.m4
U src/usr.sbin/unbound/dnscrypt/dnscrypt.c
U src/usr.sbin/unbound/dnscrypt/dnscrypt_config.h.in
U src/usr.sbin/unbound/dnscrypt/cert.h
U src/usr.sbin/unbound/dnscrypt/dnscrypt.h
U src/usr.sbin/unbound/daemon/worker.h
U src/usr.sbin/unbound/daemon/cachedump.c
U src/usr.sbin/unbound/daemon/daemon.c
U src/usr.sbin/unbound/daemon/remote.c
U src/usr.sbin/unbound/daemon/stats.c
U src/usr.sbin/unbound/daemon/worker.c
U src/usr.sbin/unbound/daemon/daemon.h
U src/usr.sbin/unbound/daemon/remote.h
U src/usr.sbin/unbound/daemon/unbound.c
U src/usr.sbin/unbound/daemon/acl_list.h
U src/usr.sbin/unbound/daemon/cachedump.h
U src/usr.sbin/unbound/daemon/stats.h
U src/usr.sbin/unbound/daemon/acl_list.c
U src/usr.sbin/unbound/dnstap/dnstap.h
U src/usr.sbin/unbound/dnstap/dnstap_config.h.in
U src/usr.sbin/unbound/dnstap/dnstap.c
U src/usr.sbin/unbound/dnstap/dnstap.proto
U src/usr.sbin/unbound/dnstap/dnstap.m4
U src/usr.sbin/unbound/dns64/dns64.h
U src/usr.sbin/unbound/dns64/dns64.c
U src/usr.sbin/unbound/ipsecmod/ipsecmod.h
U src/usr.sbin/unbound/ipsecmod/ipsecmod.c
U src/usr.sbin/unbound/ipsecmod/ipsecmod-whitelist.h
U src/usr.sbin/unbound/ipsecmod/ipsecmod-whitelist.c
U src/usr.sbin/unbound/util/ub_event.c
U src/usr.sbin/unbound/util/ub_event_pluggable.c
U src/usr.sbin/unbound/util/winsock_event.c
U src/usr.sbin/unbound/util/rbtree.h
U src/usr.sbin/unbound/util/module.h
U src/usr.sbin/unbound/util/configyyrename.h
U src/usr.sbin/unbound/util/edns.h
U src/usr.sbin/unbound/util/timehist.c
U src/usr.sbin/unbound/util/tcp_conn_limit.c
U src/usr.sbin/unbound/util/locks.h
U src/usr.sbin/unbound/util/rtt.c
U src/usr.sbin/unbound/util/as112.c
U src/usr.sbin/unbound/util/tube.h
U src/usr.sbin/unbound/util/ub_event.h
U src/usr.sbin/unbound/util/net_help.h
U src/usr.sbin/unbound/util/edns.c
U src/usr.sbin/unbound/util/log.c
U src/usr.sbin/unbound/util/configparser.y
U src/usr.sbin/unbound/util/rbtree.c
U src/usr.sbin/unbound/util/regional.h
U src/usr.sbin/unbound/util/module.c
U src/usr.sbin/unbound/util/alloc.c
U src/usr.sbin/unbound/util/config_file.h
U src/usr.sbin/unbound/util/random.c
U src/usr.sbin/unbound/util/timehist.h
U src/usr.sbin/unbound/util/config_file.c
U src/usr.sbin/unbound/util/fptr_wlist.c
U src/usr.sbin/unbound/util/fptr_wlist.h
U src/usr.sbin/unbound/util/netevent.h
U src/usr.sbin/unbound/util/alloc.h
U src/usr.sbin/unbound/util/configlexer.lex
U src/usr.sbin/unbound/util/tube.c
U src/usr.sbin/unbound/util/tcp_conn_limit.h
U src/usr.sbin/unbound/util/regional.c
U src/usr.sbin/unbound/util/mini_event.c
U src/usr.sbin/unbound/util/net_help.c
U src/usr.sbin/unbound/util/as112.h
U src/usr.sbin/unbound/util/rtt.h
U src/usr.sbin/unbound/util/mini_event.h
U src/usr.sbin/unbound/util/iana_ports.inc
U src/usr.sbin/unbound/util/random.h
U src/usr.sbin/unbound/util/netevent.c
U src/usr.sbin/unbound/util/log.h
U src/usr.sbin/unbound/util/locks.c
U src/usr.sbin/unbound/util/winsock_event.h
U src/usr.sbin/unbound/util/storage/lookup3.h
U src/usr.sbin/unbound/util/storage/dnstree.c
U src/usr.sbin/unbound/util/storage/lookup3.c
U src/usr.sbin/unbound/util/storage/lruhash.c
U src/usr.sbin/unbound/util/storage/lruhash.h
U src/usr.sbin/unbound/util/storage/dnstree.h
U src/usr.sbin/unbound/util/storage/slabhash.h
U src/usr.sbin/unbound/util/storage/slabhash.c
U src/usr.sbin/unbound/util/data/packed_rrset.h
U src/usr.sbin/unbound/util/data/msgencode.h
U src/usr.sbin/unbound/util/data/msgparse.h
U src/usr.sbin/unbound/util/data/packed_rrset.c
U src/usr.sbin/unbound/util/data/msgreply.c
U src/usr.sbin/unbound/util/data/msgencode.c
U src/usr.sbin/unbound/util/data/dname.h
U src/usr.sbin/unbound/util/data/msgreply.h
C src/usr.sbin/unbound/util/data/msgparse.c
C src/usr.sbin/unbound/util/data/dname.c
U src/usr.sbin/unbound/util/shm_side/shm_main.h
U src/usr.sbin/unbound/util/shm_side/shm_main.c
U src/usr.sbin/unbound/cachedb/cachedb.h
U src/usr.sbin/unbound/cachedb/cachedb.c
U src/usr.sbin/unbound/cachedb/redis.h
U src/usr.sbin/unbound/cachedb/redis.c
U src/usr.sbin/unbound/ipset/ipset.c
U src/usr.sbin/unbound/ipset/ipset.h
20 conflicts created by this import.
Use the following command to help the merge:
cvs checkout -jNLNETLABS:yesterday -jNLNETLABS src/usr.sbin/unbound
