Matthias Fischer 21236acd00 unbound: Update to 1.16.3 ...

For details see:
https://lists.nlnetlabs.nl/pipermail/unbound-users/2022-September/007885.html

"This release fixes CVE-2022-3204 Non-Responsive Delegation
Attack. It was reported by Yehuda Afek from Tel-Aviv
University and Anat Bremler-Barr and Shani Stajnrod from
Reichman University.

This fixes for better performance when under load, by cutting
promiscuous queries for nameserver discovery and limiting the
number of times a delegation point can look in the cache for
missing records.

Bug Fixes
- Patch for CVE-2022-3204 Non-Responsive Delegation Attack."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>

2022-09-23 10:34:41 +00:00

..

acpid

…

avahi

…

backup

Merge branch 'temp-stevee-ipblocklist-final' into next

2022-07-10 08:20:15 +00:00

bash

…

bind

…

ca-certificates

ca-certificates: Update root CA certificates bundle

2022-09-17 21:18:05 +00:00

calamaris

…

cdrom

README: Update installation URL

2021-07-19 18:27:26 +00:00

cfgroot

proxy.cgi: Correctly validate domain lists

2022-09-11 08:12:00 +00:00

clamav

…

client175

…

collectd

collectd: Do not keep track of entropy any more

2022-07-14 09:40:53 +00:00

cron

fcron: Try to update ipblocklists every 15 min.

2022-07-07 17:28:01 +02:00

cups

…

cyrus-sasl

…

dehydrated

…

dhcpc

dhcpcd: Remove old MTU setting script

2022-02-23 15:46:45 +00:00

dma

…

dracut

dracut: Install an IPFire system configuration file

2022-03-14 15:18:21 +00:00

elinks

config/elinks/elinks.conf does not have to be executable

2021-05-20 10:01:50 +00:00

etc

sysctl: Permit ptrace usage for processes with CAP_SYS_PTRACE

2022-06-29 19:43:08 +00:00

etc-aarch64

Install sysctl.conf only on those architectures where needed

2021-04-11 12:12:56 +00:00

etc-armv6l

switch arm 32 bit arch from armv5tel to armv6l

2021-07-05 07:42:39 +02:00

etc-x86_64

Install sysctl.conf only on those architectures where needed

2021-04-11 12:12:56 +00:00

extrahd

…

findutils

…

firewall

rules.pl: Do not check private networks against ipblocklists.

2022-07-07 17:27:14 +02:00

flash-images/grub

flash-images: Label serial console option as "serial"

2021-08-01 13:24:01 +00:00

freeradius

…

fstrim

…

fwhosts

icmp-types file does not have to be executable

2021-05-04 15:51:15 +00:00

gnump3d

gnump3d: Update plugin path

2021-04-02 16:24:09 +00:00

grub2

dracut: Enable automatic assembly of any RAID/LVM devices

2022-05-16 18:31:12 +00:00

guardian

Bought a 'd' - fixed an old typo

2021-10-13 12:22:49 +00:00

haproxy

…

hostapd

hostapd: Re-add accidentially removed CONFIG_SAE

2021-01-27 18:56:07 +00:00

httpd

OpenVPN: Add support for 2FA / One-Time Password

2022-06-17 10:20:17 +00:00

icinga

…

include

…

initrd/dhcpc

…

ipblocklist

ipblocklist: "Tor" is not fully capitalized

2022-08-22 19:52:38 +00:00

iptraf-ng

iptraf-ng: Update to version 1.2.1

2020-09-30 09:58:51 +00:00

kernel

linux: Align configurations and rootfiles for ARM

2022-09-21 13:36:59 +00:00

lcdproc

…

lib/firmware/brcm

…

libid3tag

libid3tag: Addition of pkgconfig file

2021-04-12 09:35:29 +00:00

libvirt

…

logwatch

ipblocklist: Add neccessary files for logwatch.

2022-07-07 17:28:05 +02:00

lua

lua: Update to version 5.4.4

2022-02-06 10:50:43 +00:00

menu

Menu: Add ipblocklist entry to firewall menu.

2022-07-07 17:26:14 +02:00

minidlna

…

monit

…

mpfire

…

netpbm

…

netsnmpd

…

nginx

…

ntp

Ship NTP changes

2022-06-20 20:43:34 +00:00

ovpn

openvpn-authenticator: Always return general connection data

2022-06-17 10:20:19 +00:00

pmacct

pmacct: New addon

2021-05-11 16:44:46 +00:00

profile.d

…

proxy

…

qemu

Drop support for i586

2021-12-04 23:27:26 +01:00

qos

QoS: Add CAKE profile to commmand line

2022-01-16 15:17:50 +00:00

rootfiles

unbound: Update to 1.16.3

2022-09-23 10:34:41 +00:00

rpi-firmware

rpi-firmware: update to 20211127

2021-11-27 14:21:31 +00:00

samba

samba: Add helper script to pipe password

2021-01-27 21:06:57 +00:00

sarg

…

shadow

shadow: Update to version 4.11.1 and fix bug 12762

2022-01-18 21:23:42 +00:00

squidclamav

…

ssh

SSH: do not send spoofable TCP keep alive messages

2022-04-23 14:27:56 +00:00

ssl

…

strongswan

…

stunnel

…

suricata

ruleset-sources: Update download URL for Talos rulesets.

2022-06-23 13:24:10 +00:00

syslinux

cdrom: Drop menu option for HDT

2022-06-04 08:36:58 +00:00

sysstat

…

time

…

tor

…

transmission

…

u-boot

u-boot: bootscript try to use also devnum instead of dev_num

2021-10-04 06:13:18 +00:00

udev

networking: Correctly set MTU on all bridges

2022-03-30 13:58:02 +00:00

unbound

unbound.conf: Aggressive NSEC is enabled by default since Unbound 1.15.0

2022-06-13 15:50:10 +00:00

updxlrator

…

urlfilter

urlfilter: Download University of Toulouse list via HTTPS

2022-07-09 15:03:12 +00:00

vdr

…

vdradmin

…

vim

…

w_scan

…

wpa_supplicant

wpa_supplicant: Import fresh default configuration

2021-01-12 10:39:14 +00:00

xinetd

…

xtables-addons

xtables-addons: update to 3.13

2021-07-05 07:42:36 +02:00

zabbix_agentd

zabbix_agentd: Add IPFire specific userparameters

2022-07-06 09:57:40 +00:00