Vulnerable: version 1.26.1 is affected by 1 known vulnerability. See below.
dns/unbound 1.26.1
Validating, recursive, and caching DNS resolver
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- Last update
- Commit
2c57f17923- License
- BSD3CLAUSE
- Categories
- dns
- Package size
- 2603.3 KiB, 9282.9 KiB installed
Description
Unbound is designed as a set of modular components, so that also DNSSEC (secure DNS) validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible.
Goals: * A validating recursive DNS resolver. * Code diversity in the DNS resolver monoculture. * Drop-in replacement for BIND apart from config. * DNSSEC support. * Fully RFC compliant. * High performance, even with validation enabled. * Used as: stub resolver, full caching name server, resolver library. * Elegant design of validator, resolver, cache modules. o provide the ability to pick and choose modules. * Robust. * In C, open source: The BSD license. * Smallest as possible component that does the job. * Stub-zones can be configured (local data or AS112 zones).
Non-goals: * An authoritative name server. * Too many Features.
Install
As a binary package — by origin, or by package name:
pkg install dns/unbound
pkg install unboundFrom the ports tree:
cd /usr/ports/dns/unbound/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= unbound>0:dns/unbound
LIB_DEPENDS= libunbound.so:dns/unboundPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 1.26.1 | 1.26.1 | 1.17.0 | 1.23.1 | 1.26.1 |
| FreeBSD:14:quarterly | 1.26.1 | 1.26.1 | n/a | 1.23.1 | 1.26.1 |
| FreeBSD:15:latest | 1.26.1 | 1.26.1 | n/a | 1.23.1 | 1.23.1 |
| FreeBSD:15:quarterly | 1.26.1 | 1.26.1 | n/a | n/a | n/a |
| FreeBSD:16:latest | 1.26.1 | 1.26.1 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
As this port's Makefile names them.
Library 2
libexpat.so: textproc/expat2libnghttp2.so: www/libnghttp2
The full lists below include those, and their dependencies in turn.
All build dependencies 13
All run dependencies 4
Configuration
Options name: dns_unbound
| Option | Default | Description |
|---|---|---|
| DEP-RSA1024 | off | |
| DNSCRYPT | on | Enable dnscrypt support |
| DNSTAP | off | Enable dnstap logging support |
| DOCS | off | Build and/or install documentation |
| DYNLIB | on | Enable support for dynamic (shared) 3rd-party libraries |
| ECDSA | on | Enable ECDSA (elliptic curve) support (OpenSSL >= 1.0) |
| EVAPI | on | Pluggable event based libunbound API support |
| FILTER_AAAA | off | Build with AAAA filter functionality (contrib) |
| GOST | on | Enable GOST support (requires OpenSSL >= 1.0) |
| HIREDIS | off | Enable hiredis support for the cachedb module |
| LIBEVENT | on | Build against libevent |
| MUNIN_PLUGIN | off | Install Munin plugin |
| PYTHON | off | Python bindings or support |
| SUBNET | off | Enable client subnet support |
| TFOCL | off | Enable TCP Fast Open for client mode |
| TFOSE | off | Enable TCP Fast Open for server mode |
| THREADS | on | Threading support |
- USES
- autoreconf cpe libtool pkgconfig ssl
- Service scripts
unbound
Files
Manual pages 38
- libunbound(3)
- ub_cancel(3)
- ub_ctx(3)
- ub_ctx_add_ta(3)
- ub_ctx_add_ta_file(3)
- ub_ctx_async(3)
- ub_ctx_config(3)
- ub_ctx_create(3)
- ub_ctx_data_add(3)
- ub_ctx_data_remove(3)
- ub_ctx_debuglevel(3)
- ub_ctx_debugout(3)
- ub_ctx_delete(3)
- ub_ctx_get_option(3)
- ub_ctx_hosts(3)
- ub_ctx_print_local_zones(3)
- ub_ctx_resolvconf(3)
- ub_ctx_set_fwd(3)
- ub_ctx_set_option(3)
- ub_ctx_trustedkeys(3)
- ub_ctx_zone_add(3)
- ub_ctx_zone_remove(3)
- ub_fd(3)
- ub_poll(3)
- ub_process(3)
- ub_resolve(3)
- ub_resolve_async(3)
- ub_resolve_free(3)
- ub_result(3)
- ub_strerror(3)
- ub_wait(3)
- unbound(8)
- unbound-anchor(8)
- unbound-checkconf(8)
- unbound-control(8)
- unbound-control-setup(8)
- unbound-host(1)
- unbound.conf(5)
pkg-plist 57
- @sample etc/unbound/unbound.conf.sample
- include/unbound.h
- include/unbound-event.h
- libdata/pkgconfig/libunbound.pc
- lib/libunbound.a
- lib/libunbound.so
- lib/libunbound.so.8
- lib/libunbound.so.8.1.40
- %%PYTHON_SITELIBDIR%%/_unbound.so
- %%PYTHON_SITELIBDIR%%/unbound.py
- %%PYTHON_SITELIBDIR%%/unboundmodule.py
- share/man/man1/unbound-host.1.gz
- share/man/man3/libunbound.3.gz
- share/man/man3/ub_cancel.3.gz
- share/man/man3/ub_ctx.3.gz
- share/man/man3/ub_ctx_add_ta.3.gz
- share/man/man3/ub_ctx_add_ta_file.3.gz
- share/man/man3/ub_ctx_async.3.gz
- share/man/man3/ub_ctx_config.3.gz
- share/man/man3/ub_ctx_create.3.gz
- share/man/man3/ub_ctx_data_add.3.gz
- share/man/man3/ub_ctx_data_remove.3.gz
- share/man/man3/ub_ctx_debuglevel.3.gz
- share/man/man3/ub_ctx_debugout.3.gz
- share/man/man3/ub_ctx_delete.3.gz
- share/man/man3/ub_ctx_get_option.3.gz
- share/man/man3/ub_ctx_hosts.3.gz
- share/man/man3/ub_ctx_print_local_zones.3.gz
- share/man/man3/ub_ctx_resolvconf.3.gz
- share/man/man3/ub_ctx_set_fwd.3.gz
- share/man/man3/ub_ctx_set_option.3.gz
- share/man/man3/ub_ctx_trustedkeys.3.gz
- share/man/man3/ub_ctx_zone_add.3.gz
- share/man/man3/ub_ctx_zone_remove.3.gz
- share/man/man3/ub_fd.3.gz
- share/man/man3/ub_poll.3.gz
- share/man/man3/ub_process.3.gz
- share/man/man3/ub_resolve.3.gz
- share/man/man3/ub_resolve_async.3.gz
- share/man/man3/ub_resolve_free.3.gz
- share/man/man3/ub_result.3.gz
- share/man/man3/ub_strerror.3.gz
- share/man/man3/ub_wait.3.gz
- share/man/man5/unbound.conf.5.gz
- share/man/man8/unbound-anchor.8.gz
- share/man/man8/unbound-checkconf.8.gz
- share/man/man8/unbound-control-setup.8.gz
- share/man/man8/unbound-control.8.gz
- share/man/man8/unbound.8.gz
- sbin/unbound
- sbin/unbound-anchor
- sbin/unbound-checkconf
- sbin/unbound-control
- sbin/unbound-control-setup
- sbin/unbound-host
- share/munin/plugins/unbound_munin_
- @dir(unbound,,) etc/unbound
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| unbound-1.26.1.tar.gz | 6.948585e+06 | 35a6dc0e425a9282c3426d9a3043144011bf0534aed4b73ab62c52aee0af1503 |
Master sites 1
- https://www.nlnetlabs.nl/downloads/unbound/
Known vulnerabilities 1
Commit history 3
| Date | Commit | Credits | Log message |
|---|---|---|---|
2c57f17923 |
Jaap Akkerhuis | dns/unbound: Security update 1.26.0 => 1.26.1 Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-1-released/3463
Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.1
PR: 298574
Approved by: osa, vvd (Mentors, implicit)
Security: CVE-2026-81642
Security: CVE-2026-81634
Security: CVE-2026-82717
Security: CVE-2026-77955
Security: CVE-2026-78227
Security: CVE-2026-80225
Security: CVE-2026-82720
Security: CVE-2026-85501
Security: CVE-2026-77860
MFH: 2026Q3 |
|
c8c07fea86 |
Jaap Akkerhuis | dns/unbound: Update 1.25.2 => 1.26.0 Release Notes:
https://community.nlnetlabs.nl/t/unbound-1-26-0-released/3434
Changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.0
PR: 297299
Reported by: Jaap Akkerhuis <[email protected]> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q3 |
|
f9133ceced |
Jordan Ostreff | dns/unbound: upgrade to 1.25.2 This release consolidates security fixes for issues reported over
a period of time. There are fixes for CVE-2026-14586, CVE-2026-32665,
CVE-2026-40691, CVE-2026-41637, CVE-2026-42955, CVE-2026-44621,
CVE-2026-44687, CVE-2026-44690, CVE-2026-46582, CVE-2026-50045,
CVE-2026-50046, CVE-2026-50243, CVE-2026-50248, CVE-2026-50251,
CVE-2026-50252, CVE-2026-52863, CVE-2026-54478, CVE-2026-55708,
CVE-2026-55717, CVE-2026-55973, CVE-2026-55990, CVE-2026-55991,
CVE-2026-56416 and CVE-2026-56444.
https://github.com/NLnetLabs/unbound/releases/tag/release-1.25.2
PR: ports/296982
Approved by: maintainer (Jaap Akkerhuis)
MFH: 2026Q3 |