BSD Ports

net/unbound 1.26.1 NetBSD

DNS resolver and recursive server

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
854efde432
License
modified-bsd
Categories
net
Package size
881.8 KiB, 5099.3 KiB installed

Description

Unbound is an implementation of a DNS resolver. It provides a library similiar to libresolv that can be used for synchronous and asynchronous DNS lookups. It also provides a caching-only (recursive) DNS server.

Unbound has full support for IPv6 and DNSSEC validation, DNS-over-TLS and DNS-over-HTTPS.

In the other systems

SystemPortVersion
NetBSDnet/unbound1.26.1
FreeBSDdns/unbound1.26.2
DragonFlydns/unbound1.22.0_1
MidnightBSDdns/unbound1.26.1
HardenedBSDdns/unbound1.26.1
GhostBSDdns/unbound1.26.1
OPNsensedns/unbound1.25.1_1

Install

Binary package:

pkgin install unbound

From pkgsrc:

cd /usr/pkgsrc/net/unbound && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_641.26.1
NetBSD 10.1 aarch641.25.1
SmartOS / illumos x86_641.26.1nb1
macOS 15 arm641.26.1nb1

Dependencies

Run dependencies 1

Commit history 5

DateCommitCreditsLog message
854efde432 kim unbound: update to 1.26.2
This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206 and CVE-2026-109125. Bug Fixes - Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on multi-threaded deployments. Thanks to Kunta Chu and Jianjun Chen from Tsinghua University for the report. - Fix CVE-2026-50106, Possible insecure NXDOMAIN for non-existing records under a configured island trust anchor underneath an insecure parent. Thanks to Qifan Zhang from Palo Alto Networks for the report. - Fix CVE-2026-96405, Aggregate DNS name chained pointer decompression work leads to degradation of service. Thanks to Yuheng Zhang (Tsinghua University and Jingxian Technology Co., Ltd.), Jianjun …
bb4302dbb1 wiz *: recursive bump for new protobuf
shlib major changed
dd55381fc1 kim unbound: update to 1.26.1
This release consolidates security fixes for issues reported over a period of time. There are fixes for CVE-2026-77860, CVE-2026-77955, CVE-2026-78227, CVE-2026-80225, CVE-2026-81634, CVE-2026-81642, CVE-2026-82717, CVE-2026-82720 and CVE-2026-85501. Bug Fixes - Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report. - Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC canonicalization. Thanks to Vlatko Kosturjak with Marlink Cyber, for the report. - Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption. Thanks to Ben Morris from Anthropic for the report. - Fix CVE-2026-77955, Possible ZONEMD verification bypass window. …
1d4638311c adam Revision bump after abseil update
717603af47 adam unbound: updated to 1.26.0
1.26.0 Features Update icannbundle.pem certificates in unbound-anchor. It has the public keys for 2009 to 2029 and for 2025 to 2045. Fix to add `max-transfer-size` and `max-transfer-time` that limit auth-zone and rpz transfer amount and time taken. Default is disabled. This hardens against unbounded transfers. Thanks to Qifan Zhang, Palo Alto Networks, for the report. Merge 1087: Overload `local_data_remove` to support removing specific records. Merge 1433 from jisakiel: Add new static zone type block_aaaa to suppress AAAA queries. Fix 1477: respip + dns64: dns64 uses A records modified by respip instead of original A records. Adds local-zone types block_a_wdata and block_aaaa_wdata, that are like block_a and block_aaaa, and uses local-data if present.