Update unbound 1.9.6 --> 1.10.1. Bug Fixes: - CVE-2020-12662 Unbound can be tricked into amplifying an incoming query into a large number of queries directed to a target. - CVE-2020-12663 Malformed answers from upstream name servers can be used to make Unbound unresponsive. Reported by: emaste MFC after: 3 days Relnotes: yes Security: CVE-2020-12662, CVE-2020-12663
39 lines
1.8 KiB
Markdown
39 lines
1.8 KiB
Markdown
# Unbound
|
||
|
||
[![Travis Build Status](https://travis-ci.org/NLnetLabs/unbound.svg?branch=master)](https://travis-ci.org/NLnetLabs/unbound)
|
||
[![Packaging status](https://repology.org/badge/tiny-repos/unbound.svg)](https://repology.org/project/unbound/versions)
|
||
[![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/unbound.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:unbound)
|
||
|
||
Unbound is a validating, recursive, caching DNS resolver. It is designed to be
|
||
fast and lean and incorporates modern features based on open standards. If you
|
||
have any feedback, we would love to hear from you. Don’t hesitate to
|
||
[create an issue on Github](https://github.com/NLnetLabs/unbound/issues/new)
|
||
or post a message on the [Unbound mailing list](https://lists.nlnetlabs.nl/mailman/listinfo/unbound-users).
|
||
You can lean more about Unbound by reading our
|
||
[documentation](https://nlnetlabs.nl/documentation/unbound/).
|
||
|
||
## Compiling
|
||
|
||
Make sure you have the C toolchain, OpenSSL and its include files, and libexpat
|
||
installed. Unbound can be compiled and installed using:
|
||
|
||
```
|
||
./configure && make && make install
|
||
```
|
||
|
||
You can use libevent if you want. libevent is useful when using many (10000)
|
||
outgoing ports. By default max 256 ports are opened at the same time and the
|
||
builtin alternative is equally capable and a little faster.
|
||
|
||
Use the `--with-libevent=dir` configure option to compile Unbound with libevent
|
||
support.
|
||
|
||
## Unbound configuration
|
||
|
||
All of Unbound's configuration options are described in the man pages, which
|
||
will be installed and are available on the Unbound
|
||
[documentation page](https://nlnetlabs.nl/documentation/unbound/).
|
||
|
||
An example configuration file is located in
|
||
[doc/example.conf](https://github.com/NLnetLabs/unbound/blob/master/doc/example.conf.in).
|