Validating, recursive, and caching DNS(SEC) resolver
Description
Unbound is a validating, recursive, and caching DNS(SEC) resolver.
The C implementation of Unbound is developed and maintained by NLnet
Labs. It is based on ideas and algorithms taken from a java prototype
developed by Verisign labs, Nominet, Kirei and ep.net.
Unbound is designed as a set of modular components, so that also
DNSSEC (secure DNS) validation and stub-resolvers (that do not run
as a server, but are linked into an application) are easily possible.
* Mon Feb 09 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-10
- Make link to dns-root-data relative only
* Mon Feb 09 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-9
- Make BuildRequires on separate lines
* Mon Feb 09 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-8
- Change the default of tls-use-system-policy-versions at build-time
* Mon Feb 09 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-7
- Switch TLS configuration to follow TLS sockets by crypto-policy again
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-6
- Remove icannbundle.pem from local sources
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.24.2-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Tue Jan 13 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-4
- Replace downloaded key with existing Paul's key
* Tue Jan 13 2026 Petr Menšík <pemensik@redhat.com> - 1.24.2-3
- Replace Wouter's key with release-g2 key
* Tue Dec 09 2025 Paul Wouters <paul.wouters@aiven.io> - 1.24.2-2
- Add nlnetlabs2026-g2.asc key for 2026 signature verification
* Wed Nov 26 2025 Petr Menšík <pemensik@redhat.com> - 1.24.2-1
- Update to 1.16.2 (rhbz#2417261)
- Additional fix for CVE-2025-11411
* Tue Nov 25 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-7
- Create root.key from dns-root-data
* Tue Nov 25 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-6
- Add dependency on dns-root-data package
* Mon Nov 24 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-5
- Do not initialize QUIC when not requested (rhbz#2416728)
* Thu Nov 06 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-4
- Do not build with QUIC support in RHEL
* Fri Oct 24 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-3
- Update link to PR of Jitka
* Fri Oct 24 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-2
- Fix failure with SWIG 4.4.0 (rhbz#2405293)
* Fri Oct 24 2025 Petr Menšík <pemensik@redhat.com> - 1.24.1-1
- Update to 1.24.1 (rhbz#2405698)
* Fri Oct 10 2025 Petr Menšík <pemensik@redhat.com> - 1.24.0-6
- Create root key if missing automatically
* Sat Oct 04 2025 Jens Kuehnel <JensKuehnel@users.noreply.github.com> - 1.24.0-5
- allow parameters from fedora-defaults to be overwritten (rhzb#2401608)
* Fri Sep 19 2025 Python Maint <python-maint@redhat.com> - 1.24.0-4
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Sep 19 2025 Petr Menšík <pemensik@redhat.com> - 1.24.0-3
- Require only ngtcp ossl devel package and enable it
* Thu Sep 18 2025 Petr Menšík <pemensik@redhat.com> - 1.24.0-2
- Basic ngtcp2 support
* Thu Sep 18 2025 Petr Menšík <pemensik@redhat.com> - 1.24.0-1
- Update 1.24.0 (rhbz#2396332)
* Fri Aug 29 2025 Petr Menšík <pemensik@redhat.com> - 1.23.1-7
- Deprecate /etc/unbound/root.key
* Fri Aug 29 2025 Petr Menšík <pemensik@redhat.com> - 1.23.1-6
- Make even existing unbound_control.key readable by group
* Fri Aug 29 2025 Petr Menšík <pemensik@redhat.com> - 1.23.1-5
- Add new DNSSEC root anchor 38696
* Fri Aug 29 2025 Petr Menšík <pemensik@redhat.com> - 1.23.1-4
- Make root.key maintained unmodified
* Fri Aug 15 2025 Python Maint <python-maint@redhat.com> - 1.23.1-3
- Rebuilt for Python 3.14.0rc2 bytecode
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.23.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Jul 17 2025 Tomas Korbar <tkorbar@redhat.com> - 1.23.1-1
- Update to 1.23.1 (rhbz#2380450)
* Thu Jun 12 2025 psklenar@redhat.com <psklenar@redhat.com> - 1.23.0-5
- fedora CI plans move to gitlab for centos-stream test space
https://issues.redhat.com/browse/RHELMISC-13073
* Tue Jun 10 2025 Python Maint <python-maint@redhat.com> - 1.23.0-4
- Rebuilt for Python 3.14
* Mon Jun 09 2025 Petr Menšík <pemensik@redhat.com> - 1.23.0-3
- Remove group access from unbound_server.key
* Mon Jun 09 2025 Petr Menšík <pemensik@redhat.com> - 1.23.0-2
- Add wildcard into gitignore for new upstreams
* Mon Jun 09 2025 Petr Menšík <pemensik@redhat.com> - 1.23.0-1
- Update to 1.23.0 (rhbz#2362019)
* Mon Jun 02 2025 Python Maint <python-maint@redhat.com> - 1.22.0-16
- Rebuilt for Python 3.14
* Tue Feb 11 2025 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.22.0-15
- Drop call to %sysusers_create_compat
* Mon Feb 10 2025 Tomas Korbar <tkorbar@redhat.com> - 1.22.0-14
- Fix ownership and mode record of rundir
* Mon Feb 10 2025 Tomas Korbar <tkorbar@redhat.com> - 1.22.0-13
- Add possibility to disable unbound-anchor by file presence
* Fri Feb 07 2025 Tomas Korbar <tkorbar@redhat.com> - 1.22.0-12
- Change service type to notify
* Sun Feb 02 2025 Tomas Korbar <tkorbar@redhat.com> - 1.22.0-11
- Enabled libsystemd and change unbound service type to notify-reload
* Sun Feb 02 2025 Tomas Korbar <tkorbar@redhat.com> - 1.22.0-10
- Add dracut module
* Thu Jan 16 2025 Petr Menšík <pemensik@redhat.com> - 1.22.0-9
- Use ip-freebind: yes or add After=network-online.target (rhbz#2338429)
* Thu Nov 21 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-8
- Fix real regression detected by unbound-localhost test
* Fri Nov 15 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-7
- Move defaults to separate configuration file
* Fri Nov 15 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-6
- Move remote-control configuration to vendor directory
* Fri Nov 15 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-5
- Deactivate automatic root zone fetching (rhbz#2322697)
* Fri Nov 15 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-4
- Enable SHA1 during tests to pass build with enabled SHA1 (rhbz#2255591)
* Fri Nov 15 2024 Petr Menšík <pemensik@redhat.com> - 1.22.0-3
- Make separate configuration
* Tue Nov 05 2024 Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.0-2
- Disable redis in RHEL builds
* Thu Oct 17 2024 Paul Wouters <paul.wouters@aiven.io> - 1.22.0-1
- Update to 1.22.0 (rbhz#2319347)
* Mon Oct 07 2024 Paul Wouters <paul.wouters@aiven.io> - 1.21.1-2
- enable hiredis (using valkey) by default
* Thu Oct 03 2024 Petr Menšík <pemensik@redhat.com> - 1.21.1-1
- Update to 1.21.1 (rbhz#2316313)
* Thu Oct 03 2024 Petr Menšík <pemensik@redhat.com> - 1.21.0-4
- Disable SHA1 support to work with new default crypto-policy
* Wed Sep 25 2024 Petr Menšík <pemensik@redhat.com> - 1.21.0-3
- Remove additional subdirectory for python3 build
* Wed Sep 25 2024 Petr Menšík <pemensik@redhat.com> - 1.21.0-2
- Enable native dynamic modules
* Wed Sep 25 2024 Petr Menšík <pemensik@redhat.com> - 1.21.0-1
- Update to 1.21.0 (rhbz#2305092)
* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.20.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jun 07 2024 Python Maint <python-maint@redhat.com> - 1.20.0-2
- Rebuilt for Python 3.13
* Fri May 10 2024 Petr Menšík <pemensik@redhat.com> - 1.20.0-1
- Update to 1.20.0
* Fri May 10 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-7
- Ensure group access correction reaches also updated configs
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-6
- Prevent executable bit on configuration files
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-5
- Always regenerate config parser
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-4
- Correct python3.12 warning
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-3
- Use newer swig m4 configuration
* Mon Apr 15 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-2
- Harden autoconf re-generation
* Fri Apr 12 2024 Petr Menšík <pemensik@redhat.com> - 1.19.3-1
- Update to 1.19.3 (rhbz#2268404)
- Fix CVE-2024-1931, Denial of service when trimming EDE text on positive
replies. (rhbz#2268419)
- Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672.
- Bug fixes
* Sat Mar 09 2024 Paul Wouters <paul.wouters@aiven.io> - 1.19.1-4
- Add spec file comment
* Fri Mar 01 2024 Paul Wouters <paul.wouters@aiven.io> - 1.19.1-3
- Fix trim of EDE text from large udp responses from spinning cpu.
* Tue Feb 13 2024 Petr Menšík <pemensik@redhat.com> - 1.19.1-2
- Ensure only unbound group members can make changes
* Tue Feb 13 2024 Paul Wouters <paul.wouters@aiven.io> - 1.19.1-1
- Update to 1.19.1 for CVE-2023-50387, CVE-2023-50868
