MFV d60fa10fd872db7e3d8cb1e161cfdae026c43b14:

Update unbound 1.13.0 --> 1.13.1.

Includes numerous bugfixes documented at:
https://www.nlnetlabs.nl/projects/unbound/download/#unbound-1-13-1

(cherry picked from commit f44e67d120ad78ef7894241b519ee79fd190a16e)

Git Hash: c1f4b179fee705bc884d5bda381efcabfef106da
Git Author: cy@FreeBSD.org

MFC r368478:

MFV r368464:

Update unbound from 1.12.0 to 1.13.0

Security: CVE-2020-28935

MFC r367094:

MFV r367082:

Update unbound 1.11.0 --> 1.12.0.

MFC r364721-r364722

r364721:
MFV 364468:

Update unbound 1.10.1 --> 1.11.0.

r364722:
Update unbound version number.

MFC r361344: MFV r361322:

Update unbound 1.9.6 --> 1.10.1.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
used to make Unbound unresponsive.

Reported by: emaste
Relnotes: yes
Security: CVE-2020-12662, CVE-2020-12663

MFC r333552,333558-333568,333573,338568-338569,339275,339278,339294,340037,
r349720,356228:

r333552 (des):

Upgrade Unbound to 1.6.0. More to follow.

r333558 (des):

Upgrade Unbound to 1.6.1. More to follow.

r333559 (des):

Upgrade Unbound to 1.6.2. More to follow.

r333560 (des):

Upgrade Unbound to 1.6.3. More to follow.

r333561 (des):

Upgrade Unbound to 1.6.4. More to follow.

r333562 (des):

Upgrade Unbound to 1.6.5. More to follow.

r333563 (des):

Upgrade Unbound to 1.6.6. More to follow.

r333564 (des):

Upgrade Unbound to 1.6.7. More to follow.

r333565 (des):

No reason to keep this around.

r333566 (des):

Upgrade Unbound to 1.6.8. More to follow.

r333567 (des):

Upgrade Unbound to 1.7.0. More to follow.

r333568 (des):

Upgrade Unbound to 1.7.1.

r333573 (des):

Rename all Unbound binaries and man pages from unbound* to local-unbound*.

PR: 222902

r338568 (des):

Upgrade Unbound to 1.7.2. More to follow.

r338569 (des):

Upgrade Unbound to 1.7.3. More to follow.

r339275 (des):

Upgrade Unbound to 1.8.0. More to follow.

r339278 (des):

Upgrade to 1.8.1.

r339294 (des):

Try harder to sanitize the environment before running configure.
Remove a workaround for older Unbound versions that used sbrk.

r340037 (des):

Merge upstream r4932: turn so-reuseport option off by default.

r349720 (des):

Upgrade Unbound to 1.9.2.

MFC r356228 (cy):
MFV r356143:

Update unbound 1.9.2 --> 1.9.6.

Security: CVE-2017-15105 (fixed by 1.6.7)
CVE-2019-18934 (fixed by 1.9.5)

MFH (r305381, r306457): upgrade to unbound 1.5.10 via 1.5.9

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Upgrade to Unbound 1.5.8.

Use the new insecure-lan-zones option instead of listing each AS112 zone
separately.

MFC after: 3 days

Upgrade to Unbound 1.5.7.

Upgrade to Unbound 1.5.5.

Upgrade to Unbound 1.5.4.

Upgrade Unbound to 1.5.3.

MFV (r277045): merge upstream version of the local socket patch.

mfv (r276698): support for remote control over local sockets.

Upgrade to Unbound 1.5.1. Almost all our local changes to date have been
adopted upstream, greatly reducing the diff.

Clean up the libunbound build to avoid accidentally regenerating the
configuration lexer and parser during buildworld. Instead of being
included in the source as it is in the upstream distribution, the code is
now always generated (in ${.OBJDIR}) at build time.

PR: 190739
MFC after: 1 week

Import unblock-lan-zones feature backported from upstream svn trunk.
This is a partial fix for reverse lookups in RFC 1918 networks. With
this option enabled, unbound no longer ignores these queries; however,
it will still reject the answer it gets from the forwarder, because
the RFC 1918 reverse zones are signed.

Submitted by: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl>

Upgrade to latest ldns (1.6.17) and unbound (1.4.22).

MFC after: 3 weeks

Move prototypes into header.

Approved by: re (blanket)

Upgrade to 1.4.20.

Minimal subset of the unbound sources.

import unbound 1.4.17