1 files changed, 19 insertions, 5 deletions
diff --git a/pkgs/tools/networking/unbound/default.nix b/pkgs/tools/networking/unbound/default.nix
index 376717bbf7a..e1594733268 100644
--- a/pkgs/tools/networking/unbound/default.nix
+++ b/pkgs/tools/networking/unbound/default.nix
@@ -1,17 +1,31 @@
 { stdenv, fetchurl, openssl, expat, libevent }:
 
 stdenv.mkDerivation rec {
-  name = "unbound-1.4.22";
+  name = "unbound-${version}";
+  version = "1.5.1";
 
   src = fetchurl {
     url = "http://unbound.net/downloads/${name}.tar.gz";
-    sha256 = "17yjly9c00zfgbzvllqzjh668a4yk6vrinf47yrcs3hrna0m1bqw";
+    sha256 = "1v00k4b6m9wk0533s2jpg4rv9lhplh7zdp6vx2yyrmrbzc4jgy0g";
   };
- 
+
   buildInputs = [openssl expat libevent];
 
-  configureFlags = [ "--with-ssl=${openssl}" "--with-libexpat=${expat}"
-    "--localstatedir=/var" ];
+  patches = [
+    # This patch fixes unbound 1.5.1 on linux versions previous to 3.15 which
+    # do not implement IP_PMTUDISC_OMIT.
+    #
+    # It should be discarded when this support makes it into a released
+    # version.
+    ./linux-pre-3.15-unbound-1.5.1.patch
+  ];
+
+  configureFlags = [
+    "--with-ssl=${openssl}"
+    "--with-libexpat=${expat}"
+    "--with-libevent=${libevent}"
+    "--localstatedir=/var"
+  ];
 
   meta = {
     description = "Validating, recursive, and caching DNS resolver";