ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

3964. [func] nsupdate now performs check-names processing.

Browse Source 
[RT #36266]
This commit is contained in:
Mark Andrews
2014-10-02 09:35:43 +10:00
parent 7c1468ed50
commit ed1c845c1d
7 changed files with 109 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README
View File

@@ -97,6 +97,8 @@ BIND 9.11.0
- dig can now set yet-to-be-defined EDNS flags on requests (+ednsflags).
- serial-query-rate no longer covers NOTIFY messages. These are
separately controlled by notify-rate and startup-notify-rate.
- nsupdate now performs check-names processing by default on records
to be added. This can be disabled with "check-names no".
This release addresses the security flaw described in
CVE-2014-3214 and CVE-2014-3859.