Commit Graph

25249 Commits

Author SHA1 Message Date
Ray Bellis
0359dfcf63 fixed new warning with previous iOS patch
(cherry picked from commit 70676a01eb)
2017-07-04 12:12:41 +01:00
Ray Bellis
4f1073e7b2 fix warnings from iOS build of dig
(cherry picked from commit 03a4e4381e)
2017-07-04 11:54:54 +01:00
Mark Andrews
250d96dd31 loop waiting for ns4/managed-keys.bind to be written
(cherry picked from commit f7a22ae512)
2017-07-04 15:53:45 +10:00
Tinderbox User
02e1a5b3ae update copyright notice / whitespace 2017-06-30 23:46:05 +00:00
Tinderbox User
2128e98a14 newcopyrights 2017-06-30 23:30:17 +00:00
Evan Hunt
28061f80b6 [v9_11] fix RSA parsing when md5 disabled
4645.	[bug]		Fix PKCS#11 RSA parsing when MD5 is disabled.
			[RT #45300]

(cherry picked from commit b05b3fab3c)
2017-06-29 15:54:35 -07:00
Tinderbox User
35255451d4 regen v9_11 v9.11.2b1 2017-06-29 00:33:13 +00:00
Evan Hunt
68bdc7fbc4 [v9_11] complete change #4643 2017-06-28 09:11:59 -07:00
Tinderbox User
550d3276d0 regen v9_11 2017-06-28 01:17:23 +00:00
Tinderbox User
710a238dfe update copyright notice / whitespace 2017-06-27 23:46:13 +00:00
Tinderbox User
384e37a497 newcopyrights 2017-06-27 23:30:15 +00:00
Evan Hunt
52f38b35e7 [v9_11] fix API ranges (170-179 was used for two branches) 2017-06-27 12:21:30 -07:00
Evan Hunt
a03f4b1ea4 [v9_11] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
2017-06-27 11:39:33 -07:00
Evan Hunt
d315545e6d [v9_11] enhanced rfc 5011 logging
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]

(cherry picked from commit 0d90835d2a)
2017-06-27 10:50:29 -07:00
Tinderbox User
ba9e87b35e newcopyrights 2017-06-26 23:30:18 +00:00
Mark Andrews
f8ceab59ea add EXCLUDED 2017-06-26 15:45:55 +10:00
Tinderbox User
8008316c9f regen v9_11 2017-06-26 03:15:58 +00:00
Mark Andrews
613fa3ce9d copyrights 2017-06-26 12:15:40 +10:00
Mark Andrews
ccf9f42c76 copyrights 2017-06-26 12:14:02 +10:00
Mark Andrews
a7af229766 bump api values for 9.11.2b1 as required 2017-06-26 12:09:43 +10:00
Mark Andrews
15471a63a2 'name' should be on isc_thread_setname argument not isc_thread_create 2017-06-26 12:05:35 +10:00
Mark Andrews
a785bf2c39 add release marker 9.11.2b1 2017-06-26 11:48:13 +10:00
Mark Andrews
00f1312935 4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
--enable-developer. [RT #45373]

(cherry picked from commit 1be7580be7)
2017-06-26 10:01:52 +10:00
Mark Andrews
b2e7185306 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
2017-06-23 17:18:23 +10:00
Michał Kępień
42c1acfa47 4639. [bug] Fix a regression in --with-tuning reporting introduced
by change 4488. [RT #45396]
2017-06-23 08:18:20 +02:00
Tinderbox User
236a983ca3 update copyright notice / whitespace 2017-06-20 23:45:53 +00:00
Tinderbox User
0c71e48c9c newcopyrights 2017-06-20 23:30:15 +00:00
Mark Andrews
0d2c3b6048 fix attribute name in DNS_NAME_INITABSOLUTE [RT #45409]
(cherry picked from commit da0df9367d)
2017-06-20 12:39:27 +10:00
Tinderbox User
421ba11f3f regen v9_11 2017-06-14 01:15:32 +00:00
Tinderbox User
6431922cb2 update copyright notice / whitespace 2017-06-13 23:46:02 +00:00
Tinderbox User
076e51f1ff newcopyrights 2017-06-13 23:30:24 +00:00
Evan Hunt
503809a8e1 [v9_11] put in a missing #ifdef section
(cherry picked from commit 19a72397da)
2017-06-13 14:51:09 -07:00
Evan Hunt
214b53880b [v9_11] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]

(cherry picked from commit bf05e66bb3)
2017-06-13 12:01:29 -07:00
Mark Andrews
dd5375de0a 4636. [bug] Normalize rpz policy zone names when checking for
existence. [RT #45358]

(cherry picked from commit e85e95c19e)
2017-06-13 13:07:23 +10:00
Mukund Sivaraman
3a58e1fefb Don't log NSDNAME failures as NSIP (#45052)
(cherry picked from commit 2c11da8441)
2017-06-12 14:11:32 +05:30
Tinderbox User
55affca0c4 newcopyrights 2017-06-11 23:30:13 +00:00
Mark Andrews
7c67b8c2b0 4634. [contrib] check5011.pl needs to handle optional space before
semi-colon in +multi-line output. [RT #45352]

(cherry picked from commit ed2659c974)
2017-06-11 22:05:13 +10:00
Tinderbox User
fa0173af87 update copyright notice / whitespace 2017-06-02 23:45:40 +00:00
Tinderbox User
83a7197872 newcopyrights 2017-06-02 23:30:11 +00:00
Mark Andrews
5aed5dc329 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
(cherry picked from commit 9c179a5607)
2017-06-02 11:48:54 +10:00
Mark Andrews
387f5e872d fix changes numbers
(cherry picked from commit 5e1cedb130)
2017-05-31 11:50:41 +10:00
Tinderbox User
51da15c886 regen v9_11 2017-05-31 01:15:21 +00:00
Tinderbox User
8664a1bd40 update copyright notice / whitespace 2017-05-30 23:46:05 +00:00
Tinderbox User
80eaeb6c6f newcopyrights 2017-05-30 23:30:12 +00:00
Evan Hunt
c28e44f3f8 [v9_11] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
2017-05-30 13:38:22 -07:00
Evan Hunt
3440cf9c60 [v9_11] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:35:06 -07:00
Mark Andrews
9270a14461 4530. [bug] "dyndb" is dependent on dlopen existing / being
enabled. [RT #45291]

(cherry picked from commit aa3a8979bc)
2017-05-30 11:35:05 +10:00
Mark Andrews
541ce84ff2 4530. [bug] "dyndb" is dependent on dlopen existing / being
enabled. [RT #45291]

(cherry picked from commit ae903759c2)
2017-05-30 11:32:06 +10:00
Mark Andrews
032d2134a4 4629. [bug] dns_client_startupdate could not be called with a
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
2017-05-30 09:52:45 +10:00
Tinderbox User
29656aa09c update copyright notice / whitespace 2017-05-28 23:46:19 +00:00