Commit Graph
25253 Commits
Author SHA1 Message Date
Tinderbox User 048b775e5c newcopyrights 2017-07-07 23:30:21 +00:00
Mark Andrews bf97ea8fb4 add #include <isc/print.h>
(cherry picked from commit 00a235c8e6)
2017-07-08 00:48:16 +10:00
Mark Andrews 398834f755 4647. [bug] Change 4643 broke verification of TSIG signed TCP
message sequences where not all the messages contain
                        TSIG records.  These may be used in AXFR and IXFR
                        responses.  [RT #45509]
2017-07-07 23:43:20 +10:00
Mukund Sivaraman 5eceaccb00 Fix typo in configure output
(cherry picked from commit 5f88472fd1)
2017-07-07 17:33:23 +05:30
Ray Bellis 0359dfcf63 fixed new warning with previous iOS patch
(cherry picked from commit 70676a01eb)
2017-07-04 12:12:41 +01:00
Ray Bellis 4f1073e7b2 fix warnings from iOS build of dig
(cherry picked from commit 03a4e4381e)
2017-07-04 11:54:54 +01:00
Mark Andrews 250d96dd31 loop waiting for ns4/managed-keys.bind to be written
(cherry picked from commit f7a22ae512)
2017-07-04 15:53:45 +10:00
Tinderbox User 02e1a5b3ae update copyright notice / whitespace 2017-06-30 23:46:05 +00:00
Tinderbox User 2128e98a14 newcopyrights 2017-06-30 23:30:17 +00:00
Evan Hunt 28061f80b6 [v9_11] fix RSA parsing when md5 disabled
4645.	[bug]		Fix PKCS#11 RSA parsing when MD5 is disabled.
			[RT #45300]

(cherry picked from commit b05b3fab3c)
2017-06-29 15:54:35 -07:00
Tinderbox User 35255451d4 regen v9_11 v9.11.2b1 2017-06-29 00:33:13 +00:00
Evan Hunt 68bdc7fbc4 [v9_11] complete change #4643 2017-06-28 09:11:59 -07:00
Tinderbox User 550d3276d0 regen v9_11 2017-06-28 01:17:23 +00:00
Tinderbox User 710a238dfe update copyright notice / whitespace 2017-06-27 23:46:13 +00:00
Tinderbox User 384e37a497 newcopyrights 2017-06-27 23:30:15 +00:00
Evan Hunt 52f38b35e7 [v9_11] fix API ranges (170-179 was used for two branches) 2017-06-27 12:21:30 -07:00
Evan Hunt a03f4b1ea4 [v9_11] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
2017-06-27 11:39:33 -07:00
Evan Hunt d315545e6d [v9_11] enhanced rfc 5011 logging
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]

(cherry picked from commit 0d90835d2a)
2017-06-27 10:50:29 -07:00
Tinderbox User ba9e87b35e newcopyrights 2017-06-26 23:30:18 +00:00
Mark Andrews f8ceab59ea add EXCLUDED 2017-06-26 15:45:55 +10:00
Tinderbox User 8008316c9f regen v9_11 2017-06-26 03:15:58 +00:00
Mark Andrews 613fa3ce9d copyrights 2017-06-26 12:15:40 +10:00
Mark Andrews ccf9f42c76 copyrights 2017-06-26 12:14:02 +10:00
Mark Andrews a7af229766 bump api values for 9.11.2b1 as required 2017-06-26 12:09:43 +10:00
Mark Andrews 15471a63a2 'name' should be on isc_thread_setname argument not isc_thread_create 2017-06-26 12:05:35 +10:00
Mark Andrews a785bf2c39 add release marker 9.11.2b1 2017-06-26 11:48:13 +10:00
Mark Andrews 00f1312935 4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
--enable-developer. [RT #45373]

(cherry picked from commit 1be7580be7)
2017-06-26 10:01:52 +10:00
Mark Andrews b2e7185306 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
2017-06-23 17:18:23 +10:00
Michał Kępień 42c1acfa47 4639. [bug] Fix a regression in --with-tuning reporting introduced
by change 4488. [RT #45396]
2017-06-23 08:18:20 +02:00
Tinderbox User 236a983ca3 update copyright notice / whitespace 2017-06-20 23:45:53 +00:00
Tinderbox User 0c71e48c9c newcopyrights 2017-06-20 23:30:15 +00:00
Mark Andrews 0d2c3b6048 fix attribute name in DNS_NAME_INITABSOLUTE [RT #45409]
(cherry picked from commit da0df9367d)
2017-06-20 12:39:27 +10:00
Tinderbox User 421ba11f3f regen v9_11 2017-06-14 01:15:32 +00:00
Tinderbox User 6431922cb2 update copyright notice / whitespace 2017-06-13 23:46:02 +00:00
Tinderbox User 076e51f1ff newcopyrights 2017-06-13 23:30:24 +00:00
Evan Hunt 503809a8e1 [v9_11] put in a missing #ifdef section
(cherry picked from commit 19a72397da)
2017-06-13 14:51:09 -07:00
Evan Hunt 214b53880b [v9_11] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]

(cherry picked from commit bf05e66bb3)
2017-06-13 12:01:29 -07:00
Mark Andrews dd5375de0a 4636. [bug] Normalize rpz policy zone names when checking for
existence. [RT #45358]

(cherry picked from commit e85e95c19e)
2017-06-13 13:07:23 +10:00
Mukund Sivaraman 3a58e1fefb Don't log NSDNAME failures as NSIP (#45052)
(cherry picked from commit 2c11da8441)
2017-06-12 14:11:32 +05:30
Tinderbox User 55affca0c4 newcopyrights 2017-06-11 23:30:13 +00:00
Mark Andrews 7c67b8c2b0 4634. [contrib] check5011.pl needs to handle optional space before
semi-colon in +multi-line output. [RT #45352]

(cherry picked from commit ed2659c974)
2017-06-11 22:05:13 +10:00
Tinderbox User fa0173af87 update copyright notice / whitespace 2017-06-02 23:45:40 +00:00
Tinderbox User 83a7197872 newcopyrights 2017-06-02 23:30:11 +00:00
Mark Andrews 5aed5dc329 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
(cherry picked from commit 9c179a5607)
2017-06-02 11:48:54 +10:00
Mark Andrews 387f5e872d fix changes numbers
(cherry picked from commit 5e1cedb130)
2017-05-31 11:50:41 +10:00
Tinderbox User 51da15c886 regen v9_11 2017-05-31 01:15:21 +00:00
Tinderbox User 8664a1bd40 update copyright notice / whitespace 2017-05-30 23:46:05 +00:00
Tinderbox User 80eaeb6c6f newcopyrights 2017-05-30 23:30:12 +00:00
Evan Hunt c28e44f3f8 [v9_11] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
2017-05-30 13:38:22 -07:00
Evan Hunt 3440cf9c60 [v9_11] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:35:06 -07:00