Tinderbox User
13fc7dc7dc
update copyright notice / whitespace
2014-11-19 23:45:49 +00:00
Tinderbox User
fca3457c59
newcopyrights
2014-11-19 23:30:36 +00:00
Evan Hunt
3ba04bb8a0
[v9_10] fix reclimit test (remove servfail-ttl)
2014-11-19 00:18:20 -08:00
Evan Hunt
b3aa528d7e
[v9_10] add max-recursion-queries
...
also fixes and documentation for max-recursion-depth
(cherry picked from commit c4f54e5bd1
2014-11-18 22:13:13 -08:00
Tinderbox User
f9650eedfc
regen v9_10
2014-11-19 01:09:14 +00:00
Tinderbox User
ff68ed6890
update copyright notice / whitespace
2014-11-18 23:45:49 +00:00
Tinderbox User
39beffcd7d
newcopyrights
2014-11-18 23:30:31 +00:00
Evan Hunt
622819ca80
[v9_10] fix RT number
2014-11-18 08:59:06 -08:00
Evan Hunt
8c91f707e1
[v9_10] add CVE
2014-11-18 00:08:47 -08:00
Evan Hunt
6fd51d5088
[v9_10] limit recursion depth and iterative queries
...
4006. [security] A flaw in delegation handling could be exploited
to put named into an infinite loop. This has
been addressed by placing limits on the number
of levels of recursion named will allow (default 7),
and the number of iterative queries that it will
send (default 50) before terminating a recursive
query (CVE-2014-8500).
The recursion depth limit is configured via the
"max-recursion-depth" option. [RT #35780 ]
2014-11-17 23:48:20 -08:00
Mark Andrews
45174975bc
check returns from putstr and putnull
...
(cherry picked from commit 18fa89b01e
2014-11-18 13:00:55 +11:00
Tinderbox User
6ff0c711ba
update copyright notice
2014-11-17 23:45:44 +00:00
Tinderbox User
90650e260c
newcopyrights
2014-11-17 23:30:11 +00:00
Evan Hunt
8b7a37a594
[v9_10] geoip security fixes
...
4003. [security] When geoip-directory was reconfigured during
named run-time, the previously loaded GeoIP
data could remain, potentially causing wrong
ACLs to be used or wrong results to be served
based on geolocation. [RT #37720 ]
4002. [security] Lookups in GeoIP databases that were not
loaded could cause an assertion failure.
[RT #37679 ]
4001. [security] The caching of GeoIP lookups did not always
handle address families correctly, potentially
resulting in an assertion failure. [RT #37672 ]
2014-11-16 08:39:47 -08:00
Evan Hunt
53b733da7f
[v9_10] fix false positive compiler warning
...
a "pointer always evaluates to true" warning was blocking
compilation of the radix ATF test when using --enable-developer
with gcc 4.8.2.
2014-11-15 00:55:06 -08:00
Tinderbox User
07af5d14d6
regen v9_10
2014-11-15 01:10:27 +00:00
Evan Hunt
96b6923a25
[v9_10] reference leak with AAAA glue but not A
...
4004. [bug] When delegations had AAAA glue but not A, a
reference could be leaked causing an assertion
failure on shutdown. [RT #37796 ]
(cherry picked from commit c4abb19716
2014-11-14 09:04:44 -08:00
Evan Hunt
5ffe6452e1
[v9_10] s/memcpy/memmove/
2014-11-06 13:02:40 -08:00
Tinderbox User
6c4b321c85
regen v9_10
2014-11-06 01:09:09 +00:00
Tinderbox User
9c65091de4
update copyright notice
2014-11-05 23:45:45 +00:00
Tinderbox User
beea83c959
newcopyrights
2014-11-05 23:30:09 +00:00
Evan Hunt
56293cd148
[v9_10] fix nxrrset in nxdomain redirection
...
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722 ]
(cherry picked from commit 3cc8c7d630
2014-11-04 23:53:54 -08:00
Tinderbox User
e88b7475bc
regen v9_10
2014-11-05 01:09:02 +00:00
Tinderbox User
8836da6a4d
update copyright notice
2014-11-04 23:45:46 +00:00
Tinderbox User
3404c3fa03
newcopyrights
2014-11-04 23:30:13 +00:00
Mark Andrews
ebdf2334f5
add missing opening bracket
...
(cherry picked from commit a31d0513c3
2014-11-04 17:12:20 +11:00
Evan Hunt
b28fd545ca
[v9_10] spelling
2014-11-03 17:44:19 -08:00
Mark Andrews
b2b3882c5c
3998. [bug] isc_radix_search was returning matches that were
...
to precise. [RT #37680 ]
(cherry picked from commit b976c39c07
2014-11-04 12:40:41 +11:00
Mark Andrews
04f10def58
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:29:28 +11:00
Mark Andrews
73b7afc3b6
3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
2014-11-04 12:24:56 +11:00
Tinderbox User
28eae93d32
regen v9_10
2014-11-01 01:09:11 +00:00
Tinderbox User
53b878cd1c
update copyright notice
2014-10-31 23:45:48 +00:00
Mark Andrews
d74c345b26
add end of life statement
2014-10-31 13:03:38 +11:00
Tinderbox User
9276bd6fb8
regen v9_10
2014-10-31 01:09:00 +00:00
Mark Andrews
5ccdac854e
3996. [bug] Address use after free on out of memory error in
...
keyring_add. [RT #37639 ]
(cherry picked from commit c2f8108123
2014-10-31 11:44:53 +11:00
Mark Andrews
1083f358ae
3995. [bug] receive_secure_serial holds the zone lock for too
...
long. [RT #37626 ]
(cherry picked from commit 4e59131f18
2014-10-31 11:39:45 +11:00
Tinderbox User
18064d993a
newcopyrights
2014-10-30 23:30:13 +00:00
Evan Hunt
197c3286f8
[v9_10] document that serial-query-rate has a floor of 1/second
2014-10-30 14:33:56 -07:00
Mark Andrews
a1675b15dc
3990. [testing] Add tests for unknown DNSSEC algorithm handling.
...
[RT #37541 ]
(cherry picked from commit a5c7cfbac4
2014-10-30 11:21:38 +11:00
Mark Andrews
ab7a781bc3
3989. [cleanup] Remove redundent dns_db_resigned calls. [RT #35748 ]
...
(cherry picked from commit eb5243365c
2014-10-30 10:54:26 +11:00
Tinderbox User
f3ddf32fcc
regen v9_10
2014-10-23 01:09:00 +00:00
Evan Hunt
be8193f39c
[v9_10] missed a ticket number
2014-10-22 11:05:27 -07:00
Evan Hunt
8a1a960fdb
[v9_10] [rt36945] relnote
2014-10-22 10:45:37 -07:00
Evan Hunt
f027e29758
[v9_10] [rt36892] relnote
2014-10-22 10:41:01 -07:00
Evan Hunt
d7a7ca72ec
[v9_10] [rt37138] relnote
2014-10-22 10:33:49 -07:00
Evan Hunt
271f80635e
[v9_10] [rt37159] relnote
2014-10-22 10:24:32 -07:00
Evan Hunt
0a091e220e
[v9_10] [rt37172] relnote
2014-10-22 10:20:13 -07:00
Evan Hunt
8d589638bf
[v9_10] [rt37197] relnote
2014-10-22 10:12:40 -07:00
Evan Hunt
c639267181
[v9_10] [rt37410] relnote
2014-10-22 10:05:57 -07:00
Evan Hunt
b550c30df8
[v9_10] [rt37506] relnote
2014-10-22 10:02:27 -07:00
Tinderbox User
Evan Hunt
Mark Andrews