Commit Graph
4987 Commits
Author SHA1 Message Date
Mark Andrews 96085d274e add AVC 2016-03-04 18:17:57 +11:00
Evan Hunt db06cd726c [v9_10] recursively clean empty interior nodes when deleting database records
4324.	[bug]		When deleting records from a zone database, interior
			nodes could be left empty but not deleted, damaging
			search performance afterward. [RT #40997]

(cherry picked from commit 44c86318ed)
2016-03-03 21:15:21 -08:00
Tinderbox User 6d12bd7997 regen v9_10 2016-03-01 01:07:17 +00:00
Mark Andrews ca3d4db1a5 re-order security list into reverse order 2016-02-29 12:44:35 +11:00
Tinderbox User 3288843a56 regen v9_10 2016-02-27 01:07:30 +00:00
Mark Andrews 7cd300abd6 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]

(cherry picked from commit 455c0848f8)
2016-02-27 11:46:16 +11:00
Tinderbox User baa71f756a regen v9_10 2016-02-23 01:07:37 +00:00
Mukund Sivaraman 456e1eadd2 Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753)
(cherry picked from commit 5995fec51c)
2016-02-22 12:24:15 +05:30
Tinderbox User a372b927ed regen v9_10 2016-02-19 01:07:10 +00:00
Mark Andrews e7e15d1302 4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

(cherry picked from commit a2b15b3305)
2016-02-18 12:12:02 +11:00
Tinderbox User ee0661903e regen v9_10 2016-01-30 01:07:14 +00:00
Evan Hunt f88b79ab08 [v9_10] remove reporter's name per his request 2016-01-29 10:37:45 -08:00
Tinderbox User 88bdff9eac regen v9_10 2016-01-29 01:07:17 +00:00
Tinderbox User 392e684f0e update copyright notice / whitespace 2016-01-28 23:46:02 +00:00
Evan Hunt 07f2374a12 [v9_10] openssl 1.0.2f patch
4306.	[maint]		Added a PKCS#11 openssl patch supporting
			version 1.0.2f [RT #38312]
2016-01-28 13:27:48 -08:00
Evan Hunt 0146f39472 [v9_10] correct also-notify grammar 2016-01-27 19:07:59 -08:00
Tinderbox User 4ce081323c regen v9_10 2016-01-06 01:07:27 +00:00
Evan Hunt 6f39162aaf [v9_10] fix ticket number 2016-01-05 09:08:57 -08:00
Evan Hunt 79e824b2eb [v9_10] fix use after free on xfr timeout
4289.	[bug]		The server could crash due to memory being used
			after it was freed if a zone transfer timed out.
			[RT #41297]
2016-01-04 22:06:05 -08:00
Tinderbox User 70b193a8f3 regen v9_10 2016-01-05 01:35:44 +00:00
Tinderbox User e11aa3e52c fix tag mismatch 2016-01-05 01:30:22 +00:00
Evan Hunt 0dd38adbe7 [v9_10] Merge branch 'v9_10' of ssh://repo/proj/git/prod/bind9 into v9_10 2016-01-04 16:10:05 -08:00
Evan Hunt b4cf962eef [v9_10] fixed bogus server regression
4288.	[bug]		Fixed a regression in resolver.c:possibly_mark()
			which caused known-bogus servers to be queried
			anyway. [RT #41321]
2016-01-04 16:01:38 -08:00
Evan Hunt e81fd88813 [v9_10] clean up relnotes to include only things added since 9.10.3 2016-01-04 16:00:33 -08:00
Tinderbox User add1f7a8d2 update copyright notice / whitespace 2016-01-04 23:45:56 +00:00
Evan Hunt ae14e490cc [v9_10] clean up notes 2016-01-03 21:22:55 -08:00
Tinderbox User 82962d684b regen v9_10 2016-01-01 01:07:18 +00:00
Mark Andrews a9eeaea7d6 4286. [security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
                        (CVE-2015-8705) [RT #41397]

(cherry picked from commit 3e0c1603a8)
2015-12-31 22:19:31 +11:00
Mark Andrews b248438052 remove period 2015-12-31 14:34:44 +11:00
Mark Andrews 8725470692 4285. [security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]

(cherry picked from commit 1b3d211802)
2015-12-31 13:45:36 +11:00
Tinderbox User 06a863ff1e regen v9_10 2015-12-27 01:07:14 +00:00
Evan Hunt a65eda95d0 [v9_10] fix geoip options
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
2015-12-26 10:51:30 -08:00
Tinderbox User 414048dc07 regen v9_10 2015-12-16 01:07:05 +00:00
Mukund Sivaraman f2d05dbb6f Update notes.xml for #40996
(cherry picked from commit 6960e7fd12)
2015-12-15 18:07:06 +05:30
Tinderbox User 83ecdd595b regen v9_10 2015-12-08 01:07:05 +00:00
Mark Andrews 9f375be7d9 4276. [protocol] Add support for SMIMEA. [RT #40513]
(cherry picked from commit 322e6b5be7)
2015-12-08 08:17:35 +11:00
Tinderbox User 2a5f7d6087 regen v9_10 2015-12-04 01:07:07 +00:00
Evan Hunt 4db36f766e [v9_10] disallow map zones in response-policy
4269.	[bug]		Zones using "map" format master files currently
			don't work as policy zones.  This limitation has
			now been documented; attempting to use such zones
			in "response-policy" statements is now a
			configuration error.  [RT #38321]
2015-12-02 21:10:43 -08:00
Mark Andrews 19cce81c83 update description
(cherry picked from commit 7bde79b32a)
2015-12-03 15:43:12 +11:00
Mark Andrews 2b478a7e20 Add CVE-2015-8461
(cherry picked from commit ff2f98076c)
2015-12-03 15:31:47 +11:00
Tinderbox User 32672dac69 update copyright notice / whitespace 2015-11-24 23:45:52 +00:00
Evan Hunt 698c0fd069 [v9_10] update developer guide, expanding on comments and unit tests 2015-11-24 14:43:42 -08:00
Tinderbox User e04451ce97 regen v9_10 2015-11-21 01:07:05 +00:00
Mark Andrews ef070eb5e7 spelling
(cherry picked from commit cbc660172d)
2015-11-20 14:55:48 +11:00
Tinderbox User c00585facb regen v9_10 2015-11-18 01:07:04 +00:00
Mark Andrews a089f3bc84 note the address changes for H.ROOT-SERVERS.NET
(cherry picked from commit b57276f89e)
2015-11-18 11:09:13 +11:00
Jeremy C. Reed c75cc4f07d add simpara to some note tags
So generated "Note" header isn't on same line as content.

Also removed one place that said "Note" (so doesn't say
"Note Note").
2015-11-17 11:00:13 -05:00
Jeremy C. Reed f13f51e3e4 make sure there is a simpara for missing context for note tag 2015-11-17 10:59:21 -05:00
Jeremy C. Reed 157d47c277 remove errant word
a word is repeated in a sentence and didn't make sense as-is
so removed it
2015-11-17 10:59:12 -05:00
Jeremy C. Reed c32583845c get rid of the "See also fetch-glue" since is obsolete
This doesn't remove the description but don't have other
options refer to obsolete option.

No CHANGES entry since very minor.
2015-11-17 10:59:05 -05:00