Commit Graph

1685 Commits

Author SHA1 Message Date
Tinderbox User
2c00a11db3 regen v9_10 2017-06-29 00:25:13 +00:00
Tinderbox User
e5ed7f1ae2 regen v9_10 2017-06-28 01:25:48 +00:00
Evan Hunt
88dc9d367d [v9_10] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
(cherry picked from commit a03f4b1ea4)
2017-06-27 11:40:31 -07:00
Tinderbox User
83eab97b25 regen v9_10 2017-06-26 03:09:43 +00:00
Tinderbox User
f7aae09b5a regen v9_10 2017-05-31 01:22:10 +00:00
Evan Hunt
f5dd7776e1 [v9_10] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
(cherry picked from commit c28e44f3f8)
2017-05-30 13:38:59 -07:00
Evan Hunt
a57b289ed0 [v9_10] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]

(cherry picked from commit 3440cf9c60)
2017-05-30 12:35:59 -07:00
Tinderbox User
bd57f3e5f0 regen v9_10 2017-05-23 01:26:01 +00:00
Tinderbox User
7d69df0c9c regen v9_10 2017-05-19 01:25:52 +00:00
Tinderbox User
533bbc54b9 update copyright notice / whitespace 2017-05-18 23:46:20 +00:00
Evan Hunt
2662b5f563 [v9_10] remove outdated reference to libbind
(cherry picked from commit ef9ab10ce0)
2017-05-18 15:35:35 -07:00
Tinderbox User
46bbe5de15 regen v9_10 2017-05-18 01:23:35 +00:00
Tinderbox User
dc952f8bdc regen v9_10 2017-05-17 01:25:01 +00:00
Tinderbox User
a849cd4136 update copyright notice / whitespace 2017-05-16 23:46:23 +00:00
Evan Hunt
ea90793daa [v9_10] symbolic option names for dig +ednsopt
4555.	[func]		dig +ednsopt: EDNS options can now be specified by
			name in addition to numeric value. [RT #44461]

(cherry picked from commit 25a9b90369)
(cherry picked from commit 403e7b4512)
2017-05-16 10:16:33 -07:00
Tinderbox User
0ffa8328f4 regen v9_10 2017-05-11 01:25:17 +00:00
Mark Andrews
8f7396770e add warning about semicolon no longer being escaped
(cherry picked from commit d4d73bca79)
2017-05-11 11:03:13 +10:00
Tinderbox User
6f7d5b7835 regen v9_10 2017-04-23 01:14:12 +00:00
Evan Hunt
14ed39ad6e [v9_10] give threads unique names to assist debugging
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]

(cherry picked from commit d26ae7fc08)
(cherry picked from commit 8b9c4592ed)
2017-04-21 14:00:23 -07:00
Evan Hunt
134fb9a2bf [v9_10] clear out relnotes 2017-04-21 13:38:29 -07:00
Tinderbox User
feb005b1b9 regenerate 2017-04-14 03:54:11 +00:00
Tinderbox User
d8db5132ef regen v9_10 2017-04-14 03:54:08 +00:00
Tinderbox User
1f6f0be710 regen v9_10 2017-04-12 21:32:56 +00:00
Evan Hunt
6edf89ba7a [v9_10] formatting
(cherry picked from commit 52e398c0af)
2017-04-12 14:06:11 -07:00
Tinderbox User
a522189a27 regen v9_10 2017-04-12 01:12:39 +00:00
Tinderbox User
709352017e regenerate 2017-03-29 22:10:56 +00:00
Tinderbox User
e75e221299 regen v9_10 2017-03-29 22:10:54 +00:00
Mark Andrews
2a5cd07979 add CVE-2017-3138
(cherry picked from commit fe1ad70e51)
2017-03-30 02:57:10 +11:00
Tinderbox User
6d4aea9289 regen v9_10 2017-03-26 01:12:58 +00:00
Tinderbox User
4b47f2d6fd regen v9_10 2017-03-15 01:15:02 +00:00
Tinderbox User
7f90852277 regen v9_10 2017-03-01 02:34:13 +00:00
Tinderbox User
e8598bd7f1 regen v9_10 2017-03-01 01:12:17 +00:00
Tinderbox User
25c2fe59ca regenerate 2017-02-24 02:40:44 +00:00
Tinderbox User
09b8f27006 regen v9_10 2017-02-24 01:16:45 +00:00
Evan Hunt
69fd759b4a [v9_10] remove unnecessary INSIST and prep 9.10.5rc2
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
(cherry picked from commit 559cbe04e7)
2017-02-23 15:01:30 -08:00
Tinderbox User
6e21ba486c regen v9_10 2017-02-16 01:50:26 +00:00
Tinderbox User
a4bd77daf0 regen v9_10 2017-02-16 01:12:25 +00:00
Mark Andrews
3020c73f26 add CVE-2017-3136 note
(cherry picked from commit d77eadc261)
2017-02-15 12:45:25 +11:00
Tinderbox User
dd6c979eff regen v9_10 2017-02-08 01:11:45 +00:00
Evan Hunt
40462c6d00 [v9_10] doc style 2017-02-07 08:19:29 -08:00
Tinderbox User
6ba4f72c4b regen v9_10 2017-02-07 01:11:03 +00:00
Evan Hunt
0fffe04229 [v9_10] removed extra note about bind.keys update 2017-02-06 14:19:06 -08:00
Tinderbox User
87b4d16b22 regenerate 2017-02-05 07:00:34 +00:00
Tinderbox User
3edf86ac26 regen v9_10 2017-02-05 06:48:29 +00:00
Evan Hunt
84269e5e4c [v9_10] release note about new root key 2017-02-04 22:16:00 -08:00
Tinderbox User
de0d386baa regen v9_10 2017-02-04 01:13:45 +00:00
Mark Andrews
6d93a4e91a remove outdated cvs $Id strings 2017-02-03 18:41:40 +11:00
Tinderbox User
93f7f73d0d regen v9_10 2017-02-03 01:12:00 +00:00
Mark Andrews
64dff3d8fa new root KSK 2017-02-02 18:28:25 +11:00
Tinderbox User
85cfa9380b regen v9_10 2017-01-31 01:12:46 +00:00