Tinderbox User
9fecd013fe
regen master
2018-01-05 01:08:34 +00:00
Tinderbox User
10e49fc83b
update copyright notice / whitespace
2018-01-04 23:45:32 +00:00
Evan Hunt
79112cec7d
[master] typo
2018-01-03 19:29:59 -08:00
Evan Hunt
053b51c4db
[master] block validator deadlock and prevent use-after-free
...
4859. [bug] A loop was possible when attempting to validate
unsigned CNAME responses from secure zones;
this caused a delay in returning SERVFAIL and
also increased the chances of encountering
CVE-2017-3145. [RT #46839 ]
4858. [security] Addresses could be referenced after being freed
in resolver.c, causing an assertion failure.
(CVE-2017-3145) [RT #46839 ]
2018-01-03 19:11:18 -08:00
Tinderbox User
ec91dfaf80
regen master
2017-12-20 01:08:42 +00:00
Tinderbox User
9448aacadb
regen master
2017-12-16 01:09:51 +00:00
Evan Hunt
79c2400d91
[master] allow primary/secondary as synonyms for master/slave
...
4848. [func] Zone types "primary" and "secondary" can now be used
as synonyms for "master" and "slave" in named.conf.
[RT #46713 ]
2017-12-15 01:47:05 -08:00
Evan Hunt
d40f4c9885
[master] clear out release notes so they can be repopulated for 9.13
2017-12-15 01:40:16 -08:00
Tinderbox User
ab6f49d969
regen master
2017-12-15 01:08:34 +00:00
Tinderbox User
e5ac12b76d
regen master
2017-12-13 01:08:15 +00:00
Michał Kępień
e8bbb76620
[master] Correct the default value of print-time in ARM
2017-12-12 11:47:18 +01:00
Tinderbox User
71eec55e0d
regen master
2017-12-09 01:09:51 +00:00
Evan Hunt
5ea0100639
[master] document "fixedpoint"
2017-12-07 18:59:52 -08:00
Tinderbox User
f9c3aba9b3
regen master
2017-12-06 17:32:49 +00:00
Tinderbox User
7308316d92
regen master
2017-12-06 01:09:54 +00:00
Mark Andrews
77f9623439
add [RT #46774 ]
2017-12-05 16:14:15 +11:00
Tinderbox User
6074bd498f
regen master
2017-12-05 01:08:12 +00:00
Evan Hunt
b695f77533
[master] revised release note
2017-12-04 15:37:09 -08:00
Mark Andrews
9ff34db455
add note for [RT #46743 ] and [RT #46754 ]
2017-12-05 09:52:12 +11:00
Tinderbox User
a30f8d214d
regenerate
2017-11-30 22:51:12 +00:00
Tinderbox User
0b315a0b25
regen master
2017-11-30 22:46:39 +00:00
Evan Hunt
e197a2bd15
[master] fix "allow-transfer" inheritance and clean up ACL configuration
...
4836. [bug] Zones created using "rndc addzone" could
temporarily fail to inherit an "allow-transfer"
ACL that had been configured in the options
statement. [RT #46603 ]
2017-11-30 12:37:08 -08:00
Tinderbox User
0cba7ca6af
regen master
2017-11-09 01:07:39 +00:00
Evan Hunt
f4b2356359
[master] remove extra comma
2017-11-08 09:31:25 -08:00
Tinderbox User
a1aa42b9cd
regenerate
2017-11-08 17:28:38 +00:00
Tinderbox User
c999531fa4
regen master
2017-11-08 17:26:53 +00:00
Evan Hunt
00827f59d2
[master] revise incorrect release note
2017-11-08 09:18:29 -08:00
Tinderbox User
a41e41d6a4
regenerate
2017-11-07 21:48:23 +00:00
Tinderbox User
0e29543a3d
regen master
2017-11-07 21:42:32 +00:00
Tinderbox User
72ddd51e74
regen master
2017-11-03 01:08:09 +00:00
Evan Hunt
c3d0ccdc8f
[master] update logging categories in doc
2017-11-02 12:53:33 -07:00
Tinderbox User
f305a705c4
regenerate
2017-11-02 18:59:07 +00:00
Tinderbox User
490c321e25
regen master
2017-11-02 18:58:45 +00:00
Evan Hunt
e7b53943fe
[master] copyrights
2017-11-02 11:50:43 -07:00
Evan Hunt
95dce4e68c
[master] clarify doc on zone refresh and expiry
2017-11-01 23:06:20 -07:00
Evan Hunt
3b5718a8c9
[master] removed references to obsolete versions in documentation
2017-11-01 22:19:11 -07:00
Tinderbox User
40298d8bee
regen master
2017-11-02 01:09:26 +00:00
Tinderbox User
9b3fc207df
regen master
2017-11-01 01:09:07 +00:00
Tinderbox User
4ae8f28711
regen master
2017-10-30 01:08:21 +00:00
Mark Andrews
f5e1b555c5
4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside .
...
trust-anchor dlv.isc.org;' now elicit warnings rather
than being fatal configuration errors. [RT #46410 ]
2017-10-30 07:40:59 +11:00
Tinderbox User
497f3f913e
regen master
2017-10-28 01:12:35 +00:00
Evan Hunt
c9f8165a06
[master] tag initializing keys
...
4798. [func] Keys specified in "managed-keys" statements
are tagged as "initializing" until they have been
updated by a key refresh query. If initialization
fails it will be visible from "rndc secroots".
[RT #46267 ]
2017-10-27 15:49:44 -07:00
Evan Hunt
1d57d460d4
[master] change rndc-confgen default algorithm
...
this completes change 4785. the CHANGES note has been revised:
4785. [func] The hmac-md5 algorithm is no longer recommended for
use with RNDC keys. The default in rndc-confgen
is now hmac-sha256. [RT #42272 ]
2017-10-27 10:56:43 -07:00
Evan Hunt
959d294067
[master] remove isc-hmac-fixup
...
4797. [func] Removed "isc-hmac-fixup", as the versions of BIND that
had the bug it worked around are long past end of
life. [RT #46411 ]
2017-10-27 09:56:11 -07:00
Brian Conry
864bc6b56e
[master] Increase the maximum TCP keepalive timeout to 65535
...
4796. [bug] Increase the maximum configurable TCP keepalive
timeout to 65535. [RT #44710 ]
2017-10-27 14:58:48 +02:00
Evan Hunt
06049b1c6c
[master] stats counter for priming queries
...
4795. [func] A new statistics counter has been added to track
priming queries. [RT #46313 ]
2017-10-26 21:38:43 -07:00
Evan Hunt
3b4f23cdbf
[master] dnssec-checkds -s
...
4794. [func] "dnssec-checkds -s" specifies a file from which
to read a DS set rather than querying the parent.
[RT #44667 ]
2017-10-26 21:05:11 -07:00
Tinderbox User
d3e8e9bdbb
regen master
2017-10-26 01:09:30 +00:00
Evan Hunt
81570e84a2
[master] fix some documentation errors [RT #45527 ]
2017-10-25 11:02:26 -07:00
Evan Hunt
6a59e53a69
[master] fixed libdns doc
...
4791. [doc] Fixed outdated documentation about export libraries.
[RT #46341 ]
2017-10-25 10:55:34 -07:00
