Commit Graph
23494 Commits
Author SHA1 Message Date
Mark Andrews 91adc7a4da add CVE-2017-3138
(cherry picked from commit fe1ad70e51)
2017-03-30 02:57:16 +11:00
Tinderbox User 07967caf75 update copyright notice / whitespace 2017-03-24 23:47:23 +00:00
Tinderbox User bb0783f9e8 newcopyrights 2017-03-24 23:30:31 +00:00
Mark Andrews 8c2d209f09 4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
2017-03-25 02:08:26 +11:00
Tinderbox User fbe9182ffd regen v9_9 2017-03-15 01:24:19 +00:00
Mark Andrews c43edd377b 4580. [bug] 4578 introduced a regression when handling CNAME to
referral below the current domain. [RT #44850]

(cherry picked from commit 638c7c635d)
2017-03-14 15:17:32 +11:00
Francis Dupont 17776a169c Visual Studio 2017 was published 2017-03-10 08:21:51 +01:00
Tinderbox User ba9be2be7e regen v9_9 v9.9.10rc2 2017-03-01 02:26:17 +00:00
Tinderbox User e66d21bcc5 update copyright notice / whitespace 2017-03-01 01:57:15 +00:00
Tinderbox User c5b9c62f97 newcopyrights 2017-03-01 01:51:43 +00:00
Tinderbox User 7eea1026e7 regen v9_9 2017-03-01 01:19:35 +00:00
Mark Andrews b99d097cc4 Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
2017-03-01 12:07:56 +11:00
Tinderbox User b83e4452ee update copyright notice / whitespace 2017-02-28 23:47:20 +00:00
Tinderbox User 1ca3f89dbd newcopyrights 2017-02-28 23:30:26 +00:00
Mark Andrews 72d96237ef fix nsupdate reference
(cherry picked from commit 02fa49a4d8)
2017-03-01 08:34:52 +11:00
Mark Andrews da4d56894c fix version number 2017-02-27 16:18:20 +11:00
Tinderbox User 9f77d925fa regenerate 2017-02-24 02:40:48 +00:00
Tinderbox User fe5d457dd8 regen v9_9 2017-02-24 01:19:56 +00:00
Evan Hunt fcf1874867 [v9_9] remove unnecessary INSIST and prep 9.11.1rc2
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
(cherry picked from commit 559cbe04e7)
2017-02-23 15:26:55 -08:00
Mark Andrews 039a1489c8 explicitly cast to (unsigned int) 2017-02-20 17:05:53 +11:00
Mark Andrews 31099ddd3c explictly cast to isc_stdtime_t
(cherry picked from commit 9998a15284)
2017-02-20 16:57:41 +11:00
Tinderbox User b2526c1003 regen v9_9 2017-02-16 01:47:16 +00:00
Mark Andrews 14d680e3bc 9.9.10; copyrights 2017-02-16 12:41:30 +11:00
Mark Andrews 4ebbb52b1b record ranges; account for -P's 2017-02-16 12:10:14 +11:00
Mark Andrews 52e42f648b add CVE-2017-3136 note
(cherry picked from commit d77eadc261)
2017-02-15 12:45:20 +11:00
Mark Andrews 93fe666d15 update description 2017-02-15 12:37:52 +11:00
Mark Andrews 35ca802c7b 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:24:33 +11:00
Tinderbox User 776ae3c697 regen v9_9 2017-02-08 01:19:36 +00:00
Evan Hunt 02f0aa2ed3 [v9_9] doc style 2017-02-07 08:19:39 -08:00
Tinderbox User d3a3f28ce8 regen v9_9 2017-02-07 01:17:31 +00:00
Evan Hunt 0220addcca [v9_9] removed extra note about bind.keys update 2017-02-06 14:19:39 -08:00
Mark Andrews c7fb2ad160 4571. [bug] Out-of-tree builds of backtrace_test failed.
(cherry picked from commit 3e48466e0a)
v9.9.10rc1
2017-02-06 13:47:42 +11:00
Tinderbox User 38e779ccaa newcopyrights 2017-02-05 23:30:25 +00:00
Tinderbox User dea5b9d33d regenerate 2017-02-05 07:00:55 +00:00
Tinderbox User 6fdbc667fb regen v9_9 2017-02-05 06:55:18 +00:00
Evan Hunt b4a0711e17 [v9_9] prep 9.9.10rc1 2017-02-04 22:36:23 -08:00
Evan Hunt 3b1b532d66 [v9_9] release note about new root key 2017-02-04 22:16:06 -08:00
Tinderbox User c25649ae56 newcopyrights 2017-02-04 23:30:27 +00:00
Evan Hunt d8edf39f95 [v9_9] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:42:31 -08:00
Evan Hunt f3713038d5 [v9_9] revised comment 2017-02-04 00:24:25 -08:00
Tinderbox User 64258a6b83 regen v9_9 2017-02-04 01:22:01 +00:00
Evan Hunt feec25e65a [v9_9] add "configure --with-bind" option to dnsperf
4568.	[contrib]	Added a --with-bind option to the dnsperf configure
			script to specify BIND prefix path.

(cherry picked from commit adcdff94d9)
2017-02-03 16:29:24 -08:00
Tinderbox User 84150b929e update copyright notice / whitespace 2017-02-03 23:47:22 +00:00
Tinderbox User e3e1d782b9 newcopyrights 2017-02-03 23:30:22 +00:00
Evan Hunt 1b3a9c2755 [v9_9] silence "unused value" warning
(cherry picked from commit f4d20b15a2)
2017-02-03 11:27:19 -08:00
Mark Andrews 182d657891 remove outdated cvs $Id strings 2017-02-03 18:44:36 +11:00
Mark Andrews 3cf44b82b4 4567. [port] Call getprotobyname and getservbyname prior to calling
chroot so that shared libraries get loaded. [RT #44537]

(cherry picked from commit c550e75ade)
2017-02-03 14:23:45 +11:00
Tinderbox User 3afe116624 regen v9_9 2017-02-03 01:19:22 +00:00
Tinderbox User 2444ab6b88 update copyright notice / whitespace 2017-02-02 23:48:58 +00:00
Tinderbox User 759956293c newcopyrights 2017-02-02 23:30:44 +00:00