ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
25,330 Commits 589 Branches 805 Tags
abe5cf42b368df1e8e0be37a73ba4ede4c4e4d05
Commit Graph
1881 Commits
Author SHA1 Message Date
Tinderbox User c6a2d3a9e6 regen master 2017-06-28 01:09:32 +00:00
Evan Hunt 581c1526ab [master] address TSIG bypass/forgery vulnerabilities 
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]
 2017-06-27 11:39:19 -07:00
Tinderbox User d6b626e9a7 regen master 2017-06-14 01:08:21 +00:00
Evan Hunt bf05e66bb3 [master] prevent reload failure due to LMDB database perms 
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]
 2017-06-13 10:15:34 -07:00
Evan Hunt 0471530aae [master] nsec3hash -r 
4637.	[func]		"nsec3hash -r" option ("rdata order") takes arguments
			in the same order as they appear in NSEC3 or
			NSEC3PARAM records, so that NSEC3 parameters can
			be cut and pasted from an existing record. Thanks
			to Tony Finch for the contribution. [RT #45183]
 2017-06-13 00:39:10 -07:00
Tinderbox User d37d9a6873 regen master 2017-05-31 01:08:13 +00:00
Evan Hunt 967a3b9419 [master] quote service registry paths 
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]
 2017-05-30 13:35:59 -07:00
Evan Hunt 2648c49be7 [master] fix rpz formerr loop 
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
 2017-05-30 12:30:28 -07:00
Tinderbox User a014b329f2 regen master 2017-05-19 01:09:39 +00:00
Evan Hunt ef9ab10ce0 [master] remove outdated reference to libbind 2017-05-18 15:35:06 -07:00
Tinderbox User bdf087ba00 regen master 2017-05-12 01:09:53 +00:00
Mark Andrews d4d73bca79 add warning about semicolon no longer being escaped 2017-05-11 11:02:35 +10:00
Tinderbox User f9d602f35c regen master 2017-05-05 01:08:31 +00:00
Evan Hunt 3a554a444c [master] fix lmdb delzone 
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]
 2017-05-04 12:32:32 -07:00
Tinderbox User 51da560543 regen master 2017-05-04 01:08:23 +00:00
Mark Andrews 071fe723a1 fix tag mismatch 2017-05-03 11:15:14 +10:00
Evan Hunt d39ab7440e [master] automatically tune max-journal-size 
4613.	[func]		By default, the maximum size of a zone journal file
			is now twice the size of the zone's contents (there
			is little benefit to a journal larger than this).
			This can be overridden by setting "max-journal-size"
			to "unlimited" or to an explicit value up to 2G.
			Thanks to Tony Finch. [RT #38324]
 2017-05-02 13:23:08 -07:00
Tinderbox User 57994a07f7 regen master 2017-04-27 00:43:03 +00:00
Mukund Sivaraman 241b49e611 Set a LMDB mapsize and also provide a config option to control it (#44954) 2017-04-26 23:51:26 +05:30
Tinderbox User c118d16a1c regen master 2017-04-25 01:06:00 +00:00
Tinderbox User 18b7760b29 update copyright notice / whitespace 2017-04-24 23:45:33 +00:00
Evan Hunt 2dfb992349 [master] new-zones-directory option 
4610.	[func]		The "new-zones-directory" option specifies the
			location of NZF or NZD files for storing
			configuration of zones added by "rndc addzone".
			Thanks to Petr Menšík. [RT #44853]
 2017-04-23 23:16:53 -07:00
Tinderbox User f5fa655319 regen master 2017-04-23 01:06:11 +00:00
Evan Hunt 3a10cf1f07 [master] add a release note for performance improvements 2017-04-21 21:48:50 -07:00
Mukund Sivaraman 03be5a6b4e Improve performance for delegation heavy answers and also general query performance (#44029) 2017-04-22 09:22:44 +05:30
Evan Hunt d26ae7fc08 [master] give threads unique names to assist debugging 
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]
 2017-04-21 13:59:40 -07:00
Evan Hunt f5c39b072c [master] hex output mode for dnstap-read 
4594.	[func]		"dnstap-read -x" prints a hex dump of the wire
			format of each logged DNS message. [RT #44816]
 2017-04-20 20:22:19 -07:00
Tinderbox User 2d863323b6 regen master 2017-04-21 01:05:18 +00:00
Tinderbox User 19643a1ded regen master 2017-04-13 01:05:08 +00:00
Evan Hunt 52e398c0af [master] formatting 2017-04-12 14:05:54 -07:00
Tinderbox User e67fe90a1f regen master 2017-04-12 01:05:15 +00:00
Tinderbox User 0a1d79ed8f regen master 2017-03-30 01:05:19 +00:00
Mark Andrews fe1ad70e51 add CVE-2017-3138 2017-03-30 02:56:33 +11:00
Tinderbox User 38704ecee9 regen master 2017-03-26 01:05:14 +00:00
Evan Hunt 39eb1d0353 [master] host -A 
4593.	[func]		"host -A" returns most records for a name but
			omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
			[RT #43032]
 2017-03-25 12:49:25 -07:00
Tinderbox User ecbef65ae5 regen master 2017-03-13 01:05:40 +00:00
Evan Hunt d2650297ca [master] tag mismatch 2017-03-10 17:34:01 -08:00
Mark Andrews 786402ec12 fix tag mismatch 2017-03-10 13:05:59 +11:00
Tinderbox User d2f2db283b update copyright notice / whitespace 2017-03-09 23:46:23 +00:00
Evan Hunt 612b2e2c0d [master] timestamp suffixes for log files 
4579.	[func]		Logging channels and dnstap output files can now
			be configured with a "suffix" option, set to
			either "increment" or "timestamp", indicating
			whether to use incrementing numbers or timestamps
			as the file suffix when rolling over a log file.
			[RT #42838]
 2017-03-08 23:20:40 -08:00
Evan Hunt aa00b31b17 [master] fix ARM merge error 2017-03-08 22:51:26 -08:00
Tinderbox User 02716f97c1 regen master 2017-03-02 01:05:06 +00:00
Tinderbox User a06081491c regen master 2017-02-24 01:04:54 +00:00
Evan Hunt a1365a0042 [master] remove unnecessary INSIST 
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]
 2017-02-23 14:34:33 -08:00
Tinderbox User c4dbad7b36 regen master 2017-02-21 01:04:58 +00:00
Witold Krecicki fa9b4de716 4576. [func] The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449] 2017-02-20 11:57:28 +01:00
Tinderbox User a32fa1246e regen master 2017-02-16 01:05:00 +00:00
Mark Andrews 009c98a1be add CVE-2017-3136 note 
(cherry picked from commit d77eadc261)
 2017-02-15 12:45:38 +11:00
Tinderbox User a95dc83de5 regen master 2017-02-09 01:04:58 +00:00
wpk 96912e44b0 4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability 2017-02-08 22:15:01 +01:00