Evan Hunt
bfdeccc5bd
ensure rpz summary consistence during AXFR updates
...
4121. [bug] When updating a response-policy zone via AXFR,
summary data about other policy zones could fall
out of sync. Ultimately this could trigger an
assertion failure in rpz.c. [RT #39567 ]
(cherry picked from commit 19365b43e9433b64a548
2015-05-21 12:39:43 -07:00
Evan Hunt
e1dc78dd6e
[v9_10_2_patch] address a possible policy update race
...
4120. [bug] A bug in RPZ could cause the server to crash if
policy zones were updated while recursion was
pending for RPZ processing of an active query.
[RT #39415 ]
(cherry picked from commit 7e6cf6fc6e04defaf799
2015-05-21 12:39:39 -07:00
Evan Hunt
0ed7ac26f1
Fix a bug in RPZ that could cause unwanted recursion ( #39229 )
...
(cherry picked from commit b947e1a5215cbd509a3d
2015-05-21 12:38:54 -07:00
Tinderbox User
53e49fb5a8
regenerate
2015-02-18 01:55:55 +00:00
Tinderbox User
ab4c4f1431
regen v9_10
2015-02-18 01:40:13 +00:00
Tinderbox User
a60d1d80f9
regenerate
2015-02-11 00:00:38 +00:00
Tinderbox User
bce6232a49
regen v9_10
2015-02-10 23:58:03 +00:00
Evan Hunt
f87d4ca084
[v9_10] 5011 fixes
...
4056. [bug] Fixed several small bugs in automatic trust anchor
management, including a memory leak and a possible
loss of key state information. [RT #38458 ]
2015-02-10 12:59:38 -08:00
Tinderbox User
11cca1cf7e
regen v9_10
2015-02-06 01:08:25 +00:00
Evan Hunt
6bd82ee4a5
[v9_10] avoid crash due to managed-key rollover
...
4053. [security] Revoking a managed trust anchor and supplying
an untrusted replacement could cause named
to crash with an assertion failure.
(CVE-2015-1349) [RT #38344 ]
2015-02-03 18:25:58 -08:00
Tinderbox User
18f1c5b304
regen v9_10
2015-02-04 01:08:20 +00:00
Evan Hunt
039c916c48
[v9_10] clarify edns-udp-size doc
...
(cherry picked from commit 7267d1f335
2015-02-03 13:36:54 -08:00
Mukund Sivaraman
6ba6c73179
Update notes.xml for #38454
...
(cherry picked from commit e3e783a0e9
2015-02-03 12:08:17 +05:30
Tinderbox User
d0c7c4694d
regenerate
2015-01-26 19:13:27 +00:00
Tinderbox User
788d6fa8fb
regen v9_10
2015-01-23 01:08:32 +00:00
Tinderbox User
051d488aef
regenerate
2015-01-22 18:39:57 +00:00
Tinderbox User
e48e2d8638
regen v9_10
2015-01-22 01:08:28 +00:00
Evan Hunt
ce85d3132e
[v9_10] oops, semicolons were still wrong
2015-01-21 11:43:56 -08:00
Evan Hunt
20377516b6
[v9_10] reformat response-policy grammar
...
There was an overly long line that ran off the end of the
page in the PDF; also missing semicolons and close brace.
2015-01-21 11:19:33 -08:00
Tinderbox User
534f45eecf
update copyright notice / whitespace
2015-01-14 23:45:49 +00:00
Tony Finch and Mukund Sivaraman
94f84083e4
doc: ignore and clean up isc-notes-html.xsl
...
(cherry picked from commit eb4221895f
2015-01-14 17:27:15 +05:30
Tinderbox User
37cff9600e
regen v9_10
2015-01-14 01:08:26 +00:00
Tinderbox User
fcdfeaa0c2
update copyright notice / whitespace
2015-01-13 23:45:46 +00:00
Evan Hunt
fa2cf1a85e
[v9_10] document default DNSKEY TTL
...
- see RT #38268
2015-01-13 09:55:21 -08:00
Evan Hunt
351181c89d
[v9_10] document dscp option
2015-01-13 09:16:00 -08:00
Tinderbox User
6c4bed17c9
regen v9_10
2015-01-12 03:39:18 +00:00
Tinderbox User
631be33a32
regen v9_10
2015-01-11 01:09:02 +00:00
Tinderbox User
71b009ae5a
update copyright notice / whitespace
2015-01-10 23:45:50 +00:00
Evan Hunt
45adb24e0f
[v9_10] revise pkcs11 doc
2015-01-10 11:39:41 -08:00
Mark Andrews
41460026bc
4032. [bug] Built-in "empty" zones did not correctly inherit the
...
"allow-transfer" ACL from the options or view.
[RT #38310 ]
(cherry picked from commit 7952156995
2015-01-10 22:03:57 +11:00
Evan Hunt
173d9db665
[v9_10] improve pkcs11.xml documentation
...
see RT #37801
2015-01-10 00:37:38 -08:00
Tinderbox User
dae9be9597
regen v9_10
2015-01-09 01:08:52 +00:00
Tinderbox User
167beb6aa5
update copyright notice / whitespace
2015-01-08 23:45:50 +00:00
Evan Hunt
b21229de09
[v9_10] clean up release note stylesheets
2015-01-07 17:29:11 -08:00
Tinderbox User
ab4c346072
regen v9_10
2015-01-06 01:08:17 +00:00
Tinderbox User
99d9cff985
update copyright notice / whitespace
2015-01-05 23:45:50 +00:00
Evan Hunt
8589b25367
[v9_10] suppress table of contents in notes.html and notes.pdf
2015-01-05 14:31:52 -08:00
Evan Hunt
81e7b830bc
[v9_10] add style and developer guide source
2014-12-31 12:51:11 -08:00
Tinderbox User
fb3b6818ad
regenerate
2014-12-29 23:44:02 +00:00
Tinderbox User
4e94e71fd5
regen v9_10
2014-12-19 01:08:42 +00:00
Tinderbox User
c6b7736111
regen v9_10
2014-12-17 01:08:28 +00:00
Evan Hunt
b0e9108311
[v9_10] adjust max-recursion-queries
...
4021. [bug] Adjust max-recursion-queries to accommodate
the need for more queries when the cache is
empty. [RT #38104 ]
(cherry picked from commit be7fba8019
2014-12-15 22:28:26 -08:00
Tinderbox User
67e9f1fd66
regen v9_10
2014-12-06 01:09:03 +00:00
Mark Andrews
cb41aeedd9
4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
...
resulting in updates being sent to the wrong server.
[RT #37925 ]
(cherry picked from commit 03fd9cb81c
2014-12-05 18:26:57 +11:00
Mark Andrews
ac9781c7cd
4019. [func] If named is not configured to validate the answer
...
then allow fallback to plain DNS on timeout even
when we know the server supports EDNS. [RT #37978 ]
2014-12-05 18:04:26 +11:00
Tinderbox User
029dd16a4d
regen v9_10
2014-12-04 01:08:41 +00:00
Mark Andrews
e5d902504f
4017. [testing] Add system test to check lookups to legacy servers
...
with broken DNS behaviour. [RT #37965 ]
2014-12-04 07:05:18 +11:00
Tinderbox User
e5703b5dc2
regen v9_10
2014-12-03 01:08:46 +00:00
Mark Andrews
b99cdea866
4015. [bug] Nameservers that are skipped due to them being
...
CNAMEs were not being logged. They are now logged
to category 'cname' as per BIND 8. [RT #37935 ]
(cherry picked from commit ea3aa401bc
2014-12-03 11:42:16 +11:00
Tinderbox User
9d91651e5d
regen v9_10
2014-11-22 01:09:05 +00:00
Evan Hunt
Tinderbox User
Mukund Sivaraman
Tony FinchandMukund Sivaraman
Mark Andrews