Automatic Updater
8f7aff9340
update copyright notice
2010-01-07 23:46:07 +00:00
Evan Hunt
e4cb322618
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 17:49:50 +00:00
cvs2git
9300b13653
This commit was manufactured by cvs2git to create branch 'v9_4'.
2010-01-07 16:48:24 +00:00
Evan Hunt
597642c0ba
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 16:48:23 +00:00
Tatuya JINMEI 神明達哉
59721b321d
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
because it's disabled by default for 9.4. This is not a problem of this
patch - the test was broken for 9.4 when it was first introduced. Another
reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
promotion as 9.4 doesn't include this bug fix.
2009-12-30 08:55:48 +00:00
cvs2git
5a435720cd
This commit was manufactured by cvs2git to create branch 'v9_4'.
2009-12-30 08:02:24 +00:00
Tatuya JINMEI 神明達哉
d8680445d6
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Mark Andrews
2fbc6a0f23
add copyright
2009-12-03 04:53:09 +00:00
Mark Andrews
ecbbb29519
add copyright
2009-12-03 04:51:41 +00:00
Automatic Updater
521de9e5dd
update copyright notice
2009-11-25 23:46:52 +00:00
Mark Andrews
29b3b31c0a
adjust dnssec-keygen command line to that supported before 9.7
2009-11-25 20:56:08 +00:00
Mark Andrews
6e849b28b0
fix genrandom location
2009-11-25 13:38:53 +00:00
Mark Andrews
b4bd8d0662
772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-25 04:50:25 +00:00
Automatic Updater
fe2b9bf570
update copyright notice
2009-11-18 23:48:07 +00:00
Mark Andrews
a39a5f4d81
2772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-17 23:55:18 +00:00
