Commit Graph

5367 Commits

Author SHA1 Message Date
Tinderbox User
81aae25057 regen v9_11 2017-09-22 01:15:14 +00:00
Tinderbox User
c05cfdba6a update copyright notice / whitespace 2017-09-21 23:50:32 +00:00
Evan Hunt
71f3cd81dd [v9_11] fix typos 2017-09-21 10:13:19 -07:00
Tinderbox User
e9777ae6f9 regen v9_11 2017-09-20 01:17:06 +00:00
Mark Andrews
4ae32a6f72 remove unimplement rate-limit option [RT #46030]
(cherry picked from commit fb088a00cf)
2017-09-19 13:15:53 +10:00
Tinderbox User
acce4b333d update copyright notice / whitespace 2017-09-18 23:52:43 +00:00
Michał Kępień
b351a58647 [v9_11] Improve handling of TCP_FASTOPEN on FreeBSD
4726.	[port]		Prevent setsockopt() errors related to TCP_FASTOPEN
			from being logged on FreeBSD if the kernel does not
			support it.  Notify the user when the kernel does
			support TCP_FASTOPEN, but it is disabled by sysctl.
			Add a new configure option, --disable-tcp-fastopen, to
			disable use of TCP_FASTOPEN altogether. [RT #44754]

(cherry picked from commit c2179857de)
2017-09-18 08:34:53 +02:00
Tinderbox User
9700e6d72c regen v9_11 2017-08-30 01:21:44 +00:00
Tinderbox User
dfae459e8c regen v9_11 2017-08-25 01:20:31 +00:00
Mark Andrews
a64daf673d 4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
messages. [RT #44804]

(cherry picked from commit 07741d43c8)
2017-08-25 08:47:19 +10:00
Tinderbox User
3b0259a957 regen v9_11 2017-08-22 01:20:35 +00:00
Tinderbox User
e57ec8c501 regen v9_11 2017-08-18 01:20:17 +00:00
Tinderbox User
7db794030a regen v9_11 2017-08-15 01:21:22 +00:00
Tinderbox User
61ceead03b regen v9_11 2017-08-10 01:21:31 +00:00
Evan Hunt
5007b353e4 [v9_11] grammar error and missing reference to filter-aaaa-on-v6
(cherry picked from commit b2a5df8d4b)
2017-08-09 15:05:36 -07:00
Tinderbox User
bfb7b680bf regen v9_11 2017-08-01 01:16:08 +00:00
Tinderbox User
15f02725a8 sync 2017-08-01 01:09:50 +00:00
Evan Hunt
1073e2001c [v9_11] revise CHANGES note and add release note 2017-07-31 10:36:00 -07:00
Tinderbox User
d95b19f839 regen v9_11 2017-07-29 01:18:02 +00:00
Evan Hunt
d1c18780d3 [v9_11] remove unnecessary acronym expansions 2017-07-28 12:23:40 -07:00
Tinderbox User
a9ea295696 regenerate 2017-07-16 22:28:27 +00:00
Tinderbox User
0b89eee616 regen v9_11 2017-07-16 21:23:32 +00:00
Tinderbox User
363b21045b regen v9_11 2017-07-16 01:14:20 +00:00
Evan Hunt
d4098be27b [v9_11] update relnotes to mention termination of windows XP support 2017-07-15 13:56:54 -07:00
Tinderbox User
8c72455146 regen v9_11 2017-07-15 01:18:18 +00:00
Evan Hunt
3ba9f5804c [v9_11] add a release note for TSIG regression 2017-07-14 14:52:29 -07:00
Tinderbox User
c48fdfda7a regen v9_11 2017-07-11 03:49:36 +00:00
Mark Andrews
e55c767c89 note change in AD setting on some truncated answers
(cherry picked from commit 56d8312a48)
2017-07-11 13:29:33 +10:00
Mark Andrews
66afb7c86a add note about .local
(cherry picked from commit 9987992232)
2017-07-11 12:45:02 +10:00
Tinderbox User
c956167155 regen v9_11 2017-07-10 07:35:15 +00:00
Tinderbox User
38a5df33f4 regen v9_11 2017-07-10 06:24:26 +00:00
Tinderbox User
35255451d4 regen v9_11 2017-06-29 00:33:13 +00:00
Tinderbox User
550d3276d0 regen v9_11 2017-06-28 01:17:23 +00:00
Evan Hunt
a03f4b1ea4 [v9_11] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
2017-06-27 11:39:33 -07:00
Tinderbox User
8008316c9f regen v9_11 2017-06-26 03:15:58 +00:00
Tinderbox User
421ba11f3f regen v9_11 2017-06-14 01:15:32 +00:00
Evan Hunt
214b53880b [v9_11] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]

(cherry picked from commit bf05e66bb3)
2017-06-13 12:01:29 -07:00
Tinderbox User
51da15c886 regen v9_11 2017-05-31 01:15:21 +00:00
Evan Hunt
c28e44f3f8 [v9_11] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
2017-05-30 13:38:22 -07:00
Evan Hunt
3440cf9c60 [v9_11] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:35:06 -07:00
Tinderbox User
f00c53aafe regen v9_11 2017-05-19 01:17:52 +00:00
Evan Hunt
0725e28e47 [v9_11] remove outdated reference to libbind
(cherry picked from commit ef9ab10ce0)
2017-05-18 15:35:30 -07:00
Tinderbox User
abe69df9a7 regen v9_11 2017-05-17 01:17:01 +00:00
Tinderbox User
4745777284 update copyright notice / whitespace 2017-05-16 23:45:57 +00:00
Evan Hunt
403e7b4512 [v9_11] symbolic option names for dig +ednsopt
4555.	[func]		dig +ednsopt: EDNS options can now be specified by
			name in addition to numeric value. [RT #44461]

(cherry picked from commit 25a9b90369)
2017-05-16 10:08:17 -07:00
Tinderbox User
99b30e26a6 regen v9_11 2017-05-11 01:17:38 +00:00
Mark Andrews
613cdc91fe add warning about semicolon no longer being escaped
(cherry picked from commit d4d73bca79)
2017-05-11 11:03:06 +10:00
Tinderbox User
3b15473ced regen v9_11 2017-05-05 01:15:31 +00:00
Evan Hunt
c83a306155 [v9_11] fix lmdb delzone
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]

(cherry picked from commit 3a554a444c)
2017-05-04 12:32:47 -07:00
Evan Hunt
59663800d2 [v9_11] change markdown comment style for pandoc 2017-04-27 23:44:00 -07:00