ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
29,459 Commits 589 Branches 805 Tags
f1237c5a79c3f90238b7de8e4e1a183f2bfce848
Commit Graph
29459 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michał Kępień f1237c5a79 Merge branch 'michal/prepare-documentation-for-bind-9.11.36' into 'security-v9_11' 
Prepare documentation for BIND 9.11.36

See merge request isc-private/bind9!327
 2021-10-28 12:44:12 +02:00
Michał Kępień 4866c50c44 Merge branch '2899-security-disable-lame-cache-v9_11' into 'security-v9_11' 
[CVE-2021-25219] [v9_11] Disable "lame-ttl" cache

See merge request isc-private/bind9!324
 2021-10-28 12:44:12 +02:00
Michał Kępień e306ef83c0 Prepare release notes for BIND 9.11.36 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień f0cfa038fd Add CHANGES and release note for [GL #2899] 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień b01862e8cd Enable lame response detection even with disabled lame cache 
Previously, when lame cache would be disabled by setting lame-ttl to 0,
it would also disable lame answer detection.  In this commit, we enable
the lame response detection even when the lame cache is disabled.  This
enables stopping answer processing early rather than going through the
whole answer processing flow.
 2021-10-28 12:44:12 +02:00
Ondřej SurýandMichał Kępień 1f85706711 Disable lame-ttl cache 
The lame-ttl cache is implemented in ADB as per-server locked
linked-list "indexed" with <qname,qtype>.  This list has to be walked
every time there's a new query or new record added into the lame cache.
Determined attacker can use this to degrade performance of the resolver.

Resolver testing has shown that disabling the lame cache has little
impact on the resolver performance and it's a minimal viable defense
against this kind of attack.
 2021-10-28 12:44:12 +02:00
Michal Nowak 3f9d7859d7 Merge branch 'mnowak/debian-11-bullseye-v9_11' into 'v9_11' 
[v9_11] Add Debian 11 (bullseye)

See merge request isc-projects/bind9!5526
 2021-10-22 09:28:41 +00:00
Michal Nowak 650ed92d39 Do not spawn Debian 9 CI jobs in merge requests 
(cherry picked from commit 1b9a9c2829)
 2021-10-22 11:09:25 +02:00
Michal Nowak 3e5cd6013e Add Debian 11 (bullseye) 
(cherry picked from commit 2b5dfae5de)
 2021-10-22 11:08:45 +02:00
Michal Nowak 590ac3ca1b Merge branch 'mnowak/openbsd-7.0-v9_11' into 'v9_11' 
[v9_11] Add OpenBSD 7.0

See merge request isc-projects/bind9!5524
 2021-10-22 07:51:28 +00:00
Michal Nowak 465c57a114 Add OpenBSD 7.0 
(cherry picked from commit 75e873ed98)
 2021-10-22 09:43:33 +02:00
Ondřej Surý 75fd6ee811 Merge branch '2933-bump-the-default-clang-version-to-13-v9_11' into 'v9_11' 
Change the LLVM tools version to 13

See merge request isc-projects/bind9!5489
 2021-10-12 10:14:09 +00:00
Ondřej Surý 7004dab7d4 Change the LLVM tools version to 13 
LLVM 13.0.0 was released on 4. October 2021, change the default version
to the current stable.

(cherry picked from commit 16916ab3e3)
 2021-10-12 11:32:19 +02:00
Petr Špaček ab1bef0dfe Merge branch 'ondrej/add-python-3.8-check-v9_11' into 'v9_11' 
Add python3.8 to the autoconf search list

See merge request isc-projects/bind9!5435
 2021-09-22 08:54:23 +00:00
Ondřej Surý 2663509c12 Add python3.8 to the autoconf search list 
It was discovered that FreeBSD doesn't setup alias from default
Python version neither to python3 nor python, and thus the configure
step would fail to find working python installation.
 2021-09-22 10:28:18 +02:00
Michal Nowak f15da8b9fa Merge branch 'mnowak/replace-centos-with-oraclelinux-v9_11' into 'v9_11' 
[v9_11] Replace CentOS 7 & 8 with Oracle Linux

See merge request isc-projects/bind9!5420
 2021-09-16 15:53:28 +00:00
Michal Nowak 67f9f2349f Replace CentOS 7 & 8 with Oracle Linux 
(cherry picked from commit 3085edf1a0)
 2021-09-16 17:33:28 +02:00
Ondřej Surý 0210d98432 Merge branch '2866-split-gssapi-and-krb5-check-from-krb5-config-v9_11' into 'v9_11' 
Fix the krb5-config usage (v9.11)

See merge request isc-projects/bind9!5393
 2021-09-14 19:21:55 +00:00
Ondřej Surý 218cbd5236 Add CHANGES note for [GL ##2866] 2021-09-14 21:01:05 +02:00
Michał KępieńandOndřej Surý d89c65118a Test various --with-gssapi options in GitLab CI 
The implicit ./configure default is to use --with-gssapi=auto.  There is
already a GitLab CI job (gcc:stretch:amd64) which uses --without-gssapi.
Add four more forms of the --with-gssapi option to various GitLab CI job
configurations so that its every possible variant is regularly tested.
 2021-09-08 13:10:28 +02:00
Ondřej Surý f6dd6940bc Call krb5-config with just one argument at the time 
The autoconf script would call the krb5-config with both gssapi and krb5
libraries as arguments in a single call.  It turned out that this is
actually not supported and it breaks some platforms.  This commit splits
the call into two separate calls - one for gssapi and one for krb5
library.
 2021-09-08 13:10:25 +02:00
Ondřej SurýandOndřej Surý f67479fe48 Revert "Resolve 'Configuration issues on Solaris 11.4'" MR 
The MR in question broke the configure script in different way,
so we are going to use a different fix.
 2021-09-08 13:09:24 +02:00
Mark Andrews eff7921c33 Merge branch '1805-save-failed-build-artifacts-v9_11' into 'v9_11' 
always save build artifacts

See merge request isc-projects/bind9!5365
 2021-08-26 04:45:59 +00:00
Mark Andrews 4c4fe6a800 always save build artifacts 
(cherry picked from commit 221228572f)
 2021-08-26 14:22:02 +10:00
Michał Kępień 0480e212bf Merge branch 'v9_11_35-release' into 'v9_11' 
Merge 9.11.35 release branch

See merge request isc-projects/bind9!5340
 2021-08-19 05:36:04 +00:00
Michał Kępień 94dc186441 Set up release notes for BIND 9.11.36 2021-08-19 07:31:02 +02:00
Michał Kępień c1afa10fce Bump BIND_BASELINE_VERSION for ABI checks 2021-08-19 07:31:02 +02:00
Tinderbox User 8aead5f87a Merge branch 'prep-release' into v9_11_35-release v9.11.35 2021-08-10 22:00:41 +00:00
Tinderbox User bee1b09a24 prep 9.11.35 2021-08-10 22:00:23 +00:00
Michał Kępień 6900668e09 Merge branch 'michal/prepare-documentation-for-bind-9.11.35' into 'v9_11_35-release' 
Prepare documentation for BIND 9.11.35

See merge request isc-private/bind9!318
 2021-08-10 21:39:51 +00:00
Michał Kępień 2f37bd4cd3 Prepare release notes for BIND 9.11.35 2021-08-10 23:38:03 +02:00
Michał Kępień 6859b18d7b Tweak and reword release notes 2021-08-10 23:38:03 +02:00
Michał Kępień f565978451 Tweak and reword recent CHANGES entries 2021-08-10 23:38:03 +02:00
Michal Nowak 17a1334660 Merge branch 'mnowak/fix-pylint-v9_11' into 'v9_11' 
Make kasp2policy.py PyLint-clean

See merge request isc-projects/bind9!5307
 2021-07-28 09:16:46 +00:00
Michal Nowak 56480bd705 Make kasp2policy.py PyLint-clean 
PyLint 2.9.5 reported the following errors:
    contrib/kasp/kasp2policy.py:25:0: R0402: Use 'from ply import yacc' instead (consider-using-from-import)
    contrib/kasp/kasp2policy.py:26:0: R0402: Use 'from ply import lex' instead (consider-using-from-import)

(cherry picked from commit 4e09411371)
 2021-07-28 11:12:05 +02:00
Michal Nowak b5bff89020 Merge branch 'v9_11_34-release' into 'v9_11' 
Merge 9.11.34 release branch

See merge request isc-projects/bind9!5303
 2021-07-26 09:52:43 +00:00
Michal Nowak 2c1c2431a4 Set up release notes for BIND 9.11.35 2021-07-23 10:46:37 +02:00
Michal Nowak 0abd05bdf6 Bump BIND_BASELINE_VERSION for ABI checks 2021-07-23 10:45:06 +02:00
Tinderbox UserandMichal Nowak c60717957e Merge branch 'prep-release' into v9_11_34-release 2021-07-23 10:45:06 +02:00
Tinderbox UserandMichal Nowak 84bf0d4f55 prep 9.11.34 2021-07-23 10:44:39 +02:00
Michał KępieńandMichal Nowak 1792a171a4 Merge branch 'michal/prepare-documentation-for-bind-9.11.34' into 'v9_11_34-release' 
Prepare release notes for BIND 9.11.34

See merge request isc-private/bind9!310
 2021-07-23 10:43:44 +02:00
Michał KępieńandMichal Nowak 11fb690be1 Prepare release notes for BIND 9.11.34 2021-07-23 10:43:29 +02:00
Michal Nowak 3ebbafd1e4 Merge branch '2473-run-respdiff-as-part-of-daily-runs-v9_11' into 'v9_11' 
[v9_11] Run respdiff also for scheduled and web pipelines

See merge request isc-projects/bind9!5298
 2021-07-22 13:01:40 +00:00
Michal Nowak 370d27ca48 Run respdiff also for scheduled and web pipelines 
respdiff needs to be run regularly to identify problems with query
responses discrepancies sooner than after tagging a release.

Contrary to the main branch, which hosts the BIND 9 Development Version
and thus sets MAX_DISAGREEMENTS_PERCENTAGE variable to 0.5, branches
hosting BIND 9 Stable Versions have it set to 0.1, which provides only
tiny room for non-timeout response disagreements between the baseline
version and version under test.

(cherry picked from commit 561b58196b)
 2021-07-22 14:23:52 +02:00
Mark Andrews 64512b0e9b Merge branch '2762-check-opcode-v9_11' into 'v9_11' 
Check opcode of messages returned by dns_request_getresponse

See merge request isc-projects/bind9!5288
 2021-07-21 03:07:36 +00:00
Mark Andrews 39e7462f25 add release note for [GL #2762] 
(cherry picked from commit 36720fb4a6)
 2021-07-21 12:47:34 +10:00
Mark Andrews a490623466 Add CHANGES for [GL #2762] 
(cherry picked from commit 466db0f49e)
 2021-07-21 12:43:46 +10:00
Mark Andrews 0966057f40 check nsupdate handles UPDATE response to QUERY 
(cherry picked from commit 0bba0ab10d)
 2021-07-21 12:42:49 +10:00
Mark Andrews 5374630ca4 dns_rdata_tostruct() should reject rdata with DNS_RDATA_UPDATE set 
(cherry picked from commit e97249e012)
 2021-07-21 12:41:35 +10:00
Mark Andrews 45e5972808 Check opcode of messages returned by dns_request_getresponse 
(cherry picked from commit ed4e00713f)
 2021-07-21 12:41:35 +10:00