Automatic Updater
fbae39e299
update
2010-01-07 18:15:39 +00:00
Evan Hunt
e4cb322618
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 17:49:50 +00:00
cvs2git
9300b13653
This commit was manufactured by cvs2git to create branch 'v9_4'.
2010-01-07 16:48:24 +00:00
Evan Hunt
597642c0ba
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 16:48:23 +00:00
Automatic Updater
4715754ba9
update
2010-01-07 00:19:43 +00:00
Automatic Updater
247f299fb0
update copyright notice
2010-01-06 23:48:47 +00:00
Automatic Updater
b29e5c56eb
newcopyrights
2010-01-06 23:30:45 +00:00
Automatic Updater
76e65f9151
update
2010-01-06 01:16:55 +00:00
Evan Hunt
b1fbf2a4db
fix spacing
2010-01-06 00:53:45 +00:00
Automatic Updater
f977f347f0
update
2010-01-06 00:19:50 +00:00
Automatic Updater
3ee1371212
update copyright notice
2010-01-05 23:48:37 +00:00
Automatic Updater
0977f3f39e
newcopyrights
2010-01-05 23:30:42 +00:00
Automatic Updater
0261624e84
auto update
2010-01-05 23:18:43 +00:00
Automatic Updater
f9205dd2ef
update
2010-01-05 16:17:10 +00:00
Evan Hunt
564d687132
missing newline in dnssec-signzone usage
2010-01-05 15:31:58 +00:00
Automatic Updater
fa0736a341
update
2010-01-05 00:19:28 +00:00
Automatic Updater
842920c7db
update copyright notice
2010-01-04 23:48:51 +00:00
Automatic Updater
205c10066a
newcopyrights
2010-01-04 23:30:43 +00:00
Automatic Updater
9ee9011747
update
2010-01-04 23:17:18 +00:00
Evan Hunt
d3a6cd7c7e
2830. [bug] Changing the OPTOUT setting could take multiple
...
passes. [RT #20813 ]
2010-01-04 22:47:58 +00:00
Evan Hunt
845bb3195a
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
...
[RT #20808 ]
2010-01-04 22:30:14 +00:00
Automatic Updater
7549cd6daa
update
2009-12-31 00:20:02 +00:00
Automatic Updater
32b105a341
update
2009-12-31 00:16:26 +00:00
Automatic Updater
400615c294
update copyright notice
2009-12-30 23:49:14 +00:00
Automatic Updater
51ae9cb9f8
update copyright notice
2009-12-30 23:46:04 +00:00
Automatic Updater
6473a5d888
newcopyrights
2009-12-30 23:30:48 +00:00
Automatic Updater
4698bf7f37
newcopyrights
2009-12-30 23:30:18 +00:00
Automatic Updater
75f83bc01d
update
2009-12-30 09:15:35 +00:00
Tatuya JINMEI 神明達哉
59721b321d
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
because it's disabled by default for 9.4. This is not a problem of this
patch - the test was broken for 9.4 when it was first introduced. Another
reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
promotion as 9.4 doesn't include this bug fix.
2009-12-30 08:55:48 +00:00
Automatic Updater
9745e98876
update
2009-12-30 08:19:52 +00:00
cvs2git
5a435720cd
This commit was manufactured by cvs2git to create branch 'v9_4'.
2009-12-30 08:02:24 +00:00
Tatuya JINMEI 神明達哉
d8680445d6
2828. [security] Cached CNAME or DNAME RR could be returned to clients
...
without DNSSEC validation. [RT #20737 ]
9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Automatic Updater
0f348b269b
update
2009-12-30 07:17:54 +00:00
Automatic Updater
bc46df332b
update
2009-12-30 07:15:38 +00:00
Evan Hunt
9ead684875
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:46:58 +00:00
Evan Hunt
d7985983b0
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:44:05 +00:00
Automatic Updater
3156309a79
update
2009-12-30 04:21:03 +00:00
Evan Hunt
687b6322fb
2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
...
being released. [RT #20740 ]
2009-12-30 03:38:57 +00:00
Automatic Updater
5a1d90c7ed
update
2009-12-30 03:21:48 +00:00
Mark Andrews
57fb4f7bbe
2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
...
was in the process of being created was not properly
recorded in the zone. [RT #20786 ]
2009-12-30 02:43:09 +00:00
Mark Andrews
7ddd859470
more for:
...
2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759 ]
2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58
more for:
...
2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759 ]
2009-12-30 02:26:30 +00:00
Automatic Updater
0216fd2ac6
auto update
2009-12-29 23:19:13 +00:00
Automatic Updater
7fc63ac0ed
update
2009-12-29 23:17:04 +00:00
Mark Andrews
5b77627c09
2824. [bug] "rndc sign" was not being run by the correct task.
...
[RT #20759 ]
2009-12-29 22:20:33 +00:00
Automatic Updater
5e4b540170
update
2009-12-29 22:17:09 +00:00
Mark Andrews
288486df9d
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781 ]
2009-12-29 22:04:16 +00:00
Automatic Updater
d4c0bf0a08
update
2009-12-29 09:17:23 +00:00
Mark Andrews
5773d3c007
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
...
[RT #20802 ]
2009-12-29 08:53:33 +00:00
Automatic Updater
845309d349
update
2009-12-29 01:16:31 +00:00