Commit Graph

19283 Commits

Author SHA1 Message Date
Automatic Updater
fbae39e299 update 2010-01-07 18:15:39 +00:00
Evan Hunt
e4cb322618 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 17:49:50 +00:00
cvs2git
9300b13653 This commit was manufactured by cvs2git to create branch 'v9_4'. 2010-01-07 16:48:24 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:48:23 +00:00
Automatic Updater
4715754ba9 update 2010-01-07 00:19:43 +00:00
Automatic Updater
247f299fb0 update copyright notice 2010-01-06 23:48:47 +00:00
Automatic Updater
b29e5c56eb newcopyrights 2010-01-06 23:30:45 +00:00
Automatic Updater
76e65f9151 update 2010-01-06 01:16:55 +00:00
Evan Hunt
b1fbf2a4db fix spacing 2010-01-06 00:53:45 +00:00
Automatic Updater
f977f347f0 update 2010-01-06 00:19:50 +00:00
Automatic Updater
3ee1371212 update copyright notice 2010-01-05 23:48:37 +00:00
Automatic Updater
0977f3f39e newcopyrights 2010-01-05 23:30:42 +00:00
Automatic Updater
0261624e84 auto update 2010-01-05 23:18:43 +00:00
Automatic Updater
f9205dd2ef update 2010-01-05 16:17:10 +00:00
Evan Hunt
564d687132 missing newline in dnssec-signzone usage 2010-01-05 15:31:58 +00:00
Automatic Updater
fa0736a341 update 2010-01-05 00:19:28 +00:00
Automatic Updater
842920c7db update copyright notice 2010-01-04 23:48:51 +00:00
Automatic Updater
205c10066a newcopyrights 2010-01-04 23:30:43 +00:00
Automatic Updater
9ee9011747 update 2010-01-04 23:17:18 +00:00
Evan Hunt
d3a6cd7c7e 2830. [bug] Changing the OPTOUT setting could take multiple
passes. [RT #20813]
2010-01-04 22:47:58 +00:00
Evan Hunt
845bb3195a 2829. [bug] Fixed potential node inconsistency in rbtdb.c.
[RT #20808]
2010-01-04 22:30:14 +00:00
Automatic Updater
7549cd6daa update 2009-12-31 00:20:02 +00:00
Automatic Updater
32b105a341 update 2009-12-31 00:16:26 +00:00
Automatic Updater
400615c294 update copyright notice 2009-12-30 23:49:14 +00:00
Automatic Updater
51ae9cb9f8 update copyright notice 2009-12-30 23:46:04 +00:00
Automatic Updater
6473a5d888 newcopyrights 2009-12-30 23:30:48 +00:00
Automatic Updater
4698bf7f37 newcopyrights 2009-12-30 23:30:18 +00:00
Automatic Updater
75f83bc01d update 2009-12-30 09:15:35 +00:00
Tatuya JINMEI 神明達哉
59721b321d 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)

Additional notes specific to 9.4-ESV:
- I needed to explicitly enable dnssec-validation in "pending" system tests
  because it's disabled by default for 9.4.  This is not a problem of this
  patch - the test was broken for 9.4 when it was first introduced.  Another
  reason why we need more detailed tests.
- I modified the test case for 9.4 so that it allows pending-additional-to-answer
   promotion as 9.4 doesn't include this bug fix.
2009-12-30 08:55:48 +00:00
Automatic Updater
9745e98876 update 2009-12-30 08:19:52 +00:00
cvs2git
5a435720cd This commit was manufactured by cvs2git to create branch 'v9_4'. 2009-12-30 08:02:24 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Automatic Updater
0f348b269b update 2009-12-30 07:17:54 +00:00
Automatic Updater
bc46df332b update 2009-12-30 07:15:38 +00:00
Evan Hunt
9ead684875 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:46:58 +00:00
Evan Hunt
d7985983b0 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:44:05 +00:00
Automatic Updater
3156309a79 update 2009-12-30 04:21:03 +00:00
Evan Hunt
687b6322fb 2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
being released.  [RT #20740]
2009-12-30 03:38:57 +00:00
Automatic Updater
5a1d90c7ed update 2009-12-30 03:21:48 +00:00
Mark Andrews
57fb4f7bbe 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 02:43:09 +00:00
Mark Andrews
7ddd859470 more for:
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58 more for:
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
2009-12-30 02:26:30 +00:00
Automatic Updater
0216fd2ac6 auto update 2009-12-29 23:19:13 +00:00
Automatic Updater
7fc63ac0ed update 2009-12-29 23:17:04 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759]
2009-12-29 22:20:33 +00:00
Automatic Updater
5e4b540170 update 2009-12-29 22:17:09 +00:00
Mark Andrews
288486df9d 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:04:16 +00:00
Automatic Updater
d4c0bf0a08 update 2009-12-29 09:17:23 +00:00
Mark Andrews
5773d3c007 2822. [bug] rbtdb.c:loadnode() could return the wrong result.
[RT #20802]
2009-12-29 08:53:33 +00:00
Automatic Updater
845309d349 update 2009-12-29 01:16:31 +00:00