Commit Graph

4999 Commits

Author SHA1 Message Date
Tinderbox User
340305002b update copyright notice / whitespace 2016-03-09 00:56:29 +00:00
Tinderbox User
2f3745aee1 regen v9_10 2016-03-09 00:42:52 +00:00
Mark Andrews
be91c04d4b use xmlint to process include
(cherry picked from commit 71e9df17b671f7ef5742967b25a1ab36ec3dd91b)
2016-03-09 11:35:01 +11:00
Tinderbox User
d8aa0b288b 9.10.4b1 2016-03-08 22:57:29 +00:00
Tinderbox User
52d3b7fc53 regen v9_10 2016-03-08 22:38:55 +00:00
Mark Andrews
90499817bf add automatic-interface-scan to ARM grammar 2016-03-09 08:57:12 +11:00
Jeremy C. Reed
d64f7b7dcb add resource record type added, typo fix, new contrib software, and named -V 2016-03-08 09:42:45 -05:00
Tinderbox User
4278332e2e regen v9_10 2016-03-08 06:19:40 +00:00
Mark Andrews
b712215fcb 9.10.4b1 2016-03-08 11:53:41 +11:00
Tinderbox User
87bdeb8a8b regen v9_10 2016-03-06 01:07:51 +00:00
Mark Andrews
49abe5882d add AVC
(cherry picked from commit e011df2927)
2016-03-05 17:57:16 +11:00
Tinderbox User
89a9ff4a85 regen v9_10 2016-03-05 01:19:08 +00:00
Mark Andrews
96085d274e add AVC 2016-03-04 18:17:57 +11:00
Evan Hunt
db06cd726c [v9_10] recursively clean empty interior nodes when deleting database records
4324.	[bug]		When deleting records from a zone database, interior
			nodes could be left empty but not deleted, damaging
			search performance afterward. [RT #40997]

(cherry picked from commit 44c86318ed)
2016-03-03 21:15:21 -08:00
Tinderbox User
6d12bd7997 regen v9_10 2016-03-01 01:07:17 +00:00
Mark Andrews
ca3d4db1a5 re-order security list into reverse order 2016-02-29 12:44:35 +11:00
Tinderbox User
3288843a56 regen v9_10 2016-02-27 01:07:30 +00:00
Mark Andrews
7cd300abd6 4322. [security] Duplicate EDNS COOKIE options in a response could
trigger an assertion failure. (CVE-2016-2088)
                        [RT #41809]

(cherry picked from commit 455c0848f8)
2016-02-27 11:46:16 +11:00
Tinderbox User
baa71f756a regen v9_10 2016-02-23 01:07:37 +00:00
Mukund Sivaraman
456e1eadd2 Fix resolver assertion failure due to improper DNAME handling (CVE-2016-1286) (#41753)
(cherry picked from commit 5995fec51c)
2016-02-22 12:24:15 +05:30
Tinderbox User
a372b927ed regen v9_10 2016-02-19 01:07:10 +00:00
Mark Andrews
e7e15d1302 4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]

(cherry picked from commit a2b15b3305)
2016-02-18 12:12:02 +11:00
Tinderbox User
ee0661903e regen v9_10 2016-01-30 01:07:14 +00:00
Evan Hunt
f88b79ab08 [v9_10] remove reporter's name per his request 2016-01-29 10:37:45 -08:00
Tinderbox User
88bdff9eac regen v9_10 2016-01-29 01:07:17 +00:00
Tinderbox User
392e684f0e update copyright notice / whitespace 2016-01-28 23:46:02 +00:00
Evan Hunt
07f2374a12 [v9_10] openssl 1.0.2f patch
4306.	[maint]		Added a PKCS#11 openssl patch supporting
			version 1.0.2f [RT #38312]
2016-01-28 13:27:48 -08:00
Evan Hunt
0146f39472 [v9_10] correct also-notify grammar 2016-01-27 19:07:59 -08:00
Tinderbox User
4ce081323c regen v9_10 2016-01-06 01:07:27 +00:00
Evan Hunt
6f39162aaf [v9_10] fix ticket number 2016-01-05 09:08:57 -08:00
Evan Hunt
79e824b2eb [v9_10] fix use after free on xfr timeout
4289.	[bug]		The server could crash due to memory being used
			after it was freed if a zone transfer timed out.
			[RT #41297]
2016-01-04 22:06:05 -08:00
Tinderbox User
70b193a8f3 regen v9_10 2016-01-05 01:35:44 +00:00
Tinderbox User
e11aa3e52c fix tag mismatch 2016-01-05 01:30:22 +00:00
Evan Hunt
0dd38adbe7 [v9_10] Merge branch 'v9_10' of ssh://repo/proj/git/prod/bind9 into v9_10 2016-01-04 16:10:05 -08:00
Evan Hunt
b4cf962eef [v9_10] fixed bogus server regression
4288.	[bug]		Fixed a regression in resolver.c:possibly_mark()
			which caused known-bogus servers to be queried
			anyway. [RT #41321]
2016-01-04 16:01:38 -08:00
Evan Hunt
e81fd88813 [v9_10] clean up relnotes to include only things added since 9.10.3 2016-01-04 16:00:33 -08:00
Tinderbox User
add1f7a8d2 update copyright notice / whitespace 2016-01-04 23:45:56 +00:00
Evan Hunt
ae14e490cc [v9_10] clean up notes 2016-01-03 21:22:55 -08:00
Tinderbox User
82962d684b regen v9_10 2016-01-01 01:07:18 +00:00
Mark Andrews
a9eeaea7d6 4286. [security] render_ecs errors were mishandled when printing out
a OPT record resulting in a assertion failure.
                        (CVE-2015-8705) [RT #41397]

(cherry picked from commit 3e0c1603a8)
2015-12-31 22:19:31 +11:00
Mark Andrews
b248438052 remove period 2015-12-31 14:34:44 +11:00
Mark Andrews
8725470692 4285. [security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]

(cherry picked from commit 1b3d211802)
2015-12-31 13:45:36 +11:00
Tinderbox User
06a863ff1e regen v9_10 2015-12-27 01:07:14 +00:00
Evan Hunt
a65eda95d0 [v9_10] fix geoip options
4284.	[bug]		Some GeoIP options were incorrectly documented
			using abbreviated forms which were not accepted by
			named.  The code has been updated to allow both
			long and abbreviated forms. [RT #41381]
2015-12-26 10:51:30 -08:00
Tinderbox User
414048dc07 regen v9_10 2015-12-16 01:07:05 +00:00
Mukund Sivaraman
f2d05dbb6f Update notes.xml for #40996
(cherry picked from commit 6960e7fd12)
2015-12-15 18:07:06 +05:30
Tinderbox User
83ecdd595b regen v9_10 2015-12-08 01:07:05 +00:00
Mark Andrews
9f375be7d9 4276. [protocol] Add support for SMIMEA. [RT #40513]
(cherry picked from commit 322e6b5be7)
2015-12-08 08:17:35 +11:00
Tinderbox User
2a5f7d6087 regen v9_10 2015-12-04 01:07:07 +00:00
Evan Hunt
4db36f766e [v9_10] disallow map zones in response-policy
4269.	[bug]		Zones using "map" format master files currently
			don't work as policy zones.  This limitation has
			now been documented; attempting to use such zones
			in "response-policy" statements is now a
			configuration error.  [RT #38321]
2015-12-02 21:10:43 -08:00