ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
25,099 Commits 589 Branches 805 Tags
v9.11.1-P2
Commit Graph
25099 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Evan Hunt f90acef005 [v9_11_1_patch] complete change #4643 v9.11.1-P2 2017-06-28 09:06:27 -07:00
Tinderbox User 767dc6312a regenerate 2017-06-27 19:45:50 +00:00
Tinderbox User 848dc76034 regen v9_11_1_patch 2017-06-27 19:45:44 +00:00
Evan Hunt 8d00c66095 [v9_11_1_patch] address TSIG bypass/forgery vulnerabilities 
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
(cherry picked from commit a03f4b1ea4)
 2017-06-27 11:48:31 -07:00
Mark Andrews 780637cff7 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET. 
(cherry picked from commit 9c179a5607)
 2017-06-02 12:55:58 +10:00
Mark Andrews 88773555a8 copyrights v9.11.1-P1 2017-05-31 12:03:03 +10:00
Mark Andrews 743c6fc525 fix changes numbers 
(cherry picked from commit 5e1cedb130)
 2017-05-31 12:02:39 +10:00
Mark Andrews 0a5ed64493 add defines for mark_stale_header and rbtdb_zero_header 2017-05-31 07:50:10 +10:00
Tinderbox User 9aa6cc1e13 regenerate 2017-05-30 21:41:33 +00:00
Tinderbox User 1918510c2d regen v9_11_1_patch 2017-05-30 21:41:30 +00:00
Evan Hunt f50531fe13 [v9_11_1_patch] prep 9.11.1-P1 
- no need for api file changes
 2017-05-30 13:46:33 -07:00
Evan Hunt 91dfaf39a9 [v9_11_1_patch] quote service registry paths 
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
(cherry picked from commit c28e44f3f8)
 2017-05-30 13:43:41 -07:00
Evan Hunt 5e618a7edc [v9_11_1_patch] fix rpz formerr loop 
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]

(cherry picked from commit 3440cf9c60)
 2017-05-30 12:51:27 -07:00
Tinderbox User e3dc2e7b99 regenerate v9.11.1 2017-04-14 03:58:25 +00:00
Tinderbox User 67794b68b2 regen v9_11 2017-04-14 03:58:23 +00:00
Evan Hunt 62b5dd5b09 [v9_11] prep 9.11.1 2017-04-13 20:41:42 -07:00
Tinderbox User 90d71c30af regen v9_11 2017-04-12 21:29:38 +00:00
Evan Hunt 869cb92bab [v9_11] formatting 
(cherry picked from commit 52e398c0af)
 2017-04-12 14:06:04 -07:00
Tinderbox User c52dde9229 regen v9_11 2017-04-12 01:09:13 +00:00
Tinderbox User 5a0fe4f483 update copyright notice / whitespace 2017-04-11 23:46:04 +00:00
Tinderbox User 66317da170 newcopyrights 2017-04-11 23:30:14 +00:00
Evan Hunt 672c06580e [v9_11] correct -M in synopsis 
(cherry picked from commit a477a025d5)
 2017-04-11 12:24:36 -07:00
Tinderbox User f2c50d7dd2 regenerate v9.11.1rc3 2017-03-29 22:07:27 +00:00
Tinderbox User 19a1241d2f regen v9_11 2017-03-29 22:07:25 +00:00
Mark Andrews 33cc2edb8e add CVE-2017-3138 
(cherry picked from commit fe1ad70e51)
 2017-03-30 02:57:02 +11:00
Tinderbox User 48900a8f62 regen v9_11 2017-03-26 01:09:12 +00:00
Tinderbox User 7d169212b4 update copyright notice / whitespace 2017-03-25 23:46:04 +00:00
Tinderbox User 551e6d2414 newcopyrights 2017-03-25 23:30:13 +00:00
Evan Hunt cf710c81ae [v9_11] document that delv should be used instead of sigchase 
(cherry picked from commit db93f3d4b3)
 2017-03-25 12:23:14 -07:00
Tinderbox User 003e956a96 update copyright notice / whitespace 2017-03-24 23:46:02 +00:00
Tinderbox User 3718b6ecfc newcopyrights 2017-03-24 23:30:15 +00:00
Mark Andrews 8c31a25f3f 4582. [security] 'rndc ""' could trigger a assertion failure in named. 
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
 2017-03-25 02:01:10 +11:00
Tinderbox User 3be4330b77 update copyright notice / whitespace 2017-03-16 23:47:44 +00:00
Tinderbox User c317b09bf1 newcopyrights 2017-03-16 23:30:23 +00:00
Mark Andrews 8bcd80824c 4581. [port] Linux: Add getpid and getrandom to the list of system 
calls named uses for seccomp. [RT #44883]

(cherry picked from commit f94f3e2791)
 2017-03-16 11:23:36 +11:00
Tinderbox User 975ff35d85 regen v9_11 2017-03-15 01:10:42 +00:00
Mark Andrews 7fcbbd6fa9 4580. [bug] 4578 introduced a regression when handling CNAME to 
referral below the current domain. [RT #44850]

(cherry picked from commit 638c7c635d)
 2017-03-14 15:12:03 +11:00
Francis Dupont 457de041a9 Visual Studio 2017 was published 2017-03-10 08:00:36 +01:00
Mark Andrews d81a3ca82c adjust range 
(cherry picked from commit 9301c35ae6)
 2017-03-02 12:34:17 +11:00
Mark Andrews 0e5fbd523a allow more time for the IPv6 transfer attemt to timeout and fall over to IPv4 
(cherry picked from commit d411448ceb)
 2017-03-02 12:19:55 +11:00
Tinderbox User f9ecaf8a4a regen v9_11 v9.11.1rc2 2017-03-01 02:43:28 +00:00
Tinderbox User d1bc66f4df update copyright notice / whitespace 2017-03-01 01:54:03 +00:00
Tinderbox User eab4f224b5 newcopyrights 2017-03-01 01:51:21 +00:00
Mark Andrews c006cfc5a2 Reimplement: 
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
 2017-03-01 12:02:39 +11:00
Tinderbox User cb9582623e update copyright notice / whitespace 2017-02-28 23:45:56 +00:00
Tinderbox User 32eb4cec6f newcopyrights 2017-02-28 23:30:10 +00:00
Mark Andrews cfeb569d54 fix nsupdate reference 
(cherry picked from commit 02fa49a4d8)
 2017-03-01 08:34:26 +11:00
Tinderbox User 168c82cb5d regenerate 2017-02-24 02:40:06 +00:00
Tinderbox User 8dcec3cf25 regen v9_11 2017-02-24 01:08:12 +00:00
Evan Hunt 559cbe04e7 [v9_11] remove unnecessary INSIST and prep 9.11.1rc2 
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
 2017-02-23 14:55:10 -08:00