Tinderbox User
767dc6312a
regenerate
2017-06-27 19:45:50 +00:00
Tinderbox User
848dc76034
regen v9_11_1_patch
2017-06-27 19:45:44 +00:00
Evan Hunt
8d00c66095
[v9_11_1_patch] address TSIG bypass/forgery vulnerabilities
...
4643. [security] An error in TSIG handling could permit unauthorized
zone transfers or zone updates. (CVE-2017-3142)
(CVE-2017-3143) [RT #45383 ]
(cherry picked from commit 581c1526aba03f4b1ea4
2017-06-27 11:48:31 -07:00
Tinderbox User
9aa6cc1e13
regenerate
2017-05-30 21:41:33 +00:00
Tinderbox User
1918510c2d
regen v9_11_1_patch
2017-05-30 21:41:30 +00:00
Evan Hunt
91dfaf39a9
[v9_11_1_patch] quote service registry paths
...
4532. [security] The BIND installer on Windows used an unquoted
service path, which can enable privilege escalation.
(CVE-2017-3141) [RT #45229 ]
(cherry picked from commit 967a3b9419c28e44f3f8
2017-05-30 13:43:41 -07:00
Evan Hunt
5e618a7edc
[v9_11_1_patch] fix rpz formerr loop
...
4531. [security] Some RPZ configurations could go into an infinite
query loop when encountering responses with TTL=0.
(CVE-2017-3140) [RT #45181 ]
(cherry picked from commit 3440cf9c60
2017-05-30 12:51:27 -07:00
Tinderbox User
e3dc2e7b99
regenerate
2017-04-14 03:58:25 +00:00
Tinderbox User
67794b68b2
regen v9_11
2017-04-14 03:58:23 +00:00
Tinderbox User
90d71c30af
regen v9_11
2017-04-12 21:29:38 +00:00
Evan Hunt
869cb92bab
[v9_11] formatting
...
(cherry picked from commit 52e398c0af
2017-04-12 14:06:04 -07:00
Tinderbox User
c52dde9229
regen v9_11
2017-04-12 01:09:13 +00:00
Tinderbox User
f2c50d7dd2
regenerate
2017-03-29 22:07:27 +00:00
Tinderbox User
19a1241d2f
regen v9_11
2017-03-29 22:07:25 +00:00
Mark Andrews
33cc2edb8e
add CVE-2017-3138
...
(cherry picked from commit fe1ad70e51
2017-03-30 02:57:02 +11:00
Tinderbox User
48900a8f62
regen v9_11
2017-03-26 01:09:12 +00:00
Tinderbox User
975ff35d85
regen v9_11
2017-03-15 01:10:42 +00:00
Tinderbox User
f9ecaf8a4a
regen v9_11
2017-03-01 02:43:28 +00:00
Tinderbox User
168c82cb5d
regenerate
2017-02-24 02:40:06 +00:00
Tinderbox User
8dcec3cf25
regen v9_11
2017-02-24 01:08:12 +00:00
Evan Hunt
559cbe04e7
[v9_11] remove unnecessary INSIST and prep 9.11.1rc2
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
(cherry picked from commit a1365a0042
2017-02-23 14:55:10 -08:00
Tinderbox User
0f863f054c
regen v9_11
2017-02-16 01:53:58 +00:00
Tinderbox User
6afd7f9c56
regen v9_11
2017-02-16 01:08:56 +00:00
Mark Andrews
42f4ea6317
add CVE-2017-3136 note
...
(cherry picked from commit d77eadc261
2017-02-15 12:45:30 +11:00
Tinderbox User
4d4242b744
regen v9_11
2017-02-08 01:08:12 +00:00
Evan Hunt
6043c4453d
[v9_11] doc style
2017-02-07 08:18:55 -08:00
Tinderbox User
d64eb56a2d
regen v9_11
2017-02-07 01:07:48 +00:00
Evan Hunt
8e69860942
[v9_11] removed extra note about bind.keys update
2017-02-06 14:18:37 -08:00
Tinderbox User
105a34268c
regenerate
2017-02-05 07:00:20 +00:00
Tinderbox User
33c9436ef1
regen v9_11
2017-02-05 06:45:22 +00:00
Evan Hunt
59f34c1fc7
[v9_11] release note about new root key
2017-02-04 22:15:30 -08:00
Tinderbox User
1a6f02ce4a
regen v9_11
2017-02-05 01:08:44 +00:00
Evan Hunt
07b7a3eade
[v9_11] store local and remote addresses in dnstap
...
4569. [func] Store both local and remote addresses in dnstap
logging, and modify dnstap-read output format to
print them. [RT #43595 ]
(cherry picked from commit 650b5e7592
2017-02-03 17:11:06 -08:00
Tinderbox User
8c22550776
regen v9_11
2017-02-04 01:09:25 +00:00
Mark Andrews
a4240242cd
remove outdated cvs $Id strings
2017-02-03 18:39:57 +11:00
Tinderbox User
0ce865f8b2
regen v9_11
2017-02-03 01:08:36 +00:00
Tinderbox User
e2ec0753ce
update copyright notice / whitespace
2017-02-02 23:46:34 +00:00
Mark Andrews
51b0319696
new root KSK
2017-02-02 18:30:00 +11:00
Tinderbox User
217ccfa85b
regen v9_11
2017-02-02 01:08:17 +00:00
Evan Hunt
f3a6bb528f
[v9_11] clarify client logging doc
2017-02-01 14:51:14 -08:00
Tinderbox User
2acf9aa8ff
regen v9_11
2017-01-31 01:09:23 +00:00
Evan Hunt
781f6daa74
[v9_11] change 4558 was incomplete
...
(cherry picked from commit cd668ea57f
2017-01-30 14:11:17 -08:00
Tinderbox User
adabefa84c
regen v9_11
2017-01-25 01:08:40 +00:00
Evan Hunt
2f70ce448a
[v9_11] expand relnote
...
(cherry picked from commit afa0ff0cbb
2017-01-23 20:04:30 -08:00
Tinderbox User
801d3c8888
regen v9_11
2017-01-24 01:08:44 +00:00
Mark Andrews
22e3ffcf2c
4556. [security] Combining dns64 and rpz can result in dereferencing
...
a NULL pointer (read). (CVE-2017-3135) [RT#44434]
(cherry picked from commit 5abe80ef13
2017-01-24 09:54:54 +11:00
Tinderbox User
fb2e132c5c
regen v9_11
2017-01-13 01:08:50 +00:00
Tinderbox User
f6b9092741
update copyright notice / whitespace
2017-01-12 23:46:13 +00:00
Mark Andrews
2cee8eadec
4553. [bug] Named could deadlock there were multiple changes to
...
NSEC/NSEC3 parameters for a zone being processed at
the same time. [RT #42770 ]
(cherry picked from commit d2e1b47d4f
2017-01-12 14:26:06 +11:00
Mark Andrews
9e4e871392
4552. [bug] Named could trigger a assertion when sending notify
...
messages. [RT #44019 ]
(cherry picked from commit 42924b40af
2017-01-12 14:18:01 +11:00
Tinderbox User
Evan Hunt
Mark Andrews