Tinderbox User
35255451d4
regen v9_11
2017-06-29 00:33:13 +00:00
Tinderbox User
550d3276d0
regen v9_11
2017-06-28 01:17:23 +00:00
Evan Hunt
a03f4b1ea4
[v9_11] address TSIG bypass/forgery vulnerabilities
...
4643. [security] An error in TSIG handling could permit unauthorized
zone transfers or zone updates. (CVE-2017-3142)
(CVE-2017-3143) [RT #45383 ]
(cherry picked from commit 581c1526ab
2017-06-27 11:39:33 -07:00
Tinderbox User
8008316c9f
regen v9_11
2017-06-26 03:15:58 +00:00
Tinderbox User
421ba11f3f
regen v9_11
2017-06-14 01:15:32 +00:00
Evan Hunt
214b53880b
[v9_11] prevent reload failure due to LMDB database perms
...
4638. [bug] Reloading or reconfiguring named could fail on
some platforms when LMDB was in use. [RT #45203 ]
(cherry picked from commit bf05e66bb3
2017-06-13 12:01:29 -07:00
Tinderbox User
51da15c886
regen v9_11
2017-05-31 01:15:21 +00:00
Evan Hunt
c28e44f3f8
[v9_11] quote service registry paths
...
4532. [security] The BIND installer on Windows used an unquoted
service path, which can enable privilege escalation.
(CVE-2017-3141) [RT #45229 ]
(cherry picked from commit 967a3b9419
2017-05-30 13:38:22 -07:00
Evan Hunt
3440cf9c60
[v9_11] fix rpz formerr loop
...
4531. [security] Some RPZ configurations could go into an infinite
query loop when encountering responses with TTL=0.
(CVE-2017-3140) [RT #45181 ]
2017-05-30 12:35:06 -07:00
Tinderbox User
f00c53aafe
regen v9_11
2017-05-19 01:17:52 +00:00
Evan Hunt
0725e28e47
[v9_11] remove outdated reference to libbind
...
(cherry picked from commit ef9ab10ce0
2017-05-18 15:35:30 -07:00
Tinderbox User
abe69df9a7
regen v9_11
2017-05-17 01:17:01 +00:00
Tinderbox User
4745777284
update copyright notice / whitespace
2017-05-16 23:45:57 +00:00
Evan Hunt
403e7b4512
[v9_11] symbolic option names for dig +ednsopt
...
4555. [func] dig +ednsopt: EDNS options can now be specified by
name in addition to numeric value. [RT #44461 ]
(cherry picked from commit 25a9b90369
2017-05-16 10:08:17 -07:00
Tinderbox User
99b30e26a6
regen v9_11
2017-05-11 01:17:38 +00:00
Mark Andrews
613cdc91fe
add warning about semicolon no longer being escaped
...
(cherry picked from commit d4d73bca79
2017-05-11 11:03:06 +10:00
Tinderbox User
3b15473ced
regen v9_11
2017-05-05 01:15:31 +00:00
Evan Hunt
c83a306155
[v9_11] fix lmdb delzone
...
4616. [bug] When using LMDB, zones deleted using "rndc delzone"
were not correctly removed from the new-zone
database. [RT #45185 ]
(cherry picked from commit 3a554a444c
2017-05-04 12:32:47 -07:00
Evan Hunt
59663800d2
[v9_11] change markdown comment style for pandoc
2017-04-27 23:44:00 -07:00
Tinderbox User
32098293b7
regen v9_11
2017-04-27 00:50:42 +00:00
Tinderbox User
af0d9b7705
update copyright notice / whitespace
2017-04-26 23:46:00 +00:00
Tinderbox User
0fc4b96b2b
regen v9_11
2017-04-26 23:29:27 +00:00
Mukund Sivaraman
3b38e4b834
Set a LMDB mapsize and also provide a config option to control it ( #44954 )
...
(cherry picked from commit 241b49e611
2017-04-26 23:55:27 +05:30
Evan Hunt
1ca2cf0243
[v9_11] update copyrights that had been missed recently
2017-04-23 17:07:59 -07:00
Tinderbox User
164ade1482
regen v9_11
2017-04-23 01:10:00 +00:00
Evan Hunt
34f649fa22
[v9_11] auto-generate named.conf.docbook
...
4603. [doc] Automatically generate named.conf(5) man page
from doc/misc/options. Thanks to Tony Finch.
[RT #43525 ]
2017-04-21 16:30:51 -07:00
Evan Hunt
8b9c4592ed
[v9_11] give threads unique names to assist debugging
...
4602. [func] Threads are now set to human-readable
names to assist debugging, when supported by
the OS. [RT #43234 ]
(cherry picked from commit d26ae7fc08
2017-04-21 14:00:15 -07:00
Evan Hunt
c03cca4629
[v9_11] clear out relnotes
2017-04-21 13:37:32 -07:00
Evan Hunt
0d7548ee34
[v9_11] update README, remove FAQ
...
4593. [doc] Update README using markdown, remove outdated FAQ
file in favor of the knowledge base.
2017-04-20 19:30:41 -07:00
Tinderbox User
c32570b319
regen v9_11
2017-04-21 01:09:10 +00:00
Tinderbox User
e3dc2e7b99
regenerate
2017-04-14 03:58:25 +00:00
Tinderbox User
67794b68b2
regen v9_11
2017-04-14 03:58:23 +00:00
Tinderbox User
90d71c30af
regen v9_11
2017-04-12 21:29:38 +00:00
Evan Hunt
869cb92bab
[v9_11] formatting
...
(cherry picked from commit 52e398c0af
2017-04-12 14:06:04 -07:00
Tinderbox User
c52dde9229
regen v9_11
2017-04-12 01:09:13 +00:00
Tinderbox User
f2c50d7dd2
regenerate
2017-03-29 22:07:27 +00:00
Tinderbox User
19a1241d2f
regen v9_11
2017-03-29 22:07:25 +00:00
Mark Andrews
33cc2edb8e
add CVE-2017-3138
...
(cherry picked from commit fe1ad70e51
2017-03-30 02:57:02 +11:00
Tinderbox User
48900a8f62
regen v9_11
2017-03-26 01:09:12 +00:00
Tinderbox User
975ff35d85
regen v9_11
2017-03-15 01:10:42 +00:00
Tinderbox User
f9ecaf8a4a
regen v9_11
2017-03-01 02:43:28 +00:00
Tinderbox User
168c82cb5d
regenerate
2017-02-24 02:40:06 +00:00
Tinderbox User
8dcec3cf25
regen v9_11
2017-02-24 01:08:12 +00:00
Evan Hunt
559cbe04e7
[v9_11] remove unnecessary INSIST and prep 9.11.1rc2
...
4578. [security] Some chaining (CNAME or DNAME) responses to upstream
queries could trigger assertion failures.
(CVE-2017-3137) [RT #44734 ]
(cherry picked from commit a1365a0042
2017-02-23 14:55:10 -08:00
Tinderbox User
0f863f054c
regen v9_11
2017-02-16 01:53:58 +00:00
Tinderbox User
6afd7f9c56
regen v9_11
2017-02-16 01:08:56 +00:00
Mark Andrews
42f4ea6317
add CVE-2017-3136 note
...
(cherry picked from commit d77eadc261
2017-02-15 12:45:30 +11:00
Tinderbox User
4d4242b744
regen v9_11
2017-02-08 01:08:12 +00:00
Evan Hunt
6043c4453d
[v9_11] doc style
2017-02-07 08:18:55 -08:00
Tinderbox User
d64eb56a2d
regen v9_11
2017-02-07 01:07:48 +00:00
