Mark Andrews
e96e6e8077
9.4-ESV-R3
2010-09-02 07:27:40 +00:00
Mark Andrews
43a1ec8d9f
2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
...
[RT #20877 ]
2010-09-02 07:21:53 +00:00
Mark Andrews
7b67408765
2925. [bug] Named failed to accept uncachable negative responses
...
from insecure zones. [RT# 21555]
2010-06-26 00:11:50 +00:00
Automatic Updater
b45951a046
update copyright notice
2010-06-23 23:45:21 +00:00
Mark Andrews
8310668e43
2921. [bug] The resolver could attempt to destroy a fetch context
...
to soon. [RT #19878 ]
2010-06-23 01:48:55 +00:00
Automatic Updater
6c82c34716
update copyright notice
2010-06-04 23:46:02 +00:00
Automatic Updater
bda132bcaf
update copyright notice
2010-06-03 23:46:10 +00:00
Mark Andrews
1a677bc3f7
2904. [bug] When using DLV, sub-zones of the zones in the DLV,
...
could be incorrectly marked as insecure instead of
secure leading to negative proofs failing. This was
a unintended outcome from change 2890. [RT# 21392]
2010-06-03 00:36:02 +00:00
Mark Andrews
eb12f97615
2900. [bug] The placeholder negative caching element was not
...
properly constructed triggering a INSIST in
dns_ncache_towire(). [RT #21346 ]
2010-06-03 00:21:52 +00:00
Mark Andrews
0cd3b8cc3e
2890. [bug] Handle the introduction of new trusted-keys and
...
DS, DLV RRsets better. [RT #21097 ]
2010-06-03 00:07:59 +00:00
Mark Andrews
078580a74d
9.4-ESV-R2
2010-05-10 01:56:40 +00:00
Mark Andrews
af9bcac6c5
2876. [bug] Named could return SERVFAIL for negative responses
...
from unsigned zones. [RT #21131 ]
2010-04-21 04:23:47 +00:00
Mark Andrews
fe5f0e6d28
dns_rdataset_expire/dns_rdataset_settrust
2010-03-03 07:00:38 +00:00
Mark Andrews
31f3215162
dns_resolver_*badcache
2010-03-03 05:02:27 +00:00
Automatic Updater
e95ab03354
update copyright notice
2010-02-26 23:46:37 +00:00
Mark Andrews
b6a3b10da7
2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619 ]
2010-02-26 01:03:56 +00:00
Automatic Updater
8f7aff9340
update copyright notice
2010-01-07 23:46:07 +00:00
Evan Hunt
e4cb322618
2831. [security] Do not attempt to validate or cache
...
out-of-bailiwick data returned with a secure
answer; it must be re-fetched from its original
source and validated in that context. [RT #20819 ]
2010-01-07 17:49:50 +00:00
Evan Hunt
d7985983b0
2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712 ]
2009-12-30 06:44:05 +00:00
Mark Andrews
e312c286f8
9.4-ESVrc1
2009-12-11 00:39:13 +00:00
Mark Andrews
a5b9974f4a
CHANGES
2009-12-02 23:36:35 +00:00
Automatic Updater
c5614de3f9
update copyright notice
2009-11-26 23:46:11 +00:00
Mark Andrews
54d83f4a68
2790. [bug] Handle DS queries to stub zones.
2009-11-26 03:45:43 +00:00
Automatic Updater
521de9e5dd
update copyright notice
2009-11-25 23:46:52 +00:00
Mark Andrews
b4bd8d0662
772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-25 04:50:25 +00:00
Mark Andrews
9352b49a12
dns_resolver_logfetch
2009-10-13 02:45:22 +00:00
Mark Andrews
d268d780cc
silence signed/unsigned comparision warning
2009-09-25 01:48:28 +00:00
Automatic Updater
1c52929b3c
update copyright notice
2009-09-24 23:46:07 +00:00
Mark Andrews
ca202d441e
2689. [bug] Correctly handle snprintf result. [RT #20306 ]
2009-09-24 22:25:30 +00:00
Tatuya JINMEI 神明達哉
aaa2233e76
2525. [experimental] New logging category "query-errors" to provide detailed
...
internal information about query failures, especially
about server failures. (backported as a special
exception to the general policy) [RT #19027 ]
2009-09-24 21:38:52 +00:00
Tatuya JINMEI 神明達哉
8c8119ce24
2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
...
decoded [RT #20269 ].
BIND 9.7.0, 9.6.2, 9.5.2, 9.4.4
2009-09-18 21:57:08 +00:00
Mark Andrews
b83cc64332
9.4.4b1
2009-08-13 07:39:19 +00:00
Mark Andrews
bd4803f39e
2649. [bug] Set the domain for forward only zones. [RT #19944 ]
2009-08-13 04:55:16 +00:00
Evan Hunt
e8e9e1dbeb
2642. [bug] nsupdate could dump core on solaris when reading
...
improperly formatted key files. [RT #20015 ]
2009-07-29 23:56:27 +00:00
Mark Andrews
e6c0f07e73
2623. [bug] Named started seaches for DS non-optimally. [RT #19915 ]
2009-07-13 06:34:13 +00:00
Mark Andrews
32a1ab66b9
2920. [bug] Delay thawing the zone until the reload of it has
...
completed successfully. [RT #19750 ]
2009-07-11 04:30:50 +00:00
Mark Andrews
786252d275
2618. [bug] The sdb and sdlz db_interator_seek() methods could
...
loop infinitely. [RT #19847 ]
2009-06-26 06:25:20 +00:00
Automatic Updater
ecdc2a81e0
update copyright notice
2009-06-02 23:46:04 +00:00
Mark Andrews
97883e2025
2605. [bug] Accept DS responses from delegation only zones.
...
[RT # 19296]
2009-06-02 06:04:40 +00:00
Automatic Updater
9eb441e7a3
update copyright notice
2009-05-11 02:36:58 +00:00
Mark Andrews
f5724cd00a
2599. [bug] Address rapid memory growth when validation fails.
...
[RT #19654 ]
2009-05-11 02:32:43 +00:00
Automatic Updater
53006f63ff
update copyright notice
2009-04-29 23:46:04 +00:00
Mark Andrews
289eea07b1
2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
...
[RT #19626 ]
2009-04-29 22:19:05 +00:00
Automatic Updater
2cfad50e5a
update copyright notice
2009-04-21 23:46:03 +00:00
Tatuya JINMEI 神明達哉
d4eb0d2306
2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
...
or SDB. [RT #19577 ]
2009-04-21 00:43:54 +00:00
Mark Andrews
8bb728fa39
2582. [bug] Don't emit warning log message when we attempt to
...
remove non-existant journal. [RT #19516 ]
2009-03-26 23:00:22 +00:00
Automatic Updater
a028d5830c
update copyright notice
2009-03-17 23:46:05 +00:00
Mark Andrews
a5e67fba38
2579. [bug] DNSSEC lookaside validation failed to handle unknown
...
algorithms. [RT #19479 ]
2009-03-17 01:32:04 +00:00
Mark Andrews
b1ceb96abc
2573. [bug] Replacing a non-CNAME record with a CNAME record in a
...
single transaction in a signed zone failed. [RT #19397 ]
2009-03-05 05:01:00 +00:00
Automatic Updater
36efb9ec99
update copyright notice
2009-03-02 23:45:58 +00:00