ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,556 Commits 589 Branches 805 Tags
v9.6-ESV-R4-P1
Commit Graph

3259 Commits

Author SHA1 Message Date
Evan Hunt
0d5585795b rolling 9.6-ESV-R4-P1: 
3121.   [security]      An authoritative name server sending a negative
                        response containing a very large RRset could
                        trigger an off-by-one error in the ncache code
                        and crash named. [RT #24650]

3120.	[bug]		Named could fail to validate zones listed in a DLV
			that validated insecure without using DLV and had
			DS records in the parent zone. [RT #24631]
 2011-05-27 00:19:19 +00:00
Mark Andrews
c3ab09c9a1 9.6-ESV-R4 2011-03-28 08:41:26 +00:00
Mark Andrews
350f45bed8 9.6.3 2011-01-30 06:39:08 +00:00
Mark Andrews
1be3bd3c8f 3009. [bug] clients-per-query code didn't work as expected with 
particular query patterns. [RT #22972]
 2011-01-27 02:29:47 +00:00
Mark Andrews
0654815406 2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls. 
[RT #20768]
 2011-01-14 05:04:13 +00:00
Mark Andrews
dbb2c2bb65 9.6.3rc1 2011-01-14 00:52:40 +00:00
Mark Andrews
503b8fe694 spelling 2011-01-13 02:40:19 +00:00
Mark Andrews
0219620a50 3007. [bug] Named failed to preserve the case of domain names in 
rdata which is no compressable when writing master
                        files.  [RT #22863]
 2011-01-13 02:06:13 +00:00
Mark Andrews
4df4d06b91 3002. [bug] isc_mutex_init_errcheck() failed to destroy attr. 
[RT #22766]
 2011-01-04 04:37:17 +00:00
Mark Andrews
168d13317a 2996. [security] Temporarily disable SO_ACCEPTFILTER support. 
[RT #22589]
 2010-12-22 03:28:13 +00:00
Mark Andrews
d8bf1487c7 2995. [bug] The Kerberos realm was not being correctly extracted 
from the signer's identity. [RT #22770]
 2010-12-22 02:37:55 +00:00
Mark Andrews
bbbdd230ad 2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and 
do not use threads on earlier versions.  Also kill
                        the unproven-pthreads, mit-pthreads, and ptl2 support.
 2010-12-21 04:33:18 +00:00
Mark Andrews
8c5ba02091 2984. [bug] Don't run MX checks when the target of the MX record 
is ".".  [RT #22645]
 2010-12-14 00:48:23 +00:00
Mark Andrews
f3786154f8 9.6.3b1 2010-12-09 07:29:04 +00:00
Mark Andrews
12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 01:12:55 +00:00
Evan Hunt
94c1870f9a 2979. [bug] named could deadlock during shutdown if two 
"rndc stop" commands were issued at the same
			time. [RT #22108]
 2010-12-03 22:03:41 +00:00
Mark Andrews
12f834dbb1 2978. [port] hpux: look for <devpoll.h> [RT #21919] 2010-12-03 00:59:55 +00:00
Mark Andrews
9c1af23a09 remove CVSS scores 2010-12-03 00:30:11 +00:00
Mark Andrews
006e5cc005 update RT number 2010-12-03 00:11:54 +00:00
Mark Andrews
4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG 
key.  [RT #3415]
 2010-12-02 23:40:28 +00:00
Mark Andrews
bf0013e9a5 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the 
wrong lock which could lead to server deadlock.
                        [RT #22614]
 2010-12-02 05:09:58 +00:00
Mark Andrews
0c26f604d4 CVE-2010-3613 Reduce complexity from M to L raising score from 7.1 to 7.8. 
Just have the base CVSS vectors.
 2010-11-25 04:54:20 +00:00
Mark Andrews
433ff39d70 add CVE, VU and CVSS 2010-11-18 02:51:55 +00:00
Mark Andrews
b77e2d2525 2972. [bug] win32: address windows socket errors. [RT #21906] 2010-11-18 00:37:54 +00:00
Evan Hunt
886b4dfbb5 2971. [bug] Fixed a bug that caused journal files not to be 
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
 2010-11-17 00:36:27 +00:00
Mark Andrews
7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear 
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
 2010-11-16 07:35:03 +00:00
Shawn Routhier
06f96028a5 Fix acl type processing so that allow-query works in options and view 
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
 2010-11-16 02:43:35 +00:00
Mark Andrews
c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure 
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
 2010-11-16 02:23:44 +00:00
Mark Andrews
5badea639c 2967. [bug] 'host -D' now turns on debugging messages earlier. 
[RT #22361]
 2010-10-19 02:55:53 +00:00
Mark Andrews
cbba436904 2966. [bug] isc_print_vsnprintf() failed to check if there was 
space available in the buffer when adding a left
                        justified character with a non zero width,
                        (e.g. "%-1c"). [RT #22270]
 2010-10-18 04:02:40 +00:00
Mark Andrews
10ee68e217 2965. [func] Test HMAC functions using test data from RFC 2104 and 
RFC 4634. [RT #21702]
 2010-09-29 04:13:38 +00:00
Mark Andrews
ff826c2844 2964. [bug] view->queryacl was being overloaded. Seperate the 
usage into view->queryacl, view->cacheacl and
                        view->queryonacl. [RT #22114]
 2010-09-24 08:09:08 +00:00
Mark Andrews
b622abe567 spelling 2010-09-17 04:56:35 +00:00
Mark Andrews
7a448bce5d 2962. [port] win32: add more dependencies to BINDBuild.dsw. 
[RT #22062]
 2010-09-16 08:48:43 +00:00
Mark Andrews
af6b256444 2960. [func] Check that named accepts non-authoritative answers. 
[RT #21594]
 2010-09-15 12:16:51 +00:00
Mark Andrews
3f816cf4dd 2959. [func] Check that named starts with a missing masterfile. 
[RT #22076]
 2010-09-15 03:47:08 +00:00
Mark Andrews
6fd0466e76 2957. [bug] entropy_get() and entropy_getpseudo() failed to match 
the API for RAND_bytes() and RAND_pseudo_bytes()
                        respectively. [RT #21962]
 2010-09-15 03:26:09 +00:00
Mark Andrews
32ccfb2a25 2956. [port] Enable atomic operations on the PowerPC64. [RT #21899] 2010-09-13 07:10:58 +00:00
Mark Andrews
cd3e4f6c6c 2954. [bug] contrib: dlz_mysql_driver.c bad error handling on 
build_sqldbinstance failure. [RT #21623]
 2010-09-13 03:32:01 +00:00
Mark Andrews
7a5e04daa2 9.6.3b1 2010-09-10 06:08:30 +00:00
Mark Andrews
453c9289b5 2953. [bug] Silence spurious "expected covering NSEC3, got an 
exact match" message when returning a wildcard
                        no data response. [RT #21744]
 2010-09-07 02:53:19 +00:00
Mark Andrews
67128a1621 2952. [port] win32: named-checkzone and named-checkconf failed 
to initialise winsock. [RT #21932]
 2010-09-07 01:53:47 +00:00
Mark Andrews
5122ec7d9e 2951. [bug] named failed to generate a correct signed response 
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
 2010-09-07 01:12:24 +00:00
Mark Andrews
004d763170 2950. [bug] named failed to perform a SOA up to date check when 
falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]
 2010-09-06 04:49:19 +00:00
Mark Andrews
f8dd4a6340 2946. [doc] Document the default values for the minimum and maximum 
zone refresh and retry values in the ARM. [RT #21886]
 2010-08-20 01:38:26 +00:00
Mark Andrews
a22de44555 2945. [doc] Update empty-zones list in ARM. [RT #21772] 
2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]
 2010-08-20 00:19:54 +00:00
Mark Andrews
03df994501 2942. [contrib] zone2sqlite failed to setup the entropy sources. 
[RT #21610]
 2010-08-16 05:37:18 +00:00
Mark Andrews
f2d91bd3e5 2941. [bug] sdb and sdlz (dlz's zone database) failed to support 
DNAME at the zone apex.  [RT #21610]
 2010-08-16 05:22:12 +00:00
Mark Andrews
a36e2a27db change number 2010-08-13 07:36:44 +00:00
Mark Andrews
3a3a245419 2940. [func] Check that named successfully skips NSEC3 records 
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
 2010-08-13 07:21:39 +00:00