Commit Graph

23496 Commits

Author SHA1 Message Date
Tinderbox User
abaf4a6a5c regenerate v9.9.10rc3 2017-03-29 22:14:10 +00:00
Tinderbox User
1e6bd6b53a regen v9_9 2017-03-29 22:14:08 +00:00
Mark Andrews
91adc7a4da add CVE-2017-3138
(cherry picked from commit fe1ad70e51)
2017-03-30 02:57:16 +11:00
Tinderbox User
07967caf75 update copyright notice / whitespace 2017-03-24 23:47:23 +00:00
Tinderbox User
bb0783f9e8 newcopyrights 2017-03-24 23:30:31 +00:00
Mark Andrews
8c2d209f09 4582. [security] 'rndc ""' could trigger a assertion failure in named.
(CVE-2017-3138) [RT #44924]

(cherry picked from commit 8e8dfc5941)
2017-03-25 02:08:26 +11:00
Tinderbox User
fbe9182ffd regen v9_9 2017-03-15 01:24:19 +00:00
Mark Andrews
c43edd377b 4580. [bug] 4578 introduced a regression when handling CNAME to
referral below the current domain. [RT #44850]

(cherry picked from commit 638c7c635d)
2017-03-14 15:17:32 +11:00
Francis Dupont
17776a169c Visual Studio 2017 was published 2017-03-10 08:21:51 +01:00
Tinderbox User
ba9be2be7e regen v9_9 v9.9.10rc2 2017-03-01 02:26:17 +00:00
Tinderbox User
e66d21bcc5 update copyright notice / whitespace 2017-03-01 01:57:15 +00:00
Tinderbox User
c5b9c62f97 newcopyrights 2017-03-01 01:51:43 +00:00
Tinderbox User
7eea1026e7 regen v9_9 2017-03-01 01:19:35 +00:00
Mark Andrews
b99d097cc4 Reimplement:
4578.   [security]      Some chaining (CNAME or DNAME) responses to upstream
                        queries could trigger assertion failures.
                        (CVE-2017-3137) [RT #44734]

(cherry picked from commit f240f4a5de)
2017-03-01 12:07:56 +11:00
Tinderbox User
b83e4452ee update copyright notice / whitespace 2017-02-28 23:47:20 +00:00
Tinderbox User
1ca3f89dbd newcopyrights 2017-02-28 23:30:26 +00:00
Mark Andrews
72d96237ef fix nsupdate reference
(cherry picked from commit 02fa49a4d8)
2017-03-01 08:34:52 +11:00
Mark Andrews
da4d56894c fix version number 2017-02-27 16:18:20 +11:00
Tinderbox User
9f77d925fa regenerate 2017-02-24 02:40:48 +00:00
Tinderbox User
fe5d457dd8 regen v9_9 2017-02-24 01:19:56 +00:00
Evan Hunt
fcf1874867 [v9_9] remove unnecessary INSIST and prep 9.11.1rc2
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
(cherry picked from commit 559cbe04e7)
2017-02-23 15:26:55 -08:00
Mark Andrews
039a1489c8 explicitly cast to (unsigned int) 2017-02-20 17:05:53 +11:00
Mark Andrews
31099ddd3c explictly cast to isc_stdtime_t
(cherry picked from commit 9998a15284)
2017-02-20 16:57:41 +11:00
Tinderbox User
b2526c1003 regen v9_9 2017-02-16 01:47:16 +00:00
Mark Andrews
14d680e3bc 9.9.10; copyrights 2017-02-16 12:41:30 +11:00
Mark Andrews
4ebbb52b1b record ranges; account for -P's 2017-02-16 12:10:14 +11:00
Mark Andrews
52e42f648b add CVE-2017-3136 note
(cherry picked from commit d77eadc261)
2017-02-15 12:45:20 +11:00
Mark Andrews
93fe666d15 update description 2017-02-15 12:37:52 +11:00
Mark Andrews
35ca802c7b 4575. [security] Dns64 with break-dnssec yes; can result in a
assertion failure. (CVE-2017-3136) [RT #44653]

(cherry picked from commit 3bce12e4b6)
2017-02-15 12:24:33 +11:00
Tinderbox User
776ae3c697 regen v9_9 2017-02-08 01:19:36 +00:00
Evan Hunt
02f0aa2ed3 [v9_9] doc style 2017-02-07 08:19:39 -08:00
Tinderbox User
d3a3f28ce8 regen v9_9 2017-02-07 01:17:31 +00:00
Evan Hunt
0220addcca [v9_9] removed extra note about bind.keys update 2017-02-06 14:19:39 -08:00
Mark Andrews
c7fb2ad160 4571. [bug] Out-of-tree builds of backtrace_test failed.
(cherry picked from commit 3e48466e0a)
v9.9.10rc1
2017-02-06 13:47:42 +11:00
Tinderbox User
38e779ccaa newcopyrights 2017-02-05 23:30:25 +00:00
Tinderbox User
dea5b9d33d regenerate 2017-02-05 07:00:55 +00:00
Tinderbox User
6fdbc667fb regen v9_9 2017-02-05 06:55:18 +00:00
Evan Hunt
b4a0711e17 [v9_9] prep 9.9.10rc1 2017-02-04 22:36:23 -08:00
Evan Hunt
3b1b532d66 [v9_9] release note about new root key 2017-02-04 22:16:06 -08:00
Tinderbox User
c25649ae56 newcopyrights 2017-02-04 23:30:27 +00:00
Evan Hunt
d8edf39f95 [v9_9] fall back to builtin keys if bind.keys is empty
4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]
2017-02-04 00:42:31 -08:00
Evan Hunt
f3713038d5 [v9_9] revised comment 2017-02-04 00:24:25 -08:00
Tinderbox User
64258a6b83 regen v9_9 2017-02-04 01:22:01 +00:00
Evan Hunt
feec25e65a [v9_9] add "configure --with-bind" option to dnsperf
4568.	[contrib]	Added a --with-bind option to the dnsperf configure
			script to specify BIND prefix path.

(cherry picked from commit adcdff94d9)
2017-02-03 16:29:24 -08:00
Tinderbox User
84150b929e update copyright notice / whitespace 2017-02-03 23:47:22 +00:00
Tinderbox User
e3e1d782b9 newcopyrights 2017-02-03 23:30:22 +00:00
Evan Hunt
1b3a9c2755 [v9_9] silence "unused value" warning
(cherry picked from commit f4d20b15a2)
2017-02-03 11:27:19 -08:00
Mark Andrews
182d657891 remove outdated cvs $Id strings 2017-02-03 18:44:36 +11:00
Mark Andrews
3cf44b82b4 4567. [port] Call getprotobyname and getservbyname prior to calling
chroot so that shared libraries get loaded. [RT #44537]

(cherry picked from commit c550e75ade)
2017-02-03 14:23:45 +11:00
Tinderbox User
3afe116624 regen v9_9 2017-02-03 01:19:22 +00:00