124 lines
6.3 KiB
HTML
124 lines
6.3 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<!--
|
|
- Copyright (C) 2010 Internet Systems Consortium, Inc. ("ISC")
|
|
-
|
|
- Permission to use, copy, modify, and/or distribute this software for any
|
|
- purpose with or without fee is hereby granted, provided that the above
|
|
- copyright notice and this permission notice appear in all copies.
|
|
-
|
|
- THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
|
- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
- AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
|
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
- PERFORMANCE OF THIS SOFTWARE.
|
|
-->
|
|
|
|
<!-- $Id: RELEASE-NOTES-BIND-9.4-ESV.html,v 1.1.2.2 2010/11/29 01:15:44 tbox Exp $ -->
|
|
|
|
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title></title><link rel="stylesheet" type="text/css" href="release-notes.css" /><meta name="generator" content="DocBook XSL Stylesheets V1.76.1" /></head><body><div class="article"><div class="titlepage"><hr /></div>
|
|
|
|
<div class="section" title="Introduction"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111797"></a>Introduction</h2></div></div></div>
|
|
|
|
<p>
|
|
BIND 9.3-ESV-R4 is a maintenance release for BIND 9.4-ESV.
|
|
</p>
|
|
<p>
|
|
This document summarizes changes from BIND 9.4-ESV-R3 to BIND 9.4-ESV-R4.
|
|
Please see the CHANGES file in the source code release for a
|
|
complete list of all changes.
|
|
</p>
|
|
</div>
|
|
|
|
<div class="section" title="Download"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111880"></a>Download</h2></div></div></div>
|
|
|
|
<p>
|
|
The latest release of BIND 9 software can always be found
|
|
on our web site at
|
|
<a class="ulink" href="http://www.isc.org/software/bind" target="_top">http://www.isc.org/software/bind</a>.
|
|
There you will find additional information about each release,
|
|
source code, and some pre-compiled versions for certain operating
|
|
systems.
|
|
</p>
|
|
</div>
|
|
|
|
<div class="section" title="Support"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111815"></a>Support</h2></div></div></div>
|
|
|
|
<p>Product support information is available on
|
|
<a class="ulink" href="http://www.isc.org/services/support" target="_top">http://www.isc.org/services/support</a>
|
|
for paid support options. Free support is provided by our user
|
|
community via a mailing list. Information on all public email
|
|
lists is available at
|
|
<a class="ulink" href="https://lists.isc.org/mailman/listinfo" target="_top">https://lists.isc.org/mailman/listinfo</a>.
|
|
</p>
|
|
</div>
|
|
|
|
<div class="section" title="New Features"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111957"></a>New Features</h2></div></div></div>
|
|
|
|
<div class="section" title="9.4-ESV-R4"><div class="titlepage"><div><div><h3 class="title"><a id="id36111972"></a>9.4-ESV-R4</h3></div></div></div>
|
|
|
|
<p>None.</p>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="section" title="Feature Changes"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111905"></a>Feature Changes</h2></div></div></div>
|
|
|
|
<div class="section" title="9.4-ESV-R4"><div class="titlepage"><div><div><h3 class="title"><a id="id36111988"></a>9.4-ESV-R4</h3></div></div></div>
|
|
|
|
<p>None.</p>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="section" title="Security Fixes"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36111999"></a>Security Fixes</h2></div></div></div>
|
|
|
|
<div class="section" title="9.4-ESV-R4"><div class="titlepage"><div><div><h3 class="title"><a id="id36112004"></a>9.4-ESV-R4</h3></div></div></div>
|
|
|
|
<div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem">
|
|
Adding a NO DATA signed negative response to cache failed to clear
|
|
any matching RRSIG records already in cache. A subsequent lookup
|
|
of the cached NO DATA entry could crash named (INSIST) when the
|
|
unexpected RRSIG was also returned with the NO DATA cache entry.
|
|
[RT #22288] [CVE-2010-3613] [VU#706148]
|
|
</li><li class="listitem">
|
|
BIND, acting as a DNSSEC validator, was determining if the NS RRset
|
|
is insecure based on a value that could mean either that the RRset
|
|
is actually insecure or that there wasn't a matching key for the RRSIG
|
|
in the DNSKEY RRset when resuming from validating the DNSKEY RRset.
|
|
This can happen when in the middle of a DNSKEY algorithm rollover,
|
|
when two different algorithms were used to sign a zone but only the
|
|
new set of keys are in the zone DNSKEY RRset.
|
|
[RT #22309] [CVE-2010-3614] [VU#837744]
|
|
</li></ul></div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="section" title="Bug Fixes"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36112029"></a>Bug Fixes</h2></div></div></div>
|
|
|
|
<div class="section" title="9.4-ESV-R4"><div class="titlepage"><div><div><h3 class="title"><a id="id36112035"></a>9.4-ESV-R4</h3></div></div></div>
|
|
|
|
<div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem">
|
|
isc_print_vsnprintf() failed to check if there was
|
|
space available in the buffer when adding a left
|
|
justified character with a non zero width,
|
|
(e.g. "%-1c").
|
|
[RT #22270]
|
|
</li><li class="listitem">
|
|
win32: add more dependencies to BINDBuild.dsw.
|
|
[RT #22062]
|
|
</li></ul></div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="section" title="Thank You"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="id36112054"></a>Thank You</h2></div></div></div>
|
|
|
|
<p>
|
|
Thank you to everyone who assisted us in making this release possible.
|
|
If you would like to contribute to ISC to assist us in continuing to make
|
|
quality open source software, please visit our donations page at
|
|
<a class="ulink" href="http://www.isc.org/supportisc" target="_top">http://www.isc.org/supportisc</a>.
|
|
</p>
|
|
</div>
|
|
</div></body></html>
|