Commit graph

24602 commits

Author SHA1 Message Date
Tinderbox User
2c00a11db3 regen v9_10 2017-06-29 00:25:13 +00:00
Evan Hunt
f9d1853c6b [v9_10] complete change #4643 2017-06-28 09:12:09 -07:00
Tinderbox User
e5ed7f1ae2 regen v9_10 2017-06-28 01:25:48 +00:00
Tinderbox User
f1862f0c15 update copyright notice / whitespace 2017-06-27 23:46:46 +00:00
Tinderbox User
91f105532b newcopyrights 2017-06-27 23:30:21 +00:00
Evan Hunt
2437eaa744 [v9_10] fix API ranges (170-179 was used for two branches) 2017-06-27 12:22:11 -07:00
Evan Hunt
88dc9d367d [v9_10] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
(cherry picked from commit a03f4b1ea4)
2017-06-27 11:40:31 -07:00
Evan Hunt
a71114e8bd [v9_10] enhanced rfc 5011 logging
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]

(cherry picked from commit 0d90835d2a)
2017-06-27 10:50:54 -07:00
Tinderbox User
1cc47a7edf update copyright notice / whitespace 2017-06-26 23:46:39 +00:00
Tinderbox User
1b0c5d4c2e newcopyrights 2017-06-26 23:30:25 +00:00
Mark Andrews
2d147f55bc update 2017-06-26 16:55:28 +10:00
Mark Andrews
2eefa93835 update 2017-06-26 16:45:23 +10:00
Mark Andrews
e8cea60564 add EXCLUDED 2017-06-26 16:34:47 +10:00
Mark Andrews
ee741fb0c0 spelling 2017-06-26 16:28:40 +10:00
Tinderbox User
83eab97b25 regen v9_10 2017-06-26 03:09:43 +00:00
Mark Andrews
6ff47b9e98 update api for 9.10.6b1 2017-06-26 12:56:10 +10:00
Mark Andrews
5110e6a630 update api for 9.10.6b1 2017-06-26 12:53:40 +10:00
Mark Andrews
936e82cd47 'name' should be on isc_thread_setname argument not isc_thread_create
(cherry picked from commit 15471a63a2)
2017-06-26 12:42:51 +10:00
Mark Andrews
1759cc3436 add 9.10.6b1 release marker 2017-06-26 12:39:42 +10:00
Mark Andrews
f0689b8241 copyrights 2017-06-26 12:22:52 +10:00
Mark Andrews
e2e98a628d 4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
--enable-developer. [RT #45373]

(cherry picked from commit 1be7580be7)
2017-06-26 10:02:55 +10:00
Mark Andrews
18bb24bc37 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
2017-06-23 17:18:59 +10:00
Tinderbox User
68c2253cf5 update copyright notice / whitespace 2017-06-13 23:46:27 +00:00
Tinderbox User
85643550f1 newcopyrights 2017-06-13 23:30:32 +00:00
Mark Andrews
9067cda974 4636. [bug] Normalize rpz policy zone names when checking for
existence. [RT #45358]

(cherry picked from commit e85e95c19e)
2017-06-13 13:07:46 +10:00
Mukund Sivaraman
d936126bf1 Don't log NSDNAME failures as NSIP (#45052)
(cherry picked from commit 2c11da8441)
(cherry picked from commit 3a58e1fefb)
2017-06-12 14:15:18 +05:30
Tinderbox User
abe35b9e96 newcopyrights 2017-06-11 23:30:18 +00:00
Mark Andrews
55e4910660 4634. [contrib] check5011.pl needs to handle optional space before
semi-colon in +multi-line output. [RT #45352]

(cherry picked from commit ed2659c974)
2017-06-11 22:05:22 +10:00
Tinderbox User
0e24f61207 update copyright notice / whitespace 2017-06-02 23:45:59 +00:00
Tinderbox User
6b61f8756d newcopyrights 2017-06-02 23:30:17 +00:00
Mark Andrews
3f4dafe57d 4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
(cherry picked from commit 9c179a5607)
2017-06-02 11:49:01 +10:00
Mark Andrews
5e9a9a823e fix changes numbers
(cherry picked from commit 5e1cedb130)
2017-05-31 11:51:09 +10:00
Tinderbox User
f7aae09b5a regen v9_10 2017-05-31 01:22:10 +00:00
Tinderbox User
8c2c69a9df update copyright notice / whitespace 2017-05-30 23:46:35 +00:00
Tinderbox User
3c8f90245e newcopyrights 2017-05-30 23:30:16 +00:00
Evan Hunt
f5dd7776e1 [v9_10] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
(cherry picked from commit c28e44f3f8)
2017-05-30 13:38:59 -07:00
Evan Hunt
a57b289ed0 [v9_10] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]

(cherry picked from commit 3440cf9c60)
2017-05-30 12:35:59 -07:00
Mark Andrews
b9892c25c9 4629. [bug] dns_client_startupdate could not be called with a
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
2017-05-30 09:51:34 +10:00
Tinderbox User
0a355e0574 update copyright notice / whitespace 2017-05-28 23:46:51 +00:00
Tinderbox User
0aa76bf731 newcopyrights 2017-05-28 23:30:19 +00:00
Evan Hunt
40a44ab265 [v9_10] Add DLZ db version to activeversions
4628.	[bug]		Fixed a potential reference leak in query_getdb().
			[RT #45247]

(cherry picked from commit 594eadcc34)
2017-05-28 14:30:36 -07:00
Evan Hunt
9d0174e5da [v9_10] Use 127.0.0.1 as interface for rndc in logfileconfig test 2017-05-28 14:23:37 -07:00
Mark Andrews
10a12de0ef test crypto support
(cherry picked from commit 0a78894304)
2017-05-26 16:04:29 +10:00
Tinderbox User
cc2b6ff5dd update copyright notice / whitespace 2017-05-24 23:46:22 +00:00
Tinderbox User
0f220d03f5 newcopyrights 2017-05-24 23:30:18 +00:00
Mark Andrews
1e3e44dace make chain system test work with python 3
(cherry picked from commit b9c5b37e0c)
2017-05-24 21:45:23 +10:00
Mark Andrews
d9238976c1 use 'python -u' to run python scripts
(cherry picked from commit a5dc0d5066)
2017-05-24 15:16:49 +10:00
Evan Hunt
d0babadb5c [v9_10] copyrights 2017-05-23 16:47:30 -07:00
Tinderbox User
bd57f3e5f0 regen v9_10 2017-05-23 01:26:01 +00:00
Mark Andrews
0bf136b8c8 4627. [func] Deprecate 'dig +sit', it is replaced by 'dig +cookie'.
[RT #45245]
2017-05-23 10:38:25 +10:00