Commit graph

5140 commits

Author SHA1 Message Date
Tinderbox User
2c00a11db3 regen v9_10 2017-06-29 00:25:13 +00:00
Tinderbox User
e5ed7f1ae2 regen v9_10 2017-06-28 01:25:48 +00:00
Evan Hunt
88dc9d367d [v9_10] address TSIG bypass/forgery vulnerabilities
4643.	[security]	An error in TSIG handling could permit unauthorized
			zone transfers or zone updates. (CVE-2017-3142)
			(CVE-2017-3143) [RT #45383]

(cherry picked from commit 581c1526ab)
(cherry picked from commit a03f4b1ea4)
2017-06-27 11:40:31 -07:00
Tinderbox User
83eab97b25 regen v9_10 2017-06-26 03:09:43 +00:00
Tinderbox User
f7aae09b5a regen v9_10 2017-05-31 01:22:10 +00:00
Evan Hunt
f5dd7776e1 [v9_10] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
(cherry picked from commit c28e44f3f8)
2017-05-30 13:38:59 -07:00
Evan Hunt
a57b289ed0 [v9_10] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]

(cherry picked from commit 3440cf9c60)
2017-05-30 12:35:59 -07:00
Tinderbox User
bd57f3e5f0 regen v9_10 2017-05-23 01:26:01 +00:00
Tinderbox User
7d69df0c9c regen v9_10 2017-05-19 01:25:52 +00:00
Tinderbox User
533bbc54b9 update copyright notice / whitespace 2017-05-18 23:46:20 +00:00
Evan Hunt
2662b5f563 [v9_10] remove outdated reference to libbind
(cherry picked from commit ef9ab10ce0)
2017-05-18 15:35:35 -07:00
Tinderbox User
46bbe5de15 regen v9_10 2017-05-18 01:23:35 +00:00
Tinderbox User
dc952f8bdc regen v9_10 2017-05-17 01:25:01 +00:00
Tinderbox User
a849cd4136 update copyright notice / whitespace 2017-05-16 23:46:23 +00:00
Evan Hunt
ea90793daa [v9_10] symbolic option names for dig +ednsopt
4555.	[func]		dig +ednsopt: EDNS options can now be specified by
			name in addition to numeric value. [RT #44461]

(cherry picked from commit 25a9b90369)
(cherry picked from commit 403e7b4512)
2017-05-16 10:16:33 -07:00
Tinderbox User
0ffa8328f4 regen v9_10 2017-05-11 01:25:17 +00:00
Mark Andrews
8f7396770e add warning about semicolon no longer being escaped
(cherry picked from commit d4d73bca79)
2017-05-11 11:03:13 +10:00
Evan Hunt
cdb08d61f7 [v9_10] change markdown comment style for pandoc 2017-04-27 23:44:25 -07:00
Evan Hunt
fc1bce500b [v9_10] update copyrights that had been missed recently 2017-04-23 17:10:33 -07:00
Tinderbox User
4ea8c7b6f4 update copyright notice / whitespace 2017-04-23 23:46:24 +00:00
Tinderbox User
6f7d5b7835 regen v9_10 2017-04-23 01:14:12 +00:00
Tinderbox User
aba880a43e update copyright notice / whitespace 2017-04-21 23:46:38 +00:00
Evan Hunt
5480e4274b [v9_10] auto-generate named.conf.docbook
4603.	[doc]		Automatically generate named.conf(5) man page
			from doc/misc/options. Thanks to Tony Finch.
			[RT #43525]
2017-04-21 16:34:11 -07:00
Evan Hunt
14ed39ad6e [v9_10] give threads unique names to assist debugging
4602.	[func]		Threads are now set to human-readable
			names to assist debugging, when supported by
			the OS. [RT #43234]

(cherry picked from commit d26ae7fc08)
(cherry picked from commit 8b9c4592ed)
2017-04-21 14:00:23 -07:00
Evan Hunt
134fb9a2bf [v9_10] clear out relnotes 2017-04-21 13:38:29 -07:00
Evan Hunt
dc35ff9ec6 [v9_10] update README, remove FAQ
4593.	[doc]		Update README using markdown, remove outdated FAQ
			file in favor of the knowledge base.
2017-04-20 19:39:06 -07:00
Tinderbox User
feb005b1b9 regenerate 2017-04-14 03:54:11 +00:00
Tinderbox User
d8db5132ef regen v9_10 2017-04-14 03:54:08 +00:00
Tinderbox User
1f6f0be710 regen v9_10 2017-04-12 21:32:56 +00:00
Evan Hunt
6edf89ba7a [v9_10] formatting
(cherry picked from commit 52e398c0af)
2017-04-12 14:06:11 -07:00
Tinderbox User
a522189a27 regen v9_10 2017-04-12 01:12:39 +00:00
Tinderbox User
709352017e regenerate 2017-03-29 22:10:56 +00:00
Tinderbox User
e75e221299 regen v9_10 2017-03-29 22:10:54 +00:00
Mark Andrews
2a5cd07979 add CVE-2017-3138
(cherry picked from commit fe1ad70e51)
2017-03-30 02:57:10 +11:00
Tinderbox User
6d4aea9289 regen v9_10 2017-03-26 01:12:58 +00:00
Tinderbox User
4b47f2d6fd regen v9_10 2017-03-15 01:15:02 +00:00
Tinderbox User
7f90852277 regen v9_10 2017-03-01 02:34:13 +00:00
Tinderbox User
e8598bd7f1 regen v9_10 2017-03-01 01:12:17 +00:00
Tinderbox User
25c2fe59ca regenerate 2017-02-24 02:40:44 +00:00
Tinderbox User
09b8f27006 regen v9_10 2017-02-24 01:16:45 +00:00
Evan Hunt
69fd759b4a [v9_10] remove unnecessary INSIST and prep 9.10.5rc2
4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

(cherry picked from commit a1365a0042)
(cherry picked from commit 559cbe04e7)
2017-02-23 15:01:30 -08:00
Tinderbox User
6e21ba486c regen v9_10 2017-02-16 01:50:26 +00:00
Tinderbox User
a4bd77daf0 regen v9_10 2017-02-16 01:12:25 +00:00
Mark Andrews
3020c73f26 add CVE-2017-3136 note
(cherry picked from commit d77eadc261)
2017-02-15 12:45:25 +11:00
Tinderbox User
dd6c979eff regen v9_10 2017-02-08 01:11:45 +00:00
Evan Hunt
40462c6d00 [v9_10] doc style 2017-02-07 08:19:29 -08:00
Tinderbox User
6ba4f72c4b regen v9_10 2017-02-07 01:11:03 +00:00
Evan Hunt
0fffe04229 [v9_10] removed extra note about bind.keys update 2017-02-06 14:19:06 -08:00
Tinderbox User
87b4d16b22 regenerate 2017-02-05 07:00:34 +00:00
Tinderbox User
3edf86ac26 regen v9_10 2017-02-05 06:48:29 +00:00