Commit graph

239 commits

Author SHA1 Message Date
Mark Andrews
8dbe2bedce add CVE-2016-2775 2016-07-12 01:17:44 +10:00
Mark Andrews
2c4cca7e24 document python requirements 2016-05-26 15:40:30 +10:00
Jeremy C. Reed
8c7161702b add missing comma 2016-04-13 19:24:52 -04:00
Mark Andrews
235151bad7 reorder cve list 2016-03-09 07:03:42 +11:00
Jeremy C. Reed
b1bc013634 misspelling 2016-03-08 09:41:40 -05:00
Mark Andrews
b5c239dcdc add CVE-2016-2088 2016-02-27 13:21:55 +11:00
Mark Andrews
3b4b57bb4f add CVE-2016-1286 2016-02-24 13:16:25 +11:00
Evan Hunt
16f69da352 [v9_10] add [performance] 2016-02-01 09:52:19 -08:00
Mark Andrews
2d8617416f add CVE-2015-8000 2015-11-17 15:27:54 +11:00
Evan Hunt
96f318b0c6 [v9_10] add CVE number 2015-08-13 15:31:15 -07:00
Evan Hunt
7163ce122d [v9_10] address buffer accounting error
4168.	[security]	A buffer accounting error could trigger an
			assertion failure when parsing certain malformed
			DNSSEC keys. (CVE-2015-5722) [RT #40212]

(cherry picked from commit ce9f893e21)
2015-08-07 13:23:03 -07:00
Evan Hunt
bc66dfc5ce [v9_10] add fetchlimit to README 2015-08-03 12:53:36 -07:00
Mark Andrews
fba94b205b add CVE-2015-5477 2015-07-15 07:55:52 +10:00
Mark Andrews
dd696539d3 3812. [func] Dig now supports sending arbitary EDNS options from
the command line (+ednsopt=code[:value]). [RT #35584]

(cherry picked from commit e560fbdf77)
2015-05-21 11:10:51 +10:00
Mark Andrews
f96e5c9d50 add CVE-2015-1349 2015-02-11 16:33:57 +11:00
Mark Andrews
e2b3755218 s/9.10.1/9.10.2/ 2014-12-31 11:08:53 +11:00
Evan Hunt
8a64e078d1 [v9_10] prep 9.10.2b1 2014-12-18 13:51:12 -08:00
Evan Hunt
fe66c6b152 [v9_10] update contact info in README and confiure --help 2014-09-16 12:27:15 -07:00
Evan Hunt
0770913a4c [v9_10] grammar fix 2014-09-03 12:50:37 -07:00
Evan Hunt
1058966060 [v9_10] backport doc fixes from master 2014-08-18 14:01:40 -07:00
Mark Andrews
7fc20db578 plural 2014-06-25 00:22:02 +10:00
Mark Andrews
c6f891732d add CVE-2014-3859 2014-05-26 13:13:20 +10:00
Mark Andrews
c681ba9398 Add CVE-2014-3214 to README 2014-05-09 13:43:24 +10:00
Evan Hunt
ab5ba6b1c3 [v9_10] typo 2014-04-23 15:55:36 -07:00
Evan Hunt
8103fbabd5 [v9_10] globally rename "delve" to "delv"
3817.	[func]		The "delve" command is now spelled "delv" to avoid
			a namespace collision with the Xapian project.
			[RT #35801]

(cherry picked from commit 2ae159b376)
2014-04-23 11:15:36 -07:00
Evan Hunt
2c0af34594 [master] update README 2014-03-12 08:31:34 -07:00
Evan Hunt
e94261f0bc [master] add text clarifying native-pkcs11 2014-02-28 08:10:44 -08:00
Evan Hunt
f6f8819806 [master] clarified "no-case-compress" 2014-02-25 09:55:48 -08:00
Evan Hunt
1736709296 [master] whitespace 2014-02-23 23:22:15 -08:00
Evan Hunt
fdca88d789 [master] update README 2014-02-23 23:21:50 -08:00
Evan Hunt
7adf0928b9 [master] revised previous 2014-02-19 21:13:39 -08:00
Evan Hunt
fc73ba3528 [master] update README 2014-02-19 21:04:28 -08:00
Evan Hunt
d7b9756a21 [master] ENDS client-subnet in dig
3749.	[func]		"dig +subnet" sends an EDNS client subnet option
			containing the specified address/prefix when
                        querying. (Thanks to Wilmer van der Gaast.)
                        [RT #35415]
2014-02-19 15:51:02 -08:00
Evan Hunt
35f6a21f5f [master] max-zone-ttl
3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
2014-02-18 23:26:50 -08:00
Evan Hunt
db955e6f01 [master] add SIT and the new stats counters to README 2014-02-18 22:52:06 -08:00
Evan Hunt
6a3fa181d1 [master] add "--with-tuning=large" option
3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
2014-02-18 22:36:14 -08:00
Evan Hunt
83d59691e3 [master] update README 2014-02-16 14:34:11 -08:00
Evan Hunt
c922131320 [master] update README 2014-02-06 22:54:38 -08:00
Evan Hunt
09158ff8e4 [master] add description of [contrib] 2014-02-05 14:54:46 -08:00
Evan Hunt
ff0b3538a4 [master] explain [placeholder] 2014-02-05 09:25:19 -08:00
Evan Hunt
9d1f3953d3 [master] clarify some items 2014-01-31 15:32:46 -08:00
Jeremy C. Reed
daa098822e fix misspelling / typos 2014-01-31 10:30:04 -06:00
Evan Hunt
45e74d65bd [master] some items were missing from README 2014-01-30 11:51:53 -08:00
Evan Hunt
ba41a19666 [master] reformat acknowledgements 2014-01-24 09:58:38 -08:00
Evan Hunt
bff64bf12b [master] correct copyrights and attributions
see RT #35423 for details; highlights:
    - remove license clauses 3 and 4 from NetBSD code
    - remove advertising clause from historical BSD code
    - add openssl advertising attributions
2014-01-24 09:46:00 -08:00
Evan Hunt
ba751492fc [master] native PKCS#11 support
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
2014-01-14 15:40:56 -08:00
Evan Hunt
b751788932 [master] improve prefetch doc 2014-01-13 21:08:20 -08:00
Evan Hunt
3b1b34f762 README formatting 2013-12-11 20:07:25 -08:00
Evan Hunt
f1b1a07eca [master] typo 2013-11-21 18:14:02 -08:00
Evan Hunt
15eb0cb8e1 [master] bump release tag 2013-11-18 16:03:50 -08:00