aboutsummaryrefslogtreecommitdiff
path: root/contrib/bind9
Commit message (Collapse)AuthorAgeFilesLines
...
* Vendor import of BIND 9.4.2Doug Barton2007-12-02204-9396/+24257
| | | | Notes: svn path=/vendor/bind9/dist/; revision=174187
* Vendor import of 9.4.1-P1, which has fixes for the following:Doug Barton2007-07-2530-1790/+2248
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. The default access control lists (acls) are not being correctly set. If not set anyone can make recursive queries and/or query the cache contents. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2925 2. The DNS query id generation is vulnerable to cryptographic analysis which provides a 1 in 8 chance of guessing the next query id for 50% of the query ids. This can be used to perform cache poisoning by an attacker. This bug only affects outgoing queries, generated by BIND 9 to answer questions as a resolver, or when it is looking up data for internal uses, such as when sending NOTIFYs to slave name servers. All users are encouraged to upgrade. See also: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926 Approved by: re (kensmith, implicit) Notes: svn path=/vendor/bind9/dist/; revision=171577
* Add a custom atomic.h file which implements the C versions of theDoug Barton2007-06-051-0/+59
| | | | | | | | | code we already have assembly versions of. Written by: imp Notes: svn path=/vendor/bind9/dist/; revision=170349
* Remove from the vendor branch files that are no longerDoug Barton2007-06-0212-10066/+0
| | | | | | | present in BIND 9.4.1. Notes: svn path=/vendor/bind9/dist/; revision=170225
* Vendor import of BIND 9.4.1Doug Barton2007-06-021000-40961/+116285
| | | | Notes: svn path=/vendor/bind9/dist/; revision=170222
* Vendor import of BIND 9.3.4Doug Barton2007-01-299-17/+223
| | | | Notes: svn path=/vendor/bind9/dist/; revision=166332
* Remove from the vendor branch files that are no longer in theDoug Barton2006-12-102-314/+0
| | | | | | | 9.3.3 sources. Notes: svn path=/vendor/bind9/dist/; revision=165078
* Vendor import of BIND 9.3.3Doug Barton2006-12-10251-7058/+11926
| | | | Notes: svn path=/vendor/bind9/dist/; revision=165071
* Update to version 9.3.2-P2, which addresses the vulnerabilityDoug Barton2006-11-046-44/+122
| | | | | | | | | | | | | | | | | | | | | | | | | announced by ISC dated 31 October (delivered via e-mail to the bind-announce@isc.org list on 2 November): Description: Because of OpenSSL's recently announced vulnerabilities (CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named, we are announcing this workaround and releasing patches. A proof of concept attack on OpenSSL has been demonstrated for CAN-2006-4339. OpenSSL is required to use DNSSEC with BIND. Fix for version 9.3.2-P1 and lower: Upgrade to BIND 9.3.2-P2, then generate new RSASHA1 and RSAMD5 keys for all old keys using the old default exponent and perform a key rollover to these new keys. These versions also change the default RSA exponent to be 65537 which is not vulnerable to the attacks described in CAN-2006-4339. Notes: svn path=/vendor/bind9/dist/; revision=163976
* Vendor import of BIND 9.3.2-P1, which addresses the following securityDoug Barton2006-09-064-28/+42
| | | | | | | | | | | | | | | | vulnerabilities: http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en 2066. [security] Handle SIG queries gracefully. [RT #16300] http://www.kb.cert.org/vuls/id/697164 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. [RT #15642] All users of BIND 9 are encouraged to upgrade to this version. Notes: svn path=/vendor/bind9/dist/; revision=162079
* Remove files from the vendor branch that are no longer presentDoug Barton2006-01-1431-23572/+0
| | | | | | | in BIND 9.3.2 that were mistakenly removed from HEAD. Notes: svn path=/vendor/bind9/dist/; revision=154334
* After some discussion with the folks at ISC, it turns out that the _ai_padDoug Barton2006-01-041-3/+3
| | | | | | | | | | | | | | | part of the structure was a hack to maintain binary compatibility with Sun binaries, and my understanding is that it's not needed generally on sparc systems running other operating systems. Therefore, hide this code behind the same set of tests as in lib/bind/include/netdb.h. This file is being imported on the vendor branch because a similar change (or change with similar effect) will be in the next version of BIND 9. This change will not affect other platforms in any way. Notes: svn path=/vendor/bind9/dist/; revision=154032
* Vendor import of BIND 9.3.2Doug Barton2005-12-29284-38640/+66160
| | | | Notes: svn path=/vendor/bind9/dist/; revision=153816
* Update the vendor branch with a patch to this file that wasDoug Barton2005-08-181-2/+4
| | | | | | | | | | | | | | | | | | | researched by glebius, and incorporated by ISC into the next version of BIND. Unfortunately, it looks like their release will come after the release of FreeBSD 6, so we will bring this in now. The patch addresses a problem with high-load resolvers which hit memory barriers. Without this patch, running the resolving name server out of memory would lead to "unpredictable results." Of course, the canonical answer to this problem is to put more memory into the system, however that is not always possible, and the code should be able to handle this situation gracefully in any case. Notes: svn path=/vendor/bind9/dist/; revision=149245
* Remove files from the vendor branch that were [re]moved in 9.3.1Doug Barton2005-03-1726-16519/+0
| | | | Notes: svn path=/vendor/bind9/dist/; revision=143734
* Vendor import of BIND 9.3.1Doug Barton2005-03-17123-1694/+8350
| | | | Notes: svn path=/vendor/bind9/dist/; revision=143731
* Vendor import of BIND 9.3.0.Dag-Erling Smørgrav2004-09-236-8/+35
| | | | Notes: svn path=/vendor/bind9/dist/; revision=135601
* This commit was manufactured by cvs2svn to create branch 'VENDOR-bind9'.cvs2svn2004-09-212-0/+78
| | | | Notes: svn path=/vendor/bind9/dist/; revision=135550
* Vendor import of BIND 9.3.0rc4.vendor/bind9/9.3.0rc4Tom Rhodes2004-09-193-0/+602
| | | | | | | | | These three files were missed in the original import because their names contained the magic letters w, i and n in that sequence. Notes: svn path=/vendor/bind9/dist/; revision=135471 svn path=/vendor/bind9/9.3.0rc4/; revision=135473; tag=vendor/bind9/9.3.0rc4
* Vender import of BIND 9.3.0rc4.Tom Rhodes2004-09-191090-0/+509412
Notes: svn path=/vendor/bind9/dist/; revision=135446
generated by cgit v1.2.3 (git 2.25.1) at 2025-03-22 12:50:33 +0000