aboutsummaryrefslogtreecommitdiff
path: root/contrib/bind9/doc/draft
Commit message (Collapse)AuthorAgeFilesLines
* Update to version 9.4-ESV-R5 which contains various bug fixesDoug Barton2011-08-025-2576/+3305
| | | | | | | | | | | and improvements See RELEASE-NOTES-BIND-9.4-ESV.* for details This is expected to be the final release of the BIND 9.4 branch Notes: svn path=/stable/7/; revision=224601
* MFV: vendor/bind9/dist-9.4Doug Barton2010-12-092-573/+629
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to version 9.4-ESV-R4, the latest from ISC, which addresses the following security vulnerabilities. For more information regarding these issues please see: http://www.isc.org/announcement/guidance-regarding-dec-1st-2010-security-advisories 1. Cache incorrectly allows ncache and rrsig for the same type http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3613 Affects resolver operators whose servers are open to potential attackers. Triggering the bug will cause the server to crash. This bug applies even if you do not have DNSSEC enabled. 2. Key algorithm rollover http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3614 Affects resolver operators who are validating with DNSSEC, and querying zones which are in a key rollover period. The bug will cause answers to incorrectly be marked as insecure. Approved by: re (kib) Notes: svn path=/stable/7/; revision=216336
* MFV version 9.4-ESV-R3Doug Barton2010-11-046-882/+3851
| | | | | | | | This version contains several fixes for DNSSEC and DLV, as well as fixes relevant to any resolving name server. Notes: svn path=/stable/7/; revision=214812
* Upgrade to 9.4-ESV-R2, which addresses the following:Doug Barton2010-05-248-982/+2330
| | | | | | | | Named could return SERVFAIL for negative responses from unsigned zones. Notes: svn path=/stable/7/; revision=208485
* Update to 9.4-ESV-R1, the latest patchfix release which deals withDoug Barton2010-03-298-2363/+3303
| | | | | | | | | | | the problems related to the handling of broken DNSSEC trust chains. This fix is only relevant for those who have DNSSEC validation enabled and configure trust anchors from third parties, either manually, or through a system like DLV. Notes: svn path=/stable/7/; revision=205868
* Upgrade to BIND 9.4-ESV. This version incorporates all bug and securityDoug Barton2010-02-1655-38813/+10177
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixes since the release of 9.4.3, including the most recent -P5 security fix detailed below. From the README: BIND 9.4-ESV will be supported until December 31, 2010, at which time you will need to upgrade to the current release of BIND. This versions address the following vulnerabilities: BIND 9 Cache Update from Additional Section https://www.isc.org/advisories/CVE-2009-4022v6 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022 A nameserver with DNSSEC validation enabled may incorrectly add unauthenticated records to its cache that are received during the resolution of a recursive client query BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses https://www.isc.org/advisories/CVE-2010-0097 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097 There was an error in the DNSSEC NSEC/NSEC3 validation code that could cause bogus NXDOMAIN responses (that is, NXDOMAIN responses for records proven by NSEC or NSEC3 to exist) to be cached as if they had validated correctly These issues only affect systems with DNSSEC validation enabled. Approved by: re (kensmith) Notes: svn path=/stable/7/; revision=203948
* MFC contrib code and bmake changes for BIND version 9.4.2Doug Barton2007-12-071-3136/+0
| | | | | | | Approved by: re (kensmith) Notes: svn path=/stable/7/; revision=174398
* This commit was generated by cvs2svn to compensate for changes in r170225,Doug Barton2007-06-0210-9742/+0
| | | | | | | which included commits to RCS files with non-trunk default branches. Notes: svn path=/head/; revision=170226
* Vendor import of BIND 9.4.1Doug Barton2007-06-0214-1/+14696
| | | | Notes: svn path=/vendor/bind9/dist/; revision=170222
* Remove files from the vendor branch that are no longer presentDoug Barton2006-01-1419-21007/+0
| | | | | | | in BIND 9.3.2 that were mistakenly removed from HEAD. Notes: svn path=/vendor/bind9/dist/; revision=154334
* Vendor import of BIND 9.3.2Doug Barton2005-12-2930-0/+28431
| | | | Notes: svn path=/vendor/bind9/dist/; revision=153816
* Vender import of BIND 9.3.0rc4.Tom Rhodes2004-09-1935-0/+32803
Notes: svn path=/vendor/bind9/dist/; revision=135446
generated by cgit v1.3 (git 2.53.0) at 2026-05-30 07:27:16 +0000