src, branch vendor/bind9/9.4.1 FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=vendor%2Fbind9%2F9.4.1 2007-06-05T22:15:39Z This commit was manufactured by cvs2svn to create tag 2007-06-05T22:15:39Z cvs2svn cvs2svn@FreeBSD.org 2007-06-05T22:15:39Z urn:sha1:9805e6c9d0319c27b6637ce47c0ddae18a5397b9 'bind9-vendor-BIND_9_4_1'. Add a custom atomic.h file which implements the C versions of the 2007-06-05T22:15:38Z Doug Barton dougb@FreeBSD.org 2007-06-05T22:15:38Z urn:sha1:c197e4d6789fb9d0dd1fee514ae2aa75f9b7ab6b code we already have assembly versions of. Written by: imp Remove from the vendor branch files that are no longer 2007-06-02T23:29:48Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:29:48Z urn:sha1:d6a1012ea9473b6b8a48c27c7bfc83a8fe167920 present in BIND 9.4.1. Vendor import of BIND 9.4.1 2007-06-02T23:21:47Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:21:47Z urn:sha1:141cfa50294bfad08bb6c6419f1dc4fc3165c6ab Vendor import of BIND 9.3.4 2007-01-29T18:31:57Z Doug Barton dougb@FreeBSD.org 2007-01-29T18:31:57Z urn:sha1:fa5fb0343e2347012cf980b8273e2cba6c36de4a Remove from the vendor branch files that are no longer in the 2006-12-10T07:12:50Z Doug Barton dougb@FreeBSD.org 2006-12-10T07:12:50Z urn:sha1:fcb35ad9ef0df468169724d08d42b32adacd40ae 9.3.3 sources. Vendor import of BIND 9.3.3 2006-12-10T07:09:56Z Doug Barton dougb@FreeBSD.org 2006-12-10T07:09:56Z urn:sha1:e99fbbb680307fe016c8db7d6611f1a3249761fb Update to version 9.3.2-P2, which addresses the vulnerability 2006-11-04T07:53:25Z Doug Barton dougb@FreeBSD.org 2006-11-04T07:53:25Z urn:sha1:a02f92e875d0d48c46103eef0fbea835048a278b announced by ISC dated 31 October (delivered via e-mail to the bind-announce@isc.org list on 2 November): Description: Because of OpenSSL's recently announced vulnerabilities (CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named, we are announcing this workaround and releasing patches. A proof of concept attack on OpenSSL has been demonstrated for CAN-2006-4339. OpenSSL is required to use DNSSEC with BIND. Fix for version 9.3.2-P1 and lower: Upgrade to BIND 9.3.2-P2, then generate new RSASHA1 and RSAMD5 keys for all old keys using the old default exponent and perform a key rollover to these new keys. These versions also change the default RSA exponent to be 65537 which is not vulnerable to the attacks described in CAN-2006-4339. Vendor import of BIND 9.3.2-P1, which addresses the following security 2006-09-06T21:27:11Z Doug Barton dougb@FreeBSD.org 2006-09-06T21:27:11Z urn:sha1:42b74b2549a0891d22d649ac2404abee2d26ccda vulnerabilities: http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en 2066. [security] Handle SIG queries gracefully. [RT #16300] http://www.kb.cert.org/vuls/id/697164 1941. [bug] ncache_adderesult() should set eresult even if no rdataset is passed to it. [RT #15642] All users of BIND 9 are encouraged to upgrade to this version. Remove files from the vendor branch that are no longer present 2006-01-14T02:11:56Z Doug Barton dougb@FreeBSD.org 2006-01-14T02:11:56Z urn:sha1:16cf7c033ff9fab106249a894e5670bd0b4fbbe8 in BIND 9.3.2 that were mistakenly removed from HEAD.