FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=main 2013-09-30T17:23:45Z 2013-09-30T17:23:45Z Dag-Erling Smørgrav des@FreeBSD.org 2013-09-30T17:23:45Z urn:sha1:56b72efe825d4190e0e2fdbc07ebb295cac299df Approved by: re (gjb) 2012-04-05T04:29:35Z Doug Barton dougb@FreeBSD.org 2012-04-05T04:29:35Z urn:sha1:d0f6280db790de2ad69bd01a1275e350cbd2840d 2011-05-28T00:21:28Z Doug Barton dougb@FreeBSD.org 2011-05-28T00:21:28Z urn:sha1:37bb75f74000255f3ea6c7c2d2e9ddae3075c19f 1. Very large RRSIG RRsets included in a negative cache can trigger an assertion failure that will crash named (BIND 9 DNS) due to an off-by-one error in a buffer size check. This bug affects all resolving name servers, whether DNSSEC validation is enabled or not, on all BIND versions prior to today. There is a possibility of malicious exploitation of this bug by remote users. 2. Named could fail to validate zones listed in a DLV that validated insecure without using DLV and had DS records in the parent zone. Add a patch provided by ru@ and confirmed by ISC to fix a crash at shutdown time when a SIG(0) key is being used. 2009-05-31T05:42:58Z Doug Barton dougb@FreeBSD.org 2009-05-31T05:42:58Z urn:sha1:6318052d9e161cbc69e4085125ef824d94de16ef lots of new features compared to 9.4.x, including: Full NSEC3 support Automatic zone re-signing New update-policy methods tcp-self and 6to4-self DHCID support. More detailed statistics counters including those supported in BIND 8. Faster ACL processing. Efficient LRU cache-cleaning mechanism. NSID support. 2008-07-12T05:00:28Z Peter Wemm peter@FreeBSD.org 2008-07-12T05:00:28Z urn:sha1:a988131922df6e2093bf4391d6b1b021c07d6b3c 2007-06-02T23:21:47Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:21:47Z urn:sha1:141cfa50294bfad08bb6c6419f1dc4fc3165c6ab 2004-09-19T01:30:24Z Tom Rhodes trhodes@FreeBSD.org 2004-09-19T01:30:24Z urn:sha1:b1e4bd53e00e9694dd378a884abd3f2dd790190d