FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=main 2013-09-30T17:23:45Z 2013-09-30T17:23:45Z Dag-Erling Smørgrav des@FreeBSD.org 2013-09-30T17:23:45Z urn:sha1:56b72efe825d4190e0e2fdbc07ebb295cac299df Approved by: re (gjb) 2012-04-05T04:29:35Z Doug Barton dougb@FreeBSD.org 2012-04-05T04:29:35Z urn:sha1:d0f6280db790de2ad69bd01a1275e350cbd2840d 2011-07-16T11:12:09Z Doug Barton dougb@FreeBSD.org 2011-07-16T11:12:09Z urn:sha1:7afecc12f4d7b56f03438d5f41b837b9696f0a94 This version has many new features, see /usr/share/doc/bind9/README for details. 2011-05-28T00:21:28Z Doug Barton dougb@FreeBSD.org 2011-05-28T00:21:28Z urn:sha1:37bb75f74000255f3ea6c7c2d2e9ddae3075c19f 1. Very large RRSIG RRsets included in a negative cache can trigger an assertion failure that will crash named (BIND 9 DNS) due to an off-by-one error in a buffer size check. This bug affects all resolving name servers, whether DNSSEC validation is enabled or not, on all BIND versions prior to today. There is a possibility of malicious exploitation of this bug by remote users. 2. Named could fail to validate zones listed in a DLV that validated insecure without using DLV and had DS records in the parent zone. Add a patch provided by ru@ and confirmed by ISC to fix a crash at shutdown time when a SIG(0) key is being used. 2010-03-03T05:45:24Z Doug Barton dougb@FreeBSD.org 2010-03-03T05:45:24Z urn:sha1:eda14e83f216771932ca56c65bc62d994af63706 security patches to the 9.6.1 version, as well as many other bug fixes. This version also incorporates a different fix for the problem we had patched in contrib/bind9/bin/dig/dighost.c, so that file is now back to being the same as the vendor version. Due to the fact that the DNSSEC algorithm that will be used to sign the root zone is only included in this version and in 9.7.x those who wish to do validation MUST upgrade to one of these prior to July 2010. 2009-05-31T05:42:58Z Doug Barton dougb@FreeBSD.org 2009-05-31T05:42:58Z urn:sha1:6318052d9e161cbc69e4085125ef824d94de16ef lots of new features compared to 9.4.x, including: Full NSEC3 support Automatic zone re-signing New update-policy methods tcp-self and 6to4-self DHCID support. More detailed statistics counters including those supported in BIND 8. Faster ACL processing. Efficient LRU cache-cleaning mechanism. NSID support. 2008-07-12T05:00:28Z Peter Wemm peter@FreeBSD.org 2008-07-12T05:00:28Z urn:sha1:a988131922df6e2093bf4391d6b1b021c07d6b3c 2007-06-02T23:21:47Z Doug Barton dougb@FreeBSD.org 2007-06-02T23:21:47Z urn:sha1:141cfa50294bfad08bb6c6419f1dc4fc3165c6ab 2004-09-19T01:30:24Z Tom Rhodes trhodes@FreeBSD.org 2004-09-19T01:30:24Z urn:sha1:b1e4bd53e00e9694dd378a884abd3f2dd790190d