Commit Graph

39 Commits

Author SHA1 Message Date
dougb
c85e35bbb2 This commit was generated by cvs2svn to compensate for changes in r166332,
which included commits to RCS files with non-trunk default branches.
2007-01-29 18:31:57 +00:00
dougb
fb8cb3b3a3 Vendor import of BIND 9.3.4 2007-01-29 18:31:57 +00:00
dougb
b63477174b Remove from the vendor branch files that are no longer in the
9.3.3 sources.
2006-12-10 07:12:50 +00:00
dougb
05d06a4752 This commit was generated by cvs2svn to compensate for changes in r165078,
which included commits to RCS files with non-trunk default branches.
2006-12-10 07:12:50 +00:00
dougb
f5d31f05bd Vendor import of BIND 9.3.3 2006-12-10 07:09:56 +00:00
dougb
41cdd45e73 This commit was generated by cvs2svn to compensate for changes in r165071,
which included commits to RCS files with non-trunk default branches.
2006-12-10 07:09:56 +00:00
dougb
4a3a088a0b Update to version 9.3.2-P2, which addresses the vulnerability
announced by ISC dated 31 October (delivered via e-mail to the
bind-announce@isc.org list on 2 November):

Description:
        Because of OpenSSL's recently announced vulnerabilities
        (CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named,
        we are announcing this workaround and releasing patches.  A proof of
        concept attack on OpenSSL has been demonstrated for CAN-2006-4339.

        OpenSSL is required to use DNSSEC with BIND.

Fix for version 9.3.2-P1 and lower:
        Upgrade to BIND 9.3.2-P2, then generate new RSASHA1 and
        RSAMD5 keys for all old keys using the old default exponent
        and perform a key rollover to these new keys.

        These versions also change the default RSA exponent to be
        65537 which is not vulnerable to the attacks described in
        CAN-2006-4339.
2006-11-04 07:53:25 +00:00
dougb
7ab36db4ed This commit was generated by cvs2svn to compensate for changes in r163976,
which included commits to RCS files with non-trunk default branches.
2006-11-04 07:53:25 +00:00
dougb
f79340e225 Vendor import of BIND 9.3.2-P1, which addresses the following security
vulnerabilities:

http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en
2066.  [security]      Handle SIG queries gracefully. [RT #16300]

http://www.kb.cert.org/vuls/id/697164
1941.  [bug]           ncache_adderesult() should set eresult even if no
                       rdataset is passed to it. [RT #15642]

All users of BIND 9 are encouraged to upgrade to this version.
2006-09-06 21:27:11 +00:00
dougb
7993bfbeba This commit was generated by cvs2svn to compensate for changes in r162079,
which included commits to RCS files with non-trunk default branches.
2006-09-06 21:27:11 +00:00
ru
388e590f95 Reimplementation of world/kernel build options. For details, see:
http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by:	imp, jhb, kris, phk, ru (all bugs are mine)
2006-03-17 18:54:44 +00:00
dougb
e634f03536 Add a reminder to remove obsolete files from the vendor branch. 2006-01-14 02:45:49 +00:00
dougb
84bc3de5bb Remove files from the vendor branch that are no longer present
in BIND 9.3.2 that were mistakenly removed from HEAD.
2006-01-14 02:11:56 +00:00
dougb
cfe23adacb After some discussion with the folks at ISC, it turns out that the _ai_pad
part of the structure was a hack to maintain binary compatibility with
Sun binaries, and my understanding is that it's not needed generally
on sparc systems running other operating systems. Therefore, hide this
code behind the same set of tests as in lib/bind/include/netdb.h.

This file is being imported on the vendor branch because a similar change
(or change with similar effect) will be in the next version of BIND 9.

This change will not affect other platforms in any way.
2006-01-04 19:18:43 +00:00
dougb
998ec2639b This commit was generated by cvs2svn to compensate for changes in r154032,
which included commits to RCS files with non-trunk default branches.
2006-01-04 19:18:43 +00:00
dougb
14470d19cd Minor updates relative to the 9.2.3 import 2005-12-29 04:41:09 +00:00
dougb
4c84b65cf3 Remove files no longer in the BIND 9 distribution 2005-12-29 04:26:13 +00:00
dougb
13e6e55147 Vendor import of BIND 9.3.2 2005-12-29 04:22:58 +00:00
dougb
bf28cb445b This commit was generated by cvs2svn to compensate for changes in r153816,
which included commits to RCS files with non-trunk default branches.
2005-12-29 04:22:58 +00:00
dougb
9123af99f7 Update the vendor branch with a patch to this file that was
researched by glebius, and incorporated by ISC into the next
version of BIND. Unfortunately, it looks like their release
will come after the release of FreeBSD 6, so we will bring
this in now.

The patch addresses a problem with high-load resolvers which
hit memory barriers. Without this patch, running the resolving
name server out of memory would lead to "unpredictable results."

Of course, the canonical answer to this problem is to put more
memory into the system, however that is not always possible, and
the code should be able to handle this situation gracefully in
any case.
2005-08-18 18:39:31 +00:00
dougb
e48a6516ad This commit was generated by cvs2svn to compensate for changes in r149245,
which included commits to RCS files with non-trunk default branches.
2005-08-18 18:39:31 +00:00
des
514635c5be Update (correct autotools usage, copy generated headers, --disable-threads) 2005-07-25 17:14:00 +00:00
dougb
5deecb8ce7 Expand and refine a few sections for future reference 2005-03-17 08:40:41 +00:00
dougb
d2da945c97 Delete all aix ports 2005-03-17 08:40:11 +00:00
dougb
12fce141a0 Remove files from the vendor branch that were [re]moved in 9.3.1 2005-03-17 08:10:34 +00:00
dougb
01eced7fee This commit was generated by cvs2svn to compensate for changes in r143734,
which included commits to RCS files with non-trunk default branches.
2005-03-17 08:10:34 +00:00
dougb
6c00746d36 Vendor import of BIND 9.3.1 2005-03-17 08:04:02 +00:00
dougb
fa44a52fc8 This commit was generated by cvs2svn to compensate for changes in r143731,
which included commits to RCS files with non-trunk default branches.
2005-03-17 08:04:02 +00:00
ru
5c04306fea NOINET6 -> NO_INET6 2004-12-21 10:49:29 +00:00
des
d9dca57742 Document the upgrade procedure. 2004-09-27 00:25:56 +00:00
des
46172d5768 Vendor import of BIND 9.3.0. 2004-09-23 07:18:50 +00:00
des
584f00625f This commit was generated by cvs2svn to compensate for changes in r135601,
which included commits to RCS files with non-trunk default branches.
2004-09-23 07:18:50 +00:00
cvs2svn
93363f29ef This commit was manufactured by cvs2svn to create branch 'VENDOR-bind9'. 2004-09-21 19:01:49 +00:00
des
a4c12f8006 Switch from BIND 8 to BIND 9.
Submitted by:	(in part) dougb@, trhodes@
Reviewed by:	dougb@, trhodes@, re@
MFC after:	5 days
2004-09-21 19:01:48 +00:00
des
30e617eeb0 Add lib/tests. 2004-09-20 18:36:02 +00:00
trhodes
a65cc32b82 Add a config.h file. 2004-09-19 19:30:46 +00:00
trhodes
fab01f1c43 Add a FREEBSD-Xlist file. 2004-09-19 19:24:56 +00:00
trhodes
272f1870d5 Vendor import of BIND 9.3.0rc4.
These three files were missed in the original import because their names
contained the magic letters w, i and n in that sequence.
2004-09-19 18:34:53 +00:00
trhodes
06246360f7 Vender import of BIND 9.3.0rc4. 2004-09-19 01:30:24 +00:00