d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
188,760 Commits 4 Branches 49 Tags
Commit Graph

12 Commits

Author SHA1 Message Date
dougb
c52afe031a Upgrade to version 9.6.2. This version includes all previously released 
security patches to the 9.6.1 version, as well as many other bug fixes.

This version also incorporates a different fix for the problem we had
patched in contrib/bind9/bin/dig/dighost.c, so that file is now back
to being the same as the vendor version.

Due to the fact that the DNSSEC algorithm that will be used to sign the
root zone is only included in this version and in 9.7.x those who wish
to do validation MUST upgrade to one of these prior to July 2010.
 2010-03-03 05:45:24 +00:00
dougb
627ca92735 Upgrade to BIND 9.6.1-P3. 
This version address the following vulnerabilities:

BIND 9 Cache Update from Additional Section
https://www.isc.org/advisories/CVE-2009-4022v6
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4022
A nameserver with DNSSEC validation enabled may incorrectly add
unauthenticated records to its cache that are received during the
resolution of a recursive client query

BIND 9 DNSSEC validation code could cause bogus NXDOMAIN responses
https://www.isc.org/advisories/CVE-2010-0097
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
There was an error in the DNSSEC NSEC/NSEC3 validation code that could
cause bogus NXDOMAIN responses (that is, NXDOMAIN responses for records
proven by NSEC or NSEC3 to exist) to be cached as if they had validated
correctly

These issues only affect systems with DNSSEC validation enabled.
 2010-01-25 06:18:31 +00:00
dougb
1e9abbf9ca Update BIND to version 9.6.1rc1. This version has better performance and 
lots of new features compared to 9.4.x, including:

	Full NSEC3 support
	Automatic zone re-signing
	New update-policy methods tcp-self and 6to4-self
	DHCID support.
	More detailed statistics counters including those supported in BIND 8.
	Faster ACL processing.
	Efficient LRU cache-cleaning mechanism.
	NSID support.
 2009-05-31 05:42:58 +00:00
dougb
c673a416c3 Merge from vendor/bind9/dist as of the 9.4.3 import 2008-12-23 22:47:56 +00:00
peter
ba8f85b49c Flatten bind9 vendor work area 2008-07-12 05:00:28 +00:00
dougb
a71024a14b Vendor import of BIND 9.4.2 2007-12-02 19:10:41 +00:00
dougb
6df9693fc1 Vendor import of BIND 9.4.1 2007-06-02 23:21:47 +00:00
dougb
fb8cb3b3a3 Vendor import of BIND 9.3.4 2007-01-29 18:31:57 +00:00
dougb
f5d31f05bd Vendor import of BIND 9.3.3 2006-12-10 07:09:56 +00:00
dougb
13e6e55147 Vendor import of BIND 9.3.2 2005-12-29 04:22:58 +00:00
dougb
6c00746d36 Vendor import of BIND 9.3.1 2005-03-17 08:04:02 +00:00
trhodes
06246360f7 Vender import of BIND 9.3.0rc4. 2004-09-19 01:30:24 +00:00