Go to file
Lars Vogdt 8651331685 Accepting request 80897 from network
* fixed SSL in chroot environment (bnc#715881)

* Added a new include file with function typedefs for the DLZ
  "dlopen" driver. [RT #23629]
* Added a tool able to generate malformed packets to allow testing of
  how named handles them. [RT #24096]
* The root key is now provided in the file bind.keys allowing DNSSEC
  validation to be switched on at start up by adding
  "dnssec-validation auto;" to named.conf. If the root key provided
  has expired, named will log the expiration and validation will not
  work. More information and the most current copy of bind.keys can
  be found at http://www.isc.org/bind-keys. *Please note this feature
  was actually added in 9.8.0 but was not included in the 9.8.0
  release notes. [RT #21727]
* If named is configured with a response policy zone (RPZ) and a
  query of type RRSIG is received for a name configured for RRset
  replacement in that RPZ, it will trigger an INSIST and crash the
  server. RRSIG. [RT #24280]
* named, set up to be a caching resolver, is vulnerable to a user
  querying a domain with very large resource record sets (RRSets)
  when trying to negatively cache the response. Due to an off-by-one
  error, caching the response could cause named to crash. [RT #24650]
  [CVE-2011-1910]
* Using Response Policy Zone (RPZ) to query a wildcard CNAME label
  with QUERY type SIG/RRSIG, it can cause named to crash. Fix is
  query type independant. [RT #24715]
* Using Response Policy Zone (RPZ) with DNAME records and querying
  the subdomain of that label can cause named to crash. Now logs that
  DNAME is not supported. [RT #24766]
* Change #2912 populated the message section in replies to UPDATE

OBS-URL: https://build.opensuse.org/request/show/80897
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=70
2011-09-05 14:20:29 +00:00
.gitattributes OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=1 2006-12-18 23:15:14 +00:00
.gitignore OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=1 2006-12-18 23:15:14 +00:00
baselibs.conf Updating link to change in openSUSE:Factory/bind revision 41.0 2010-01-07 11:54:38 +00:00
bind-9.8.1.tar.gz 9.8.1 2011-09-05 08:24:07 +00:00
bind.changes SSL in chroot fixed 2011-09-05 09:42:44 +00:00
bind.spec 9.8.1 2011-09-05 08:24:07 +00:00
configure.in.diff OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=32 2009-06-19 21:37:16 +00:00
configure.in.diff2 fixed SLE10 build 2011-06-10 14:09:53 +00:00
dlz_compile.diff 9.8.1 2011-09-05 08:24:07 +00:00
dlz-schema.txt Updating link to change in openSUSE:Factory/bind revision 45.0 2010-04-13 19:20:44 +00:00
dnszone-schema.txt OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=1 2006-12-18 23:15:14 +00:00
ldapdump-allow-uri.diff Accepting request 80345 from home:rhafer:branches:network 2011-09-01 09:58:02 +00:00
Makefile.in.diff OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=28 2009-02-06 19:40:10 +00:00
named-bootconf.diff OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=3 2007-01-19 14:23:41 +00:00
named-direct-proc-mount.diff Accepting request 55394 from home:mvyskocil:branches:network 2010-12-09 15:33:29 +00:00
named.root OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=14 2008-02-28 00:49:17 +00:00
perl-path.diff fixed security issue (bnc#674431) 2011-02-24 10:17:20 +00:00
pid-path.diff OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/bind?expand=0&rev=28 2009-02-06 19:40:10 +00:00
pie_compile.diff Updating link to change in openSUSE:Factory/bind revision 43.0 2010-02-18 12:47:25 +00:00
tmpfs.patch Updating link to change in openSUSE:Factory/bind revision 46.0 2010-05-03 19:15:33 +00:00
vendor-files.tar.bz2 SSL in chroot fixed 2011-09-05 09:42:44 +00:00