Date: Tue, 09 Aug 2016 13:08:14 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 211693] MAINTAINER] dns/nsd: Update to 4.1.11 Message-ID: <bug-211693-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211693 Bug ID: 211693 Summary: MAINTAINER] dns/nsd: Update to 4.1.11 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: jaap@NLnetLabs.nl Attachment #173452 maintainer-approval+ Flags: Created attachment 173452 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D173452&action= =3Dedit Patch to upgrade Release Announcement This release contains a patch for the unlimited AXFR vulnerability; with a config option to limit AXFR sizes. Bug fixes when without IPv6 and for serving DS records with no NS record in parent-child co-hosted setups. 4.1.11 Details: FEATURES: - When tcp is more than half full, use short timeout for tcp session. - Patch for {max,min}-{refresh,retry}-time from YAMAGUCHI Takanori. - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone transfer data size, from Toshifumi Sakaguchi. Fixes CVE-2016-6173 JVN#63359718 JPCERT#91251865. BUG FIXES: - Fix build without IPv6, patch from Zdenek Kaspar. - Fix #783: Trying to run a root server without having configured it silently gives wrong answers. - Fix #782: Serve DS record but parent zone has no NS record. - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-211693-13>