[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
PR/46727 CVS commit: pkgsrc/net/nsd
The following reply was made to PR pkg/46727; it has been noted by GNATS.
From: "Thomas Klausner" <wiz%netbsd.org@localhost>
Subject: PR/46727 CVS commit: pkgsrc/net/nsd
Date: Fri, 20 Jul 2012 16:28:49 +0000
Module Name: pkgsrc
Committed By: wiz
Date: Fri Jul 20 16:28:49 UTC 2012
pkgsrc/net/nsd: Makefile distinfo
Update to 3.2.12, prompted by Lloyd Parkes in PR 46727.
Fix for VU#624931 CVE-2012-2978: NSD denial of service
vulnerability from non-standard DNS packet from any host on
Fallback to AXFR if IXFR is unknown at the primary. NSD considers
IXFR unknown at the primary if there is a negative response
for the IXFR RRtype. This does not override the value for
Allow for reading in new DNSKEY algorithm mnemonics (RFC5155,
RFC5702, RFC5933, and RFC6605 (ECDSA)).
Zone statistics, enable with --enable-zone-stats. This stores
the BIND8 stats per zone in a configurable statistics file.
This option does not scale and should therefore not be enabled
when serving many zones.
Support for TLSA RRtype (DANE).
Fix for qtype ANY for a wildcard domain in NSEC signed zone:
Don't add the wildcard domain NSEC into the answer section.
Instead, put the wildcard expanded NSEC into the answer section
and keep the wildcard domain NSEC in the authority section.
Fix for accept spinning reported by OpenBSD.
Fix restart failed due to bad ixfr packet because of zone
removed from nsd.conf.
Bugfix #453: typo in nsdc man page.
NSD uses the query name for dname compression again (Fix #235
had as side effect that this didn't happen anymore and is hereby
To generate a diff of this commit:
cvs rdiff -u -r1.55 -r1.56 pkgsrc/net/nsd/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/net/nsd/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Main Index |
Thread Index |