diff options
| author | dougb <dougb@FreeBSD.org> | 2010-05-20 08:15:06 +0000 |
|---|---|---|
| committer | dougb <dougb@FreeBSD.org> | 2010-05-20 08:15:06 +0000 |
| commit | 8acfbaefd7580ec675a702acfdf1f8f7edd6fd57 (patch) | |
| tree | 263b8389e0210382fd3182ab912832453ea60637 /contrib/bind9 | |
| parent | 697a885212a5974b0ea1d5dc35818996e4f55c60 (diff) | |
| download | FreeBSD-src-8acfbaefd7580ec675a702acfdf1f8f7edd6fd57.zip FreeBSD-src-8acfbaefd7580ec675a702acfdf1f8f7edd6fd57.tar.gz | |
Upgrade to 9.6.2-P2, which addresses the following;
Named could return SERVFAIL for negative responses
from unsigned zones.
Diffstat (limited to 'contrib/bind9')
| -rw-r--r-- | contrib/bind9/CHANGES | 5 | ||||
| -rw-r--r-- | contrib/bind9/lib/dns/api | 2 | ||||
| -rw-r--r-- | contrib/bind9/lib/dns/validator.c | 4 | ||||
| -rw-r--r-- | contrib/bind9/version | 4 |
4 files changed, 10 insertions, 5 deletions
diff --git a/contrib/bind9/CHANGES b/contrib/bind9/CHANGES index d14fdd6..3f2df79 100644 --- a/contrib/bind9/CHANGES +++ b/contrib/bind9/CHANGES @@ -1,3 +1,8 @@ + --- 9.6.2-P2 released --- + +2876. [bug] Named could return SERVFAIL for negative responses + from unsigned zones. [RT #21131] + --- 9.6.2-P1 released --- 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] diff --git a/contrib/bind9/lib/dns/api b/contrib/bind9/lib/dns/api index 4fc7eca..e9df7db 100644 --- a/contrib/bind9/lib/dns/api +++ b/contrib/bind9/lib/dns/api @@ -1,3 +1,3 @@ LIBINTERFACE = 56 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 1 diff --git a/contrib/bind9/lib/dns/validator.c b/contrib/bind9/lib/dns/validator.c index 0ccdc41..7144ae2 100644 --- a/contrib/bind9/lib/dns/validator.c +++ b/contrib/bind9/lib/dns/validator.c @@ -15,7 +15,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: validator.c,v 1.164.12.11.8.2 2010/02/25 10:57:12 tbox Exp $ */ +/* $Id: validator.c,v 1.164.12.11.8.3 2010/04/21 04:29:01 marka Exp $ */ #include <config.h> @@ -2961,7 +2961,7 @@ nsecvalidate(dns_validator_t *val, isc_boolean_t resume) { } findnsec3proofs(val); - if (val->authcount == val->authfail) + if (val->authfail != 0 && val->authcount == val->authfail) return (DNS_R_BROKENCHAIN); validator_log(val, ISC_LOG_DEBUG(3), "nonexistence proof(s) not found"); diff --git a/contrib/bind9/version b/contrib/bind9/version index 79bbd49..d9367f8 100644 --- a/contrib/bind9/version +++ b/contrib/bind9/version @@ -1,4 +1,4 @@ -# $Id: version,v 1.43.12.8.2.3 2010/03/04 00:08:28 marka Exp $ +# $Id: version,v 1.43.12.8.2.4 2010/05/10 02:07:03 marka Exp $ # # This file must follow /bin/sh rules. It is imported directly via # configure. @@ -7,4 +7,4 @@ MAJORVER=9 MINORVER=6 PATCHVER=2 RELEASETYPE=-P -RELEASEVER=1 +RELEASEVER=2 |
