GitLab

Reject incorrect RSA key lengths during key generation and and sign/verify context creation (#45043)

4594.	[func]		"dnstap-read -x" prints a hex dump of the wire
			format of each logged DNS message. [RT #44816]

4593.	[doc]		Update README using markdown, remove outdated FAQ
			file in favor of the knowledge base.

4952.	[bug]		A race condition on shutdown could trigger an
			assertion failure in dispatch.c. [RT #43822]

4591.	[port]		Addressed some python 3 compatibility issues.
			Thanks to Ville Skytta. [RT #44955] [RT #44956]

                        properly detected. [RT #44871]

4589.	[cleanup]	"configure -q" is now silent. [RT #44829]

4588.	[bug]		nsupdate could send queries for TKEY to the wrong
			server when using GSSAPI. Thanks to Tomas Hozza.
			[RT #39893]

                        DNAMEs correctly. [RT #44877]

                        [RT #44687]

                        reported when they exceeded 4G.  [RT #44750]

4593.	[func]		"host -A" returns most records for a name but
			omits RRSIG, NSEC and NSEC3. (Thanks to Tony Finch.)
			[RT #43032]

                        (CVE-2017-3138) [RT #44924]

                        calls named uses for seccomp. [RT #44883]

                        referral below the current domain. [RT #44850]

4579.	[func]		Logging channels and dnstap output files can now
			be configured with a "suffix" option, set to
			either "increment" or "timestamp", indicating
			whether to use incrementing numbers or timestamps
			as the file suffix when rolling over a log file.
			[RT #42838]

4578.	[security]	Some chaining (CNAME or DNAME) responses to upstream
			queries could trigger assertion failures.
			(CVE-2017-3137) [RT #44734]

4577.  [func]          Make qtype of resolver fuzzing packet configurable via command line. [RT #43540]

4576.   [func]          The RPZ implementation has been substantially refactored for improved performance and reliability. [RT #43449]

                        assertion failure. (CVE-2017-3136) [RT #44653]

                        [RT #44683]

4573. [func] Query logic has been substantially refactored (e.g. query_find function has been split into smaller functions) for improved readability, maintainability

4572.	[func]		The "dnstap-output" option can now take "size" and
			"versions" parameters to indicate the maximum size
			a dnstap log file can grow before rolling to a new
			file, and how many old files to retain. [RT #44502]

4570.	[cleanup]	named did not correctly fall back to the built-in
			initializing keys if the bind.keys file was present
			but empty. [RT #44531]

4569.	[func]		Store both local and remote addresses in dnstap
			logging, and modify dnstap-read output format to
			print them. [RT #43595]

4568.	[contrib]	Added a --with-bind option to the dnsperf configure
			script to specify BIND prefix path.

                        chroot so that shared libraries get loaded. [RT #44537]