git.ipfire.org Git - thirdparty/bind9.git/shortlog

]> git.ipfire.org Git - thirdparty/bind9.git/shortlog

projects / thirdparty / bind9.git / shortlog

2026-07-10	Nicki Křížek	Fix the dnssec_py test marks	commit \| commitdiff \| tree \| snapshot
2026-07-10	Aydın Mercan	[CVE-2026-13321] sec: usr: Fix DNSSEC validation bypass...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Evan Hunt	dns_rdataset_addnoqname() could find unsigned NSEC...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Evan Hunt	[CVE-2026-10723] sec: usr: Correct verification of...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Aydın Mercan	change dns_nsec_requiredtypespresent to dns_nsec_is_legal	commit \| commitdiff \| tree \| snapshot
2026-07-10	Evan Hunt	Move the dnssec_findnoqname_mismatch test into dnssec_py	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	fix: dev: Avoid needless queries when the DNSSEC valid...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Matthijs Mekking	Update reproducer #5874	commit \| commitdiff \| tree \| snapshot
2026-07-10	Aydın Mercan	Reject out-of-zone NSEC next owner names	commit \| commitdiff \| tree \| snapshot
2026-07-10	Matthijs Mekking	Update reproducer #5985	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	sec: usr: Reclaim memory promptly when DNSSEC validatio...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	Make the per-fetch validation quota terminal in sub...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Alessio Podda	Reproducer for #5874 NSEC3 impersonation	commit \| commitdiff \| tree \| snapshot
2026-07-10	Aydın Mercan	Add system test for out-of-zone nsec dnssec bypass	commit \| commitdiff \| tree \| snapshot
2026-07-10	Alessio Podda	Reproducer for #5985 addnoqname mismatch	commit \| commitdiff \| tree \| snapshot
2026-07-10	Colin Vidal	chg: dev: Follow-up of disambiguate `query_cname()...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	Cancel the offloaded verification job when canceling...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Evan Hunt	Check NSEC3 signer matches the owning zone	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	fix: nil: Add missing dumpnode call in dnssec-signzone	commit \| commitdiff \| tree \| snapshot
2026-07-10	Colin Vidal	Convert some chain shell-based system tests in python	commit \| commitdiff \| tree \| snapshot
2026-07-10	Colin Vidal	chg: dev: Disambiguate `query_cname()` and `query_dname...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Test dnssec-signzone -D and out-of-zone records	commit \| commitdiff \| tree \| snapshot
2026-07-10	Colin Vidal	Follow-up of disambiguate `query_cname()` and `query_dn...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	[CVE-2026-11605] sec: usr: Prevent excessive validation...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Colin Vidal	Disambiguate `query_cname()` and `query_dname()` usage	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Add missing dumpnode call in dnssec-signzone	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	[CVE-2026-11721] sec: usr: Invalid signed wildcard...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	Cover excessive NSEC3 proofs	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	[CVE-2026-10822] sec: usr: Malformed DNSKEY records...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Nicki Křížek	Add dnssec_py/tests_rrsig_labels_signer: reject Labels...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Ondřej Surý	Limit DNSSEC denial proof validation per fetch	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	[CVE-2026-11331] sec: usr: Fix handling of rpz CNAME...	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	POC for PRIVATEDNS DNSKEY overrun not being detected	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Test RRSIG record parsing	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Properly handle rpz name to long wildcard expansion	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Test dst_algorithm_fromdata	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Invalid signed wildcard records were being accepted	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Check rpz name too long wildcard CNAME expansion handling	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Check that a short PRIVATEDNS record is rejected	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Don't sign out of zone records in dnssec-signzone	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Fix TTL extraction from A/AAAA record	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Make it clearer that decompression is not allowed here	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Fix dns_name_fromwire to honour the active region	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Fix dst_algorithm_fromdata to set the active range	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Fix the yaml query zone name code in dnstap-read	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Fix EDNS Report Channel checking code	commit \| commitdiff \| tree \| snapshot
2026-07-10	Mark Andrews	Check that dns_name_fromwire honours the active region	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	fix: dev: Print the full OID in PRIVATEOID key comments	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	Print the full OID in PRIVATEOID key comments	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	fix: dev: Fix a crash when resolving names below a...	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	Reference-count the DNAME zonecut headers	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	chg: dev: Support larger DNSSEC keys and signatures 6198-isc_buffer_reserve-wraps-near-uint_max	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	Remove the fixed DST_KEY_MAXSIZE limit from key parsing...	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	Size RRSIG rdata buffers by the maximum rdata length	commit \| commitdiff \| tree \| snapshot
2026-07-09	Ondřej Surý	Size DNSKEY rdata buffers by the maximum rdata length	commit \| commitdiff \| tree \| snapshot
2026-07-08	Matthijs Mekking	fix: usr: Don't synthesize negative responses with...	commit \| commitdiff \| tree \| snapshot
2026-07-08	Ondřej Surý	Cover exact-name NODATA synthesis from a pending NSEC	commit \| commitdiff \| tree \| snapshot
2026-07-08	Evan Hunt	Merge NSEC synthesis tests	commit \| commitdiff \| tree \| snapshot
2026-07-08	Alessio Podda	Reproducer for #5887 out of zone NSEC-next syntheisis	commit \| commitdiff \| tree \| snapshot
2026-07-08	Alessio Podda	Reproducer for #5872 cache pending synthesis	commit \| commitdiff \| tree \| snapshot
2026-07-08	Alessio Podda	Reproducer for #5977 cache poison NSEC piggyback	commit \| commitdiff \| tree \| snapshot
2026-07-08	Evan Hunt	Don't synthesize negative responses with pending NSEC	commit \| commitdiff \| tree \| snapshot
2026-07-08	Colin Vidal	fix: dev: Detect UTF-16 surrogates in `isc_utf8_valid()`	commit \| commitdiff \| tree \| snapshot
2026-07-08	Colin Vidal	Add UTF-8 unit test	commit \| commitdiff \| tree \| snapshot
2026-07-08	Colin Vidal	Detect UTF-16 surrogates in `isc_utf8_valid()`	commit \| commitdiff \| tree \| snapshot
2026-07-08	Colin Vidal	fix: dev: Remove ACL detach deadcode from dyndb	commit \| commitdiff \| tree \| snapshot
2026-07-08	Colin Vidal	Remove ACL detach deadcode from dyndb	commit \| commitdiff \| tree \| snapshot
2026-07-07	Ondřej Surý	chg: dev: Mark the related slabheader as visited on...	commit \| commitdiff \| tree \| snapshot
2026-07-07	Ondřej Surý	Mark the related slabheader as visited on cache hit	commit \| commitdiff \| tree \| snapshot
2026-07-07	Arаm Sаrgsyаn	fix: dev: Include the IPv6 address's brackets in the...	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Include the brackets when parsing a URI with a IPv6...	commit \| commitdiff \| tree \| snapshot
2026-07-07	Arаm Sаrgsyаn	fix: dev: Improve the input validation of the isc_url_p...	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Limit allowed URL/URI size to 8192 bytes in the parser	commit \| commitdiff \| tree \| snapshot
2026-07-07	Ondřej Surý	Add IPv6 and authority cases to the isc_url_t unit...	commit \| commitdiff \| tree \| snapshot
2026-07-07	Ondřej Surý	Extend the isc_url_t unit test with RFC 3986 cases	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Add a unit test for isc_url_t	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Add a maximum length for isc_url_parse() input buffer	commit \| commitdiff \| tree \| snapshot
2026-07-07	Arаm Sаrgsyаn	fix: dev: Fix PROXYv2 header size truncation bug	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Add new proxyheader unit tests	commit \| commitdiff \| tree \| snapshot
2026-07-07	Aram Sargsyan	Fix PROXYv2 header size truncation bug	commit \| commitdiff \| tree \| snapshot
2026-07-07	Matthijs Mekking	new: test: Test multi-master dnssec-policy setup	commit \| commitdiff \| tree \| snapshot
2026-07-07	Matthijs Mekking	Test multi-master dnssec-policy setup	commit \| commitdiff \| tree \| snapshot
2026-07-03	Evan Hunt	fix: usr: Unvalidated opt-out NSEC3 could be accepted... alessio/split-query-delegation-baseline	commit \| commitdiff \| tree \| snapshot
2026-07-03	Evan Hunt	Merge "nsec3_wrong_zone" into "dnssec_nsec3"	commit \| commitdiff \| tree \| snapshot
2026-07-03	Alessio Podda	Reproducer for #5970 acceptance of unvalidated NSEC3	commit \| commitdiff \| tree \| snapshot
2026-07-03	Evan Hunt	Unvalidated opt-out NSEC3 could be accepted in insecuri...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Ondřej Surý	fix: usr: Fix DNSSEC validation failures for names...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Ondřej Surý	Add a system test resolving through a signed apex DNAME	commit \| commitdiff \| tree \| snapshot
2026-07-02	Ondřej Surý	Restrict the alias-chain deadlock check to chaining...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	fix: test: Support serving signed child zone from its...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Support serving signed child zone from its parent's...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Michał Kępień	chg: test: Update AsyncDnsServer-related test cookbook...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Michał Kępień	Move ans.py-related information to README.md	commit \| commitdiff \| tree \| snapshot
2026-07-02	Michał Kępień	Update AsyncDnsServer-related test cookbook parts	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	chg: test: Unify system test key and algorithm handling	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Move algorithm definitions into a top-level isctest...	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Add private_key support to all ZoneKey implementations	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Replace get_dnsalg() with kasp.Key.algorithm	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Add NSEC3RSASHA1 to list of algorithms	commit \| commitdiff \| tree \| snapshot
2026-07-02	Nicki Křížek	Move dnskey method from kasp.Key to zone.FileZoneKey	commit \| commitdiff \| tree \| snapshot
next

Mirror of https://gitlab.isc.org/isc-projects/bind9.git

RSS Atom