6 Commits

Author	SHA1	Message	Date
Doug Barton	141cfa5029	Vendor import of BIND 9.4.1	2007-06-02 23:21:47 +00:00
Doug Barton	e99fbbb680	Vendor import of BIND 9.3.3	2006-12-10 07:09:56 +00:00
Doug Barton	a02f92e875	Update to version 9.3.2-P2, which addresses the vulnerability ... announced by ISC dated 31 October (delivered via e-mail to the bind-announce@isc.org list on 2 November): Description: Because of OpenSSL's recently announced vulnerabilities (CAN-2006-4339, CVE-2006-2937 and CVE-2006-2940) which affect named, we are announcing this workaround and releasing patches. A proof of concept attack on OpenSSL has been demonstrated for CAN-2006-4339. OpenSSL is required to use DNSSEC with BIND. Fix for version 9.3.2-P1 and lower: Upgrade to BIND 9.3.2-P2, then generate new RSASHA1 and RSAMD5 keys for all old keys using the old default exponent and perform a key rollover to these new keys. These versions also change the default RSA exponent to be 65537 which is not vulnerable to the attacks described in CAN-2006-4339.	2006-11-04 07:53:25 +00:00
Doug Barton	a00aca3467	Vendor import of BIND 9.3.2	2005-12-29 04:22:58 +00:00
Doug Barton	6bc6438a36	Vendor import of BIND 9.3.1	2005-03-17 08:04:02 +00:00
Tom Rhodes	b1e4bd53e0	Vender import of BIND 9.3.0rc4.	2004-09-19 01:30:24 +00:00