5be7c4bace
This fixes vulnid:1747 (denial-of-service vulnerability).
18-Jan-2006 Don Moore <bboy@bboy.net> [1.1.0]
- Implemented RFC 2136 (DNS UPDATE). See the manual for usage instructions.
- Fixed minor bug in admin.php where if db_get_settings() failed, it might
display an error message without consistent formatting.
- Added two additional fields to the --verbose query log. The opcode of the
query (QUERY or UPDATE), and a quoted field containing a description of the
UPDATE performed, if the opcode was UPDATE.
- Updated contrib/stats.php to handle new log fields.
- Fixed bug in --dump-config -- if present, fields without default values
("no-listen", "soa-where", "rr-where", and "recursive") were not being
dumped.
- Made --dump-config dump ALL possible configuration options, even if no value
was originally specified. As such, MyDNS will no longer warn the user when
a config option doesn't have a value. It will be silently ignored.
- Including <inttypes.h> after a suggestion by Christian Tschenett, to help
things out on 64-bit platforms like OSX. If this creates problems on your
platform, please let me know.
- Modified admin.php to allow a backslash in the 'mbox' field, immediately
preceding a dot. This is used in DNS to indicate the presence of a dot in
the username part of the administrator's email address. There was an
additional bug report from Andreas Grip that MyDNS was replying with the
slashes doubled up in this case, but it appears to be a problem with the
"dig" program, not MyDNS.
- Fixed bug with "rr-where" clause -- conf.c was using "soa-where" instead.
David Darville first reported this bug. Michael Gile submitted it two
minutes later, with a patch.
- Added "create_domain.pl" to the contrib/ directory. Thanks to Gerard de
Brieder for this script. See contrib/README for more information.
- Fixed bug in src/lib/rr.c (mydns_rr_load) that caused a segfault if origin
was NULL (it was designed to allow NULL, but this version is the first to
ever call it in that way).
- Added support for NAPTR (RFC 2915) records. Users with existing MyDNS
databases will need to alter their tables to allow "NAPTR" in the "type"
column if they want to use NAPTR.
- Renamed library functions mydns_parse_rr() and mydns_parse_soa() to
mydns_rr_parse() and mydns_soa_parse(), for consistency.
- Library functions mydns_rr_dup() and mydns_soa_dup() now fail (terminating
the program) if out of memory.
- Moved routines that parse data for individual RR types (RP, SRV, and NAPTR)
into individual functions from mydns_rr_parse for clarity.
- Fixed bug where AXFR might transmit incorrect information if a FQDN is used
in the 'name' field.
- Fixed AXFR bug with ALIAS enabled. Thanks to Sven Wegener for the patch.
- Created file "README.mysql" to address various problems common while
compiling with MySQL support.
- Fixed "use of cast expressions as lvalues is deprecated" warning (caused
compilation abort with --enable-debug).
- Added hostname to beginning of SIGUSR1 status output.
- Renamed "update" column in the soa table to "update_acl"; how could I be so
stupid as to name a column "update"?!
- Fixed a critical denial-of-service vulnerability.
6 lines
299 B
Text
6 lines
299 B
Text
$NetBSD: distinfo,v 1.2 2006/01/24 10:42:10 ghen Exp $
|
|
|
|
SHA1 (mydns-1.1.0.tar.bz2) = 71979409bf46e38b443ee940a6ecb0e42464bc0b
|
|
RMD160 (mydns-1.1.0.tar.bz2) = ffd7c5d42d5e004e06562d4fb497cc515f31fed9
|
|
Size (mydns-1.1.0.tar.bz2) = 573261 bytes
|
|
SHA1 (patch-aa) = 76fc8010ef86169460735ec7012a7885b8d76924
|