ubuntu/+source/bind9:applied/ubuntu/impish-security

Last commit made on 2022-03-17
Get this branch:
git clone -b applied/ubuntu/impish-security https://git.launchpad.net/ubuntu/+source/bind9
Members of git-ubuntu import can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/impish-security
Repository:
lp:ubuntu/+source/bind9

Recent commits

3f5d4b7... by Marc Deslauriers

1:9.16.15-1ubuntu1.2 (patches applied)

Imported using git-ubuntu import.

f870c0d... by Marc Deslauriers

ensure correct ordering to prevent DoS

Gbp-Pq: CVE-2022-0396.patch.

993498b... by Marc Deslauriers

tighten rules for acceptance of records into the cache

Gbp-Pq: CVE-2021-25220.patch.

50d1b87... by Marc Deslauriers

fix resolver performance degradation via lame cache abuse

Gbp-Pq: CVE-2021-25219.patch.

8b354b7... by Marc Deslauriers

Check insecure responses returned with too many NSEC3 iterations

Gbp-Pq: 0013-Check-insecure-responses-returned-with-too-many-NSEC.patch.

5d55fbe... by Marc Deslauriers

Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure

Gbp-Pq: 0012-Mark-DNSSEC-responses-with-NSEC3-records-that-exceed.patch.

bf3c55a... by Marc Deslauriers

dnssec-policy: reduce NSEC3 iterations to 150

Gbp-Pq: 0011-dnssec-policy-reduce-NSEC3-iterations-to-150.patch.

0b81aee... by Marc Deslauriers

Check that excessive iterations in logged by named when

Gbp-Pq: 0010-Check-that-excessive-iterations-in-logged-by-named-w.patch.

1deda77... by Marc Deslauriers

Check NSEC3 iterations with dnssec-signzone

Gbp-Pq: 0009-Check-NSEC3-iterations-with-dnssec-signzone.patch.

e8b614e... by Marc Deslauriers

Check that named rejects excessive iterations via UPDATE

Gbp-Pq: 0008-Check-that-named-rejects-excessive-iterations-via-UP.patch.