[MaraDNS] MaraDNS security update

Sam Trenholme <[email protected]> Sun, 25 Jan 2015 10:31:14 -0800
Newsgroups gmane.network.dns.maradns.general
Message-ID <CAJxgfkTLT6jG3R=gx0ck+kviOBSDpxgFSHvHnVT2UGbm5AtKGA@mail.gmail.com>
I have made three MaraDNS and Deadwood releases with an important security
update.

The issue is CERT VU#264212.  I have also incorporated other bug fixes.

==Deadwood 3.2.06 released==

* Security update: Better protection against malicious NS tarpits
* Removed two warnings generated by GCC 4.8.2
* Return the correct ID in SERVER FAIL errors
* Log a message when a RFC1918 IP is blocked from resolving
* Deadwood now ignores the CD and AD bits as defined in RFC2535 section 6.1
* SERVER FAILs no longer incorrectly sent when Deadwood gets a
  glueless NS referral
* The MacOS and Linux Makefiles now should make version.h correctly

==MaraDNS 2.0.10 released==

* Deadwood updated to 3.2.06 (security fix)
* Zoneserver now compiles and runs in Cygwin

==MaraDNS 1.4.15 released==

This is the legacy branch of MaraDNS. Please upgrade to MaraDNS 2.
This will probably be the final MaraDNS 1 release; all MaraDNS
1 support ends on June 21, 2015.

* Deadwood updated to 3.2.06
* Security update: max_glueless_level now defaults to 4 instead of 10

==Where to download==

http://maradns.samiam.org/download.html

https://github.com/samboy/MaraDNS

https://sourceforge.net/projects/maradns/