]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
regen v9_12_0_patch
authorTinderbox User <tbox@isc.org>
Thu, 4 Jan 2018 05:21:44 +0000 (05:21 +0000)
committerTinderbox User <tbox@isc.org>
Thu, 4 Jan 2018 05:21:44 +0000 (05:21 +0000)
67 files changed:
Kyuafile [new file with mode: 0644]
README
doc/arm/Bv9ARM.ch01.html
doc/arm/Bv9ARM.ch02.html
doc/arm/Bv9ARM.ch03.html
doc/arm/Bv9ARM.ch04.html
doc/arm/Bv9ARM.ch05.html
doc/arm/Bv9ARM.ch06.html
doc/arm/Bv9ARM.ch07.html
doc/arm/Bv9ARM.ch08.html
doc/arm/Bv9ARM.ch09.html
doc/arm/Bv9ARM.ch10.html
doc/arm/Bv9ARM.ch11.html
doc/arm/Bv9ARM.ch12.html
doc/arm/Bv9ARM.ch13.html
doc/arm/Bv9ARM.html
doc/arm/Bv9ARM.pdf
doc/arm/man.arpaname.html
doc/arm/man.ddns-confgen.html
doc/arm/man.delv.html
doc/arm/man.dig.html
doc/arm/man.dnssec-cds.html
doc/arm/man.dnssec-checkds.html
doc/arm/man.dnssec-coverage.html
doc/arm/man.dnssec-dsfromkey.html
doc/arm/man.dnssec-importkey.html
doc/arm/man.dnssec-keyfromlabel.html
doc/arm/man.dnssec-keygen.html
doc/arm/man.dnssec-keymgr.html
doc/arm/man.dnssec-revoke.html
doc/arm/man.dnssec-settime.html
doc/arm/man.dnssec-signzone.html
doc/arm/man.dnssec-verify.html
doc/arm/man.dnstap-read.html
doc/arm/man.genrandom.html
doc/arm/man.host.html
doc/arm/man.mdig.html
doc/arm/man.named-checkconf.html
doc/arm/man.named-checkzone.html
doc/arm/man.named-journalprint.html
doc/arm/man.named-nzd2nzf.html
doc/arm/man.named-rrchecker.html
doc/arm/man.named.conf.html
doc/arm/man.named.html
doc/arm/man.nsec3hash.html
doc/arm/man.nslookup.html
doc/arm/man.nsupdate.html
doc/arm/man.pkcs11-destroy.html
doc/arm/man.pkcs11-keygen.html
doc/arm/man.pkcs11-list.html
doc/arm/man.pkcs11-tokens.html
doc/arm/man.rndc-confgen.html
doc/arm/man.rndc.conf.html
doc/arm/man.rndc.html
doc/arm/notes.html
doc/arm/notes.pdf
lib/Kyuafile [new file with mode: 0644]
lib/dns/Kyuafile [new file with mode: 0644]
lib/dns/tests/Kyuafile [new file with mode: 0644]
lib/irs/Kyuafile [new file with mode: 0644]
lib/irs/tests/Kyuafile [new file with mode: 0644]
lib/isc/Kyuafile [new file with mode: 0644]
lib/isc/tests/Kyuafile [new file with mode: 0644]
lib/isccfg/Kyuafile [new file with mode: 0644]
lib/isccfg/tests/Kyuafile [new file with mode: 0644]
lib/ns/Kyuafile [new file with mode: 0644]
lib/ns/tests/Kyuafile [new file with mode: 0644]

diff --git a/Kyuafile b/Kyuafile
new file mode 100644 (file)
index 0000000..70b2cff
--- /dev/null
+++ b/Kyuafile
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('lib/Kyuafile')
diff --git a/README b/README
index 371a2fdf8af5dfa64a4349430800945b1239e82a..e49810c916ca9257cbdfee18c6c13a2b09a2e982 100644 (file)
--- a/README
+++ b/README
@@ -7,11 +7,12 @@ Contents
  3. Contributing to BIND
  4. BIND 9.12 features
  5. Building BIND
- 6. Compile-time options
- 7. Automated testing
- 8. Documentation
- 9. Change log
-10. Acknowledgments
+ 6. macOS
+ 7. Compile-time options
+ 8. Automated testing
+ 9. Documentation
+10. Change log
+11. Acknowledgments
 
 Introduction
 
@@ -165,6 +166,14 @@ BUILD_CPPFLAGS
 BUILD_LDFLAGS
 BUILD_LIBS
 
+macOS
+
+Building on macOS assumes that the "Command Tools for Xcode" is installed.
+This can be downloaded from https://developer.apple.com/download/more/ or
+if you have Xcode already installed you can run "xcode-select --install".
+This will add /usr/include to the system and install the compiler and
+other tools so that they can be easily found.
+
 Compile-time options
 
 To see a full list of configuration options, run configure --help.
index c9c4542769328ddbfdc279b10fe3b6cc1acbb002..b7408e5c9b55a5727e64a9b62dce4d16df70f0b1 100644 (file)
@@ -75,7 +75,7 @@
         <acronym class="acronym">BIND</acronym> version 9 software package for
         system administrators.
       </p>
-      <p>This version of the manual corresponds to BIND version 9.11.</p>
+      <p>This version of the manual corresponds to BIND version 9.12.</p>
     </div>
 
     <div class="section">
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index da9adf7bcdea8dcf3f0acb7970d9e84b62209178..10721b73f483110c246c0ac47a21c7a669bb11b1 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 5ba6dae2da754706d865849b8782785433ccaf41..592a1cf076d78ed409720b885c4bd135ab3dc04d 100644 (file)
@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index ab1fdb237bc9232579170450e2fd694dadedddb1..68046fb0e9bdca3cfec72a96d2ca1db8484ffd7a 100644 (file)
@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 3de2c6ab1f906afa606cef70097acbcfe9721d72..40bcbf74ab63dfd7590a91afc015447925f6871b 100644 (file)
@@ -81,6 +81,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 591f09fc5188e7f2a2eb674a5c52902b22fb4bda..9f18e4edd3f9db584f8fa740cd51063c4e0b246b 100644 (file)
@@ -14647,6 +14647,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index cf4ccec2ccd79a11bd12eaddab1d4996e435a778..5ba3a50a27a9c526fd9cf84bee7c3db85d0d3c47 100644 (file)
@@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index e0c4aa76d3f8378804fe5027c5f2a3a22d59ccde..ade131232e6762f166e448e3bd50b3f1b030725f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 3e0ed3915f945346a85712f7821500a0672d06fc..e61e04dd5348a2dedd714b3175f7dca41e4022e9 100644 (file)
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.12.0</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.12.0rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_removed">Removed Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#proto_changes">Protocol Changes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
@@ -52,7 +54,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.12.0</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.12.0rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -61,7 +63,9 @@
       BIND 9.12.0 is a new feature release of BIND.  This document
       summarizes new features and functional changes that have been
       introduced on this branch, as well as features that have been
-      deprecated or removed.
+      deprecated or removed.  With each development release leading
+      up to the final BIND 9.12.0 release, this document will be
+      updated with additional features added and bugs fixed.
     </p>
   </div>
 
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+       <p>
+         Addresses could be referenced after being freed during resolver
+         processing, causing an assertion failure. The chances of this
+         happening were remote, but the introduction of a delay in
+         resolution increased them. This bug is disclosed in
+         CVE-2017-3145. [RT #46839]
+       </p>
+      </li></ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_features"></a>New Features</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
 <li class="listitem">
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         Attempting to validate improperly unsigned CNAME responses
+         from secure zones could cause a validator loop. This caused
+         a delay in returning SERVFAIL and also increased the chances
+         of encountering the crash bug described in CVE-2017-3145.
+         [RT #46839]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Zones created with <span class="command"><strong>rndc addzone</strong></span> could
+         temporarily fail to inherit the <span class="command"><strong>allow-transfer</strong></span>
+         ACL set in the <span class="command"><strong>options</strong></span> section of
+         <code class="filename">named.conf</code>. [RT #46603]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         The introduction of <span class="command"><strong>libns</strong></span> caused a bug
+         in which TCP client objects were not recycled after use,
+         leading to unconstrained memory growth. [RT #46029]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Some header files included &lt;isc/util.h&gt; incorrectly as
+         it pollutes with namespace with non ISC_ macros and this should
+         only be done by explicitly including &lt;isc/util.h&gt;.  This
+         has been corrected.  Some code may depend on &lt;isc/util.h&gt;
+         being implicitly included via other header files.  Such
+         code should explicitly include &lt;isc/util.h&gt;.
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> failed to properly determine whether
+         there were active KSK and ZSK keys for an algorithm when
+         <span class="command"><strong>update-check-ksk</strong></span> was true (which is the
+         default setting). This could leave records unsigned
+         when rolling keys. [RT #46743] [RT #46754] [RT #46774]
+       </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_license"></a>License</h3></div></div></div>
     <p>
       BIND is open source software licenced under the terms of the Mozilla
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 237effa083063119aad982cd6102a0bff05d512b..9960a86ff32fc6f873d4f32bea3c36553d7b2034 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 9968887ddfda914cc67c12321fbb5429d6d1ab17..1fe0f9305eaaed9f84e8f16abd19db24d7520395 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 9fedfded48a167f020352a87bcdc77a38972d01b..0dcb620828debcd0515b457e27b20de0e74b7423 100644 (file)
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 5b82c66606333dbfc34682ce94387c208d302404..e2b74052e337e9a953687af514762d01168391ca 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 1233c8a8eb9149aaa605cce2397e878aecc9de46..9268a9a9990507fcfd2532c5f94c904773d45cef 100644 (file)
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.12.0</p></div>
+<div><p class="releaseinfo">BIND Version 9.12.0rc2</p></div>
 <div><p class="copyright">Copyright Â© 2000-2017 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.12.0</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.12.0rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_removed">Removed Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#proto_changes">Protocol Changes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index f5009b05792f64007f1e332ff620c40f86d52518..19ec1aedf61ac5ea99ff73184e8dc0df5d807235 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ
index 78f41c7b6f2158d7e6382420e960ad5b39d1ec1c..872fbf5f61bc17190b92167bfaa178cf22724746 100644 (file)
@@ -90,6 +90,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 809ad6d53a8042f09b6ff4a15b5d1dde78dd3cc6..096ee4897ac07e311980f1286e2ba644a4141bc5 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 99b20d6ceb72537026bd34434793b0fd8af40ccf..4fbbb49eddaa35e2dc0b8faf61e1a213ffa57c5b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index df4aa7311116796752849cea03d3ec026c5060b6..bdbc82322e7ebdb5866203a3529d3e1a1b51dfe5 100644 (file)
@@ -1101,6 +1101,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 2efea41cfb5712678a888e2afef8395800918d39..34ceb34440f1d76cd92833323945dd37faca019a 100644 (file)
@@ -365,6 +365,6 @@ nsupdate -l
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 5eb4f52cce76f348927bbff91032381860a39b52..13823db98d594661b845eec5cf69baefa5dba6fa 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index c0f85a1fdef54eb9261a29a3ce05c97e46352c13..191101b224f91a8beea372557bc42f9d1968ac2f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 09e0ee77bcdb96e1f51966d64f9fa447a1a7a829..7f986afc1b0978439a5e9c54cce413847435dac6 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index af0f6b09f0092ddf05fe7136863312f078798fb6..fd2ab6259c0f34718dd266350f2409e9cee739fc 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 6b51098e11334a6345a21b864805cf068896b2b4..9071f05577c66e14ab17124d28cb4a7b2b4f02de 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 072d3fba1cc328baf2b7be9fbde5a2c23fdc86b1..51ecebba8a48b1a51aa123a832c0e2fed8b4ae0f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index d93663ecf0622b1ab42d54cf37e832033a193eac..8a138f6e049bc7999260c6eebc19171d56e760b3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 1dd3d8ae66123dc41c4e623bcd9cee9f889cc78c..a938b1801d67f957581fbf6225a57d3c67ca39e9 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 99141dd108618f8102bfe311269d701d9e339028..9e523b936e58fbf333d829ff60841348afb7ef70 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 359916090fed8288c5a2f4e66d28bfb1b0bb4c11..194b6bbc0ba4cb1bea95715177005f4c25c797e6 100644 (file)
@@ -725,6 +725,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index f995bf2a39b59cc859e266e25be16a01ef3fda58..a649621390eb0480211e4b498102527f0ecc9b11 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 30a64e49ee08cd50219242c45a02e9337e25d554..4d25ebf4b48fff33538e88609173ace945b66b7a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 336fa92187d708002e1e9147c01d3d34f9e6739b..0d59f123f2c6c0a6d355aa286a76ff2fce683040 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 3c5c775805bc4b2af40f6d6bc064673694f4d9e3..626810a9820431df9e1731f4b33fde8d8746a794 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index b7067ccdb961fe9f5acf6e7aa6c7606c19b6dc3a..c9583c5261a4f90196fd7805aa6a6b0f7a7d6919 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 7d4e5bb429e784d6451865f0698c0fe14ed025a1..1688758c4c330d0b79878e888ab34dfcc4c25e56 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 2857d34f27c7d842287fb95fe3005d38c56e380a..6d414a0730c9712a4a0d207f67beb79dda9f7582 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 1bb8bb392aa70998e60c52951709787e004f4ea2..db83da51dcf623ce4180726dc7c0751b1d5f672e 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 541ac61d3deb6830a769d4f2e9ecca63b552e77f..e573a0fe9f31386b2872c8dd3c8cad6f075a061b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 0c6fe8efb2ac9cfe58c3f2cb0d1750634b087575..676010ba4ea8b03dfe31a6f84ea59b93415aef92 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index a44ee8977fd0970cbc754511b702e4e77e6508e1..f30108ab202c4b7e2fbf6034e1bb924c6325be39 100644 (file)
@@ -1039,6 +1039,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index a962abb87065793222017c919943c3c542baa142..2f98700c0f947ee5165ab5f8731a42f79750f725 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index ed94ce8bd79be09a79a422d1aabf5d8cb0598216..4ac5308584cd4aa6f4c370c42505eb40ac6445ac 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 973e5e9768e84e0db77c1b21059f08c699e97983..43dd2513865b3ef6ebd3d512308184d258e2a535 100644 (file)
@@ -420,6 +420,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 386d5baef97f632dc13164e51fc4799bba44e224..bac00ee7faeac91cdac8b1ec818449f24788e04a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index e1e2bffc5a12929e2eef0057bb36557ca137015c..ba7cf970538622c9d0ac16fe9ced987c371dd04f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index f5b34cf30ef176941c8881bb313dc110685011b4..3e128ffe2b7f16f2dd716bde344231222fb3926e 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 4e123fa3b22807bbd4582a666ac169b3518db12d..139028778d21a075ced9930b69933eb78afa7a2e 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 7bebf0860a88df864b3900581dfa859fb73ec23c..f988ffcc4c3a949fb22cd5a013bce406bcf533a1 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index f6d9c34c39823da8a3e33ca1200b96df31fdd20a..13778c0d9f3e4f21f1c36ba86db2256383caae4b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index b8b5d299c340fb7e4c94fdc04a15d2e3cea43edc..45a8bd8d830366187aa79a286dcd7157c3b28f02 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index d3b2354aa9bbeb7ef02ace3e35154a43e1ad767a..7c6872f8f13ec83db3d2861289753fba5913cbd3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.0rc2</p>
 </body>
 </html>
index 60c3c00a7325c2880fb2d278bdce0f1954cfdf1b..ed80e5c05153b4822d3528912af0ac13ca1ab820 100644 (file)
@@ -15,7 +15,7 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.12.0</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.12.0rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -24,7 +24,9 @@
       BIND 9.12.0 is a new feature release of BIND.  This document
       summarizes new features and functional changes that have been
       introduced on this branch, as well as features that have been
-      deprecated or removed.
+      deprecated or removed.  With each development release leading
+      up to the final BIND 9.12.0 release, this document will be
+      updated with additional features added and bugs fixed.
     </p>
   </div>
 
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+       <p>
+         Addresses could be referenced after being freed during resolver
+         processing, causing an assertion failure. The chances of this
+         happening were remote, but the introduction of a delay in
+         resolution increased them. This bug is disclosed in
+         CVE-2017-3145. [RT #46839]
+       </p>
+      </li></ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_features"></a>New Features</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
 <li class="listitem">
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+       <p>
+         Attempting to validate improperly unsigned CNAME responses
+         from secure zones could cause a validator loop. This caused
+         a delay in returning SERVFAIL and also increased the chances
+         of encountering the crash bug described in CVE-2017-3145.
+         [RT #46839]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Zones created with <span class="command"><strong>rndc addzone</strong></span> could
+         temporarily fail to inherit the <span class="command"><strong>allow-transfer</strong></span>
+         ACL set in the <span class="command"><strong>options</strong></span> section of
+         <code class="filename">named.conf</code>. [RT #46603]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         The introduction of <span class="command"><strong>libns</strong></span> caused a bug
+         in which TCP client objects were not recycled after use,
+         leading to unconstrained memory growth. [RT #46029]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Some header files included &lt;isc/util.h&gt; incorrectly as
+         it pollutes with namespace with non ISC_ macros and this should
+         only be done by explicitly including &lt;isc/util.h&gt;.  This
+         has been corrected.  Some code may depend on &lt;isc/util.h&gt;
+         being implicitly included via other header files.  Such
+         code should explicitly include &lt;isc/util.h&gt;.
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named</strong></span> failed to properly determine whether
+         there were active KSK and ZSK keys for an algorithm when
+         <span class="command"><strong>update-check-ksk</strong></span> was true (which is the
+         default setting). This could leave records unsigned
+         when rolling keys. [RT #46743] [RT #46754] [RT #46774]
+       </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_license"></a>License</h3></div></div></div>
     <p>
       BIND is open source software licenced under the terms of the Mozilla
index 9b41a98628564fa2c94c0d748d461b6dae6fae10..d40c8545749d442e10f23eb05aaef0fbb41ebad2 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ
diff --git a/lib/Kyuafile b/lib/Kyuafile
new file mode 100644 (file)
index 0000000..450d4d6
--- /dev/null
@@ -0,0 +1,8 @@
+syntax(2)
+test_suite('bind9')
+
+include('dns/Kyuafile')
+include('irs/Kyuafile')
+include('isc/Kyuafile')
+include('isccfg/Kyuafile')
+include('ns/Kyuafile')
diff --git a/lib/dns/Kyuafile b/lib/dns/Kyuafile
new file mode 100644 (file)
index 0000000..0739e3a
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('tests/Kyuafile')
diff --git a/lib/dns/tests/Kyuafile b/lib/dns/tests/Kyuafile
new file mode 100644 (file)
index 0000000..692acc0
--- /dev/null
@@ -0,0 +1,31 @@
+syntax(2)
+test_suite('bind9')
+
+atf_test_program{name='acl_test'}
+atf_test_program{name='db_test'}
+atf_test_program{name='dbdiff_test'}
+atf_test_program{name='dbiterator_test'}
+atf_test_program{name='dbversion_test'}
+atf_test_program{name='dh_test'}
+atf_test_program{name='dispatch_test'}
+atf_test_program{name='dnstap_test'}
+atf_test_program{name='dstrandom_test'}
+atf_test_program{name='geoip_test'}
+atf_test_program{name='gost_test'}
+atf_test_program{name='keytable_test'}
+atf_test_program{name='master_test'}
+atf_test_program{name='name_test'}
+atf_test_program{name='nsec3_test'}
+atf_test_program{name='peer_test'}
+atf_test_program{name='private_test'}
+atf_test_program{name='rbt_serialize_test'}
+atf_test_program{name='rbt_test'}
+atf_test_program{name='rdata_test'}
+atf_test_program{name='rdataset_test'}
+atf_test_program{name='rdatasetstats_test'}
+atf_test_program{name='rsa_test'}
+atf_test_program{name='time_test'}
+atf_test_program{name='tsig_test'}
+atf_test_program{name='update_test'}
+atf_test_program{name='zonemgr_test'}
+atf_test_program{name='zt_test'}
diff --git a/lib/irs/Kyuafile b/lib/irs/Kyuafile
new file mode 100644 (file)
index 0000000..0739e3a
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('tests/Kyuafile')
diff --git a/lib/irs/tests/Kyuafile b/lib/irs/tests/Kyuafile
new file mode 100644 (file)
index 0000000..4ef7136
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+atf_test_program{name='resconf_test'}
diff --git a/lib/isc/Kyuafile b/lib/isc/Kyuafile
new file mode 100644 (file)
index 0000000..0739e3a
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('tests/Kyuafile')
diff --git a/lib/isc/tests/Kyuafile b/lib/isc/tests/Kyuafile
new file mode 100644 (file)
index 0000000..fce8cfb
--- /dev/null
@@ -0,0 +1,30 @@
+syntax(2)
+test_suite('bind9')
+
+atf_test_program{name='aes_test'}
+atf_test_program{name='buffer_test'}
+atf_test_program{name='counter_test'}
+atf_test_program{name='errno_test'}
+atf_test_program{name='file_test'}
+atf_test_program{name='hash_test'}
+atf_test_program{name='heap_test'}
+atf_test_program{name='ht_test'}
+atf_test_program{name='inet_ntop_test'}
+atf_test_program{name='lex_test'}
+atf_test_program{name='mem_test'}
+atf_test_program{name='netaddr_test'}
+atf_test_program{name='parse_test'}
+atf_test_program{name='pool_test'}
+atf_test_program{name='print_test'}
+atf_test_program{name='queue_test'}
+atf_test_program{name='radix_test'}
+atf_test_program{name='random_test'}
+atf_test_program{name='regex_test'}
+atf_test_program{name='result_test'}
+atf_test_program{name='safe_test'}
+atf_test_program{name='sockaddr_test'}
+atf_test_program{name='socket_test'}
+atf_test_program{name='symtab_test'}
+atf_test_program{name='task_test'}
+atf_test_program{name='taskpool_test'}
+atf_test_program{name='time_test'}
diff --git a/lib/isccfg/Kyuafile b/lib/isccfg/Kyuafile
new file mode 100644 (file)
index 0000000..0739e3a
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('tests/Kyuafile')
diff --git a/lib/isccfg/tests/Kyuafile b/lib/isccfg/tests/Kyuafile
new file mode 100644 (file)
index 0000000..342d25f
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+atf_test_program{name='parser_test'}
diff --git a/lib/ns/Kyuafile b/lib/ns/Kyuafile
new file mode 100644 (file)
index 0000000..0739e3a
--- /dev/null
@@ -0,0 +1,4 @@
+syntax(2)
+test_suite('bind9')
+
+include('tests/Kyuafile')
diff --git a/lib/ns/tests/Kyuafile b/lib/ns/tests/Kyuafile
new file mode 100644 (file)
index 0000000..5e1fd4b
--- /dev/null
@@ -0,0 +1,6 @@
+syntax(2)
+test_suite('bind9')
+
+atf_test_program{name='listenlist_test'}
+atf_test_program{name='notify_test'}
+atf_test_program{name='query_test'}