]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
prep 9.11.10
authorTinderbox User <tbox@isc.org>
Tue, 13 Aug 2019 09:22:34 +0000 (09:22 +0000)
committerTinderbox User <tbox@isc.org>
Tue, 13 Aug 2019 09:34:56 +0000 (09:34 +0000)
60 files changed:
CHANGES
bin/named/named.conf.docbook
doc/arm/Bv9ARM.ch01.html
doc/arm/Bv9ARM.ch02.html
doc/arm/Bv9ARM.ch03.html
doc/arm/Bv9ARM.ch04.html
doc/arm/Bv9ARM.ch05.html
doc/arm/Bv9ARM.ch06.html
doc/arm/Bv9ARM.ch07.html
doc/arm/Bv9ARM.ch08.html
doc/arm/Bv9ARM.ch09.html
doc/arm/Bv9ARM.ch10.html
doc/arm/Bv9ARM.ch11.html
doc/arm/Bv9ARM.ch12.html
doc/arm/Bv9ARM.ch13.html
doc/arm/man.arpaname.html
doc/arm/man.ddns-confgen.html
doc/arm/man.delv.html
doc/arm/man.dig.html
doc/arm/man.dnssec-checkds.html
doc/arm/man.dnssec-coverage.html
doc/arm/man.dnssec-dsfromkey.html
doc/arm/man.dnssec-importkey.html
doc/arm/man.dnssec-keyfromlabel.html
doc/arm/man.dnssec-keygen.html
doc/arm/man.dnssec-keymgr.html
doc/arm/man.dnssec-revoke.html
doc/arm/man.dnssec-settime.html
doc/arm/man.dnssec-signzone.html
doc/arm/man.dnssec-verify.html
doc/arm/man.dnstap-read.html
doc/arm/man.genrandom.html
doc/arm/man.host.html
doc/arm/man.isc-hmac-fixup.html
doc/arm/man.lwresd.html
doc/arm/man.mdig.html
doc/arm/man.named-checkconf.html
doc/arm/man.named-checkzone.html
doc/arm/man.named-journalprint.html
doc/arm/man.named-nzd2nzf.html
doc/arm/man.named-rrchecker.html
doc/arm/man.named.conf.html
doc/arm/man.named.html
doc/arm/man.nsec3hash.html
doc/arm/man.nslookup.html
doc/arm/man.nsupdate.html
doc/arm/man.pkcs11-destroy.html
doc/arm/man.pkcs11-keygen.html
doc/arm/man.pkcs11-list.html
doc/arm/man.pkcs11-tokens.html
doc/arm/man.rndc-confgen.html
doc/arm/man.rndc.conf.html
doc/arm/man.rndc.html
doc/arm/notes.xml
doc/arm/options.grammar.xml
lib/bind9/api
lib/dns/api
lib/isc/api
lib/isccfg/api
version

diff --git a/CHANGES b/CHANGES
index 40fcab190f970a578e2164dd93302bacb29cf629..b31c6b578bc8b4cb4d671918bfcae3508ae11201 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+        --- 9.11.10 released ---
+
 5275.  [bug]           Mark DS records included in referral messages
                        with trust level "pending" so that they can be
                        validated and cached immediately, with no need to
index 33a2bf13913945478662bd0da164c4786c3c06cd..bc129bdb7bc0d4aa05c6458b954603bac446e08a 100644 (file)
@@ -13,7 +13,7 @@
 
 <refentry xmlns:db="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
   <info>
-    <date>2019-02-20</date>
+    <date>2019-07-22</date>
   </info>
   <refentryinfo>
     <corpname>ISC</corpname>
index 0c199e41a5b2b7bc05a979edb7fde83dc592a7f6..fd0cb37a678f6cf41eeb32199d973dbab5925ff6 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 97bbc6148a555d1f8383c0dbe0621e64b4a28d13..ff13db83f712349ce80744b762c727561e1fc296 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index b5d748c9edf6fee025d43a83a09767c16e831b52..7bebb2a5f83fc992557003c9186f16cf27929a5f 100644 (file)
@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index d90daf638da41089324a91be9247635e8b0e0920..b851fac5637f2362ae297d00a15da89f8e8d88d0 100644 (file)
@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 9a156d8de8264add228f09c9a4b40754e68fabb6..25c04fa384bdfd4c1f2823035f804b8ac0d05bce 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 14a209c7ff7b015812e96b94092f8cebb0a9389d..5b0f3001819789b3fa6a73f41cb6ac1607fe7d04 100644 (file)
@@ -2473,7 +2473,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
        <span class="command"><strong>check-wildcard</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>cleaning-interval</strong></span> <em class="replaceable"><code>integer</code></em>;
        <span class="command"><strong>clients-per-query</strong></span> <em class="replaceable"><code>integer</code></em>;
-       <span class="command"><strong>cookie-algorithm</strong></span> ( aes | sha1 | sha256 );
+       <span class="command"><strong>cookie-algorithm</strong></span> ( aes | sha1 | sha256 | siphash24 );
        <span class="command"><strong>cookie-secret</strong></span> <em class="replaceable"><code>string</code></em>;
        <span class="command"><strong>coresize</strong></span> ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );
        <span class="command"><strong>datasize</strong></span> ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );
@@ -3483,7 +3483,9 @@ options {
               </p>
               <p>
                 Compatible IPv6 prefixes have lengths of 32, 40, 48, 56,
-                64 and 96 as per RFC 6052.
+                64 and 96 as per RFC 6052.  Bits 64..71 inclusive must
+                be zero with the most significate bit of the prefix in
+                position 0.
               </p>
               <p>
                 Additionally a reverse IP6.ARPA zone will be created for
@@ -7683,6 +7685,14 @@ deny-answer-aliases { "example.net"; };
             than that is a configuration error.
           </p>
 
+          <p>
+            Rules encoded in response policy zones are processed after
+            <a class="link" href="Bv9ARM.ch06.html#access_control" title="Access Control">Access Control Lists
+            (ACLs)</a>.  All queries from clients which are not
+            permitted access to the resolver will be answered with a
+            status code of REFUSED, regardless of configured RPZ rules.
+          </p>
+
           <p>
             Five policy triggers can be encoded in RPZ records.
             </p>
@@ -14672,6 +14682,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 936fa2885a09ba69edc3b49780df40393500cd50..98efd477fa7de3160487d5acf7a9369ea4e5b0d3 100644 (file)
@@ -400,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 74ed7dd0d71db549e62654f1782e3a81b56b00ef..4ab6c33c1f77bdacbd0f0499c902870b2dfb4e63 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 0f4793c765d57113a7283c299aa1b75bd8992e8a..8e5bde693c65ec74c466158d5aa12da68efe8ce5 100644 (file)
@@ -36,7 +36,7 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.9</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.10</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
@@ -51,7 +51,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.9</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.10</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_features"></a>New Features</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
        <p>
          The new GeoIP2 API from MaxMind is now supported when BIND
          is compiled using <span class="command"><strong>configure --with-geoip2</strong></span>.
          <span class="command"><strong>as</strong></span>. All of the databases support both IPv4
          and IPv6 lookups. [GL #182]
        </p>
-      </li></ul></div>
+      </li>
+<li class="listitem">
+       <p>
+         A SipHash 2-4 based DNS Cookie (RFC 7873) algorithm has been added.
+         [GL #605]
+       </p>
+       <p>
+         If you are running multiple DNS Servers (different versions of BIND 9
+         or DNS server from multiple vendors) responding from the same IP
+         address (anycast or load-balancing scenarios), you'll have to make
+         sure that all the servers are configured with the same DNS Cookie
+         algorithm and same Server Secret for the best performance.
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         DS records included in DNS referral messages can now be validated
+         and cached immediately, reducing the number of queries needed for
+         a DNSSEC validation. [GL #964]
+       </p>
+      </li>
+</ul></div>
   </div>
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
        <p>
          Glue address records were not being returned in responses
          to root priming queries; this has been corrected. [GL #1092]
        </p>
-      </li></ul></div>
+      </li>
+<li class="listitem">
+       <p>
+         Glue address records were not being returned in responses
+         to root priming queries; this has been corrected. [GL #1092]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Interaction between DNS64 and RPZ No Data rule (CNAME *.) could
+         cause unexpected results; this has been fixed. [GL #1106]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named-checkconf</strong></span> now checks DNS64 prefixes
+          to ensure bits 64-71 are zero. [GL #1159]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named-checkconf</strong></span> could crash during
+         configuration if configured to use "geoip continent" ACLs with
+         legacy GeoIP. [GL #1163]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         <span class="command"><strong>named-checkconf</strong></span> now correctly reports missing
+         <span class="command"><strong>dnstap-output</strong></span> option when
+         <span class="command"><strong>dnstap</strong></span> is set. [GL #1136]
+       </p>
+      </li>
+<li class="listitem">
+       <p>
+         Handle ETIMEDOUT error on connect() with a non-blocking
+         socket. [GL #1133]
+       </p>
+      </li>
+</ul></div>
   </div>
 
   <div class="section">
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 81e55ad3257cb0ca26fffda11689a2bba89c4e22..23c56e80e0f5c412bd0177434b1b25b09cc2abf8 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index f9e931617efe7bb8f55ab4510ee40e951ae04381..360dc89a95e42b50ee0aca88f1a3b1eb7f684343 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index a7f228c76be0257efae0d32a8131e3c857f63caa..5698f4a423e1d05ea07a534de495f48291478570 100644 (file)
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index e8ae3910cddf53d2863a6e1c0639fdbbfb071f86..e91ef06c25e30fca579a40209597da086ef4ea79 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 982a3548f629b15708af36867ba41f7af0af6838..fb099d5533d9bd829a3263dff06a5c338db419c6 100644 (file)
@@ -91,6 +91,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 87705ee4cf3f5b6791d6afa1f6158f7d8a4cdd5b..8afcbfa32efbf981ddb374af40335dd779a07c32 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 1239aac5d09d5652cdc49d73d7a9694863b682db..e4ba6aa7bcb9c64caea0e3c24c24f44397d3c4f1 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 5d1d96c005a1c697d263ff70a83f3a070aa939d0..e72a4299e971a45a20fe8570a0757d5a40f806cd 100644 (file)
 <dd>
            <p>
              Toggles the printing of the initial comment in the
-             output identifying the version of <span class="command"><strong>dig</strong></span>
-             and the query options that have been applied.  This
-             comment is printed by default.
+             output, identifying the version of <span class="command"><strong>dig</strong></span>
+             and the query options that have been applied.  This option
+             always has global effect; it cannot be set globally
+             and then overridden on a per-lookup basis.  The default
+             is to print this comment.
            </p>
          </dd>
 <dt><span class="term"><code class="option">+[no]comments</code></span></dt>
 <dd>
            <p>
-             Toggle the display of comment lines in the output.
-             The default is to print comments.
+             Toggles the display of some comment lines in the output,
+             containing information about the packet header and
+             OPT pseudosection, and the names of the response
+             section.  The default is to print these comments.
+           </p>
+           <p>
+             Other types of comments in the output are not affected by
+             this option, but can be controlled using other command
+             line switches. These include <span class="command"><strong>+[no]cmd</strong></span>,
+             <span class="command"><strong>+[no]question</strong></span>,
+             <span class="command"><strong>+[no]stats</strong></span>, and
+             <span class="command"><strong>+[no]rrcomments</strong></span>.
            </p>
          </dd>
 <dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
 <dt><span class="term"><code class="option">+[no]qr</code></span></dt>
 <dd>
            <p>
-             Print [do not print] the query as it is sent.  By
-             default, the query is not printed.
+             Toggles the display of the query message as it is sent.
+             By default, the query is not printed.
            </p>
          </dd>
 <dt><span class="term"><code class="option">+[no]question</code></span></dt>
 <dd>
            <p>
-             Print [do not print] the question section of a query
+             Toggles the display of the question section of a query
              when an answer is returned.  The default is to print
              the question section as a comment.
            </p>
 <dd>
            <p>
              Provide a terse answer.  The default is to print the
-             answer in a verbose form.
+             answer in a verbose form.  This option always has global
+             effect; it cannot be set globally and then overridden on
+             a per-lookup basis.
            </p>
          </dd>
 <dt><span class="term"><code class="option">+[no]showsearch</code></span></dt>
 <dt><span class="term"><code class="option">+[no]stats</code></span></dt>
 <dd>
            <p>
-             This query option toggles the printing of statistics:
-             when the query was made, the size of the reply and
-             so on.  The default behavior is to print the query
-             statistics.
+             Toggles the printing of statistics: when the query was made,
+             the size of the reply and so on.  The default behavior is to
+             print the query statistics as a comment after each lookup.
            </p>
          </dd>
 <dt><span class="term"><code class="option">+[no]subnet=addr[/prefix-length]</code></span></dt>
@@ -1130,6 +1143,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index a70c64dab2369082907968ade24f8050612c121c..69ad8e24bd86ac82df9841780d9a7cb1e521b136 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 9887426d5ad1832b9cf92df4c4536057d1f824bb..aee3316f44717476a2bad140a7598912cb80fa11 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 104a7668fc1a16c49adaf3ac3054a12b7585f52a..2713e31c450bd5ea1d23ada1886f7023daaecd22 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 887e12bfe003a1c0db14644f0143e4a0c642aa2a..cbe97679233fcac0c0e707e9226820953d4f93f7 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 0202ae7ff13c716c8e55df025cd47a4577eb338b..1819bb2f587560a3c6f8195c36ba9111b8985ae6 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index f5a26d46360cc29671a031b74c5b98fb484ad81c..d6804aee435bb3fb8b1c3bbf9a1674475d855e04 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index cd7ea885ef7cf20c238b3dd32f62c12fd9934483..da5f4f0afe69692c826fa722ac5e77dfb6e986d3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 5efe76ffb8981c861c4c720379b8f59c63640bbc..64aafceaefff3886e56c1e4bc57f923b49c11484 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 0f898d252b9146e321f1005dc92d2e0a555fd7cc..aaf2064dbd7dc303796af520f89e749d13f6b9e5 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 9d3263cf3684f2ad21a232209c4b63beb98785be..407ff1c1b0690270e827d04ef928bc460f428426 100644 (file)
@@ -708,6 +708,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index e50435a4f93dbfd4dd23a8523cc143715d04a6cb..1e91d58aa02cad1459ecd7ebbb35c016ccad6a5b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index b9bd94a4d5f1958c7b9a414218782385d99bc3b7..f1079f27d5a454e47f3b1bba6967c29652ce81f3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 85a98c0fcfc8f9c14b0f2bdd2f80c6fdef7fecaf..efe9ffccb54d41887aa17c6d196a34dca7dacf3b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 29ba82d44ab3e10668a4a410d4f66be73fa334a2..d798eb7bd12e2ffb9dab66bfa168b0889cf19ed1 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 7c73ccfa00025dfd2cde5a2a80a03728f1917783..4d201e1e8871e684a72db4aba5544284b63ee623 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 3b33d1b28daa24a7c7d5efa7f590f374142fd34b..1b5103ad9b2410b8fd88cf95560575ad7d278898 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index d7b11b82aafe6b7d5345b9c7b3d7feeb975d832e..273ea6249de6a308c2c97fdf3d3d97a6a7f23ae4 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index bad7011d1a63f76f3c2c5c5defd8346a58984b9f..0944776fd7a73eaf6053aec509bec655792eae18 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index add689e151f6e48b7ac789fe58441edd1e65f3fa..abf3b23ac838748c1928561b8a2d298d0f740ff8 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index a95539d65cbc40f69417053c91248cf1a812a89a..520c5cec80fb3d0c4831dedfe3b059b6757d8ded 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 8afc1ce31d8fa0da75234f159917acb456807a99..9c675055cac2fc4654009de57078d604c155270e 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 6de1fe02b165411aa2a1123dde1c001623e1c38d..0f59e9f70d3e6e5918685cd4b263d2733a28d911 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 1fe1ae14266da26086dadb6749d466eea943ad2e..14f6d31fbd6d8733d876efacffd3e19735c9a6e1 100644 (file)
@@ -244,7 +244,7 @@ options
        check-wildcard <em class="replaceable"><code>boolean</code></em>;<br>
        cleaning-interval <em class="replaceable"><code>integer</code></em>;<br>
        clients-per-query <em class="replaceable"><code>integer</code></em>;<br>
-       cookie-algorithm ( aes | sha1 | sha256 );<br>
+       cookie-algorithm ( aes | sha1 | sha256 | siphash24 );<br>
        cookie-secret <em class="replaceable"><code>string</code></em>;<br>
        coresize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
        datasize ( default | unlimited | <em class="replaceable"><code>sizeval</code></em> );<br>
@@ -1034,6 +1034,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 219baa0a69b1cd2e0d3aace48fc723cae6bbddfe..f5ef8a53d8e3cb66201c2c4b6751e53a34e33e1a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 46e167eab0565a21896e15de30714867a2de96ef..b3b4c941e4a7d4471e4576627a0ebd5a859f9eb3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 3ff91c7f014dbcb669338c1e30728f6848c8147e..8fdf7c6a7b56181d052dc2c71c544e50fda1af73 100644 (file)
@@ -436,6 +436,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 5f8545d8af6cefffe37f280358d4d795613333ad..c16d4039dc1e2605857b62d16aa1080098184901 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 6be350679608b62405c1e994cf90004a5c3e440f..71cf93c521418b9fe206f2fa0a67332cfda3208b 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index d01c5a85735ee342831b76b1b250628db5035b7a..34372e65a15b508ba84fb94f508e216a18fed2a6 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index db859923019c6c9c9797a5b97016d84f7a39201e..814c825a424ed1039c9721943538ad30ea2d973a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 3ade68620bf82324a560669aa6ce71a37a9c0575..17af532d6739d9894972e420809f893b4c629682 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 738695c5e9ab17755f37398ea61b32e163b7f13b..acaffbcf402f080433357417c8e190cea51f8294 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 91be67efb5e3ac5a15fdbb8be0c9d45156424e9b..7f1637897a3f37939206df40b89064f4898eb889 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 4f24bd72c895649f0d17c37bc22d3497f8a292c8..3c541da1dec7bf64a64165cacaccbe2fc8e157a3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.9 (Extended Support Version)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.10 (Extended Support Version)</p>
 </body>
 </html>
index 4297a89e6f3168b37491fe155550eb96463483d6..08a02fa953750acae81fb69699c98a5468ad9895 100644 (file)
       <listitem>
        <para>
          A SipHash 2-4 based DNS Cookie (RFC 7873) algorithm has been added.
+         [GL #605]
        </para>
        <para>
          If you are running multiple DNS Servers (different versions of BIND 9
          to root priming queries; this has been corrected. [GL #1092]
        </para>
       </listitem>
+      <listitem>
+       <para>
+         Interaction between DNS64 and RPZ No Data rule (CNAME *.) could
+         cause unexpected results; this has been fixed. [GL #1106]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         <command>named-checkconf</command> now checks DNS64 prefixes
+          to ensure bits 64-71 are zero. [GL #1159]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         <command>named-checkconf</command> could crash during
+         configuration if configured to use "geoip continent" ACLs with
+         legacy GeoIP. [GL #1163]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         <command>named-checkconf</command> now correctly reports missing
+         <command>dnstap-output</command> option when
+         <command>dnstap</command> is set. [GL #1136]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+         Handle ETIMEDOUT error on connect() with a non-blocking
+         socket. [GL #1133]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>
 
index 184973f849e4fd199250d4b9a2d1d87a80d6e90b..6a8796ae029acf2dba2eaa5b3912745c46d22a39 100644 (file)
@@ -62,7 +62,7 @@
        <command>check-wildcard</command> <replaceable>boolean</replaceable>;
        <command>cleaning-interval</command> <replaceable>integer</replaceable>;
        <command>clients-per-query</command> <replaceable>integer</replaceable>;
-       <command>cookie-algorithm</command> ( aes | sha1 | sha256 );
+       <command>cookie-algorithm</command> ( aes | sha1 | sha256 | siphash24 );
        <command>cookie-secret</command> <replaceable>string</replaceable>;
        <command>coresize</command> ( default | unlimited | <replaceable>sizeval</replaceable> );
        <command>datasize</command> ( default | unlimited | <replaceable>sizeval</replaceable> );
index 2fbdc78024e1e084e557914180d1a0555e1b4321..00eb68989ddef28831e0248ffc086c4c6fb8601a 100644 (file)
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 161
-LIBREVISION = 2
+LIBREVISION = 3
 LIBAGE = 0
index 623c05a29cb640bef11e79c2b736cd1a0ae49ec2..b114ab54a1d09bcfa9034bc5ad9d4c85b8b1d9ca 100644 (file)
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1106
-LIBREVISION = 2
+LIBINTERFACE = 1107
+LIBREVISION = 0
 LIBAGE = 0
index 13ceae1114cf2c5f5952b5fb8fcd63c4ac0cf913..b4ce33f22b6e0c4b9a10042a984bc08b1819e589 100644 (file)
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1102
+LIBINTERFACE = 1103
 LIBREVISION = 0
-LIBAGE = 2
+LIBAGE = 3
index 0c2a5f693bc5f80acffff8de1c0dc7b882452f88..6bfd0867386acf0cb2a9e47c7a8433ede9ab59b4 100644 (file)
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 163
-LIBREVISION = 1
+LIBREVISION = 2
 LIBAGE = 0
diff --git a/version b/version
index 5b14fbece44a043bad954dcb2bdd708a7ed5b8f1..da1c1dc554770535658ccfecea0c4c00558c796b 100644 (file)
--- a/version
+++ b/version
@@ -5,7 +5,7 @@ PRODUCT=BIND
 DESCRIPTION="(Extended Support Version)"
 MAJORVER=9
 MINORVER=11
-PATCHVER=9
+PATCHVER=10
 RELEASETYPE=
 RELEASEVER=
 EXTENSIONS=