From: Tinderbox User Date: Tue, 9 Jul 2019 09:54:45 +0000 (+0000) Subject: prep 9.11.9 X-Git-Tag: v9.11.9~1^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=466dd24411612d8ab8329bf9e9752a6f714eafe3;p=thirdparty%2Fbind9.git prep 9.11.9 --- diff --git a/CHANGES b/CHANGES index 519edb62085..2b4a10b061c 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.11.9 released --- + 5260. [bug] dnstap-read was producing malformed output for large packets. [GL #1093] diff --git a/README b/README index 065ae7af7ef..03ccd3693de 100644 --- a/README +++ b/README @@ -307,7 +307,7 @@ make depend. If you're using Emacs, you might find make tags helpful. Several environment variables that can be set before running configure will affect compilation: -Variable Description + Variable Description CC The C compiler to use. configure tries to figure out the right one for supported systems. C compiler flags. Defaults to include -g and/or -O2 as @@ -469,7 +469,7 @@ development BIND 9 is included in the file CHANGES, with the most recent changes listed first. Change notes include tags indicating the category of the change that was made; these categories are: -Category Description + Category Description [func] New feature [bug] General bug fix [security] Fix for a significant security flaw @@ -520,21 +520,23 @@ Acknowledgments * The original development of BIND 9 was underwritten by the following organizations: - Sun Microsystems, Inc. - Hewlett Packard - Compaq Computer Corporation - IBM - Process Software Corporation - Silicon Graphics, Inc. - Network Associates, Inc. - U.S. Defense Information Systems Agency - USENIX Association - Stichting NLnet - NLnet Foundation - Nominum, Inc. + Sun Microsystems, Inc. + Hewlett Packard + Compaq Computer Corporation + IBM + Process Software Corporation + Silicon Graphics, Inc. + Network Associates, Inc. + U.S. Defense Information Systems Agency + USENIX Association + Stichting NLnet - NLnet Foundation + Nominum, Inc. * This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. http://www.OpenSSL.org/ + * This product includes cryptographic software written by Eric Young (eay@cryptsoft.com) + * This product includes software written by Tim Hudson (tjh@cryptsoft.com) diff --git a/bin/rndc/rndc.8 b/bin/rndc/rndc.8 index 315a1b476ad..c7c6763e816 100644 --- a/bin/rndc/rndc.8 +++ b/bin/rndc/rndc.8 @@ -584,7 +584,7 @@ Delete a given TKEY\-negotiated key from the server\&. (This does not apply to s .RS 4 List the names of all TSIG keys currently configured for use by \fBnamed\fR -in each view\&. The list both statically configured keys and dynamic TKEY\-negotiated keys\&. +in each view\&. The list includes both statically configured keys and dynamic TKEY\-negotiated keys\&. .RE .PP \fBvalidation ( on | off | status ) \fR\fB[\fIview \&.\&.\&.\fR]\fR\fB \fR diff --git a/bin/rndc/rndc.html b/bin/rndc/rndc.html index 88b046df1ce..3779a5e821b 100644 --- a/bin/rndc/rndc.html +++ b/bin/rndc/rndc.html @@ -787,7 +787,7 @@

List the names of all TSIG keys currently configured for use by named in each view. The - list both statically configured keys and dynamic + list includes both statically configured keys and dynamic TKEY-negotiated keys.

diff --git a/configure b/configure index ce0f5d8697a..b024643891d 100755 --- a/configure +++ b/configure @@ -979,7 +979,6 @@ infodir docdir oldincludedir includedir -runstatedir localstatedir sharedstatedir sysconfdir @@ -1151,7 +1150,6 @@ datadir='${datarootdir}' sysconfdir='${prefix}/etc' sharedstatedir='${prefix}/com' localstatedir='${prefix}/var' -runstatedir='${localstatedir}/run' includedir='${prefix}/include' oldincludedir='/usr/include' docdir='${datarootdir}/doc/${PACKAGE_TARNAME}' @@ -1404,15 +1402,6 @@ do | -silent | --silent | --silen | --sile | --sil) silent=yes ;; - -runstatedir | --runstatedir | --runstatedi | --runstated \ - | --runstate | --runstat | --runsta | --runst | --runs \ - | --run | --ru | --r) - ac_prev=runstatedir ;; - -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \ - | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \ - | --run=* | --ru=* | --r=*) - runstatedir=$ac_optarg ;; - -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb) ac_prev=sbindir ;; -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \ @@ -1550,7 +1539,7 @@ fi for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \ datadir sysconfdir sharedstatedir localstatedir includedir \ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \ - libdir localedir mandir runstatedir + libdir localedir mandir do eval ac_val=\$$ac_var # Remove trailing slashes. @@ -1703,7 +1692,6 @@ Fine tuning of the installation directories: --sysconfdir=DIR read-only single-machine data [PREFIX/etc] --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com] --localstatedir=DIR modifiable single-machine data [PREFIX/var] - --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run] --libdir=DIR object code libraries [EPREFIX/lib] --includedir=DIR C header files [PREFIX/include] --oldincludedir=DIR C header files for non-gcc [/usr/include] diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index a2fa1c03e92..0c199e41a5b 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -616,6 +616,6 @@ -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 8eae0c6aa87..97bbc6148a5 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -151,6 +151,6 @@ -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index d074648877e..b5d748c9edf 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -759,6 +759,6 @@ controls { -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index bba0f2984bd..d90daf638da 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 1b63634bfbe..9a156d8de82 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -142,6 +142,6 @@ -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 6476935a869..14a209c7ff7 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -3011,14 +3011,19 @@ badresp:1,adberr:0,findfail:0,valfail:0]
geoip-directory

- Specifies the directory containing GeoIP - .dat database files for GeoIP - initialization. By default, this option is unset - and the GeoIP support will use libGeoIP's - built-in directory. - (For details, see the section called “acl Statement Definition and - Usage” about the - geoip ACL.) + When named is compiled using the + MaxMind GeoIP2 geolocation API, or the legacy GeoIP API, + this specifies the directory containing GeoIP + database files. By default, the option is set based on + the prefix used to build the libmaxminddb + module: for example, if the library is installed in + /usr/local/lib, then the default + geoip-directory will be + /usr/local/share/GeoIP. On Windows, + the default is the named working + directory. See the section called “acl Statement Definition and + Usage” for details about + geoip ACLs.

key-directory
@@ -14667,6 +14672,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.8 (Extended Support Version)

+

BIND 9.11.9 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 4c4355fa98e..936fa2885a0 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -161,38 +161,39 @@ zone "example.com" { to search for a match. Available fields are "country", "region", "city", "continent", "postal" (postal code), "metro" (metro code), "area" (area code), "tz" (timezone), - "isp", "org", "asnum", "domain" and "netspeed". + "isp", "asnum", and "domain".

value is the value to search for within the database. A string may be quoted if it - contains spaces or other special characters. If this is - an "asnum" search, then the leading "ASNNNN" string can be - used, otherwise the full description must be used (e.g. - "ASNNNN Example Company Name"). If this is a "country" - search and the string is two characters long, then it must - be a standard ISO-3166-1 two-letter country code, and if it - is three characters long then it must be an ISO-3166-1 - three-letter country code; otherwise it is the full name - of the country. Similarly, if this is a "region" search - and the string is two characters long, then it must be a - standard two-letter state or province abbreviation; - otherwise it is the full name of the state or province. + contains spaces or other special characters. An "asnum" + search for autonomous system number can be specified using + the string "ASNNNN" or the integer NNNN. + When "country" search is specified with a string is two + characters long, then it must be a standard ISO-3166-1 + two-letter country code; otherwise it is interpreted as + the full name of the country. Similarly, if this is a + "region" search and the string is two characters long, + then it treated as a standard two-letter state or province + abbreviation; otherwise it treated as the full name of the + state or province.

The database field indicates which GeoIP database to search for a match. In most cases this is unnecessary, because most search fields can only be found in - a single database. However, searches for country can be - answered from the "city", "region", or "country" databases, - and searches for region (i.e., state or province) can be - answered from the "city" or "region" databases. For these - search types, specifying a database + a single database. However, searches for "continent" or "country" + can be answered from either the "city" or "country" databases, + so for these search types, specifying a + database will force the query to be answered from that database and no other. If database is not specified, then these queries will be answered from the "city", - database if it is installed, or the "region" database if it is - installed, or the "country" database, in that order. + database if it is installed, or the "country" database if it + is installed, in that order. Valid database names are + "country", "city", "asnum", "isp", and "domain". (If using + the legacy GeoIP API, "netspeed" and "org" databases are also + available.)

By default, if a DNS query includes an EDNS Client Subnet (ECS) @@ -206,9 +207,9 @@ zone "example.com" { Some example GeoIP ACLs: 

geoip country US;
-geoip country JAP;
+geoip country JP;
 geoip db country country Canada;
-geoip db region region WA;
+geoip region WA;
 geoip city "San Francisco";
 geoip region Oklahoma;
 geoip postal 95062;
@@ -399,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; };
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index 4d702a4d25b..74ed7dd0d71 100644
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -136,6 +136,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 7f3be78cd84..0f4793c765d 100644
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -36,12 +36,14 @@
 

 
Table of Contents

 

-
Release Notes for BIND Version 9.11.8

+
Release Notes for BIND Version 9.11.9

 

 
Introduction

 
Download

 
License Change

 
Security Fixes

+
New Features

+
Bug Fixes

 
End of Life

 
Thank You

 

@@ -49,7 +51,7 @@
 

       

 

-Release Notes for BIND Version 9.11.8

+Release Notes for BIND Version 9.11.9

   
   

 

@@ -121,6 +123,51 @@
 
   

 

+New Features

+    
  • 
+	
    
+	  The new GeoIP2 API from MaxMind is now supported when BIND
+	  is compiled using configure --with-geoip2.
+	  The legacy GeoIP API can be used by compiling with
+	  configure --with-geoip instead.  (Note that
+	  the databases for the legacy API are no longer maintained by
+	  MaxMind.)
+	
    
+	
    
+	  The default path to the GeoIP2 databases will be set based
+	  on the location of the libmaxminddb library;
+	  for example, if it is in /usr/local/lib,
+	  then the default path will be
+	  /usr/local/share/GeoIP.
+	  This value can be overridden in named.conf
+	  using the geoip-directory option.
+	
    
+	
    
+	  Some geoip ACL settings that were available with
+	  legacy GeoIP, including searches for netspeed,
+	  org, and three-letter ISO country codes, will
+	  no longer work when using GeoIP2. Supported GeoIP2 database
+	  types are country, city,
+	  domain, isp, and
+	  as. All of the databases support both IPv4
+	  and IPv6 lookups. [GL #182]
+	
    
+      

+  

+
+  

+

+Bug Fixes

+    
  • 
+	
    
+	  Glue address records were not being returned in responses
+	  to root priming queries; this has been corrected. [GL #1092]
+	
    
+      

+  

+
+  

+

 End of Life

     

       BIND 9.11 (Extended Support Version) will be supported until at
@@ -159,6 +206,6 @@
 
 
 

-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index e331e9901ca..81e55ad3257 100644
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -148,6 +148,6 @@
 
 
 

-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html
index a9d446fbdd1..f9e931617ef 100644
--- a/doc/arm/Bv9ARM.ch11.html
+++ b/doc/arm/Bv9ARM.ch11.html
@@ -914,6 +914,6 @@
 
 
 

-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html
index 7fac0e47289..a7f228c76be 100644
--- a/doc/arm/Bv9ARM.ch12.html
+++ b/doc/arm/Bv9ARM.ch12.html
@@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
 
 
 

-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html
index 14bac096eff..e8ae3910cdd 100644
--- a/doc/arm/Bv9ARM.ch13.html
+++ b/doc/arm/Bv9ARM.ch13.html
@@ -213,6 +213,6 @@
 
 
 

-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index 20b27ca4da9..753b31f54c7 100644
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -32,7 +32,7 @@
 

 

 BIND 9 Administrator Reference Manual

-
BIND Version 9.11.8

+
BIND Version 9.11.9

 
Copyright © 2000-2019 Internet Systems Consortium, Inc. ("ISC")

 

 

@@ -241,12 +241,14 @@
 
 
A. Release Notes

 

-
Release Notes for BIND Version 9.11.8

+
Release Notes for BIND Version 9.11.9

 

 
Introduction

 
Download

 
License Change

 
Security Fixes

+
New Features

+
Bug Fixes

 
End of Life

 
Thank You

 

@@ -438,6 +440,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index 29fd4f4426e..dc63f1a3048 100644
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ
diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 7e1f13a2a07..982a3548f62 100644
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -91,6 +91,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index 7262b2251c5..87705ee4cf3 100644
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -236,6 +236,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html
index 510d8559060..1239aac5d09 100644
--- a/doc/arm/man.delv.html
+++ b/doc/arm/man.delv.html
@@ -624,6 +624,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index e66178489e0..5d1d96c005a 100644
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -1130,6 +1130,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 21fad83cc61..a70c64dab23 100644
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -148,6 +148,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index 76450dcadcb..9887426d5ad 100644
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -270,6 +270,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index 69ba1e6a3f2..104a7668fc1 100644
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -352,6 +352,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html
index dbf1b50c6f7..887e12bfe00 100644
--- a/doc/arm/man.dnssec-importkey.html
+++ b/doc/arm/man.dnssec-importkey.html
@@ -250,6 +250,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index d2f18869785..0202ae7ff13 100644
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -492,6 +492,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index 4ac8093ab62..f5a26d46360 100644
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -583,6 +583,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html
index 0ecb8ad32df..cd7ea885ef7 100644
--- a/doc/arm/man.dnssec-keymgr.html
+++ b/doc/arm/man.dnssec-keymgr.html
@@ -416,6 +416,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index 9b8bb7a3c38..5efe76ffb89 100644
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -171,6 +171,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index 543a9b3fe5a..0f898d252b9 100644
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -349,6 +349,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 29f34d3ba1d..9d3263cf368 100644
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -708,6 +708,6 @@ db.example.com.signed
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index 7f22ba14eb4..e50435a4f93 100644
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -202,6 +202,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html
index 44db47c7fc4..b9bd94a4d5f 100644
--- a/doc/arm/man.dnstap-read.html
+++ b/doc/arm/man.dnstap-read.html
@@ -134,6 +134,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html
index 08aff3df50d..85a98c0fcfc 100644
--- a/doc/arm/man.genrandom.html
+++ b/doc/arm/man.genrandom.html
@@ -127,6 +127,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index 1821068a1c5..29ba82d44ab 100644
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -366,6 +366,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html
index 0268890e679..7c73ccfa000 100644
--- a/doc/arm/man.isc-hmac-fixup.html
+++ b/doc/arm/man.isc-hmac-fixup.html
@@ -126,6 +126,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html
index a5710abe92d..3b33d1b28da 100644
--- a/doc/arm/man.lwresd.html
+++ b/doc/arm/man.lwresd.html
@@ -329,6 +329,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html
index 826a05b8949..d7b11b82aaf 100644
--- a/doc/arm/man.mdig.html
+++ b/doc/arm/man.mdig.html
@@ -609,6 +609,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index a90f38e7245..bad7011d1a6 100644
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -192,6 +192,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 3c488468874..add689e151f 100644
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -463,6 +463,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index 7a9e2ef0ee1..a95539d65cb 100644
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -117,6 +117,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html
index e9e42237dff..8afc1ce31d8 100644
--- a/doc/arm/man.named-nzd2nzf.html
+++ b/doc/arm/man.named-nzd2nzf.html
@@ -119,6 +119,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html
index f6842717c8d..6de1fe02b16 100644
--- a/doc/arm/man.named-rrchecker.html
+++ b/doc/arm/man.named-rrchecker.html
@@ -121,6 +121,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html
index e9550b2661f..1fe1ae14266 100644
--- a/doc/arm/man.named.conf.html
+++ b/doc/arm/man.named.conf.html
@@ -1034,6 +1034,6 @@ zone
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index 42a8b85fb73..219baa0a69b 100644
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -490,6 +490,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index ed30cebf0fb..46e167eab05 100644
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -131,6 +131,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html
index 1cafac060c9..3ff91c7f014 100644
--- a/doc/arm/man.nslookup.html
+++ b/doc/arm/man.nslookup.html
@@ -436,6 +436,6 @@ nslookup -query=hinfo  -timeout=10
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 7fdd1225d10..5f8545d8af6 100644
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -817,6 +817,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html
index 7c8d9f4029d..6be35067960 100644
--- a/doc/arm/man.pkcs11-destroy.html
+++ b/doc/arm/man.pkcs11-destroy.html
@@ -162,6 +162,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html
index c770e1069fc..d01c5a85735 100644
--- a/doc/arm/man.pkcs11-keygen.html
+++ b/doc/arm/man.pkcs11-keygen.html
@@ -200,6 +200,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html
index fa51526c814..db859923019 100644
--- a/doc/arm/man.pkcs11-list.html
+++ b/doc/arm/man.pkcs11-list.html
@@ -158,6 +158,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html
index 73d1eff1ee5..3ade68620bf 100644
--- a/doc/arm/man.pkcs11-tokens.html
+++ b/doc/arm/man.pkcs11-tokens.html
@@ -119,6 +119,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index 17d5cb1307e..738695c5e9a 100644
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -277,6 +277,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index 9c5aa37c730..91be67efb5e 100644
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -268,6 +268,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index 7f817eb2779..4f24bd72c89 100644
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -805,7 +805,7 @@
 	  

 	    List the names of all TSIG keys currently configured
 	    for use by named in each view.  The
-	    list both statically configured keys and dynamic
+	    list includes both statically configured keys and dynamic
 	    TKEY-negotiated keys.
 	  

 	

@@ -894,6 +894,6 @@
 
 
 
-
BIND 9.11.8 (Extended Support Version)

+
BIND 9.11.9 (Extended Support Version)

 
 
diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 6ef49313ba0..48b5226bf60 100644
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -15,7 +15,7 @@
 
   

 

-Release Notes for BIND Version 9.11.8

+Release Notes for BIND Version 9.11.9

   
   

 

@@ -87,6 +87,51 @@
 
   

 

+New Features

+    
  • 
+	
    
+	  The new GeoIP2 API from MaxMind is now supported when BIND
+	  is compiled using configure --with-geoip2.
+	  The legacy GeoIP API can be used by compiling with
+	  configure --with-geoip instead.  (Note that
+	  the databases for the legacy API are no longer maintained by
+	  MaxMind.)
+	
    
+	
    
+	  The default path to the GeoIP2 databases will be set based
+	  on the location of the libmaxminddb library;
+	  for example, if it is in /usr/local/lib,
+	  then the default path will be
+	  /usr/local/share/GeoIP.
+	  This value can be overridden in named.conf
+	  using the geoip-directory option.
+	
    
+	
    
+	  Some geoip ACL settings that were available with
+	  legacy GeoIP, including searches for netspeed,
+	  org, and three-letter ISO country codes, will
+	  no longer work when using GeoIP2. Supported GeoIP2 database
+	  types are country, city,
+	  domain, isp, and
+	  as. All of the databases support both IPv4
+	  and IPv6 lookups. [GL #182]
+	
    
+      

+  

+
+  

+

+Bug Fixes

+    
  • 
+	
    
+	  Glue address records were not being returned in responses
+	  to root priming queries; this has been corrected. [GL #1092]
+	
    
+      

+  

+
+  

+

 End of Life

     

       BIND 9.11 (Extended Support Version) will be supported until at
diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf
index df4e79407fe..e98502febc4 100644
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ
diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt
index 964468aee51..1a1707b95a9 100644
--- a/doc/arm/notes.txt
+++ b/doc/arm/notes.txt
@@ -1,4 +1,4 @@
-Release Notes for BIND Version 9.11.8
+Release Notes for BIND Version 9.11.9
 
 Introduction
 
@@ -42,6 +42,30 @@ Security Fixes
     number of incoming packets were being rejected. This flaw is disclosed
     in CVE-2019-6471. [GL #942]
 
+New Features
+
+  * The new GeoIP2 API from MaxMind is now supported when BIND is compiled
+    using configure --with-geoip2. The legacy GeoIP API can be used by
+    compiling with configure --with-geoip instead. (Note that the
+    databases for the legacy API are no longer maintained by MaxMind.)
+
+    The default path to the GeoIP2 databases will be set based on the
+    location of the libmaxminddb library; for example, if it is in /usr/
+    local/lib, then the default path will be /usr/local/share/GeoIP. This
+    value can be overridden in named.conf using the geoip-directory
+    option.
+
+    Some geoip ACL settings that were available with legacy GeoIP,
+    including searches for netspeed, org, and three-letter ISO country
+    codes, will no longer work when using GeoIP2. Supported GeoIP2
+    database types are country, city, domain, isp, and as. All of the
+    databases support both IPv4 and IPv6 lookups. [GL #182]
+
+Bug Fixes
+
+  * Glue address records were not being returned in responses to root
+    priming queries; this has been corrected. [GL #1092]
+
 End of Life
 
 BIND 9.11 (Extended Support Version) will be supported until at least
diff --git a/lib/dns/api b/lib/dns/api
index ab5a776bf1e..623c05a29cb 100644
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 1106
-LIBREVISION = 1
+LIBREVISION = 2
 LIBAGE = 0
diff --git a/version b/version
index ceed606c9ec..5b14fbece44 100644
--- a/version
+++ b/version
@@ -5,7 +5,7 @@ PRODUCT=BIND
 DESCRIPTION="(Extended Support Version)"
 MAJORVER=9
 MINORVER=11
-PATCHVER=8
+PATCHVER=9
 RELEASETYPE=
 RELEASEVER=
 EXTENSIONS=