From: Tinderbox User Date: Thu, 28 Jun 2018 05:25:37 +0000 (+0000) Subject: prep 9.10.8rc2 X-Git-Tag: v9.10.8rc2^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=54ca095d4d9c28e7148e869f65d138606327f700;p=thirdparty%2Fbind9.git prep 9.10.8rc2 --- diff --git a/CHANGES b/CHANGES index 6fe4ed20f4c..cf9548d6526 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.10.8rc2 released --- + 4984. [bug] Improve handling of very large incremental zone transfers to prevent journal corruption. [GL #339] diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5 index 3371df2dfa2..4bb87a2606d 100644 --- a/bin/named/named.conf.5 +++ b/bin/named/named.conf.5 @@ -18,12 +18,12 @@ .\" Title: named.conf .\" Author: .\" Generator: DocBook XSL Stylesheets v1.78.1 -.\" Date: 2016-12-02 +.\" Date: 2018-06-21 .\" Manual: BIND9 .\" Source: ISC .\" Language: English .\" -.TH "NAMED\&.CONF" "5" "2016\-12\-02" "ISC" "BIND9" +.TH "NAMED\&.CONF" "5" "2018\-06\-21" "ISC" "BIND9" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- @@ -384,6 +384,7 @@ options { [ break\-dnssec \fIboolean\fR ] [ max\-policy\-ttl \fIinteger\fR ] [ min\-ns\-dots \fIinteger\fR ] [ qname\-wait\-recurse \fIboolean\fR ]; root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ]; + root\-key\-sentinel \fIboolean\fR; rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. }; secroots\-file \fIquoted_string\fR; @@ -676,6 +677,7 @@ view \fIstring\fR [ \fIclass\fR ] { [ break\-dnssec \fIboolean\fR ] [ max\-policy\-ttl \fIinteger\fR ] [ min\-ns\-dots \fIinteger\fR ] [ qname\-wait\-recurse \fIboolean\fR ]; root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ]; + root\-key\-sentinel \fIboolean\fR; rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. }; serial\-update\-method ( increment | unixtime ); diff --git a/bin/named/named.conf.docbook b/bin/named/named.conf.docbook index 815c81daaf3..4b8b3dcdb7e 100644 --- a/bin/named/named.conf.docbook +++ b/bin/named/named.conf.docbook @@ -18,7 +18,7 @@ - 2016-12-02 + 2018-06-21 ISC @@ -373,6 +373,7 @@ options { [ break-dnssec boolean ] [ max-policy-ttl integer ] [ min-ns-dots integer ] [ qname-wait-recurse boolean ]; root-delegation-only [ exclude { quoted_string; ... } ]; + root-key-sentinel boolean; rrset-order { [ class string ] [ type string ] [ name quoted_string ] string string; ... }; secroots-file quoted_string; @@ -649,6 +650,7 @@ view string [ class ] { [ break-dnssec boolean ] [ max-policy-ttl integer ] [ min-ns-dots integer ] [ qname-wait-recurse boolean ]; root-delegation-only [ exclude { quoted_string; ... } ]; + root-key-sentinel boolean; rrset-order { [ class string ] [ type string ] [ name quoted_string ] string string; ... }; serial-update-method ( increment | unixtime ); diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html index 07085f5917a..138594f6278 100644 --- a/bin/named/named.conf.html +++ b/bin/named/named.conf.html @@ -364,6 +364,7 @@ options     [ break-dnssec boolean ] [ max-policy-ttl integer ] [
    min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
+ root-key-sentinel boolean;
rrset-order { [ class string ] [ type string ] [ name
    quoted_string ] string string; ... };
secroots-file quoted_string;
@@ -644,6 +645,7 @@ view     [ break-dnssec boolean ] [ max-policy-ttl integer ] [
    min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
+ root-key-sentinel boolean;
rrset-order { [ class string ] [ type string ] [ name
    quoted_string ] string string; ... };
serial-update-method ( increment | unixtime );
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index 8dc739f5b1e..2afbe0b156b 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -624,6 +624,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 1d966078902..8f3bfb419d4 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -159,6 +159,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index a9eb0ccbde0..fc40e1217d1 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -767,6 +767,6 @@ controls { -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 87e61859fb3..159b6418712 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2494,6 +2494,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index fbaf943010c..dcb7f095c0c 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -144,6 +144,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 407885c3e7c..9a15b801e1d 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -13838,6 +13838,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index b3ab7c0d5e5..4ba754f942f 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -261,6 +261,6 @@ zone "example.com" { -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index de3903a70d0..0a5e8690714 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -144,6 +144,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 49159a7bfd9..d8d74fd1e81 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -44,7 +44,7 @@

Table of Contents

-
Release Notes for BIND Version 9.10.8rc1
+
Release Notes for BIND Version 9.10.8rc2
Introduction
Download
@@ -60,7 +60,7 @@

-Release Notes for BIND Version 9.10.8rc1

+Release Notes for BIND Version 9.10.8rc2

@@ -114,9 +114,13 @@ New Features

  • - Add root key sentinel support which enables resolvers to test - which trust anchors are configured for the root. To disable, add - 'root-key-sentinel no;' to named.conf. [GL #37] + named now supports the "root key sentinel" + mechanism. This enables validating resolvers to indicate + which trust anchors are configured for the root, so that + information about root key rollover status can be gathered. + To disable this feature, add + root-key-sentinel no; to + named.conf. [GL #37]

@@ -134,14 +138,24 @@

Bug Fixes

-
  • +
      +
    • +

      + named now rejects excessively large + incremental (IXFR) zone transfers in order to prevent + possible corruption of journal files which could cause + named to abort when loading zones. [GL #339] +

      +
      • +

    • rndc reload could cause named to leak memory if it was invoked before the zone loading actions from a previous rndc reload command were completed. [RT #47076]

      -
    +
    • +
@@ -187,6 +201,6 @@
-

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 1d707e0e918..fb56b9233a9 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -156,6 +156,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 4e4680aac60..f2053d289af 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -922,6 +922,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index f90d84e5ea3..a439e3723ae 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -541,6 +541,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index e627a9169bb..f8c9b848b94 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -183,6 +183,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 6eaa284a712..d96dd27da62 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -40,7 +40,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.10.8rc1

+

BIND Version 9.10.8rc2

Copyright © 2000-2018 Internet Systems Consortium, Inc. ("ISC")

@@ -238,7 +238,7 @@
A. Release Notes
-
Release Notes for BIND Version 9.10.8rc1
+
Release Notes for BIND Version 9.10.8rc2
Introduction
Download
@@ -409,6 +409,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index 79c8b1c547c..8bf6c581126 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index ccd9508f853..dba0aae0bc1 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -99,6 +99,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index bf6096bfd1b..05469422257 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -244,6 +244,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 821e3937fe3..259b5a05fd1 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -617,6 +617,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index fda1750c908..04887cb1cb9 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -1076,6 +1076,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 17c28537888..ea01b20bc83 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -156,6 +156,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 9bd22b440ec..ea677cda9fa 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -278,6 +278,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 65946c44fed..72bb844aed6 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -297,6 +297,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index a0dbe7817ab..5530d107378 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -240,6 +240,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 08f77288207..ab81058179c 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -484,6 +484,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 4e2d7b25c05..4d08f4d76ec 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -571,6 +571,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 17328e047e0..8dfd45a2c90 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -179,6 +179,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 42c6749fa18..3d69bc801e5 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -338,6 +338,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 0f871b9cc19..05eec06d8a5 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -710,6 +710,6 @@ db.example.com.signed -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index 22044c2579f..21484b2314a 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -210,6 +210,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 5a434316878..0a22582b3c3 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -135,6 +135,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 4a05b121f28..84509321ae1 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -363,6 +363,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 64e94fe4a02..c5f0faeacf1 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -134,6 +134,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index bc19a980151..e0b08118f36 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -337,6 +337,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 9a0e66e800f..10cd369a2cb 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -200,6 +200,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index b1aa7dabb7e..22c72dee62a 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -471,6 +471,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index dc7616565cf..a2157781a7f 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -125,6 +125,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index eee0843c98b..f7829abfbf5 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -129,6 +129,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index d03bff8762a..ade59c3861b 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -382,6 +382,7 @@ options     [ break-dnssec boolean ] [ max-policy-ttl integer ] [
    min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
+ root-key-sentinel boolean;
rrset-order { [ class string ] [ type string ] [ name
    quoted_string ] string string; ... };
secroots-file quoted_string;
@@ -662,6 +663,7 @@ view     [ break-dnssec boolean ] [ max-policy-ttl integer ] [
    min-ns-dots integer ] [ qname-wait-recurse boolean ];
root-delegation-only [ exclude { quoted_string; ... } ];
+ root-key-sentinel boolean;
rrset-order { [ class string ] [ type string ] [ name
    quoted_string ] string string; ... };
serial-update-method ( increment | unixtime );
@@ -962,6 +964,6 @@ zone -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index aeb7a299b16..4c898324e57 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -477,6 +477,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 41e3d4bb146..e70e15bae7c 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -135,6 +135,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index c7530836cad..a24b7480c55 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -810,6 +810,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index ba5d4012fca..21f055e2b84 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -285,6 +285,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 14c0df41bd5..4a1b358d60b 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -276,6 +276,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index d8eff53fd1b..21bac647787 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -720,6 +720,6 @@ -

BIND 9.10.8rc1

+

BIND 9.10.8rc2

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 62973081419..a0c96ae2571 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -23,7 +23,7 @@

-Release Notes for BIND Version 9.10.8rc1

+Release Notes for BIND Version 9.10.8rc2

@@ -77,9 +77,13 @@ New Features

  • - Add root key sentinel support which enables resolvers to test - which trust anchors are configured for the root. To disable, add - 'root-key-sentinel no;' to named.conf. [GL #37] + named now supports the "root key sentinel" + mechanism. This enables validating resolvers to indicate + which trust anchors are configured for the root, so that + information about root key rollover status can be gathered. + To disable this feature, add + root-key-sentinel no; to + named.conf. [GL #37]

@@ -97,14 +101,24 @@

Bug Fixes

-
  • +
      +
    • +

      + named now rejects excessively large + incremental (IXFR) zone transfers in order to prevent + possible corruption of journal files which could cause + named to abort when loading zones. [GL #339] +

      +
      • +

    • rndc reload could cause named to leak memory if it was invoked before the zone loading actions from a previous rndc reload command were completed. [RT #47076]

      -
    +
    • +
diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index 20dae18eb01..0eecbfa355a 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index 279a76471ce..4409c4b1392 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.10.8rc1 +Release Notes for BIND Version 9.10.8rc2 Introduction @@ -29,9 +29,11 @@ Security Fixes New Features - * Add root key sentinel support which enables resolvers to test which - trust anchors are configured for the root. To disable, add - 'root-key-sentinel no;' to named.conf. [GL #37] + * named now supports the "root key sentinel" mechanism. This enables + validating resolvers to indicate which trust anchors are configured + for the root, so that information about root key rollover status can + be gathered. To disable this feature, add root-key-sentinel no; to + named.conf. [GL #37] Feature Changes @@ -39,6 +41,10 @@ Feature Changes Bug Fixes + * named now rejects excessively large incremental (IXFR) zone transfers + in order to prevent possible corruption of journal files which could + cause named to abort when loading zones. [GL #339] + * rndc reload could cause named to leak memory if it was invoked before the zone loading actions from a previous rndc reload command were completed. [RT #47076] diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 84efc9aa523..538f917c92a 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -64,9 +64,13 @@ - Add root key sentinel support which enables resolvers to test - which trust anchors are configured for the root. To disable, add - 'root-key-sentinel no;' to named.conf. [GL #37] + named now supports the "root key sentinel" + mechanism. This enables validating resolvers to indicate + which trust anchors are configured for the root, so that + information about root key rollover status can be gathered. + To disable this feature, add + root-key-sentinel no; to + named.conf. [GL #37] diff --git a/lib/bind9/api b/lib/bind9/api index 4d4f42200c5..27fce2847b3 100644 --- a/lib/bind9/api +++ b/lib/bind9/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 141 -LIBREVISION = 3 +LIBREVISION = 4 LIBAGE = 0 diff --git a/lib/dns/api b/lib/dns/api index 207477875e7..2ea33a9f619 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 193 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/isc/api b/lib/isc/api index 2e57dee789f..a4d222b4d03 100644 --- a/lib/isc/api +++ b/lib/isc/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 191 -LIBREVISION = 2 +LIBREVISION = 3 LIBAGE = 0 diff --git a/lib/isc/tests/Atffile b/lib/isc/tests/Atffile index db520d537a0..9c4d429a3a1 100644 --- a/lib/isc/tests/Atffile +++ b/lib/isc/tests/Atffile @@ -24,5 +24,5 @@ tp: socket_test tp: symtab_test tp: task_test tp: taskpool_test -tp: timer_test tp: time_test +tp: timer_test diff --git a/lib/isccfg/api b/lib/isccfg/api index 67678dd656f..0aaf5dfceb3 100644 --- a/lib/isccfg/api +++ b/lib/isccfg/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 145 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 1 diff --git a/version b/version index 20dee2ab45b..bfdc1d8746e 100644 --- a/version +++ b/version @@ -7,5 +7,5 @@ MAJORVER=9 MINORVER=10 PATCHVER=8 RELEASETYPE=rc -RELEASEVER=1 +RELEASEVER=2 EXTENSIONS=