From: Tinderbox User Date: Thu, 4 Jan 2018 05:21:44 +0000 (+0000) Subject: regen v9_12_0_patch X-Git-Tag: v9.12.0rc2~3 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dad61b9a50756ee72ea14be845888baa416a1b35;p=thirdparty%2Fbind9.git regen v9_12_0_patch --- diff --git a/Kyuafile b/Kyuafile new file mode 100644 index 00000000000..70b2cffe177 --- /dev/null +++ b/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('lib/Kyuafile') diff --git a/README b/README index 371a2fdf8af..e49810c916c 100644 --- a/README +++ b/README @@ -7,11 +7,12 @@ Contents 3. Contributing to BIND 4. BIND 9.12 features 5. Building BIND - 6. Compile-time options - 7. Automated testing - 8. Documentation - 9. Change log -10. Acknowledgments + 6. macOS + 7. Compile-time options + 8. Automated testing + 9. Documentation +10. Change log +11. Acknowledgments Introduction @@ -165,6 +166,14 @@ BUILD_CPPFLAGS BUILD_LDFLAGS BUILD_LIBS +macOS + +Building on macOS assumes that the "Command Tools for Xcode" is installed. +This can be downloaded from https://developer.apple.com/download/more/ or +if you have Xcode already installed you can run "xcode-select --install". +This will add /usr/include to the system and install the compiler and +other tools so that they can be easily found. + Compile-time options To see a full list of configuration options, run configure --help. diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index c9c45427693..b7408e5c9b5 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -75,7 +75,7 @@ BIND version 9 software package for system administrators.

-

This version of the manual corresponds to BIND version 9.11.

+

This version of the manual corresponds to BIND version 9.12.

@@ -616,6 +616,6 @@
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index da9adf7bcde..10721b73f48 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -146,6 +146,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 5ba6dae2da7..592a1cf076d 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -759,6 +759,6 @@ controls { -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index ab1fdb237bc..68046fb0e9b 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 3de2c6ab1f9..40bcbf74ab6 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -81,6 +81,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 591f09fc518..9f18e4edd3f 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -14647,6 +14647,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index cf4ccec2ccd..5ba3a50a27a 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index e0c4aa76d3f..ade131232e6 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -136,6 +136,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 3e0ed3915f9..e61e04dd534 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -36,14 +36,16 @@

Table of Contents

-
Release Notes for BIND Version 9.12.0
+
Release Notes for BIND Version 9.12.0rc2
Introduction
Download
+
Security Fixes
New Features
Removed Features
Protocol Changes
Feature Changes
+
Bug Fixes
License
End of Life
Thank You
@@ -52,7 +54,7 @@

-Release Notes for BIND Version 9.12.0

+Release Notes for BIND Version 9.12.0rc2

@@ -61,7 +63,9 @@ BIND 9.12.0 is a new feature release of BIND. This document summarizes new features and functional changes that have been introduced on this branch, as well as features that have been - deprecated or removed. + deprecated or removed. With each development release leading + up to the final BIND 9.12.0 release, this document will be + updated with additional features added and bugs fixed.

@@ -79,6 +83,20 @@

+Security Fixes

+
  • +

    + Addresses could be referenced after being freed during resolver + processing, causing an assertion failure. The chances of this + happening were remote, but the introduction of a delay in + resolution increased them. This bug is disclosed in + CVE-2017-3145. [RT #46839] +

    +
+
+ +
+

New Features

  • @@ -727,6 +745,56 @@

    +Bug Fixes

    +
      +
    • +

      + Attempting to validate improperly unsigned CNAME responses + from secure zones could cause a validator loop. This caused + a delay in returning SERVFAIL and also increased the chances + of encountering the crash bug described in CVE-2017-3145. + [RT #46839] +

      +
      • +
    • +

      + Zones created with rndc addzone could + temporarily fail to inherit the allow-transfer + ACL set in the options section of + named.conf. [RT #46603] +

      +
      • +
    • +

      + The introduction of libns caused a bug + in which TCP client objects were not recycled after use, + leading to unconstrained memory growth. [RT #46029] +

      +
      • +
    • +

      + Some header files included <isc/util.h> incorrectly as + it pollutes with namespace with non ISC_ macros and this should + only be done by explicitly including <isc/util.h>. This + has been corrected. Some code may depend on <isc/util.h> + being implicitly included via other header files. Such + code should explicitly include <isc/util.h>. +

      +
      • +
    • +

      + named failed to properly determine whether + there were active KSK and ZSK keys for an algorithm when + update-check-ksk was true (which is the + default setting). This could leave records unsigned + when rolling keys. [RT #46743] [RT #46754] [RT #46774] +

      +
      • +
    +
    + +
    +

    License

    BIND is open source software licenced under the terms of the Mozilla @@ -794,6 +862,6 @@

    -

    BIND 9.12.0

    +

    BIND 9.12.0rc2

    diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 237effa0830..9960a86ff32 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -148,6 +148,6 @@
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 9968887ddfd..1fe0f9305ea 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -914,6 +914,6 @@
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 9fedfded48a..0dcb620828d 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index 5b82c666063..e2b74052e33 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -210,6 +210,6 @@
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 1233c8a8eb9..9268a9a9990 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.12.0

+

BIND Version 9.12.0rc2

Copyright © 2000-2017 Internet Systems Consortium, Inc. ("ISC")

@@ -236,14 +236,16 @@
A. Release Notes
-
Release Notes for BIND Version 9.12.0
+
Release Notes for BIND Version 9.12.0rc2
Introduction
Download
+
Security Fixes
New Features
Removed Features
Protocol Changes
Feature Changes
+
Bug Fixes
License
End of Life
Thank You
@@ -433,6 +435,6 @@
-

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index f5009b05792..19ec1aedf61 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 78f41c7b6f2..872fbf5f61b 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -90,6 +90,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 809ad6d53a8..096ee4897ac 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -235,6 +235,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 99b20d6ceb7..4fbbb49edda 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -625,6 +625,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index df4aa731111..bdbc82322e7 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -1101,6 +1101,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-cds.html b/doc/arm/man.dnssec-cds.html index 2efea41cfb5..34ceb34440f 100644 --- a/doc/arm/man.dnssec-cds.html +++ b/doc/arm/man.dnssec-cds.html @@ -365,6 +365,6 @@ nsupdate -l -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 5eb4f52cce7..13823db98d5 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -150,6 +150,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index c0f85a1fdef..191101b224f 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -270,6 +270,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 09e0ee77bcd..7f986afc1b0 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -289,6 +289,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index af0f6b09f00..fd2ab6259c0 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -250,6 +250,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 6b51098e113..9071f05577c 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -498,6 +498,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 072d3fba1cc..51ecebba8a4 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -596,6 +596,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index d93663ecf06..8a138f6e049 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -398,6 +398,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 1dd3d8ae661..a938b1801d6 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -171,6 +171,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 99141dd1086..9e523b936e5 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -349,6 +349,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 359916090fe..194b6bbc0ba 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -725,6 +725,6 @@ db.example.com.signed -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index f995bf2a39b..a649621390e 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -202,6 +202,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index 30a64e49ee0..4d25ebf4b48 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -143,6 +143,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 336fa92187d..0d59f123f2c 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -126,6 +126,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 3c5c775805b..626810a9820 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -375,6 +375,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index b7067ccdb96..c9583c5261a 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -610,6 +610,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 7d4e5bb429e..1688758c4c3 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -200,6 +200,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 2857d34f27c..6d414a0730c 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -463,6 +463,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 1bb8bb392aa..db83da51dcf 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -117,6 +117,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 541ac61d3de..e573a0fe9f3 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -119,6 +119,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 0c6fe8efb2a..676010ba4ea 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -121,6 +121,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index a44ee8977fd..f30108ab202 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -1039,6 +1039,6 @@ zone -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index a962abb8706..2f98700c0f9 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -492,6 +492,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index ed94ce8bd79..4ac5308584c 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -155,6 +155,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index 973e5e9768e..43dd2513865 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -420,6 +420,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index 386d5baef97..bac00ee7fae 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -832,6 +832,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index e1e2bffc5a1..ba7cf970538 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -162,6 +162,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index f5b34cf30ef..3e128ffe2b7 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -200,6 +200,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index 4e123fa3b22..139028778d2 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -158,6 +158,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 7bebf0860a8..f988ffcc4c3 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -123,6 +123,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index f6d9c34c398..13778c0d9f3 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -276,6 +276,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index b8b5d299c34..45a8bd8d830 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -268,6 +268,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index d3b2354aa9b..7c6872f8f13 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -1002,6 +1002,6 @@ -

BIND 9.12.0

+

BIND 9.12.0rc2

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 60c3c00a732..ed80e5c0515 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.12.0

+Release Notes for BIND Version 9.12.0rc2

@@ -24,7 +24,9 @@ BIND 9.12.0 is a new feature release of BIND. This document summarizes new features and functional changes that have been introduced on this branch, as well as features that have been - deprecated or removed. + deprecated or removed. With each development release leading + up to the final BIND 9.12.0 release, this document will be + updated with additional features added and bugs fixed.

@@ -42,6 +44,20 @@

+Security Fixes

+
  • +

    + Addresses could be referenced after being freed during resolver + processing, causing an assertion failure. The chances of this + happening were remote, but the introduction of a delay in + resolution increased them. This bug is disclosed in + CVE-2017-3145. [RT #46839] +

    +
+
+ +
+

New Features

  • @@ -690,6 +706,56 @@

    +Bug Fixes

    +
      +
    • +

      + Attempting to validate improperly unsigned CNAME responses + from secure zones could cause a validator loop. This caused + a delay in returning SERVFAIL and also increased the chances + of encountering the crash bug described in CVE-2017-3145. + [RT #46839] +

      +
      • +
    • +

      + Zones created with rndc addzone could + temporarily fail to inherit the allow-transfer + ACL set in the options section of + named.conf. [RT #46603] +

      +
      • +
    • +

      + The introduction of libns caused a bug + in which TCP client objects were not recycled after use, + leading to unconstrained memory growth. [RT #46029] +

      +
      • +
    • +

      + Some header files included <isc/util.h> incorrectly as + it pollutes with namespace with non ISC_ macros and this should + only be done by explicitly including <isc/util.h>. This + has been corrected. Some code may depend on <isc/util.h> + being implicitly included via other header files. Such + code should explicitly include <isc/util.h>. +

      +
      • +
    • +

      + named failed to properly determine whether + there were active KSK and ZSK keys for an algorithm when + update-check-ksk was true (which is the + default setting). This could leave records unsigned + when rolling keys. [RT #46743] [RT #46754] [RT #46774] +

      +
      • +
    +
    + +
    +

    License

    BIND is open source software licenced under the terms of the Mozilla diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index 9b41a986285..d40c8545749 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/lib/Kyuafile b/lib/Kyuafile new file mode 100644 index 00000000000..450d4d679aa --- /dev/null +++ b/lib/Kyuafile @@ -0,0 +1,8 @@ +syntax(2) +test_suite('bind9') + +include('dns/Kyuafile') +include('irs/Kyuafile') +include('isc/Kyuafile') +include('isccfg/Kyuafile') +include('ns/Kyuafile') diff --git a/lib/dns/Kyuafile b/lib/dns/Kyuafile new file mode 100644 index 00000000000..0739e3a60c6 --- /dev/null +++ b/lib/dns/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('tests/Kyuafile') diff --git a/lib/dns/tests/Kyuafile b/lib/dns/tests/Kyuafile new file mode 100644 index 00000000000..692acc0500f --- /dev/null +++ b/lib/dns/tests/Kyuafile @@ -0,0 +1,31 @@ +syntax(2) +test_suite('bind9') + +atf_test_program{name='acl_test'} +atf_test_program{name='db_test'} +atf_test_program{name='dbdiff_test'} +atf_test_program{name='dbiterator_test'} +atf_test_program{name='dbversion_test'} +atf_test_program{name='dh_test'} +atf_test_program{name='dispatch_test'} +atf_test_program{name='dnstap_test'} +atf_test_program{name='dstrandom_test'} +atf_test_program{name='geoip_test'} +atf_test_program{name='gost_test'} +atf_test_program{name='keytable_test'} +atf_test_program{name='master_test'} +atf_test_program{name='name_test'} +atf_test_program{name='nsec3_test'} +atf_test_program{name='peer_test'} +atf_test_program{name='private_test'} +atf_test_program{name='rbt_serialize_test'} +atf_test_program{name='rbt_test'} +atf_test_program{name='rdata_test'} +atf_test_program{name='rdataset_test'} +atf_test_program{name='rdatasetstats_test'} +atf_test_program{name='rsa_test'} +atf_test_program{name='time_test'} +atf_test_program{name='tsig_test'} +atf_test_program{name='update_test'} +atf_test_program{name='zonemgr_test'} +atf_test_program{name='zt_test'} diff --git a/lib/irs/Kyuafile b/lib/irs/Kyuafile new file mode 100644 index 00000000000..0739e3a60c6 --- /dev/null +++ b/lib/irs/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('tests/Kyuafile') diff --git a/lib/irs/tests/Kyuafile b/lib/irs/tests/Kyuafile new file mode 100644 index 00000000000..4ef71369e96 --- /dev/null +++ b/lib/irs/tests/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +atf_test_program{name='resconf_test'} diff --git a/lib/isc/Kyuafile b/lib/isc/Kyuafile new file mode 100644 index 00000000000..0739e3a60c6 --- /dev/null +++ b/lib/isc/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('tests/Kyuafile') diff --git a/lib/isc/tests/Kyuafile b/lib/isc/tests/Kyuafile new file mode 100644 index 00000000000..fce8cfbfa96 --- /dev/null +++ b/lib/isc/tests/Kyuafile @@ -0,0 +1,30 @@ +syntax(2) +test_suite('bind9') + +atf_test_program{name='aes_test'} +atf_test_program{name='buffer_test'} +atf_test_program{name='counter_test'} +atf_test_program{name='errno_test'} +atf_test_program{name='file_test'} +atf_test_program{name='hash_test'} +atf_test_program{name='heap_test'} +atf_test_program{name='ht_test'} +atf_test_program{name='inet_ntop_test'} +atf_test_program{name='lex_test'} +atf_test_program{name='mem_test'} +atf_test_program{name='netaddr_test'} +atf_test_program{name='parse_test'} +atf_test_program{name='pool_test'} +atf_test_program{name='print_test'} +atf_test_program{name='queue_test'} +atf_test_program{name='radix_test'} +atf_test_program{name='random_test'} +atf_test_program{name='regex_test'} +atf_test_program{name='result_test'} +atf_test_program{name='safe_test'} +atf_test_program{name='sockaddr_test'} +atf_test_program{name='socket_test'} +atf_test_program{name='symtab_test'} +atf_test_program{name='task_test'} +atf_test_program{name='taskpool_test'} +atf_test_program{name='time_test'} diff --git a/lib/isccfg/Kyuafile b/lib/isccfg/Kyuafile new file mode 100644 index 00000000000..0739e3a60c6 --- /dev/null +++ b/lib/isccfg/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('tests/Kyuafile') diff --git a/lib/isccfg/tests/Kyuafile b/lib/isccfg/tests/Kyuafile new file mode 100644 index 00000000000..342d25f4918 --- /dev/null +++ b/lib/isccfg/tests/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +atf_test_program{name='parser_test'} diff --git a/lib/ns/Kyuafile b/lib/ns/Kyuafile new file mode 100644 index 00000000000..0739e3a60c6 --- /dev/null +++ b/lib/ns/Kyuafile @@ -0,0 +1,4 @@ +syntax(2) +test_suite('bind9') + +include('tests/Kyuafile') diff --git a/lib/ns/tests/Kyuafile b/lib/ns/tests/Kyuafile new file mode 100644 index 00000000000..5e1fd4b5366 --- /dev/null +++ b/lib/ns/tests/Kyuafile @@ -0,0 +1,6 @@ +syntax(2) +test_suite('bind9') + +atf_test_program{name='listenlist_test'} +atf_test_program{name='notify_test'} +atf_test_program{name='query_test'}