From: Michal Nowak <mnowak@isc.org>
Date: Thu, 19 May 2022 08:55:42 +0000 (+0200)
Subject: Merge tag 'v9_19_1'
X-Git-Tag: v9.19.2~25
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c9aca34b1e1d9599e1bf82b0e942567ad783b0c1;p=thirdparty%2Fbind9.git

Merge tag 'v9_19_1'

BIND 9.19.1
---

c9aca34b1e1d9599e1bf82b0e942567ad783b0c1
diff --cc CHANGES
index 692ed6e7425,e804edbb955..94794987ed0
--- a/CHANGES
+++ b/CHANGES
@@@ -1,29 -1,8 +1,33 @@@
 +5892.	[cleanup]	Refactored the the hash tables in resolver.c to
 +			use the isc_ht API. [GL !6271]
 +
 +5891.	[func]		Key timing options for `dnssec-settime` and related
 +			utilities now accept "UNSET" times as printed by
 +			`dnssec-settime -p`. [GL #3361]
 +
 +5890.	[bug]		When the fetches-per-server quota was adjusted
 +			because of an authoritative server timing out more
 +			or less frequently, it was incorrectly set to 1
 +			rather than the intended value.  This has been
 +			fixed. [GL #3327]
 +
 +5889.	[cleanup]	Refactored and simplified the shutdown processes in
 +			dns_view, dns_resolver, dns_requestmgr, and dns_adb
 +			by reducing interdependencies between the objects.
 +			[GL !6278]
 +
 +5888.	[bug]		Only write key files if the dnssec-policy keymgr has
 +			changed the metadata. [GL #3302]
 +
 +5887.	[cleanup]	Remove the on-shutdown mechanics from isc_task API.
 +			Replace it by isc_task_send() when we are shutting
 +			down. [GL !6275]
 +
- 5886.	[placeholder]
+ 	--- 9.19.1 released ---
+ 
+ 5886.	[security]	Fix a crash in DNS-over-HTTPS (DoH) code caused by
+ 			premature TLS stream socket object deletion.
+ 			(CVE-2022-1183) [GL #3216]
  
  5885.	[bug]		RPZ NSIP and NSDNAME rule processing didn't handle stub
  			and static-stub zones at or above the query name.  This
diff --cc doc/arm/notes.rst
index 5673978a165,59b037dd452..ede9b5a9953
--- a/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@@ -36,7 -36,7 +36,8 @@@ The latest versions of BIND 9 software 
  https://www.isc.org/download/. There you will find additional
  information about each release, and source code.
  
 +.. include:: ../notes/notes-current.rst
+ .. include:: ../notes/notes-9.19.1.rst
  .. include:: ../notes/notes-9.19.0.rst
  
  .. _relnotes_license: