prep 9.16.3

diff --git a/CHANGES b/CHANGES
index e312e13567ac58cbcd8f46b0e2b7d3468552a3b7..f8acb5e1202bfb127b05deda607d48b1e5f33143 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -27,6 +27,8 @@
                        in server-addresses statements due to an uninitialized
                        DSCP value. [GL #1812]
 
+       --- 9.16.3 released ---
+
 5404.  [bug]           'named-checkconf -z' could incorrectly indicate
                        success if errors were found in one view but not in a
                        subsequent one. [GL #1807]

diff --git a/README b/README
index 3dfc9a59df1704e5401987fc7ccc427527dd7144..3cbe005316b4f30f78fbdf3b33472103439cda23 100644 (file)
--- a/README
+++ b/README
@@ -124,6 +124,19 @@ from the 9.15 development branch, updating the previous stable branch,
     DNSKEY format.
   * YAML output for dig, mdig, and delv.
 
+BIND 9.16.1
+
+BIND 9.16.1 is a maintenance release.
+
+BIND 9.16.2
+
+BIND 9.16.2 is a maintenance release.
+
+BIND 9.16.3
+
+BIND 9.16.3 is a maintenance release, and addresses the security
+vulnerabilities disclosed in CVE-2020-8616 and CVE-2020-8617.
+
 Building BIND
 
 Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,

diff --git a/README.md b/README.md
index d0db168a074d4866db458832497a25a0f8f8fefe..17a244d96b858b198b0748059440314f011b1660 100644 (file)
--- a/README.md
+++ b/README.md
@@ -140,6 +140,19 @@ branch, 9.14. New features include:
   DNSKEY format.
 * YAML output for `dig`, `mdig`, and `delv`.
 
+#### BIND 9.16.1
+
+BIND 9.16.1 is a maintenance release.
+
+#### BIND 9.16.2
+
+BIND 9.16.2 is a maintenance release.
+
+#### BIND 9.16.3
+
+BIND 9.16.3 is a maintenance release, and addresses the security
+vulnerabilities disclosed in CVE-2020-8616 and CVE-2020-8617.
+
 ### <a name="build"/> Building BIND
 
 Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler,

diff --git a/bin/named/named.conf.5 b/bin/named/named.conf.5
index c8d4504ef114944be88da671b10f3f2296369969..ca4b12ed042fb49362b6aae71ba1cd714b52d22f 100644 (file)
--- a/bin/named/named.conf.5
+++ b/bin/named/named.conf.5
@@ -175,7 +175,7 @@ logging {
 .\}
 .SH "MANAGED-KEYS"
 .PP
-Deprecated \- see DNSSEC\-KEYS\&.
+Deprecated \- see TRUST\-ANCHORS\&.
 .sp
 .if n \{\
 .RS 4
@@ -593,7 +593,7 @@ trust\-anchors { \fIstring\fR ( static\-key |
 .\}
 .SH "TRUSTED-KEYS"
 .PP
-Deprecated \- see DNSSEC\-KEYS\&.
+Deprecated \- see TRUST\-ANCHORS\&.
 .sp
 .if n \{\
 .RS 4

diff --git a/bin/named/named.conf.html b/bin/named/named.conf.html
index 95a38b453d20d03f9439c04ee850154dd21b7895..5b31d8f79c7c6d52d2cacfa766dd9b1cb373ee76 100644 (file)
--- a/bin/named/named.conf.html
+++ b/bin/named/named.conf.html
@@ -153,7 +153,7 @@ logging
 
   <div class="refsection">
 <a name="id-1.15"></a><h2>MANAGED-KEYS</h2>
-  <p>Deprecated - see DNSSEC-KEYS.</p>
+  <p>Deprecated - see TRUST-ANCHORS.</p>
     <div class="literallayout"><p><br>
 managed-keys { <em class="replaceable"><code>string</code></em> ( static-key<br>
     | initial-key | static-ds |<br>
@@ -542,7 +542,7 @@ trust-anchors
 
   <div class="refsection">
 <a name="id-1.22"></a><h2>TRUSTED-KEYS</h2>
-  <p>Deprecated - see DNSSEC-KEYS.</p>
+  <p>Deprecated - see TRUST-ANCHORS.</p>
     <div class="literallayout"><p><br>
 trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
     <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>

diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index 4298383e91951f75d22fd3b6db8a6d29e65fafaf..9a054b7020cd07ad9ad344e78057196753a4b632 100644 (file)
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -614,6 +614,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html
index 2c75636b5abb3972edab362907ca3df3bf76c4f8..5e9043788fa3703ad45e3ad2a48f65c50bb27c9e 100644 (file)
--- a/doc/arm/Bv9ARM.ch02.html
+++ b/doc/arm/Bv9ARM.ch02.html
@@ -146,6 +146,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html
index 0dae4b1cad250180318e586018b41e4aefc02893..25307c70edf41581fbe2eea6434e3ba24a9f948a 100644 (file)
--- a/doc/arm/Bv9ARM.ch03.html
+++ b/doc/arm/Bv9ARM.ch03.html
@@ -856,6 +856,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html
index 33bc104bc9dc5f85b8f8007f67df153e4a2fce32..05eda28be5d89d6a4497dc1fcd08399cb85e3feb 100644 (file)
--- a/doc/arm/Bv9ARM.ch04.html
+++ b/doc/arm/Bv9ARM.ch04.html
@@ -2915,6 +2915,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html
index 4f302633ce7373ea48eaea1c60fcff0f8363f26c..b000135f84777d26042705749985e18eb0847bf0 100644 (file)
--- a/doc/arm/Bv9ARM.ch05.html
+++ b/doc/arm/Bv9ARM.ch05.html
@@ -7191,10 +7191,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
                   Sets the maximum number of iterative queries that
                   may be sent while servicing a recursive query.
                   If more queries are sent, the recursive query
-                  is terminated and returns SERVFAIL. Queries to
-                  look up top level domains such as "com" and "net"
-                  and the DNS root zone are exempt from this limitation.
-                  The default is 75.
+                  is terminated and returns SERVFAIL.  The default is 75.
                 </p>
               </dd>
 <dt><span class="term"><span class="command"><strong>notify-delay</strong></span></span></dt>
@@ -15301,6 +15298,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index ea19939b8a9beff8f53eef9d09b564997152aa96..2f200693c8742d3259dd3aa7a0ce06fca951c5d4 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -360,6 +360,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index c248fcd6f46bff6f36ab312c5a9c476e54fd2f5e..477282f43b5d01243998006a4c4ded2465e3440c 100644 (file)
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -191,6 +191,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index c3a1baddd5cc6a1b3fb88b0ffe9df0eedf33f7ca..c945fd03160b2ad43276cd8c2474f07d90d1569c 100644 (file)
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -36,12 +36,13 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.16.2</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.16.3</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_versions">Note on Version Numbering</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_platforms">Supported Platforms</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.3">Notes for BIND 9.16.3</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.2">Notes for BIND 9.16.2</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.1">Notes for BIND 9.16.1</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.0">Notes for BIND 9.16.0</a></span></dt>
@@ -53,7 +54,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.9.2"></a>Release Notes for BIND Version 9.16.2</h2></div></div></div>
+<a name="id-1.9.2"></a>Release Notes for BIND Version 9.16.3</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -119,6 +120,140 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes-9.16.3"></a>Notes for BIND 9.16.3</h3></div></div></div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-security"></a>Security Fixes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          To prevent exhaustion of server resources by a maliciously configured
+          domain, the number of recursive queries that can be triggered by a
+          request before aborting recursion has been further limited. Root and
+          top-level domain servers are no longer exempt from the
+          <span class="command"><strong>max-recursion-queries</strong></span> limit. Fetches for missing
+          name server address records are limited to 4 for any domain. This
+          issue was disclosed in CVE-2020-8616. [GL #1388]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          Replaying a TSIG BADTIME response as a request could
+          trigger an assertion failure. This was disclosed in
+          CVE-2020-8617. [GL #1703]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-known"></a>Known Issues</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+        <p>
+          BIND crashes on startup when linked against libuv 1.36. This issue is
+          related to recvmmsg() support in libuv which was first included in
+          libuv 1.35. The problem was addressed in libuv 1.37, but the relevant
+          libuv code change requires a special flag to be set during library
+          initialization in order for recvmmsg() support to be enabled. This
+          BIND release sets that special flag when required, so recvmmsg()
+          support is now enabled when BIND is compiled against either libuv 1.35
+          or libuv &gt;= 1.37; libuv 1.36 is still not usable with BIND. [GL #1761]
+          [GL #1797]
+        </p>
+      </li></ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-changes"></a>Feature Changes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          BIND 9 no longer sets receive/send buffer sizes for UDP sockets,
+          relying on system defaults instead. [GL #1713]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The default rwlock implementation has been changed back to the native
+          BIND 9 rwlock implementation. [GL #1753]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The native PKCS#11 EdDSA implementation has been updated to PKCS#11
+          v3.0 and thus made operational again. Contributed by Aaron Thompson.
+          [GL !3326]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The OpenSSL ECDSA implementation has been updated to support PKCS#11
+          via OpenSSL engine (see engine_pkcs11 from libp11 project). [GL #1534]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The OpenSSL EdDSA implementation has been updated to support PKCS#11
+          via OpenSSL engine. Please note that an EdDSA-capable OpenSSL engine
+          is required and thus this code is only a proof-of-concept for the time
+          being. Contributed by Aaron Thompson. [GL #1763]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          Message IDs in inbound AXFR transfers are now checked for consistency.
+          Log messages are emitted for streams with inconsistent message IDs.
+          [GL #1674]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-bugs"></a>Bug Fixes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          A bug in dnstap initialization could prevent some dnstap data from
+          being logged, especially on recursive resolvers. [GL #1795]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When running on a system with support for Linux capabilities,
+          <span class="command"><strong>named</strong></span> drops root privileges very soon after system
+          startup. This was causing a spurious log message, "unable to set
+          effective uid to 0: Operation not permitted", which has now been
+          silenced. [GL #1042] [GL #1090]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When <span class="command"><strong>named-checkconf -z</strong></span> was run, it would sometimes
+          incorrectly set its exit code. It reflected the status of the last
+          view found; if zone-loading errors were found in earlier configured
+          views but not in the last one, the exit code indicated success.
+          Thanks to Graham Clinch. [GL #1807]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When built without LMDB support, <span class="command"><strong>named</strong></span> failed to
+          restart after a zone with a double quote (") in its name was added
+          with <span class="command"><strong>rndc addzone</strong></span>. Thanks to Alberto Fernández.
+          [GL #1695]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+</div>
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes-9.16.2"></a>Notes for BIND 9.16.2</h3></div></div></div>
 
   <div class="section">
@@ -558,6 +693,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 19595700353fd0ae3a85912e421fda516a63304e..da8f759cdee3c2110519a6f71619b79631a21572 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -148,6 +148,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index b2fbf0b03a46579fa06598303fc06b720204097c..0b3d20f95763daf2c767558e620bef700bac2a3d 100644 (file)
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -935,6 +935,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html
index b60ceff570061e79f7f15f6c1a923795adce7ee5..4a9f1fd3f479ad4b5edd6a48593c4da3e7a91a46 100644 (file)
--- a/doc/arm/Bv9ARM.ch11.html
+++ b/doc/arm/Bv9ARM.ch11.html
@@ -538,6 +538,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html
index b8bcdba19d793e71a9ce29aa3756c9f9d1f604f4..a6213203556adddffebbe5d49794eaecf454a07b 100644 (file)
--- a/doc/arm/Bv9ARM.ch12.html
+++ b/doc/arm/Bv9ARM.ch12.html
@@ -210,6 +210,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index c90a7afa31f039dcefe72565cd5e48bd84db1679..f3e0e1891ecdbdb88b8ab9caad0204c9999e84d6 100644 (file)
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.16.2</p></div>
+<div><p class="releaseinfo">BIND Version 9.16.3</p></div>
 <div><p class="copyright">Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
@@ -247,12 +247,13 @@
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch08.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.16.2</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.16.3</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_versions">Note on Version Numbering</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_platforms">Supported Platforms</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.3">Notes for BIND 9.16.3</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.2">Notes for BIND 9.16.2</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.1">Notes for BIND 9.16.1</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes-9.16.0">Notes for BIND 9.16.0</a></span></dt>
@@ -443,6 +444,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index afb58f529b476fe0f60bb1e8027bc63ce296dadd..b6c40c88a2ab71f83e7437540f6fef60bab39464 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ

diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 30bb1b9700b318b79313759f9172e02e8547f77f..e5662a87fc0de0d548102c143413373002eeec46 100644 (file)
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -90,6 +90,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index bae475ecbfdd5763454968165731816e9e930ff7..6b8d2b15ff8ac0980834c7df32de613e15513295 100644 (file)
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -220,6 +220,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html
index 71600ce98551c394c5b640f274e3f9a13e35c480..b7e0a43954255ad74e15b32a3480671b753d5a5e 100644 (file)
--- a/doc/arm/man.delv.html
+++ b/doc/arm/man.delv.html
@@ -621,6 +621,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 5eb80e13a47c6de155ea023f5ea4939ebee54c35..a2ff320000a28e9525d109363729ddefe8be5e97 100644 (file)
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -1188,6 +1188,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-cds.html b/doc/arm/man.dnssec-cds.html
index d412a31cf50d8fe4d0b438ade538c940f258c739..2eabdef4bb41fa69f9f8a4e761b884567fe63c38 100644 (file)
--- a/doc/arm/man.dnssec-cds.html
+++ b/doc/arm/man.dnssec-cds.html
@@ -376,6 +376,6 @@ nsupdate -l
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 6ff548a25d022edd8fc101c898747c03e3385913..960b7295ab6c64c7c27fc485477095e829507437 100644 (file)
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -156,6 +156,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index c2f66e2e5d8f7d96ec42d27d7d504c5d2eb0bc8a..d06bc05b532d0ff4a618f10f9b2b701afef4f613 100644 (file)
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -270,6 +270,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index 6bcf43a6f48d13110c49ede0945480b8a4fe4b69..6ac32308bdca04a2ef37f5eb5d57e43d50732a57 100644 (file)
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -341,6 +341,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html
index f5094deee56263477d7465ab5e9595dbff234b03..8bdcb413089a3e7b39acaab7e190e8452aa2d554 100644 (file)
--- a/doc/arm/man.dnssec-importkey.html
+++ b/doc/arm/man.dnssec-importkey.html
@@ -250,6 +250,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index b588a252ae7e9c20583763f5b64cf160c4bb154b..ffae95e153d5be180ba675cfa939d1583246f8cc 100644 (file)
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -496,6 +496,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index 72ac7a770e8b038d383467e70d306d2b1b87c85e..b542402643832418ece1f099ecade7e8ff916837 100644 (file)
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -589,6 +589,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html
index 76ca8a2be10920fa7d8d38d05c6cf6e44bca7eeb..8bc57fbff941f691c4a302e3f967452913ecad81 100644 (file)
--- a/doc/arm/man.dnssec-keymgr.html
+++ b/doc/arm/man.dnssec-keymgr.html
@@ -405,6 +405,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index 9003cd993c7298ae3724dc582afbd5c002b5597d..0518b8beeb6c4932358d83827632ff7e525862aa 100644 (file)
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -171,6 +171,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index 7f068fc68c355c856b6b6a145e25ccd6c4951277..d1583d3f0193b059ac58da3ff76ce74a9c7b74e1 100644 (file)
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -424,6 +424,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 926d2c93974ff2079e3f9b344decdd63f90c4e29..7405f119406a54257174944b69f6fa08a9ca7d6f 100644 (file)
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -707,6 +707,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index 8dacd4b449fb735d71b526899883b555ca433335..d92019c9678d168bb571c621f07e49ac01199fd8 100644 (file)
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -214,6 +214,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html
index f35f2a493271db53972685a7bb2fc8793620b3d5..274f429a396458df44bb9711cc9f487971ebc048 100644 (file)
--- a/doc/arm/man.dnstap-read.html
+++ b/doc/arm/man.dnstap-read.html
@@ -143,6 +143,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.filter-aaaa.html b/doc/arm/man.filter-aaaa.html
index 61bcfe88751146f15c3e98411e671a58c078d138..3a5fd218cdb65eae5d49d5a85d291358e4840030 100644 (file)
--- a/doc/arm/man.filter-aaaa.html
+++ b/doc/arm/man.filter-aaaa.html
@@ -168,6 +168,6 @@ plugin query "/usr/local/lib/filter-aaaa.so" {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index 23f276a274601114b468211b310e996b1e05687b..bc7de5e860aee15ec00ab22453fd93a2805235d6 100644 (file)
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -373,6 +373,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html
index db59a31d290a69874b450b989fb648dec9a9b802..d3786479249362c3b3eaf68c24b85dd4e9b85508 100644 (file)
--- a/doc/arm/man.mdig.html
+++ b/doc/arm/man.mdig.html
@@ -610,6 +610,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index 933a9741bcce527bff1100d3566fc1656de92dbc..85f59ff9787849936dcd943a7068c2c589dce0b4 100644 (file)
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -214,6 +214,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 14412ce0efcbd17f5298bad384f7bd3ee2092fec..27e1abc1bf4d26a9a8ca7a70d22b0480cf1dc88d 100644 (file)
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -463,6 +463,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index b9154efd54682776351343ef29029d1592c7328f..db879d1952a371273d031a61f859558b0de2dfcf 100644 (file)
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -117,6 +117,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html
index fd863c1e1731346a15d453790cadb2a2a090f51c..1ff4effb2fbec7afe419bfcc6b2abec362b1e30d 100644 (file)
--- a/doc/arm/man.named-nzd2nzf.html
+++ b/doc/arm/man.named-nzd2nzf.html
@@ -119,6 +119,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html
index ccd4e5276ea56c939ba8d02c5d703042cb408f60..a98014f43f4ea8c4b25334dc1c1a9e4c15e38d25 100644 (file)
--- a/doc/arm/man.named-rrchecker.html
+++ b/doc/arm/man.named-rrchecker.html
@@ -121,6 +121,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html
index 644528995434fc75f7986cffc49ac572e9a6a3fa..0ef0eb166beaaa80bdeb6561f68a65e84613611b 100644 (file)
--- a/doc/arm/man.named.conf.html
+++ b/doc/arm/man.named.conf.html
@@ -171,7 +171,7 @@ logging
 
   <div class="refsection">
 <a name="id-1.13.27.15"></a><h2>MANAGED-KEYS</h2>
-  <p>Deprecated - see DNSSEC-KEYS.</p>
+  <p>Deprecated - see TRUST-ANCHORS.</p>
     <div class="literallayout"><p><br>
 managed-keys { <em class="replaceable"><code>string</code></em> ( static-key<br>
     | initial-key | static-ds |<br>
@@ -560,7 +560,7 @@ trust-anchors
 
   <div class="refsection">
 <a name="id-1.13.27.22"></a><h2>TRUSTED-KEYS</h2>
-  <p>Deprecated - see DNSSEC-KEYS.</p>
+  <p>Deprecated - see TRUST-ANCHORS.</p>
     <div class="literallayout"><p><br>
 trusted-keys { <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>integer</code></em><br>
     <em class="replaceable"><code>integer</code></em> <em class="replaceable"><code>integer</code></em><br>
@@ -1097,6 +1097,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index f1e3efbe5eb406549aae7045d62c5aa3a9802c47..d6014f7c5ca8ae7f4bb066b44741c0a2eeade7e4 100644 (file)
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -492,6 +492,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index df93dacd2d5948db81d69378a1458254dbb82a67..0b5add853035f553d4e1f7510373b8193f3c96d9 100644 (file)
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -155,6 +155,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html
index dda993a9982f302b56ca9f0ea2628ce191426c05..e3a16aadfbcba71063a5810a3849af806f270809 100644 (file)
--- a/doc/arm/man.nslookup.html
+++ b/doc/arm/man.nslookup.html
@@ -443,6 +443,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 7f054204c73b2e3bede6bb6b40ef5de8f17a59bf..fbca296fd3259c188e4b8f2c6b70b186637be162 100644 (file)
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -818,6 +818,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html
index fc0fd550d74de74e63e8d0e42ef0388f395a40aa..2c545179f3a2616f1b2d72ba19380a8c5ea37109 100644 (file)
--- a/doc/arm/man.pkcs11-destroy.html
+++ b/doc/arm/man.pkcs11-destroy.html
@@ -162,6 +162,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html
index c376b6a56015ea701bf201447d2e6b499901d629..0a72cdefe785e72accc276191255fb0e0f5160a2 100644 (file)
--- a/doc/arm/man.pkcs11-keygen.html
+++ b/doc/arm/man.pkcs11-keygen.html
@@ -200,6 +200,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html
index f50e847b292c230f0253aa63d9c7211ca040397b..f71ec1b71a485ddb777371f575c78977daf6cdfc 100644 (file)
--- a/doc/arm/man.pkcs11-list.html
+++ b/doc/arm/man.pkcs11-list.html
@@ -158,6 +158,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html
index 2d12fac8953f23998e60a7b56ca6d08746319c54..83a81ef11447596ad1a960c882a855352a702f3a 100644 (file)
--- a/doc/arm/man.pkcs11-tokens.html
+++ b/doc/arm/man.pkcs11-tokens.html
@@ -123,6 +123,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index 6a6b0d655ae88c89de8404a96717fdafc6f2b97d..89e1ca6c6f4db006357c371e04c3ba3d4f3d5f33 100644 (file)
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -260,6 +260,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index fc9162ee8ed7ea08cba4463307e5f3e4d2636a1f..8a4055b748d0fd9e33df35f25211ae9a076ba480 100644 (file)
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -268,6 +268,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index a8ccebddb4742561bf9432abf7f6af377c3b1394..d7c37328ba1c46d99aee3cc1bcd1217065a6613d 100644 (file)
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -1021,6 +1021,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.2 (Stable Release)</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.16.3 (Stable Release)</p>
 </body>
 </html>

diff --git a/doc/arm/notes-9.16.3.xml b/doc/arm/notes-9.16.3.xml
index d57134b8e18d277beaa4dbae19d7a8a675eef469..999da883f39e8c8f66142fef513bf98f548831be 100644 (file)
--- a/doc/arm/notes-9.16.3.xml
+++ b/doc/arm/notes-9.16.3.xml
@@ -124,10 +124,11 @@
       </listitem>
       <listitem>
         <para>
-          When <command>named-checkconf</command> was run, it would sometimes
-          incorrectly set its exit code. It reflected only the status of the
-          last view found; any errors found for other configured views were not
-          reported. Thanks to Graham Clinch. [GL #1807]
+          When <command>named-checkconf -z</command> was run, it would sometimes
+          incorrectly set its exit code. It reflected the status of the last
+          view found; if zone-loading errors were found in earlier configured
+          views but not in the last one, the exit code indicated success.
+          Thanks to Graham Clinch. [GL #1807]
         </para>
       </listitem>
       <listitem>

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 136c47c5ada7716b3dd915bfe35bfb84da730362..1b903984fc515ca2ebd3e281a8d8a55c6f237cd2 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -15,7 +15,7 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.16.2</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.16.3</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
@@ -81,6 +81,140 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="relnotes-9.16.3"></a>Notes for BIND 9.16.3</h3></div></div></div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-security"></a>Security Fixes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          To prevent exhaustion of server resources by a maliciously configured
+          domain, the number of recursive queries that can be triggered by a
+          request before aborting recursion has been further limited. Root and
+          top-level domain servers are no longer exempt from the
+          <span class="command"><strong>max-recursion-queries</strong></span> limit. Fetches for missing
+          name server address records are limited to 4 for any domain. This
+          issue was disclosed in CVE-2020-8616. [GL #1388]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          Replaying a TSIG BADTIME response as a request could
+          trigger an assertion failure. This was disclosed in
+          CVE-2020-8617. [GL #1703]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-known"></a>Known Issues</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
+        <p>
+          BIND crashes on startup when linked against libuv 1.36. This issue is
+          related to recvmmsg() support in libuv which was first included in
+          libuv 1.35. The problem was addressed in libuv 1.37, but the relevant
+          libuv code change requires a special flag to be set during library
+          initialization in order for recvmmsg() support to be enabled. This
+          BIND release sets that special flag when required, so recvmmsg()
+          support is now enabled when BIND is compiled against either libuv 1.35
+          or libuv &gt;= 1.37; libuv 1.36 is still not usable with BIND. [GL #1761]
+          [GL #1797]
+        </p>
+      </li></ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-changes"></a>Feature Changes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          BIND 9 no longer sets receive/send buffer sizes for UDP sockets,
+          relying on system defaults instead. [GL #1713]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The default rwlock implementation has been changed back to the native
+          BIND 9 rwlock implementation. [GL #1753]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The native PKCS#11 EdDSA implementation has been updated to PKCS#11
+          v3.0 and thus made operational again. Contributed by Aaron Thompson.
+          [GL !3326]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The OpenSSL ECDSA implementation has been updated to support PKCS#11
+          via OpenSSL engine (see engine_pkcs11 from libp11 project). [GL #1534]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          The OpenSSL EdDSA implementation has been updated to support PKCS#11
+          via OpenSSL engine. Please note that an EdDSA-capable OpenSSL engine
+          is required and thus this code is only a proof-of-concept for the time
+          being. Contributed by Aaron Thompson. [GL #1763]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          Message IDs in inbound AXFR transfers are now checked for consistency.
+          Log messages are emitted for streams with inconsistent message IDs.
+          [GL #1674]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+  <div class="section">
+<div class="titlepage"><div><div><h4 class="title">
+<a name="relnotes-9.16.3-bugs"></a>Bug Fixes</h4></div></div></div>
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+        <p>
+          A bug in dnstap initialization could prevent some dnstap data from
+          being logged, especially on recursive resolvers. [GL #1795]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When running on a system with support for Linux capabilities,
+          <span class="command"><strong>named</strong></span> drops root privileges very soon after system
+          startup. This was causing a spurious log message, "unable to set
+          effective uid to 0: Operation not permitted", which has now been
+          silenced. [GL #1042] [GL #1090]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When <span class="command"><strong>named-checkconf -z</strong></span> was run, it would sometimes
+          incorrectly set its exit code. It reflected the status of the last
+          view found; if zone-loading errors were found in earlier configured
+          views but not in the last one, the exit code indicated success.
+          Thanks to Graham Clinch. [GL #1807]
+        </p>
+      </li>
+<li class="listitem">
+        <p>
+          When built without LMDB support, <span class="command"><strong>named</strong></span> failed to
+          restart after a zone with a double quote (") in its name was added
+          with <span class="command"><strong>rndc addzone</strong></span>. Thanks to Alberto Fernández.
+          [GL #1695]
+        </p>
+      </li>
+</ul></div>
+  </div>
+
+</div>
+  <div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes-9.16.2"></a>Notes for BIND 9.16.2</h3></div></div></div>
 
   <div class="section">

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf
index 09dce5486d4bb1158626062757e4a73446570249..da2f19f0f27b0a0209770fe15b0d5003b11d5563 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ

diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt
index 1a3e9f0494ebf7cdf1d319f5b1f03c75ed7f6044..97948e8764ae2f48b01d5c8dfd87fcc668507949 100644 (file)
--- a/doc/arm/notes.txt
+++ b/doc/arm/notes.txt
@@ -1,4 +1,4 @@
-Release Notes for BIND Version 9.16.2
+Release Notes for BIND Version 9.16.3
 
 Introduction
 
@@ -41,6 +41,77 @@ www.isc.org/download/. There you will find additional information about
 each release, source code, and pre-compiled versions for Microsoft Windows
 operating systems.
 
+Notes for BIND 9.16.3
+
+Security Fixes
+
+  * To prevent exhaustion of server resources by a maliciously configured
+    domain, the number of recursive queries that can be triggered by a
+    request before aborting recursion has been further limited. Root and
+    top-level domain servers are no longer exempt from the
+    max-recursion-queries limit. Fetches for missing name server address
+    records are limited to 4 for any domain. This issue was disclosed in
+    CVE-2020-8616. [GL #1388]
+
+  * Replaying a TSIG BADTIME response as a request could trigger an
+    assertion failure. This was disclosed in CVE-2020-8617. [GL #1703]
+
+Known Issues
+
+  * BIND crashes on startup when linked against libuv 1.36. This issue is
+    related to recvmmsg() support in libuv which was first included in
+    libuv 1.35. The problem was addressed in libuv 1.37, but the relevant
+    libuv code change requires a special flag to be set during library
+    initialization in order for recvmmsg() support to be enabled. This
+    BIND release sets that special flag when required, so recvmmsg()
+    support is now enabled when BIND is compiled against either libuv 1.35
+    or libuv >= 1.37; libuv 1.36 is still not usable with BIND. [GL #1761]
+    [GL #1797]
+
+Feature Changes
+
+  * BIND 9 no longer sets receive/send buffer sizes for UDP sockets,
+    relying on system defaults instead. [GL #1713]
+
+  * The default rwlock implementation has been changed back to the native
+    BIND 9 rwlock implementation. [GL #1753]
+
+  * The native PKCS#11 EdDSA implementation has been updated to PKCS#11
+    v3.0 and thus made operational again. Contributed by Aaron Thompson.
+    [GL !3326]
+
+  * The OpenSSL ECDSA implementation has been updated to support PKCS#11
+    via OpenSSL engine (see engine_pkcs11 from libp11 project). [GL #1534]
+
+  * The OpenSSL EdDSA implementation has been updated to support PKCS#11
+    via OpenSSL engine. Please note that an EdDSA-capable OpenSSL engine
+    is required and thus this code is only a proof-of-concept for the time
+    being. Contributed by Aaron Thompson. [GL #1763]
+
+  * Message IDs in inbound AXFR transfers are now checked for consistency.
+    Log messages are emitted for streams with inconsistent message IDs.
+    [GL #1674]
+
+Bug Fixes
+
+  * A bug in dnstap initialization could prevent some dnstap data from
+    being logged, especially on recursive resolvers. [GL #1795]
+
+  * When running on a system with support for Linux capabilities, named
+    drops root privileges very soon after system startup. This was causing
+    a spurious log message, "unable to set effective uid to 0: Operation
+    not permitted", which has now been silenced. [GL #1042] [GL #1090]
+
+  * When named-checkconf -z was run, it would sometimes incorrectly set
+    its exit code. It reflected the status of the last view found; if
+    zone-loading errors were found in earlier configured views but not in
+    the last one, the exit code indicated success. Thanks to Graham
+    Clinch. [GL #1807]
+
+  * When built without LMDB support, named failed to restart after a zone
+    with a double quote (") in its name was added with rndc addzone.
+    Thanks to Alberto Fern?ndez. [GL #1695]
+
 Notes for BIND 9.16.2
 
 Security Fixes

diff --git a/lib/bind9/api b/lib/bind9/api
index b7d9b2f34ec5bcbc48cafc3093292f73551ad6e5..8317b41e7d449128a205eb4a98240ab9935a12f6 100644 (file)
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -11,5 +11,5 @@
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
 LIBINTERFACE = 1600
-LIBREVISION = 1
+LIBREVISION = 2
 LIBAGE = 0

diff --git a/lib/dns/api b/lib/dns/api
index 4c4c4facc5dc81455939556453c64d2f36f0a385..67504c79bce4f1f0ac1fbf5e65576b1dc64768b6 100644 (file)
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -11,5 +11,5 @@
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
 LIBINTERFACE = 1602
-LIBREVISION = 0
+LIBREVISION = 1
 LIBAGE = 0

diff --git a/lib/isc/api b/lib/isc/api
index 4c4c4facc5dc81455939556453c64d2f36f0a385..2713ea8a60c8abf0be0fe0f997e5a67decee86f7 100644 (file)
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -10,6 +10,6 @@
 # 9.12: 1200-1299
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
-LIBINTERFACE = 1602
+LIBINTERFACE = 1603
 LIBREVISION = 0
 LIBAGE = 0

diff --git a/lib/isccc/api b/lib/isccc/api
index b7d9b2f34ec5bcbc48cafc3093292f73551ad6e5..8317b41e7d449128a205eb4a98240ab9935a12f6 100644 (file)
--- a/lib/isccc/api
+++ b/lib/isccc/api
@@ -11,5 +11,5 @@
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
 LIBINTERFACE = 1600
-LIBREVISION = 1
+LIBREVISION = 2
 LIBAGE = 0

diff --git a/version b/version
index 55f510bf33158e1a1dd52de166fcc830ddd8473e..6ba7fd3d86f804f069ed852274a6727b3d99df3a 100644 (file)
--- a/version
+++ b/version
@@ -5,7 +5,7 @@ PRODUCT=BIND
 DESCRIPTION="(Stable Release)"
 MAJORVER=9
 MINORVER=16
-PATCHVER=2
+PATCHVER=3
 RELEASETYPE=
 RELEASEVER=
 EXTENSIONS=