regen v9_11_0_patch

diff --git a/configure b/configure
index 56ee93248d024c7ce52f0400448d0a1abdf3d4a1..31e8b768424dbbae4bb8ad38d7fa1b01528ebc14 100755 (executable)
--- a/configure
+++ b/configure
@@ -1,5 +1,5 @@
 #! /bin/sh
-# Copyright (C) 1996-2016  Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 1996-2017  Internet Systems Consortium, Inc. ("ISC")
 #
 # This Source Code Form is subject to the terms of the Mozilla Public
 # License, v. 2.0. If a copy of the MPL was not distributed with this

diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html
index a592f1c1702eb5a9a0a1351bcfe85d5f00763280..30c52088db45388cdd68449cfe0861c5707f25d6 100644 (file)
--- a/doc/arm/Bv9ARM.ch01.html
+++ b/doc/arm/Bv9ARM.ch01.html
@@ -547,6 +547,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html
index 8092d55f4b8d04e4bd51b911a068539793ded40c..bd0c2e760bb06d7f5cb7a29cf1d08f0bd9d6984b 100644 (file)
--- a/doc/arm/Bv9ARM.ch02.html
+++ b/doc/arm/Bv9ARM.ch02.html
@@ -145,6 +145,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html
index 5d23600cf5bdc587b6fc18473bb19edbd502e593..391c3418fb4b9e8d296f93aa509fb4e2aa37e281 100644 (file)
--- a/doc/arm/Bv9ARM.ch03.html
+++ b/doc/arm/Bv9ARM.ch03.html
@@ -661,6 +661,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html
index 456c4316cb70435b944a2d2897cc92471f709c81..f8fb2b493d8c1a56c254d49bc686a804cd6a97d5 100644 (file)
--- a/doc/arm/Bv9ARM.ch04.html
+++ b/doc/arm/Bv9ARM.ch04.html
@@ -2674,6 +2674,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html
index 7de7a7101a76c4d7697d7bb4d1447cea9c80d592..8a2df803f8536d7381b835a98e9163f6ec58ab7a 100644 (file)
--- a/doc/arm/Bv9ARM.ch05.html
+++ b/doc/arm/Bv9ARM.ch05.html
@@ -136,6 +136,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html
index 9ad0d917531b34813eb4079873c73448e1a686d0..654e8bb61326b5237766342ce2a2ac884266a9f6 100644 (file)
--- a/doc/arm/Bv9ARM.ch06.html
+++ b/doc/arm/Bv9ARM.ch06.html
@@ -13550,6 +13550,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html
index 6679f70cfa5a15699400d551e35f0e9388230e38..0655a3aced5e7c523d053a0248e4dfa477ee7691 100644 (file)
--- a/doc/arm/Bv9ARM.ch07.html
+++ b/doc/arm/Bv9ARM.ch07.html
@@ -370,6 +370,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html
index 6163fd46c285f4104110f16e962e6aad9f04dfed..a728b81742d14f1f10becfe1ad66b805606fe6e4 100644 (file)
--- a/doc/arm/Bv9ARM.ch08.html
+++ b/doc/arm/Bv9ARM.ch08.html
@@ -126,6 +126,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 9184c90107c4cebc11e40567a7b7e4382d4e1d40..550757d4b5ee02b4157d8f612ea66cabe496a992 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -36,10 +36,11 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.0-P3</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.0-P4</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
@@ -52,13 +53,18 @@
 </div>
 <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.0-P3</h2></div></div></div>
+<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.0-P4</h2></div></div></div>
 <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_intro"></a>Introduction</h3></div></div></div>
 <p>
       This document summarizes changes since BIND 9.11.0:
     </p>
+<p>
+      BIND 9.11.0-P4 addresses the security issue described in
+      CVE-2017-3136, and updates the built in trusted keys for
+      the root zone.
+    </p>
 <p>
       BIND 9.11.0-P3 addresses the security issue described in
       CVE-2017-3135, and fixes a regression introduced in a prior
@@ -86,8 +92,42 @@
 </div>
 <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
+<p>
+      ICANN is in the process of introducing a new Key Signing Key (KSK) for
+      the global root zone. BIND has multiple methods for managing DNSSEC
+      trust anchors, with somewhat different behaviors. If the root
+      key is configured using the <span class="command"><strong>managed-keys</strong></span>
+      statement, or if the pre-configured root key is enabled by using
+      <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
+      keys up to date automatically. Servers configured in this way
+      will roll seamlessly to the new key when it is published in
+      the root zone. However, keys configured using the
+      <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
+      maintained. If your server is performing DNSSEC validation
+      and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
+      advised to change your configuration before the root zone begins
+      signing with the new KSK. This is currently scheduled for
+      October 11, 2017.
+    </p>
+<p>
+      This release includes an updated version of the
+      <code class="filename">bind.keys</code> file containing the new root
+      key. This file can also be downloaded from
+      <a class="link" href="https://www.isc.org/bind-keys" target="_top">
+       https://www.isc.org/bind-keys
+      </a>.
+    </p>
+</div>
+<div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
+         can result in an assertion failure. This flaw is disclosed in
+         CVE-2017-3136.[RT #44653]
+       </p></li>
 <li class="listitem"><p>
          If a server is configured with a response policy zone (RPZ)
          that rewrites an answer with local data, and is also configured
@@ -196,6 +236,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index b958d55191451d657d53f49b3ed35e5125dbb11d..159193c0e8e48b8981418b669e0d1fbf67ef201b 100644 (file)
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -147,6 +147,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html
index 9ca23d43f166b277705b82db3d10c84d7e61dce8..437bc7bf74eeb75fd2adba0baf1daa81cb1be254 100644 (file)
--- a/doc/arm/Bv9ARM.ch11.html
+++ b/doc/arm/Bv9ARM.ch11.html
@@ -489,6 +489,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html
index 28ebbaac52c9cce2090c2db84c8de473d181ddb3..c7a524ad26bb3ae72113dca4d94145a4486c81c9 100644 (file)
--- a/doc/arm/Bv9ARM.ch12.html
+++ b/doc/arm/Bv9ARM.ch12.html
@@ -535,6 +535,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html
index ff93ff5fd25ae8b0b9c26e4182fc989c902c6c9f..2fc166cef62d21be7075247294fb6de723e62a7e 100644 (file)
--- a/doc/arm/Bv9ARM.ch13.html
+++ b/doc/arm/Bv9ARM.ch13.html
@@ -175,6 +175,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index 91c8898bf6cae390495825e9cf39c0558f7bdbca..f38a8c2d77b6db556ab52e28f3edf557825b0c5b 100644 (file)
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.11.0-P3</p></div>
+<div><p class="releaseinfo">BIND Version 9.11.0-P4</p></div>
 <div><p class="copyright">Copyright © 2000-2015 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
@@ -241,10 +241,11 @@
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.0-P3</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.0-P4</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_features">New Features</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
@@ -416,6 +417,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf
index f3ed182695760607786c53a46840d35f40a05c2a..0d99f2c5b42ce0bcff41da5e87d3e846c1a78cfb 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ

diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index 831ab0e610b0be63d0808eaa70c08431c7237cc0..38b07cc03e88efa8ebe322ff646fda5f722f06fc 100644 (file)
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -73,6 +73,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index 487fc92b2afd66f27c122c3aad016709879ffc54..3e064072dbdc6ad4b6c5080eb9b6555ffb16690e 100644 (file)
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -177,6 +177,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html
index 9bc2b7ff317a66629f5198107c6d8a2c2fcd6aed..7fc2af470f5ceb639c25529db11a80ef2bd84f16 100644 (file)
--- a/doc/arm/man.delv.html
+++ b/doc/arm/man.delv.html
@@ -501,6 +501,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 627d80c7eaf0bf8300c73d6d55c654377d4f85dc..5a8f84ca326f1c6f66487084910d3acbf5976b18 100644 (file)
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -848,6 +848,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index 2c55e43f081e9aed1ebe4a44613eb723d7cdea10..165b3ec5f35afa911d29d56cae94ca97791aebcb 100644 (file)
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -104,6 +104,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index 1115d5f7756d00329940eb8f6d7a4f078b2823ff..4dd3f62427b78642ae47ccb6596ccccb6974cbe5 100644 (file)
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -221,6 +221,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index 28d76b84f3599f7b9e9187f612b35e42b4a60b73..a2412cfd2c96d9e58e30545855246edb79383cbc 100644 (file)
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -205,6 +205,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html
index 5e644ab1650b947d5dc64b85be44cd0bcf421d13..c8415f4f19d32afd939d53e1ba91065063bcaab5 100644 (file)
--- a/doc/arm/man.dnssec-importkey.html
+++ b/doc/arm/man.dnssec-importkey.html
@@ -179,6 +179,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index 1029f115d6dab6b6082798a8ef69f97687be8845..59e685e37d6f6ce2328ce8f6f6d45cbd6032d7a3 100644 (file)
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -383,6 +383,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index 2343413881eacf7e7237e8efaaeecec29bdfc401..9b49f4022351e29653b89156f81cf26bb92867f1 100644 (file)
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -457,6 +457,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html
index 201d6a07c1eeffe2d21db6483d1a22053b1a5562..26ef0af2b519d79c03862b39638d1eaf7d785905 100644 (file)
--- a/doc/arm/man.dnssec-keymgr.html
+++ b/doc/arm/man.dnssec-keymgr.html
@@ -309,6 +309,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index d40fd4fa3b7633c25d698d81888ef990770d6c68..30c8a5397edd21e6e82eaf11a17a2b3cf8881910 100644 (file)
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -126,6 +126,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index e3a662c3e5a9ac08d2969bfc664616074c0d4744..37f2d70cb863e446deb25e732409eac8af2bbbde 100644 (file)
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -269,6 +269,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 9e5b3db0d706a37b7cf93e34ed6266854317c2c1..881e76df8e6f44e281896f1cabc0096736c094b7 100644 (file)
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -559,6 +559,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html
index a4393edc4b47244a6ddea5952294c513f9d31ed1..48a0b8cae70ed647b0d46db634839c6188a498cb 100644 (file)
--- a/doc/arm/man.dnssec-verify.html
+++ b/doc/arm/man.dnssec-verify.html
@@ -156,6 +156,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html
index 3c20dc78728641b10f60228d4805c02a69b01d37..c50cd93fd9ffacc7a3fdc7690611a3a0db308e62 100644 (file)
--- a/doc/arm/man.dnstap-read.html
+++ b/doc/arm/man.dnstap-read.html
@@ -99,6 +99,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html
index ebd374ed1c59c898b6be43db6ef63d9bf8bfafda..3c3b869522be9cba94ee3575f8fd893d8cf17249 100644 (file)
--- a/doc/arm/man.genrandom.html
+++ b/doc/arm/man.genrandom.html
@@ -94,6 +94,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html
index 0f659c3c6c0eda3e73cf0d2181b489af0fccaa9c..bb354c60a87fa2be141b68fe3c41be96d54489ca 100644 (file)
--- a/doc/arm/man.host.html
+++ b/doc/arm/man.host.html
@@ -284,6 +284,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html
index 9a2b9ba53ba3fe6753f9c0593d869063b91d508d..4a9daf32a6146a4c8f6d5ec2fabf2718252aa13e 100644 (file)
--- a/doc/arm/man.isc-hmac-fixup.html
+++ b/doc/arm/man.isc-hmac-fixup.html
@@ -104,6 +104,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html
index a07803868d06150d29285de4a3fc7910c8e59bca..8acd1fa702cc0d7d998fc9567ce4b4a8f901b1c4 100644 (file)
--- a/doc/arm/man.lwresd.html
+++ b/doc/arm/man.lwresd.html
@@ -245,6 +245,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html
index 1bab35b1d15517f8b45e64e12e6a1216b82305a1..120a1a698398c6f1df0a5d32de6760ea70a9e1d3 100644 (file)
--- a/doc/arm/man.mdig.html
+++ b/doc/arm/man.mdig.html
@@ -459,6 +459,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html
index 21864ba0c47a3a645d2a261ef71f3f4feeff8392..d9a4ac598078d65e2155722143ead77079fc0b91 100644 (file)
--- a/doc/arm/man.named-checkconf.html
+++ b/doc/arm/man.named-checkconf.html
@@ -143,6 +143,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html
index 5110954e19531323681b2a0c389c1d57f3191aa2..219d9561c9d3f1e543755c3ee06536fb8faf40da 100644 (file)
--- a/doc/arm/man.named-checkzone.html
+++ b/doc/arm/man.named-checkzone.html
@@ -330,6 +330,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html
index a56f051c3ba9174996eb56518b76116e1e7f16dd..17c09ec9f0514fbe07a7173f05963de5087cba94 100644 (file)
--- a/doc/arm/man.named-journalprint.html
+++ b/doc/arm/man.named-journalprint.html
@@ -94,6 +94,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html
index 79404ba3d2518d5b528ae3fcc75198dccb35f8a3..c749b94e0a904de4b5524aa0a31256d150d23130 100644 (file)
--- a/doc/arm/man.named-nzd2nzf.html
+++ b/doc/arm/man.named-nzd2nzf.html
@@ -95,6 +95,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html
index f835eda19ef0768775c807dd3fb14f7911df27a3..5e17bcec6706df08a5b9a18e4d385e21bd0eafe1 100644 (file)
--- a/doc/arm/man.named-rrchecker.html
+++ b/doc/arm/man.named-rrchecker.html
@@ -96,6 +96,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html
index 9aa360dca421c8e49bc9e21fc4470fa0f2a473a0..95b09fa72040b4ee78d4497036e144420ec3f341 100644 (file)
--- a/doc/arm/man.named.conf.html
+++ b/doc/arm/man.named.conf.html
@@ -706,6 +706,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html
index e95b37ce6847b3c0eb375e13e908551a7668d3ea..283761b450ea04c8503fc00c4d0a2f4e4634146c 100644 (file)
--- a/doc/arm/man.named.html
+++ b/doc/arm/man.named.html
@@ -376,6 +376,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html
index 2e80e3c90340561d26a9129e55800a8284470b55..805bfd562e5daffd648e9c444854a0a65b0e0cef 100644 (file)
--- a/doc/arm/man.nsec3hash.html
+++ b/doc/arm/man.nsec3hash.html
@@ -99,6 +99,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html
index 97155db466a0a3a8f74e77d269cc5fe02ae0d597..a90bd5213d52656335d53ba0b4dab771b0132205 100644 (file)
--- a/doc/arm/man.nslookup.html
+++ b/doc/arm/man.nslookup.html
@@ -346,6 +346,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html
index 9d937789b4563d4df7ad608811e33e32d8017307..684089661f34b4fa53348f4551bd1c390eab3bf5 100644 (file)
--- a/doc/arm/man.nsupdate.html
+++ b/doc/arm/man.nsupdate.html
@@ -668,6 +668,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html
index 9dbb35e3a909bf18d33bd0a17f7c424712498a19..a251204ba79e6dbcb7edc5af3af68b7e18b3d3ea 100644 (file)
--- a/doc/arm/man.pkcs11-destroy.html
+++ b/doc/arm/man.pkcs11-destroy.html
@@ -116,6 +116,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html
index 8fd6c6537d4434b664f4d136db779e71c868b2f4..79ec0729a5d0d8a2f24b8aa6635c9ef9a7c590bc 100644 (file)
--- a/doc/arm/man.pkcs11-keygen.html
+++ b/doc/arm/man.pkcs11-keygen.html
@@ -140,6 +140,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html
index 37a4f4a518ddaf544f7c4a3381ce48d7bd836557..288bd3c2d27037a48fd40ead6145b90169a5c153 100644 (file)
--- a/doc/arm/man.pkcs11-list.html
+++ b/doc/arm/man.pkcs11-list.html
@@ -114,6 +114,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html
index 29ff75b642a7b600fa038ed7f94d5cea22bc2739..930a8164ffb9830db42631a9e068af9720b69431 100644 (file)
--- a/doc/arm/man.pkcs11-tokens.html
+++ b/doc/arm/man.pkcs11-tokens.html
@@ -87,6 +87,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html
index f9164e7e146cda5a7c4947af8365747444288dca..b0e7926c6e4448c8e5d229766fbaf60ecbbf64f4 100644 (file)
--- a/doc/arm/man.rndc-confgen.html
+++ b/doc/arm/man.rndc-confgen.html
@@ -216,6 +216,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html
index 7c6942c73bbdcaab52a36b712c1900bd1dc3b51b..02dd638cfdeaa68949a48f90601661a027ee59a6 100644 (file)
--- a/doc/arm/man.rndc.conf.html
+++ b/doc/arm/man.rndc.conf.html
@@ -238,6 +238,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html
index 6598aafbf5bf291a499af772080c84fc76bbe88b..85b268582bf518a325277736048044d4a619cd66 100644 (file)
--- a/doc/arm/man.rndc.html
+++ b/doc/arm/man.rndc.html
@@ -787,6 +787,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P3</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0-P4</p>
 </body>
 </html>

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index f37cddf69a22be92ede9e537e648397fe4b96d2b..9b618599a10d2a7bd5c102e213fe4b381478f03e 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -13,13 +13,18 @@
 </head>
 <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="article"><div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.11.0-P3</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.11.0-P4</h2></div></div></div>
 <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_intro"></a>Introduction</h3></div></div></div>
 <p>
       This document summarizes changes since BIND 9.11.0:
     </p>
+<p>
+      BIND 9.11.0-P4 addresses the security issue described in
+      CVE-2017-3136, and updates the built in trusted keys for
+      the root zone.
+    </p>
 <p>
       BIND 9.11.0-P3 addresses the security issue described in
       CVE-2017-3135, and fixes a regression introduced in a prior
@@ -47,8 +52,42 @@
 </div>
 <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
+<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
+<p>
+      ICANN is in the process of introducing a new Key Signing Key (KSK) for
+      the global root zone. BIND has multiple methods for managing DNSSEC
+      trust anchors, with somewhat different behaviors. If the root
+      key is configured using the <span class="command"><strong>managed-keys</strong></span>
+      statement, or if the pre-configured root key is enabled by using
+      <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep
+      keys up to date automatically. Servers configured in this way
+      will roll seamlessly to the new key when it is published in
+      the root zone. However, keys configured using the
+      <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
+      maintained. If your server is performing DNSSEC validation
+      and is configured using <span class="command"><strong>trusted-keys</strong></span>, you are
+      advised to change your configuration before the root zone begins
+      signing with the new KSK. This is currently scheduled for
+      October 11, 2017.
+    </p>
+<p>
+      This release includes an updated version of the
+      <code class="filename">bind.keys</code> file containing the new root
+      key. This file can also be downloaded from
+      <a class="link" href="https://www.isc.org/bind-keys" target="_top">
+       https://www.isc.org/bind-keys
+      </a>.
+    </p>
+</div>
+<div class="section">
+<div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
+         can result in an assertion failure. This flaw is disclosed in
+         CVE-2017-3136.[RT #44653]
+       </p></li>
 <li class="listitem"><p>
          If a server is configured with a response policy zone (RPZ)
          that rewrites an answer with local data, and is also configured

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf
index da77594c060ce439ef68c0ecd41677e984a633e9..975c2b77d64b75feefcb853b8791c299bb003147 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ