]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
prep 9.12.2rc2
authorTinderbox User <tbox@isc.org>
Thu, 28 Jun 2018 04:35:51 +0000 (04:35 +0000)
committerTinderbox User <tbox@isc.org>
Thu, 28 Jun 2018 04:42:37 +0000 (04:42 +0000)
66 files changed:
CHANGES
bin/named/named.conf.5
bin/named/named.conf.docbook
bin/named/named.conf.html
doc/arm/Bv9ARM.ch01.html
doc/arm/Bv9ARM.ch02.html
doc/arm/Bv9ARM.ch03.html
doc/arm/Bv9ARM.ch04.html
doc/arm/Bv9ARM.ch05.html
doc/arm/Bv9ARM.ch06.html
doc/arm/Bv9ARM.ch07.html
doc/arm/Bv9ARM.ch08.html
doc/arm/Bv9ARM.ch09.html
doc/arm/Bv9ARM.ch10.html
doc/arm/Bv9ARM.ch11.html
doc/arm/Bv9ARM.ch12.html
doc/arm/Bv9ARM.html
doc/arm/Bv9ARM.pdf
doc/arm/man.arpaname.html
doc/arm/man.ddns-confgen.html
doc/arm/man.delv.html
doc/arm/man.dig.html
doc/arm/man.dnssec-cds.html
doc/arm/man.dnssec-checkds.html
doc/arm/man.dnssec-coverage.html
doc/arm/man.dnssec-dsfromkey.html
doc/arm/man.dnssec-importkey.html
doc/arm/man.dnssec-keyfromlabel.html
doc/arm/man.dnssec-keygen.html
doc/arm/man.dnssec-keymgr.html
doc/arm/man.dnssec-revoke.html
doc/arm/man.dnssec-settime.html
doc/arm/man.dnssec-signzone.html
doc/arm/man.dnssec-verify.html
doc/arm/man.dnstap-read.html
doc/arm/man.genrandom.html
doc/arm/man.host.html
doc/arm/man.mdig.html
doc/arm/man.named-checkconf.html
doc/arm/man.named-checkzone.html
doc/arm/man.named-journalprint.html
doc/arm/man.named-nzd2nzf.html
doc/arm/man.named-rrchecker.html
doc/arm/man.named.conf.html
doc/arm/man.named.html
doc/arm/man.nsec3hash.html
doc/arm/man.nslookup.html
doc/arm/man.nsupdate.html
doc/arm/man.pkcs11-destroy.html
doc/arm/man.pkcs11-keygen.html
doc/arm/man.pkcs11-list.html
doc/arm/man.pkcs11-tokens.html
doc/arm/man.rndc-confgen.html
doc/arm/man.rndc.conf.html
doc/arm/man.rndc.html
doc/arm/notes.html
doc/arm/notes.pdf
doc/arm/notes.txt
doc/arm/notes.xml
doc/arm/options.grammar.xml
lib/bind9/api
lib/dns/api
lib/isc/api
lib/isc/tests/Atffile
lib/isccfg/api
version

diff --git a/CHANGES b/CHANGES
index b37d986e224ee2e5a1fe18f82c2a297ce7c949ab..849d8c80a5c80f1552c0d87d836e451b83baa437 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+       --- 9.12.2rc2 released ---
+
 4984.  [bug]           Improve handling of very large incremental
                        zone transfers to prevent journal corruption. [GL #339]
 
index 2a525dd757a42ed91a0d0926f5ba80c922b50984..6e512f7ac965fb4d5399c836ae4643cacdd517a2 100644 (file)
 .\"     Title: named.conf
 .\"    Author: 
 .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
-.\"      Date: 2017-10-26
+.\"      Date: 2018-06-21
 .\"    Manual: BIND9
 .\"    Source: ISC
 .\"  Language: English
 .\"
-.TH "NAMED\&.CONF" "5" "2017\-10\-26" "ISC" "BIND9"
+.TH "NAMED\&.CONF" "5" "2018\-06\-21" "ISC" "BIND9"
 .\" -----------------------------------------------------------------
 .\" * Define some portability stuff
 .\" -----------------------------------------------------------------
@@ -199,6 +199,7 @@ options {
            ] [ dscp \fIinteger\fR ];
        alt\-transfer\-source\-v6 ( \fIipv6_address\fR | * ) [ port ( \fIinteger\fR |
            * ) ] [ dscp \fIinteger\fR ];
+       answer\-cookie \fIboolean\fR;
        attach\-cache \fIstring\fR;
        auth\-nxdomain \fIboolean\fR; // default changed
        auto\-dnssec ( allow | maintain | off );
@@ -418,6 +419,7 @@ options {
            dnsrps\-enable \fIboolean\fR ] [ dnsrps\-options { \fIunspecified\-text\fR
            } ];
        root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
+       root\-key\-sentinel \fIboolean\fR;
        rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
            \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
        secroots\-file \fIquoted_string\fR;
@@ -751,6 +753,7 @@ view \fIstring\fR [ \fIclass\fR ] {
            dnsrps\-enable \fIboolean\fR ] [ dnsrps\-options { \fIunspecified\-text\fR
            } ];
        root\-delegation\-only [ exclude { \fIquoted_string\fR; \&.\&.\&. } ];
+       root\-key\-sentinel \fIboolean\fR;
        rrset\-order { [ class \fIstring\fR ] [ type \fIstring\fR ] [ name
            \fIquoted_string\fR ] \fIstring\fR \fIstring\fR; \&.\&.\&. };
        send\-cookie \fIboolean\fR;
index 350d867e7bf6d46940d73a4b4086c387143f113c..6970f9a0981e13f36686f37261d502a9f16cc3f9 100644 (file)
@@ -13,7 +13,7 @@
 
 <refentry xmlns:db="http://docbook.org/ns/docbook" version="5.0" xml:id="man.named.conf">
   <info>
-    <date>2017-10-26</date>
+    <date>2018-06-21</date>
   </info>
   <refentryinfo>
     <corpname>ISC</corpname>
@@ -192,6 +192,7 @@ options {
            ] [ dscp <replaceable>integer</replaceable> ];
        alt-transfer-source-v6 ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
            * ) ] [ dscp <replaceable>integer</replaceable> ];
+       answer-cookie <replaceable>boolean</replaceable>;
        attach-cache <replaceable>string</replaceable>;
        auth-nxdomain <replaceable>boolean</replaceable>; // default changed
        auto-dnssec ( allow | maintain | off );
@@ -411,6 +412,7 @@ options {
            dnsrps-enable <replaceable>boolean</replaceable> ] [ dnsrps-options { <replaceable>unspecified-text</replaceable>
            } ];
        root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       root-key-sentinel <replaceable>boolean</replaceable>;
        rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        secroots-file <replaceable>quoted_string</replaceable>;
@@ -728,6 +730,7 @@ view <replaceable>string</replaceable> [ <replaceable>class</replaceable> ] {
            dnsrps-enable <replaceable>boolean</replaceable> ] [ dnsrps-options { <replaceable>unspecified-text</replaceable>
            } ];
        root-delegation-only [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       root-key-sentinel <replaceable>boolean</replaceable>;
        rrset-order { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        send-cookie <replaceable>boolean</replaceable>;
index 9d280331ea7ee0daaa107415dc3948221e01112c..f50191450c609fe1b80a6ce9ec4a95729e4921e8 100644 (file)
@@ -180,6 +180,7 @@ options
        Â Â Â Â ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
        Â Â Â Â * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -399,6 +400,7 @@ options
        Â Â Â Â dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
        Â Â Â Â } ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
        Â Â Â Â <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -720,6 +722,7 @@ view
        Â Â Â Â dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
        Â Â Â Â } ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
        Â Â Â Â <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
index a7fb35d1370f433ebc646059366985f5be89035e..8f157925eabb6e19e596d53c4a9dcae7e2dcce00 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index b8300a7ef93ebf48763dfb6672a9647092cd403b..6556d1aef288e5394c7540a94be5052886d54aac 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index aca222e7edd6f7dcb53ebc574c68b752515ca823..68869d783afeeec207de6c9588e66f7058545f8f 100644 (file)
@@ -759,6 +759,6 @@ controls {
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index a5acaab811baecf01004b0db9d748a147a6db792..335d88e242549607fbd36335f955b64e7414e240 100644 (file)
@@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa.
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 7a7deebefb0980c2e5200910a10d15f0aa63b5dc..a9a607d48cfc8c0188c33289e2ca41da7f20878b 100644 (file)
@@ -2373,6 +2373,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
            ] [ dscp <em class="replaceable"><code>integer</code></em> ];
        <span class="command"><strong>alt-transfer-source-v6</strong></span> ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |
            * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];
+       <span class="command"><strong>answer-cookie</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>attach-cache</strong></span> <em class="replaceable"><code>string</code></em>;
        <span class="command"><strong>auth-nxdomain</strong></span> <em class="replaceable"><code>boolean</code></em>; // default changed
        <span class="command"><strong>auto-dnssec</strong></span> ( allow | maintain | off );
@@ -2592,6 +2593,7 @@ badresp:1,adberr:0,findfail:0,valfail:0]
            <span class="command"><strong>dnsrps-enable</strong></span> <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em>
            } ];
        <span class="command"><strong>root-delegation-only</strong></span> [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];
+       <span class="command"><strong>root-key-sentinel</strong></span> <em class="replaceable"><code>boolean</code></em>;
        <span class="command"><strong>rrset-order</strong></span> { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name
            <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };
        <span class="command"><strong>secroots-file</strong></span> <em class="replaceable"><code>quoted_string</code></em>;
@@ -4344,19 +4346,16 @@ options {
                   options level, not per-view.
                 </p>
                 <p>
-                  <span class="command"><strong>answer-cookie</strong></span> is only available
-                  as a temporary measure, for use when
-                  <span class="command"><strong>named</strong></span> shares an IP address
-                  with other servers that do not yet support DNS
-                  COOKIE.  A mismatch between servers on the same
-                  address is not expected to cause operational
-                  problems, but the option to disable COOKIE responses
-                  so that all servers have the same behavior is
-                  provided out of an abundance of caution. DNS COOKIE
-                  is an important security mechanism and should not be
-                  disabled unless absolutely necessary.  The
-                  <span class="command"><strong>answer-cookie</strong></span> option is obsolete
-                  as of BIND 9.13.
+                  <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
+                  temporary measure, for use when <span class="command"><strong>named</strong></span>
+                  shares an IP address with other servers that do not yet
+                  support DNS COOKIE.  A mismatch between servers on the
+                  same address is not expected to cause operational
+                  problems, but the option to disable COOKIE responses so
+                  that all servers have the same behavior is provided out
+                  of an abundance of caution. DNS COOKIE is an important
+                  security mechanism, and should not be disabled unless
+                  absolutely necessary.
                 </p>
               </dd>
 <dt><span class="term"><span class="command"><strong>send-cookie</strong></span></span></dt>
@@ -14701,6 +14700,6 @@ HOST-127.EXAMPLE. MX 0 .
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 3dab8748df584390884a9894eebc3c5b05f752be..c18d5d8a2d26c49ce597e59b2a485c8f92b71e72 100644 (file)
@@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; };
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index b3002b003b6e34a6fa38c5a79bd4a6b5f0307277..84aac06373ea35de56ed2a20bb327df1c0116e0f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index e5fbc382020e8a4ce12acc92a60e60ab7c42c26d..1c853c09140e194cd87255387f8e71fb10c4c171 100644 (file)
@@ -36,7 +36,7 @@
 <div class="toc">
 <p><b>Table of Contents</b></p>
 <dl class="toc">
-<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.12.2rc1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.12.2rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_download">Download</a></span></dt>
@@ -52,7 +52,7 @@
 </div>
       <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.9.2"></a>Release Notes for BIND Version 9.12.2rc1</h2></div></div></div>
+<a name="id-1.9.2"></a>Release Notes for BIND Version 9.12.2rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
        <p>
          Add the ability to not return a DNS COOKIE option when one
          is present in the request.  To prevent a cookie being returned
-         add 'answer-cookie no;' to named.conf. [GL #173]
+         add <span class="command"><strong>answer-cookie no;</strong></span> to
+         <code class="filename">named.conf</code>. [GL #173]
        </p>
        <p>
-         <span class="command"><strong>answer-cookie</strong></span> is only available as a
+         <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
          temporary measure, for use when <span class="command"><strong>named</strong></span>
          shares an IP address with other servers that do not yet
          support DNS COOKIE.  A mismatch between servers on the
          but the option to disable COOKIE responses so that all
          servers have the same behavior is provided out of an
          abundance of caution. DNS COOKIE is an important security
-         mechanism and should not be disabled unless absolutely
-         necessary.  The <span class="command"><strong>answer-cookie</strong></span> option
-         is obsolete as of BIND 9.13.
+         mechanism, and should not be disabled unless absolutely
+         necessary.
        </p>
       </li>
 </ul></div>
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> will now log a warning if the old
-         root DNSSEC key is explicitly configured and has not been updated.
-         [RT #43670]
-       </p>
-      </li>
 <li class="listitem">
        <p>
          BIND now can be compiled against libidn2 library to add
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
-<li class="listitem">
-       <p>
-         When answering authoritative queries, <span class="command"><strong>named</strong></span>
-         does not return the target of a cross-zone CNAME between two
-         locally served zones; this prevents accidental cache poisoning.
-         This same restriction was incorrectly applied to recursive
-         queries as well; this has been fixed. [RT #47078]
-       </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash when acting as a slave for a
-         catalog zone if zone contained a master definition without an IP
-         address. [RT #45999]
-       </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash due to a race condition when
-         rolling <span class="command"><strong>dnstap</strong></span> log files. [RT #46942]
-       </p>
-      </li>
-<li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         <span class="command"><strong>rndc reload</strong></span> could cause <span class="command"><strong>named</strong></span>
-         to leak memory if it was invoked before the zone loading actions
-         from a previous <span class="command"><strong>rndc reload</strong></span> command were
-         completed. [RT #47076]
+         <span class="command"><strong>named</strong></span> now rejects excessively large
+         incremental (IXFR) zone transfers in order to prevent
+         possible corruption of journal files which could cause
+         <span class="command"><strong>named</strong></span> to abort when loading zones. [GL #339]
        </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash when rolling a
-         <span class="command"><strong>dnstap</strong></span> log file. [RT #46942]
-       </p>
-      </li>
-</ul></div>
+      </li></ul></div>
   </div>
 
   <div class="section">
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 70d6c8d3e059ca96c209ee4455bbe07db626b980..d167709c1e6d5c58eb5751057b2641d3d61545d7 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index bc5def827029555615287eba6506576a6f6895ed..a76ad3ca1b464318c6c1e2e99ebc9b0d1d0fd40a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index f3218c4778b4bac84c0d864b871a7e5dc46d4aed..dec77075bb026fbf1609f336a25b3ee6ceac7665 100644 (file)
@@ -533,6 +533,6 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 654e25b07921e625037bdf6eb77380843695516f..182bbb412f8c3396888ceaa435bbb35acda53680 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index d94b5d0f502aacc29f90cf03c61c11aa819b60b4..9c6d7435e0bba93288b298363219c44272635f77 100644 (file)
@@ -32,7 +32,7 @@
 <div>
 <div><h1 class="title">
 <a name="id-1"></a>BIND 9 Administrator Reference Manual</h1></div>
-<div><p class="releaseinfo">BIND Version 9.12.2rc1</p></div>
+<div><p class="releaseinfo">BIND Version 9.12.2rc2</p></div>
 <div><p class="copyright">Copyright Â© 2000-2018 Internet Systems Consortium, Inc. ("ISC")</p></div>
 </div>
 <hr>
 </dl></dd>
 <dt><span class="appendix"><a href="Bv9ARM.ch08.html">A. Release Notes</a></span></dt>
 <dd><dl>
-<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.12.2rc1</a></span></dt>
+<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.12.2rc2</a></span></dt>
 <dd><dl>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_intro">Introduction</a></span></dt>
 <dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_download">Download</a></span></dt>
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index c0e946e77b2eb29758df40a8dc7c3d2e1558d707..40d2b2e0478a6e8ea650ac2bac7acc961003dc60 100644 (file)
Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ
index 8368e317c09321eaeb6f733d431f62f02dd697b9..48cbf0de48ec9fa7339a04d94664108ad8b5d32a 100644 (file)
@@ -90,6 +90,6 @@
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 19f8717771e4c711eb3dad0d2a7b9c6bcc2e7ad9..cb2168cabc2270372e248c8b8c2cb0ed81bb0758 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index ae764cc0cf1585b94722b1230203b807ff5d2649..eb80073c5ed170ebc3358c8778a0b2574f5f4e1e 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 4ad1fdeec5e2bcd8c0c42b4996892df0b984a1ea..e4f55e9f8bb0b0a8bc9f4e1450c9863f57e5a9c7 100644 (file)
@@ -1121,6 +1121,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index fa4998afc235a84461540145530d6cc9b30b0862..7f6cbdab180514356550bbcaac21961676fb2024 100644 (file)
@@ -376,6 +376,6 @@ nsupdate -l
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index b138b54865fe52ca626d3424b0209418619e361a..b5c683348da3b1bcdebc7d0179d17928244c96fd 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index de11f8c6d9fd26cad1bf4502c1bf6b181546f352..0d0a8ed68b67ec8d6818b7ef4d22c898e8ac37a9 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 311cb6bd30cba1ee13f460f74afde41b56508e98..b7a34841766b080dbe9083b8029536be840b7aaa 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index adbeb72531dd119c1ce1b5f26d2098b74389733d..4ae80ae3e33e992ce883d11cd39af00dcf1915cf 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index d4579071a5ec6bb62f74a49a9166b1de6ac3730b..334a2f1908cfe17fdc209453c531885e8fcdaa32 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index e16a8665ff3a56510d37f37e4f4ac0a793780400..faf4995eff1efe94a2073b56eca4191d61a5bc99 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index f1685404d77316f345fa1d94cc3ba7232f263758..fecf50c6b10b4e3fe77ca7a94c50a5e365419caf 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index eb47f591a4632a340251d00794f7e553141b7f87..20b9cfe728df2a1b70c7031afa5ed6938f1a7037 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 73d21ab8d146ea7e1003c42d8ff01e8596950f62..a1ffae94ae87b7d9786caeefddac82064a9f82b5 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 1e2dbb85eb84475ea55b1075d395cd3ac68a210f..b224f7ff968bb77dc50c8e4dcc3b99ed1d71149e 100644 (file)
@@ -725,6 +725,6 @@ db.example.com.signed
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 7e0c2504ff71e151de8c1ba7caf33c916522d899..019226ee98933a0d672dd12eebad9576d3ab743d 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 0b8108933c99989d88e3b0033b5a38568176a887..442de1c5876ad0e3855dde0265f0a470f7a2c469 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 70878e16a1def8ab67cff74bd4a16309f52fb405..97fee8e98e63ea060d067b98b44ba0d24b91427a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 1d5a1fb3dcf865495c9d9b3fb31c86c2b719b871..113ac2ff78b8f1882f2ceecc3611f622bcd831ac 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 43c6b7d8cb1afefb70cd24c4c8ce828eabcf2b34..148b6586e72149c51af119fc036448f11f2046c3 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 792637b84806152fcb470e23c16bc141b86fb55a..b54633ca78d3a2ae88e923ac3cb0aa14a8b197e6 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 9d6c99e5e1396d93181bde3cc4e554b720d65365..c50e0dfe955c2e3eea6fa4475dae1bb07f69e7f5 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index cf94f2b14feb3b282957da72586295abdb4b2e09..b2eb2775de11b9306bc410c319de74fe0dd1b347 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 65281f7a3518f7e6db727187543f8ffec2826d09..899f7ab7af3119cb7ac4b64bb01cbe2c218289a0 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 8b602c5c93c0d2f886e8f9648c6c709a79abccdc..79f39576e5b5578e72b687ae894f7af8179258f1 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index ba5b1b971b5c56f6f5f59186142d334592911725..6b4089c2e6df3623a1e650c06ba57b50139d05d1 100644 (file)
@@ -198,6 +198,7 @@ options
        Â Â Â Â ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
        alt-transfer-source-v6 ( <em class="replaceable"><code>ipv6_address</code></em> | * ) [ port ( <em class="replaceable"><code>integer</code></em> |<br>
        Â Â Â Â * ) ] [ dscp <em class="replaceable"><code>integer</code></em> ];<br>
+       answer-cookie <em class="replaceable"><code>boolean</code></em>;<br>
        attach-cache <em class="replaceable"><code>string</code></em>;<br>
        auth-nxdomain <em class="replaceable"><code>boolean</code></em>; // default changed<br>
        auto-dnssec ( allow | maintain | off );<br>
@@ -417,6 +418,7 @@ options
        Â Â Â Â dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
        Â Â Â Â } ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
        Â Â Â Â <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        secroots-file <em class="replaceable"><code>quoted_string</code></em>;<br>
@@ -738,6 +740,7 @@ view
        Â Â Â Â dnsrps-enable <em class="replaceable"><code>boolean</code></em> ] [ dnsrps-options { <em class="replaceable"><code>unspecified-text</code></em><br>
        Â Â Â Â } ];<br>
        root-delegation-only [ exclude { <em class="replaceable"><code>quoted_string</code></em>; ... } ];<br>
+       root-key-sentinel <em class="replaceable"><code>boolean</code></em>;<br>
        rrset-order { [ class <em class="replaceable"><code>string</code></em> ] [ type <em class="replaceable"><code>string</code></em> ] [ name<br>
        Â Â Â Â <em class="replaceable"><code>quoted_string</code></em> ] <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>string</code></em>; ... };<br>
        send-cookie <em class="replaceable"><code>boolean</code></em>;<br>
@@ -1052,6 +1055,6 @@ zone
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index c6e9874a0f36e4b1d26b338b4d5312151dc543cc..303040b5a8bcdc917785e2bfe1d71258964ce7cc 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 09e5125045e2b835baf8a090da4570c494260759..838fcda08c1a6f1af9a9555e02b0afc8e8556d1f 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index ebd0747639c1af0f2bbebb5ed3d14ea9cae83997..d2163f9a4adf26a9705861477aeae991cf5e9cef 100644 (file)
@@ -420,6 +420,6 @@ nslookup -query=hinfo  -timeout=10
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 94065a8f66a926128fac296e2cd23e80ef3268be..804bf1c2ec94e4c611058a322523b3a036b57339 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 4cd072b4e2eba924c7f835bc77e95c74d0a22ecd..4d9ffcfded4650eebfdb774f62e0fc6670640077 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 357f97995329203d3f8ebb883089790b4a816b89..849931d3c11bec7f34b59318601a05a102cc4814 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 77d82359dfc4a52f1198d738f3f2dfa38c6741ae..a1efb0f3ee805652db4c02faab5864775b44ca9a 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 47140b9d3987955b75b1c1f8319cd510ad32fa31..47f49bf6ed4bc494d871ec5acc9ff01f8bf13630 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 7f37f8ac4601e6f2226a8dffaf876d8f669621bb..ff2b44f1ecdd5b598c7b59aae964c83ec4c1a48c 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 2361b2714e63e22e7db68519a11e1295414076b1..3a7c863c8a31733ff56bd1abd4d169467f6c0b78 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index ff5263ff6b379389675150b88b7bf19f1513e5f2..8c169a203e89187f06a02f66842a252c72519354 100644 (file)
 </tr>
 </table>
 </div>
-<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc1</p>
+<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.12.2rc2</p>
 </body>
 </html>
index 3904176a0f90e0c71b52cca630defa104271494a..02d14fa33bf85fb793d742b6de428229bd2c9ae9 100644 (file)
@@ -15,7 +15,7 @@
 
   <div class="section">
 <div class="titlepage"><div><div><h2 class="title" style="clear: both">
-<a name="id-1.2"></a>Release Notes for BIND Version 9.12.2rc1</h2></div></div></div>
+<a name="id-1.2"></a>Release Notes for BIND Version 9.12.2rc2</h2></div></div></div>
   
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
        <p>
          Add the ability to not return a DNS COOKIE option when one
          is present in the request.  To prevent a cookie being returned
-         add 'answer-cookie no;' to named.conf. [GL #173]
+         add <span class="command"><strong>answer-cookie no;</strong></span> to
+         <code class="filename">named.conf</code>. [GL #173]
        </p>
        <p>
-         <span class="command"><strong>answer-cookie</strong></span> is only available as a
+         <span class="command"><strong>answer-cookie no</strong></span> is only intended as a
          temporary measure, for use when <span class="command"><strong>named</strong></span>
          shares an IP address with other servers that do not yet
          support DNS COOKIE.  A mismatch between servers on the
          but the option to disable COOKIE responses so that all
          servers have the same behavior is provided out of an
          abundance of caution. DNS COOKIE is an important security
-         mechanism and should not be disabled unless absolutely
-         necessary.  The <span class="command"><strong>answer-cookie</strong></span> option
-         is obsolete as of BIND 9.13.
+         mechanism, and should not be disabled unless absolutely
+         necessary.
        </p>
       </li>
 </ul></div>
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> will now log a warning if the old
-         root DNSSEC key is explicitly configured and has not been updated.
-         [RT #43670]
-       </p>
-      </li>
 <li class="listitem">
        <p>
          BIND now can be compiled against libidn2 library to add
   <div class="section">
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
-    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
-<li class="listitem">
-       <p>
-         When answering authoritative queries, <span class="command"><strong>named</strong></span>
-         does not return the target of a cross-zone CNAME between two
-         locally served zones; this prevents accidental cache poisoning.
-         This same restriction was incorrectly applied to recursive
-         queries as well; this has been fixed. [RT #47078]
-       </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash when acting as a slave for a
-         catalog zone if zone contained a master definition without an IP
-         address. [RT #45999]
-       </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash due to a race condition when
-         rolling <span class="command"><strong>dnstap</strong></span> log files. [RT #46942]
-       </p>
-      </li>
-<li class="listitem">
+    <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         <span class="command"><strong>rndc reload</strong></span> could cause <span class="command"><strong>named</strong></span>
-         to leak memory if it was invoked before the zone loading actions
-         from a previous <span class="command"><strong>rndc reload</strong></span> command were
-         completed. [RT #47076]
+         <span class="command"><strong>named</strong></span> now rejects excessively large
+         incremental (IXFR) zone transfers in order to prevent
+         possible corruption of journal files which could cause
+         <span class="command"><strong>named</strong></span> to abort when loading zones. [GL #339]
        </p>
-      </li>
-<li class="listitem">
-       <p>
-         <span class="command"><strong>named</strong></span> could crash when rolling a
-         <span class="command"><strong>dnstap</strong></span> log file. [RT #46942]
-       </p>
-      </li>
-</ul></div>
+      </li></ul></div>
   </div>
 
   <div class="section">
index 5530739c99a8328d8786e7847d74f8412aae775b..8c91150d85be62b9b3db64d6241a19fd14a65593 100644 (file)
Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ
index fad050590e725b105f66880ccd5e2fa33809af02..3fab5cb1586c76ea15ad2d5b33279fa962f10126 100644 (file)
@@ -1,4 +1,4 @@
-Release Notes for BIND Version 9.12.2rc1
+Release Notes for BIND Version 9.12.2rc2
 
 Introduction
 
@@ -46,23 +46,20 @@ New Features
     named.conf. [GL #37]
 
   * Add the ability to not return a DNS COOKIE option when one is present
-    in the request. To prevent a cookie being returned add 'answer-cookie
-    no;' to named.conf. [GL #173]
+    in the request. To prevent a cookie being returned add answer-cookie
+    no; to named.conf. [GL #173]
 
-    answer-cookie is only available as a temporary measure, for use when
+    answer-cookie no is only intended as a temporary measure, for use when
     named shares an IP address with other servers that do not yet support
     DNS COOKIE. A mismatch between servers on the same address is not
     expected to cause operational problems, but the option to disable
     COOKIE responses so that all servers have the same behavior is
     provided out of an abundance of caution. DNS COOKIE is an important
-    security mechanism and should not be disabled unless absolutely
-    necessary. The answer-cookie option is obsolete as of BIND 9.13.
+    security mechanism, and should not be disabled unless absolutely
+    necessary.
 
 Feature Changes
 
-  * named will now log a warning if the old root DNSSEC key is explicitly
-    configured and has not been updated. [RT #43670]
-
   * BIND now can be compiled against libidn2 library to add IDNA2008
     support. Previously BIND only supported IDNA2003 using (now obsolete)
     idnkit-1 library.
@@ -72,22 +69,9 @@ Feature Changes
 
 Bug Fixes
 
-  * When answering authoritative queries, named does not return the target
-    of a cross-zone CNAME between two locally served zones; this prevents
-    accidental cache poisoning. This same restriction was incorrectly
-    applied to recursive queries as well; this has been fixed. [RT #47078]
-
-  * named could crash when acting as a slave for a catalog zone if zone
-    contained a master definition without an IP address. [RT #45999]
-
-  * named could crash due to a race condition when rolling dnstap log
-    files. [RT #46942]
-
-  * rndc reload could cause named to leak memory if it was invoked before
-    the zone loading actions from a previous rndc reload command were
-    completed. [RT #47076]
-
-  * named could crash when rolling a dnstap log file. [RT #46942]
+  * named now rejects excessively large incremental (IXFR) zone transfers
+    in order to prevent possible corruption of journal files which could
+    cause named to abort when loading zones. [GL #339]
 
 License
 
index ffa8e4326e14cac16f31145547a43e3731881c04..66a56a340c9bd9ab343c58a7a624ef83d2308e36 100644 (file)
 
   <section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
     <itemizedlist>
-      <listitem>
-       <para>
-         <command>named</command> will now log a warning if the old
-         root DNSSEC key is explicitly configured and has not been updated.
-         [RT #43670]
-       </para>
-      </listitem>
       <listitem>
        <para>
          BIND now can be compiled against libidn2 library to add
          <command>named</command> to abort when loading zones. [GL #339]
        </para>
       </listitem>
-      <listitem>
-       <para>
-         When answering authoritative queries, <command>named</command>
-         does not return the target of a cross-zone CNAME between two
-         locally served zones; this prevents accidental cache poisoning.
-         This same restriction was incorrectly applied to recursive
-         queries as well; this has been fixed. [RT #47078]
-       </para>
-      </listitem>
-      <listitem>
-       <para>
-         <command>named</command> could crash when acting as a slave for a
-         catalog zone if zone contained a master definition without an IP
-         address. [RT #45999]
-       </para>
-      </listitem>
-      <listitem>
-       <para>
-         <command>named</command> could crash due to a race condition when
-         rolling <command>dnstap</command> log files. [RT #46942]
-       </para>
-      </listitem>
-      <listitem>
-       <para>
-         <command>rndc reload</command> could cause <command>named</command>
-         to leak memory if it was invoked before the zone loading actions
-         from a previous <command>rndc reload</command> command were
-         completed. [RT #47076]
-       </para>
-      </listitem>
-      <listitem>
-       <para>
-         <command>named</command> could crash when rolling a
-         <command>dnstap</command> log file. [RT #46942]
-       </para>
-      </listitem>
     </itemizedlist>
   </section>
 
index c7a58433e197da3d960ce36f90f5b219f1767f87..65c83559fea8d7a6b57d6e3736fe7c76ed2cdaa4 100644 (file)
@@ -31,6 +31,7 @@
            ] [ dscp <replaceable>integer</replaceable> ];
        <command>alt-transfer-source-v6</command> ( <replaceable>ipv6_address</replaceable> | * ) [ port ( <replaceable>integer</replaceable> |
            * ) ] [ dscp <replaceable>integer</replaceable> ];
+       <command>answer-cookie</command> <replaceable>boolean</replaceable>;
        <command>attach-cache</command> <replaceable>string</replaceable>;
        <command>auth-nxdomain</command> <replaceable>boolean</replaceable>; // default changed
        <command>auto-dnssec</command> ( allow | maintain | off );
            <command>dnsrps-enable</command> <replaceable>boolean</replaceable> ] [ dnsrps-options { <replaceable>unspecified-text</replaceable>
            } ];
        <command>root-delegation-only</command> [ exclude { <replaceable>quoted_string</replaceable>; ... } ];
+       <command>root-key-sentinel</command> <replaceable>boolean</replaceable>;
        <command>rrset-order</command> { [ class <replaceable>string</replaceable> ] [ type <replaceable>string</replaceable> ] [ name
            <replaceable>quoted_string</replaceable> ] <replaceable>string</replaceable> <replaceable>string</replaceable>; ... };
        <command>secroots-file</command> <replaceable>quoted_string</replaceable>;
index 720c4226338ce5ca382488750106ebc22ce9652b..915fa662e0477488ab403e634cd0be87e54116e4 100644 (file)
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 1200
-LIBREVISION = 6
+LIBREVISION = 7
 LIBAGE = 0
index b4b92a4a329a99a85e944d08f5faf8d101c49749..e9f5d5a794e3e10708fc8f022bbdf458167bab94 100644 (file)
@@ -8,6 +8,6 @@
 # 9.10-sub: 180-189
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
-LIBINTERFACE = 1205
+LIBINTERFACE = 1206
 LIBREVISION = 0
-LIBAGE = 0
+LIBAGE = 1
index 569fa225e76d699c0f8df12068adf33f06ae4140..cfd1d0e3ba634c1d4ff2778b3e4db573ac6315d9 100644 (file)
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 1203
-LIBREVISION = 2
+LIBREVISION = 3
 LIBAGE = 3
index 506c656e8fc3427cb7d025a90b40b4c97c26fad3..8681844d41152ef9ddf61ebd3ed333ab81852258 100644 (file)
@@ -29,5 +29,5 @@ tp: socket_test
 tp: symtab_test
 tp: task_test
 tp: taskpool_test
-tp: timer_test
 tp: time_test
+tp: timer_test
index 9d7ca6e0fdea4f221f3f866f569c96b7cb2afc33..3e53ccbeff458d4cc65b0affe105e86c7f4bb7a8 100644 (file)
@@ -9,5 +9,5 @@
 # 9.11: 160-169,1100-1199
 # 9.12: 1200-1299
 LIBINTERFACE = 1202
-LIBREVISION = 0
+LIBREVISION = 1
 LIBAGE = 2
diff --git a/version b/version
index 771320dd79096e92a190b9df51aee92ba40e3594..cd95289c969736983bda36db7f0f56f61cd5d27c 100644 (file)
--- a/version
+++ b/version
@@ -7,5 +7,5 @@ MAJORVER=9
 MINORVER=12
 PATCHVER=2
 RELEASETYPE=rc
-RELEASEVER=1
+RELEASEVER=2
 EXTENSIONS=