From: Tinderbox User Date: Fri, 13 Jul 2018 21:32:58 +0000 (+0000) Subject: prep 9.11.4-P1 X-Git-Tag: v9.11.5rc1~51^2~1 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=4b0b459e5bfff486bb345fb2b252e71c0a083d57;p=thirdparty%2Fbind9.git prep 9.11.4-P1 --- diff --git a/CHANGES b/CHANGES index 2a6ed0a1dc4..e7a4c852edf 100644 --- a/CHANGES +++ b/CHANGES @@ -27,6 +27,8 @@ 4990. [bug] Prevent a possible NULL reference in pkcs11-keygen. [GL #401] + --- 9.11.4-P1 released --- + 4997. [security] named could crash during recursive processing of DNAME records when "deny-answer-aliases" was in use. (CVE-2018-5740) [GL #387] diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index ea1c2b47465..47fe522cce1 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -616,6 +616,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index b3de7835a87..457e7cb2d1e 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -151,6 +151,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 16b4cfc0a3a..7beeef4a201 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -759,6 +759,6 @@ controls { -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 8be40f0e8ba..bb97165b350 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index aa88ee94fdc..3615fed5663 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -142,6 +142,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 1bba21b0be8..085daa7311f 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -14573,6 +14573,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 3ba7f5c0d45..4b347c1252e 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -399,6 +399,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 0dc1978cf6f..e99a4d23286 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -136,6 +136,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 9c417913ae2..ac1bcdb2a75 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -36,7 +36,7 @@

Table of Contents

-
Release Notes for BIND Version 9.11.4
+
Release Notes for BIND Version 9.11.4-P1
Introduction
Download
@@ -54,7 +54,7 @@

-Release Notes for BIND Version 9.11.4

+Release Notes for BIND Version 9.11.4-P1

@@ -122,7 +122,15 @@

Security Fixes

-
  • +
      +
    • +

      + named could crash during recursive processing + of DNAME records when deny-answer-aliases was + in use. This flaw is disclosed in CVE-2018-5740. [GL #387] +

      +
    • +
    • When recursion is enabled but the allow-recursion and allow-query-cache ACLs are not specified, they @@ -130,7 +138,8 @@ to match the default allow-query, thus allowing remote queries. This flaw is disclosed in CVE-2018-5738. [GL #309]

      -
    +
  • +
@@ -271,6 +280,6 @@
-

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index be069c728dc..faaf24389c7 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -148,6 +148,6 @@

-

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 08015f2fe58..beafa148d57 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -914,6 +914,6 @@
-

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index eacf3194c72..546dce80c87 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index 513bf47385d..5190275f7d9 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -213,6 +213,6 @@
-

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 18178c67384..298ad7a2be0 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.11.4

+

BIND Version 9.11.4-P1


@@ -241,7 +241,7 @@
A. Release Notes
-
Release Notes for BIND Version 9.11.4
+
Release Notes for BIND Version 9.11.4-P1
Introduction
Download
@@ -443,6 +443,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index 67ccad33d4f..23a0fbcf4b3 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 3eb2756f906..2f8a78a9479 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -91,6 +91,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index b295eb16c20..96f18cd36b1 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -236,6 +236,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 0b98d8d5ea2..5c723b509e9 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -624,6 +624,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 0723b3f2bff..3340eae54b7 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -1108,6 +1108,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index a71da27b750..51cf2d84605 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -148,6 +148,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 1f717744f80..df738dfe6b7 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -270,6 +270,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index a0da6facfc0..5332f50dde3 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -289,6 +289,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 74fafe64c64..179e1ada88b 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -250,6 +250,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 76c6c8fa127..3db6c8c492c 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -492,6 +492,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 837920ac884..a6e773cab5c 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -579,6 +579,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index d45139000d3..9af7c869d19 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -398,6 +398,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 55390358b59..a8b52aa3931 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -171,6 +171,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 94fe199d1a8..e470c4aee91 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -349,6 +349,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 328de004242..0646be01a70 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -708,6 +708,6 @@ db.example.com.signed -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index b8fc4876b48..3089a56341a 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -202,6 +202,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index b7c25889c7d..0285a125d5d 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -134,6 +134,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 2ceb374918c..f8295bdbd9a 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -127,6 +127,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 3d5a32b6977..6d06ea9cbd9 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -366,6 +366,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 4b2d73f8228..92895339947 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -126,6 +126,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index d48a817d1f3..496c7cae2a7 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -329,6 +329,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index 6cebb8644cb..59c17df0095 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -609,6 +609,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 001b43c4a97..b7da4b6e68b 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -192,6 +192,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 41734c6a7b7..2c087be3a23 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -463,6 +463,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index afb539b887a..78f99834948 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -117,6 +117,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 6ba57b0d28f..5caf67ca10d 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -119,6 +119,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 0058b42d35d..ed4c2de056d 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -121,6 +121,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index b1ebab4f49a..f42d62a067e 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -1035,6 +1035,6 @@ zone -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 41c519075e9..ee18a158887 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -490,6 +490,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index e2004b9e637..8099b0b2439 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -131,6 +131,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index 38d6f04bd33..955e78b820d 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -419,6 +419,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index ec3de48ccbb..7940d1ba6f6 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -817,6 +817,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index a5eda6b390f..1bcf34ade4c 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -162,6 +162,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index e7de6cbf171..ba10853498c 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -200,6 +200,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index 38c87c31e5e..557c27f0451 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -158,6 +158,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 5fea168d2ea..9cd50686adf 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -119,6 +119,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 5fc3526bfa7..b13633fe456 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -277,6 +277,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 4936643ceff..59b3e3940ea 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -268,6 +268,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 9b5c1acad98..9c715432838 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -889,6 +889,6 @@ -

BIND 9.11.4 (Extended Support Version)

+

BIND 9.11.4-P1 (Extended Support Version)

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index b64eb97acbb..30c0cba47c9 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.11.4

+Release Notes for BIND Version 9.11.4-P1

@@ -83,7 +83,15 @@

Security Fixes

-
  • +
      +
    • +

      + named could crash during recursive processing + of DNAME records when deny-answer-aliases was + in use. This flaw is disclosed in CVE-2018-5740. [GL #387] +

      +
    • +
    • When recursion is enabled but the allow-recursion and allow-query-cache ACLs are not specified, they @@ -91,7 +99,8 @@ to match the default allow-query, thus allowing remote queries. This flaw is disclosed in CVE-2018-5738. [GL #309]

      -
    +
  • +
diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index ad9a58887af..5e347585b4c 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index b6755e417dc..621a25e117d 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.11.4 +Release Notes for BIND Version 9.11.4-P1 Introduction @@ -41,6 +41,10 @@ from ISC. Security Fixes + * named could crash during recursive processing of DNAME records when + deny-answer-aliases was in use. This flaw is disclosed in + CVE-2018-5740. [GL #387] + * When recursion is enabled but the allow-recursion and allow-query-cache ACLs are not specified, they should be limited to local networks, but they were inadvertently set to match the default diff --git a/lib/dns/api b/lib/dns/api index e89674a0f7f..bd4f358686e 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 1103 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 1 diff --git a/version b/version index 112781d0ea8..d449f9e1973 100644 --- a/version +++ b/version @@ -6,6 +6,6 @@ DESCRIPTION="(Extended Support Version)" MAJORVER=9 MINORVER=11 PATCHVER=4 -RELEASETYPE= -RELEASEVER= +RELEASETYPE=-P +RELEASEVER=1 EXTENSIONS=