From: Tinderbox User Date: Wed, 12 Feb 2020 14:42:14 +0000 (+0000) Subject: prep 9.11.16 X-Git-Tag: v9.11.16^2 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=aa55ef6c438757b99a4ec98c90091918ee877a96;p=thirdparty%2Fbind9.git prep 9.11.16 --- diff --git a/CHANGES b/CHANGES index 722ea7ebe55..b9fcbac5f8d 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.11.16 released --- + 5353. [doc] Document port and dscp parameters in forwarders configuration option. [GL #914] @@ -12,7 +14,7 @@ success for non-existent records. [GL #1540] 5348. [bug] dnssec-settime -Psync was not being honoured. - [GL !2893] + [GL !2925] --- 9.11.15 released --- diff --git a/README b/README index 5d1dcf424b9..f41207ac537 100644 --- a/README +++ b/README @@ -316,6 +316,10 @@ BIND 9.11.15 BIND 9.11.15 is a maintenance release. +BIND 9.11.16 + +BIND 9.11.16 is a maintenance release. + Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, diff --git a/README.md b/README.md index b4b9022494e..0ece31a7e3d 100644 --- a/README.md +++ b/README.md @@ -333,6 +333,10 @@ BIND 9.11.14 is a maintenance release. BIND 9.11.15 is a maintenance release. +#### BIND 9.11.16 + +BIND 9.11.16 is a maintenance release. + ### Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, diff --git a/bin/dig/nslookup.1 b/bin/dig/nslookup.1 index 752d52d98ba..84afa0758ef 100644 --- a/bin/dig/nslookup.1 +++ b/bin/dig/nslookup.1 @@ -233,7 +233,10 @@ Change the default TCP/UDP name server port to .RS 4 Change the type of the information query\&. .sp -(Default = A; abbreviations = q, ty) +(Default = A and then AAAA; abbreviations = q, ty) +.sp +\fBNote:\fR +It is only possible to specify one query type, only the default behavior looks up both when an alternative is not specified\&. .RE .PP \fB\fI[no]\fR\fR\fBrecurse\fR diff --git a/bin/dig/nslookup.html b/bin/dig/nslookup.html index dc8c5c236a2..9ec3e4bfd6c 100644 --- a/bin/dig/nslookup.html +++ b/bin/dig/nslookup.html @@ -229,17 +229,17 @@ nslookup -query=hinfo -timeout=10 The class specifies the protocol group of the information.

-

+

(Default = IN; abbreviation = cl)

[no]debug

- Turn on or off the display of the full response packet and - any intermediate response packets when searching. + Turn on or off the display of the full response packet and + any intermediate response packets when searching.

-

+

(Default = nodebug; abbreviation = [no]deb)

@@ -247,9 +247,9 @@ nslookup -query=hinfo -timeout=10

Turn debugging mode on or off. This displays more about - what nslookup is doing. + what nslookup is doing.

-

+

(Default = nod2)

@@ -267,7 +267,7 @@ nslookup -query=hinfo -timeout=10 names in the domain search list to the request until an answer is received.

-

+

(Default = search)

@@ -276,7 +276,7 @@ nslookup -query=hinfo -timeout=10

Change the default TCP/UDP name server port to value.

-

+

(Default = 53; abbreviation = po)

@@ -289,9 +289,15 @@ nslookup -query=hinfo -timeout=10

Change the type of the information query.

-

- (Default = A; abbreviations = q, ty) +

+ (Default = A and then AAAA; abbreviations = q, ty)

+

+ Note: It is + only possible to specify one query type, only + the default behavior looks up both when an + alternative is not specified. +

[no]recurse
@@ -300,16 +306,16 @@ nslookup -query=hinfo -timeout=10 have the information.

-

+

(Default = recurse; abbreviation = [no]rec)

ndots=number

- Set the number of dots (label separators) in a domain - that will disable searching. Absolute names always - stop searching. + Set the number of dots (label separators) in a domain + that will disable searching. Absolute names always + stop searching.

retry=number
@@ -331,21 +337,21 @@ nslookup -query=hinfo -timeout=10 Always use a virtual circuit when sending requests to the server.

-

+

(Default = novc)

[no]fail

- Try the next nameserver if a nameserver responds with - SERVFAIL or a referral (nofail) or terminate query - (fail) on such a response. -

-

+ Try the next nameserver if a nameserver responds with + SERVFAIL or a referral (nofail) or terminate query + (fail) on such a response. +

+

(Default = nofail)

-
+

diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8 index 577846d0b31..b375ce507da 100644 --- a/bin/dnssec/dnssec-keyfromlabel.8 +++ b/bin/dnssec/dnssec-keyfromlabel.8 @@ -86,7 +86,7 @@ Specifies the label for a key pair in the crypto hardware\&. .sp When BIND -9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&. It may be preceded by an optional OpenSSL engine name, followed by a colon, as in "pkcs11:\fIkeylabel\fR"\&. +9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&. .sp When BIND diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html index e40e879de60..59f39c8ad3c 100644 --- a/bin/dnssec/dnssec-keyfromlabel.html +++ b/bin/dnssec/dnssec-keyfromlabel.html @@ -140,9 +140,7 @@

When BIND 9 is built with OpenSSL-based PKCS#11 support, the label is an arbitrary string that - identifies a particular key. It may be preceded by an - optional OpenSSL engine name, followed by a colon, as in - "pkcs11:keylabel". + identifies a particular key.

When BIND 9 is built with native PKCS#11 diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index 646c04e296c..ebb63806dc0 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -616,6 +616,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index b07809d3b64..2d2ecf1fdb1 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -151,6 +151,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 14d1db54838..9b16a4fda09 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -759,6 +759,6 @@ controls { -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index d732e318c20..ade2e22139a 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2867,6 +2867,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 105229c25d6..e13b02ec8b3 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -142,6 +142,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 03a3a3c77de..84dfc60617b 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -2059,41 +2059,40 @@ category notify { null; }; The query-errors Category

The query-errors category is - specifically intended for debugging purposes: To identify - why and how specific queries result in responses which - indicate an error. - Messages of this category are therefore only logged - with debug levels. + used to indicate why and how specific queries resulted in + responses which indicate an error. Normally, these messages + will be logged at debug logging levels; + note, however, that if query logging is active, some will be + logged at info. The logging levels are + described below:

- At the debug levels of 1 or higher, each response with the - rcode of SERVFAIL is logged as follows: + At debug level 1 or higher - or at + info, when query logging is active - each + response with response code SERVFAIL will be logged as follows:

client 127.0.0.1#61502: query failed (SERVFAIL) for www.example.com/IN/AAAA at query.c:3880

- This means an error resulting in SERVFAIL was - detected at line 3880 of source file - query.c. - Log messages of this level will particularly - help identify the cause of SERVFAIL for an - authoritative server. + This means an error resulting in SERVFAIL was detected at line + 3880 of source file query.c. Log messages + of this level will particularly help identify the cause of + SERVFAIL for an authoritative server.

- At the debug levels of 2 or higher, detailed context - information of recursive resolutions that resulted in - SERVFAIL is logged. - The log message will look like as follows: + At debug level 2 or higher, detailed + context information about recursive resolutions that resulted in + SERVFAIL will be logged. The log message will look like this: 

 fetch completed at resolver.c:2970 for www.example.com/A
-in 30.000183: timed out/success [domain:example.com,
-referral:2,restart:7,qrysent:8,timeout:5,lame:0,neterr:0,
+in 10.000183: timed out/success [domain:example.com,
+referral:2,restart:7,qrysent:8,timeout:5,lame:0,quota:0,neterr:0,
 badresp:1,adberr:0,findfail:0,valfail:0]

@@ -2101,29 +2100,25 @@ badresp:1,adberr:0,findfail:0,valfail:0]

The first part before the colon shows that a recursive resolution for AAAA records of www.example.com completed - in 30.000183 seconds and the final result that led to the + in 10.000183 seconds and the final result that led to the SERVFAIL was determined at line 2970 of source file resolver.c.

The following part shows the detected final result and the - latest result of DNSSEC validation. - The latter is always success when no validation attempt - is made. - In this example, this query resulted in SERVFAIL probably - because all name servers are down or unreachable, leading - to a timeout in 30 seconds. - DNSSEC validation was probably not attempted. + latest result of DNSSEC validation. The latter is always + "success" when no validation attempt was made. In this example, + this query probably resulted in SERVFAIL because all name + servers are down or unreachable, leading to a timeout in 10 + seconds. DNSSEC validation was probably not attempted.

- The last part enclosed in square brackets shows statistics - information collected for this particular resolution - attempt. - The domain field shows the deepest zone - that the resolver reached; - it is the zone where the error was finally detected. - The meaning of the other fields is summarized in the - following table. + The last part, enclosed in square brackets, shows statistics + collected for this particular resolution attempt. + The domain field shows the deepest zone that + the resolver reached; it is the zone where the error was + finally detected. The meaning of the other fields is + summarized in the following table.

@@ -2200,6 +2195,18 @@ badresp:1,adberr:0,findfail:0,valfail:0] + +

quota

+ + +

+ The number of times the resolver was unable + to send a query because it had exceeded the + permissible fetch quota for a server. +

+ + +

neterr

@@ -2269,20 +2276,17 @@ badresp:1,adberr:0,findfail:0,valfail:0]

- At the debug levels of 3 or higher, the same messages - as those at the debug 1 level are logged for other errors - than SERVFAIL. - Note that negative responses such as NXDOMAIN are not - regarded as errors here. + At debug level 3 or higher, the same + messages as those at debug level 1 will be + logged for other errors than SERVFAIL. Note that negative + responses such as NXDOMAIN are not errors, and are not logged + at this debug level.

- At the debug levels of 4 or higher, the same messages - as those at the debug 2 level are logged for other errors - than SERVFAIL. - Unlike the above case of level 3, messages are logged for - negative responses. - This is because any unexpected results can be difficult to - debug in the recursion case. + At debug level 4 or higher, the + detailed context information logged at debug + level 2 will be logged for other errors than SERVFAIL and + for negative resonses such as NXDOMAIN.

@@ -4854,11 +4858,22 @@ options {
querylog

- Specify whether query logging should be started when named - starts. - If querylog is not specified, - then the query logging - is determined by the presence of the logging category queries. + Query logging provides a complete log of all incoming + queries and all query errors. This provides more insight + into the server's activity, but with a cost to + performance which may be significant on heavily-loaded + servers. +

+

+ The querylog option specifies + whether query logging should be active when + named first starts. + If querylog is not specified, then + query logging is determined by the presence of the + logging category queries. + Query logging can also be activated at runtime using the + command rndc querylog on, or + deactivated with rndc querylog off.

check-names
@@ -5111,9 +5126,11 @@ options {
forwarders

- Specifies the IP addresses to be used - for forwarding. The default is the empty list (no - forwarding). + Specifies a list of IP addresses to which queries shall be + forwarded. The default is the empty list (no forwarding). + Each address in the list can be associated with an optional + port number and/or DSCP value, and a default port number and + DSCP value can be set for the entire list.

@@ -7209,6 +7226,11 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; Specifying version none disables processing of the queries.

+

+ Setting version to any value + (including none) will also + disable queries for authors.bind TXT CH. +

hostname
@@ -14716,6 +14738,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 829d31c8b7b..77fe0defeca 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -400,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 236aeaf29d7..bc148d29af0 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -136,6 +136,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index ecc62de524b..d932caf8abe 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -36,11 +36,12 @@

Table of Contents

-
Release Notes for BIND Version 9.11.15
+
Release Notes for BIND Version 9.11.16
Introduction
Download
License Change
+
Notes for BIND 9.11.16
Notes for BIND 9.11.15
Notes for BIND 9.11.14
Notes for BIND 9.11.13
@@ -64,7 +65,7 @@

-Release Notes for BIND Version 9.11.15

+Release Notes for BIND Version 9.11.16

@@ -122,6 +123,22 @@

+Notes for BIND 9.11.16

+ +
+

+Bug Fixes

+
  • +

    + named crashed when it was queried for a + nonexistent name in the CHAOS class. [GL #1540] +

    +
+
+ +
+
+

Notes for BIND 9.11.15

@@ -2024,6 +2041,6 @@
-

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 90db26cd472..d80e3a3eee4 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -148,6 +148,6 @@
-

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 4bfd00a83c0..b682cd67ee5 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -914,6 +914,6 @@

-

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 726016720df..b01a811822d 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index 82a0bad9388..03a52d9a067 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -213,6 +213,6 @@
-

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 4e60ef94fec..e8766a0c623 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.11.15

+

BIND Version 9.11.16

Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")

@@ -241,11 +241,12 @@
A. Release Notes
-
Release Notes for BIND Version 9.11.15
+
Release Notes for BIND Version 9.11.16
Introduction
Download
License Change
+
Notes for BIND 9.11.16
Notes for BIND 9.11.15
Notes for BIND 9.11.14
Notes for BIND 9.11.13
@@ -453,6 +454,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index b505e9eed5d..491fe7fa11f 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 4160efaa114..c7e3fc9965e 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -91,6 +91,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 54887c31371..9307d1e4f44 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -236,6 +236,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 36038afe227..3f1ba1ec8d7 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -624,6 +624,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 70ccffd8165..47c971b9199 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -1143,6 +1143,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 1c5bbb4372d..393a7004c86 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -148,6 +148,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 35eb89d29d6..1aca25d431e 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -270,6 +270,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 7534a67d23b..00dbe0fcde4 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -352,6 +352,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 62607ad8105..21536796f52 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -250,6 +250,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 3cde013a8a1..88b7bde043b 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -158,9 +158,7 @@

When BIND 9 is built with OpenSSL-based PKCS#11 support, the label is an arbitrary string that - identifies a particular key. It may be preceded by an - optional OpenSSL engine name, followed by a colon, as in - "pkcs11:keylabel". + identifies a particular key.

When BIND 9 is built with native PKCS#11 @@ -492,6 +490,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index d7c29fb0d45..afe108e4969 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -583,6 +583,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index 28f4806c73a..c289d8cfd43 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -416,6 +416,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 6c69d5febcc..32d17c3ac48 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -171,6 +171,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 70862dff1c6..8122a20ad39 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -349,6 +349,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index cd31733769b..fa1f71886d4 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -708,6 +708,6 @@ db.example.com.signed -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index eeca6d5c552..b5755aafc07 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -202,6 +202,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index 6856f185fc1..6be3438cd9b 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -134,6 +134,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 6892fa91d04..a5ec0d8a150 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -127,6 +127,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index b8c5d095902..8f20814fa2b 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -366,6 +366,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 163b58c09c2..5db15c9dffe 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -126,6 +126,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index 94a15f5aa45..5a1ea5b17b2 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -329,6 +329,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index b6c6f12251e..75f65d7cf71 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -609,6 +609,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index ba8c8aebbe4..0e274ca0ed4 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -192,6 +192,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 32388acd84d..bb752bb46f8 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -463,6 +463,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 87bb1cf8a0e..52305470d75 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -117,6 +117,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 5b3f5b291bb..939b4028fb9 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -119,6 +119,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 86d52a26745..347af671d2e 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -121,6 +121,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 957d0a2b562..bd9a7ad5b48 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -1034,6 +1034,6 @@ zone -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 4a9c575ee9b..e8211eed8be 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -490,6 +490,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index e9ca0c1900b..dd8da3b43a9 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -131,6 +131,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index d9de9eeafc8..af5868b64e6 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -247,17 +247,17 @@ nslookup -query=hinfo -timeout=10 The class specifies the protocol group of the information.

-

+

(Default = IN; abbreviation = cl)

[no]debug

- Turn on or off the display of the full response packet and - any intermediate response packets when searching. + Turn on or off the display of the full response packet and + any intermediate response packets when searching.

-

+

(Default = nodebug; abbreviation = [no]deb)

@@ -265,9 +265,9 @@ nslookup -query=hinfo -timeout=10

Turn debugging mode on or off. This displays more about - what nslookup is doing. + what nslookup is doing.

-

+

(Default = nod2)

@@ -285,7 +285,7 @@ nslookup -query=hinfo -timeout=10 names in the domain search list to the request until an answer is received.

-

+

(Default = search)

@@ -294,7 +294,7 @@ nslookup -query=hinfo -timeout=10

Change the default TCP/UDP name server port to value.

-

+

(Default = 53; abbreviation = po)

@@ -307,9 +307,15 @@ nslookup -query=hinfo -timeout=10

Change the type of the information query.

-

- (Default = A; abbreviations = q, ty) +

+ (Default = A and then AAAA; abbreviations = q, ty)

+

+ Note: It is + only possible to specify one query type, only + the default behavior looks up both when an + alternative is not specified. +

[no]recurse
@@ -318,16 +324,16 @@ nslookup -query=hinfo -timeout=10 have the information.

-

+

(Default = recurse; abbreviation = [no]rec)

ndots=number

- Set the number of dots (label separators) in a domain - that will disable searching. Absolute names always - stop searching. + Set the number of dots (label separators) in a domain + that will disable searching. Absolute names always + stop searching.

retry=number
@@ -349,21 +355,21 @@ nslookup -query=hinfo -timeout=10 Always use a virtual circuit when sending requests to the server.

-

+

(Default = novc)

[no]fail

- Try the next nameserver if a nameserver responds with - SERVFAIL or a referral (nofail) or terminate query - (fail) on such a response. -

-

+ Try the next nameserver if a nameserver responds with + SERVFAIL or a referral (nofail) or terminate query + (fail) on such a response. +

+

(Default = nofail)

-
+

@@ -436,6 +442,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index d6c6517971a..922e49cbf6b 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -817,6 +817,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index 108fd366dd6..faee431fd11 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -162,6 +162,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index 9bd1b48d15e..ac65c9118d7 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -200,6 +200,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index c419123bf47..597b8c959bd 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -158,6 +158,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 3afdfaa9987..e7ac5e32776 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -119,6 +119,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 251f0da6e97..fdb9522e1a1 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -277,6 +277,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index 75bd4468c1e..0d0c2cb0fc0 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -268,6 +268,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 15692952064..7a1708a3f6b 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -894,6 +894,6 @@ -

BIND 9.11.15 (Extended Support Version)

+

BIND 9.11.16 (Extended Support Version)

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index c94dec18385..93a84589c34 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.11.15

+Release Notes for BIND Version 9.11.16

@@ -73,6 +73,22 @@

+Notes for BIND 9.11.16

+ +
+

+Bug Fixes

+
  • +

    + named crashed when it was queried for a + nonexistent name in the CHAOS class. [GL #1540] +

    +
+
+ +
+
+

Notes for BIND 9.11.15

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index b073f88c0d3..b7ecfa6ccff 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index 00a8404887d..47d5ff0bc08 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.11.15 +Release Notes for BIND Version 9.11.16 Introduction @@ -36,6 +36,13 @@ Those unsure whether or not the license change affects their use of BIND, or who wish to discuss how to comply with the license may contact ISC at https://www.isc.org/mission/contact/. +Notes for BIND 9.11.16 + +Bug Fixes + + * named crashed when it was queried for a nonexistent name in the CHAOS + class. [GL #1540] + Notes for BIND 9.11.15 Bug Fixes @@ -106,8 +113,8 @@ Bug Fixes * named-checkconf now correctly reports a missing dnstap-output option when dnstap is set. [GL #1136] - * Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL # - 1133] + * Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL + #1133] Notes for BIND 9.11.9 @@ -160,8 +167,8 @@ Feature Changes This combination of settings was never intended to work, but there was no check for it in the parser. This has been corrected; a warning is - now logged. (In BIND 9.15 and higher this error will be fatal.) [GL # - 868] + now logged. (In BIND 9.15 and higher this error will be fatal.) [GL + #868] Notes for BIND 9.11.6 @@ -355,8 +362,8 @@ Bug Fixes files. Such code should explicitly include . * Zones created with rndc addzone could temporarily fail to inherit the - allow-transfer ACL set in the options section of named.conf. [RT # - 46603] + allow-transfer ACL set in the options section of named.conf. [RT + #46603] * named failed to properly determine whether there were active KSK and ZSK keys for an algorithm when update-check-ksk was true (which is the @@ -485,21 +492,21 @@ Bug Fixes * A synthesized CNAME record appearing in a response before the associated DNAME could be cached, when it should not have been. This - was a regression introduced while addressing CVE-2016-8864. [RT # - 44318] + was a regression introduced while addressing CVE-2016-8864. [RT + #44318] * named could deadlock if multiple changes to NSEC/NSEC3 parameters for the same zone were being processed at the same time. [RT #42770] - * named could trigger an assertion when sending NOTIFY messages. [RT # - 44019] + * named could trigger an assertion when sending NOTIFY messages. [RT + #44019] * Referencing a nonexistent zone in a response-policy statement could cause an assertion failure during configuration. [RT #43787] * rndc addzone could cause a crash when attempting to add a zone with a - type other than master or slave. Such zones are now rejected. [RT # - 43665] + type other than master or slave. Such zones are now rejected. [RT + #43665] * named could hang when encountering log file names with large apparent gaps in version number (for example, when files exist called @@ -842,8 +849,8 @@ New Features for type ANY by implementing one of the strategies in "draft-ietf-dnsop-refuse-any": returning a single arbitrarily-selected RRset that matches the query name rather than returning all of the - matching RRsets. Thanks to Tony Finch for the contribution. [RT # - 41615] + matching RRsets. Thanks to Tony Finch for the contribution. [RT + #41615] * named now provides feedback to the owners of zones which have trust anchors configured (trusted-keys, managed-keys, dnssec-validation diff --git a/lib/dns/api b/lib/dns/api index 48195424366..66a72fbffa1 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 1109 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/irs/api b/lib/irs/api index 79bb9ebfc73..060936fe15b 100644 --- a/lib/irs/api +++ b/lib/irs/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 161 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/isc/api b/lib/isc/api index d94b0e60862..2edf29de3a8 100644 --- a/lib/isc/api +++ b/lib/isc/api @@ -8,6 +8,6 @@ # 9.10-sub: 180-189 # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 -LIBINTERFACE = 1104 -LIBREVISION = 2 +LIBINTERFACE = 1105 +LIBREVISION = 0 LIBAGE = 0 diff --git a/version b/version index 723efffb9d3..ffcdb90b1fd 100644 --- a/version +++ b/version @@ -5,7 +5,7 @@ PRODUCT=BIND DESCRIPTION="(Extended Support Version)" MAJORVER=9 MINORVER=11 -PATCHVER=15 +PATCHVER=16 RELEASETYPE= RELEASEVER= EXTENSIONS=