From: Tinderbox User Date: Mon, 7 Sep 2020 09:06:42 +0000 (+0000) Subject: prep 9.11.23 X-Git-Tag: v9.11.24~20^2~2^2 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=e7b0d5de157017f31605255b6c13ce41faaba56a;p=thirdparty%2Fbind9.git prep 9.11.23 --- diff --git a/CHANGES b/CHANGES index 57262ca0c08..a6e75743f0b 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.11.23 released --- + 5497. [bug] 'dig +bufsize=0' failed to disable EDNS. [GL #2054] 5496. [bug] Address a TSAN report by ensuring each rate limiter diff --git a/README b/README index a7e926f10b8..6e2f41a6a08 100644 --- a/README +++ b/README @@ -348,6 +348,10 @@ BIND 9.11.22 is a maintenance release, and also addresses the security vulnerabilities disclosed in CVE-2020-8622, CVE-2020-8623, and CVE-2020-8624. +BIND 9.11.23 + +BIND 9.11.23 is a maintenance release. + Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, @@ -611,7 +615,9 @@ Acknowledgments • This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. http://www.OpenSSL.org/ + • This product includes cryptographic software written by Eric Young (eay@cryptsoft.com) + • This product includes software written by Tim Hudson (tjh@cryptsoft.com) diff --git a/README.md b/README.md index d4d20bf49da..6e194b7571e 100644 --- a/README.md +++ b/README.md @@ -365,6 +365,10 @@ BIND 9.11.22 is a maintenance release, and also addresses the security vulnerabilities disclosed in CVE-2020-8622, CVE-2020-8623, and CVE-2020-8624. +#### BIND 9.11.23 + +BIND 9.11.23 is a maintenance release. + ### Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, diff --git a/bin/dig/dig.1 b/bin/dig/dig.1 index 08f4783b91e..6c8faeddf94 100644 --- a/bin/dig/dig.1 +++ b/bin/dig/dig.1 @@ -351,9 +351,15 @@ Attempt to display the contents of messages which are malformed\&. The default i .PP \fB+bufsize=B\fR .RS 4 -Set the UDP message buffer size advertised using EDNS0 to +This option sets the UDP message buffer size advertised using EDNS0 to \fIB\fR -bytes\&. The maximum and minimum sizes of this buffer are 65535 and 0 respectively\&. Values outside this range are rounded up or down appropriately\&. Values other than zero will cause a EDNS query to be sent\&. +bytes\&. The maximum and minimum sizes of this buffer are 65535 and 0, respectively\&. ++bufsize=0 +disables EDNS (use ++bufsize=0 +edns +to send a EDNS messages with a advertised size of 0 bytes)\&. ++bufsize +restores the default buffer size\&. .RE .PP \fB+[no]cdflag\fR diff --git a/bin/dig/dig.html b/bin/dig/dig.html index 89ced29af0a..fb9f2321cc7 100644 --- a/bin/dig/dig.html +++ b/bin/dig/dig.html @@ -463,12 +463,14 @@
+bufsize=B

- Set the UDP message buffer size advertised using EDNS0 - to B bytes. The maximum and - minimum sizes of this buffer are 65535 and 0 respectively. - Values outside this range are rounded up or down - appropriately. Values other than zero will cause a - EDNS query to be sent. + This option sets the UDP message buffer size advertised + using EDNS0 to B bytes. The + maximum and minimum sizes of this buffer are 65535 + and 0, respectively. +bufsize=0 + disables EDNS (use +bufsize=0 +edns + to send a EDNS messages with a advertised size of 0 + bytes). +bufsize restores the + default buffer size.

+[no]cdflag
diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index dffc85142e8..dde8a22e1ec 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -633,6 +633,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 031cb49c47e..516cdac6465 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -150,6 +150,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 6a3d091104e..7cd240b9f16 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -752,6 +752,6 @@ controls { -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 885302a89ae..8993a75ec6c 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2861,6 +2861,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 030566f8210..9d98983a1b5 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -136,6 +136,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index ac56f0c148f..9bd9ef82347 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -13666,6 +13666,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 63f7574e6fc..67dc8289e2b 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -400,6 +400,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index f0625658fd4..e597887f788 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -136,6 +136,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 0c9f207d864..cd4cd3114ad 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -36,11 +36,12 @@

Table of Contents

-
Release Notes for BIND Version 9.11.22
+
Release Notes for BIND Version 9.11.23
Introduction
Download
License Change
+
Notes for BIND 9.11.23
Notes for BIND 9.11.22
Notes for BIND 9.11.21
Notes for BIND 9.11.20
@@ -71,7 +72,7 @@

-Release Notes for BIND Version 9.11.22

+Release Notes for BIND Version 9.11.23

@@ -129,6 +130,33 @@

+Notes for BIND 9.11.23

+ +
+

+Bug Fixes

+
    +
  • +

    + Parsing of LOC records was made more strict by rejecting a sole period + (.) and/or m as a value. + These changes prevent zone files using such values from being loaded. + Handling of negative altitudes which are not integers was also + corrected. [GL #2074] +

    +
    • +
  • +

    + Several problems found by OSS-Fuzz were + fixed. (None of these are security issues.) [GL !3953] [GL !3975] +

    +
    • +
+
+ +
+
+

Notes for BIND 9.11.22

@@ -2364,6 +2392,6 @@
-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index cf3414990d7..caa6a8b1661 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -149,6 +149,6 @@
-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index b2758860676..51341e65032 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -929,6 +929,6 @@

-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 5521522a32c..2f4e7a6c3c1 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index c72e3b2ff3e..f23f08aedfe 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -214,6 +214,6 @@
-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index e7c6186f126..157046d4bd7 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.11.22

+

BIND Version 9.11.23

Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")

@@ -241,11 +241,12 @@
A. Release Notes
-
Release Notes for BIND Version 9.11.22
+
Release Notes for BIND Version 9.11.23
Introduction
Download
License Change
+
Notes for BIND 9.11.23
Notes for BIND 9.11.22
Notes for BIND 9.11.21
Notes for BIND 9.11.20
@@ -460,6 +461,6 @@
-

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index c83621c49d6..3b9dc73132a 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 681087937ba..8210731615c 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -90,6 +90,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index eef34877477..25ca7f0c9ea 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -235,6 +235,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 1afe6ad5d69..a924bc8e8d4 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -625,6 +625,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 1a87f579b2b..56bb5093d7e 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -481,12 +481,14 @@
+bufsize=B

- Set the UDP message buffer size advertised using EDNS0 - to B bytes. The maximum and - minimum sizes of this buffer are 65535 and 0 respectively. - Values outside this range are rounded up or down - appropriately. Values other than zero will cause a - EDNS query to be sent. + This option sets the UDP message buffer size advertised + using EDNS0 to B bytes. The + maximum and minimum sizes of this buffer are 65535 + and 0, respectively. +bufsize=0 + disables EDNS (use +bufsize=0 +edns + to send a EDNS messages with a advertised size of 0 + bytes). +bufsize restores the + default buffer size.

+[no]cdflag
@@ -1143,6 +1145,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 42778cbdb76..2037480c857 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -148,6 +148,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 8a399ea3154..f9b676347e1 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -270,6 +270,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 415eebdf1b8..5577f6c23ac 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -352,6 +352,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 68ed277e69f..ffefcf364d8 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -250,6 +250,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 1b83dba1577..1919b7c146d 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -490,6 +490,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index b19c83ee478..a190b8e5940 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -583,6 +583,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index 725836d83f1..f538321d327 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -416,6 +416,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 65d2e74e27b..07994d0c84e 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -171,6 +171,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 4aa521de51a..bbed07975ed 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -349,6 +349,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 13054e10b2b..20d280e935c 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -708,6 +708,6 @@ db.example.com.signed -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index 611e8e5a100..a77d29909b0 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -202,6 +202,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index a045864c3db..fb84e373c9b 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -134,6 +134,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 34b786a1609..1f87ed6cfa0 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -126,6 +126,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 0ef22e02818..1e9b8121e96 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -374,6 +374,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 32f8f2490b1..73dff8da287 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -125,6 +125,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index 13c46429976..b618672638f 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -329,6 +329,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index 537b22fc3a0..49faf462026 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -611,6 +611,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 8e49b640780..619b25bacc3 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -192,6 +192,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index bea2f759485..ec29856b1ea 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -463,6 +463,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 07ac9b8e320..e8a0871b539 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -117,6 +117,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 3a7af1bbe2c..c3e96cde1d0 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -119,6 +119,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 7918743b1c7..1ccfd96c77a 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -121,6 +121,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 47a4d428921..0a3737bdeea 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -1034,6 +1034,6 @@ zone -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 870bc1ee6bd..70d298c0eb5 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -490,6 +490,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index bfb4958a440..c27ce0b99fb 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -130,6 +130,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index 25fad0f4962..dd558a4203d 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -443,6 +443,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index dafb1ed89c8..10f7cbcf892 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -816,6 +816,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index 18af232384a..e0b859ce379 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -162,6 +162,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index a3e850f066a..2eb992b9053 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -200,6 +200,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index 0c650ea99a9..3645ebe2ab1 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -158,6 +158,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 6158a0dd9e2..64af2f115ef 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -123,6 +123,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index a127c5e1397..e9ea9db4bc5 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -277,6 +277,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index d07dc21e71e..34032227644 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -268,6 +268,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 693aa5006a1..8802df3b6ed 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -890,6 +890,6 @@ -

BIND 9.11.22 (Extended Support Version)

+

BIND 9.11.23 (Extended Support Version)

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 7740762e46c..fdde03652b5 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.11.22

+Release Notes for BIND Version 9.11.23

@@ -73,6 +73,33 @@

+Notes for BIND 9.11.23

+ +
+

+Bug Fixes

+
    +
  • +

    + Parsing of LOC records was made more strict by rejecting a sole period + (.) and/or m as a value. + These changes prevent zone files using such values from being loaded. + Handling of negative altitudes which are not integers was also + corrected. [GL #2074] +

    +
    • +
  • +

    + Several problems found by OSS-Fuzz were + fixed. (None of these are security issues.) [GL !3953] [GL !3975] +

    +
    • +
+
+ +
+
+

Notes for BIND 9.11.22

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index fc9e790fd71..29fb13849b9 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index 13faa57f870..e685e5bb11c 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.11.22 +Release Notes for BIND Version 9.11.23 Introduction @@ -36,6 +36,18 @@ Those unsure whether or not the license change affects their use of BIND, or who wish to discuss how to comply with the license may contact ISC at https://www.isc.org/mission/contact/. +Notes for BIND 9.11.23 + +Bug Fixes + + • Parsing of LOC records was made more strict by rejecting a sole period + (.) and/or m as a value. These changes prevent zone files using such + values from being loaded. Handling of negative altitudes which are not + integers was also corrected. [GL #2074] + + • Several problems found by OSS-Fuzz were fixed. (None of these are + security issues.) [GL !3953] [GL !3975] + Notes for BIND 9.11.22 Security Fixes diff --git a/lib/dns/api b/lib/dns/api index 6412460d83c..19474ab4273 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -8,6 +8,6 @@ # 9.10-sub: 180-189 # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 -LIBINTERFACE = 1110 -LIBREVISION = 5 -LIBAGE = 0 +LIBINTERFACE = 1111 +LIBREVISION = 0 +LIBAGE = 1 diff --git a/lib/isc/api b/lib/isc/api index b114ab54a1d..549631a6686 100644 --- a/lib/isc/api +++ b/lib/isc/api @@ -9,5 +9,5 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 LIBINTERFACE = 1107 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/version b/version index 47d4fbfaf24..52dcc85451b 100644 --- a/version +++ b/version @@ -5,7 +5,7 @@ PRODUCT=BIND DESCRIPTION="(Extended Support Version)" MAJORVER=9 MINORVER=11 -PATCHVER=22 +PATCHVER=23 RELEASETYPE= RELEASEVER= EXTENSIONS=