From: Tinderbox User Date: Thu, 3 Nov 2016 23:30:57 +0000 (+0000) Subject: regen v9_11_0_patch X-Git-Tag: v9.11.0-P2~13 X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=e9b3f2007a9299bd47a3c6f11ea3919fc106b97e;p=thirdparty%2Fbind9.git regen v9_11_0_patch --- diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index 61fb1539339..41572ab44e9 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -547,6 +547,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 3bdda5fd80d..697fa3d0a7b 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -145,6 +145,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index d0de535d014..3252084e19d 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -661,6 +661,6 @@ controls { -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 56fd040ace4..148970c2ebc 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2674,6 +2674,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index f16a1185358..427c332c46b 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -136,6 +136,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 9d9575b36a7..54e6cfd7b8f 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -13550,6 +13550,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index a687cb88b96..9f2490d6352 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -370,6 +370,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index da7e578ba08..5d762749774 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -126,6 +126,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index 13f14d4e477..3139da510c5 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -36,7 +36,7 @@

Table of Contents

-
Release Notes for BIND Version 9.11.0-P1
+
Release Notes for BIND Version 9.11.0-P2
Introduction
Download
@@ -52,13 +52,17 @@

-Release Notes for BIND Version 9.11.0-P1

+Release Notes for BIND Version 9.11.0-P2

Introduction

This document summarizes changes since BIND 9.11.0:

+

+ BIND 9.11.0-P2 addresses the security issue described in + CVE-2016-9131. +

BIND 9.11.0-P1 addresses the security issue described in CVE-2016-8864. @@ -78,10 +82,17 @@

Security Fixes

-
  • +

      +
    • + Named incorrectly tried to cache TKEY records which could + trigger a assertion failure when there was a class mismatch. + This flaw is disclosed in CVE-2016-9131. [RT #43522] +

    • +
    • It was possible to trigger assertions when processing a response. This flaw is disclosed in CVE-2016-8864. [RT #43465] -

    +

  • +

@@ -150,6 +161,6 @@

-

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 6fd1b30ce8d..5ef6547b4a6 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -147,6 +147,6 @@
-

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 53bbcba6222..b2804e53eaa 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -489,6 +489,6 @@
-

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 5e84b895ebc..1ddf2d84f93 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -535,6 +535,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index ff60daf5cde..4126cf5c2bc 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -175,6 +175,6 @@
-

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 001c5c0d01a..76a6a7d547b 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.11.0-P1

+

BIND Version 9.11.0-P2


@@ -241,7 +241,7 @@
A. Release Notes
-
Release Notes for BIND Version 9.11.0-P1
+
Release Notes for BIND Version 9.11.0-P2
Introduction
Download
@@ -416,6 +416,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index 4629a8cb725..d577c379c53 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 54fa7abdf90..c771f238e08 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -73,6 +73,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 2eecf4602ff..4d0c058fdd0 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -177,6 +177,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index aab66015d4b..4556c959915 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -501,6 +501,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 79f7f50d613..a8add9325d6 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -848,6 +848,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 1e6d33c88fa..0b350c8ffad 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -104,6 +104,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index f9036279e6f..9caf2243069 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -221,6 +221,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index eb0be61da4f..c46ce487e11 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -205,6 +205,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 5150419b2fb..886e25f862a 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -179,6 +179,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index bc05d7d9846..361ecd25e1d 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -383,6 +383,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index b2f209ef165..213ed92fd8a 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -457,6 +457,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index 28c8ed68838..a4bfffa7f1b 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -309,6 +309,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 806fb3c47a8..c0ff34354bd 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -126,6 +126,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 373130334a3..a6863e18888 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -269,6 +269,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 179759f2d54..d44b70b1bef 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -559,6 +559,6 @@ db.example.com.signed -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index 8c0cd089e6e..dda22bb2637 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -156,6 +156,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index c4eebfe62ce..ee50e8029c0 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -99,6 +99,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 134367ef973..2edd54cfcb7 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -94,6 +94,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index fb0b87e3a42..f169e4097f3 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -284,6 +284,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 4290c0dfe33..fb853d33335 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -104,6 +104,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index a621abb1a28..8994162de9f 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -245,6 +245,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index 66e64108c06..0745ab7e9aa 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -459,6 +459,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index b938780853a..10ec3d2ba48 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -143,6 +143,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 7dca59921c4..a4b4108b491 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -330,6 +330,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 7aa7e21bb40..5ef224e1fc6 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -94,6 +94,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index 6c0dcaa5e88..0f117d599a1 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -95,6 +95,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index cf6000dde3f..6fcd76ef6a2 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -96,6 +96,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 089edb82295..4975ee81b98 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -706,6 +706,6 @@ zone -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index ae62c248438..0f320321822 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -376,6 +376,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 050aaf91cbd..6cf89e810b9 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -99,6 +99,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index e067ed56d5c..8794a41b6d1 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -346,6 +346,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index 3883473751d..710377fcb87 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -668,6 +668,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index 2151435497f..eaf77b545c5 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -116,6 +116,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index 33d4998e8dd..3eb9d51a110 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -140,6 +140,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index 32a6290d289..76bd1ae8cb9 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -114,6 +114,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 5d7ac081179..53d5a78dbf4 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -87,6 +87,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 04acd516960..6fb975e478f 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -216,6 +216,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index c56fc557905..e463af4a6bd 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -238,6 +238,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index ef640d0a378..6f537dcbbb3 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -787,6 +787,6 @@ -

BIND 9.11.0-P1

+

BIND 9.11.0-P2

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 4bf90da61b4..dc7a9c476b5 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -13,13 +13,17 @@

-Release Notes for BIND Version 9.11.0-P1

+Release Notes for BIND Version 9.11.0-P2

Introduction

This document summarizes changes since BIND 9.11.0:

+

+ BIND 9.11.0-P2 addresses the security issue described in + CVE-2016-9131. +

BIND 9.11.0-P1 addresses the security issue described in CVE-2016-8864. @@ -39,10 +43,17 @@

Security Fixes

-
  • +

      +
    • + Named incorrectly tried to cache TKEY records which could + trigger a assertion failure when there was a class mismatch. + This flaw is disclosed in CVE-2016-9131. [RT #43522] +

    • +
    • It was possible to trigger assertions when processing a response. This flaw is disclosed in CVE-2016-8864. [RT #43465] -

    +

  • +

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index cf8e8f4bc68..6d5c035f2c6 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ