Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/external/mpl/bind/dist --- 9.14.1 released ---



details:   https://anonhg.NetBSD.org/src/rev/675094af1d5e
branches:  trunk
changeset: 450878:675094af1d5e
user:      christos <christos%NetBSD.org@localhost>
date:      Sat Apr 27 23:47:13 2019 +0000

description:
--- 9.14.1 released ---

5201.   [bug]           Fix a possible deadlock in RPZ update code. [GL #973]

5200.   [security]      tcp-clients settings could be exceeded in some cases,
                        which could lead to exhaustion of file descriptors.
                        (CVE-2018-5743) [GL #615]

5199.   [security]      In certain configurations, named could crash
                        if nxdomain-redirect was in use and a redirected
                        query resulted in an NXDOMAIN from the cache.
                        (CVE-2019-6467) [GL #880]

5198.   [bug]           If a fetch context was being shut down and, at the same
                        time, we returned from qname minimization, an INSIST
                        could be hit. [GL #966]

5197.   [bug]           dig could die in best effort mode on multiple SIG(0)
                        records. Similarly on multiple OPT and multiple TSIG
                        records. [GL #920]

5196.   [bug]           make install failed with --with-dlopen=no. [GL #955]

5195.   [bug]           "allow-update" and "allow-update-forwarding" were
                        treated as configuration errors if used at the
                        options or view level. [GL #913]

5194.   [bug]           Enforce non empty ZOMEMD hash. [GL #899]

5193.   [bug]           EID and NIMLOC failed to do multi-line output
                        correctly. [GL #899]

5189.   [cleanup]       Remove revoked root DNSKEY from bind.keys. [GL #945]

5187.   [test]          Set time zone before running any tests in dnstap_test.
                        [GL #940]

5186.   [cleanup]       More dnssec-keygen manual tidying. [GL !1678]

5184.   [bug]           Missing unlocks in sdlz.c. [GL #936]

5183.   [bug]           Reinitialize ECS data before reusing client
                        structures. [GL #881]

        --- 9.14.0 released ---

        --- 9.14.0rc3 released ---

5182.   [bug]           Fix a high-load race/crash in handling of
                        isc_socket_close() in resolver. [GL #834]

5180.   [bug]           delv now honors the operating system's preferred
                        ephemeral port range. [GL #925]

5179.   [cleanup]       Replace some vague type declarations with the more
                        specific dns_secalg_t and dns_dsdigest_t.
                        Thanks to Tony Finch. [GL !1498]

5178.   [bug]           Handle EDQUOT (disk quota) and ENOSPC (disk full)
                        errors when writing files. [GL #902]

5177.   [func]          Add the ability to specify in named.conf whether a
                        response-policy zone's SOA record should be added
                        to the additional section (add-soa yes/no). [GL #865]

5167.   [bug]           nxdomain-redirect could sometimes lookup the wrong
                        redirect name. [GL #892]

        --- 9.14.0rc2 released ---

5176.   [tests]         Remove a dependency on libxml in statschannel system
                        test. [GL #926]

5175.   [bug]           Fixed a problem with file input in dnssec-keymgr,
                        dnssec-coverage and dnssec-checkds when using
                        python3. [GL #882]

5174.   [doc]           Tidy dnssec-keygen manual. [GL !1557]

5173.   [bug]           Fixed a race in socket code that could occur when
                        accept, send, or recv were called from an event
                        loop but the socket had been closed by another
                        thread. [RT #874]

5172.   [bug]           nsupdate now honors the operating system's preferred
                        ephemeral port range. [GL #905]

5171.   [func]          named plugins are now installed into a separate
                        directory.  Supplying a filename (a string without path
                        separators) in a "plugin" configuration stanza now
                        causes named to look for that plugin in that directory.
                        [GL #878]

5170.   [test]          Added --with-dlz-filesystem to feature-test. [GL !1587]

5169.   [bug]           The presence of certain types in an otherwise
                        empty node could cause a crash while processing a
                        type ANY query. [GL #901]

        --- 9.14.0rc1 released ---

5168.   [bug]           Do not crash on shutdown when RPZ fails to load.  Also,
                        keep previous version of the database if RPZ fails to
                        load. [GL #813]

5165.   [contrib]       Removed SDB drivers from contrib; they're obsolete.
                        [GL #428]

5164.   [bug]           Correct errno to result translation in dlz filesystem
                        modules. [GL #884]

5163.   [cleanup]       Out-of-tree builds failed --enable-dnstap. [GL #836]

5162.   [cleanup]       Improve dnssec-keymgr manual. Thanks to Tony Finch.
                        [GL !1518]

5161.   [bug]           Do not require the SEP bit to be set for mirror zone
                        trust anchors. [GL #873]

5160.   [contrib]       Added DNAME support to the DLZ LDAP schema. Also
                        fixed a compilation bug affecting several DLZ
                        modules. [GL #872]

5159.   [bug]           dnssec-coverage was incorrectly ignoring
                        names specified on the command line without
                        trailing dots. [GL !1478]

5158.   [protocol]      Add support for AMTRELAY and ZONEMD. [GL #867]

5157.   [bug]           Nslookup now errors out if there are extra command
                        line arguments. [GL #207]

5141.   [security]      Zone transfer controls for writable DLZ zones were
                        not effective as the allowzonexfr method was not being
                        called for such zones. (CVE-2019-6465) [GL #790]

5118.   [security]      Named could crash if it is managing a key with
                        `managed-keys` and the authoritative zone is rolling
                        the key to an unsupported algorithm. (CVE-2018-5745)
                        [GL #780]

5110.   [security]      Named leaked memory if there were multiple Key Tag
                        EDNS options present. (CVE-2018-5744) [GL #772]

diffstat:

 external/mpl/bind/dist/CHANGES                                                           |  117 +-
 external/mpl/bind/dist/PLATFORMS                                                         |   12 +-
 external/mpl/bind/dist/PLATFORMS.md                                                      |   16 +-
 external/mpl/bind/dist/README                                                            |   20 +-
 external/mpl/bind/dist/README.md                                                         |   20 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keygen.docbook                                  |  159 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keygen.html                                     |  139 +-
 external/mpl/bind/dist/bin/named/named.conf.docbook                                      |    2 +-
 external/mpl/bind/dist/bin/plugins/Makefile.in                                           |   17 +-
 external/mpl/bind/dist/bin/python/isc/checkds.py.in                                      |    4 +
 external/mpl/bind/dist/bin/python/isc/keyzone.py.in                                      |    2 +
 external/mpl/bind/dist/bin/tests/system/Makefile.in                                      |    2 +-
 external/mpl/bind/dist/bin/tests/system/addzone/setup.sh                                 |    3 -
 external/mpl/bind/dist/bin/tests/system/autosign/setup.sh                                |    2 +-
 external/mpl/bind/dist/bin/tests/system/autosign/tests.sh                                |   14 +-
 external/mpl/bind/dist/bin/tests/system/case/setup.sh                                    |    3 +-
 external/mpl/bind/dist/bin/tests/system/checkconf/good-allow-update-forwarding-view.conf |   14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/good-allow-update-forwarding.conf      |   14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/good-allow-update-view.conf            |   14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/good-allow-update.conf                 |   14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/setup.sh                               |   15 +
 external/mpl/bind/dist/bin/tests/system/checkzone/setup.sh                               |    3 +-
 external/mpl/bind/dist/bin/tests/system/coverage/setup.sh                                |   22 -
 external/mpl/bind/dist/bin/tests/system/dialup/clean.sh                                  |   14 +
 external/mpl/bind/dist/bin/tests/system/dialup/setup.sh                                  |    6 +-
 external/mpl/bind/dist/bin/tests/system/dlv/ns2/sign.sh                                  |    2 +-
 external/mpl/bind/dist/bin/tests/system/dlv/setup.sh                                     |    2 +
 external/mpl/bind/dist/bin/tests/system/dlz/prereq.sh                                    |   19 +
 external/mpl/bind/dist/bin/tests/system/dlzexternal/setup.sh                             |    2 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/insecure.example.db                   |    1 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/secure.example.db.in                  |    1 +
 external/mpl/bind/dist/bin/tests/system/dnssec/tests.sh                                  |   80 +-
 external/mpl/bind/dist/bin/tests/system/dsdigest/setup.sh                                |    2 +
 external/mpl/bind/dist/bin/tests/system/dupsigs/setup.sh                                 |    2 +-
 external/mpl/bind/dist/bin/tests/system/ecdsa/setup.sh                                   |    2 +
 external/mpl/bind/dist/bin/tests/system/eddsa/setup.sh                                   |    2 +
 external/mpl/bind/dist/bin/tests/system/ifconfig.sh                                      |    2 +-
 external/mpl/bind/dist/bin/tests/system/inline/setup.sh                                  |    3 -
 external/mpl/bind/dist/bin/tests/system/ixfr/clean.sh                                    |    2 +-
 external/mpl/bind/dist/bin/tests/system/ixfr/setup.sh                                    |    2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/setup.sh                                  |   38 -
 external/mpl/bind/dist/bin/tests/system/legacy/tests.sh                                  |    2 +-
 external/mpl/bind/dist/bin/tests/system/masterformat/setup.sh                            |    3 +-
 external/mpl/bind/dist/bin/tests/system/metadata/setup.sh                                |    2 +-
 external/mpl/bind/dist/bin/tests/system/mirror/ns3/named.args                            |    2 +-
 external/mpl/bind/dist/bin/tests/system/mirror/tests.sh                                  |   18 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns5/named.conf.in                          |    1 +
 external/mpl/bind/dist/bin/tests/system/nsupdate/setup.sh                                |   15 +-
 external/mpl/bind/dist/bin/tests/system/pending/setup.sh                                 |    2 +
 external/mpl/bind/dist/bin/tests/system/pkcs11/setup.sh                                  |    2 +
 external/mpl/bind/dist/bin/tests/system/redirect/clean.sh                                |    5 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns1/root.db                             |    2 +-
 external/mpl/bind/dist/bin/tests/system/redirect/ns4/named.conf.in                       |    3 +-
 external/mpl/bind/dist/bin/tests/system/redirect/ns5/named.conf.in                       |   30 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns5/root.db.in                          |   16 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns5/sign.sh                             |   43 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns5/signed.db.in                        |   18 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns5/unsigned.db                         |   18 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns6/named.conf.in                       |   30 +
 external/mpl/bind/dist/bin/tests/system/redirect/ns6/root.db                             |   16 +
 external/mpl/bind/dist/bin/tests/system/redirect/setup.sh                                |    3 +
 external/mpl/bind/dist/bin/tests/system/redirect/tests.sh                                |   16 +
 external/mpl/bind/dist/bin/tests/system/resolver/setup.sh                                |    2 +
 external/mpl/bind/dist/bin/tests/system/resolver/tests.sh                                |    8 +-
 external/mpl/bind/dist/bin/tests/system/rpz/README                                       |   29 +
 external/mpl/bind/dist/bin/tests/system/rpz/clean.sh                                     |    2 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns3/broken.db.in                             |   16 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns3/manual-update-rpz-2.db.in                |   20 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns3/manual-update-rpz.db.in                  |   19 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns3/named.conf.in                            |    8 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns6/named.conf.in                            |    1 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns7/named.conf.in                            |    2 +-
 external/mpl/bind/dist/bin/tests/system/rpz/ns8/hints                                    |   11 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns8/manual-update-rpz.db.in                  |   19 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns8/named.conf.in                            |   65 +
 external/mpl/bind/dist/bin/tests/system/rpz/setup.sh                                     |   13 +-
 external/mpl/bind/dist/bin/tests/system/rpz/tests.sh                                     |  329 ++--
 external/mpl/bind/dist/bin/tests/system/rpzrecurse/tests.sh                              |    4 +-
 external/mpl/bind/dist/bin/tests/system/rrchecker/setup.sh                               |   15 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/setup.sh                             |    2 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/tests.sh                             |    4 +
 external/mpl/bind/dist/bin/tests/system/start.pl                                         |    1 +
 external/mpl/bind/dist/bin/tests/system/staticstub/setup.sh                              |    4 +-
 external/mpl/bind/dist/bin/tests/system/statistics/tests.sh                              |    4 +-
 external/mpl/bind/dist/bin/tests/system/statschannel/tests.sh                            |    6 +-
 external/mpl/bind/dist/bin/tests/system/stop.pl                                          |   27 +-
 external/mpl/bind/dist/bin/tests/system/stress/setup.sh                                  |    5 +
 external/mpl/bind/dist/bin/tests/system/tools/setup.sh                                   |   15 +
 external/mpl/bind/dist/bin/tests/system/ttl/clean.sh                                     |    2 -
 external/mpl/bind/dist/bin/tests/system/upforwd/setup.sh                                 |    1 -
 external/mpl/bind/dist/bin/tests/system/views/setup.sh                                   |    6 -
 external/mpl/bind/dist/bin/tests/system/xfer/clean.sh                                    |    2 +-
 external/mpl/bind/dist/bin/tests/system/xfer/setup.sh                                    |    1 -
 external/mpl/bind/dist/bind.keys                                                         |   36 +-
 external/mpl/bind/dist/configure.ac                                                      |   39 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM-book.xml                                           |   35 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch01.html                                          |    4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch02.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch03.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch04.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch05.html                                          |   37 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch06.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch07.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch08.html                                          |  659 +---------
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch09.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch10.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch11.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch12.html                                          |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.html                                               |    7 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.pdf                                                |  Bin 
 external/mpl/bind/dist/doc/arm/man.arpaname.html                                         |    2 +-
 external/mpl/bind/dist/doc/arm/man.ddns-confgen.html                                     |    2 +-
 external/mpl/bind/dist/doc/arm/man.delv.html                                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.dig.html                                              |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-cds.html                                       |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-checkds.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-coverage.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-dsfromkey.html                                 |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html                                 |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keyfromlabel.html                              |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keygen.html                                    |  141 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keymgr.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-revoke.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-settime.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-signzone.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-verify.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnstap-read.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.filter-aaaa.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.host.html                                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.mdig.html                                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-checkconf.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-checkzone.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-journalprint.html                               |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-nzd2nzf.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-rrchecker.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.named.conf.html                                       |    2 +-
 external/mpl/bind/dist/doc/arm/man.named.html                                            |    2 +-
 external/mpl/bind/dist/doc/arm/man.nsec3hash.html                                        |    2 +-
 external/mpl/bind/dist/doc/arm/man.nslookup.html                                         |    2 +-
 external/mpl/bind/dist/doc/arm/man.nsupdate.html                                         |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-destroy.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-keygen.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-list.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-tokens.html                                    |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc-confgen.html                                     |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc.conf.html                                        |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc.html                                             |    2 +-
 external/mpl/bind/dist/doc/arm/notes.html                                                |  654 +---------
 external/mpl/bind/dist/doc/arm/notes.pdf                                                 |  Bin 
 external/mpl/bind/dist/doc/arm/notes.txt                                                 |  392 +-----
 external/mpl/bind/dist/doc/arm/notes.xml                                                 |  629 +--------
 external/mpl/bind/dist/doc/misc/options                                                  |   22 +-
 external/mpl/bind/dist/lib/bind9/api                                                     |    4 +-
 external/mpl/bind/dist/lib/dns/Makefile.in                                               |    5 +-
 external/mpl/bind/dist/lib/dns/api                                                       |    6 +-
 external/mpl/bind/dist/lib/dns/include/dns/Makefile.in                                   |    2 +-
 external/mpl/bind/dist/lib/dns/rdata/generic/zonemd_63.c                                 |   19 +-
 external/mpl/bind/dist/lib/irs/api                                                       |    2 +-
 external/mpl/bind/dist/lib/isc/api                                                       |    8 +-
 external/mpl/bind/dist/lib/isc/win32/libisc.def.in                                       |    1 +
 external/mpl/bind/dist/lib/isccc/api                                                     |    2 +-
 external/mpl/bind/dist/lib/isccfg/api                                                    |    2 +-
 external/mpl/bind/dist/lib/ns/Makefile.in                                                |    2 +-
 external/mpl/bind/dist/lib/ns/api                                                        |    6 +-
 external/mpl/bind/dist/lib/ns/tests/Kyuafile                                             |    1 +
 external/mpl/bind/dist/lib/ns/tests/Makefile.in                                          |   11 +-
 external/mpl/bind/dist/lib/ns/tests/plugin_test.c                                        |  210 +++
 external/mpl/bind/dist/lib/ns/win32/libns.def                                            |    1 +
 external/mpl/bind/dist/make/rules.in                                                     |    2 +
 external/mpl/bind/dist/srcid                                                             |    2 +-
 external/mpl/bind/dist/version                                                           |    6 +-
 external/mpl/bind/dist/win32utils/Configure                                              |   90 +-
 172 files changed, 1915 insertions(+), 2912 deletions(-)

diffs (truncated from 7925 to 300 lines):

diff -r 2f1c14f74dc0 -r 675094af1d5e external/mpl/bind/dist/CHANGES
--- a/external/mpl/bind/dist/CHANGES    Sat Apr 27 23:04:31 2019 +0000
+++ b/external/mpl/bind/dist/CHANGES    Sat Apr 27 23:47:13 2019 +0000
@@ -1,4 +1,107 @@
-       --- 9.13.7 released ---
+       --- 9.14.1 released ---
+
+5201.  [bug]           Fix a possible deadlock in RPZ update code. [GL #973]
+
+5200.  [security]      tcp-clients settings could be exceeded in some cases,
+                       which could lead to exhaustion of file descriptors.
+                       (CVE-2018-5743) [GL #615]
+
+5199.  [security]      In certain configurations, named could crash
+                       if nxdomain-redirect was in use and a redirected
+                       query resulted in an NXDOMAIN from the cache.
+                       (CVE-2019-6467) [GL #880]
+
+5198.  [bug]           If a fetch context was being shut down and, at the same
+                       time, we returned from qname minimization, an INSIST
+                       could be hit. [GL #966]
+
+5197.  [bug]           dig could die in best effort mode on multiple SIG(0)
+                       records. Similarly on multiple OPT and multiple TSIG
+                       records. [GL #920]
+
+5196.  [bug]           make install failed with --with-dlopen=no. [GL #955]
+
+5195.  [bug]           "allow-update" and "allow-update-forwarding" were
+                       treated as configuration errors if used at the
+                       options or view level. [GL #913]
+
+5194.  [bug]           Enforce non empty ZOMEMD hash. [GL #899]
+
+5193.  [bug]           EID and NIMLOC failed to do multi-line output
+                       correctly. [GL #899]
+
+5189.  [cleanup]       Remove revoked root DNSKEY from bind.keys. [GL #945]
+
+5187.  [test]          Set time zone before running any tests in dnstap_test.
+                       [GL #940]
+
+5186.  [cleanup]       More dnssec-keygen manual tidying. [GL !1678]
+
+5184.  [bug]           Missing unlocks in sdlz.c. [GL #936]
+
+5183.  [bug]           Reinitialize ECS data before reusing client
+                       structures. [GL #881]
+
+       --- 9.14.0 released ---
+
+       --- 9.14.0rc3 released ---
+
+5182.  [bug]           Fix a high-load race/crash in handling of
+                       isc_socket_close() in resolver. [GL #834]
+
+5180.  [bug]           delv now honors the operating system's preferred
+                       ephemeral port range. [GL #925]
+
+5179.  [cleanup]       Replace some vague type declarations with the more
+                       specific dns_secalg_t and dns_dsdigest_t.
+                       Thanks to Tony Finch. [GL !1498]
+
+5178.  [bug]           Handle EDQUOT (disk quota) and ENOSPC (disk full)
+                       errors when writing files. [GL #902]
+
+5177.  [func]          Add the ability to specify in named.conf whether a
+                       response-policy zone's SOA record should be added
+                       to the additional section (add-soa yes/no). [GL #865]
+
+5167.  [bug]           nxdomain-redirect could sometimes lookup the wrong
+                       redirect name. [GL #892]
+
+       --- 9.14.0rc2 released ---
+
+5176.  [tests]         Remove a dependency on libxml in statschannel system
+                       test. [GL #926]
+
+5175.  [bug]           Fixed a problem with file input in dnssec-keymgr,
+                       dnssec-coverage and dnssec-checkds when using
+                       python3. [GL #882]
+
+5174.  [doc]           Tidy dnssec-keygen manual. [GL !1557]
+
+5173.  [bug]           Fixed a race in socket code that could occur when
+                       accept, send, or recv were called from an event
+                       loop but the socket had been closed by another
+                       thread. [RT #874]
+
+5172.  [bug]           nsupdate now honors the operating system's preferred
+                       ephemeral port range. [GL #905]
+
+5171.  [func]          named plugins are now installed into a separate
+                       directory.  Supplying a filename (a string without path
+                       separators) in a "plugin" configuration stanza now
+                       causes named to look for that plugin in that directory.
+                       [GL #878]
+
+5170.  [test]          Added --with-dlz-filesystem to feature-test. [GL !1587]
+
+5169.  [bug]           The presence of certain types in an otherwise
+                       empty node could cause a crash while processing a
+                       type ANY query. [GL #901]
+
+       --- 9.14.0rc1 released ---
+
+5168.  [bug]           Do not crash on shutdown when RPZ fails to load.  Also,
+                       keep previous version of the database if RPZ fails to
+                       load. [GL #813]
 
 5165.  [contrib]       Removed SDB drivers from contrib; they're obsolete.
                        [GL #428]
@@ -62,7 +165,7 @@
                        - Zone signing and DNSKEY maintenance events are
                          now logged to the "dnssec" category
                        - Messages are now logged when DNSSEC keys are
-                         pubished, activated, inactivated, deleted,
+                         published, activated, inactivated, deleted,
                          or revoked.
                        [GL #714]
 
@@ -267,8 +370,8 @@
 5091.  [func]          Two new global and per-view options min-cache-ttl
                        and min-ncache-ttl [GL #613]
 
-5090.  [bug]           dig and mdig failed to properly preparse dash value
-                       pairs when value was a seperate argument and started
+5090.  [bug]           dig and mdig failed to properly pre-parse dash value
+                       pairs when value was a separate argument and started
                        with a dash. [GL #584]
 
 5089.  [bug]           Restore localhost fallback in dig and host which is
@@ -334,7 +437,7 @@
 5072.  [bug]           Add unit tests for isc_buffer_copyregion() and fix its
                        behavior for auto-reallocated buffers. [GL #644]
 
-5071.  [bug]           Comparision of NXT records was broken. [GL #631]
+5071.  [bug]           Comparison of NXT records was broken. [GL #631]
 
 5070.  [bug]           Record types which support a empty rdata field were
                        not handling the empty rdata field case. [GL #638]
@@ -353,7 +456,7 @@
 
 5065.  [bug]           Only set IPV6_USE_MIN_MTU on IPv6. [GL #553]
 
-5064.  [test]          Initalize TZ environment variable before calling
+5064.  [test]          Initialize TZ environment variable before calling
                        dns_test_begin in dnstap_test. [GL #624]
 
 5063.  [test]          In statschannel test try a few times before failing
@@ -579,7 +682,7 @@
 5001.  [bug]           Fix refcount errors on error paths. [GL !563]
 
 5000.  [bug]           named_server_servestale() could leave the server in
-                       exclusive mode if an error occured. [GL #441]
+                       exclusive mode if an error occurred. [GL #441]
 
 4999.  [cleanup]       Remove custom printf implementation in lib/isc/print.c.
                        [GL #261]
diff -r 2f1c14f74dc0 -r 675094af1d5e external/mpl/bind/dist/PLATFORMS
--- a/external/mpl/bind/dist/PLATFORMS  Sat Apr 27 23:04:31 2019 +0000
+++ b/external/mpl/bind/dist/PLATFORMS  Sat Apr 27 23:47:13 2019 +0000
@@ -13,7 +13,7 @@
 
 Regularly tested platforms
 
-As of Jan 2019, BIND 9.13 is fully supported and regularly tested on the
+As of Feb 2019, BIND 9.14 is fully supported and regularly tested on the
 following systems:
 
   * Debian 8, 9, 10
@@ -51,7 +51,7 @@
 
 Unsupported platforms
 
-These are platforms on which BIND 9.13 is known not to build or run:
+These are platforms on which BIND 9.14 is known not to build or run:
 
   * Platforms without at least OpenSSL 1.0.2
   * Windows 10 / x86
@@ -88,3 +88,11 @@
 The configure command should look like this:
 
 CFLAGS="-march=armv7-a -mfpu=vfpv3-d16 -Os -g" ./configure
+
+NetBSD 6 i386
+
+The i386 build of NetBSD requires the libatomic library, available from
+the gcc5-libs package. Because this library is in a non-standard path, its
+location must be specified in the configure command line:
+
+LDFLAGS="-L/usr/pkg/gcc5/i486--netbsdelf/lib/ -Wl,-R/usr/pkg/gcc5/i486--netbsdelf/lib/" ./configure
diff -r 2f1c14f74dc0 -r 675094af1d5e external/mpl/bind/dist/PLATFORMS.md
--- a/external/mpl/bind/dist/PLATFORMS.md       Sat Apr 27 23:04:31 2019 +0000
+++ b/external/mpl/bind/dist/PLATFORMS.md       Sat Apr 27 23:47:13 2019 +0000
@@ -23,7 +23,7 @@
 
 ### Regularly tested platforms
 
-As of Jan 2019, BIND 9.13 is fully supported and regularly tested on the
+As of Feb 2019, BIND 9.14 is fully supported and regularly tested on the
 following systems:
 
 * Debian 8, 9, 10
@@ -60,7 +60,7 @@
 
 ## Unsupported platforms
 
-These are platforms on which BIND 9.13 is known *not* to build or run:
+These are platforms on which BIND 9.14 is known *not* to build or run:
 
 * Platforms without at least OpenSSL 1.0.2
 * Windows 10 / x86
@@ -95,8 +95,18 @@
   the processors to support here, therefore the recommended build option is
   `-mfpu=vfpv3-d16`.
 
-The configure command should look like this:
+The `configure` command should look like this:
 
 ```
 CFLAGS="-march=armv7-a -mfpu=vfpv3-d16 -Os -g" ./configure
 ```
+
+### NetBSD 6 i386
+
+The i386 build of NetBSD requires the `libatomic` library, available from
+the `gcc5-libs` package.  Because this library is in a non-standard path,
+its location must be specified in the `configure` command line:
+
+```
+LDFLAGS="-L/usr/pkg/gcc5/i486--netbsdelf/lib/ -Wl,-R/usr/pkg/gcc5/i486--netbsdelf/lib/" ./configure
+```
diff -r 2f1c14f74dc0 -r 675094af1d5e external/mpl/bind/dist/README
--- a/external/mpl/bind/dist/README     Sat Apr 27 23:04:31 2019 +0000
+++ b/external/mpl/bind/dist/README     Sat Apr 27 23:47:13 2019 +0000
@@ -5,7 +5,7 @@
  1. Introduction
  2. Reporting bugs and getting help
  3. Contributing to BIND
- 4. BIND 9.13 features
+ 4. BIND 9.14 features
  5. Building BIND
  6. macOS
  7. Dependencies
@@ -100,17 +100,19 @@
 including your patch as an attachment, preferably generated by git
 format-patch.
 
-BIND 9.13 features
+BIND 9.14 features
 
-BIND 9.13 is the newest development branch of BIND 9. It includes a number
-of changes from BIND 9.12 and earlier releases. New features include:
+BIND 9.14.0 is the first release from a new stable branch of BIND 9,
+incorporating all changes from the 9.13 development branch, updating the
+most recent stable branch, 9.12. These changes include:
 
   * A new "plugin" mechanism has been added to allow query functionality
     to be extended using dynamically loadable libraries. The "filter-aaaa"
     feature has been removed from named and is now implemented as a
     plugin.
-  * Socket and task code has been refactored to improve performance.
   * QNAME minimization, as described in RFC 7816, is now supported.
+  * Socket and task code has been refactored to improve performance on
+    most modern machines.
   * "Root key sentinel" support, enabling validating resolvers to indicate
     via a special query which trust anchors are configured for the root
     zone.
@@ -138,7 +140,13 @@
 Special code to support certain legacy operating systems has also been
 removed; see the file PLATFORMS.md for details of supported platforms. In
 addition to OpenSSL, BIND now requires support for IPv6, threads, and
-standard atomic operations provided by the C compiler.
+standard atomic operations provided by the C compiler. Non-threaded builds
+are no longer supported.
+
+BIND 9.14.1
+
+BIND 9.14.1 is a maintenance release, and addresses security
+vulnerabilities disclosed in CVE-2018-5743 and CVE-2019-6467.
 
 Building BIND
 
diff -r 2f1c14f74dc0 -r 675094af1d5e external/mpl/bind/dist/README.md
--- a/external/mpl/bind/dist/README.md  Sat Apr 27 23:04:31 2019 +0000
+++ b/external/mpl/bind/dist/README.md  Sat Apr 27 23:47:13 2019 +0000
@@ -15,7 +15,7 @@
 1. [Introduction](#intro)
 1. [Reporting bugs and getting help](#help)
 1. [Contributing to BIND](#contrib)
-1. [BIND 9.13 features](#features)
+1. [BIND 9.14 features](#features)
 1. [Building BIND](#build)
 1. [macOS](#macos)
 1. [Dependencies](#dependencies)
@@ -117,17 +117,18 @@
 including your patch as an attachment, preferably generated by
 `git format-patch`.
 



Home | Main Index | Thread Index | Old Index