Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/external/mpl/bind/dist --- 9.13.7 released ---
details: https://anonhg.NetBSD.org/src/rev/ca90f130e59e
branches: trunk
changeset: 449160:ca90f130e59e
user: christos <christos%NetBSD.org@localhost>
date: Sun Feb 24 18:56:37 2019 +0000
description:
--- 9.13.7 released ---
5165. [contrib] Removed SDB drivers from contrib; they're obsolete.
[GL #428]
5164. [bug] Correct errno to result translation in dlz filesystem
modules. [GL #884]
5163. [cleanup] Out-of-tree builds failed --enable-dnstap. [GL #836]
5162. [cleanup] Improve dnssec-keymgr manual. Thanks to Tony Finch.
[GL !1518]
5161. [bug] Do not require the SEP bit to be set for mirror zone
trust anchors. [GL #873]
5160. [contrib] Added DNAME support to the DLZ LDAP schema. Also
fixed a compilation bug affecting several DLZ
modules. [GL #872]
5159. [bug] dnssec-coverage was incorrectly ignoring
names specified on the command line without
trailing dots. [GL !1478]
5158. [protocol] Add support for AMTRELAY and ZONEMD. [GL #867]
5157. [bug] Nslookup now errors out if there are extra command
line arguments. [GL #207]
5141. [security] Zone transfer controls for writable DLZ zones were
not effective as the allowzonexfr method was not being
called for such zones. (CVE-2019-6465) [GL #790]
5118. [security] Named could crash if it is managing a key with
`managed-keys` and the authoritative zone is rolling
the key to an unsupported algorithm. (CVE-2018-5745)
[GL #780]
5110. [security] Named leaked memory if there were multiple Key Tag
EDNS options present. (CVE-2018-5744) [GL #772]
--- 9.13.6 released ---
5156. [doc] Extended and refined the section of the ARM describing
mirror zones. [GL #774]
5155. [func] "named -V" now outputs the default paths to
named.conf, rndc.conf, bind.keys, and other
files used or created by named and other tools, so
that the correct paths to these files can quickly be
determined regardless of the configure settings
used when BIND was built. [GL #859]
5154. [bug] dig: process_opt could be called twice on the same
message leading to a assertion failure. [GL #860]
5153. [func] Zone transfer statistics (size, number of records, and
number of messages) are now logged for outgoing
transfers as well as incoming ones. [GL #513]
5152. [func] Improved logging of DNSSEC key events:
- Zone signing and DNSKEY maintenance events are
now logged to the "dnssec" category
- Messages are now logged when DNSSEC keys are
pubished, activated, inactivated, deleted,
or revoked.
[GL #714]
5151. [func] Options that have been been marked as obsolete in
named.conf for a very long time are now fatal
configuration errors. [GL #358]
5150. [cleanup] Remove the ability to compile BIND with assertions
disabled. [GL #735]
5149. [func] "rndc dumpdb" now prints a line above a stale RRset
indicating how long the data will be retained in the
cache for emergency use. [GL #101]
5148. [bug] named did not sign the TKEY response. [GL #821]
5147. [bug] dnssec-keymgr: Add a five-minute margin to better
handle key events close to 'now'. [GL #848]
5146. [placeholder]
5145. [func] Use atomics instead of locked variables for isc_quota
and isc_counter. [GL !1389]
5144. [bug] dig now returns a non-zero exit code when a TCP
connection is prematurely closed by a peer more than
once for the same lookup. [GL #820]
5143. [bug] dnssec-keymgr and dnssec-coverage failed to find
key files for zone names ending in ".". [GL #560]
5142. [cleanup] Removed "configure --disable-rpz-nsip" and
"--disable-rpz-nsdname" options. "nsip-enable"
and "nsdname-enable" both now default to yes,
regardless of compile-time settings. [GL #824]
5140. [bug] Don't immediately mark existing keys as inactive and
deleted when running dnssec-keymgr for the first
time. [GL #117]
5139. [bug] If possible, don't use forwarders when priming.
This ensures we can get root server IP addresses
from priming query response glue, which may not
be present if the forwarding server is returning
minimal responses. [GL #752]
5138. [bug] Under some circumstances named could hit an assertion
failure when doing qname minimization when using
forwarders. [GL #797]
5137. [func] named now logs messages whenever a mirror zone becomes
usable or unusable for resolution purposes. [GL #818]
5136. [cleanup] Check in named-checkconf that allow-update and
allow-update-forwarding are not set at the
view/options level; fix documentation. [GL #512]
5135. [port] sparc: Use smt_pause() instead of pause. [GL #816]
5134. [bug] win32: WSAStartup was not called before getservbyname
was called. [GL #590]
5133. [bug] 'rndc managed-keys' didn't handle class and view
correctly and failed to add new lines between each
view. [GL !1327]
5132. [bug] Fix race condition in cleanup part of dns_dt_create().
[GL !1323]
5131. [cleanup] Address Coverity warnings. [GL #801]
5130. [cleanup] Remove support for l10n message catalogs. [GL #709]
5129. [contrib] sdlz_helper.c:build_querylist was not properly
splitting the query string. [GL #798]
5128. [bug] Refreshkeytime was not being updated for managed
keys zones. [GL #784]
5127. [bug] rcode.c:maybe_numeric failed to handle NUL in text
regions. [GL #807]
5126. [bug] Named incorrectly accepted empty base64 and hex encoded
fields when reading master files. [GL #807]
5125. [bug] Allow for up to 100 records or 64k of data when caching
a negative response. [GL #804]
5124. [bug] Named could incorrectly return FORMERR rather than
SERVFAIL. [GL #804]
5123. [bug] dig could hang indefinitely after encountering an error
before creating a TCP socket. [GL #692]
5122. [bug] In a "forward first;" configuration, a forwarder
timeout did not prevent that forwarder from being
queried again after falling back to full recursive
resolution. [GL #315]
5121. [contrib] dlz_stub_driver.c fails to return ISC_R_NOTFOUND on none
matching zone names. [GL !1299]
5120. [placeholder]
5119. [placeholder]
5117. [placeholder]
5116. [bug] Named/named-checkconf triggered a assertion when
a mirror zone's name is bad. [GL #778]
5115. [bug] Allow unsupported algorithms in zone when not used for
signing with dnssec-signzone. [GL #783]
5114. [func] Include a 'reconfig/reload in progress' status line
in rndc status, use it in tests.
5113. [port] Fixed a Windows build error.
5112. [bug] Named/named-checkconf could dump core if there was
a missing masters clause and a bad notify clause.
[GL #779]
5111. [bug] Occluded DNSKEY records could make it into the
delegating NSEC/NSEC3 bitmap. [GL #742]
5109. [cleanup] Remove support for RSAMD5 algorithm. [GL #628]
diffstat:
external/mpl/bind/dist/CHANGES | 193 +-
external/mpl/bind/dist/COPYRIGHT | 2 +-
external/mpl/bind/dist/PLATFORMS | 43 +-
external/mpl/bind/dist/PLATFORMS.md | 42 +-
external/mpl/bind/dist/README | 57 +-
external/mpl/bind/dist/README.md | 46 +-
external/mpl/bind/dist/bin/check/named-checkconf.docbook | 1 +
external/mpl/bind/dist/bin/check/named-checkconf.html | 2 +-
external/mpl/bind/dist/bin/check/named-checkzone.docbook | 1 +
external/mpl/bind/dist/bin/check/named-checkzone.html | 2 +-
external/mpl/bind/dist/bin/confgen/ddns-confgen.docbook | 1 +
external/mpl/bind/dist/bin/confgen/ddns-confgen.html | 2 +-
external/mpl/bind/dist/bin/confgen/rndc-confgen.docbook | 1 +
external/mpl/bind/dist/bin/confgen/rndc-confgen.html | 2 +-
external/mpl/bind/dist/bin/delv/delv.docbook | 1 +
external/mpl/bind/dist/bin/delv/delv.html | 2 +-
external/mpl/bind/dist/bin/dig/dig.docbook | 1 +
external/mpl/bind/dist/bin/dig/dig.html | 2 +-
external/mpl/bind/dist/bin/dig/host.docbook | 1 +
external/mpl/bind/dist/bin/dig/host.html | 2 +-
external/mpl/bind/dist/bin/dig/nslookup.docbook | 1 +
external/mpl/bind/dist/bin/dig/nslookup.html | 2 +-
external/mpl/bind/dist/bin/dnssec/dnssec-cds.docbook | 7 +-
external/mpl/bind/dist/bin/dnssec/dnssec-cds.html | 8 +-
external/mpl/bind/dist/bin/dnssec/dnssec-dsfromkey.docbook | 244 +-
external/mpl/bind/dist/bin/dnssec/dnssec-dsfromkey.html | 225 +-
external/mpl/bind/dist/bin/dnssec/dnssec-importkey.docbook | 1 +
external/mpl/bind/dist/bin/dnssec/dnssec-importkey.html | 2 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keyfromlabel.docbook | 3 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keyfromlabel.html | 4 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keygen.docbook | 3 +-
external/mpl/bind/dist/bin/dnssec/dnssec-keygen.html | 4 +-
external/mpl/bind/dist/bin/dnssec/dnssec-revoke.docbook | 1 +
external/mpl/bind/dist/bin/dnssec/dnssec-revoke.html | 2 +-
external/mpl/bind/dist/bin/dnssec/dnssec-settime.docbook | 1 +
external/mpl/bind/dist/bin/dnssec/dnssec-settime.html | 2 +-
external/mpl/bind/dist/bin/dnssec/dnssec-signzone.docbook | 1 +
external/mpl/bind/dist/bin/dnssec/dnssec-signzone.html | 2 +-
external/mpl/bind/dist/bin/dnssec/dnssec-verify.docbook | 1 +
external/mpl/bind/dist/bin/dnssec/dnssec-verify.html | 2 +-
external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.filters.in | 18 +
external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.in | 112 +
external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.user | 3 +
external/mpl/bind/dist/bin/named/named.conf.docbook | 104 +-
external/mpl/bind/dist/bin/named/named.conf.html | 118 +-
external/mpl/bind/dist/bin/named/named.docbook | 1 +
external/mpl/bind/dist/bin/named/named.html | 2 +-
external/mpl/bind/dist/bin/nsupdate/nsupdate.docbook | 1 +
external/mpl/bind/dist/bin/nsupdate/nsupdate.html | 2 +-
external/mpl/bind/dist/bin/pkcs11/pkcs11-destroy.docbook | 1 +
external/mpl/bind/dist/bin/pkcs11/pkcs11-destroy.html | 2 +-
external/mpl/bind/dist/bin/pkcs11/pkcs11-keygen.docbook | 1 +
external/mpl/bind/dist/bin/pkcs11/pkcs11-keygen.html | 2 +-
external/mpl/bind/dist/bin/pkcs11/pkcs11-list.docbook | 1 +
external/mpl/bind/dist/bin/pkcs11/pkcs11-list.html | 2 +-
external/mpl/bind/dist/bin/pkcs11/pkcs11-tokens.docbook | 1 +
external/mpl/bind/dist/bin/pkcs11/pkcs11-tokens.html | 2 +-
external/mpl/bind/dist/bin/plugins/filter-aaaa.docbook | 1 +
external/mpl/bind/dist/bin/plugins/filter-aaaa.html | 2 +-
external/mpl/bind/dist/bin/python/dnssec-checkds.docbook | 1 +
external/mpl/bind/dist/bin/python/dnssec-checkds.html | 2 +-
external/mpl/bind/dist/bin/python/dnssec-coverage.docbook | 1 +
external/mpl/bind/dist/bin/python/dnssec-coverage.html | 2 +-
external/mpl/bind/dist/bin/python/dnssec-keymgr.docbook | 69 +-
external/mpl/bind/dist/bin/python/dnssec-keymgr.html | 70 +-
external/mpl/bind/dist/bin/python/isc/checkds.py.in | 2 +-
external/mpl/bind/dist/bin/python/isc/coverage.py.in | 6 +-
external/mpl/bind/dist/bin/python/isc/eventlist.py.in | 2 +-
external/mpl/bind/dist/bin/python/isc/keydict.py.in | 9 +-
external/mpl/bind/dist/bin/python/isc/keyseries.py.in | 33 +-
external/mpl/bind/dist/bin/python/isc/policy.py.in | 9 +-
external/mpl/bind/dist/bin/rndc/rndc.conf.docbook | 1 +
external/mpl/bind/dist/bin/rndc/rndc.conf.html | 2 +-
external/mpl/bind/dist/bin/rndc/rndc.docbook | 1 +
external/mpl/bind/dist/bin/rndc/rndc.html | 2 +-
external/mpl/bind/dist/bin/tests/optional/Makefile.in | 6 -
external/mpl/bind/dist/bin/tests/system/acl/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/additional/ns1/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/additional/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/addzone/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/allow-query/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/allow-query/tests.sh | 8 -
external/mpl/bind/dist/bin/tests/system/autosign/clean.sh | 7 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns2/example.db.in | 2 +
external/mpl/bind/dist/bin/tests/system/autosign/ns2/keygen.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in | 5 +
external/mpl/bind/dist/bin/tests/system/autosign/ns3/keygen.sh | 9 +
external/mpl/bind/dist/bin/tests/system/autosign/ns3/named.conf.in | 7 +
external/mpl/bind/dist/bin/tests/system/autosign/ns3/secure.example.db.in | 2 +
external/mpl/bind/dist/bin/tests/system/autosign/tests.sh | 35 +-
external/mpl/bind/dist/bin/tests/system/builtin/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/cds/checktime.pl | 14 +-
external/mpl/bind/dist/bin/tests/system/cds/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/cds/tests.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/checkconf/ancient.conf | 17 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-forwarding-view.conf | 14 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-forwarding.conf | 14 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-view.conf | 14 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update.conf | 14 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-mirror-zonename.conf | 4 +
external/mpl/bind/dist/bin/tests/system/checkconf/bad-stub-masters-dialup.conf | 23 +
external/mpl/bind/dist/bin/tests/system/checkconf/good.conf | 14 +-
external/mpl/bind/dist/bin/tests/system/checkconf/tests.sh | 9 +
external/mpl/bind/dist/bin/tests/system/checkzone/tests.sh | 7 +-
external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-dhcid.db | 2 +
external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-eid.db | 2 +
external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-nimloc.db | 2 +
external/mpl/bind/dist/bin/tests/system/checkzone/zones/crashzone.db | 2 +-
external/mpl/bind/dist/bin/tests/system/clean.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/conf.sh.common | 326 +
external/mpl/bind/dist/bin/tests/system/conf.sh.in | 278 +-
external/mpl/bind/dist/bin/tests/system/conf.sh.win32 | 289 +-
external/mpl/bind/dist/bin/tests/system/cookie/tests.sh | 54 +-
external/mpl/bind/dist/bin/tests/system/coverage/13-dotted-dotless/expect | 7 +
external/mpl/bind/dist/bin/tests/system/coverage/clean.sh | 1 +
external/mpl/bind/dist/bin/tests/system/coverage/setup.sh | 75 +-
external/mpl/bind/dist/bin/tests/system/coverage/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/delzone/ns2/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/digdelv/ans5/ans.pl | 174 +
external/mpl/bind/dist/bin/tests/system/digdelv/clean.sh | 25 +-
external/mpl/bind/dist/bin/tests/system/digdelv/ns2/example.db.in | 47 +
external/mpl/bind/dist/bin/tests/system/digdelv/ns2/sign.sh | 24 +
external/mpl/bind/dist/bin/tests/system/digdelv/prereq.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/digdelv/setup.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/digdelv/tests.sh | 774 +-
external/mpl/bind/dist/bin/tests/system/dlzexternal/tests.sh | 18 +-
external/mpl/bind/dist/bin/tests/system/dnssec/clean.sh | 186 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns1/sign.sh | 31 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns2/example.db.in | 7 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns2/sign.sh | 188 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dname-at-apex-nsec3.example.db.in | 4 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dnskey-unsupported-2.example.db.in | 27 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dnskey-unsupported.example.db.in | 27 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/named.conf.in | 20 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/occluded.example.db.in | 24 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/sign.sh | 409 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns3/unsupported-algorithm.key | 1 +
external/mpl/bind/dist/bin/tests/system/dnssec/ns5/sign.sh | 22 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns6/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns6/named.conf.in | 2 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns6/sign.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/dnssec/ns7/sign.sh | 16 +-
external/mpl/bind/dist/bin/tests/system/dnssec/prereq.sh | 11 +-
external/mpl/bind/dist/bin/tests/system/dnssec/setup.sh | 36 +-
external/mpl/bind/dist/bin/tests/system/dnssec/tests.sh | 3042 +++++----
external/mpl/bind/dist/bin/tests/system/dscp/ns1/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns2/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns4/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns5/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns6/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dscp/ns7/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/dsdigest/ns2/sign.sh | 5 +-
external/mpl/bind/dist/bin/tests/system/dyndb/tests.sh | 36 +-
external/mpl/bind/dist/bin/tests/system/emptyzones/tests.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/fetchlimit/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/fetchlimit/tests.sh | 11 +-
external/mpl/bind/dist/bin/tests/system/filter-aaaa/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/forward/ns1/root.db | 3 +
external/mpl/bind/dist/bin/tests/system/forward/ns2/named.conf.in | 5 +
external/mpl/bind/dist/bin/tests/system/forward/ns3/named.conf.in | 6 +
external/mpl/bind/dist/bin/tests/system/forward/ns4/named.conf.in | 1 +
external/mpl/bind/dist/bin/tests/system/forward/ns7/named.conf.in | 28 +
external/mpl/bind/dist/bin/tests/system/forward/ns7/root.db | 28 +
external/mpl/bind/dist/bin/tests/system/forward/prereq.sh | 21 +
external/mpl/bind/dist/bin/tests/system/forward/setup.sh | 1 +
external/mpl/bind/dist/bin/tests/system/forward/tests.sh | 28 +
external/mpl/bind/dist/bin/tests/system/genzone.sh | 19 +-
external/mpl/bind/dist/bin/tests/system/geoip/tests.sh | 28 +-
external/mpl/bind/dist/bin/tests/system/ifconfig.bat | 18 +-
external/mpl/bind/dist/bin/tests/system/inline/clean.sh | 133 +-
external/mpl/bind/dist/bin/tests/system/inline/ns2/nsec3-loop.db.in | 23 +
external/mpl/bind/dist/bin/tests/system/inline/setup.sh | 1 +
external/mpl/bind/dist/bin/tests/system/inline/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/ixfr/clean.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/ixfr/ixfr-stats.good | 3 +
external/mpl/bind/dist/bin/tests/system/ixfr/tests.sh | 27 +-
external/mpl/bind/dist/bin/tests/system/keepalive/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/01-ksk-inactive/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/02-zsk-inactive/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/03-ksk-unpublished/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/04-zsk-unpublished/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/05-ksk-unpub-active/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/06-zsk-unpub-active/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/07-ksk-ttl/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/08-zsk-ttl/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/09-no-keys/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/10-change-roll/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/11-many-simul/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/12-many-active/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/13-noroll/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/14-wrongalg/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/15-unspec/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/16-wrongalg-unspec/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/17-noforce/expect | 2 +-
external/mpl/bind/dist/bin/tests/system/keymgr/18-nonstd-prepub/expect | 4 +-
external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/README | 7 +
external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/expect | 12 +
external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/extra.sh | 19 +
external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/policy.conf | 18 +
external/mpl/bind/dist/bin/tests/system/keymgr/clean.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/keymgr/setup.sh | 10 +
external/mpl/bind/dist/bin/tests/system/keymgr/tests.sh | 157 +-
external/mpl/bind/dist/bin/tests/system/legacy/ns1/named1.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/legacy/ns4/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/legacy/ns5/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/legacy/ns6/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/legacy/ns7/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/legacy/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/logfileconfig/tests.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/masterformat/tests.sh | 24 +-
external/mpl/bind/dist/bin/tests/system/mirror/ns1/root.db.in | 2 +-
external/mpl/bind/dist/bin/tests/system/mirror/ns2/initially-unavailable.db.in | 2 +-
external/mpl/bind/dist/bin/tests/system/mirror/ns2/named.conf.in | 6 +
external/mpl/bind/dist/bin/tests/system/mirror/ns2/sign.sh | 12 +
external/mpl/bind/dist/bin/tests/system/mirror/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/mirror/ns3/named.conf.in | 6 +
external/mpl/bind/dist/bin/tests/system/mirror/tests.sh | 119 +-
external/mpl/bind/dist/bin/tests/system/mkeys/README | 3 +
external/mpl/bind/dist/bin/tests/system/mkeys/clean.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns1/root.db | 20 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns1/sign.sh | 7 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns1/unsupported.key | 1 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns2/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/mkeys/ns6/named.args | 1 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns6/named.conf.in | 43 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns6/setup.sh | 30 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns6/unsupported-managed.key | 1 +
external/mpl/bind/dist/bin/tests/system/mkeys/ns7/named.conf.in | 50 +
external/mpl/bind/dist/bin/tests/system/mkeys/setup.sh | 3 +
external/mpl/bind/dist/bin/tests/system/mkeys/tests.sh | 73 +-
external/mpl/bind/dist/bin/tests/system/names/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/notify/clean.sh | 7 +-
external/mpl/bind/dist/bin/tests/system/notify/tests.sh | 42 +-
external/mpl/bind/dist/bin/tests/system/nsupdate/ns2/named.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/nsupdate/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/pipelined/ns3/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/pipelined/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/qmin/tests.sh | 62 +-
external/mpl/bind/dist/bin/tests/system/redirect/tests.sh | 19 +-
external/mpl/bind/dist/bin/tests/system/resolver/ns7/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/resolver/tests.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/rndc/ns6/named.args | 2 +-
external/mpl/bind/dist/bin/tests/system/rndc/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/rpz/ns1/named.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/rpz/ns4/named.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/rpz/ns5/named.args | 3 +-
external/mpl/bind/dist/bin/tests/system/rpz/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/rpzrecurse/ns4/named.conf.in | 9 +
external/mpl/bind/dist/bin/tests/system/rpzrecurse/tests.sh | 6 +-
external/mpl/bind/dist/bin/tests/system/rrchecker/typelist.good | 2 +
external/mpl/bind/dist/bin/tests/system/rrl/tests.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/runtime/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/serve-stale/ans2/ans.pl | 10 +
external/mpl/bind/dist/bin/tests/system/serve-stale/clean.sh | 1 +
external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named1.conf.in | 3 +-
external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named2.conf.in | 3 +-
external/mpl/bind/dist/bin/tests/system/serve-stale/ns3/named.conf.in | 4 +-
external/mpl/bind/dist/bin/tests/system/serve-stale/tests.sh | 75 +-
external/mpl/bind/dist/bin/tests/system/sfcache/clean.sh | 22 +-
external/mpl/bind/dist/bin/tests/system/sfcache/ns1/root.db.in | 2 +
external/mpl/bind/dist/bin/tests/system/sfcache/ns1/sign.sh | 16 +-
external/mpl/bind/dist/bin/tests/system/sfcache/ns2/sign.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/sfcache/ns5/sign.sh | 19 +
external/mpl/bind/dist/bin/tests/system/sfcache/setup.sh | 12 +-
external/mpl/bind/dist/bin/tests/system/sfcache/tests.sh | 76 +-
external/mpl/bind/dist/bin/tests/system/staticstub/tests.sh | 8 +-
external/mpl/bind/dist/bin/tests/system/statistics/tests.sh | 7 +-
external/mpl/bind/dist/bin/tests/system/statschannel/tests.sh | 1 +
external/mpl/bind/dist/bin/tests/system/stop.pl | 35 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/clean.sh | 36 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/ns1/sign.sh | 25 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/setup.sh | 14 +-
external/mpl/bind/dist/bin/tests/system/synthfromdnssec/tests.sh | 84 +-
external/mpl/bind/dist/bin/tests/system/tsiggss/clean.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/tsiggss/tests.sh | 126 +-
external/mpl/bind/dist/bin/tests/system/ttl/clean.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/ttl/setup.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/ttl/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/views/tests.sh | 4 +-
external/mpl/bind/dist/bin/tests/system/xfer/axfr-stats.good | 3 +
external/mpl/bind/dist/bin/tests/system/xfer/clean.sh | 3 +-
external/mpl/bind/dist/bin/tests/system/xfer/dig1.good | 7 +
external/mpl/bind/dist/bin/tests/system/xfer/dig2.good | 7 +
external/mpl/bind/dist/bin/tests/system/xfer/ns1/named.conf.in | 5 +
external/mpl/bind/dist/bin/tests/system/xfer/ns1/xfer-stats.db | 13 +
external/mpl/bind/dist/bin/tests/system/xfer/ns3/named.conf.in | 6 +
external/mpl/bind/dist/bin/tests/system/xfer/tests.sh | 64 +-
external/mpl/bind/dist/bin/tests/system/xferquota/tests.sh | 2 +-
external/mpl/bind/dist/bin/tests/system/zonechecks/tests.sh | 2 +-
external/mpl/bind/dist/bin/tools/arpaname.docbook | 1 +
external/mpl/bind/dist/bin/tools/arpaname.html | 2 +-
external/mpl/bind/dist/bin/tools/dnstap-read.docbook | 1 +
external/mpl/bind/dist/bin/tools/dnstap-read.html | 2 +-
external/mpl/bind/dist/bin/tools/mdig.docbook | 1 +
external/mpl/bind/dist/bin/tools/mdig.html | 2 +-
external/mpl/bind/dist/bin/tools/named-journalprint.docbook | 1 +
external/mpl/bind/dist/bin/tools/named-journalprint.html | 2 +-
external/mpl/bind/dist/bin/tools/named-nzd2nzf.docbook | 1 +
external/mpl/bind/dist/bin/tools/named-nzd2nzf.html | 2 +-
external/mpl/bind/dist/bin/tools/named-rrchecker.docbook | 1 +
external/mpl/bind/dist/bin/tools/named-rrchecker.html | 2 +-
external/mpl/bind/dist/bin/tools/nsec3hash.docbook | 1 +
external/mpl/bind/dist/bin/tools/nsec3hash.html | 2 +-
external/mpl/bind/dist/config.h.win32 | 23 +-
external/mpl/bind/dist/configure.ac | 114 +-
external/mpl/bind/dist/contrib/README | 55 +-
external/mpl/bind/dist/contrib/dlz/modules/ldap/testing/dlz.schema | 223 +-
external/mpl/bind/dist/contrib/dlz/modules/ldap/testing/example.ldif | 24 +
external/mpl/bind/dist/doc/arm/Bv9ARM-book.xml | 681 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch01.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch02.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch03.html | 13 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch04.html | 47 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch05.html | 561 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch06.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch07.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch08.html | 69 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch09.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch10.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch11.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.ch12.html | 4 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.html | 10 +-
external/mpl/bind/dist/doc/arm/Bv9ARM.pdf | Bin
external/mpl/bind/dist/doc/arm/man.arpaname.html | 4 +-
external/mpl/bind/dist/doc/arm/man.ddns-confgen.html | 4 +-
external/mpl/bind/dist/doc/arm/man.delv.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dig.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-cds.html | 10 +-
external/mpl/bind/dist/doc/arm/man.dnssec-checkds.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-coverage.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-dsfromkey.html | 227 +-
external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-keyfromlabel.html | 6 +-
external/mpl/bind/dist/doc/arm/man.dnssec-keygen.html | 6 +-
external/mpl/bind/dist/doc/arm/man.dnssec-keymgr.html | 72 +-
external/mpl/bind/dist/doc/arm/man.dnssec-revoke.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-settime.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-signzone.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnssec-verify.html | 4 +-
external/mpl/bind/dist/doc/arm/man.dnstap-read.html | 4 +-
external/mpl/bind/dist/doc/arm/man.filter-aaaa.html | 4 +-
external/mpl/bind/dist/doc/arm/man.host.html | 4 +-
external/mpl/bind/dist/doc/arm/man.mdig.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named-checkconf.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named-checkzone.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named-journalprint.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named-nzd2nzf.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named-rrchecker.html | 4 +-
external/mpl/bind/dist/doc/arm/man.named.conf.html | 120 +-
external/mpl/bind/dist/doc/arm/man.named.html | 4 +-
external/mpl/bind/dist/doc/arm/man.nsec3hash.html | 4 +-
external/mpl/bind/dist/doc/arm/man.nslookup.html | 4 +-
external/mpl/bind/dist/doc/arm/man.nsupdate.html | 4 +-
external/mpl/bind/dist/doc/arm/man.pkcs11-destroy.html | 4 +-
external/mpl/bind/dist/doc/arm/man.pkcs11-keygen.html | 4 +-
external/mpl/bind/dist/doc/arm/man.pkcs11-list.html | 4 +-
external/mpl/bind/dist/doc/arm/man.pkcs11-tokens.html | 4 +-
external/mpl/bind/dist/doc/arm/man.rndc-confgen.html | 4 +-
external/mpl/bind/dist/doc/arm/man.rndc.conf.html | 4 +-
external/mpl/bind/dist/doc/arm/man.rndc.html | 4 +-
external/mpl/bind/dist/doc/arm/notes.html | 63 +-
external/mpl/bind/dist/doc/arm/notes.pdf | Bin
external/mpl/bind/dist/doc/arm/notes.txt | 39 +-
external/mpl/bind/dist/doc/arm/notes.xml | 61 +-
external/mpl/bind/dist/doc/arm/options.grammar.xml | 49 +-
external/mpl/bind/dist/doc/misc/docbook-grammars.pl | 4 +-
external/mpl/bind/dist/doc/misc/docbook-options.pl | 4 +-
external/mpl/bind/dist/doc/misc/docbook-zoneopt.pl | 4 +-
external/mpl/bind/dist/doc/misc/options | 71 +-
external/mpl/bind/dist/doc/misc/roadmap | 3 +-
external/mpl/bind/dist/isc-config.sh.docbook | 1 +
external/mpl/bind/dist/isc-config.sh.html | 2 +-
external/mpl/bind/dist/lib/bind9/api | 2 +-
external/mpl/bind/dist/lib/dns/Makefile.in | 6 +-
external/mpl/bind/dist/lib/dns/api | 4 +-
external/mpl/bind/dist/lib/dns/include/dst/Makefile.in | 2 +-
external/mpl/bind/dist/lib/dns/rdata/generic/amtrelay_260.c | 469 +
external/mpl/bind/dist/lib/dns/rdata/generic/amtrelay_260.h | 31 +
external/mpl/bind/dist/lib/dns/rdata/generic/zonemd_63.c | 315 +
external/mpl/bind/dist/lib/dns/rdata/generic/zonemd_63.h | 33 +
external/mpl/bind/dist/lib/dns/win32/libdns.def.in | 5 +-
external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.filters.in | 6 -
external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.in | 2 -
external/mpl/bind/dist/lib/irs/api | 2 +-
external/mpl/bind/dist/lib/isc/Makefile.in | 6 +-
external/mpl/bind/dist/lib/isc/api | 4 +-
external/mpl/bind/dist/lib/isc/include/isc/Makefile.in | 4 +-
external/mpl/bind/dist/lib/isc/unix/include/isc/Makefile.in | 2 +-
external/mpl/bind/dist/lib/isc/unix/include/isc/stdatomic.h | 154 +
external/mpl/bind/dist/lib/isc/win32/.dir-locals.el | 35 +
external/mpl/bind/dist/lib/isc/win32/libisc.def.in | 14 +-
external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.filters.in | 9 -
external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.in | 3 -
external/mpl/bind/dist/lib/isccc/Makefile.in | 2 -
external/mpl/bind/dist/lib/isccc/api | 4 +-
external/mpl/bind/dist/lib/isccc/include/isccc/Makefile.in | 2 +-
external/mpl/bind/dist/lib/isccc/win32/libisccc.def | 5 -
external/mpl/bind/dist/lib/isccc/win32/libisccc.vcxproj.filters.in | 8 +-
external/mpl/bind/dist/lib/isccc/win32/libisccc.vcxproj.in | 2 -
external/mpl/bind/dist/lib/isccfg/api | 2 +-
external/mpl/bind/dist/lib/isccfg/win32/libisccfg.def | 3 -
external/mpl/bind/dist/lib/ns/api | 2 +-
external/mpl/bind/dist/m4/ax_posix_shell.m4 | 2 +-
external/mpl/bind/dist/srcid | 2 +-
external/mpl/bind/dist/version | 6 +-
external/mpl/bind/dist/win32utils/Configure | 40 +-
external/mpl/bind/dist/win32utils/bind9.sln.in | 8 +
409 files changed, 8449 insertions(+), 5605 deletions(-)
diffs (truncated from 24928 to 300 lines):
diff -r ba5aefe25b62 -r ca90f130e59e external/mpl/bind/dist/CHANGES
--- a/external/mpl/bind/dist/CHANGES Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/CHANGES Sun Feb 24 18:56:37 2019 +0000
@@ -1,14 +1,203 @@
- --- 9.13.5-W1 released ---
+ --- 9.13.7 released ---
+
+5165. [contrib] Removed SDB drivers from contrib; they're obsolete.
+ [GL #428]
+
+5164. [bug] Correct errno to result translation in dlz filesystem
+ modules. [GL #884]
+
+5163. [cleanup] Out-of-tree builds failed --enable-dnstap. [GL #836]
+
+5162. [cleanup] Improve dnssec-keymgr manual. Thanks to Tony Finch.
+ [GL !1518]
+
+5161. [bug] Do not require the SEP bit to be set for mirror zone
+ trust anchors. [GL #873]
+
+5160. [contrib] Added DNAME support to the DLZ LDAP schema. Also
+ fixed a compilation bug affecting several DLZ
+ modules. [GL #872]
+
+5159. [bug] dnssec-coverage was incorrectly ignoring
+ names specified on the command line without
+ trailing dots. [GL !1478]
+
+5158. [protocol] Add support for AMTRELAY and ZONEMD. [GL #867]
+
+5157. [bug] Nslookup now errors out if there are extra command
+ line arguments. [GL #207]
+
+5141. [security] Zone transfer controls for writable DLZ zones were
+ not effective as the allowzonexfr method was not being
+ called for such zones. (CVE-2019-6465) [GL #790]
+
+5118. [security] Named could crash if it is managing a key with
+ `managed-keys` and the authoritative zone is rolling
+ the key to an unsupported algorithm. (CVE-2018-5745)
+ [GL #780]
+
+5110. [security] Named leaked memory if there were multiple Key Tag
+ EDNS options present. (CVE-2018-5744) [GL #772]
+
+ --- 9.13.6 released ---
+
+5156. [doc] Extended and refined the section of the ARM describing
+ mirror zones. [GL #774]
+
+5155. [func] "named -V" now outputs the default paths to
+ named.conf, rndc.conf, bind.keys, and other
+ files used or created by named and other tools, so
+ that the correct paths to these files can quickly be
+ determined regardless of the configure settings
+ used when BIND was built. [GL #859]
+
+5154. [bug] dig: process_opt could be called twice on the same
+ message leading to a assertion failure. [GL #860]
+
+5153. [func] Zone transfer statistics (size, number of records, and
+ number of messages) are now logged for outgoing
+ transfers as well as incoming ones. [GL #513]
+
+5152. [func] Improved logging of DNSSEC key events:
+ - Zone signing and DNSKEY maintenance events are
+ now logged to the "dnssec" category
+ - Messages are now logged when DNSSEC keys are
+ pubished, activated, inactivated, deleted,
+ or revoked.
+ [GL #714]
+
+5151. [func] Options that have been been marked as obsolete in
+ named.conf for a very long time are now fatal
+ configuration errors. [GL #358]
+
+5150. [cleanup] Remove the ability to compile BIND with assertions
+ disabled. [GL #735]
+
+5149. [func] "rndc dumpdb" now prints a line above a stale RRset
+ indicating how long the data will be retained in the
+ cache for emergency use. [GL #101]
+
+5148. [bug] named did not sign the TKEY response. [GL #821]
+
+5147. [bug] dnssec-keymgr: Add a five-minute margin to better
+ handle key events close to 'now'. [GL #848]
+
+5146. [placeholder]
+
+5145. [func] Use atomics instead of locked variables for isc_quota
+ and isc_counter. [GL !1389]
+
+5144. [bug] dig now returns a non-zero exit code when a TCP
+ connection is prematurely closed by a peer more than
+ once for the same lookup. [GL #820]
+
+5143. [bug] dnssec-keymgr and dnssec-coverage failed to find
+ key files for zone names ending in ".". [GL #560]
+
+5142. [cleanup] Removed "configure --disable-rpz-nsip" and
+ "--disable-rpz-nsdname" options. "nsip-enable"
+ and "nsdname-enable" both now default to yes,
+ regardless of compile-time settings. [GL #824]
+
+5140. [bug] Don't immediately mark existing keys as inactive and
+ deleted when running dnssec-keymgr for the first
+ time. [GL #117]
+
+5139. [bug] If possible, don't use forwarders when priming.
+ This ensures we can get root server IP addresses
+ from priming query response glue, which may not
+ be present if the forwarding server is returning
+ minimal responses. [GL #752]
+
+5138. [bug] Under some circumstances named could hit an assertion
+ failure when doing qname minimization when using
+ forwarders. [GL #797]
+
+5137. [func] named now logs messages whenever a mirror zone becomes
+ usable or unusable for resolution purposes. [GL #818]
+
+5136. [cleanup] Check in named-checkconf that allow-update and
+ allow-update-forwarding are not set at the
+ view/options level; fix documentation. [GL #512]
+
+5135. [port] sparc: Use smt_pause() instead of pause. [GL #816]
+
+5134. [bug] win32: WSAStartup was not called before getservbyname
+ was called. [GL #590]
+
+5133. [bug] 'rndc managed-keys' didn't handle class and view
+ correctly and failed to add new lines between each
+ view. [GL !1327]
+
+5132. [bug] Fix race condition in cleanup part of dns_dt_create().
+ [GL !1323]
+
+5131. [cleanup] Address Coverity warnings. [GL #801]
+
+5130. [cleanup] Remove support for l10n message catalogs. [GL #709]
+
+5129. [contrib] sdlz_helper.c:build_querylist was not properly
+ splitting the query string. [GL #798]
+
+5128. [bug] Refreshkeytime was not being updated for managed
+ keys zones. [GL #784]
+
+5127. [bug] rcode.c:maybe_numeric failed to handle NUL in text
+ regions. [GL #807]
+
+5126. [bug] Named incorrectly accepted empty base64 and hex encoded
+ fields when reading master files. [GL #807]
+
+5125. [bug] Allow for up to 100 records or 64k of data when caching
+ a negative response. [GL #804]
+
+5124. [bug] Named could incorrectly return FORMERR rather than
+ SERVFAIL. [GL #804]
+
+5123. [bug] dig could hang indefinitely after encountering an error
+ before creating a TCP socket. [GL #692]
+
+5122. [bug] In a "forward first;" configuration, a forwarder
+ timeout did not prevent that forwarder from being
+ queried again after falling back to full recursive
+ resolution. [GL #315]
+
+5121. [contrib] dlz_stub_driver.c fails to return ISC_R_NOTFOUND on none
+ matching zone names. [GL !1299]
+
+5120. [placeholder]
+
+5119. [placeholder]
+
+5117. [placeholder]
+
+5116. [bug] Named/named-checkconf triggered a assertion when
+ a mirror zone's name is bad. [GL #778]
+
+5115. [bug] Allow unsupported algorithms in zone when not used for
+ signing with dnssec-signzone. [GL #783]
+
+5114. [func] Include a 'reconfig/reload in progress' status line
+ in rndc status, use it in tests.
5113. [port] Fixed a Windows build error.
+5112. [bug] Named/named-checkconf could dump core if there was
+ a missing masters clause and a bad notify clause.
+ [GL #779]
+
+5111. [bug] Occluded DNSKEY records could make it into the
+ delegating NSEC/NSEC3 bitmap. [GL #742]
+
+5109. [cleanup] Remove support for RSAMD5 algorithm. [GL #628]
+
--- 9.13.5 released ---
5108. [bug] Named could fail to determine bottom of zone when
removing out of date keys leading to invalid NSEC
and NSEC3 records being added to the zone. [GL #771]
-5107. [bug] 'host -U' did not work. [GL #769]
+5107. [bug] 'host -U' did not work. [GL #769]
5106. [experimental] A new "plugin" mechanism has been added to allow
extension of query processing functionality through
diff -r ba5aefe25b62 -r ca90f130e59e external/mpl/bind/dist/COPYRIGHT
--- a/external/mpl/bind/dist/COPYRIGHT Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/COPYRIGHT Sun Feb 24 18:56:37 2019 +0000
@@ -1,4 +1,4 @@
-Copyright (C) 1996-2018 Internet Systems Consortium, Inc. ("ISC")
+Copyright (C) 1996-2019 Internet Systems Consortium, Inc. ("ISC")
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
diff -r ba5aefe25b62 -r ca90f130e59e external/mpl/bind/dist/PLATFORMS
--- a/external/mpl/bind/dist/PLATFORMS Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/PLATFORMS Sun Feb 24 18:56:37 2019 +0000
@@ -13,49 +13,50 @@
Regularly tested platforms
-As of May 2018, BIND 9.13 is tested on the following systems:
+As of Jan 2019, BIND 9.13 is fully supported and regularly tested on the
+following systems:
- * Debian 8, 9
+ * Debian 8, 9, 10
* Ubuntu 16.04, 18.04
- * Fedora 27, 28
- * Red Hat/CentOS 6, 7
- * FreeBSD 10.x, 11.x
- * OpenBSD 6.3
+ * Fedora 28, 29
+ * Red Hat Enterprise Linux / CentOS 6, 7
+ * FreeBSD 11.x
+ * OpenBSD 6.2, 6.3
The amd64, i386, armhf and arm64 CPU architectures are all fully
supported.
Best effort
-The following are platforms on which BIND is known to build and run, but
-on which it is not routinely tested. ISC makes every effort to fix bugs on
-these platforms, but may be unable to do so quickly due to lack of
-hardware, less familiarity on the part of engineering staff, and other
-constraints.
+The following are platforms on which BIND is known to build and run. ISC
+makes every effort to fix bugs on these platforms, but may be unable to do
+so quickly due to lack of hardware, less familiarity on the part of
+engineering staff, and other constraints. With the exception of Windows
+Server 2012 R2, none of these are tested regularly by ISC.
- * Windows 10 / x64
* Windows Server 2012 R2, 2016 / x64
+ * Windows 10 / x64
* macOS 10.12+
- * Solaris 10
- * FreeBSD 12+
- * OpenBSD 6.2
+ * Solaris 11
+ * FreeBSD 10.x, 12.0+
+ * OpenBSD 6.4+
* NetBSD
- * Older or less popular Linux distributions still supported by their
- vendors, such as:
+ * Other Linux distributions still supported by their vendors, such as:
+ Ubuntu 14.04, 18.10+
+ Gentoo
- + ArchLinux
+ + Arch Linux
+ Alpine Linux
- * OpenWRT/LEDE 17.0
+ * OpenWRT/LEDE 17.01+
* Other CPU architectures (mips, mipsel, sparc, ...)
Unsupported platforms
-These are platforms on which BIND is known not to build or run:
+These are platforms on which BIND 9.13 is known not to build or run:
* Platforms without at least OpenSSL 1.0.2
* Windows 10 / x86
* Windows Server 2012 and older
+ * Solaris 10 and older
* Platforms that don't support IPv6 Advanced Socket API (RFC 3542)
* Platforms that don't support atomic operations (via compiler or
library)
@@ -80,7 +81,7 @@
* The lowest worthwhile CPU implementation is Armv7-A, therefore the
recommended build option is -march=armv7-a.
- * FPU should be set at VFPv3-D16 as they represent the miminum
+ * FPU should be set at VFPv3-D16 as they represent the minimum
specification of the processors to support here, therefore the
recommended build option is -mfpu=vfpv3-d16.
Home |
Main Index |
Thread Index |
Old Index