Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/external/mpl/bind/dist --- 9.13.7 released ---



details:   https://anonhg.NetBSD.org/src/rev/8d158aeba142
branches:  trunk
changeset: 839531:8d158aeba142
user:      christos <christos%NetBSD.org@localhost>
date:      Sun Feb 24 18:56:37 2019 +0000

description:
--- 9.13.7 released ---

5165.   [contrib]       Removed SDB drivers from contrib; they're obsolete.
                        [GL #428]

5164.   [bug]           Correct errno to result translation in dlz filesystem
                        modules. [GL #884]

5163.   [cleanup]       Out-of-tree builds failed --enable-dnstap. [GL #836]

5162.   [cleanup]       Improve dnssec-keymgr manual. Thanks to Tony Finch.
                        [GL !1518]

5161.   [bug]           Do not require the SEP bit to be set for mirror zone
                        trust anchors. [GL #873]

5160.   [contrib]       Added DNAME support to the DLZ LDAP schema. Also
                        fixed a compilation bug affecting several DLZ
                        modules. [GL #872]

5159.   [bug]           dnssec-coverage was incorrectly ignoring
                        names specified on the command line without
                        trailing dots. [GL !1478]

5158.   [protocol]      Add support for AMTRELAY and ZONEMD. [GL #867]

5157.   [bug]           Nslookup now errors out if there are extra command
                        line arguments. [GL #207]

5141.   [security]      Zone transfer controls for writable DLZ zones were
                        not effective as the allowzonexfr method was not being
                        called for such zones. (CVE-2019-6465) [GL #790]

5118.   [security]      Named could crash if it is managing a key with
                        `managed-keys` and the authoritative zone is rolling
                        the key to an unsupported algorithm. (CVE-2018-5745)
                        [GL #780]

5110.   [security]      Named leaked memory if there were multiple Key Tag
                        EDNS options present. (CVE-2018-5744) [GL #772]

        --- 9.13.6 released ---

5156.   [doc]           Extended and refined the section of the ARM describing
                        mirror zones. [GL #774]

5155.   [func]          "named -V" now outputs the default paths to
                        named.conf, rndc.conf, bind.keys, and other
                        files used or created by named and other tools, so
                        that the correct paths to these files can quickly be
                        determined regardless of the configure settings
                        used when BIND was built. [GL #859]

5154.   [bug]           dig: process_opt could be called twice on the same
                        message leading to a assertion failure. [GL #860]

5153.   [func]          Zone transfer statistics (size, number of records, and
                        number of messages) are now logged for outgoing
                        transfers as well as incoming ones. [GL #513]

5152.   [func]          Improved logging of DNSSEC key events:
                        - Zone signing and DNSKEY maintenance events are
                          now logged to the "dnssec" category
                        - Messages are now logged when DNSSEC keys are
                          pubished, activated, inactivated, deleted,
                          or revoked.
                        [GL #714]

5151.   [func]          Options that have been been marked as obsolete in
                        named.conf for a very long time are now fatal
                        configuration errors. [GL #358]

5150.   [cleanup]       Remove the ability to compile BIND with assertions
                        disabled. [GL #735]

5149.   [func]          "rndc dumpdb" now prints a line above a stale RRset
                        indicating how long the data will be retained in the
                        cache for emergency use. [GL #101]

5148.   [bug]           named did not sign the TKEY response. [GL #821]

5147.   [bug]           dnssec-keymgr: Add a five-minute margin to better
                        handle key events close to 'now'. [GL #848]

5146.   [placeholder]

5145.   [func]          Use atomics instead of locked variables for isc_quota
                        and isc_counter. [GL !1389]

5144.   [bug]           dig now returns a non-zero exit code when a TCP
                        connection is prematurely closed by a peer more than
                        once for the same lookup.  [GL #820]

5143.   [bug]           dnssec-keymgr and dnssec-coverage failed to find
                        key files for zone names ending in ".". [GL #560]

5142.   [cleanup]       Removed "configure --disable-rpz-nsip" and
                        "--disable-rpz-nsdname" options. "nsip-enable"
                        and "nsdname-enable" both now default to yes,
                        regardless of compile-time settings. [GL #824]

5140.   [bug]           Don't immediately mark existing keys as inactive and
                        deleted when running dnssec-keymgr for the first
                        time. [GL #117]

5139.   [bug]           If possible, don't use forwarders when priming.
                        This ensures we can get root server IP addresses
                        from priming query response glue, which may not
                        be present if the forwarding server is returning
                        minimal responses. [GL #752]

5138.   [bug]           Under some circumstances named could hit an assertion
                        failure when doing qname minimization when using
                        forwarders. [GL #797]

5137.   [func]          named now logs messages whenever a mirror zone becomes
                        usable or unusable for resolution purposes. [GL #818]

5136.   [cleanup]       Check in named-checkconf that allow-update and
                        allow-update-forwarding are not set at the
                        view/options level; fix documentation. [GL #512]

5135.   [port]          sparc: Use smt_pause() instead of pause. [GL #816]

5134.   [bug]           win32: WSAStartup was not called before getservbyname
                        was called. [GL #590]

5133.   [bug]           'rndc managed-keys' didn't handle class and view
                        correctly and failed to add new lines between each
                        view. [GL !1327]

5132.   [bug]           Fix race condition in cleanup part of dns_dt_create().
                        [GL !1323]

5131.   [cleanup]       Address Coverity warnings. [GL #801]

5130.   [cleanup]       Remove support for l10n message catalogs. [GL #709]

5129.   [contrib]       sdlz_helper.c:build_querylist was not properly
                        splitting the query string. [GL #798]

5128.   [bug]           Refreshkeytime was not being updated for managed
                        keys zones. [GL #784]

5127.   [bug]           rcode.c:maybe_numeric failed to handle NUL in text
                        regions. [GL #807]

5126.   [bug]           Named incorrectly accepted empty base64 and hex encoded
                        fields when reading master files. [GL #807]

5125.   [bug]           Allow for up to 100 records or 64k of data when caching
                        a negative response. [GL #804]

5124.   [bug]           Named could incorrectly return FORMERR rather than
                        SERVFAIL. [GL #804]

5123.   [bug]           dig could hang indefinitely after encountering an error
                        before creating a TCP socket. [GL #692]

5122.   [bug]           In a "forward first;" configuration, a forwarder
                        timeout did not prevent that forwarder from being
                        queried again after falling back to full recursive
                        resolution. [GL #315]

5121.   [contrib]       dlz_stub_driver.c fails to return ISC_R_NOTFOUND on none
                        matching zone names. [GL !1299]

5120.   [placeholder]

5119.   [placeholder]

5117.   [placeholder]

5116.   [bug]           Named/named-checkconf triggered a assertion when
                        a mirror zone's name is bad. [GL #778]

5115.   [bug]           Allow unsupported algorithms in zone when not used for
                        signing with dnssec-signzone. [GL #783]

5114.   [func]          Include a 'reconfig/reload in progress' status line
                        in rndc status, use it in tests.

5113.   [port]          Fixed a Windows build error.

5112.   [bug]           Named/named-checkconf could dump core if there was
                        a missing masters clause and a bad notify clause.
                        [GL #779]

5111.   [bug]           Occluded DNSKEY records could make it into the
                        delegating NSEC/NSEC3 bitmap. [GL #742]

5109.   [cleanup]       Remove support for RSAMD5 algorithm. [GL #628]

diffstat:

 external/mpl/bind/dist/CHANGES                                                          |   193 +-
 external/mpl/bind/dist/COPYRIGHT                                                        |     2 +-
 external/mpl/bind/dist/PLATFORMS                                                        |    43 +-
 external/mpl/bind/dist/PLATFORMS.md                                                     |    42 +-
 external/mpl/bind/dist/README                                                           |    57 +-
 external/mpl/bind/dist/README.md                                                        |    46 +-
 external/mpl/bind/dist/bin/check/named-checkconf.docbook                                |     1 +
 external/mpl/bind/dist/bin/check/named-checkconf.html                                   |     2 +-
 external/mpl/bind/dist/bin/check/named-checkzone.docbook                                |     1 +
 external/mpl/bind/dist/bin/check/named-checkzone.html                                   |     2 +-
 external/mpl/bind/dist/bin/confgen/ddns-confgen.docbook                                 |     1 +
 external/mpl/bind/dist/bin/confgen/ddns-confgen.html                                    |     2 +-
 external/mpl/bind/dist/bin/confgen/rndc-confgen.docbook                                 |     1 +
 external/mpl/bind/dist/bin/confgen/rndc-confgen.html                                    |     2 +-
 external/mpl/bind/dist/bin/delv/delv.docbook                                            |     1 +
 external/mpl/bind/dist/bin/delv/delv.html                                               |     2 +-
 external/mpl/bind/dist/bin/dig/dig.docbook                                              |     1 +
 external/mpl/bind/dist/bin/dig/dig.html                                                 |     2 +-
 external/mpl/bind/dist/bin/dig/host.docbook                                             |     1 +
 external/mpl/bind/dist/bin/dig/host.html                                                |     2 +-
 external/mpl/bind/dist/bin/dig/nslookup.docbook                                         |     1 +
 external/mpl/bind/dist/bin/dig/nslookup.html                                            |     2 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-cds.docbook                                    |     7 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-cds.html                                       |     8 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-dsfromkey.docbook                              |   244 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-dsfromkey.html                                 |   225 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-importkey.docbook                              |     1 +
 external/mpl/bind/dist/bin/dnssec/dnssec-importkey.html                                 |     2 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keyfromlabel.docbook                           |     3 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keyfromlabel.html                              |     4 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keygen.docbook                                 |     3 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-keygen.html                                    |     4 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-revoke.docbook                                 |     1 +
 external/mpl/bind/dist/bin/dnssec/dnssec-revoke.html                                    |     2 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-settime.docbook                                |     1 +
 external/mpl/bind/dist/bin/dnssec/dnssec-settime.html                                   |     2 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-signzone.docbook                               |     1 +
 external/mpl/bind/dist/bin/dnssec/dnssec-signzone.html                                  |     2 +-
 external/mpl/bind/dist/bin/dnssec/dnssec-verify.docbook                                 |     1 +
 external/mpl/bind/dist/bin/dnssec/dnssec-verify.html                                    |     2 +-
 external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.filters.in                          |    18 +
 external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.in                                  |   112 +
 external/mpl/bind/dist/bin/dnssec/win32/cds.vcxproj.user                                |     3 +
 external/mpl/bind/dist/bin/named/named.conf.docbook                                     |   104 +-
 external/mpl/bind/dist/bin/named/named.conf.html                                        |   118 +-
 external/mpl/bind/dist/bin/named/named.docbook                                          |     1 +
 external/mpl/bind/dist/bin/named/named.html                                             |     2 +-
 external/mpl/bind/dist/bin/nsupdate/nsupdate.docbook                                    |     1 +
 external/mpl/bind/dist/bin/nsupdate/nsupdate.html                                       |     2 +-
 external/mpl/bind/dist/bin/pkcs11/pkcs11-destroy.docbook                                |     1 +
 external/mpl/bind/dist/bin/pkcs11/pkcs11-destroy.html                                   |     2 +-
 external/mpl/bind/dist/bin/pkcs11/pkcs11-keygen.docbook                                 |     1 +
 external/mpl/bind/dist/bin/pkcs11/pkcs11-keygen.html                                    |     2 +-
 external/mpl/bind/dist/bin/pkcs11/pkcs11-list.docbook                                   |     1 +
 external/mpl/bind/dist/bin/pkcs11/pkcs11-list.html                                      |     2 +-
 external/mpl/bind/dist/bin/pkcs11/pkcs11-tokens.docbook                                 |     1 +
 external/mpl/bind/dist/bin/pkcs11/pkcs11-tokens.html                                    |     2 +-
 external/mpl/bind/dist/bin/plugins/filter-aaaa.docbook                                  |     1 +
 external/mpl/bind/dist/bin/plugins/filter-aaaa.html                                     |     2 +-
 external/mpl/bind/dist/bin/python/dnssec-checkds.docbook                                |     1 +
 external/mpl/bind/dist/bin/python/dnssec-checkds.html                                   |     2 +-
 external/mpl/bind/dist/bin/python/dnssec-coverage.docbook                               |     1 +
 external/mpl/bind/dist/bin/python/dnssec-coverage.html                                  |     2 +-
 external/mpl/bind/dist/bin/python/dnssec-keymgr.docbook                                 |    69 +-
 external/mpl/bind/dist/bin/python/dnssec-keymgr.html                                    |    70 +-
 external/mpl/bind/dist/bin/python/isc/checkds.py.in                                     |     2 +-
 external/mpl/bind/dist/bin/python/isc/coverage.py.in                                    |     6 +-
 external/mpl/bind/dist/bin/python/isc/eventlist.py.in                                   |     2 +-
 external/mpl/bind/dist/bin/python/isc/keydict.py.in                                     |     9 +-
 external/mpl/bind/dist/bin/python/isc/keyseries.py.in                                   |    33 +-
 external/mpl/bind/dist/bin/python/isc/policy.py.in                                      |     9 +-
 external/mpl/bind/dist/bin/rndc/rndc.conf.docbook                                       |     1 +
 external/mpl/bind/dist/bin/rndc/rndc.conf.html                                          |     2 +-
 external/mpl/bind/dist/bin/rndc/rndc.docbook                                            |     1 +
 external/mpl/bind/dist/bin/rndc/rndc.html                                               |     2 +-
 external/mpl/bind/dist/bin/tests/optional/Makefile.in                                   |     6 -
 external/mpl/bind/dist/bin/tests/system/acl/tests.sh                                    |    12 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/named.args                       |     2 +-
 external/mpl/bind/dist/bin/tests/system/additional/tests.sh                             |    12 +-
 external/mpl/bind/dist/bin/tests/system/addzone/tests.sh                                |    12 +-
 external/mpl/bind/dist/bin/tests/system/allow-query/ns3/named.args                      |     2 +-
 external/mpl/bind/dist/bin/tests/system/allow-query/tests.sh                            |     8 -
 external/mpl/bind/dist/bin/tests/system/autosign/clean.sh                               |     7 +-
 external/mpl/bind/dist/bin/tests/system/autosign/ns2/example.db.in                      |     2 +
 external/mpl/bind/dist/bin/tests/system/autosign/ns2/keygen.sh                          |     3 +-
 external/mpl/bind/dist/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in  |     5 +
 external/mpl/bind/dist/bin/tests/system/autosign/ns3/keygen.sh                          |     9 +
 external/mpl/bind/dist/bin/tests/system/autosign/ns3/named.conf.in                      |     7 +
 external/mpl/bind/dist/bin/tests/system/autosign/ns3/secure.example.db.in               |     2 +
 external/mpl/bind/dist/bin/tests/system/autosign/tests.sh                               |    35 +-
 external/mpl/bind/dist/bin/tests/system/builtin/tests.sh                                |     2 +-
 external/mpl/bind/dist/bin/tests/system/cds/checktime.pl                                |    14 +-
 external/mpl/bind/dist/bin/tests/system/cds/setup.sh                                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/cds/tests.sh                                    |     6 +-
 external/mpl/bind/dist/bin/tests/system/checkconf/ancient.conf                          |    17 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-forwarding-view.conf |    14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-forwarding.conf      |    14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update-view.conf            |    14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-allow-update.conf                 |    14 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-mirror-zonename.conf              |     4 +
 external/mpl/bind/dist/bin/tests/system/checkconf/bad-stub-masters-dialup.conf          |    23 +
 external/mpl/bind/dist/bin/tests/system/checkconf/good.conf                             |    14 +-
 external/mpl/bind/dist/bin/tests/system/checkconf/tests.sh                              |     9 +
 external/mpl/bind/dist/bin/tests/system/checkzone/tests.sh                              |     7 +-
 external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-dhcid.db                    |     2 +
 external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-eid.db                      |     2 +
 external/mpl/bind/dist/bin/tests/system/checkzone/zones/bad-nimloc.db                   |     2 +
 external/mpl/bind/dist/bin/tests/system/checkzone/zones/crashzone.db                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/clean.sh                                        |     4 +-
 external/mpl/bind/dist/bin/tests/system/conf.sh.common                                  |   326 +
 external/mpl/bind/dist/bin/tests/system/conf.sh.in                                      |   278 +-
 external/mpl/bind/dist/bin/tests/system/conf.sh.win32                                   |   289 +-
 external/mpl/bind/dist/bin/tests/system/cookie/tests.sh                                 |    54 +-
 external/mpl/bind/dist/bin/tests/system/coverage/13-dotted-dotless/expect               |     7 +
 external/mpl/bind/dist/bin/tests/system/coverage/clean.sh                               |     1 +
 external/mpl/bind/dist/bin/tests/system/coverage/setup.sh                               |    75 +-
 external/mpl/bind/dist/bin/tests/system/coverage/tests.sh                               |     4 +-
 external/mpl/bind/dist/bin/tests/system/delzone/ns2/named.args                          |     2 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/ans5/ans.pl                             |   174 +
 external/mpl/bind/dist/bin/tests/system/digdelv/clean.sh                                |    25 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/ns2/example.db.in                       |    47 +
 external/mpl/bind/dist/bin/tests/system/digdelv/ns2/sign.sh                             |    24 +
 external/mpl/bind/dist/bin/tests/system/digdelv/prereq.sh                               |     6 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/setup.sh                                |     8 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/tests.sh                                |   774 +-
 external/mpl/bind/dist/bin/tests/system/dlzexternal/tests.sh                            |    18 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/clean.sh                                 |   186 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns1/sign.sh                              |    31 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/example.db.in                        |     7 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/sign.sh                              |   188 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dname-at-apex-nsec3.example.db.in    |     4 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dnskey-unsupported-2.example.db.in   |    27 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/dnskey-unsupported.example.db.in     |    27 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/named.conf.in                        |    20 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/occluded.example.db.in               |    24 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/sign.sh                              |   409 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/unsupported-algorithm.key            |     1 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns5/sign.sh                              |    22 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns6/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns6/named.conf.in                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns6/sign.sh                              |    12 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns7/sign.sh                              |    16 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/prereq.sh                                |    11 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/setup.sh                                 |    36 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/tests.sh                                 |  3042 +++++----
 external/mpl/bind/dist/bin/tests/system/dscp/ns1/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns2/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns3/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns4/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns5/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns6/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dscp/ns7/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/dsdigest/ns2/sign.sh                            |     5 +-
 external/mpl/bind/dist/bin/tests/system/dyndb/tests.sh                                  |    36 +-
 external/mpl/bind/dist/bin/tests/system/emptyzones/tests.sh                             |     3 +-
 external/mpl/bind/dist/bin/tests/system/fetchlimit/ns3/named.args                       |     2 +-
 external/mpl/bind/dist/bin/tests/system/fetchlimit/tests.sh                             |    11 +-
 external/mpl/bind/dist/bin/tests/system/filter-aaaa/tests.sh                            |     8 +-
 external/mpl/bind/dist/bin/tests/system/forward/ns1/root.db                             |     3 +
 external/mpl/bind/dist/bin/tests/system/forward/ns2/named.conf.in                       |     5 +
 external/mpl/bind/dist/bin/tests/system/forward/ns3/named.conf.in                       |     6 +
 external/mpl/bind/dist/bin/tests/system/forward/ns4/named.conf.in                       |     1 +
 external/mpl/bind/dist/bin/tests/system/forward/ns7/named.conf.in                       |    28 +
 external/mpl/bind/dist/bin/tests/system/forward/ns7/root.db                             |    28 +
 external/mpl/bind/dist/bin/tests/system/forward/prereq.sh                               |    21 +
 external/mpl/bind/dist/bin/tests/system/forward/setup.sh                                |     1 +
 external/mpl/bind/dist/bin/tests/system/forward/tests.sh                                |    28 +
 external/mpl/bind/dist/bin/tests/system/genzone.sh                                      |    19 +-
 external/mpl/bind/dist/bin/tests/system/geoip/tests.sh                                  |    28 +-
 external/mpl/bind/dist/bin/tests/system/ifconfig.bat                                    |    18 +-
 external/mpl/bind/dist/bin/tests/system/inline/clean.sh                                 |   133 +-
 external/mpl/bind/dist/bin/tests/system/inline/ns2/nsec3-loop.db.in                     |    23 +
 external/mpl/bind/dist/bin/tests/system/inline/setup.sh                                 |     1 +
 external/mpl/bind/dist/bin/tests/system/inline/tests.sh                                 |    12 +-
 external/mpl/bind/dist/bin/tests/system/ixfr/clean.sh                                   |     3 +-
 external/mpl/bind/dist/bin/tests/system/ixfr/ixfr-stats.good                            |     3 +
 external/mpl/bind/dist/bin/tests/system/ixfr/tests.sh                                   |    27 +-
 external/mpl/bind/dist/bin/tests/system/keepalive/tests.sh                              |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/01-ksk-inactive/expect                   |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/02-zsk-inactive/expect                   |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/03-ksk-unpublished/expect                |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/04-zsk-unpublished/expect                |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/05-ksk-unpub-active/expect               |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/06-zsk-unpub-active/expect               |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/07-ksk-ttl/expect                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/08-zsk-ttl/expect                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/09-no-keys/expect                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/10-change-roll/expect                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/11-many-simul/expect                     |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/12-many-active/expect                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/13-noroll/expect                         |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/14-wrongalg/expect                       |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/15-unspec/expect                         |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/16-wrongalg-unspec/expect                |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/17-noforce/expect                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/18-nonstd-prepub/expect                  |     4 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/README                       |     7 +
 external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/expect                       |    12 +
 external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/extra.sh                     |    19 +
 external/mpl/bind/dist/bin/tests/system/keymgr/19-old-keys/policy.conf                  |    18 +
 external/mpl/bind/dist/bin/tests/system/keymgr/clean.sh                                 |     8 +-
 external/mpl/bind/dist/bin/tests/system/keymgr/setup.sh                                 |    10 +
 external/mpl/bind/dist/bin/tests/system/keymgr/tests.sh                                 |   157 +-
 external/mpl/bind/dist/bin/tests/system/legacy/ns1/named1.conf.in                       |     9 +
 external/mpl/bind/dist/bin/tests/system/legacy/ns4/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/legacy/ns5/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/legacy/ns6/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/legacy/ns7/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/legacy/tests.sh                                 |     4 +-
 external/mpl/bind/dist/bin/tests/system/logfileconfig/tests.sh                          |     3 +-
 external/mpl/bind/dist/bin/tests/system/masterformat/tests.sh                           |    24 +-
 external/mpl/bind/dist/bin/tests/system/mirror/ns1/root.db.in                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/mirror/ns2/initially-unavailable.db.in          |     2 +-
 external/mpl/bind/dist/bin/tests/system/mirror/ns2/named.conf.in                        |     6 +
 external/mpl/bind/dist/bin/tests/system/mirror/ns2/sign.sh                              |    12 +
 external/mpl/bind/dist/bin/tests/system/mirror/ns3/named.args                           |     2 +-
 external/mpl/bind/dist/bin/tests/system/mirror/ns3/named.conf.in                        |     6 +
 external/mpl/bind/dist/bin/tests/system/mirror/tests.sh                                 |   119 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/README                                    |     3 +
 external/mpl/bind/dist/bin/tests/system/mkeys/clean.sh                                  |    14 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns1/root.db                               |    20 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns1/sign.sh                               |     7 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns1/unsupported.key                       |     1 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns2/named.args                            |     2 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns3/named.args                            |     2 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/ns6/named.args                            |     1 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns6/named.conf.in                         |    43 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns6/setup.sh                              |    30 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns6/unsupported-managed.key               |     1 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns7/named.conf.in                         |    50 +
 external/mpl/bind/dist/bin/tests/system/mkeys/setup.sh                                  |     3 +
 external/mpl/bind/dist/bin/tests/system/mkeys/tests.sh                                  |    73 +-
 external/mpl/bind/dist/bin/tests/system/names/tests.sh                                  |     2 +-
 external/mpl/bind/dist/bin/tests/system/notify/clean.sh                                 |     7 +-
 external/mpl/bind/dist/bin/tests/system/notify/tests.sh                                 |    42 +-
 external/mpl/bind/dist/bin/tests/system/nsupdate/ns2/named.conf.in                      |     9 +
 external/mpl/bind/dist/bin/tests/system/nsupdate/tests.sh                               |     4 +-
 external/mpl/bind/dist/bin/tests/system/pipelined/ns3/named.args                        |     2 +-
 external/mpl/bind/dist/bin/tests/system/pipelined/tests.sh                              |    12 +-
 external/mpl/bind/dist/bin/tests/system/qmin/tests.sh                                   |    62 +-
 external/mpl/bind/dist/bin/tests/system/redirect/tests.sh                               |    19 +-
 external/mpl/bind/dist/bin/tests/system/resolver/ns7/named.args                         |     2 +-
 external/mpl/bind/dist/bin/tests/system/resolver/tests.sh                               |     3 +-
 external/mpl/bind/dist/bin/tests/system/rndc/ns6/named.args                             |     2 +-
 external/mpl/bind/dist/bin/tests/system/rndc/tests.sh                                   |     4 +-
 external/mpl/bind/dist/bin/tests/system/rpz/ns1/named.conf.in                           |     9 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns4/named.conf.in                           |     9 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns5/named.args                              |     3 +-
 external/mpl/bind/dist/bin/tests/system/rpz/tests.sh                                    |    12 +-
 external/mpl/bind/dist/bin/tests/system/rpzrecurse/ns4/named.conf.in                    |     9 +
 external/mpl/bind/dist/bin/tests/system/rpzrecurse/tests.sh                             |     6 +-
 external/mpl/bind/dist/bin/tests/system/rrchecker/typelist.good                         |     2 +
 external/mpl/bind/dist/bin/tests/system/rrl/tests.sh                                    |    12 +-
 external/mpl/bind/dist/bin/tests/system/runtime/tests.sh                                |     8 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/ans2/ans.pl                         |    10 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/clean.sh                            |     1 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named1.conf.in                  |     3 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named2.conf.in                  |     3 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns3/named.conf.in                   |     4 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/tests.sh                            |    75 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/clean.sh                                |    22 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/ns1/root.db.in                          |     2 +
 external/mpl/bind/dist/bin/tests/system/sfcache/ns1/sign.sh                             |    16 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/ns2/sign.sh                             |    14 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/ns5/sign.sh                             |    19 +
 external/mpl/bind/dist/bin/tests/system/sfcache/setup.sh                                |    12 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/tests.sh                                |    76 +-
 external/mpl/bind/dist/bin/tests/system/staticstub/tests.sh                             |     8 +-
 external/mpl/bind/dist/bin/tests/system/statistics/tests.sh                             |     7 +-
 external/mpl/bind/dist/bin/tests/system/statschannel/tests.sh                           |     1 +
 external/mpl/bind/dist/bin/tests/system/stop.pl                                         |    35 +-
 external/mpl/bind/dist/bin/tests/system/synthfromdnssec/clean.sh                        |    36 +-
 external/mpl/bind/dist/bin/tests/system/synthfromdnssec/ns1/sign.sh                     |    25 +-
 external/mpl/bind/dist/bin/tests/system/synthfromdnssec/setup.sh                        |    14 +-
 external/mpl/bind/dist/bin/tests/system/synthfromdnssec/tests.sh                        |    84 +-
 external/mpl/bind/dist/bin/tests/system/tsiggss/clean.sh                                |     2 +-
 external/mpl/bind/dist/bin/tests/system/tsiggss/tests.sh                                |   126 +-
 external/mpl/bind/dist/bin/tests/system/ttl/clean.sh                                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/ttl/setup.sh                                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/ttl/tests.sh                                    |     2 +-
 external/mpl/bind/dist/bin/tests/system/views/tests.sh                                  |     4 +-
 external/mpl/bind/dist/bin/tests/system/xfer/axfr-stats.good                            |     3 +
 external/mpl/bind/dist/bin/tests/system/xfer/clean.sh                                   |     3 +-
 external/mpl/bind/dist/bin/tests/system/xfer/dig1.good                                  |     7 +
 external/mpl/bind/dist/bin/tests/system/xfer/dig2.good                                  |     7 +
 external/mpl/bind/dist/bin/tests/system/xfer/ns1/named.conf.in                          |     5 +
 external/mpl/bind/dist/bin/tests/system/xfer/ns1/xfer-stats.db                          |    13 +
 external/mpl/bind/dist/bin/tests/system/xfer/ns3/named.conf.in                          |     6 +
 external/mpl/bind/dist/bin/tests/system/xfer/tests.sh                                   |    64 +-
 external/mpl/bind/dist/bin/tests/system/xferquota/tests.sh                              |     2 +-
 external/mpl/bind/dist/bin/tests/system/zonechecks/tests.sh                             |     2 +-
 external/mpl/bind/dist/bin/tools/arpaname.docbook                                       |     1 +
 external/mpl/bind/dist/bin/tools/arpaname.html                                          |     2 +-
 external/mpl/bind/dist/bin/tools/dnstap-read.docbook                                    |     1 +
 external/mpl/bind/dist/bin/tools/dnstap-read.html                                       |     2 +-
 external/mpl/bind/dist/bin/tools/mdig.docbook                                           |     1 +
 external/mpl/bind/dist/bin/tools/mdig.html                                              |     2 +-
 external/mpl/bind/dist/bin/tools/named-journalprint.docbook                             |     1 +
 external/mpl/bind/dist/bin/tools/named-journalprint.html                                |     2 +-
 external/mpl/bind/dist/bin/tools/named-nzd2nzf.docbook                                  |     1 +
 external/mpl/bind/dist/bin/tools/named-nzd2nzf.html                                     |     2 +-
 external/mpl/bind/dist/bin/tools/named-rrchecker.docbook                                |     1 +
 external/mpl/bind/dist/bin/tools/named-rrchecker.html                                   |     2 +-
 external/mpl/bind/dist/bin/tools/nsec3hash.docbook                                      |     1 +
 external/mpl/bind/dist/bin/tools/nsec3hash.html                                         |     2 +-
 external/mpl/bind/dist/config.h.win32                                                   |    23 +-
 external/mpl/bind/dist/configure.ac                                                     |   114 +-
 external/mpl/bind/dist/contrib/README                                                   |    55 +-
 external/mpl/bind/dist/contrib/dlz/modules/ldap/testing/dlz.schema                      |   223 +-
 external/mpl/bind/dist/contrib/dlz/modules/ldap/testing/example.ldif                    |    24 +
 external/mpl/bind/dist/doc/arm/Bv9ARM-book.xml                                          |   681 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch01.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch02.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch03.html                                         |    13 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch04.html                                         |    47 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch05.html                                         |   561 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch06.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch07.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch08.html                                         |    69 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch09.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch10.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch11.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch12.html                                         |     4 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.html                                              |    10 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.pdf                                               |   Bin 
 external/mpl/bind/dist/doc/arm/man.arpaname.html                                        |     4 +-
 external/mpl/bind/dist/doc/arm/man.ddns-confgen.html                                    |     4 +-
 external/mpl/bind/dist/doc/arm/man.delv.html                                            |     4 +-
 external/mpl/bind/dist/doc/arm/man.dig.html                                             |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-cds.html                                      |    10 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-checkds.html                                  |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-coverage.html                                 |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-dsfromkey.html                                |   227 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html                                |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keyfromlabel.html                             |     6 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keygen.html                                   |     6 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keymgr.html                                   |    72 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-revoke.html                                   |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-settime.html                                  |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-signzone.html                                 |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-verify.html                                   |     4 +-
 external/mpl/bind/dist/doc/arm/man.dnstap-read.html                                     |     4 +-
 external/mpl/bind/dist/doc/arm/man.filter-aaaa.html                                     |     4 +-
 external/mpl/bind/dist/doc/arm/man.host.html                                            |     4 +-
 external/mpl/bind/dist/doc/arm/man.mdig.html                                            |     4 +-
 external/mpl/bind/dist/doc/arm/man.named-checkconf.html                                 |     4 +-
 external/mpl/bind/dist/doc/arm/man.named-checkzone.html                                 |     4 +-
 external/mpl/bind/dist/doc/arm/man.named-journalprint.html                              |     4 +-
 external/mpl/bind/dist/doc/arm/man.named-nzd2nzf.html                                   |     4 +-
 external/mpl/bind/dist/doc/arm/man.named-rrchecker.html                                 |     4 +-
 external/mpl/bind/dist/doc/arm/man.named.conf.html                                      |   120 +-
 external/mpl/bind/dist/doc/arm/man.named.html                                           |     4 +-
 external/mpl/bind/dist/doc/arm/man.nsec3hash.html                                       |     4 +-
 external/mpl/bind/dist/doc/arm/man.nslookup.html                                        |     4 +-
 external/mpl/bind/dist/doc/arm/man.nsupdate.html                                        |     4 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-destroy.html                                  |     4 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-keygen.html                                   |     4 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-list.html                                     |     4 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-tokens.html                                   |     4 +-
 external/mpl/bind/dist/doc/arm/man.rndc-confgen.html                                    |     4 +-
 external/mpl/bind/dist/doc/arm/man.rndc.conf.html                                       |     4 +-
 external/mpl/bind/dist/doc/arm/man.rndc.html                                            |     4 +-
 external/mpl/bind/dist/doc/arm/notes.html                                               |    63 +-
 external/mpl/bind/dist/doc/arm/notes.pdf                                                |   Bin 
 external/mpl/bind/dist/doc/arm/notes.txt                                                |    39 +-
 external/mpl/bind/dist/doc/arm/notes.xml                                                |    61 +-
 external/mpl/bind/dist/doc/arm/options.grammar.xml                                      |    49 +-
 external/mpl/bind/dist/doc/misc/docbook-grammars.pl                                     |     4 +-
 external/mpl/bind/dist/doc/misc/docbook-options.pl                                      |     4 +-
 external/mpl/bind/dist/doc/misc/docbook-zoneopt.pl                                      |     4 +-
 external/mpl/bind/dist/doc/misc/options                                                 |    71 +-
 external/mpl/bind/dist/doc/misc/roadmap                                                 |     3 +-
 external/mpl/bind/dist/isc-config.sh.docbook                                            |     1 +
 external/mpl/bind/dist/isc-config.sh.html                                               |     2 +-
 external/mpl/bind/dist/lib/bind9/api                                                    |     2 +-
 external/mpl/bind/dist/lib/dns/Makefile.in                                              |     6 +-
 external/mpl/bind/dist/lib/dns/api                                                      |     4 +-
 external/mpl/bind/dist/lib/dns/include/dst/Makefile.in                                  |     2 +-
 external/mpl/bind/dist/lib/dns/rdata/generic/amtrelay_260.c                             |   469 +
 external/mpl/bind/dist/lib/dns/rdata/generic/amtrelay_260.h                             |    31 +
 external/mpl/bind/dist/lib/dns/rdata/generic/zonemd_63.c                                |   315 +
 external/mpl/bind/dist/lib/dns/rdata/generic/zonemd_63.h                                |    33 +
 external/mpl/bind/dist/lib/dns/win32/libdns.def.in                                      |     5 +-
 external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.filters.in                          |     6 -
 external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.in                                  |     2 -
 external/mpl/bind/dist/lib/irs/api                                                      |     2 +-
 external/mpl/bind/dist/lib/isc/Makefile.in                                              |     6 +-
 external/mpl/bind/dist/lib/isc/api                                                      |     4 +-
 external/mpl/bind/dist/lib/isc/include/isc/Makefile.in                                  |     4 +-
 external/mpl/bind/dist/lib/isc/unix/include/isc/Makefile.in                             |     2 +-
 external/mpl/bind/dist/lib/isc/unix/include/isc/stdatomic.h                             |   154 +
 external/mpl/bind/dist/lib/isc/win32/.dir-locals.el                                     |    35 +
 external/mpl/bind/dist/lib/isc/win32/libisc.def.in                                      |    14 +-
 external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.filters.in                          |     9 -
 external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.in                                  |     3 -
 external/mpl/bind/dist/lib/isccc/Makefile.in                                            |     2 -
 external/mpl/bind/dist/lib/isccc/api                                                    |     4 +-
 external/mpl/bind/dist/lib/isccc/include/isccc/Makefile.in                              |     2 +-
 external/mpl/bind/dist/lib/isccc/win32/libisccc.def                                     |     5 -
 external/mpl/bind/dist/lib/isccc/win32/libisccc.vcxproj.filters.in                      |     8 +-
 external/mpl/bind/dist/lib/isccc/win32/libisccc.vcxproj.in                              |     2 -
 external/mpl/bind/dist/lib/isccfg/api                                                   |     2 +-
 external/mpl/bind/dist/lib/isccfg/win32/libisccfg.def                                   |     3 -
 external/mpl/bind/dist/lib/ns/api                                                       |     2 +-
 external/mpl/bind/dist/m4/ax_posix_shell.m4                                             |     2 +-
 external/mpl/bind/dist/srcid                                                            |     2 +-
 external/mpl/bind/dist/version                                                          |     6 +-
 external/mpl/bind/dist/win32utils/Configure                                             |    40 +-
 external/mpl/bind/dist/win32utils/bind9.sln.in                                          |     8 +
 409 files changed, 8449 insertions(+), 5605 deletions(-)

diffs (truncated from 24928 to 300 lines):

diff -r 6218939757f3 -r 8d158aeba142 external/mpl/bind/dist/CHANGES
--- a/external/mpl/bind/dist/CHANGES    Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/CHANGES    Sun Feb 24 18:56:37 2019 +0000
@@ -1,14 +1,203 @@
-       --- 9.13.5-W1 released ---
+       --- 9.13.7 released ---
+
+5165.  [contrib]       Removed SDB drivers from contrib; they're obsolete.
+                       [GL #428]
+
+5164.  [bug]           Correct errno to result translation in dlz filesystem
+                       modules. [GL #884]
+
+5163.  [cleanup]       Out-of-tree builds failed --enable-dnstap. [GL #836]
+
+5162.  [cleanup]       Improve dnssec-keymgr manual. Thanks to Tony Finch.
+                       [GL !1518]
+
+5161.  [bug]           Do not require the SEP bit to be set for mirror zone
+                       trust anchors. [GL #873]
+
+5160.  [contrib]       Added DNAME support to the DLZ LDAP schema. Also
+                       fixed a compilation bug affecting several DLZ
+                       modules. [GL #872]
+
+5159.  [bug]           dnssec-coverage was incorrectly ignoring
+                       names specified on the command line without
+                       trailing dots. [GL !1478]
+
+5158.  [protocol]      Add support for AMTRELAY and ZONEMD. [GL #867]
+
+5157.  [bug]           Nslookup now errors out if there are extra command
+                       line arguments. [GL #207]
+
+5141.  [security]      Zone transfer controls for writable DLZ zones were
+                       not effective as the allowzonexfr method was not being
+                       called for such zones. (CVE-2019-6465) [GL #790]
+
+5118.  [security]      Named could crash if it is managing a key with
+                       `managed-keys` and the authoritative zone is rolling
+                       the key to an unsupported algorithm. (CVE-2018-5745)
+                       [GL #780]
+
+5110.  [security]      Named leaked memory if there were multiple Key Tag
+                       EDNS options present. (CVE-2018-5744) [GL #772]
+
+       --- 9.13.6 released ---
+
+5156.  [doc]           Extended and refined the section of the ARM describing
+                       mirror zones. [GL #774]
+
+5155.  [func]          "named -V" now outputs the default paths to
+                       named.conf, rndc.conf, bind.keys, and other
+                       files used or created by named and other tools, so
+                       that the correct paths to these files can quickly be
+                       determined regardless of the configure settings
+                       used when BIND was built. [GL #859]
+
+5154.  [bug]           dig: process_opt could be called twice on the same
+                       message leading to a assertion failure. [GL #860]
+
+5153.  [func]          Zone transfer statistics (size, number of records, and
+                       number of messages) are now logged for outgoing
+                       transfers as well as incoming ones. [GL #513]
+
+5152.  [func]          Improved logging of DNSSEC key events:
+                       - Zone signing and DNSKEY maintenance events are
+                         now logged to the "dnssec" category
+                       - Messages are now logged when DNSSEC keys are
+                         pubished, activated, inactivated, deleted,
+                         or revoked.
+                       [GL #714]
+
+5151.  [func]          Options that have been been marked as obsolete in
+                       named.conf for a very long time are now fatal
+                       configuration errors. [GL #358]
+
+5150.  [cleanup]       Remove the ability to compile BIND with assertions
+                       disabled. [GL #735]
+
+5149.  [func]          "rndc dumpdb" now prints a line above a stale RRset
+                       indicating how long the data will be retained in the
+                       cache for emergency use. [GL #101]
+
+5148.  [bug]           named did not sign the TKEY response. [GL #821]
+
+5147.  [bug]           dnssec-keymgr: Add a five-minute margin to better
+                       handle key events close to 'now'. [GL #848]
+
+5146.  [placeholder]
+
+5145.  [func]          Use atomics instead of locked variables for isc_quota
+                       and isc_counter. [GL !1389]
+
+5144.  [bug]           dig now returns a non-zero exit code when a TCP
+                       connection is prematurely closed by a peer more than
+                       once for the same lookup.  [GL #820]
+
+5143.  [bug]           dnssec-keymgr and dnssec-coverage failed to find
+                       key files for zone names ending in ".". [GL #560]
+
+5142.  [cleanup]       Removed "configure --disable-rpz-nsip" and
+                       "--disable-rpz-nsdname" options. "nsip-enable"
+                       and "nsdname-enable" both now default to yes,
+                       regardless of compile-time settings. [GL #824]
+
+5140.  [bug]           Don't immediately mark existing keys as inactive and
+                       deleted when running dnssec-keymgr for the first
+                       time. [GL #117]
+
+5139.  [bug]           If possible, don't use forwarders when priming.
+                       This ensures we can get root server IP addresses
+                       from priming query response glue, which may not
+                       be present if the forwarding server is returning
+                       minimal responses. [GL #752]
+
+5138.  [bug]           Under some circumstances named could hit an assertion
+                       failure when doing qname minimization when using
+                       forwarders. [GL #797]
+
+5137.  [func]          named now logs messages whenever a mirror zone becomes
+                       usable or unusable for resolution purposes. [GL #818]
+
+5136.  [cleanup]       Check in named-checkconf that allow-update and
+                       allow-update-forwarding are not set at the
+                       view/options level; fix documentation. [GL #512]
+
+5135.  [port]          sparc: Use smt_pause() instead of pause. [GL #816]
+
+5134.  [bug]           win32: WSAStartup was not called before getservbyname
+                       was called. [GL #590]
+
+5133.  [bug]           'rndc managed-keys' didn't handle class and view
+                       correctly and failed to add new lines between each
+                       view. [GL !1327]
+
+5132.  [bug]           Fix race condition in cleanup part of dns_dt_create().
+                       [GL !1323]
+
+5131.  [cleanup]       Address Coverity warnings. [GL #801]
+
+5130.  [cleanup]       Remove support for l10n message catalogs. [GL #709]
+
+5129.  [contrib]       sdlz_helper.c:build_querylist was not properly
+                       splitting the query string. [GL #798]
+
+5128.  [bug]           Refreshkeytime was not being updated for managed
+                       keys zones. [GL #784]
+
+5127.  [bug]           rcode.c:maybe_numeric failed to handle NUL in text
+                       regions. [GL #807]
+
+5126.  [bug]           Named incorrectly accepted empty base64 and hex encoded
+                       fields when reading master files. [GL #807]
+
+5125.  [bug]           Allow for up to 100 records or 64k of data when caching
+                       a negative response. [GL #804]
+
+5124.  [bug]           Named could incorrectly return FORMERR rather than
+                       SERVFAIL. [GL #804]
+
+5123.  [bug]           dig could hang indefinitely after encountering an error
+                       before creating a TCP socket. [GL #692]
+
+5122.  [bug]           In a "forward first;" configuration, a forwarder
+                       timeout did not prevent that forwarder from being
+                       queried again after falling back to full recursive
+                       resolution. [GL #315]
+
+5121.  [contrib]       dlz_stub_driver.c fails to return ISC_R_NOTFOUND on none
+                       matching zone names. [GL !1299]
+
+5120.  [placeholder]
+
+5119.  [placeholder]
+
+5117.  [placeholder]
+
+5116.  [bug]           Named/named-checkconf triggered a assertion when
+                       a mirror zone's name is bad. [GL #778]
+
+5115.  [bug]           Allow unsupported algorithms in zone when not used for
+                       signing with dnssec-signzone. [GL #783]
+
+5114.  [func]          Include a 'reconfig/reload in progress' status line
+                       in rndc status, use it in tests.
 
 5113.  [port]          Fixed a Windows build error.
 
+5112.  [bug]           Named/named-checkconf could dump core if there was
+                       a missing masters clause and a bad notify clause.
+                       [GL #779]
+
+5111.  [bug]           Occluded DNSKEY records could make it into the
+                       delegating NSEC/NSEC3 bitmap. [GL #742]
+
+5109.  [cleanup]       Remove support for RSAMD5 algorithm. [GL #628]
+
        --- 9.13.5 released ---
 
 5108.  [bug]           Named could fail to determine bottom of zone when
                        removing out of date keys leading to invalid NSEC
                        and NSEC3 records being added to the zone. [GL #771]
 
-5107.  [bug]           'host -U' did not work. [GL #769]
+5107.  [bug]           'host -U' did not work. [GL #769]
 
 5106.  [experimental]  A new "plugin" mechanism has been added to allow
                        extension of query processing functionality through
diff -r 6218939757f3 -r 8d158aeba142 external/mpl/bind/dist/COPYRIGHT
--- a/external/mpl/bind/dist/COPYRIGHT  Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/COPYRIGHT  Sun Feb 24 18:56:37 2019 +0000
@@ -1,4 +1,4 @@
-Copyright (C) 1996-2018  Internet Systems Consortium, Inc. ("ISC")
+Copyright (C) 1996-2019  Internet Systems Consortium, Inc. ("ISC")
 
 This Source Code Form is subject to the terms of the Mozilla Public
 License, v. 2.0. If a copy of the MPL was not distributed with this
diff -r 6218939757f3 -r 8d158aeba142 external/mpl/bind/dist/PLATFORMS
--- a/external/mpl/bind/dist/PLATFORMS  Sun Feb 24 17:22:21 2019 +0000
+++ b/external/mpl/bind/dist/PLATFORMS  Sun Feb 24 18:56:37 2019 +0000
@@ -13,49 +13,50 @@
 
 Regularly tested platforms
 
-As of May 2018, BIND 9.13 is tested on the following systems:
+As of Jan 2019, BIND 9.13 is fully supported and regularly tested on the
+following systems:
 
-  * Debian 8, 9
+  * Debian 8, 9, 10
   * Ubuntu 16.04, 18.04
-  * Fedora 27, 28
-  * Red Hat/CentOS 6, 7
-  * FreeBSD 10.x, 11.x
-  * OpenBSD 6.3
+  * Fedora 28, 29
+  * Red Hat Enterprise Linux / CentOS 6, 7
+  * FreeBSD 11.x
+  * OpenBSD 6.2, 6.3
 
 The amd64, i386, armhf and arm64 CPU architectures are all fully
 supported.
 
 Best effort
 
-The following are platforms on which BIND is known to build and run, but
-on which it is not routinely tested. ISC makes every effort to fix bugs on
-these platforms, but may be unable to do so quickly due to lack of
-hardware, less familiarity on the part of engineering staff, and other
-constraints.
+The following are platforms on which BIND is known to build and run. ISC
+makes every effort to fix bugs on these platforms, but may be unable to do
+so quickly due to lack of hardware, less familiarity on the part of
+engineering staff, and other constraints. With the exception of Windows
+Server 2012 R2, none of these are tested regularly by ISC.
 
-  * Windows 10 / x64
   * Windows Server 2012 R2, 2016 / x64
+  * Windows 10 / x64
   * macOS 10.12+
-  * Solaris 10
-  * FreeBSD 12+
-  * OpenBSD 6.2
+  * Solaris 11
+  * FreeBSD 10.x, 12.0+
+  * OpenBSD 6.4+
   * NetBSD
-  * Older or less popular Linux distributions still supported by their
-    vendors, such as:
+  * Other Linux distributions still supported by their vendors, such as:
       + Ubuntu 14.04, 18.10+
       + Gentoo
-      + ArchLinux
+      + Arch Linux
       + Alpine Linux
-  * OpenWRT/LEDE 17.0
+  * OpenWRT/LEDE 17.01+
   * Other CPU architectures (mips, mipsel, sparc, ...)
 
 Unsupported platforms
 
-These are platforms on which BIND is known not to build or run:
+These are platforms on which BIND 9.13 is known not to build or run:
 
   * Platforms without at least OpenSSL 1.0.2
   * Windows 10 / x86
   * Windows Server 2012 and older
+  * Solaris 10 and older
   * Platforms that don't support IPv6 Advanced Socket API (RFC 3542)
   * Platforms that don't support atomic operations (via compiler or
     library)
@@ -80,7 +81,7 @@
   * The lowest worthwhile CPU implementation is Armv7-A, therefore the
     recommended build option is -march=armv7-a.
 
-  * FPU should be set at VFPv3-D16 as they represent the miminum
+  * FPU should be set at VFPv3-D16 as they represent the minimum
     specification of the processors to support here, therefore the
     recommended build option is -mfpu=vfpv3-d16.



Home | Main Index | Thread Index | Old Index