svn commit: r246656 - in stable/8: contrib/bind9 contrib/bind9/bin contrib/bind9/bin/check contrib/bind9/bin/confgen contrib/bind9/bin/dig contrib/bind9/bin/dig/include/dig contrib/bind9/bin/dnssec...
Xin LI
delphij at FreeBSD.org
Mon Feb 11 09:42:35 UTC 2013
Author: delphij
Date: Mon Feb 11 09:42:34 2013
New Revision: 246656
URL: http://svnweb.freebsd.org/changeset/base/246656
Log:
Sync BIND 9 version with 9-STABLE, to 9.8.4-P1.
Added:
stable/8/contrib/bind9/HISTORY
- copied unchanged from r246649, head/contrib/bind9/HISTORY
stable/8/contrib/bind9/bin/confgen/
- copied from r246649, head/contrib/bind9/bin/confgen/
stable/8/contrib/bind9/bin/dnssec/dnssec-revoke.8
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-revoke.8
stable/8/contrib/bind9/bin/dnssec/dnssec-revoke.c
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-revoke.c
stable/8/contrib/bind9/bin/dnssec/dnssec-revoke.docbook
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-revoke.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-revoke.html
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-revoke.html
stable/8/contrib/bind9/bin/dnssec/dnssec-settime.8
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-settime.8
stable/8/contrib/bind9/bin/dnssec/dnssec-settime.c
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-settime.c
stable/8/contrib/bind9/bin/dnssec/dnssec-settime.docbook
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-settime.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-settime.html
- copied unchanged from r246649, head/contrib/bind9/bin/dnssec/dnssec-settime.html
stable/8/contrib/bind9/bin/named/bind.keys.h
- copied unchanged from r246649, head/contrib/bind9/bin/named/bind.keys.h
stable/8/contrib/bind9/bin/named/include/dlz/
- copied from r246649, head/contrib/bind9/bin/named/include/dlz/
stable/8/contrib/bind9/bin/named/unix/dlz_dlopen_driver.c
- copied unchanged from r246649, head/contrib/bind9/bin/named/unix/dlz_dlopen_driver.c
stable/8/contrib/bind9/bin/tools/
- copied from r246649, head/contrib/bind9/bin/tools/
stable/8/contrib/bind9/doc/arm/dnssec.xml
- copied unchanged from r246649, head/contrib/bind9/doc/arm/dnssec.xml
stable/8/contrib/bind9/doc/arm/libdns.xml
- copied unchanged from r246649, head/contrib/bind9/doc/arm/libdns.xml
stable/8/contrib/bind9/doc/arm/man.arpaname.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.arpaname.html
stable/8/contrib/bind9/doc/arm/man.ddns-confgen.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.ddns-confgen.html
stable/8/contrib/bind9/doc/arm/man.dnssec-revoke.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.dnssec-revoke.html
stable/8/contrib/bind9/doc/arm/man.dnssec-settime.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.dnssec-settime.html
stable/8/contrib/bind9/doc/arm/man.genrandom.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.genrandom.html
stable/8/contrib/bind9/doc/arm/man.isc-hmac-fixup.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.isc-hmac-fixup.html
stable/8/contrib/bind9/doc/arm/man.named-journalprint.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.named-journalprint.html
stable/8/contrib/bind9/doc/arm/man.nsec3hash.html
- copied unchanged from r246649, head/contrib/bind9/doc/arm/man.nsec3hash.html
stable/8/contrib/bind9/doc/arm/managed-keys.xml
- copied unchanged from r246649, head/contrib/bind9/doc/arm/managed-keys.xml
stable/8/contrib/bind9/doc/arm/pkcs11.xml
- copied unchanged from r246649, head/contrib/bind9/doc/arm/pkcs11.xml
stable/8/contrib/bind9/lib/dns/client.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/client.c
stable/8/contrib/bind9/lib/dns/dns64.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/dns64.c
stable/8/contrib/bind9/lib/dns/ecdb.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/ecdb.c
stable/8/contrib/bind9/lib/dns/include/dns/client.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/client.h
stable/8/contrib/bind9/lib/dns/include/dns/dlz_dlopen.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/dlz_dlopen.h
stable/8/contrib/bind9/lib/dns/include/dns/dns64.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/dns64.h
stable/8/contrib/bind9/lib/dns/include/dns/ecdb.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/ecdb.h
stable/8/contrib/bind9/lib/dns/include/dns/keydata.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/keydata.h
stable/8/contrib/bind9/lib/dns/include/dns/private.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/private.h
stable/8/contrib/bind9/lib/dns/include/dns/rpz.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/rpz.h
stable/8/contrib/bind9/lib/dns/include/dns/rriterator.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/rriterator.h
stable/8/contrib/bind9/lib/dns/include/dns/tsec.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/include/dns/tsec.h
stable/8/contrib/bind9/lib/dns/keydata.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/keydata.c
stable/8/contrib/bind9/lib/dns/opensslecdsa_link.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/opensslecdsa_link.c
stable/8/contrib/bind9/lib/dns/opensslgost_link.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/opensslgost_link.c
stable/8/contrib/bind9/lib/dns/private.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/private.c
stable/8/contrib/bind9/lib/dns/rdata/generic/hip_55.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/hip_55.c
stable/8/contrib/bind9/lib/dns/rdata/generic/hip_55.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/hip_55.h
stable/8/contrib/bind9/lib/dns/rdata/generic/keydata_65533.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/keydata_65533.c
stable/8/contrib/bind9/lib/dns/rdata/generic/keydata_65533.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/keydata_65533.h
stable/8/contrib/bind9/lib/dns/rdata/in_1/naptr_35.c
- copied, changed from r196045, stable/8/contrib/bind9/lib/dns/rdata/in_1/naptr_35.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/naptr_35.h
- copied, changed from r196045, stable/8/contrib/bind9/lib/dns/rdata/in_1/naptr_35.h
stable/8/contrib/bind9/lib/dns/rpz.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rpz.c
stable/8/contrib/bind9/lib/dns/rriterator.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rriterator.c
stable/8/contrib/bind9/lib/dns/ssu_external.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/ssu_external.c
stable/8/contrib/bind9/lib/dns/tsec.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/tsec.c
stable/8/contrib/bind9/lib/export/
- copied from r246649, head/contrib/bind9/lib/export/
stable/8/contrib/bind9/lib/irs/
- copied from r246649, head/contrib/bind9/lib/irs/
stable/8/contrib/bind9/lib/isc/app_api.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/app_api.c
stable/8/contrib/bind9/lib/isc/backtrace-emptytbl.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/backtrace-emptytbl.c
stable/8/contrib/bind9/lib/isc/backtrace.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/backtrace.c
stable/8/contrib/bind9/lib/isc/include/isc/backtrace.h
- copied unchanged from r246649, head/contrib/bind9/lib/isc/include/isc/backtrace.h
stable/8/contrib/bind9/lib/isc/include/isc/bind9.h
- copied unchanged from r246649, head/contrib/bind9/lib/isc/include/isc/bind9.h
stable/8/contrib/bind9/lib/isc/include/isc/namespace.h
- copied unchanged from r246649, head/contrib/bind9/lib/isc/include/isc/namespace.h
stable/8/contrib/bind9/lib/isc/mem_api.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/mem_api.c
stable/8/contrib/bind9/lib/isc/socket_api.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/socket_api.c
stable/8/contrib/bind9/lib/isc/task_api.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/task_api.c
stable/8/contrib/bind9/lib/isc/timer_api.c
- copied unchanged from r246649, head/contrib/bind9/lib/isc/timer_api.c
stable/8/contrib/bind9/lib/isccfg/dnsconf.c
- copied unchanged from r246649, head/contrib/bind9/lib/isccfg/dnsconf.c
stable/8/contrib/bind9/lib/isccfg/include/isccfg/dnsconf.h
- copied unchanged from r246649, head/contrib/bind9/lib/isccfg/include/isccfg/dnsconf.h
stable/8/lib/bind/isc/backtrace-emptytbl.c
- copied unchanged from r246649, head/lib/bind/isc/backtrace-emptytbl.c
- copied from r224093, head/usr.sbin/arpaname/
- copied from r224093, head/usr.sbin/ddns-confgen/
- copied from r224093, head/usr.sbin/dnssec-revoke/
- copied from r224093, head/usr.sbin/dnssec-settime/
- copied from r224093, head/usr.sbin/genrandom/
- copied from r224093, head/usr.sbin/isc-hmac-fixup/
- copied from r224093, head/usr.sbin/named-journalprint/
- copied from r224093, head/usr.sbin/nsec3hash/
Directory Properties:
stable/8/usr.sbin/arpaname/ (props changed)
stable/8/usr.sbin/ddns-confgen/ (props changed)
stable/8/usr.sbin/dnssec-revoke/ (props changed)
stable/8/usr.sbin/dnssec-settime/ (props changed)
stable/8/usr.sbin/genrandom/ (props changed)
stable/8/usr.sbin/isc-hmac-fixup/ (props changed)
stable/8/usr.sbin/named-journalprint/ (props changed)
stable/8/usr.sbin/nsec3hash/ (props changed)
Replaced:
stable/8/contrib/bind9/lib/dns/rdata/generic/tlsa_52.c
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/tlsa_52.c
stable/8/contrib/bind9/lib/dns/rdata/generic/tlsa_52.h
- copied unchanged from r246649, head/contrib/bind9/lib/dns/rdata/generic/tlsa_52.h
Deleted:
stable/8/contrib/bind9/KNOWN-DEFECTS
stable/8/contrib/bind9/NSEC3-NOTES
stable/8/contrib/bind9/README.idnkit
stable/8/contrib/bind9/README.pkcs11
stable/8/contrib/bind9/bin/rndc/rndc-confgen.8
stable/8/contrib/bind9/bin/rndc/rndc-confgen.c
stable/8/contrib/bind9/bin/rndc/rndc-confgen.docbook
stable/8/contrib/bind9/bin/rndc/rndc-confgen.html
stable/8/contrib/bind9/bin/rndc/unix/
stable/8/contrib/bind9/lib/dns/rdata/generic/naptr_35.c
stable/8/contrib/bind9/lib/dns/rdata/generic/naptr_35.h
Modified:
stable/8/contrib/bind9/CHANGES
stable/8/contrib/bind9/COPYRIGHT
stable/8/contrib/bind9/FAQ.xml
stable/8/contrib/bind9/Makefile.in
stable/8/contrib/bind9/README
stable/8/contrib/bind9/acconfig.h
stable/8/contrib/bind9/bin/Makefile.in
stable/8/contrib/bind9/bin/check/Makefile.in
stable/8/contrib/bind9/bin/check/check-tool.c
stable/8/contrib/bind9/bin/check/check-tool.h
stable/8/contrib/bind9/bin/check/named-checkconf.8
stable/8/contrib/bind9/bin/check/named-checkconf.c
stable/8/contrib/bind9/bin/check/named-checkconf.docbook
stable/8/contrib/bind9/bin/check/named-checkconf.html
stable/8/contrib/bind9/bin/check/named-checkzone.8
stable/8/contrib/bind9/bin/check/named-checkzone.c
stable/8/contrib/bind9/bin/check/named-checkzone.docbook
stable/8/contrib/bind9/bin/check/named-checkzone.html
stable/8/contrib/bind9/bin/dig/Makefile.in
stable/8/contrib/bind9/bin/dig/dig.1
stable/8/contrib/bind9/bin/dig/dig.c
stable/8/contrib/bind9/bin/dig/dig.docbook
stable/8/contrib/bind9/bin/dig/dig.html
stable/8/contrib/bind9/bin/dig/dighost.c
stable/8/contrib/bind9/bin/dig/host.1
stable/8/contrib/bind9/bin/dig/host.c
stable/8/contrib/bind9/bin/dig/host.docbook
stable/8/contrib/bind9/bin/dig/host.html
stable/8/contrib/bind9/bin/dig/include/dig/dig.h
stable/8/contrib/bind9/bin/dig/nslookup.1
stable/8/contrib/bind9/bin/dig/nslookup.c
stable/8/contrib/bind9/bin/dig/nslookup.docbook
stable/8/contrib/bind9/bin/dig/nslookup.html
stable/8/contrib/bind9/bin/dnssec/Makefile.in
stable/8/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8
stable/8/contrib/bind9/bin/dnssec/dnssec-dsfromkey.c
stable/8/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html
stable/8/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8
stable/8/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.c
stable/8/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html
stable/8/contrib/bind9/bin/dnssec/dnssec-keygen.8
stable/8/contrib/bind9/bin/dnssec/dnssec-keygen.c
stable/8/contrib/bind9/bin/dnssec/dnssec-keygen.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-keygen.html
stable/8/contrib/bind9/bin/dnssec/dnssec-signzone.8
stable/8/contrib/bind9/bin/dnssec/dnssec-signzone.c
stable/8/contrib/bind9/bin/dnssec/dnssec-signzone.docbook
stable/8/contrib/bind9/bin/dnssec/dnssec-signzone.html
stable/8/contrib/bind9/bin/dnssec/dnssectool.c
stable/8/contrib/bind9/bin/dnssec/dnssectool.h
stable/8/contrib/bind9/bin/named/Makefile.in
stable/8/contrib/bind9/bin/named/bind9.xsl
stable/8/contrib/bind9/bin/named/bind9.xsl.h
stable/8/contrib/bind9/bin/named/builtin.c
stable/8/contrib/bind9/bin/named/client.c
stable/8/contrib/bind9/bin/named/config.c
stable/8/contrib/bind9/bin/named/control.c
stable/8/contrib/bind9/bin/named/controlconf.c
stable/8/contrib/bind9/bin/named/include/named/client.h
stable/8/contrib/bind9/bin/named/include/named/config.h
stable/8/contrib/bind9/bin/named/include/named/control.h
stable/8/contrib/bind9/bin/named/include/named/globals.h
stable/8/contrib/bind9/bin/named/include/named/log.h
stable/8/contrib/bind9/bin/named/include/named/lwdclient.h
stable/8/contrib/bind9/bin/named/include/named/main.h
stable/8/contrib/bind9/bin/named/include/named/notify.h
stable/8/contrib/bind9/bin/named/include/named/query.h
stable/8/contrib/bind9/bin/named/include/named/server.h
stable/8/contrib/bind9/bin/named/include/named/tsigconf.h
stable/8/contrib/bind9/bin/named/include/named/types.h
stable/8/contrib/bind9/bin/named/include/named/zoneconf.h
stable/8/contrib/bind9/bin/named/interfacemgr.c
stable/8/contrib/bind9/bin/named/log.c
stable/8/contrib/bind9/bin/named/logconf.c
stable/8/contrib/bind9/bin/named/lwdgabn.c
stable/8/contrib/bind9/bin/named/lwdgrbn.c
stable/8/contrib/bind9/bin/named/lwresd.8
stable/8/contrib/bind9/bin/named/lwresd.c
stable/8/contrib/bind9/bin/named/lwresd.docbook
stable/8/contrib/bind9/bin/named/lwresd.html
stable/8/contrib/bind9/bin/named/main.c
stable/8/contrib/bind9/bin/named/named.8
stable/8/contrib/bind9/bin/named/named.conf.5
stable/8/contrib/bind9/bin/named/named.conf.docbook
stable/8/contrib/bind9/bin/named/named.conf.html
stable/8/contrib/bind9/bin/named/named.docbook
stable/8/contrib/bind9/bin/named/named.html
stable/8/contrib/bind9/bin/named/query.c
stable/8/contrib/bind9/bin/named/server.c
stable/8/contrib/bind9/bin/named/statschannel.c
stable/8/contrib/bind9/bin/named/tkeyconf.c
stable/8/contrib/bind9/bin/named/tsigconf.c
stable/8/contrib/bind9/bin/named/unix/Makefile.in
stable/8/contrib/bind9/bin/named/unix/include/named/os.h
stable/8/contrib/bind9/bin/named/unix/os.c
stable/8/contrib/bind9/bin/named/update.c
stable/8/contrib/bind9/bin/named/xfrout.c
stable/8/contrib/bind9/bin/named/zoneconf.c
stable/8/contrib/bind9/bin/nsupdate/Makefile.in
stable/8/contrib/bind9/bin/nsupdate/nsupdate.1
stable/8/contrib/bind9/bin/nsupdate/nsupdate.c
stable/8/contrib/bind9/bin/nsupdate/nsupdate.docbook
stable/8/contrib/bind9/bin/nsupdate/nsupdate.html
stable/8/contrib/bind9/bin/rndc/Makefile.in
stable/8/contrib/bind9/bin/rndc/include/rndc/os.h
stable/8/contrib/bind9/bin/rndc/rndc.c
stable/8/contrib/bind9/bin/rndc/rndc.conf.html
stable/8/contrib/bind9/bin/rndc/rndc.html
stable/8/contrib/bind9/bin/rndc/util.h
stable/8/contrib/bind9/config.guess
stable/8/contrib/bind9/config.h.in
stable/8/contrib/bind9/configure.in
stable/8/contrib/bind9/doc/arm/Bv9ARM-book.xml
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch01.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch02.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch03.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch04.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch05.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch06.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch07.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch08.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch09.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.ch10.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.html
stable/8/contrib/bind9/doc/arm/Bv9ARM.pdf
stable/8/contrib/bind9/doc/arm/Makefile.in
stable/8/contrib/bind9/doc/arm/man.dig.html
stable/8/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html
stable/8/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html
stable/8/contrib/bind9/doc/arm/man.dnssec-keygen.html
stable/8/contrib/bind9/doc/arm/man.dnssec-signzone.html
stable/8/contrib/bind9/doc/arm/man.host.html
stable/8/contrib/bind9/doc/arm/man.named-checkconf.html
stable/8/contrib/bind9/doc/arm/man.named-checkzone.html
stable/8/contrib/bind9/doc/arm/man.named.html
stable/8/contrib/bind9/doc/arm/man.nsupdate.html
stable/8/contrib/bind9/doc/arm/man.rndc-confgen.html
stable/8/contrib/bind9/doc/arm/man.rndc.conf.html
stable/8/contrib/bind9/doc/arm/man.rndc.html
stable/8/contrib/bind9/doc/misc/Makefile.in
stable/8/contrib/bind9/doc/misc/options
stable/8/contrib/bind9/lib/bind9/Makefile.in
stable/8/contrib/bind9/lib/bind9/api
stable/8/contrib/bind9/lib/bind9/check.c
stable/8/contrib/bind9/lib/bind9/include/bind9/getaddresses.h
stable/8/contrib/bind9/lib/dns/Makefile.in
stable/8/contrib/bind9/lib/dns/acl.c
stable/8/contrib/bind9/lib/dns/adb.c
stable/8/contrib/bind9/lib/dns/api
stable/8/contrib/bind9/lib/dns/byaddr.c
stable/8/contrib/bind9/lib/dns/cache.c
stable/8/contrib/bind9/lib/dns/db.c
stable/8/contrib/bind9/lib/dns/diff.c
stable/8/contrib/bind9/lib/dns/dispatch.c
stable/8/contrib/bind9/lib/dns/dlz.c
stable/8/contrib/bind9/lib/dns/dnssec.c
stable/8/contrib/bind9/lib/dns/ds.c
stable/8/contrib/bind9/lib/dns/dst_api.c
stable/8/contrib/bind9/lib/dns/dst_internal.h
stable/8/contrib/bind9/lib/dns/dst_openssl.h
stable/8/contrib/bind9/lib/dns/dst_parse.c
stable/8/contrib/bind9/lib/dns/dst_parse.h
stable/8/contrib/bind9/lib/dns/forward.c
stable/8/contrib/bind9/lib/dns/gen-unix.h
stable/8/contrib/bind9/lib/dns/gen.c
stable/8/contrib/bind9/lib/dns/gssapi_link.c
stable/8/contrib/bind9/lib/dns/gssapictx.c
stable/8/contrib/bind9/lib/dns/hmac_link.c
stable/8/contrib/bind9/lib/dns/include/dns/Makefile.in
stable/8/contrib/bind9/lib/dns/include/dns/acl.h
stable/8/contrib/bind9/lib/dns/include/dns/adb.h
stable/8/contrib/bind9/lib/dns/include/dns/cache.h
stable/8/contrib/bind9/lib/dns/include/dns/compress.h
stable/8/contrib/bind9/lib/dns/include/dns/db.h
stable/8/contrib/bind9/lib/dns/include/dns/diff.h
stable/8/contrib/bind9/lib/dns/include/dns/dlz.h
stable/8/contrib/bind9/lib/dns/include/dns/dnssec.h
stable/8/contrib/bind9/lib/dns/include/dns/ds.h
stable/8/contrib/bind9/lib/dns/include/dns/events.h
stable/8/contrib/bind9/lib/dns/include/dns/forward.h
stable/8/contrib/bind9/lib/dns/include/dns/keytable.h
stable/8/contrib/bind9/lib/dns/include/dns/keyvalues.h
stable/8/contrib/bind9/lib/dns/include/dns/lib.h
stable/8/contrib/bind9/lib/dns/include/dns/log.h
stable/8/contrib/bind9/lib/dns/include/dns/lookup.h
stable/8/contrib/bind9/lib/dns/include/dns/master.h
stable/8/contrib/bind9/lib/dns/include/dns/message.h
stable/8/contrib/bind9/lib/dns/include/dns/name.h
stable/8/contrib/bind9/lib/dns/include/dns/ncache.h
stable/8/contrib/bind9/lib/dns/include/dns/nsec3.h
stable/8/contrib/bind9/lib/dns/include/dns/peer.h
stable/8/contrib/bind9/lib/dns/include/dns/rbt.h
stable/8/contrib/bind9/lib/dns/include/dns/rdata.h
stable/8/contrib/bind9/lib/dns/include/dns/rdataset.h
stable/8/contrib/bind9/lib/dns/include/dns/request.h
stable/8/contrib/bind9/lib/dns/include/dns/resolver.h
stable/8/contrib/bind9/lib/dns/include/dns/result.h
stable/8/contrib/bind9/lib/dns/include/dns/sdb.h
stable/8/contrib/bind9/lib/dns/include/dns/sdlz.h
stable/8/contrib/bind9/lib/dns/include/dns/secalg.h
stable/8/contrib/bind9/lib/dns/include/dns/soa.h
stable/8/contrib/bind9/lib/dns/include/dns/ssu.h
stable/8/contrib/bind9/lib/dns/include/dns/tkey.h
stable/8/contrib/bind9/lib/dns/include/dns/tsig.h
stable/8/contrib/bind9/lib/dns/include/dns/types.h
stable/8/contrib/bind9/lib/dns/include/dns/validator.h
stable/8/contrib/bind9/lib/dns/include/dns/view.h
stable/8/contrib/bind9/lib/dns/include/dns/xfrin.h
stable/8/contrib/bind9/lib/dns/include/dns/zone.h
stable/8/contrib/bind9/lib/dns/include/dst/dst.h
stable/8/contrib/bind9/lib/dns/include/dst/gssapi.h
stable/8/contrib/bind9/lib/dns/iptable.c
stable/8/contrib/bind9/lib/dns/journal.c
stable/8/contrib/bind9/lib/dns/key.c
stable/8/contrib/bind9/lib/dns/keytable.c
stable/8/contrib/bind9/lib/dns/lib.c
stable/8/contrib/bind9/lib/dns/log.c
stable/8/contrib/bind9/lib/dns/master.c
stable/8/contrib/bind9/lib/dns/masterdump.c
stable/8/contrib/bind9/lib/dns/message.c
stable/8/contrib/bind9/lib/dns/name.c
stable/8/contrib/bind9/lib/dns/ncache.c
stable/8/contrib/bind9/lib/dns/nsec3.c
stable/8/contrib/bind9/lib/dns/openssl_link.c
stable/8/contrib/bind9/lib/dns/openssldh_link.c
stable/8/contrib/bind9/lib/dns/openssldsa_link.c
stable/8/contrib/bind9/lib/dns/opensslrsa_link.c
stable/8/contrib/bind9/lib/dns/peer.c
stable/8/contrib/bind9/lib/dns/rbt.c
stable/8/contrib/bind9/lib/dns/rbtdb.c
stable/8/contrib/bind9/lib/dns/rcode.c
stable/8/contrib/bind9/lib/dns/rdata.c
stable/8/contrib/bind9/lib/dns/rdata/any_255/tsig_250.c
stable/8/contrib/bind9/lib/dns/rdata/ch_3/a_1.c
stable/8/contrib/bind9/lib/dns/rdata/generic/afsdb_18.c
stable/8/contrib/bind9/lib/dns/rdata/generic/cert_37.c
stable/8/contrib/bind9/lib/dns/rdata/generic/cname_5.c
stable/8/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c
stable/8/contrib/bind9/lib/dns/rdata/generic/dname_39.c
stable/8/contrib/bind9/lib/dns/rdata/generic/dnskey_48.c
stable/8/contrib/bind9/lib/dns/rdata/generic/ds_43.c
stable/8/contrib/bind9/lib/dns/rdata/generic/gpos_27.c
stable/8/contrib/bind9/lib/dns/rdata/generic/hinfo_13.c
stable/8/contrib/bind9/lib/dns/rdata/generic/ipseckey_45.c
stable/8/contrib/bind9/lib/dns/rdata/generic/isdn_20.c
stable/8/contrib/bind9/lib/dns/rdata/generic/key_25.c
stable/8/contrib/bind9/lib/dns/rdata/generic/loc_29.c
stable/8/contrib/bind9/lib/dns/rdata/generic/mb_7.c
stable/8/contrib/bind9/lib/dns/rdata/generic/md_3.c
stable/8/contrib/bind9/lib/dns/rdata/generic/mf_4.c
stable/8/contrib/bind9/lib/dns/rdata/generic/mg_8.c
stable/8/contrib/bind9/lib/dns/rdata/generic/minfo_14.c
stable/8/contrib/bind9/lib/dns/rdata/generic/mr_9.c
stable/8/contrib/bind9/lib/dns/rdata/generic/mx_15.c
stable/8/contrib/bind9/lib/dns/rdata/generic/ns_2.c
stable/8/contrib/bind9/lib/dns/rdata/generic/nsec3_50.c
stable/8/contrib/bind9/lib/dns/rdata/generic/nsec3param_51.c
stable/8/contrib/bind9/lib/dns/rdata/generic/nsec_47.c
stable/8/contrib/bind9/lib/dns/rdata/generic/null_10.c
stable/8/contrib/bind9/lib/dns/rdata/generic/nxt_30.c
stable/8/contrib/bind9/lib/dns/rdata/generic/opt_41.c
stable/8/contrib/bind9/lib/dns/rdata/generic/proforma.c
stable/8/contrib/bind9/lib/dns/rdata/generic/ptr_12.c
stable/8/contrib/bind9/lib/dns/rdata/generic/rp_17.c
stable/8/contrib/bind9/lib/dns/rdata/generic/rrsig_46.c
stable/8/contrib/bind9/lib/dns/rdata/generic/rt_21.c
stable/8/contrib/bind9/lib/dns/rdata/generic/sig_24.c
stable/8/contrib/bind9/lib/dns/rdata/generic/soa_6.c
stable/8/contrib/bind9/lib/dns/rdata/generic/spf_99.c
stable/8/contrib/bind9/lib/dns/rdata/generic/sshfp_44.c
stable/8/contrib/bind9/lib/dns/rdata/generic/tkey_249.c
stable/8/contrib/bind9/lib/dns/rdata/generic/txt_16.c
stable/8/contrib/bind9/lib/dns/rdata/generic/unspec_103.c
stable/8/contrib/bind9/lib/dns/rdata/generic/x25_19.c
stable/8/contrib/bind9/lib/dns/rdata/hs_4/a_1.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/a6_38.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/a_1.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/aaaa_28.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/apl_42.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/dhcid_49.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/kx_36.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/nsap-ptr_23.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/nsap_22.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/px_26.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/srv_33.c
stable/8/contrib/bind9/lib/dns/rdata/in_1/wks_11.c
stable/8/contrib/bind9/lib/dns/rdataset.c
stable/8/contrib/bind9/lib/dns/rdataslab.c
stable/8/contrib/bind9/lib/dns/request.c
stable/8/contrib/bind9/lib/dns/resolver.c
stable/8/contrib/bind9/lib/dns/result.c
stable/8/contrib/bind9/lib/dns/rootns.c
stable/8/contrib/bind9/lib/dns/sdb.c
stable/8/contrib/bind9/lib/dns/sdlz.c
stable/8/contrib/bind9/lib/dns/soa.c
stable/8/contrib/bind9/lib/dns/spnego.c
stable/8/contrib/bind9/lib/dns/ssu.c
stable/8/contrib/bind9/lib/dns/stats.c
stable/8/contrib/bind9/lib/dns/tkey.c
stable/8/contrib/bind9/lib/dns/tsig.c
stable/8/contrib/bind9/lib/dns/validator.c
stable/8/contrib/bind9/lib/dns/view.c
stable/8/contrib/bind9/lib/dns/zone.c
stable/8/contrib/bind9/lib/dns/zt.c
stable/8/contrib/bind9/lib/isc/Makefile.in
stable/8/contrib/bind9/lib/isc/alpha/include/isc/atomic.h
stable/8/contrib/bind9/lib/isc/api
stable/8/contrib/bind9/lib/isc/assertions.c
stable/8/contrib/bind9/lib/isc/base32.c
stable/8/contrib/bind9/lib/isc/base64.c
stable/8/contrib/bind9/lib/isc/entropy.c
stable/8/contrib/bind9/lib/isc/hash.c
stable/8/contrib/bind9/lib/isc/hmacmd5.c
stable/8/contrib/bind9/lib/isc/hmacsha.c
stable/8/contrib/bind9/lib/isc/ia64/include/isc/atomic.h
stable/8/contrib/bind9/lib/isc/include/isc/Makefile.in
stable/8/contrib/bind9/lib/isc/include/isc/app.h
stable/8/contrib/bind9/lib/isc/include/isc/assertions.h
stable/8/contrib/bind9/lib/isc/include/isc/buffer.h
stable/8/contrib/bind9/lib/isc/include/isc/entropy.h
stable/8/contrib/bind9/lib/isc/include/isc/error.h
stable/8/contrib/bind9/lib/isc/include/isc/file.h
stable/8/contrib/bind9/lib/isc/include/isc/fsaccess.h
stable/8/contrib/bind9/lib/isc/include/isc/hash.h
stable/8/contrib/bind9/lib/isc/include/isc/heap.h
stable/8/contrib/bind9/lib/isc/include/isc/hmacmd5.h
stable/8/contrib/bind9/lib/isc/include/isc/hmacsha.h
stable/8/contrib/bind9/lib/isc/include/isc/lib.h
stable/8/contrib/bind9/lib/isc/include/isc/log.h
stable/8/contrib/bind9/lib/isc/include/isc/md5.h
stable/8/contrib/bind9/lib/isc/include/isc/mem.h
stable/8/contrib/bind9/lib/isc/include/isc/msgs.h
stable/8/contrib/bind9/lib/isc/include/isc/netaddr.h
stable/8/contrib/bind9/lib/isc/include/isc/netscope.h
stable/8/contrib/bind9/lib/isc/include/isc/platform.h.in
stable/8/contrib/bind9/lib/isc/include/isc/portset.h
stable/8/contrib/bind9/lib/isc/include/isc/radix.h
stable/8/contrib/bind9/lib/isc/include/isc/random.h
stable/8/contrib/bind9/lib/isc/include/isc/ratelimiter.h
stable/8/contrib/bind9/lib/isc/include/isc/refcount.h
stable/8/contrib/bind9/lib/isc/include/isc/result.h
stable/8/contrib/bind9/lib/isc/include/isc/resultclass.h
stable/8/contrib/bind9/lib/isc/include/isc/serial.h
stable/8/contrib/bind9/lib/isc/include/isc/sha1.h
stable/8/contrib/bind9/lib/isc/include/isc/sha2.h
stable/8/contrib/bind9/lib/isc/include/isc/sockaddr.h
stable/8/contrib/bind9/lib/isc/include/isc/socket.h
stable/8/contrib/bind9/lib/isc/include/isc/task.h
stable/8/contrib/bind9/lib/isc/include/isc/timer.h
stable/8/contrib/bind9/lib/isc/include/isc/types.h
stable/8/contrib/bind9/lib/isc/inet_aton.c
stable/8/contrib/bind9/lib/isc/inet_ntop.c
stable/8/contrib/bind9/lib/isc/iterated_hash.c
stable/8/contrib/bind9/lib/isc/lib.c
stable/8/contrib/bind9/lib/isc/md5.c
stable/8/contrib/bind9/lib/isc/mem.c
stable/8/contrib/bind9/lib/isc/netaddr.c
stable/8/contrib/bind9/lib/isc/nls/Makefile.in
stable/8/contrib/bind9/lib/isc/nothreads/Makefile.in
stable/8/contrib/bind9/lib/isc/print.c
stable/8/contrib/bind9/lib/isc/pthreads/Makefile.in
stable/8/contrib/bind9/lib/isc/pthreads/mutex.c
stable/8/contrib/bind9/lib/isc/random.c
stable/8/contrib/bind9/lib/isc/sha1.c
stable/8/contrib/bind9/lib/isc/sha2.c
stable/8/contrib/bind9/lib/isc/sockaddr.c
stable/8/contrib/bind9/lib/isc/task.c
stable/8/contrib/bind9/lib/isc/task_p.h
stable/8/contrib/bind9/lib/isc/timer.c
stable/8/contrib/bind9/lib/isc/timer_p.h
stable/8/contrib/bind9/lib/isc/unix/Makefile.in
stable/8/contrib/bind9/lib/isc/unix/app.c
stable/8/contrib/bind9/lib/isc/unix/dir.c
stable/8/contrib/bind9/lib/isc/unix/entropy.c
stable/8/contrib/bind9/lib/isc/unix/file.c
stable/8/contrib/bind9/lib/isc/unix/ifiter_getifaddrs.c
stable/8/contrib/bind9/lib/isc/unix/ifiter_ioctl.c
stable/8/contrib/bind9/lib/isc/unix/include/isc/net.h
stable/8/contrib/bind9/lib/isc/unix/include/isc/offset.h
stable/8/contrib/bind9/lib/isc/unix/include/isc/strerror.h
stable/8/contrib/bind9/lib/isc/unix/include/isc/time.h
stable/8/contrib/bind9/lib/isc/unix/interfaceiter.c
stable/8/contrib/bind9/lib/isc/unix/net.c
stable/8/contrib/bind9/lib/isc/unix/resource.c
stable/8/contrib/bind9/lib/isc/unix/socket.c
stable/8/contrib/bind9/lib/isc/unix/socket_p.h
stable/8/contrib/bind9/lib/isc/unix/strerror.c
stable/8/contrib/bind9/lib/isccc/Makefile.in
stable/8/contrib/bind9/lib/isccc/api
stable/8/contrib/bind9/lib/isccfg/Makefile.in
stable/8/contrib/bind9/lib/isccfg/aclconf.c
stable/8/contrib/bind9/lib/isccfg/api
stable/8/contrib/bind9/lib/isccfg/include/isccfg/aclconf.h
stable/8/contrib/bind9/lib/isccfg/include/isccfg/cfg.h
stable/8/contrib/bind9/lib/isccfg/include/isccfg/grammar.h
stable/8/contrib/bind9/lib/isccfg/include/isccfg/log.h
stable/8/contrib/bind9/lib/isccfg/include/isccfg/namedconf.h
stable/8/contrib/bind9/lib/isccfg/namedconf.c
stable/8/contrib/bind9/lib/isccfg/parser.c
stable/8/contrib/bind9/lib/lwres/api
stable/8/contrib/bind9/lib/lwres/context.c
stable/8/contrib/bind9/lib/lwres/context_p.h
stable/8/contrib/bind9/lib/lwres/getaddrinfo.c
stable/8/contrib/bind9/lib/lwres/getipnode.c
stable/8/contrib/bind9/lib/lwres/include/lwres/context.h
stable/8/contrib/bind9/lib/lwres/include/lwres/netdb.h.in
stable/8/contrib/bind9/lib/lwres/man/lwres.html
stable/8/contrib/bind9/lib/lwres/man/lwres_buffer.html
stable/8/contrib/bind9/lib/lwres/man/lwres_config.3
stable/8/contrib/bind9/lib/lwres/man/lwres_config.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_config.html
stable/8/contrib/bind9/lib/lwres/man/lwres_context.3
stable/8/contrib/bind9/lib/lwres/man/lwres_context.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_context.html
stable/8/contrib/bind9/lib/lwres/man/lwres_gabn.3
stable/8/contrib/bind9/lib/lwres/man/lwres_gabn.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_gabn.html
stable/8/contrib/bind9/lib/lwres/man/lwres_gai_strerror.3
stable/8/contrib/bind9/lib/lwres/man/lwres_gai_strerror.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_gai_strerror.html
stable/8/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.3
stable/8/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.html
stable/8/contrib/bind9/lib/lwres/man/lwres_gethostent.3
stable/8/contrib/bind9/lib/lwres/man/lwres_gethostent.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_gethostent.html
stable/8/contrib/bind9/lib/lwres/man/lwres_getipnode.3
stable/8/contrib/bind9/lib/lwres/man/lwres_getipnode.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_getipnode.html
stable/8/contrib/bind9/lib/lwres/man/lwres_getnameinfo.3
stable/8/contrib/bind9/lib/lwres/man/lwres_getnameinfo.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_getnameinfo.html
stable/8/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.3
stable/8/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.html
stable/8/contrib/bind9/lib/lwres/man/lwres_gnba.3
stable/8/contrib/bind9/lib/lwres/man/lwres_gnba.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_gnba.html
stable/8/contrib/bind9/lib/lwres/man/lwres_hstrerror.3
stable/8/contrib/bind9/lib/lwres/man/lwres_hstrerror.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_hstrerror.html
stable/8/contrib/bind9/lib/lwres/man/lwres_inetntop.3
stable/8/contrib/bind9/lib/lwres/man/lwres_inetntop.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_inetntop.html
stable/8/contrib/bind9/lib/lwres/man/lwres_noop.3
stable/8/contrib/bind9/lib/lwres/man/lwres_noop.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_noop.html
stable/8/contrib/bind9/lib/lwres/man/lwres_packet.3
stable/8/contrib/bind9/lib/lwres/man/lwres_packet.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_packet.html
stable/8/contrib/bind9/lib/lwres/man/lwres_resutil.3
stable/8/contrib/bind9/lib/lwres/man/lwres_resutil.docbook
stable/8/contrib/bind9/lib/lwres/man/lwres_resutil.html
stable/8/contrib/bind9/lib/lwres/strtoul.c
stable/8/contrib/bind9/lib/lwres/unix/Makefile.in
stable/8/contrib/bind9/lib/lwres/unix/include/Makefile.in
stable/8/contrib/bind9/lib/lwres/unix/include/lwres/Makefile.in
stable/8/contrib/bind9/lib/lwres/unix/include/lwres/net.h
stable/8/contrib/bind9/lib/lwres/version.c
stable/8/contrib/bind9/make/rules.in
stable/8/contrib/bind9/version
stable/8/lib/bind/Makefile
stable/8/lib/bind/config.h
stable/8/lib/bind/dns/Makefile
stable/8/lib/bind/dns/code.h
stable/8/lib/bind/dns/dns/enumtype.h
stable/8/lib/bind/dns/dns/rdatastruct.h
stable/8/lib/bind/isc/Makefile
stable/8/lib/bind/isc/isc/platform.h
stable/8/lib/bind/lwres/lwres/netdb.h
stable/8/share/doc/bind9/Makefile
stable/8/usr.bin/nsupdate/Makefile
stable/8/usr.sbin/Makefile (contents, props changed)
stable/8/usr.sbin/dnssec-signzone/Makefile
stable/8/usr.sbin/named-checkconf/Makefile
stable/8/usr.sbin/named/Makefile
stable/8/usr.sbin/rndc-confgen/Makefile
stable/8/usr.sbin/rndc/Makefile
Directory Properties:
stable/8/contrib/bind9/ (props changed)
stable/8/lib/bind/ (props changed)
stable/8/share/doc/bind9/ (props changed)
stable/8/usr.bin/nsupdate/ (props changed)
stable/8/usr.sbin/ (props changed)
stable/8/usr.sbin/dnssec-signzone/ (props changed)
stable/8/usr.sbin/named/ (props changed)
stable/8/usr.sbin/named-checkconf/ (props changed)
stable/8/usr.sbin/rndc/ (props changed)
stable/8/usr.sbin/rndc-confgen/ (props changed)
Modified: stable/8/contrib/bind9/CHANGES
==============================================================================
--- stable/8/contrib/bind9/CHANGES Mon Feb 11 08:20:21 2013 (r246655)
+++ stable/8/contrib/bind9/CHANGES Mon Feb 11 09:42:34 2013 (r246656)
@@ -1,4 +1,9 @@
- --- 9.6-ESV-R8 released ---
+ --- 9.8.4-P1 released ---
+
+3407. [security] Named could die on specific queries with dns64 enabled.
+ [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+
+ --- 9.8.4 released ---
3383. [security] A certain combination of records in the RBT could
cause named to hang while populating the additional
@@ -9,19 +14,26 @@
3364. [security] Named could die on specially crafted record.
[RT #30416]
- --- 9.6-ESV-R8rc1 released ---
+ --- 9.8.4rc1 released ---
3369. [bug] nsupdate terminated unexpectedly in interactive mode
if built with readline support. [RT #29550]
3368. [bug] <dns/iptable.h> and <dns/zone.h> were not C++ safe.
+3367. [bug] dns_dnsseckey_create() result was not being checked.
+ [RT #30685]
+
3366. [bug] Fixed Read-After-Write dependency violation for IA64
atomic operations. [RT #25181]
3365. [bug] Removed spurious newlines from log messages in
zone.c [RT #30675]
+3363. [bug] Need to allow "forward" and "fowarders" options
+ in static-stub zones; this had been overlooked.
+ [RT #30482]
+
3362. [bug] Setting some option values to 0 in named.conf
could trigger an assertion failure on startup.
[RT #27730]
@@ -31,18 +43,26 @@
3359. [bug] An improperly-formed TSIG secret could cause a
memory leak. [RT #30607]
-3358. [bug] Fix declaration of fatal in bin/named/server.c
- and bin/nsupdate/main.c. [RT #30522]
-
3357. [port] Add support for libxml2-2.8.x [RT #30440]
- --- 9.6-ESV-R8b1 released ---
+3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
+ approaching their expiry, so they don't remain
+ in caches after expiry. [RT #26429]
+
+ --- 9.8.4b1 released ---
3354. [func] Improve OpenSSL error logging. [RT #29932]
+3353. [bug] Use a single task for task exclusive operations.
+ [RT #29872]
+
3352. [bug] Ensure that learned server attributes timeout of the
adb cache. [RT #29856]
+3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
+ caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
+ memory debugging flags are set. [RT #30243]
+
3350. [bug] Memory read overrun in isc___mem_reallocate if
ISC_MEM_DEBUGCTX memory debugging flag is set.
[RT #30240]
@@ -53,11 +73,13 @@
the cache since change 3218 -- this prevents it
being inserted into the cache as well. [RT #26809]
+3347. [bug] dnssec-settime: Issue a warning when writing a new
+ private key file would cause a change in the
+ permissions of the existing file. [RT #27724]
+
3346. [security] Bad-cache data could be used before it was
initialized, causing an assert. [RT #30025]
-3343. [bug] Relax isc_random_jitter() REQUIRE tests. [RT #29821]
-
3342. [bug] Change #3314 broke saving of stub zones to disk
resulting in excessive cpu usage in some cases.
[RT #29952]
@@ -68,11 +90,30 @@
3335. [func] nslookup: return a nonzero exit code when unable
to get an answer. [RT #29492]
+3333. [bug] Setting resolver-query-timeout too low can cause
+ named to not recover if it loses connectivity.
+ [RT #29623]
+
3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
3331. [security] dns_rdataslab_fromrdataset could produce bad
rdataslabs. [RT #29644]
+3330. [func] Fix missing signatures on NOERROR results despite
+ RPZ rewriting. Also
+ - add optional "recursive-only yes|no" to the
+ response-policy statement
+ - add optional "max-policy-ttl" to the response-policy
+ statement to limit the false data that
+ "recursive-only no" can introduce into
+ resolvers' caches
+ - add a RPZ performance test to bin/tests/system/rpz
+ when queryperf is available.
+ - the encoding of PASSTHRU action to "rpz-passthru".
+ (The old encoding is still accepted.)
+ [RT #26172]
+
+
3329. [bug] Handle RRSIG signer-name case consistently: We
generate RRSIG records with the signer-name in
lower case. We accept them with any case, but if
@@ -82,7 +123,9 @@
3328. [bug] Fixed inconsistent data checking in dst_parse.c.
[RT #29401]
- --- 9.6-ESV-R7 released ---
+3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
+
+ --- 9.8.3 released ---
3318. [tuning] Reduce the amount of work performed while holding a
bucket lock when finshed with a fetch context.
@@ -93,6 +136,9 @@
3313. [protocol] Add TLSA record type. [RT #28989]
+3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
+ [RT #27631]
+
3311. [bug] Abort the zone dump if zone->db is NULL in
zone.c:zone_gotwritehandle. [RT #29028]
@@ -104,9 +150,17 @@
3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
[RT #28956]
+3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
+
+3305. [func] Add wire format lookup method to sdb. [RT #28563]
+
3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
[RT #28571]
+3302. [bug] dns_dnssec_findmatchingkeys could fail to find
+ keys if the zone name contained character that
+ required special mappings. [RT #28600]
+
3301. [contrib] Update queryperf to build on darwin. Add -R flag
for non-recursive queries. [RT #28565]
@@ -119,10 +173,12 @@
3232. [bug] Zero zone->curmaster before return in
dns_zone_setmasterswithkeys(). [RT #26732]
+3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
+
3197. [bug] Don't try to log the filename and line number when
the config parser can't open a file. [RT #22263]
- --- 9.6-ESV-R6 released ---
+ --- 9.8.2 released ---
3298. [bug] Named could dereference a NULL pointer in
zmgr_start_xfrin_ifquota if the zone was being removed.
@@ -141,9 +197,15 @@
3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
+3288. [bug] dlz_destroy() function wasn't correctly registered
+ by the DLZ dlopen driver. [RT #28056]
+
3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
- --- 9.6-ESV-R6rc2 released ---
+3286. [bug] Managed key maintenance timer could fail to start
+ after 'rndc reconfig'. [RT #26786]
+
+ --- 9.8.2rc2 released ---
3285. [bug] val-frdataset was incorrectly disassociated in
proveunsecure after calling startfinddlvsep.
@@ -163,9 +225,27 @@
despite succeeding over the loopback interface.
[RT #27782]
-3374. [bug] Log when a zone is not reusable. Only set loadtime
+3280. [bug] Potential double free of a rdataset on out of memory
+ with DNS64. [RT #27762]
+
+3278. [bug] Make sure automatic key maintenance is started
+ when "auto-dnssec maintain" is turned on during
+ "rndc reconfig". [RT #26805]
+
+3276. [bug] win32: ns_os_openfile failed to return NULL on
+ safe_open failure. [RT #27696]
+
+3274. [bug] Log when a zone is not reusable. Only set loadtime
on successful loads. [RT #27650]
+3273. [bug] AAAA responses could be returned in the additional
+ section even when filter-aaaa-on-v4 was in use.
+ [RT #27292]
+
+3271. [port] darwin: mksymtbl is not always stable, loop several
+ times before giving up. mksymtbl was using non
+ portable perl to covert 64 bit hex strings. [RT #27653]
+
3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
out the earliest expiry time. [RT #23311]
@@ -177,7 +257,10 @@
DNSKEY RRset was not being properly computed.
[RT #26543]
- --- 9.6-ESV-R6rc1 released ---
+3262. [bug] Signed responses were handled incorrectly by RPZ.
+ [RT #27316]
+
+ --- 9.8.2rc1 released ---
3260. [bug] "rrset-order cyclic" could appear not to rotate
for some query patterns. [RT #27170/27185]
@@ -185,6 +268,9 @@
3259. [bug] named-compilezone: Suppress "dump zone to <file>"
message when writing to stdout. [RT #27109]
+3258. [test] Add "forcing full sign with unreadable keys" test.
+ [RT #27153]
+
3257. [bug] Do not generate a error message when calling fsync()
in a pipe or socket. [RT #27109]
@@ -208,6 +294,10 @@
3249. [bug] Update log message when saving slave zones files for
analysis after load failures. [RT #27087]
+3248. [bug] Configure options --enable-fixed-rrset and
+ --enable-exportlib were incompatible with each
+ other. [RT #27087]
+
3247. [bug] 'raw' format zones failed to preserve load order
breaking 'fixed' sort order. [RT #27087]
@@ -217,11 +307,18 @@
3241. [bug] Address race conditions in the resolver code.
[RT #26889]
+3240. [bug] DNSKEY state change events could be missed. [RT #26874]
+
+3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
+ timestamp. [RT #26883]
+
3238. [bug] keyrdata was not being reinitialized in
lib/dns/rbtdb.c:iszonesecure. [RT#26913]
3237. [bug] dig -6 didn't work with +trace. [RT #26906]
+ --- 9.8.2b1 released ---
+
3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
3231. [bug] named could fail to send a uncompressable zone.
@@ -230,6 +327,9 @@
3230. [bug] 'dig axfr' failed to properly handle a multi-message
axfr with a serial of 0. [RT #26796]
+3229. [bug] Fix local variable to struct var assignment
+ found by CLANG warning.
+
3228. [tuning] Dynamically grow symbol table to improve zone
loading performance. [RT #26523]
@@ -238,16 +338,20 @@
3226. [bug] Address minor resource leakages. [RT #26624]
- --- 9.6-ESV-R6b1 released ---
-
3221. [bug] Fixed a potential coredump on shutdown due to
referencing fetch context after it's been freed.
[RT #26720]
+3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
+ could fail to set the database version correctly,
+ causing an assertion failure. [RT #26180]
+
3218. [security] Cache lookup could return RRSIG data associated with
nonexistent records, leading to an assertion
failure. [RT #26590]
+3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
+
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
@@ -256,6 +360,8 @@
list prior to adding a reference to it leading a
possible assertion failure. [RT #23219]
+3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
+
3208. [bug] 'dig -y' handle unknown tsig alorithm better.
[RT #25522]
@@ -273,9 +379,15 @@
3200. [doc] Some rndc functions were undocumented or were
missing from 'rndc -h' output. [RT #25555]
+3198. [doc] Clarified that dnssec-settime can alter keyfile
+ permissions. [RT #24866]
+
3196. [bug] nsupdate: return nonzero exit code when target zone
doesn't exist. [RT #25783]
+3195. [cleanup] Silence "file not found" warnings when loading
+ managed-keys zone. [RT #26340]
+
3194. [doc] Updated RFC references in the 'empty-zones-enable'
documentation. [RT #25203]
@@ -292,8 +404,14 @@
3189. [test] Added a summary report after system tests. [RT #25517]
+3188. [bug] zone.c:zone_refreshkeys() could fail to detach
+ references correctly when errors occurred, causing
+ a hang on shutdown. [RT #26372]
+
3187. [port] win32: support for Visual Studio 2008. [RT #26356]
+3186. [bug] Version/db mis-match in rpz code. [RT #26180]
+
3179. [port] kfreebsd: build issues. [RT #26273]
3175. [bug] Fix how DNSSEC positive wildcard responses from a
@@ -301,8 +419,25 @@
unnecessary NSEC3 record when generating such
responses. [RT #26200]
+3174. [bug] Always compute to revoked key tag from scratch.
+ [RT #26186]
+
3173. [port] Correctly validate root DS responses. [RT #25726]
+3171. [bug] Exclusively lock the task when adding a zone using
+ 'rndc addzone'. [RT #25600]
+
+3170. [func] RPZ update:
+ - fix precedence among competing rules
+ - improve ARM text including documenting rule precedence
+ - try to rewrite CNAME chains until first hit
+ - new "rpz" logging channel
+ - RDATA for CNAME rules can include wildcards
+ - replace "NO-OP" named.conf policy override with
+ "PASSTHRU" and add "DISABLED" override ("NO-OP"
+ is still recognized)
+ [RT #25172]
+
3169. [func] Catch db/version mis-matches when calling dns_db_*().
[RT #26017]
@@ -314,26 +449,24 @@
ns*/ subdirectory to override stock arguments to
named. Largely from RT#26044, but no separate ticket.
+3161. [bug] zone.c:del_sigs failed to always reset rdata leading
+ assertion failures. [RT #25880]
+
3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
the config file before pausing the server. [RT #21373]
-3156. [bug] Reconfiguring the server with an incorrectly
- formatted TSIG key could cause a crash during
- subsequent zone transfers. [RT #20391]
+3155. [bug] Fixed a build failure when using contrib DLZ
+ drivers (e.g., mysql, postgresql, etc). [RT #25710]
3154. [bug] Attempting to print an empty rdataset could trigger
an assert. [RT #25452]
+3152. [cleanup] Some versions of gcc and clang failed due to
+ incorrect use of __builtin_expect. [RT #25183]
+
3151. [bug] Queries for type RRSIG or SIG could be handled
incorrectly. [RT #21050]
-3149. [tuning] Improve scalability by allocating one zone
- task per 100 zones at startup time. (The
- BIND9_ZONE_TASKS_HINT environment variable
- which was established as a temporary measure
- in change #3132 is no longer needed or
- used.) [rt25541]
-
3148. [bug] Processing of normal queries could be stalled when
forwarding a UPDATE message. [RT #24711]
@@ -347,15 +480,17 @@
3143. [bug] Silence clang compiler warnings. [RT #25174]
-3142. [bug] NAPTR is class agnostic. [RT #25429]
-
-3141. [bug] Silence spurious "zone serial unchanged" messages
- associated with empty zones. [RT #25079]
-
3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
for the hashing algorithms (md5, sha1 - sha512, and
their hmac counterparts). [RT #25067]
+ --- 9.8.1 released ---
+
+ --- 9.8.1rc1 released ---
+
+3141. [bug] Silence spurious "zone serial (0) unchanged" messages
+ associated with empty zones. [RT #25079]
+
3138. [bug] Address memory leaks and out-of-order operations when
shutting named down. [RT #25210]
@@ -363,30 +498,38 @@
empty zones switched on by the 'empty-zones-enable'
option. [RT #24990]
-3134. [bug] Improve the accuracy of dnssec-signzone's signing
- statistics. [RT #16030]
-
- --- 9.6-ESV-R5 released ---
+ Note: empty-zones-enable must be "yes;" or a empty
+ zone needs to be disabled in named.conf for RFC 1918
+ zones to be activated. This requirement may be
+ removed in future releases.
3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
[RT #24950]
-3132. [bug] Workaround for excessive startup time with large
- number of zones; allow setting of an environment
- variable to tune the number of tasks, default is 8,
- recommends 200 zones per task. If you have 200000
- zones set the BIND9_ZONE_TASKS_HINT environment
- variable to 1000 before starting named:
-
- csh: setenv BIND9_ZONE_TASKS_HINT 1000
- sh: BIND9_ZONE_TASKS_HINT=1000;
- export BIND9_ZONE_TASKS_HINT
+3134. [bug] Improve the accuracy of dnssec-signzone's signing
+ statistics. [RT #16030]
+
+ --- 9.8.1b3 released ---
+
+3133. [bug] Change #3114 was incomplete. [RT #24577]
- Applicable to 9.7, 9.6, auto-tuned in 9.8 and up.
- [RT #25084]
+3131. [tuning] Improve scalability by allocating one zone task
+ per 100 zones at startup time, rather than using a
+ fixed-size task table. [RT #24406]
- --- 9.6-ESV-R5rc1 released ---
+3129. [bug] Named could crash on 'rndc reconfig' when
+ allow-new-zones was set to yes and named ACLs
+ were used. [RT #22739]
+
+ --- 9.8.1b2 released ---
+
+3126. [security] Using DNAME record to generate replacements caused
+ RPZ to exit with a assertion failure. [RT #24766]
+
+3125. [security] Using wildcard CNAME records as a replacement with
+ RPZ caused named to exit with a assertion failure.
+ [RT #24715]
3124. [bug] Use an rdataset attribute flag to indicate
negative-cache records rather than using rrtype 0;
@@ -397,6 +540,8 @@
dns_rdataset_totext() that could cause named to
crash with an assertion failure. [RT #24777]
+3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
+
3121. [security] An authoritative name server sending a negative
response containing a very large RRset could
trigger an off-by-one error in the ncache code
@@ -406,40 +551,105 @@
that validated insecure without using DLV and had
DS records in the parent zone. [RT #24631]
+3119. [bug] When rolling to a new DNSSEC key, a private-type
+ record could be created and never marked complete.
+ [RT #23253]
+
3118. [bug] nsupdate could dump core on shutdown when using
SIG(0) keys. [RT #24604]
+3117. [cleanup] Remove doc and parser references to the
+ never-implemented 'auto-dnssec create' option.
+ [RT #24533]
+
+3115. [bug] Named could fail to return requested data when
+ following a CNAME that points into the same zone.
+ [RT #24455]
+
+3114. [bug] Retain expired RRSIGs in dynamic zones if key is
+ inactive and there is no replacement key. [RT #23136]
+
3113. [doc] Document the relationship between serial-query-rate
and NOTIFY messages.
+ --- 9.8.1b1 released ---
+
3112. [doc] Add missing descriptions of the update policy name
types "ms-self", "ms-subdomain", "krb5-self" and
"krb5-subdomain", which allow machines to update
their own records, to the BIND 9 ARM.
+3111. [bug] Improved consistency checks for dnssec-enable and
+ dnssec-validation, added test cases to the
+ checkconf system test. [RT #24398]
+
3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
+3107. [bug] dnssec-signzone: Report the correct number of ZSKs
+ when using -x. [RT #20852]
+
+3105. [bug] GOST support can be suppressed by "configure
+ --without-gost" [RT #24367]
+
3104. [bug] Better support for cross-compiling. [RT #24367]
+3103. [bug] Configuring 'dnssec-validation auto' in a view
+ instead of in the options statement could trigger
+ an assertion failure in named-checkconf. [RT #24382]
+
+3101. [bug] Zones using automatic key maintenance could fail
+ to check the key repository for updates. [RT #23744]
+
+3100. [security] Certain response policy zone configurations could
+ trigger an INSIST when receiving a query of type
+ RRSIG. [RT #24280]
+
3099. [test] "dlz" system test now runs but gives R:SKIPPED if
not compiled with --with-dlz-filesystem. [RT #24146]
+3098. [bug] DLZ zones were answering without setting the AA bit.
+ [RT #24146]
+
3097. [test] Add a tool to test handling of malformed packets.
[RT #24096]
- --- 9.6-ESV-R5b1 released ---
+3096. [bug] Set KRB5_KTNAME before calling log_cred() in
+ dst_gssapi_acceptctx(). [RT #24004]
3095. [bug] Handle isolated reserved ports in the port range.
[RT #23957]
+3094. [doc] Expand dns64 documentation.
+
+3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
+
+3092. [bug] Signatures for records at the zone apex could go
+ stale due to an incorrect timer setting. [RT #23769]
+
+3091. [bug] Fixed a bug in which zone keys that were published
+ and then subsequently activated could fail to trigger
+ automatic signing. [RT #22911]
+
+3090. [func] Make --with-gssapi default [RT #23738]
+
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
+3087. [bug] DDNS updates using SIG(0) with update-policy match
+ type "external" could cause a crash. [RT #23735]
+
+3086. [bug] Running dnssec-settime -f on an old-style key will
+ now force an update to the new key format even if no
+ other change has been specified, using "-P now -A now"
+ as default values. [RT #22474]
+
3083. [bug] NOTIFY messages were not being sent when generating
a NSEC3 chain incrementally. [RT #23702]
+3082. [port] strtok_r is threads only. [RT #23747]
+
3081. [bug] Failure of DNAME substitution did not return
YXDOMAIN. [RT #23591]
@@ -449,13 +659,32 @@
3079. [bug] Handle isc_event_allocate failures in t_tasks.
[RT #23572]
+3078. [func] Added a new include file with function typedefs
+ for the DLZ "dlopen" driver. [RT #23629]
+
+3077. [bug] zone.c:zone_refreshkeys() incorrectly called
+ dns_zone_attach(), use zone->irefs instead. [RT #23303]
+
+3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
+ timestamp when determining which keys are active.
+ [RT #23642]
+
3074. [bug] Make the adb cache read through for zone data and
glue learn for zone named is authoritative for.
[RT #22842]
+3073. [bug] managed-keys changes were not properly being recorded.
+ [RT #20256]
+
+3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
+ [RT #20256]
+
3071. [bug] has_nsec could be used unintialised in
update.c:next_active. [RT #20256]
+3070. [bug] dnssec-signzone potential NULL pointer dereference.
+ [RT #20256]
+
3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
@@ -465,6 +694,11 @@
3067. [bug] ixfr-from-differences {master|slave}; failed to
select the master/slave zones. [RT #23580]
+3066. [func] The DLZ "dlopen" driver is now built by default,
+ no longer requiring a configure option. To
+ disable it, use "configure --without-dlopen".
+ (Note: driver not supported on win32.) [RT #23467]
+
3065. [bug] RRSIG could have time stamps too far in the future.
[RT #23356]
@@ -479,13 +713,34 @@
reload to fail, if a log file specified in the conf
file isn't a plain file. [RT #22771]
+3057. [bug] "rndc secroots" would abort after the first error
+ and so could miss some views. [RT #23488]
+
+3054. [bug] Added elliptic curve support check in
+ GOST OpenSSL engine detection. [RT #23485]
+
3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
to be exhausted and not recovered. [RT #23371]
+3052. [test] Fixed last autosign test report. [RT #23256]
+
3051. [bug] NS records obsure DNAME records at the bottom of the
zone if both are present. [RT #23035]
+3050. [bug] The autosign system test was timing dependent.
+ Wait for the initial autosigning to complete
+ before running the rest of the test. [RT #23035]
+
+3049. [bug] Save and restore the gid when creating creating
+ named.pid at startup. [RT #23290]
+
+3048. [bug] Fully separate view key mangement. [RT #23419]
+
+3047. [bug] DNSKEY NODATA responses not cached fixed in
+ validator.c. Tests added to dnssec system test.
+ [RT #22908]
+
3046. [bug] Use RRSIG original TTL to compute validated RRset
and RRSIG TTL. [RT #23332]
@@ -509,6 +764,8 @@
with a CNAME existed between the trust anchor and the
top of the zone. [RT #23338]
+3038. [bug] Install <dns/rpz.h>. [RT #23342]
+
3037. [doc] Update COPYRIGHT to contain all the individual
copyright notices that cover various parts.
@@ -544,47 +801,108 @@
after calling grow_headerspace() and if not
re-call grow_headerspace() until we do. [RT #22521]
+ --- 9.8.0 released ---
+
3025. [bug] Fixed a possible deadlock due to zone resigning.
[RT #22964]
+3024. [func] RTT Banding removed due to minor security increase
+ but major impact on resolver latency. [RT #23310]
+
3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
not all TSIG-signed. [RT #23254]
+3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
+ [RT #23246]
+
+3021. [bug] Change #3010 was incomplete. [RT #22296]
+
+3020. [bug] auto-dnssec failed to correctly update the zone when
+ changing the DNSKEY RRset. [RT #23232]
+
3019. [test] Test: check apex NSEC3 records after adding DNSKEY
record via UPDATE. [RT #23229]
+ --- 9.8.0rc1 released ---
+
3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. [RT #23120]
+3017. [doc] dnssec-keyfromlabel -I was not properly documented.
+ [RT #22887]
+
3016. [bug] rndc usage missing '-b'. [RT #22937]
3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
-3014. [bug] Fix the zonechecks system test to match expected
- behaviour for 9.6 and to fail on error. [RT #22905]
+3013. [bug] The DNS64 ttl was not always being set as expected.
+ [RT #23034]
3012. [bug] Remove DNSKEY TTL change pairs before generating
signing records for any remaining DNSKEY changes.
[RT #22590]
- --- 9.6-ESV-R4 released ---
+3011. [func] Allow setting this in named.conf using the new
+ 'resolver-query-timeout' option, which specifies a max
+ time in seconds. 0 means 'default' and anything longer
+ than 30 will be silently set to 30. [RT #22852]
- --- 9.6.3 released ---
+3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
+ for refreshing managed-keys. [RT #22296]
3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
- --- 9.6.3rc1 released ---
+ --- 9.8.0b1 released ---
+
+3008. [func] Response policy zones (RPZ) support. [RT #21726]
3007. [bug] Named failed to preserve the case of domain names in
rdata which is not compressible when writing master
files. [RT #22863]
+3006. [func] Allow dynamically generated TSIG keys to be preserved
+ across restarts of named. Initially this is for
+ TSIG keys generated using GSSAPI. [RT #22639]
+
+3005. [port] Solaris: Work around the lack of
+ gsskrb5_register_acceptor_identity() by setting
+ the KRB5_KTNAME environment variable to the
+ contents of tkey-gssapi-keytab. Also fixed
+ test errors on MacOSX. [RT #22853]
+
+3004. [func] DNS64 reverse support. [RT #22769]
+
+3003. [experimental] Added update-policy match type "external",
+ enabling named to defer the decision of whether to
+ allow a dynamic update to an external daemon.
+ (Contributed by Andrew Tridgell.) [RT #22758]
+
3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
[RT #22766]
+3001. [func] Added a default trust anchor for the root zone, which
+ can be switched on by setting "dnssec-validation auto;"
+ in the named.conf options. [RT #21727]
+
+3000. [bug] More TKEY/GSS fixes:
+ - nsupdate can now get the default realm from
+ the user's Kerberos principal
+ - corrected gsstest compilation flags
+ - improved documentation
+ - fixed some NULL dereferences
+ [RT #22795]
+
+2999. [func] Add GOST support (RFC 5933). [RT #20639]
+
+2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
+ to the task api. [RT #22776]
+
+2997. [func] named -V now reports the OpenSSL and libxml2 verions
+ it was compiled against. [RT #22687]
+
2996. [security] Temporarily disable SO_ACCEPTFILTER support.
[RT #22589]
@@ -595,13 +913,52 @@
do not use threads on earlier versions. Also kill
the unproven-pthreads, mit-pthreads, and ptl2 support.
+2993. [func] Dynamically grow adb hash tables. [RT #21186]
+
+2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
+ for looking at a secure delegation. [RT #22059]
+
+2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
+ dynamic zones. [RT #22365]
+
+2990. [bug] 'dnssec-settime -S' no longer tests prepublication
+ interval validity when the interval is set to 0.
+ [RT #22761]
+
+2989. [func] Added support for writable DLZ zones. (Contributed
+ by Andrew Tridgell of the Samba project.) [RT #22629]
+
+2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
+ of external DLZ drivers that can be loaded as
+ shared objects at runtime rather than linked with
+ named. Currently this is switched on via a
+ compile-time option, "configure --with-dlz-dlopen".
+ Note: the syntax for configuring DLZ zones
+ is likely to be refined in future releases.
+ (Contributed by Andrew Tridgell of the Samba
+ project.) [RT #22629]
+
+2987. [func] Improve ease of configuring TKEY/GSS updates by
+ adding a "tkey-gssapi-keytab" option. If set,
+ updates will be allowed with any key matching
+ a principal in the specified keytab file.
+ "tkey-gssapi-credential" is no longer required
+ and is expected to be deprecated. (Contributed
+ by Andrew Tridgell of the Samba project.)
+ [RT #22629]
+
+2986. [func] Add new zone type "static-stub". It's like a stub
+ zone, but the nameserver names and/or their IP
+ addresses are statically configured. [RT #21474]
+
+2985. [bug] Add a regression test for change #2896. [RT #21324]
+
2984. [bug] Don't run MX checks when the target of the MX record
is ".". [RT #22645]
-2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
- [RT #20768]
+2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
- --- 9.6.3b1 released ---
+ --- 9.8.0a1 released ---
2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.
@@ -610,12 +967,20 @@
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672]
+2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
+
+2980. [bug] named didn't properly handle UPDATES that changed the
+ TTL of the NSEC3PARAM RRset. [RT #22363]
+
2979. [bug] named could deadlock during shutdown if two
"rndc stop" commands were issued at the same
time. [RT #22108]
2978. [port] hpux: look for <devpoll.h> [RT #21919]
+2977. [bug] 'nsupdate -l' report if the session key is missing.
+ [RT #21670]
+
2976. [bug] named could die on exit after negotiating a GSS-TSIG
key. [RT #22573]
@@ -623,21 +988,82 @@
wrong lock which could lead to server deadlock.
[RT #22614]
+2974. [bug] Some valid UPDATE requests could fail due to a
+ consistency check examining the existing version
+ of the zone rather than the new version resulting
+ from the UPDATE. [RT #22413]
+
+2973. [bug] bind.keys.h was being removed by the "make clean"
+ at the end of configure resulting in build failures
+ where there is very old version of perl installed.
+ Move it to "make maintainer-clean". [RT #22230]
+
+2972. [bug] win32: address windows socket errors. [RT #21906]
+
+2971. [bug] Fixed a bug that caused journal files not to be
+ compacted on Windows systems as a result of
+ non-POSIX-compliant rename() semantics. [RT #22434]
+
+2970. [security] Adding a NO DATA negative cache entry failed to clear
+ any matching RRSIG records. A subsequent lookup of
+ of NO DATA cache entry could trigger a INSIST when the
+ unexpected RRSIG was also returned with the NO DATA
+ cache entry.
+
+ CVE-2010-3613, VU#706148. [RT #22288]
+
+2969. [security] Fix acl type processing so that allow-query works
+ in options and view statements. Also add a new
+ set of tests to verify proper functioning.
+
+ CVE-2010-3615, VU#510208. [RT #22418]
+
+2968. [security] Named could fail to prove a data set was insecure
+ before marking it as insecure. One set of conditions
+ that can trigger this occurs naturally when rolling
+ DNSKEY algorithms.
+
+ CVE-2010-3614, VU#837744. [RT #22309]
+
+2967. [bug] 'host -D' now turns on debugging messages earlier.
+ [RT #22361]
+
+2966. [bug] isc_print_vsnprintf() failed to check if there was
+ space available in the buffer when adding a left
+ justified character with a non zero width,
+ (e.g. "%-1c"). [RT #22270]
+
2965. [func] Test HMAC functions using test data from RFC 2104 and
RFC 4634. [RT #21702]
+2964. [placeholder]
+
+2963. [security] The allow-query acl was being applied instead of the
+ allow-query-cache acl to cache lookups. [RT #22114]
+
+2962. [port] win32: add more dependencies to BINDBuild.dsw.
+ [RT #22062]
+
+2961. [bug] Be still more selective about the non-authoritative
+ answers we apply change 2748 to. [RT #22074]
+
2960. [func] Check that named accepts non-authoritative answers.
[RT #21594]
2959. [func] Check that named starts with a missing masterfile.
[RT #22076]
+2958. [bug] named failed to start with a missing master file.
+ [RT #22076]
+
2957. [bug] entropy_get() and entropy_getpseudo() failed to match
the API for RAND_bytes() and RAND_pseudo_bytes()
respectively. [RT #21962]
2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
+2955. [func] Provide more detail in the recursing log. [RT #22043]
+
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
build_sqldbinstance failure. [RT #21623]
@@ -645,10 +1071,26 @@
exact match" message when returning a wildcard
no data response. [RT #21744]
+2952. [port] win32: named-checkzone and named-checkconf failed
+ to initialise winsock. [RT #21932]
+
+2951. [bug] named failed to generate a correct signed response
+ in a optout, delegation only zone with no secure
+ delegations. [RT #22007]
+
2950. [bug] named failed to perform a SOA up to date check when
falling back to TCP on UDP timeouts when
ixfr-from-differences was set. [RT #21595]
+2949. [bug] dns_view_setnewzones() contained a memory leak if
+ it was called multiple times. [RT #21942]
+
+2948. [port] MacOS: provide a mechanism to configure the test
+ interfaces at reboot. See bin/tests/system/README
+ for details.
+
+2947. [placeholder]
+
2946. [doc] Document the default values for the minimum and maximum
zone refresh and retry values in the ARM. [RT #21886]
@@ -657,12 +1099,59 @@
2944. [maint] Remove ORCHID prefix from built in empty zones.
[RT #21772]
+2943. [func] Add support to load new keys into managed zones
+ without signing immediately with "rndc loadkeys".
+ Add support to link keys with "dnssec-keygen -S"
+ and "dnssec-settime -S". [RT #21351]
+
2942. [contrib] zone2sqlite failed to setup the entropy sources.
[RT #21610]
*** DIFF OUTPUT TRUNCATED AT 1000 LINES ***
More information about the svn-src-stable-8
mailing list