Author: delphij
Date: Wed Sep 28 06:11:01 2016
New Revision: 306394
URL: https://svnweb.freebsd.org/changeset/base/306394
Log:
MFV r306384:
BIND 9.9.9-P3.
Added:
stable/9/contrib/bind9/doc/arm/Bv9ARM.conf
- copied unchanged from r306384, vendor/bind9/dist/doc/arm/Bv9ARM.conf
stable/9/contrib/bind9/doc/arm/logging-categories.xml
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/logging-categories.xml
stable/9/contrib/bind9/doc/arm/man.dnssec-importkey.html
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/man.dnssec-importkey.html
stable/9/contrib/bind9/doc/arm/man.lwresd.html
- copied unchanged from r306384, vendor/bind9/dist/doc/arm/man.lwresd.html
stable/9/contrib/bind9/doc/arm/man.named.conf.html
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/man.named.conf.html
stable/9/contrib/bind9/doc/arm/notes.conf
- copied unchanged from r306384, vendor/bind9/dist/doc/arm/notes.conf
stable/9/contrib/bind9/doc/arm/noteversion.xml.in
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/noteversion.xml.in
stable/9/contrib/bind9/doc/arm/pkgversion.xml.in
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/pkgversion.xml.in
stable/9/contrib/bind9/doc/arm/releaseinfo.xml.in
- copied unchanged from r306384,
vendor/bind9/dist/doc/arm/releaseinfo.xml.in
stable/9/contrib/bind9/lib/dns/rdata/generic/avc_258.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/avc_258.c
stable/9/contrib/bind9/lib/dns/rdata/generic/avc_258.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/avc_258.h
stable/9/contrib/bind9/lib/dns/rdata/generic/csync_62.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/csync_62.c
stable/9/contrib/bind9/lib/dns/rdata/generic/csync_62.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/csync_62.h
stable/9/contrib/bind9/lib/dns/rdata/generic/ninfo_56.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/ninfo_56.c
stable/9/contrib/bind9/lib/dns/rdata/generic/ninfo_56.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/ninfo_56.h
stable/9/contrib/bind9/lib/dns/rdata/generic/rkey_57.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/rkey_57.c
stable/9/contrib/bind9/lib/dns/rdata/generic/rkey_57.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/rkey_57.h
stable/9/contrib/bind9/lib/dns/rdata/generic/sink_40.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/sink_40.c
stable/9/contrib/bind9/lib/dns/rdata/generic/sink_40.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/sink_40.h
stable/9/contrib/bind9/lib/dns/rdata/generic/smimea_53.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/smimea_53.c
stable/9/contrib/bind9/lib/dns/rdata/generic/smimea_53.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/smimea_53.h
stable/9/contrib/bind9/lib/dns/rdata/generic/ta_32768.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/ta_32768.c
stable/9/contrib/bind9/lib/dns/rdata/generic/ta_32768.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/ta_32768.h
stable/9/contrib/bind9/lib/dns/rdata/generic/talink_58.c
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/talink_58.c
stable/9/contrib/bind9/lib/dns/rdata/generic/talink_58.h
- copied unchanged from r306384,
vendor/bind9/dist/lib/dns/rdata/generic/talink_58.h
Deleted:
stable/9/contrib/bind9/doc/arm/html-fixup.pl
Modified:
stable/9/contrib/bind9/CHANGES
stable/9/contrib/bind9/FAQ
stable/9/contrib/bind9/FAQ.xml
stable/9/contrib/bind9/Makefile.in
stable/9/contrib/bind9/README
stable/9/contrib/bind9/acconfig.h
stable/9/contrib/bind9/bin/check/Makefile.in
stable/9/contrib/bind9/bin/check/named-checkconf.8
stable/9/contrib/bind9/bin/check/named-checkconf.c
stable/9/contrib/bind9/bin/check/named-checkconf.docbook
stable/9/contrib/bind9/bin/check/named-checkconf.html
stable/9/contrib/bind9/bin/check/named-checkzone.8
stable/9/contrib/bind9/bin/check/named-checkzone.c
stable/9/contrib/bind9/bin/check/named-checkzone.docbook
stable/9/contrib/bind9/bin/check/named-checkzone.html
stable/9/contrib/bind9/bin/confgen/Makefile.in
stable/9/contrib/bind9/bin/confgen/ddns-confgen.8
stable/9/contrib/bind9/bin/confgen/ddns-confgen.docbook
stable/9/contrib/bind9/bin/confgen/ddns-confgen.html
stable/9/contrib/bind9/bin/confgen/rndc-confgen.8
stable/9/contrib/bind9/bin/confgen/rndc-confgen.docbook
stable/9/contrib/bind9/bin/confgen/rndc-confgen.html
stable/9/contrib/bind9/bin/dig/Makefile.in
stable/9/contrib/bind9/bin/dig/dig.1
stable/9/contrib/bind9/bin/dig/dig.c
stable/9/contrib/bind9/bin/dig/dig.docbook
stable/9/contrib/bind9/bin/dig/dig.html
stable/9/contrib/bind9/bin/dig/dighost.c
stable/9/contrib/bind9/bin/dig/host.1
stable/9/contrib/bind9/bin/dig/host.docbook
stable/9/contrib/bind9/bin/dig/host.html
stable/9/contrib/bind9/bin/dig/nslookup.1
stable/9/contrib/bind9/bin/dig/nslookup.docbook
stable/9/contrib/bind9/bin/dig/nslookup.html
stable/9/contrib/bind9/bin/dnssec/Makefile.in
stable/9/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8
stable/9/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html
stable/9/contrib/bind9/bin/dnssec/dnssec-importkey.8
stable/9/contrib/bind9/bin/dnssec/dnssec-importkey.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-importkey.html
stable/9/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8
stable/9/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html
stable/9/contrib/bind9/bin/dnssec/dnssec-keygen.8
stable/9/contrib/bind9/bin/dnssec/dnssec-keygen.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-keygen.html
stable/9/contrib/bind9/bin/dnssec/dnssec-revoke.8
stable/9/contrib/bind9/bin/dnssec/dnssec-revoke.c
stable/9/contrib/bind9/bin/dnssec/dnssec-revoke.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-revoke.html
stable/9/contrib/bind9/bin/dnssec/dnssec-settime.8
stable/9/contrib/bind9/bin/dnssec/dnssec-settime.c
stable/9/contrib/bind9/bin/dnssec/dnssec-settime.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-settime.html
stable/9/contrib/bind9/bin/dnssec/dnssec-signzone.8
stable/9/contrib/bind9/bin/dnssec/dnssec-signzone.c
stable/9/contrib/bind9/bin/dnssec/dnssec-signzone.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-signzone.html
stable/9/contrib/bind9/bin/dnssec/dnssec-verify.8
stable/9/contrib/bind9/bin/dnssec/dnssec-verify.docbook
stable/9/contrib/bind9/bin/dnssec/dnssec-verify.html
stable/9/contrib/bind9/bin/named/Makefile.in
stable/9/contrib/bind9/bin/named/client.c
stable/9/contrib/bind9/bin/named/config.c
stable/9/contrib/bind9/bin/named/control.c
stable/9/contrib/bind9/bin/named/controlconf.c
stable/9/contrib/bind9/bin/named/include/named/log.h
stable/9/contrib/bind9/bin/named/include/named/query.h
stable/9/contrib/bind9/bin/named/include/named/server.h
stable/9/contrib/bind9/bin/named/lwdgrbn.c
stable/9/contrib/bind9/bin/named/lwresd.8
stable/9/contrib/bind9/bin/named/lwresd.docbook
stable/9/contrib/bind9/bin/named/lwresd.html
stable/9/contrib/bind9/bin/named/main.c
stable/9/contrib/bind9/bin/named/named.8
stable/9/contrib/bind9/bin/named/named.conf.5
stable/9/contrib/bind9/bin/named/named.conf.docbook
stable/9/contrib/bind9/bin/named/named.conf.html
stable/9/contrib/bind9/bin/named/named.docbook
stable/9/contrib/bind9/bin/named/named.html
stable/9/contrib/bind9/bin/named/query.c
stable/9/contrib/bind9/bin/named/server.c
stable/9/contrib/bind9/bin/named/statschannel.c
stable/9/contrib/bind9/bin/named/unix/include/named/os.h
stable/9/contrib/bind9/bin/named/unix/os.c
stable/9/contrib/bind9/bin/named/xfrout.c
stable/9/contrib/bind9/bin/nsupdate/Makefile.in
stable/9/contrib/bind9/bin/nsupdate/nsupdate.1
stable/9/contrib/bind9/bin/nsupdate/nsupdate.c
stable/9/contrib/bind9/bin/nsupdate/nsupdate.docbook
stable/9/contrib/bind9/bin/nsupdate/nsupdate.html
stable/9/contrib/bind9/bin/rndc/Makefile.in
stable/9/contrib/bind9/bin/rndc/rndc.8
stable/9/contrib/bind9/bin/rndc/rndc.conf.5
stable/9/contrib/bind9/bin/rndc/rndc.conf.docbook
stable/9/contrib/bind9/bin/rndc/rndc.conf.html
stable/9/contrib/bind9/bin/rndc/rndc.docbook
stable/9/contrib/bind9/bin/rndc/rndc.html
stable/9/contrib/bind9/bin/tools/Makefile.in
stable/9/contrib/bind9/bin/tools/arpaname.1
stable/9/contrib/bind9/bin/tools/arpaname.docbook
stable/9/contrib/bind9/bin/tools/arpaname.html
stable/9/contrib/bind9/bin/tools/genrandom.8
stable/9/contrib/bind9/bin/tools/genrandom.docbook
stable/9/contrib/bind9/bin/tools/genrandom.html
stable/9/contrib/bind9/bin/tools/isc-hmac-fixup.8
stable/9/contrib/bind9/bin/tools/isc-hmac-fixup.docbook
stable/9/contrib/bind9/bin/tools/isc-hmac-fixup.html
stable/9/contrib/bind9/bin/tools/named-journalprint.8
stable/9/contrib/bind9/bin/tools/named-journalprint.docbook
stable/9/contrib/bind9/bin/tools/named-journalprint.html
stable/9/contrib/bind9/bin/tools/nsec3hash.8
stable/9/contrib/bind9/bin/tools/nsec3hash.docbook
stable/9/contrib/bind9/bin/tools/nsec3hash.html
stable/9/contrib/bind9/config.h.in
stable/9/contrib/bind9/configure.in
stable/9/contrib/bind9/doc/Makefile.in
stable/9/contrib/bind9/doc/arm/Bv9ARM-book.xml
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch01.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch02.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch03.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch04.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch05.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch06.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch07.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch08.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch09.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch10.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch11.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch12.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.ch13.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.html
stable/9/contrib/bind9/doc/arm/Bv9ARM.pdf
stable/9/contrib/bind9/doc/arm/Makefile.in
stable/9/contrib/bind9/doc/arm/README-SGML
stable/9/contrib/bind9/doc/arm/dnssec.xml
stable/9/contrib/bind9/doc/arm/libdns.xml
stable/9/contrib/bind9/doc/arm/man.arpaname.html
stable/9/contrib/bind9/doc/arm/man.ddns-confgen.html
stable/9/contrib/bind9/doc/arm/man.dig.html
stable/9/contrib/bind9/doc/arm/man.dnssec-checkds.html
stable/9/contrib/bind9/doc/arm/man.dnssec-coverage.html
stable/9/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html
stable/9/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html
stable/9/contrib/bind9/doc/arm/man.dnssec-keygen.html
stable/9/contrib/bind9/doc/arm/man.dnssec-revoke.html
stable/9/contrib/bind9/doc/arm/man.dnssec-settime.html
stable/9/contrib/bind9/doc/arm/man.dnssec-signzone.html
stable/9/contrib/bind9/doc/arm/man.dnssec-verify.html
stable/9/contrib/bind9/doc/arm/man.genrandom.html
stable/9/contrib/bind9/doc/arm/man.host.html
stable/9/contrib/bind9/doc/arm/man.isc-hmac-fixup.html
stable/9/contrib/bind9/doc/arm/man.named-checkconf.html
stable/9/contrib/bind9/doc/arm/man.named-checkzone.html
stable/9/contrib/bind9/doc/arm/man.named-journalprint.html
stable/9/contrib/bind9/doc/arm/man.named.html
stable/9/contrib/bind9/doc/arm/man.nsec3hash.html
stable/9/contrib/bind9/doc/arm/man.nsupdate.html
stable/9/contrib/bind9/doc/arm/man.rndc-confgen.html
stable/9/contrib/bind9/doc/arm/man.rndc.conf.html
stable/9/contrib/bind9/doc/arm/man.rndc.html
stable/9/contrib/bind9/doc/arm/managed-keys.xml
stable/9/contrib/bind9/doc/arm/notes-wrapper.xml
stable/9/contrib/bind9/doc/arm/notes.html
stable/9/contrib/bind9/doc/arm/notes.pdf
stable/9/contrib/bind9/doc/arm/notes.xml
stable/9/contrib/bind9/doc/arm/pkcs11.xml
stable/9/contrib/bind9/doc/misc/options
stable/9/contrib/bind9/doc/misc/rfc-compliance
stable/9/contrib/bind9/isc-config.sh.in
stable/9/contrib/bind9/lib/bind9/Makefile.in
stable/9/contrib/bind9/lib/bind9/api
stable/9/contrib/bind9/lib/bind9/check.c
stable/9/contrib/bind9/lib/bind9/include/bind9/Makefile.in
stable/9/contrib/bind9/lib/dns/Makefile.in
stable/9/contrib/bind9/lib/dns/acache.c
stable/9/contrib/bind9/lib/dns/api
stable/9/contrib/bind9/lib/dns/cache.c
stable/9/contrib/bind9/lib/dns/client.c
stable/9/contrib/bind9/lib/dns/dst_api.c
stable/9/contrib/bind9/lib/dns/dst_openssl.h
stable/9/contrib/bind9/lib/dns/forward.c
stable/9/contrib/bind9/lib/dns/gen.c
stable/9/contrib/bind9/lib/dns/include/dns/Makefile.in
stable/9/contrib/bind9/lib/dns/include/dns/dbiterator.h
stable/9/contrib/bind9/lib/dns/include/dns/forward.h
stable/9/contrib/bind9/lib/dns/include/dns/message.h
stable/9/contrib/bind9/lib/dns/include/dns/name.h
stable/9/contrib/bind9/lib/dns/include/dns/rbt.h
stable/9/contrib/bind9/lib/dns/include/dns/view.h
stable/9/contrib/bind9/lib/dns/include/dst/Makefile.in
stable/9/contrib/bind9/lib/dns/journal.c
stable/9/contrib/bind9/lib/dns/master.c
stable/9/contrib/bind9/lib/dns/message.c
stable/9/contrib/bind9/lib/dns/name.c
stable/9/contrib/bind9/lib/dns/nsec3.c
stable/9/contrib/bind9/lib/dns/openssl_link.c
stable/9/contrib/bind9/lib/dns/openssldh_link.c
stable/9/contrib/bind9/lib/dns/openssldsa_link.c
stable/9/contrib/bind9/lib/dns/opensslrsa_link.c
stable/9/contrib/bind9/lib/dns/rbt.c
stable/9/contrib/bind9/lib/dns/rbtdb.c
stable/9/contrib/bind9/lib/dns/rcode.c
stable/9/contrib/bind9/lib/dns/rdata.c
stable/9/contrib/bind9/lib/dns/rdata/any_255/tsig_250.c
stable/9/contrib/bind9/lib/dns/rdata/ch_3/a_1.c
stable/9/contrib/bind9/lib/dns/rdata/generic/afsdb_18.c
stable/9/contrib/bind9/lib/dns/rdata/generic/caa_257.c
stable/9/contrib/bind9/lib/dns/rdata/generic/cdnskey_60.c
stable/9/contrib/bind9/lib/dns/rdata/generic/cdnskey_60.h
stable/9/contrib/bind9/lib/dns/rdata/generic/cds_59.c
stable/9/contrib/bind9/lib/dns/rdata/generic/cds_59.h
stable/9/contrib/bind9/lib/dns/rdata/generic/cname_5.c
stable/9/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c
stable/9/contrib/bind9/lib/dns/rdata/generic/dlv_32769.h
stable/9/contrib/bind9/lib/dns/rdata/generic/dname_39.c
stable/9/contrib/bind9/lib/dns/rdata/generic/dnskey_48.c
stable/9/contrib/bind9/lib/dns/rdata/generic/dnskey_48.h
stable/9/contrib/bind9/lib/dns/rdata/generic/ds_43.c
stable/9/contrib/bind9/lib/dns/rdata/generic/hip_55.c
stable/9/contrib/bind9/lib/dns/rdata/generic/ipseckey_45.c
stable/9/contrib/bind9/lib/dns/rdata/generic/key_25.c
stable/9/contrib/bind9/lib/dns/rdata/generic/key_25.h
stable/9/contrib/bind9/lib/dns/rdata/generic/lp_107.c
stable/9/contrib/bind9/lib/dns/rdata/generic/mb_7.c
stable/9/contrib/bind9/lib/dns/rdata/generic/md_3.c
stable/9/contrib/bind9/lib/dns/rdata/generic/mf_4.c
stable/9/contrib/bind9/lib/dns/rdata/generic/mg_8.c
stable/9/contrib/bind9/lib/dns/rdata/generic/minfo_14.c
stable/9/contrib/bind9/lib/dns/rdata/generic/mr_9.c
stable/9/contrib/bind9/lib/dns/rdata/generic/mx_15.c
stable/9/contrib/bind9/lib/dns/rdata/generic/naptr_35.c
stable/9/contrib/bind9/lib/dns/rdata/generic/ns_2.c
stable/9/contrib/bind9/lib/dns/rdata/generic/nsec3_50.c
stable/9/contrib/bind9/lib/dns/rdata/generic/nsec_47.c
stable/9/contrib/bind9/lib/dns/rdata/generic/nxt_30.c
stable/9/contrib/bind9/lib/dns/rdata/generic/ptr_12.c
stable/9/contrib/bind9/lib/dns/rdata/generic/rp_17.c
stable/9/contrib/bind9/lib/dns/rdata/generic/rrsig_46.c
stable/9/contrib/bind9/lib/dns/rdata/generic/rt_21.c
stable/9/contrib/bind9/lib/dns/rdata/generic/sig_24.c
stable/9/contrib/bind9/lib/dns/rdata/generic/soa_6.c
stable/9/contrib/bind9/lib/dns/rdata/generic/spf_99.c
stable/9/contrib/bind9/lib/dns/rdata/generic/tkey_249.c
stable/9/contrib/bind9/lib/dns/rdata/generic/tlsa_52.c
stable/9/contrib/bind9/lib/dns/rdata/generic/txt_16.c
stable/9/contrib/bind9/lib/dns/rdata/in_1/a6_38.c
stable/9/contrib/bind9/lib/dns/rdata/in_1/kx_36.c
stable/9/contrib/bind9/lib/dns/rdata/in_1/nsap-ptr_23.c
stable/9/contrib/bind9/lib/dns/rdata/in_1/px_26.c
stable/9/contrib/bind9/lib/dns/rdata/in_1/srv_33.c
stable/9/contrib/bind9/lib/dns/resolver.c
stable/9/contrib/bind9/lib/dns/rootns.c
stable/9/contrib/bind9/lib/dns/sdlz.c
stable/9/contrib/bind9/lib/dns/tkey.c
stable/9/contrib/bind9/lib/dns/update.c
stable/9/contrib/bind9/lib/dns/view.c
stable/9/contrib/bind9/lib/dns/xfrin.c
stable/9/contrib/bind9/lib/dns/zone.c
stable/9/contrib/bind9/lib/export/dns/Makefile.in
stable/9/contrib/bind9/lib/export/dns/include/dns/Makefile.in
stable/9/contrib/bind9/lib/export/dns/include/dst/Makefile.in
stable/9/contrib/bind9/lib/export/irs/Makefile.in
stable/9/contrib/bind9/lib/export/irs/include/irs/Makefile.in
stable/9/contrib/bind9/lib/export/isc/Makefile.in
stable/9/contrib/bind9/lib/export/isc/include/isc/Makefile.in
stable/9/contrib/bind9/lib/export/isc/nothreads/include/isc/Makefile.in
stable/9/contrib/bind9/lib/export/isc/pthreads/include/isc/Makefile.in
stable/9/contrib/bind9/lib/export/isc/unix/include/isc/Makefile.in
stable/9/contrib/bind9/lib/export/isccfg/Makefile.in
stable/9/contrib/bind9/lib/export/isccfg/include/isccfg/Makefile.in
stable/9/contrib/bind9/lib/export/samples/Makefile.in
stable/9/contrib/bind9/lib/irs/Makefile.in
stable/9/contrib/bind9/lib/irs/resconf.c
stable/9/contrib/bind9/lib/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/api
stable/9/contrib/bind9/lib/isc/base32.c
stable/9/contrib/bind9/lib/isc/base64.c
stable/9/contrib/bind9/lib/isc/buffer.c
stable/9/contrib/bind9/lib/isc/commandline.c
stable/9/contrib/bind9/lib/isc/hash.c
stable/9/contrib/bind9/lib/isc/hex.c
stable/9/contrib/bind9/lib/isc/httpd.c
stable/9/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/include/isc/assertions.h
stable/9/contrib/bind9/lib/isc/include/isc/error.h
stable/9/contrib/bind9/lib/isc/include/isc/file.h
stable/9/contrib/bind9/lib/isc/include/isc/hash.h
stable/9/contrib/bind9/lib/isc/include/isc/magic.h
stable/9/contrib/bind9/lib/isc/include/isc/netaddr.h
stable/9/contrib/bind9/lib/isc/include/isc/platform.h.in
stable/9/contrib/bind9/lib/isc/include/isc/result.h
stable/9/contrib/bind9/lib/isc/include/isc/sockaddr.h
stable/9/contrib/bind9/lib/isc/include/isc/socket.h
stable/9/contrib/bind9/lib/isc/include/isc/util.h
stable/9/contrib/bind9/lib/isc/md5.c
stable/9/contrib/bind9/lib/isc/mem.c
stable/9/contrib/bind9/lib/isc/mips/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/netaddr.c
stable/9/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/nothreads/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/pthreads/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/result.c
stable/9/contrib/bind9/lib/isc/sockaddr.c
stable/9/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/stats.c
stable/9/contrib/bind9/lib/isc/string.c
stable/9/contrib/bind9/lib/isc/task.c
stable/9/contrib/bind9/lib/isc/unix/file.c
stable/9/contrib/bind9/lib/isc/unix/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/unix/net.c
stable/9/contrib/bind9/lib/isc/unix/socket.c
stable/9/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/x86_32/include/isc/atomic.h
stable/9/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in
stable/9/contrib/bind9/lib/isc/x86_64/include/isc/atomic.h
stable/9/contrib/bind9/lib/isccc/Makefile.in
stable/9/contrib/bind9/lib/isccc/cc.c
stable/9/contrib/bind9/lib/isccc/include/isccc/Makefile.in
stable/9/contrib/bind9/lib/isccc/sexpr.c
stable/9/contrib/bind9/lib/isccfg/Makefile.in
stable/9/contrib/bind9/lib/isccfg/aclconf.c
stable/9/contrib/bind9/lib/isccfg/api
stable/9/contrib/bind9/lib/isccfg/include/isccfg/Makefile.in
stable/9/contrib/bind9/lib/isccfg/namedconf.c
stable/9/contrib/bind9/lib/isccfg/parser.c
stable/9/contrib/bind9/lib/lwres/Makefile.in
stable/9/contrib/bind9/lib/lwres/man/Makefile.in
stable/9/contrib/bind9/lib/lwres/man/lwres.3
stable/9/contrib/bind9/lib/lwres/man/lwres.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres.html
stable/9/contrib/bind9/lib/lwres/man/lwres_buffer.3
stable/9/contrib/bind9/lib/lwres/man/lwres_buffer.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_buffer.html
stable/9/contrib/bind9/lib/lwres/man/lwres_config.3
stable/9/contrib/bind9/lib/lwres/man/lwres_config.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_config.html
stable/9/contrib/bind9/lib/lwres/man/lwres_context.3
stable/9/contrib/bind9/lib/lwres/man/lwres_context.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_context.html
stable/9/contrib/bind9/lib/lwres/man/lwres_gabn.3
stable/9/contrib/bind9/lib/lwres/man/lwres_gabn.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_gabn.html
stable/9/contrib/bind9/lib/lwres/man/lwres_gai_strerror.3
stable/9/contrib/bind9/lib/lwres/man/lwres_gai_strerror.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_gai_strerror.html
stable/9/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.3
stable/9/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_getaddrinfo.html
stable/9/contrib/bind9/lib/lwres/man/lwres_gethostent.3
stable/9/contrib/bind9/lib/lwres/man/lwres_gethostent.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_gethostent.html
stable/9/contrib/bind9/lib/lwres/man/lwres_getipnode.3
stable/9/contrib/bind9/lib/lwres/man/lwres_getipnode.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_getipnode.html
stable/9/contrib/bind9/lib/lwres/man/lwres_getnameinfo.3
stable/9/contrib/bind9/lib/lwres/man/lwres_getnameinfo.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_getnameinfo.html
stable/9/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.3
stable/9/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_getrrsetbyname.html
stable/9/contrib/bind9/lib/lwres/man/lwres_gnba.3
stable/9/contrib/bind9/lib/lwres/man/lwres_gnba.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_gnba.html
stable/9/contrib/bind9/lib/lwres/man/lwres_hstrerror.3
stable/9/contrib/bind9/lib/lwres/man/lwres_hstrerror.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_hstrerror.html
stable/9/contrib/bind9/lib/lwres/man/lwres_inetntop.3
stable/9/contrib/bind9/lib/lwres/man/lwres_inetntop.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_inetntop.html
stable/9/contrib/bind9/lib/lwres/man/lwres_noop.3
stable/9/contrib/bind9/lib/lwres/man/lwres_noop.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_noop.html
stable/9/contrib/bind9/lib/lwres/man/lwres_packet.3
stable/9/contrib/bind9/lib/lwres/man/lwres_packet.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_packet.html
stable/9/contrib/bind9/lib/lwres/man/lwres_resutil.3
stable/9/contrib/bind9/lib/lwres/man/lwres_resutil.docbook
stable/9/contrib/bind9/lib/lwres/man/lwres_resutil.html
stable/9/contrib/bind9/make/rules.in
stable/9/contrib/bind9/version
stable/9/lib/bind/dns/code.h
stable/9/lib/bind/dns/dns/enumtype.h
stable/9/lib/bind/dns/dns/rdatastruct.h
stable/9/share/doc/bind9/Makefile
Directory Properties:
stable/9/contrib/bind9/ (props changed)
Modified: stable/9/contrib/bind9/CHANGES
==============================================================================
--- stable/9/contrib/bind9/CHANGES Wed Sep 28 05:12:09 2016
(r306393)
+++ stable/9/contrib/bind9/CHANGES Wed Sep 28 06:11:01 2016
(r306394)
@@ -1,4 +1,96 @@
- --- 9.9.8-P4 released ---
+ --- 9.9.9-P3 released ---
+
+4467. [security] It was possible to trigger a assertion when rendering
+ a message. (CVE-2016-2776) [RT #43139]
+
+ --- 9.9.9-P2 released ---
+
+4406. [bug] getrrsetbyname with a non absolute name could
+ trigger an infinite recursion bug in lwresd
+ and named with lwres configured if when combined
+ with a search list entry the resulting name is
+ too long. (CVE-2016-2775) [RT #42694]
+
+4405. [bug] Change 4342 introduced a regression where you could
+ not remove a delegation in a NSEC3 signed zone using
+ OPTOUT via nsupdate. [RT #42702]
+
+4387. [bug] Change 4336 was not complete leading to SERVFAIL
+ being return as NS records expired. [RT #42683]
+
+ --- 9.9.9-P1 released ---
+
+4366. [bug] Address race condition when updating rbtnode bit
+ fields. [RT #42379]
+
+4363. [port] win32: Disable explicit triggering UAC when running
+ BINDInstall.
+
+ --- 9.9.9 released ---
+
+ --- 9.9.9rc1 released ---
+
+4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
+
+4346. [bug] Fixed a regression introduced in change #4337 which
+ caused signed domains with revoked KSKs to fail
+ validation. [RT #42147]
+
+4345. [contrib] perftcpdns mishandled the return values from
+ clock_nanosleep. [RT #42131]
+
+4344. [port] Address openssl version differences. [RT #42059]
+
+ --- 9.9.9b2 released ---
+
+4342. [bug] 'rndc flushtree' could fail to clean the tree if there
+ wasn't a node at the specified name. [RT #41846]
+
+4338. [bug] Reimplement change 4324 as it wasn't properly doing
+ all the required book keeping. [RT #41941]
+
+4337. [bug] The previous change exposed a latent flaw in
+ key refresh queries for managed-keys when
+ a cached DNSKEY had TTL 0. [RT #41986]
+
+4336. [bug] Don't emit records with zero ttl unless the records
+ were learnt with a zero ttl. [RT #41687]
+
+4335. [bug] zone->view could be detached too early. [RT #41942]
+
+4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
+ 2001:500:9f::42.
+
+4331. [func] When loading managed signed zones detect if the
+ RRSIG's inception time is in the future and regenerate
+ the RRSIG immediately. [RT #41808]
+
+4330. [protocol] Identify the PAD option as "PAD" when printing out
+ a message.
+
+ --- 9.9.9b1 released ---
+
+4329. [func] Warn about a common misconfiguration when forwarding
+ RFC 1918 zones. [RT #41441]
+
+4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
+
+4327. [func] Log query and depth counters during fetches when
+ querytrace (./configure --enable-querytrace) is
+ enabled (helps in diagnosing). [RT #41787]
+
+4326. [protocol] Add support for AVC. [RT #41819]
+
+4324. [bug] When deleting records from a zone database, interior
+ nodes could be left empty but not deleted, damaging
+ search performance afterward. [RT #40997]
+
+4323. [bug] Improve HTTP header processing on statschannel.
+ [RT #41674]
+
+4320. [bug] Insufficient memory allocation when handling
+ "none" ACL could cause an assertion failure in
+ named when parsing ACL configuration. [RT #41745]
4319. [security] Fix resolver assertion failure due to improper
DNAME handling when parsing fetch reply messages.
@@ -7,20 +99,122 @@
4318. [security] Malformed control messages can trigger assertions
in named and rndc. (CVE-2016-1285) [RT #41666]
- --- 9.9.8-P3 released ---
+4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
+
+4315. [bug] Check that configured view class isn't a meta class.
+ [RT #41572].
+
+4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
+ testing tools provided by Nominum, Inc.
+
+4313. [bug] Handle ns_client_replace failures in test mode.
+ [RT #41190]
+
+4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
+ was not consistent. [RT #41600]
+
+4311. [bug] Prevent "rndc delzone" from being used on
+ response-policy zones. [RT #41593]
+
+4310. [performance] Use __builtin_expect() where available to annotate
+ conditions with known behavior. [RT #41411]
+
+4308. [func] Added operating system details to "named -V"
+ output. [RT #41452]
+
+4306. [maint] Added a PKCS#11 openssl patch supporting
+ version 1.0.2f [RT #38312]
+
+4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
+ from the zone's apex. [RT #41483]
+
+4304. [port] xfer system test failed as 'tail -n +value' is not
+ portable. [RT #41315]
+
+4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
+
+4300. [cleanup] Added new querytrace logging. [RT #41155]
+
+4299. [bug] Check that exactly totallen bytes are read when
+ reading a RRset from raw files in both single read
+ and incremental modes. [RT #41402]
+
+4297. [bug] RPZ zones with errors could cause a crash when a
+ pointer was cleaned up twice. [RT #41518]
+
+4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
+ could allow incorrect text formatting of EDNS EXPIRE
+ options. [RT #41437]
+
+4294. [bug] Fixed a regression in which "rndc stop -p" failed
+ to print the PID. [RT #41513]
+
+4293. [bug] Address memory leak on priming query creation failure.
+ [RT #41512]
+
+4292. [bug] Build lib/export/dns/gen with native compiler.
+ [RT #41502]
+
+4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
+
+4289. [bug] The server could crash due to memory being used
+ after it was freed if a zone transfer timed out.
+ [RT #41297]
4288. [bug] Fixed a regression in resolver.c:possibly_mark()
which caused known-bogus servers to be queried
anyway. [RT #41321]
+4287. [bug] Silence an overly noisy log message when message
+ parsing fails. [RT #41374]
+
4285. [security] Specific APL data could trigger a INSIST.
(CVE-2015-8704) [RT #41396]
- --- 9.9.8-P2 released ---
+4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
+
+4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
+
+4280. [performance] Use optimal message sizes to improve compression
+ in AXFRs. This reduces network traffic. [RT #40996]
+
+4277. [performance] Improve performance of the RBT, the central zone
+ datastructure: The aux hashtable was improved,
+ hash function was updated to perform more
+ uniform mapping, uppernode was added to
+ dns_rbtnode, and other cleanups and performance
+ improvements were made. [RT #41165]
+
+4276. [protocol] Add support for SMIMEA. [RT #40513]
+
+4274. [performance] Speed up typemap processing from text. [RT #41196]
+
+4272. [bug] dig: the +norrcomments option didn't work with +multi.
+ [RT #41234]
+
+4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
+ [RT #41235]
4270. [security] Update allowed OpenSSL versions as named is
potentially vulnerable to CVE-2015-3193.
+4267. [test] Check sdlz error handling. [RT #41142]
+
+4266. [bug] The sdlz driver failed to pass some errors back to
+ the caller. [RT #41142]
+
+4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
+
+4264. [bug] Check const of strchr/strrchr assignments match
+ argument's const status. [RT #41150]
+
+4262. [bug] Fixed a bug in epoll socket code that caused
+ sockets to not be registered for ready
+ notification in some cases, causing named to not
+ read from or write to them, resulting in what
+ appear to the user as blocked connections.
+ [RT #41067]
+
4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
[RT #40556]
@@ -29,10 +223,123 @@
triggering a REQUIRE failure when those records
were subsequently cached. (CVE-2015-8000) [RT #40987]
+4258. [bug] Limit rndc query message sizes to 32 KiB. This should
+ not break any legitimate rndc commands, but will
+ prevent a rogue rndc query from allocating too
+ much memory. [RT #41073]
+
+4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
+
+4256. [bug] Allow rndc command arguments to be quoted so as
+ to allow spaces. [RT #36665]
+
+4254. [bug] Address missing lock when getting zone's serial.
+ [RT #41072]
+
4253. [security] Address fetch context reference count handling error
- on socket error. (CVE-2015-8461) [RT#40945]
+ on socket error. (CVE-2015-8461) [RT#40945]
+
+4248. [performance] Add an isc_atomic_storeq() function, use it in
+ stats counters to improve performance.
+ [RT #39972] [RT #39979]
+
+4244. [bug] The parser was not reporting that use-ixfr is obsolete.
+ [RT #41010]
+
+4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
+ the ARM. [RT #40955]
+
+4240. [port] Fix LibreSSL compatibility. [RT #40977]
+
+4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
+ [RT #40947]
+
+4237. [doc] Upgraded documentation toolchain to use DocBook 5
+ and dblatex. [RT #40766]
+
+4236. [performance] On machines with 2 or more processors (CPU), the
+ default value for the number of UDP listeners
+ has been changed to the number of detected
+ processors minus one. [RT #40761]
+
+4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
+ [RT #40597]
+
+4232. [contrib] Address unchecked memory allocation calls in
+ query-loc and zone2ldap. [RT #40789]
+
+4229. [bug] A variable could be used uninitialized in
+ dns_update_signaturesinc. [RT #40784]
+
+4228. [bug] Address race condition in dns_client_destroyrestrans.
+ [RT #40605]
+
+4227. [bug] Silence static analysis warnings. [RT #40828]
+
+4226. [bug] Address a theoretical shutdown race in
+ zone.c:notify_send_queue(). [RT #38958]
+
+4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
+ shared libraries. [RT #39557]
+
+4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
+ [RT #40583]
+
+4220. [doc] Improve documentation for zone-statistics.
+ [RT #36955]
+
+4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
+ EGAIN when these soft error are not retried for
+ isc_socket_send*().
+
+4217. [protocol] Add support for CSYNC. [RT #40532]
+
+4216. [cleanup] Silence static analysis warnings. [RT #40649]
+
+4215. [bug] nsupdate: skip to next request on GSSTKEY create
+ failure. [RT #40685]
+
+4214. [protocol] Add support for TALINK. [RT #40544]
+
+4213. [bug] Don't reuse a cache across multiple classes.
+ [RT #40205]
+
+4210. [cleanup] Silence use after free false positive. [RT #40743]
+
+4208. [bug] Address null pointer dereferences on out of memory.
+ [RT #40764]
+
+4207. [bug] Handle class mismatches with raw zone files.
+ [RT #40746]
+
+4205. [bug] 'named-checkconf -p' could include unwanted spaces
+ when printing tuples with unset optional fields.
+ [RT #40731]
+
+4204. [bug] 'dig +trace' failed to lookup the correct type if
+ the initial root NS query was retried. [RT #40296]
+
+4202. [bug] isccc_cc_fromwire() could return an incorrect
+ result. [RT #40614]
+
+4201. [func] The default preferred-glue is now the address record
+ type of the transport the query was received
+ over. [RT #40468]
+
+4200. [cleanup] win32: update BINDinstall to be BIND release
+ independent. [RT #38915]
+
+4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
+ [RT #40545] [RT #40547] [RT #40561] [RT #40563]
+
+4198. [doc] Add fetch-quota-params, fetches-per-server, and
+ fetches-per-zone to doc/misc/options. [RT #40601]
+
+4196. [doc] Improve how "enum + other" types are documented.
+ [RT #40608]
- --- 9.9.8-P1 (withdrawn) ---
+4194. [bug] named-checkconf -p failed to properly print a port
+ range. [RT #40634]
--- 9.9.8 released ---
@@ -47,7 +354,7 @@
4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
as per RFC 6763. [RT #37889]
-4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
+4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
valid with check-names. <forest> still needs to be
LDH. [RT #40399]
Modified: stable/9/contrib/bind9/FAQ
==============================================================================
--- stable/9/contrib/bind9/FAQ Wed Sep 28 05:12:09 2016 (r306393)
+++ stable/9/contrib/bind9/FAQ Wed Sep 28 06:11:01 2016 (r306394)
@@ -1,10 +1,6 @@
-Frequently Asked Questions about BIND 9
-
-Copyright � 2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
+Copyright ? 2000-2010, 2013-2016 Internet Systems Consortium, Inc.
("ISC")
-Copyright � 2000-2003 Internet Software Consortium.
-
-----------------------------------------------------------------------
1. Compilation and Installation Questions
@@ -94,7 +90,7 @@ Q: I'm trying to use TSIG to authenticat
rejecting the TSIG. Why?
A: This may be a clock skew problem. Check that the the clocks on the
- client and server are properly synchronised (e.g., using ntp).
+ client and server are properly synchronized (e.g., using ntp).
Q: I see a log message like the following. Why?
Modified: stable/9/contrib/bind9/FAQ.xml
==============================================================================
--- stable/9/contrib/bind9/FAQ.xml Wed Sep 28 05:12:09 2016
(r306393)
+++ stable/9/contrib/bind9/FAQ.xml Wed Sep 28 06:11:01 2016
(r306394)
@@ -1,7 +1,5 @@
-<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
- "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"; []>
<!--
- - Copyright (C) 2004-2010, 2013, 2014 Internet Systems Consortium, Inc.
("ISC")
+ - Copyright (C) 2004-2010, 2013-2016 Internet Systems Consortium, Inc.
("ISC")
- Copyright (C) 2000-2003 Internet Software Consortium.
-
- Permission to use, copy, modify, and/or distribute this software for any
@@ -17,10 +15,9 @@
- PERFORMANCE OF THIS SOFTWARE.
-->
-<!-- $Id: FAQ.xml,v 1.54 2010/01/19 23:48:55 tbox Exp $ -->
+<!-- Converted by db4-upgrade version 1.0 -->
+<article xmlns="http://docbook.org/ns/docbook"; version="5.0" class="faq">
-<article class="faq">
- <title>Frequently Asked Questions about BIND 9</title>
<articleinfo>
<copyright>
<year>2004</year>
@@ -32,6 +29,8 @@
<year>2010</year>
<year>2013</year>
<year>2014</year>
+ <year>2015</year>
+ <year>2016</year>
<holder>Internet Systems Consortium, Inc. ("ISC")</holder>
</copyright>
<copyright>
@@ -42,10 +41,10 @@
<holder>Internet Software Consortium.</holder>
</copyright>
</articleinfo>
- <qandaset defaultlabel='qanda'>
-
- <qandadiv><title>Compilation and Installation Questions</title>
-
+ <qandaset defaultlabel="qanda">
+
+ <qandadiv><title>Compilation and Installation Questions</title>
+
<qandaentry>
<question>
<para>
@@ -61,7 +60,7 @@
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -70,7 +69,7 @@
</question>
<answer>
<para>
- Short Answer: No.
+ Short Answer: No.
</para>
<para>
Long Answer: There really isn't a default configuration which fits
@@ -93,9 +92,9 @@
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Compilation and Installation Questions -->
-
+
<qandadiv><title>Configuration and Setup Questions</title>
<qandaentry>
@@ -125,7 +124,7 @@ example.com. 86400 IN SOA ns hostmaster
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<!-- configuration -->
<question>
@@ -223,7 +222,7 @@ view "chaos" chaos {
<answer>
<para>
This may be a clock skew problem. Check that the the clocks
- on the client and server are properly synchronised (e.g.,
+ on the client and server are properly synchronized (e.g.,
using ntp).
</para>
</answer>
@@ -251,7 +250,7 @@ view "chaos" chaos {
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -266,7 +265,7 @@ view "chaos" chaos {
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -359,7 +358,7 @@ Slave 10.0.1.2:
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -392,7 +391,7 @@ named-checkzone example.com tmp</program
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -416,7 +415,7 @@ named-checkzone example.com tmp</program
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -501,7 +500,7 @@ Master 10.0.1.1:
You are running chrooted (-t) and have not supplied local timezone
information in the chroot area.
</para>
- <simplelist>
+ <simplelist type="vert">
<member>FreeBSD: /etc/localtime</member>
<member>Solaris: /etc/TIMEZONE and /usr/share/lib/zoneinfo</member>
<member>OSF: /etc/zoneinfo/localtime</member>
@@ -511,7 +510,7 @@ Master 10.0.1.1:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -551,7 +550,7 @@ Master 10.0.1.1:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -603,7 +602,7 @@ zone "example.net" {
</informalexample>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -694,9 +693,9 @@ server ::/0 { bogus yes; };
</programlisting>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Configuration and Setup Questions -->
-
+
<qandadiv><title>Operations Questions</title>
<qandaentry>
@@ -768,7 +767,7 @@ server ::/0 { bogus yes; };
</qandadiv> <!-- Operations Questions -->
<qandadiv><title>General Questions</title>
-
+
<qandaentry>
<question>
<para>
@@ -807,14 +806,13 @@ server ::/0 { bogus yes; };
of sending dynamic update requests to DNS servers without
being specifically configured to do so. If the update
requests are coming from a Windows 2000 machine, see
- <ulink
- url="http://support.microsoft.com/support/kb/articles/q246/8/04.asp";>
-
<http://support.microsoft.com/support/kb/articles/q246/8/04.asp></ulink>
+ <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://support.microsoft.com/support/kb/articles/q246/8/04.asp";>
+ <http://support.microsoft.com/support/kb/articles/q246/8/04.asp></link>
for information about how to turn them off.
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -849,7 +847,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -867,7 +865,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -883,7 +881,7 @@ server ::/0 { bogus yes; };
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -910,7 +908,7 @@ serial-query-rate 5; // default 20</prog
</answer>
</qandaentry>
- <qandaentry>
+ <qandaentry>
<question>
<para>
I don't get RRSIG's returned when I use "dig +dnssec".
@@ -922,7 +920,7 @@ serial-query-rate 5; // default 20</prog
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -959,7 +957,7 @@ serial-query-rate 5; // default 20</prog
usage rules and are leaking queries to the Internet. You
should establish your own zones for these addresses to prevent
you querying the Internet's name servers for these addresses.
- Please see <ulink
url="http://as112.net/";><http://as112.net/></ulink>
+ Please see <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://as112.net/";><http://as112.net/></link>
for details of the problems you are causing and the counter
measures that have had to be deployed.
</para>
@@ -1006,7 +1004,7 @@ empty:
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1083,9 +1081,9 @@ empty:
</qandaentry>
</qandadiv> <!-- General Questions -->
-
+
<qandadiv><title>Operating-System Specific Questions</title>
-
+
<qandadiv><title>HPUX</title>
<qandaentry>
@@ -1113,9 +1111,9 @@ configure: error: need either working un
</qandadiv> <!-- HPUX -->
<qandadiv><title>Linux</title>
-
+
<qandaentry>
- <question>
+ <question>
<para>
Why do I get the following errors:
<programlisting>general: errno2result.c:109: unexpected error:
@@ -1129,7 +1127,7 @@ client: UDP client handler shutting down
</para>
<para>
See:
- <ulink
url="http://marc.theaimsgroup.com/?l=linux-netdev&m=113081708031466&w=2";><http://marc.theaimsgroup.com/?l=linux-netdev&m=113081708031466&w=2></ulink>
+ <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://marc.theaimsgroup.com/?l=linux-netdev&m=113081708031466&w=2";><http://marc.theaimsgroup.com/?l=linux-netdev&m=113081708031466&w=2></link>
</para>
</answer>
</qandaentry>
@@ -1146,9 +1144,9 @@ client: UDP client handler shutting down
non-blocking is ignored. It is reported that setting
xfrm_larval_drop to 1 helps but this may have negative side effects.
See:
-<ulink
url="https://bugzilla.redhat.com/show_bug.cgi?id=427629";><https://bugzilla.redhat.com/show_bug.cgi?id=427629></ulink>
+<link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="https://bugzilla.redhat.com/show_bug.cgi?id=427629";><https://bugzilla.redhat.com/show_bug.cgi?id=427629></link>
and
-<ulink
url="http://lkml.org/lkml/2007/12/4/260";><http://lkml.org/lkml/2007/12/4/260></ulink>.
+<link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://lkml.org/lkml/2007/12/4/260";><http://lkml.org/lkml/2007/12/4/260></link>.
</para>
<para>
xfrm_larval_drop can be set to 1 by the following procedure:
@@ -1178,7 +1176,7 @@ echo "1" > proc/sys/net/core/xfrm_lar
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1197,7 +1195,7 @@ echo "1" > proc/sys/net/core/xfrm_lar
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1218,7 +1216,7 @@ modprobe capability</programlisting>
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1244,8 +1242,7 @@ modprobe capability</programlisting>
<para>
Red Hat have adopted the National Security Agency's
- SELinux security policy (see <ulink
- url="http://www.nsa.gov/selinux";><http://www.nsa.gov/selinux></ulink>)
+ SELinux security policy (see <link
xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://www.nsa.gov/selinux";><http://www.nsa.gov/selinux></link>)
and recommendations for BIND security , which are more
secure than running named in a chroot and make use of
the bind-chroot environment unnecessary .
@@ -1279,7 +1276,7 @@ $ROOTDIR/var/tmp
able to write or create files except in the directories
above, with SELinux in Enforcing mode.
</para>
-
+
<para>
So, to allow named to update slave or DDNS zone files,
it is best to locate them in $ROOTDIR/var/named/slaves,
@@ -1290,7 +1287,7 @@ zone "slave.zone." IN {
type slave;
file "slaves/slave.zone.db";
...
-};
+};
zone "ddns.zone." IN {
type master;
allow-updates {...};
@@ -1323,13 +1320,13 @@ options {
system-config-securitylevel GUI, using the 'setsebool'
command, or in /etc/selinux/targeted/booleans.
</para>
-
+
<para>
You can disable SELinux protection for named entirely by
setting the 'named_disable_trans=1' SELinux tunable boolean
parameter.
</para>
-
+
<para>
The SELinux named policy defines these SELinux contexts for named:
<informalexample>
@@ -1340,7 +1337,7 @@ named_cache_t: for files modifiable by n
</programlisting>
</informalexample>
</para>
-
+
<para>
If you want to retain use of the SELinux policy for named,
and put named files in different locations, you can do
@@ -1358,7 +1355,7 @@ named_cache_t: for files modifiable by n
</programlisting>
</informalexample>
</para>
-
+
<para>
To create a custom modifiable named data location, e.g.
'/var/log/named' for a log file, do:
@@ -1368,7 +1365,7 @@ named_cache_t: for files modifiable by n
</programlisting>
</informalexample>
</para>
-
+
<para>
To create a custom zone file location, e.g. /root/zones/, do:
<informalexample>
@@ -1377,7 +1374,7 @@ named_cache_t: for files modifiable by n
</programlisting>
</informalexample>
</para>
-
+
<para>
See these man-pages for more information : selinux(8),
named_selinux(8), chcon(1), setsebool(8)
@@ -1403,8 +1400,8 @@ named_cache_t: for files modifiable by n
</question>
<answer>
<para>
- Ubuntu uses AppArmor <ulink
url="http://en.wikipedia.org/wiki/AppArmor";>
- <http://en.wikipedia.org/wiki/AppArmor></ulink> in
+ Ubuntu uses AppArmor <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://en.wikipedia.org/wiki/AppArmor";>
+ <http://en.wikipedia.org/wiki/AppArmor></link> in
addition to normal file system permissions to protect the system.
</para>
<para>
@@ -1438,11 +1435,11 @@ proc /var/named/proc proc defaults 0 0</
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Linux -->
-
+
<qandadiv><title>Windows</title>
-
+
<qandaentry>
<question>
<para>
@@ -1463,7 +1460,7 @@ proc /var/named/proc proc defaults 0 0</
</para>
</answer>
</qandaentry>
-
+
<qandaentry>
<question>
<para>
@@ -1489,11 +1486,11 @@ options {
</informalexample>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- Windows -->
-
+
<qandadiv><title>FreeBSD</title>
-
+
<qandaentry>
<question>
<para>
@@ -1513,16 +1510,16 @@ rand_irqs="3 14 15"</programlisting>
</informalexample>
<para>
See also
- <ulink url="http://people.freebsd.org/~dougb/randomness.html";>
- <http://people.freebsd.org/~dougb/randomness.html></ulink>.
+ <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://people.freebsd.org/~dougb/randomness.html";>
+ <http://people.freebsd.org/~dougb/randomness.html></link>.
</para>
</answer>
</qandaentry>
-
+
</qandadiv> <!-- FreeBSD -->
-
+
<qandadiv><title>Solaris</title>
-
+
<qandaentry>
<question>
<para>
@@ -1534,15 +1531,14 @@ rand_irqs="3 14 15"</programlisting>
Sun has a blog entry describing how to do this.
</para>
<para>
- <ulink
- url="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris";>
+ <link xmlns:xlink="http://www.w3.org/1999/xlink";
xlink:href="http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris";>
<http://blogs.sun.com/roller/page/anay/Weblog?catname=%2FSolaris>
- </ulink>
+ </link>
</para>
</answer>
</qandaentry>
-
- </qandadiv>
+
+ </qandadiv> <!-- Solaris -->
<qandadiv><title>Apple Mac OS X</title>
@@ -1558,7 +1554,7 @@ rand_irqs="3 14 15"</programlisting>
</para>
<informalexample>
<programlisting>
-% sudo rndc-confgen > /etc/rndc.conf</programlisting>
+% sudo rndc-confgen > /etc/rndc.conf</programlisting>
</informalexample>
<para>
Copy the key statement from /etc/rndc.conf into /etc/rndc.key, e.g.:
@@ -1606,8 +1602,8 @@ key "rndc-key" {
</answer>
</qandaentry>
- </qandadiv>
-
+ </qandadiv> <!-- Apple Mac OS X -->
+
</qandadiv> <!-- Operating-System Specific Questions -->
</qandaset>
Modified: stable/9/contrib/bind9/Makefile.in
==============================================================================
--- stable/9/contrib/bind9/Makefile.in Wed Sep 28 05:12:09 2016
(r306393)
+++ stable/9/contrib/bind9/Makefile.in Wed Sep 28 06:11:01 2016
(r306394)
@@ -1,4 +1,4 @@
-# Copyright (C) 2004-2009, 2011-2014 Internet Systems Consortium, Inc. ("ISC")
+# Copyright (C) 2004-2009, 2011-2015 Internet Systems Consortium, Inc. ("ISC")
# Copyright (C) 1998-2002 Internet Software Consortium.
#
# Permission to use, copy, modify, and/or distribute this software for any
@@ -19,7 +19,7 @@ srcdir = @srcdir@
VPATH = @srcdir@
top_srcdir = @top_srcdir@
-@BIND9_VERSION@
+VERSION=@BIND9_VERSION@
SUBDIRS = make unit lib bin doc @LIBEXPORT@
TARGETS =
@@ -32,6 +32,9 @@ MANOBJS = ${MANPAGES} ${HTMLPAGES}
@BIND9_MAKE_RULES@
+newrr:
+ cd lib/dns; ${MAKE} newrr
+
distclean::
rm -f config.cache config.h config.log config.status TAGS
rm -f libtool isc-config.sh configure.lineno
Modified: stable/9/contrib/bind9/README
==============================================================================
--- stable/9/contrib/bind9/README Wed Sep 28 05:12:09 2016
(r306393)
+++ stable/9/contrib/bind9/README Wed Sep 28 06:11:01 2016
(r306394)
@@ -51,27 +51,29 @@ BIND 9
For up-to-date release notes and errata, see
http://www.isc.org/software/bind9/releasenotes
-BIND 9.9.8-P4
+BIND 9.9.9-P3
- BIND 9.9.8-P4 is a security release addressing the flaws
- described in CVE-2016-1285 and CVE-2016-1286.
+ This version contains a fix for CVE-2016-2776.
-BIND 9.9.8-P3
+BIND 9.9.9-P2
- BIND 9.9.8-P3 is a security release addressing the flaw described in
- CVE-2015-8704. It also fixes a serious regression in authoritative
- server selection that was introduced in 9.9.8.
+ This version contains a fix for CVE-2016-2775 and addresses
+ two regressions introduced with BIND 9.9.9.
-BIND 9.9.8-P2
+BIND 9.9.9-P1
- BIND 9.9.8-P2 is a security release addressing the flaws
- described in CVE-2015-3193 (OpenSSL), CVE-2015-8000 and
- CVE-2015-8461.
+ This version contains two urgent fixes to BIND 9.9.9:
+ 1) Windows installation was failing without manual updating
+ of BINDinstall's attributes.
+ 2) A race condition was causing instability in the rbt
+ tree state.
-BIND 9.9.8-P1
+BIND 9.9.9
- BIND 9.9.8-P1 was incomplete and was withdrawn prior to
- publication.
+ BIND 9.9.9 is a maintenance release and addresses bugs found
+ in BIND 9.9.8 and earlier, as well as the security flaws
+ described in CVE-2015-8000, CVE-2015-8461, CVE-2015-8704,
+ CVE-2016-1285, and CVE-2016-1286.
BIND 9.9.8
@@ -313,7 +315,7 @@ Building
*** DIFF OUTPUT TRUNCATED AT 1000 LINES ***
_______________________________________________
svn-src-stable-9@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-9
To unsubscribe, send any mail to "svn-src-stable-9-unsubscr...@freebsd.org"
