diff --git a/CHANGES b/CHANGES index e02133964c..0b0c021538 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.14.11 released --- + 5353. [doc] Document port and dscp parameters in forwarders configuration option. [GL #914] @@ -12,7 +14,7 @@ non-existent record. [GL #1540] 5348. [bug] dnssec-settime -Psync was not being honoured. - [GL !2893] + [GL !2925] --- 9.14.10 released --- diff --git a/HISTORY b/HISTORY index 90f3558388..6091aeebef 100644 --- a/HISTORY +++ b/HISTORY @@ -69,7 +69,7 @@ releases. New features include: * "rndc modzone" reconfigures a single zone, without requiring the entire server to be reconfigured. * "rndc showzone" displays the current configuration of a zone. - * "rndc managed-keys" can be used to check the status of RFC 5001 + * "rndc managed-keys" can be used to check the status of RFC 5011 managed trust anchors, or to force trust anchors to be refreshed. * "max-cache-size" can now be set to a percentage of available memory. The default is 90%. diff --git a/README b/README index 2d9a268107..bf1ca02193 100644 --- a/README +++ b/README @@ -196,6 +196,10 @@ BIND 9.14.10 BIND 9.14.10 is a maintenance release. +BIND 9.14.11 + +BIND 9.14.11 is a maintenance release. + Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, diff --git a/README.md b/README.md index ca0cc5fb34..d8419ad7a7 100644 --- a/README.md +++ b/README.md @@ -213,6 +213,10 @@ BIND 9.14.9 is a maintenance release. BIND 9.14.10 is a maintenance release. +#### BIND 9.14.11 + +BIND 9.14.11 is a maintenance release. + ### Building BIND Minimally, BIND requires a UNIX or Linux system with an ANSI C compiler, diff --git a/bin/dig/nslookup.1 b/bin/dig/nslookup.1 index 752d52d98b..84afa0758e 100644 --- a/bin/dig/nslookup.1 +++ b/bin/dig/nslookup.1 @@ -233,7 +233,10 @@ Change the default TCP/UDP name server port to .RS 4 Change the type of the information query\&. .sp -(Default = A; abbreviations = q, ty) +(Default = A and then AAAA; abbreviations = q, ty) +.sp +\fBNote:\fR +It is only possible to specify one query type, only the default behavior looks up both when an alternative is not specified\&. .RE .PP \fB\fI[no]\fR\fR\fBrecurse\fR diff --git a/bin/dig/nslookup.html b/bin/dig/nslookup.html index dc8c5c236a..9ec3e4bfd6 100644 --- a/bin/dig/nslookup.html +++ b/bin/dig/nslookup.html @@ -229,17 +229,17 @@ nslookup -query=hinfo -timeout=10 The class specifies the protocol group of the information.

-

+

(Default = IN; abbreviation = cl)

[no]debug

- Turn on or off the display of the full response packet and - any intermediate response packets when searching. + Turn on or off the display of the full response packet and + any intermediate response packets when searching.

-

+

(Default = nodebug; abbreviation = [no]deb)

@@ -247,9 +247,9 @@ nslookup -query=hinfo -timeout=10

Turn debugging mode on or off. This displays more about - what nslookup is doing. + what nslookup is doing.

-

+

(Default = nod2)

@@ -267,7 +267,7 @@ nslookup -query=hinfo -timeout=10 names in the domain search list to the request until an answer is received.

-

+

(Default = search)

@@ -276,7 +276,7 @@ nslookup -query=hinfo -timeout=10

Change the default TCP/UDP name server port to value.

-

+

(Default = 53; abbreviation = po)

@@ -289,9 +289,15 @@ nslookup -query=hinfo -timeout=10

Change the type of the information query.

-

- (Default = A; abbreviations = q, ty) +

+ (Default = A and then AAAA; abbreviations = q, ty)

+

+ Note: It is + only possible to specify one query type, only + the default behavior looks up both when an + alternative is not specified. +

[no]recurse
@@ -300,16 +306,16 @@ nslookup -query=hinfo -timeout=10 have the information.

-

+

(Default = recurse; abbreviation = [no]rec)

ndots=number

- Set the number of dots (label separators) in a domain - that will disable searching. Absolute names always - stop searching. + Set the number of dots (label separators) in a domain + that will disable searching. Absolute names always + stop searching.

retry=number
@@ -331,21 +337,21 @@ nslookup -query=hinfo -timeout=10 Always use a virtual circuit when sending requests to the server.

-

+

(Default = novc)

[no]fail

- Try the next nameserver if a nameserver responds with - SERVFAIL or a referral (nofail) or terminate query - (fail) on such a response. -

-

+ Try the next nameserver if a nameserver responds with + SERVFAIL or a referral (nofail) or terminate query + (fail) on such a response. +

+

(Default = nofail)

-
+

diff --git a/bin/dnssec/dnssec-keyfromlabel.8 b/bin/dnssec/dnssec-keyfromlabel.8 index 16c5546ee3..02ce4a8e59 100644 --- a/bin/dnssec/dnssec-keyfromlabel.8 +++ b/bin/dnssec/dnssec-keyfromlabel.8 @@ -92,7 +92,7 @@ Specifies the label for a key pair in the crypto hardware\&. .sp When BIND -9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&. It may be preceded by an optional OpenSSL engine name, followed by a colon, as in "pkcs11:\fIkeylabel\fR"\&. +9 is built with OpenSSL\-based PKCS#11 support, the label is an arbitrary string that identifies a particular key\&. .sp When BIND diff --git a/bin/dnssec/dnssec-keyfromlabel.html b/bin/dnssec/dnssec-keyfromlabel.html index ac53995ca0..92c4e3cf4c 100644 --- a/bin/dnssec/dnssec-keyfromlabel.html +++ b/bin/dnssec/dnssec-keyfromlabel.html @@ -146,9 +146,7 @@

When BIND 9 is built with OpenSSL-based PKCS#11 support, the label is an arbitrary string that - identifies a particular key. It may be preceded by an - optional OpenSSL engine name, followed by a colon, as in - "pkcs11:keylabel". + identifies a particular key.

When BIND 9 is built with native PKCS#11 diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index c140f02447..6c6200765c 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -614,6 +614,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index eaf9955cbe..d434346b95 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -146,6 +146,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index 5deba472b5..26071b1215 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -856,6 +856,6 @@ controls { -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 3c6c830444..0b13d02a6f 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2863,6 +2863,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index e5cb43ec6c..280d60aec0 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -2101,41 +2101,40 @@ category notify { null; }; The query-errors Category

The query-errors category is - specifically intended for debugging purposes: To identify - why and how specific queries result in responses which - indicate an error. - Messages of this category are therefore only logged - with debug levels. + used to indicate why and how specific queries resulted in + responses which indicate an error. Normally, these messages + will be logged at debug logging levels; + note, however, that if query logging is active, some will be + logged at info. The logging levels are + described below:

- At the debug levels of 1 or higher, each response with the - rcode of SERVFAIL is logged as follows: + At debug level 1 or higher - or at + info, when query logging is active - each + response with response code SERVFAIL will be logged as follows:

client 127.0.0.1#61502: query failed (SERVFAIL) for www.example.com/IN/AAAA at query.c:3880

- This means an error resulting in SERVFAIL was - detected at line 3880 of source file - query.c. - Log messages of this level will particularly - help identify the cause of SERVFAIL for an - authoritative server. + This means an error resulting in SERVFAIL was detected at line + 3880 of source file query.c. Log messages + of this level will particularly help identify the cause of + SERVFAIL for an authoritative server.

- At the debug levels of 2 or higher, detailed context - information of recursive resolutions that resulted in - SERVFAIL is logged. - The log message will look like as follows: + At debug level 2 or higher, detailed + context information about recursive resolutions that resulted in + SERVFAIL will be logged. The log message will look like this: 

 fetch completed at resolver.c:2970 for www.example.com/A
-in 30.000183: timed out/success [domain:example.com,
-referral:2,restart:7,qrysent:8,timeout:5,lame:0,neterr:0,
+in 10.000183: timed out/success [domain:example.com,
+referral:2,restart:7,qrysent:8,timeout:5,lame:0,quota:0,neterr:0,
 badresp:1,adberr:0,findfail:0,valfail:0]

@@ -2143,29 +2142,25 @@ badresp:1,adberr:0,findfail:0,valfail:0]

The first part before the colon shows that a recursive resolution for AAAA records of www.example.com completed - in 30.000183 seconds and the final result that led to the + in 10.000183 seconds and the final result that led to the SERVFAIL was determined at line 2970 of source file resolver.c.

The following part shows the detected final result and the - latest result of DNSSEC validation. - The latter is always success when no validation attempt - is made. - In this example, this query resulted in SERVFAIL probably - because all name servers are down or unreachable, leading - to a timeout in 30 seconds. - DNSSEC validation was probably not attempted. + latest result of DNSSEC validation. The latter is always + "success" when no validation attempt was made. In this example, + this query probably resulted in SERVFAIL because all name + servers are down or unreachable, leading to a timeout in 10 + seconds. DNSSEC validation was probably not attempted.

- The last part enclosed in square brackets shows statistics - information collected for this particular resolution - attempt. - The domain field shows the deepest zone - that the resolver reached; - it is the zone where the error was finally detected. - The meaning of the other fields is summarized in the - following table. + The last part, enclosed in square brackets, shows statistics + collected for this particular resolution attempt. + The domain field shows the deepest zone that + the resolver reached; it is the zone where the error was + finally detected. The meaning of the other fields is + summarized in the following table.

@@ -2242,6 +2237,18 @@ badresp:1,adberr:0,findfail:0,valfail:0] + +

quota

+ + +

+ The number of times the resolver was unable + to send a query because it had exceeded the + permissible fetch quota for a server. +

+ + +

neterr

@@ -2311,20 +2318,17 @@ badresp:1,adberr:0,findfail:0,valfail:0]

- At the debug levels of 3 or higher, the same messages - as those at the debug 1 level are logged for other errors - than SERVFAIL. - Note that negative responses such as NXDOMAIN are not - regarded as errors here. + At debug level 3 or higher, the same + messages as those at debug level 1 will be + logged for other errors than SERVFAIL. Note that negative + responses such as NXDOMAIN are not errors, and are not logged + at this debug level.

- At the debug levels of 4 or higher, the same messages - as those at the debug 2 level are logged for other errors - than SERVFAIL. - Unlike the above case of level 3, messages are logged for - negative responses. - This is because any unexpected results can be difficult to - debug in the recursion case. + At debug level 4 or higher, the + detailed context information logged at debug + level 2 will be logged for other errors than SERVFAIL and + for negative resonses such as NXDOMAIN.

@@ -4772,11 +4776,22 @@ options {
querylog

- Specify whether query logging should be started when named - starts. - If querylog is not specified, - then the query logging - is determined by the presence of the logging category queries. + Query logging provides a complete log of all incoming + queries and all query errors. This provides more insight + into the server's activity, but with a cost to + performance which may be significant on heavily-loaded + servers. +

+

+ The querylog option specifies + whether query logging should be active when + named first starts. + If querylog is not specified, then + query logging is determined by the presence of the + logging category queries. + Query logging can also be activated at runtime using the + command rndc querylog on, or + deactivated with rndc querylog off.

check-names
@@ -5055,9 +5070,11 @@ options {
forwarders

- Specifies the IP addresses to be used - for forwarding. The default is the empty list (no - forwarding). + Specifies a list of IP addresses to which queries shall be + forwarded. The default is the empty list (no forwarding). + Each address in the list can be associated with an optional + port number and/or DSCP value, and a default port number and + DSCP value can be set for the entire list.

@@ -7268,6 +7285,11 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; Specifying version none disables processing of the queries.

+

+ Setting version to any value + (including none) will also + disable queries for authors.bind TXT CH. +

hostname
@@ -14933,6 +14955,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 22d13dd2e2..80d95ddf76 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -362,6 +362,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 09e4dc4a42..e187c4b682 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -191,6 +191,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 4a331d3853..32415f96bb 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -36,12 +36,13 @@

Table of Contents

-
Release Notes for BIND Version 9.14.10
+
Release Notes for BIND Version 9.14.11
Introduction
Note on Version Numbering
Supported Platforms
Download
+
Notes for BIND 9.14.11
Notes for BIND 9.14.10
Notes for BIND 9.14.9
Notes for BIND 9.14.8
@@ -61,7 +62,7 @@

-Release Notes for BIND Version 9.14.10

+Release Notes for BIND Version 9.14.11

@@ -136,6 +137,22 @@

+Notes for BIND 9.14.11

+ +
+

+Bug Fixes

+
  • +

    + named crashed when it was queried for a + nonexistent name in the CHAOS class. [GL #1540] +

    +
+
+ +
+
+

Notes for BIND 9.14.10

@@ -1075,6 +1092,6 @@
-

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index bf80ec8ed2..5a7533c312 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -148,6 +148,6 @@
-

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 9fada45b9a..90e942b3dd 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -914,6 +914,6 @@

-

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 716fd8c7f3..7610e9f77e 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -533,6 +533,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
-

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 6a4fdedc02..26aedd2d88 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -210,6 +210,6 @@
-

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 0aed94e296..a282b6ec3e 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -32,7 +32,7 @@

BIND 9 Administrator Reference Manual

-

BIND Version 9.14.10

+

BIND Version 9.14.11

Copyright © 2000-2020 Internet Systems Consortium, Inc. ("ISC")

@@ -242,12 +242,13 @@
A. Release Notes
-
Release Notes for BIND Version 9.14.10
+
Release Notes for BIND Version 9.14.11
Introduction
Note on Version Numbering
Supported Platforms
Download
+
Notes for BIND 9.14.11
Notes for BIND 9.14.10
Notes for BIND 9.14.9
Notes for BIND 9.14.8
@@ -446,6 +447,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/Bv9ARM.pdf b/doc/arm/Bv9ARM.pdf index be45811028..60ce4fefc7 100644 Binary files a/doc/arm/Bv9ARM.pdf and b/doc/arm/Bv9ARM.pdf differ diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index c6b7a5ab58..ca364ad998 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -90,6 +90,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 693c7f1ccf..812bf29cd7 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -220,6 +220,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index e091b2af20..dce4c4c2ae 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -625,6 +625,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index 99032a21b5..69e4a829f5 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -1166,6 +1166,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-cds.html b/doc/arm/man.dnssec-cds.html index 69c287bc08..1658bf7521 100644 --- a/doc/arm/man.dnssec-cds.html +++ b/doc/arm/man.dnssec-cds.html @@ -376,6 +376,6 @@ nsupdate -l -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 1683502cdf..52affae1b3 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -150,6 +150,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index 045b4e5d01..07a43afbb3 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -270,6 +270,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 3ff2a25a84..8513df662b 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -352,6 +352,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 204a8c613f..f2278e9899 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -250,6 +250,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 6340f5674d..9d93a4659b 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -164,9 +164,7 @@

When BIND 9 is built with OpenSSL-based PKCS#11 support, the label is an arbitrary string that - identifies a particular key. It may be preceded by an - optional OpenSSL engine name, followed by a colon, as in - "pkcs11:keylabel". + identifies a particular key.

When BIND 9 is built with native PKCS#11 @@ -498,6 +496,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 3e9e4d60bd..34fc975fb0 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -557,6 +557,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-keymgr.html b/doc/arm/man.dnssec-keymgr.html index 3213c2fa7e..8ecda85c87 100644 --- a/doc/arm/man.dnssec-keymgr.html +++ b/doc/arm/man.dnssec-keymgr.html @@ -405,6 +405,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index 92ea1ab990..dac0ef89d0 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -171,6 +171,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 725bb1758e..b62fcd1e10 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -349,6 +349,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index efe96b5890..f96a9d447c 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -701,6 +701,6 @@ db.example.com.signed -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index ed5a2560ef..bbffe67f7b 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -202,6 +202,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index 13127c11d6..9af66b9a11 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -143,6 +143,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.filter-aaaa.html b/doc/arm/man.filter-aaaa.html index 45a02de458..6562aa99f3 100644 --- a/doc/arm/man.filter-aaaa.html +++ b/doc/arm/man.filter-aaaa.html @@ -168,6 +168,6 @@ plugin query "/usr/local/lib/filter-aaaa.so" { -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index 058eeb87f7..716a266d9a 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -366,6 +366,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.mdig.html b/doc/arm/man.mdig.html index 394976dbd9..4042e88603 100644 --- a/doc/arm/man.mdig.html +++ b/doc/arm/man.mdig.html @@ -604,6 +604,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 0dbe7565e9..18d07adb9e 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -208,6 +208,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index f84514387c..2b1ccd0cd1 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -463,6 +463,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index ee044e6f4d..8b195bd0e9 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -117,6 +117,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named-nzd2nzf.html b/doc/arm/man.named-nzd2nzf.html index d255ae9f22..c6c7e0ea90 100644 --- a/doc/arm/man.named-nzd2nzf.html +++ b/doc/arm/man.named-nzd2nzf.html @@ -119,6 +119,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index a79223b31f..673443c1f7 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -121,6 +121,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index 913fc76708..64136b19e7 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -1075,6 +1075,6 @@ zone -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index e3871edd47..4dfeb5250a 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -492,6 +492,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 4538572772..7c82408dc3 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -155,6 +155,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.nslookup.html b/doc/arm/man.nslookup.html index 49f049d894..9046c27d8a 100644 --- a/doc/arm/man.nslookup.html +++ b/doc/arm/man.nslookup.html @@ -247,17 +247,17 @@ nslookup -query=hinfo -timeout=10 The class specifies the protocol group of the information.

-

+

(Default = IN; abbreviation = cl)

[no]debug

- Turn on or off the display of the full response packet and - any intermediate response packets when searching. + Turn on or off the display of the full response packet and + any intermediate response packets when searching.

-

+

(Default = nodebug; abbreviation = [no]deb)

@@ -265,9 +265,9 @@ nslookup -query=hinfo -timeout=10

Turn debugging mode on or off. This displays more about - what nslookup is doing. + what nslookup is doing.

-

+

(Default = nod2)

@@ -285,7 +285,7 @@ nslookup -query=hinfo -timeout=10 names in the domain search list to the request until an answer is received.

-

+

(Default = search)

@@ -294,7 +294,7 @@ nslookup -query=hinfo -timeout=10

Change the default TCP/UDP name server port to value.

-

+

(Default = 53; abbreviation = po)

@@ -307,9 +307,15 @@ nslookup -query=hinfo -timeout=10

Change the type of the information query.

-

- (Default = A; abbreviations = q, ty) +

+ (Default = A and then AAAA; abbreviations = q, ty)

+

+ Note: It is + only possible to specify one query type, only + the default behavior looks up both when an + alternative is not specified. +

[no]recurse
@@ -318,16 +324,16 @@ nslookup -query=hinfo -timeout=10 have the information.

-

+

(Default = recurse; abbreviation = [no]rec)

ndots=number

- Set the number of dots (label separators) in a domain - that will disable searching. Absolute names always - stop searching. + Set the number of dots (label separators) in a domain + that will disable searching. Absolute names always + stop searching.

retry=number
@@ -349,21 +355,21 @@ nslookup -query=hinfo -timeout=10 Always use a virtual circuit when sending requests to the server.

-

+

(Default = novc)

[no]fail

- Try the next nameserver if a nameserver responds with - SERVFAIL or a referral (nofail) or terminate query - (fail) on such a response. -

-

+ Try the next nameserver if a nameserver responds with + SERVFAIL or a referral (nofail) or terminate query + (fail) on such a response. +

+

(Default = nofail)

-
+

@@ -437,6 +443,6 @@ nslookup -query=hinfo -timeout=10 -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index 1de9858e52..e6147caa7f 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -818,6 +818,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.pkcs11-destroy.html b/doc/arm/man.pkcs11-destroy.html index 1add31db5e..6c3f9b41e4 100644 --- a/doc/arm/man.pkcs11-destroy.html +++ b/doc/arm/man.pkcs11-destroy.html @@ -162,6 +162,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.pkcs11-keygen.html b/doc/arm/man.pkcs11-keygen.html index eef746407d..a0c35d64e9 100644 --- a/doc/arm/man.pkcs11-keygen.html +++ b/doc/arm/man.pkcs11-keygen.html @@ -200,6 +200,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.pkcs11-list.html b/doc/arm/man.pkcs11-list.html index f0735c848e..92bd3c23c9 100644 --- a/doc/arm/man.pkcs11-list.html +++ b/doc/arm/man.pkcs11-list.html @@ -158,6 +158,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.pkcs11-tokens.html b/doc/arm/man.pkcs11-tokens.html index 56b97f038e..cecdaa46fc 100644 --- a/doc/arm/man.pkcs11-tokens.html +++ b/doc/arm/man.pkcs11-tokens.html @@ -123,6 +123,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 4737568f11..5e2abb9a37 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -260,6 +260,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index d4b63d6f5b..e41dc8a2d9 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -268,6 +268,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 673955d947..8ae6896463 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -1024,6 +1024,6 @@ -

BIND 9.14.10 (Stable Release)

+

BIND 9.14.11 (Stable Release)

diff --git a/doc/arm/notes.html b/doc/arm/notes.html index 5ab4685e3a..cb0b4eab28 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -15,7 +15,7 @@

-Release Notes for BIND Version 9.14.10

+Release Notes for BIND Version 9.14.11

@@ -90,6 +90,22 @@

+Notes for BIND 9.14.11

+ +
+

+Bug Fixes

+
  • +

    + named crashed when it was queried for a + nonexistent name in the CHAOS class. [GL #1540] +

    +
+
+ +
+
+

Notes for BIND 9.14.10

diff --git a/doc/arm/notes.pdf b/doc/arm/notes.pdf index 5e1279ed3e..1cfe96bbaf 100644 Binary files a/doc/arm/notes.pdf and b/doc/arm/notes.pdf differ diff --git a/doc/arm/notes.txt b/doc/arm/notes.txt index d8aaa8958d..4a0db5b75e 100644 --- a/doc/arm/notes.txt +++ b/doc/arm/notes.txt @@ -1,4 +1,4 @@ -Release Notes for BIND Version 9.14.10 +Release Notes for BIND Version 9.14.11 Introduction @@ -49,6 +49,13 @@ www.isc.org/download/. There you will find additional information about each release, source code, and pre-compiled versions for Microsoft Windows operating systems. +Notes for BIND 9.14.11 + +Bug Fixes + + * named crashed when it was queried for a nonexistent name in the CHAOS + class. [GL #1540] + Notes for BIND 9.14.10 Bug Fixes @@ -144,8 +151,8 @@ Bug Fixes * named-checkconf now correctly reports a missing dnstap-output option when dnstap is set. [GL #1136] - * Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL # - 1133] + * Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL + #1133] Notes for BIND 9.14.4 @@ -209,8 +216,8 @@ Feature Changes This combination of settings was never intended to work, but there was no check for it in the parser. This has been corrected; a warning is - now logged. (In BIND 9.15 and higher this error will be fatal.) [GL # - 868] + now logged. (In BIND 9.15 and higher this error will be fatal.) [GL + #868] Notes for BIND 9.14.1 diff --git a/lib/dns/api b/lib/dns/api index 0635ca707f..c89fe64939 100644 --- a/lib/dns/api +++ b/lib/dns/api @@ -10,5 +10,5 @@ # 9.12: 1200-1299 # 9.13/9.14: 1300-1499 LIBINTERFACE = 1312 -LIBREVISION = 0 +LIBREVISION = 1 LIBAGE = 0 diff --git a/lib/isc/api b/lib/isc/api index a26b34ed6a..bad4a684bd 100644 --- a/lib/isc/api +++ b/lib/isc/api @@ -9,6 +9,6 @@ # 9.11: 160-169,1100-1199 # 9.12: 1200-1299 # 9.13/9.14: 1300-1499 -LIBINTERFACE = 1310 -LIBREVISION = 1 +LIBINTERFACE = 1311 +LIBREVISION = 0 LIBAGE = 0 diff --git a/version b/version index 81ef8e1419..78f9d4c13b 100644 --- a/version +++ b/version @@ -5,7 +5,7 @@ PRODUCT=BIND DESCRIPTION="(Stable Release)" MAJORVER=9 MINORVER=14 -PATCHVER=10 +PATCHVER=11 RELEASETYPE= RELEASEVER= EXTENSIONS=