Merge branch 'v9_16_5-release' into 'v9_16'

Merge 9.16.5 release branch See merge request isc-projects/bind9!3861
2020-07-15 21:23:33 +00:00
parent 25d452a9d6 0fbe13bc65
commit 5a0849d7d0
12 changed files with 96 additions and 62 deletions
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1388,7 +1388,7 @@ abi-check:
  variables:
    CC: gcc
    CFLAGS: "${CFLAGS_COMMON} -Og"
-    BIND_BASELINE_VERSION: v9_16_4
+    BIND_BASELINE_VERSION: v9_16_5
  script:
    - *configure
    - make -j${BUILD_PARALLEL_JOBS:-1} V=1
--- a/33
+++ b/33
@@ -23,23 +23,24 @@
 			statistics.  Convert the header attributes to use atomic
 			operations. [GL #1475]

+	--- 9.16.5 released ---
+
 5458.	[bug]		Prevent a theoretically possible NULL dereference caused
 			by a data race between zone_maintenance() and
 			dns_zone_setview_helper(). [GL #1627]

-5455.	[bug]		`named` could crash when cleaning dead nodes
-			in lib/dns/rbtdb.c that have been reused meanwhile.
-			[GL #1968]
+5455.	[bug]		named could crash when cleaning dead nodes in
+			lib/dns/rbtdb.c that were being reused. [GL #1968]

-5454.	[bug]		Address a startup crash happening when server is
-			under load and root zone is not yet loaded. [GL #1862]
+5454.	[bug]		Address a startup crash that occurred when the server
+			was under load and the root zone had not yet been
+			loaded. [GL #1862]

-5453.	[bug]		`named` would crash on shutdown when new `rndc`
-			connection is received at the same time as
-			shutting down. [GL #1747]
+5453.	[bug]		named crashed on shutdown when a new rndc connection was
+			received during shutdown. [GL #1747]

-5452.	[bug]		The "blackhole" ACL was accidentally disabled with
-			respect to client queries. [GL #1936]
+5452.	[bug]		The "blackhole" ACL was accidentally disabled for client
+			queries. [GL #1936]

 5451.	[func]		Add 'rndc dnssec -status' command. [GL #1612]

@@ -55,24 +56,24 @@

 5446.	[bug]		The validator could fail to accept a properly signed
 			RRset if an unsupported algorithm appeared earlier in
-			the DNSKEY RRset than a supported algorithm.  It could
+			the DNSKEY RRset than a supported algorithm. It could
 			also stop if it detected a malformed public key.
 			[GL #1689]

-5444.	[bug]		'rndc dnstap -roll <value>' was not limiting the
-			number of saved files to <value>. [GL !3728]
+5444.	[bug]		'rndc dnstap -roll <value>' did not limit the number of
+			saved files to <value>. [GL !3728]

 5443.	[bug]		The "primary" and "secondary" keywords, when used
 			as parameters for "check-names", were not
 			processed correctly and were being ignored. [GL #1949]

-5441.	[bug]		${LMDB_CFLAGS} missing from make/includes.in
+5441.	[bug]		${LMDB_CFLAGS} was missing from make/includes.in.
 			[GL #1955]

 5440.	[test]		Properly handle missing kyua. [GL #1950]

-5439.	[bug]		The dsset returned by dns_keynode_dsset() was not
-			thread safe. [GL #1926]
+5439.	[bug]		The DS RRset returned by dns_keynode_dsset() was used in
+			a non-thread-safe manner. [GL #1926]

 	--- 9.16.4 released ---

--- a/2
+++ b/2
@@ -17993,6 +17993,7 @@ fi



+
 #
 # was --with-libxml2 specified?
 #
@@ -20863,6 +20864,7 @@ fi



+
 #
 #  The following sets up how non-blocking i/o is established.
 #  cygwin and solaris 2.x (x<5) require special handling.
--- a/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@ -60,6 +60,7 @@ information about each release, source code, and pre-compiled versions
 for Microsoft Windows operating systems.

 .. include:: ../notes/notes-current.rst
+.. include:: ../notes/notes-9.16.5.rst
 .. include:: ../notes/notes-9.16.4.rst
 .. include:: ../notes/notes-9.16.3.rst
 .. include:: ../notes/notes-9.16.2.rst
--- a/doc/notes/notes-9.16.5.rst
+++ b/doc/notes/notes-9.16.5.rst
@@ -0,0 +1,64 @@
+.. 
+   Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+   
+   This Source Code Form is subject to the terms of the Mozilla Public
+   License, v. 2.0. If a copy of the MPL was not distributed with this
+   file, You can obtain one at http://mozilla.org/MPL/2.0/.
+   
+   See the COPYRIGHT file distributed with this work for additional
+   information regarding copyright ownership.
+
+Notes for BIND 9.16.5
+---------------------
+
+New Features
+~~~~~~~~~~~~
+
+- New ``rndc`` command ``rndc dnssec -status`` shows the current DNSSEC
+  policy and keys in use, the key states, and rollover status.
+  [GL #1612]
+
+Bug Fixes
+~~~~~~~~~
+
+- A race condition could occur if a TCP socket connection was closed
+  while ``named`` was waiting for a recursive response. The attempt to
+  send a response over the closing connection triggered an assertion
+  failure in the function ``isc__nm_tcpdns_send()``. [GL #1937]
+
+- A race condition could occur when ``named`` attempted to use a UDP
+  interface that was shutting down. This triggered an assertion failure
+  in ``uv__udp_finish_close()``. [GL #1938]
+
+- Fix assertion failure when server was under load and root zone had not
+  yet been loaded. [GL #1862]
+
+- ``named`` could crash when cleaning dead nodes in ``lib/dns/rbtdb.c``
+  that were being reused. [GL #1968]
+
+- ``named`` crashed on shutdown when a new ``rndc`` connection was
+  received during shutdown. This has been fixed. [GL #1747]
+
+- The DS RRset returned by ``dns_keynode_dsset()`` was used in a
+  non-thread-safe manner. This could result in an INSIST being
+  triggered. [GL #1926]
+
+- Properly handle missing ``kyua`` command so that ``make check`` does
+  not fail unexpectedly when CMocka is installed, but Kyua is not.
+  [GL #1950]
+
+- The ``primary`` and ``secondary`` keywords, when used as parameters
+  for ``check-names``, were not processed correctly and were being
+  ignored. [GL #1949]
+
+- ``rndc dnstap -roll <value>`` did not limit the number of saved files
+  to ``<value>``. [GL !3728]
+
+- The validator could fail to accept a properly signed RRset if an
+  unsupported algorithm appeared earlier in the DNSKEY RRset than a
+  supported algorithm. It could also stop if it detected a malformed
+  public key. [GL #1689]
+
+- The ``blackhole`` ACL was inadvertently disabled for client queries.
+  Blocked IP addresses were not used for upstream queries but queries
+  from those addresses could still be answered. [GL #1936]
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -8,7 +8,7 @@
   See the COPYRIGHT file distributed with this work for additional
   information regarding copyright ownership.

-Notes for BIND 9.16.5
+Notes for BIND 9.16.6
 ---------------------

 Security Fixes
@@ -29,46 +29,11 @@ New Features
 Feature Changes
 ~~~~~~~~~~~~~~~

- New ``rndc`` command ``rndc dnssec -status`` that shows the current
-  DNSSEC policy and keys in use, the key states and rollover status.
-  [GL #1612]
+- None.

 Bug Fixes
 ~~~~~~~~~

- The DS set returned by ``dns_keynode_dsset()`` was not thread-safe.
-  This could result in an INSIST being triggered. [GL #1926]
-
- Properly handle missing ``kyua`` command so that ``make check`` does
-  not fail unexpectedly when CMocka is installed, but Kyua is not.
-  [GL #1950]
-
- The ``primary`` and ``secondary`` keywords, when used as parameters for
-  ``check-names``, were not processed correctly and were being ignored.
-  [GL #1949]
-
- 'rndc dnstap -roll <value>' was not limiting the number of saved
-  files to <value>. [GL !3728]
-
- The validator could fail to accept a properly signed RRset if an
-  unsupported algorithm appeared earlier in the DNSKEY RRset than a
-  supported algorithm.  It could also stop if it detected a malformed
-  public key. [GL #1689]
-
- The ``blackhole`` ACL was inadvertently disabled with respect to
-  client queries. Blocked IP addresses were not used for upstream
-  queries but queries from those addresses could still be answered.
-  [GL #1936]
-
- ``named`` would crash on shutdown when new ``rndc`` connection is received at
-  the same time as shutting down. [GL #1747]
-
- Fix assertion failure when server is under load and root zone is not yet
-  loaded. [GL #1862]
-
- ``named`` could crash when cleaning dead nodes in ``lib/dns/rbtdb.c`` that
-  have been reused meanwhile.  [GL #1968]
-
 - The introduction of KASP support broke whether the second field
  of sig-validity-interval was treated as days or hours. (Thanks to
  Tony Finch.) [GL !3735]
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -11,5 +11,5 @@
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
 LIBINTERFACE = 1600
-LIBREVISION = 3
+LIBREVISION = 4
 LIBAGE = 0
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -10,6 +10,6 @@
 # 9.12: 1200-1299
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
-LIBINTERFACE = 1604
+LIBINTERFACE = 1605
 LIBREVISION = 0
-LIBAGE = 1
+LIBAGE = 0
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -10,6 +10,6 @@
 # 9.12: 1200-1299
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
-LIBINTERFACE = 1604
+LIBINTERFACE = 1605
 LIBREVISION = 0
-LIBAGE = 1
+LIBAGE = 0
--- a/lib/ns/api
+++ b/lib/ns/api
@@ -10,6 +10,6 @@
 # 9.12: 1200-1299
 # 9.13/9.14: 1300-1499
 # 9.15/9.16: 1500-1699
-LIBINTERFACE = 1603
-LIBREVISION = 1
+LIBINTERFACE = 1604
+LIBREVISION = 0
 LIBAGE = 0
--- a/util/copyrights
+++ b/util/copyrights
@@ -1449,6 +1449,7 @@
 ./doc/notes/notes-9.16.2.rst			RST	2020
 ./doc/notes/notes-9.16.3.rst			RST	2020
 ./doc/notes/notes-9.16.4.rst			RST	2020
+./doc/notes/notes-9.16.5.rst			RST	2020
 ./doc/notes/notes-current.rst			RST	2020
 ./docutil/HTML_COPYRIGHT			X	2001,2004,2016,2018,2019,2020
 ./docutil/MAN_COPYRIGHT				X	2001,2004,2016,2018,2019,2020
--- a/2
+++ b/2
@@ -5,7 +5,7 @@ PRODUCT=BIND
 DESCRIPTION="(Stable Release)"
 MAJORVER=9
 MINORVER=16
-PATCHVER=4
+PATCHVER=5
 RELEASETYPE=
 RELEASEVER=
 EXTENSIONS=