Adding debian version 1:9.11.5.P4+dfsg-5.1+deb10u7.debian/1%9.11.5.P4+dfsg-5.1+deb10u7

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
author: Daniel Baumann <daniel.baumann@progress-linux.org> 2024-05-05 18:37:15 +0000
committer: Daniel Baumann <daniel.baumann@progress-linux.org> 2024-05-05 18:37:15 +0000
commit: 55ad72d44a94298a96b8f05488ca5ed97ef04736 (patch)
tree: 8aaa712c1d8b8d191b77a7eef4dc42c770e3b3d0
parent: Adding upstream version 1:9.11.5.P4+dfsg. (diff)
download: bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.tar.xz
bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.zip
144 files changed, 17942 insertions, 0 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 0000000..297c52a
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,178 @@
+DNSSEC validation turned on by default as of BIND 9.8.1
+-------------------------------------------------------
+As of version 9.8.1.dfsg-1, BIND ships with DNSSEC validation turned on
+by default.  As the keys get changed over time, this means that a fresh
+install of BIND will require that the admin manually upgrade bind.keys
+to account for the change, before BIND will be able to resolve hosts in
+DNSSEC validated zones.
+
+
+Upgrading from BIND 8.X:
+-----------------------
+
+If you are upgrading an authoritative server from BIND 8.X, please install
+the bind9-doc package and read /usr/share/doc/bind9-doc/misc/migration.gz,
+which contains a set of notes from the BIND maintainers on what changed
+that is likely to need your attention during an upgrade.
+
+
+Upgrading from earlier bind9 packages:
+-------------------------------------
+
+If you installed an early version of the Debian bind9 packages, prior to 
+version 1:9.2.0-2 to be more precise, you may have an /etc/bind/rndc.conf 
+configuration file still on your system.  There's nothing wrong with that,
+and if you've explicitly configured keys for using rndc you may well want to
+leave things exactly as they are!
+
+However, since 9.2.0 BIND 9.X has supported an rndc.key file that both named
+and rndc will read to obtain a shared key for rndc use against a daemon on 
+the same host.  The rndc-confgen program will easily create a suitable key
+file.  To take advantage of this mechanism, you may want to:
+
+	remove the /etc/bind/rndc.conf file
+	remove the rndc key specification in the /etc/bind/named.conf file
+
+	rndc-confgen -r /dev/urandom -a
+
+Alternatively, you can 'purge' the bind9 packages and reinstall them and you
+will end up with the new behavior since it is now the default.
+
+This is more secure than using a static key that isn't generated on a per-host
+basis, and is an easy alternative to more complex key schemes if you only need
+to use rndc to talk to named on the same host.
+
+
+Known Issues:
+------------
+
+I've had a report that lwresd, at least, fails to work with some recent 2.5
+kernels.  If you see something in your logs like 
+
+	loading configuration from '/etc/bind/lwresd.conf'
+	none:0: open: /etc/bind/lwresd.conf: permission denied
+
+Try rebuilding with --disable-linux-caps added to the configure call in the 
+rules file.  I'm hoping this is a temporary problem in the 2.5 kernel series,
+but we'll see.
+
+
+Configuration Schema:
+--------------------
+
+The Debian BIND package ships with a config that will work for the majority 
+of leaf servers with no user input required.
+
+The named configuration file named.conf is located in /etc/bind, so that all 
+static configuration files relating to bind are in one place.  If you really 
+don't want named.conf in /etc/bind, then the best way to handle it is probably
+to replace /etc/bind/named.conf with a symlink to the location you want to use.
+You could also use an option to named in the init.d script, but that only works
+for named, not for things like ndc.
+
+Zone data files for the root servers, and the forward and reverse localhost
+zones are also provided in /etc/bind.
+
+The working directory for named is now /var/cache/bind.  Thus, any transient
+files generated by named, such as database files for zones the daemon is
+secondary for, will be written to the /var filesystem, where they belong.
+
+To make this work, the named.conf provided uses explicitly fully-qualified
+pathnames to reference the files in /etc/bind. 
+
+Unlike previous BIND packages for Debian, the named.conf and provided db.*
+files are tagged as conffiles.  Thus, if you just want a "caching mostly"
+server configuration for a server that does not need to be authoritative for
+anything else, you can run the provided configuration as-is.  If you want to
+hack on named.conf, or even the init.d fragment, you can feel free to.  Future
+package upgrades will treat your configuration changes sanely, as all Debian
+packages should.
+
+While you are free to craft whatever structure you wish for servers which need
+to be authoritative for additional zones, what we suggest is that you put the
+db files for any zones you are master for in /etc/bind (perhaps even in a
+subdirectory structure depending on complexity), using full pathnames in the
+named.conf file.  Any zones you are secondary for should be configured in
+named.conf with simple filenames (relative to /var/cache/bind), so the data
+files will be stored in BIND's working directory (defaults to /var/cache/bind).
+Zones subject to automatic updates (such as via DHCP and/or nsupdate) should be
+stored in /var/lib/bind, and specified with full pathnames.
+
+
+Running Chroot'ed:
+-----------------
+
+Several users have asked for Debian BIND to run in a "chroot jail".  There are
+various issues associated with making this the default configuration for the
+package in Debian.  In the meantime, reasonable instructions on how to do
+this yourself are available on the web from:
+
+	http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html
+
+
+Running Non-Root:
+-----------------
+
+Recent versions of named can be invoked with options that specify a non-root
+user and/or group for named.  Read the named man page for more information.
+Note that when running named as a user other than root, it will not be able
+to find new interfaces that appear dynamically, such as during a PCMCIA card
+insertion, or if you're running some flavors of IPSEC and/or IP over IP
+tunnels.  If you cannot live with those limitations, feel free to edit the
+/etc/init.d/bind9 script to change the invocation of named.
+
+The default is now to run as the user 'bind' (which is automatically created
+in the group 'bind', if it doesn't exist), unless named.conf has been changed.
+To change this, edit /etc/default/bind9
+
+Please note that 'ndc restart' doesn't honor all the original command line
+options to named, so we explicitly don't use it in the init.d script provided
+with the package, and you should be careful about using it if you decide to
+run named non-root.
+
+
+PPP Control Script:
+-----------------
+
+Unfortunately, 'ndc reload' will not honor any command line options that were 
+fed to named on the initial invocation.  If you can live with that, and
+want to wiggle your DNS configuration when your PPP link goes up or down, the
+following script fragment from Francesco Potorti` <pot@gnu.org> may be helpful
+to you:
+   
+   I suggest adding this as bot /etc/ppp/ip-up.d/bind and
+   /etc/ppp/ip-down.d/bind:
+   
+   ================================================================
+   #!/bin/sh
+   if [ -x /usr/sbin/ndc -a -x /usr/sbin/named ]
+   then
+           /usr/sbin/ndc reload > /dev/null
+   fi
+   ================================================================
+   
+   This should cause no harm in any case, and should be helpful in these
+   cases:
+   - you configure bind as a forwarder.  When ppp is down, it cannot access
+     the network.  As soon as ppp is up, it is forced by the script to try
+     again, and it succeeds.
+   - someone writes a clever script that, coupled with the `usepeerdns'
+     command of pppd, makes a forwarding-only bind use the right servers by
+     rewriting the configuration file after ppp goes up.  Then the script
+     above makes bind reload the configuration.
+   
+   Now, someone should write that clever script :-)
+   
+   By the way, this is a  badly wanted feature, that should help setting up
+   a ppp connection automatically.   Currently, setting up a ppp connection
+   is much easier on a windows system than on linux, and there is really no
+   reason why it should be so, given that all the tools are there.
+
+
+Apparmor Profile
+----------------
+If your system uses apparmor, please note that the shipped enforcing profile
+works with the default installation, and changes in your configuration may
+require changes to the installed apparmor profile. Please see
+https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this
+software.
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000..d0e527d
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,12 @@
+Just a crude notes about the source handling (it needs cleanup).
+
+- The source has been converted to git-buildpackage structure to allow
+  easy team work
+
+- uscan can be used to download new upstream sources
+
+- d/copyright has been converted to machine readable format (TODO) and
+  has Files-Excludes section for generation upstream tarball using
+  mk-origtarball (via uscan) to remove contrib/ directory
+
+ -- Ondřej Surý <ondrej@debian.org>, Fri,  8 Sep 2017 12:18:26 +0200
diff --git a/debian/apply-export-patch b/debian/apply-export-patch
new file mode 100644
index 0000000..36be293
--- /dev/null
+++ b/debian/apply-export-patch
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+# This pile of horror converts the makefiles into expecting the -export
+# version of the libraries.
+
+set -e
+cd build-udeb
+
+for lib in dns irs isc isccc isccfg lwres; do
+    sed -i "s/lib${lib}\./lib${lib}-export./g" lib/${lib}/Makefile
+done
+
+sed -i 's/ -lisc -ldns -lisccfg$/ -lisc-export -ldns-export -lisccfg-export/' \
+    lib/irs/Makefile
+
+patch -p0 < ../debian/export.diff
+
+for lib in dns irs isc isccc isccfg lwres; do
+    sed -i 's/\(lib'${lib}'\).la/\1-export.la/g'  $(find . -name Makefile)
+done
diff --git a/debian/bind9-doc.dirs b/debian/bind9-doc.dirs
new file mode 100644
index 0000000..3d13cf8
--- /dev/null
+++ b/debian/bind9-doc.dirs
@@ -0,0 +1 @@
+usr/share/doc/bind9-doc/arm
diff --git a/debian/bind9-doc.docs b/debian/bind9-doc.docs
new file mode 100644
index 0000000..86d3a6d
--- /dev/null
+++ b/debian/bind9-doc.docs
@@ -0,0 +1 @@
+doc/misc
diff --git a/debian/bind9-doc.install b/debian/bind9-doc.install
new file mode 100644
index 0000000..3fe53ec
--- /dev/null
+++ b/debian/bind9-doc.install
@@ -0,0 +1 @@
+doc/arm/*.html /usr/share/doc/bind9-doc/arm
diff --git a/debian/bind9-host.install b/debian/bind9-host.install
new file mode 100644
index 0000000..f07a04d
--- /dev/null
+++ b/debian/bind9-host.install
@@ -0,0 +1,2 @@
+usr/bin/host
+usr/share/man/man1/host.1*
diff --git a/debian/bind9-pkcs11.service b/debian/bind9-pkcs11.service
new file mode 100644
index 0000000..75f7f63
--- /dev/null
+++ b/debian/bind9-pkcs11.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=BIND Domain Name Server with native PKCS#11
+Documentation=man:named(8)
+After=network.target
+
+[Service]
+EnvironmentFile=-/etc/default/bind9
+Environment=KRB5_KTNAME=/etc/bind/named.keytab
+
+ExecStart=/usr/sbin/named-pkcs11 -f -u bind
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/bind9-resolvconf.service b/debian/bind9-resolvconf.service
new file mode 100644
index 0000000..b0f01a0
--- /dev/null
+++ b/debian/bind9-resolvconf.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=local BIND via resolvconf
+Documentation=man:named(8) man:resolvconf(8)
+PartOf=bind9.service
+After=bind9.service
+ConditionFileIsExecutable=/sbin/resolvconf
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named'
+ExecStop=/sbin/resolvconf -d lo.named
+
+[Install]
+WantedBy=bind9.service
diff --git a/debian/bind9.NEWS b/debian/bind9.NEWS
new file mode 100644
index 0000000..d235da6
--- /dev/null
+++ b/debian/bind9.NEWS
@@ -0,0 +1,14 @@
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+  As of bind 9.4, allow-query-cache and allow-recursion default to the
+  builtin acls 'localnets' and 'localhost'.  If you are setting up a
+  name server for a network, you will almost certainly need to change
+  this.
+
+  The change in default has been done to make caching servers less
+  attractive as reflective amplifying targets for spoofed traffic.
+  This still leaves authoritative servers exposed.
+
+  The best fix is for full BCP 38 deployment to remove spoofed traffic.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 03 Oct 2007 00:52:44 -0600
diff --git a/debian/bind9.apport b/debian/bind9.apport
new file mode 100644
index 0000000..e484b94
--- /dev/null
+++ b/debian/bind9.apport
@@ -0,0 +1,36 @@
+#!/usr/bin/python
+
+'''apport hook for bind9
+
+(c) 2010 Andres Rodriguez.
+Author: Andres Rodriguez <andreserl@ubuntu.com>
+
+This program is free software; you can redistribute it and/or modify it
+under the terms of the GNU General Public License as published by the
+Free Software Foundation; either version 2 of the License, or (at your
+option) any later version.  See http://www.gnu.org/copyleft/gpl.html for
+the full text of the license.
+'''
+
+from apport.hookutils import *
+import re
+
+def add_info(report, ui):
+    response = ui.yesno("The contents of your /etc/bind/named.conf file "
+                        "may help developers diagnose your bug more "
+                        "quickly.  However, it may contain sensitive "
+                        "information.  Do you want to include it in your "
+                        "bug report?")
+
+    if response == None: # user cancelled
+        raise StopIteration
+    elif response == True:
+        attach_conffiles(report,'bind9')
+
+    # getting syslog stuff
+    report['SyslogBind9'] = recent_syslog(re.compile(r'named\['))
+
+    # Attaching related packages info
+    attach_related_packages(report, ['bind9utils', 'apparmor'])
+
+    attach_mac_events(report, '/usr/sbin/named')
diff --git a/debian/bind9.config b/debian/bind9.config
new file mode 100644
index 0000000..e7f85c5
--- /dev/null
+++ b/debian/bind9.config
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+set -e 
+
+. /usr/share/debconf/confmodule
+
+db_input low bind9/start-as-user || true
+db_go
+
+db_input low bind9/different-configuration-file || true
+db_go
+
+db_input low bind9/run-resolvconf || true
+db_go
diff --git a/debian/bind9.dirs b/debian/bind9.dirs
new file mode 100644
index 0000000..6fc1596
--- /dev/null
+++ b/debian/bind9.dirs
@@ -0,0 +1,13 @@
+etc/apparmor.d/force-complain
+etc/apparmor.d/local
+etc/bind
+etc/insserv.conf.d
+etc/network/if-down.d
+etc/network/if-up.d
+etc/ppp/ip-down.d
+etc/ppp/ip-up.d
+etc/ufw/applications.d
+usr/bin
+usr/sbin
+usr/share/bind9
+var/cache/bind
diff --git a/debian/bind9.docs b/debian/bind9.docs
new file mode 100644
index 0000000..e845566
--- /dev/null
+++ b/debian/bind9.docs
@@ -0,0 +1 @@
+README
diff --git a/debian/bind9.init b/debian/bind9.init
new file mode 100644
index 0000000..59d8e3d
--- /dev/null
+++ b/debian/bind9.init
@@ -0,0 +1,145 @@
+#!/bin/sh -e
+
+### BEGIN INIT INFO
+# Provides:          bind9
+# Required-Start:    $remote_fs
+# Required-Stop:     $remote_fs
+# Should-Start:      $network $syslog
+# Should-Stop:       $network $syslog
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Start and stop bind9
+# Description:       bind9 is a Domain Name Server (DNS)
+#        which translates ip addresses to and from internet names
+### END INIT INFO
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+# for a chrooted server: "-u bind -t /var/lib/named"
+# Don't modify this line, change or create /etc/default/bind9.
+OPTIONS=""
+RESOLVCONF=no
+
+test -f /etc/default/bind9 && . /etc/default/bind9
+
+test -x /usr/sbin/rndc || exit 0
+
+. /lib/lsb/init-functions
+PIDFILE=/run/named/named.pid
+
+check_network() {
+    if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then
+	IFCONFIG_OPTS="-au"
+    else
+	IFCONFIG_OPTS=""
+    fi
+    if [ -z "$(/sbin/ifconfig $IFCONFIG_OPTS)" ]; then
+       #log_action_msg "No networks configured."
+       return 1
+    fi
+    return 0
+}
+
+case "$1" in
+    start)
+	log_daemon_msg "Starting domain name service..." "bind9"
+
+	modprobe capability >/dev/null 2>&1 || true
+
+	# dirs under /run can go away on reboots.
+	mkdir -p /run/named
+	chmod 775 /run/named
+	chown root:bind /run/named >/dev/null 2>&1 || true
+
+	if [ ! -x /usr/sbin/named ]; then
+	    log_action_msg "named binary missing - not starting"
+	    log_end_msg 1
+	fi
+
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \
+		--pidfile ${PIDFILE} -- $OPTIONS; then
+	    if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+		echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named
+	    fi
+	    log_end_msg 0
+	else
+	    log_end_msg 1
+	fi
+    ;;
+
+    stop)
+	log_daemon_msg "Stopping domain name service..." "bind9"
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+	    /sbin/resolvconf -d lo.named
+	fi
+	pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true
+	if [ -z "$pid" ]; then		# no pid found, so either not running, or error
+	    pid=$(pgrep -f ^/usr/sbin/named) || true
+	    start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \
+		    --pidfile ${PIDFILE} -- $OPTIONS
+	fi
+	if [ -n "$pid" ]; then
+	    sig=0
+	    n=1
+	    while kill -$sig $pid 2>/dev/null; do
+		if [ $n -eq 1 ]; then
+		    echo "waiting for pid $pid to die"
+		fi
+		if [ $n -eq 11 ]; then
+		    echo "giving up on pid $pid with kill -0; trying -9"
+		    sig=9
+		fi
+		if [ $n -gt 20 ]; then
+		    echo "giving up on pid $pid"
+		    break
+		fi
+		n=$(($n+1))
+		sleep 1
+	    done
+	fi
+	log_end_msg 0
+    ;;
+
+    reload|force-reload)
+	log_daemon_msg "Reloading domain name service..." "bind9"
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    log_end_msg 1
+	fi
+
+	/usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1
+    ;;
+
+    restart)
+	if ! check_network; then
+	    log_action_msg "no networks configured"
+	    exit 1
+	fi
+
+	$0 stop
+	$0 start
+    ;;
+    
+    status)
+    	ret=0
+	status_of_proc -p ${PIDFILE} /usr/sbin/named bind9 2>/dev/null || ret=$?
+	exit $ret
+	;;
+
+    *)
+	log_action_msg "Usage: /etc/init.d/bind9 {start|stop|reload|restart|force-reload|status}"
+	exit 1
+    ;;
+esac
+
+exit 0
diff --git a/debian/bind9.install b/debian/bind9.install
new file mode 100644
index 0000000..26d595e
--- /dev/null
+++ b/debian/bind9.install
@@ -0,0 +1,38 @@
+debian/extras/apparmor.d/* /etc/apparmor.d/
+debian/extras/etc/* /etc/bind/
+debian/extras/if-reconfig.d/* /etc/network/if-down.d
+debian/extras/if-reconfig.d/* /etc/network/if-up.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-down.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-up.d/
+debian/extras/insserv.conf.d/* /etc/insserv.conf.d/
+debian/extras/ufw/* /etc/ufw/applications.d/
+etc/bind/bind.keys
+usr/bin/arpaname
+usr/bin/bind9-config
+usr/bin/named-rrchecker
+usr/sbin/ddns-confgen
+usr/sbin/dnssec-importkey
+usr/sbin/genrandom
+usr/sbin/isc-hmac-fixup
+usr/sbin/named
+usr/sbin/named-journalprint
+usr/sbin/named-nzd2nzf
+usr/sbin/named-pkcs11
+usr/sbin/nsec3hash
+usr/sbin/tsig-keygen
+usr/share/man/man1/arpaname.1
+usr/share/man/man1/bind9-config.1
+usr/share/man/man1/isc-config.sh.1
+usr/share/man/man1/named-rrchecker.1
+usr/share/man/man5/named.conf.5
+usr/share/man/man5/rndc.conf.5
+usr/share/man/man8/ddns-confgen.8
+usr/share/man/man8/dnssec-coverage.8
+usr/share/man/man8/dnssec-importkey.8
+usr/share/man/man8/genrandom.8
+usr/share/man/man8/isc-hmac-fixup.8
+usr/share/man/man8/named-journalprint.8
+usr/share/man/man8/named-nzd2nzf.8
+usr/share/man/man8/named.8
+usr/share/man/man8/nsec3hash.8
+usr/share/man/man8/tsig-keygen.8
diff --git a/debian/bind9.postinst b/debian/bind9.postinst
new file mode 100644
index 0000000..d1fa83f
--- /dev/null
+++ b/debian/bind9.postinst
@@ -0,0 +1,133 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+if [ "$1" = configure ]; then
+    lastversion="$2";
+
+    # lets give them a bind user/group in all cases.
+    getent group bind >/dev/null 2>&1 || addgroup --system bind
+    getent passwd bind >/dev/null 2>&1 ||
+	adduser --system --home /var/cache/bind --no-create-home \
+		--disabled-password --ingroup bind bind
+
+    if [ -z "$lastversion" ] || dpkg --compare-versions "$lastversion" lt 1:9.4.2-2 ; then
+	mkdir -p /var/lib/bind
+	chown root:bind /var/lib/bind
+	chmod 775 /var/lib/bind
+    fi
+
+    if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then
+	rndc-confgen -r /dev/urandom -a
+    fi
+
+    # no sumfile means you get the default
+    [ -f /var/lib/bind/bind9-default.md5sum ] || 
+        echo "2cfcfb7bf1b99c7930fd475907e38be7  /etc/default/bind9" > /var/lib/bind/bind9-default.md5sum
+
+    if [ -f /etc/default/bind9 ] && \
+       [ "$(cat /var/lib/bind/bind9-default.md5sum)" = "$(md5sum /etc/default/bind9)" ]; then
+        config="/etc/default/bind9"
+    elif [ ! -e /etc/default/bind9 ]; then
+        config="/etc/default/bind9"
+    else 
+        config="/etc/default/bind9.dpkg-dist"
+    fi
+
+    localconf=""
+    if [ ! -f $config ]; then
+	CONF=/etc/bind/named.conf
+	for file in ${CONF} ${CONF}.local ${CONF}.default-zones; do
+	    if [ -f ${file} ]; then
+		theirs=$(md5sum $file | sed 's/ .*$//')
+		mine=$(dpkg --status bind9 | grep "^ $file " | sed -n 's/.* //p')
+		if [ "$mine" != "$theirs" ]; then
+		    localconf="y"
+		fi
+	    else
+		localconf="y"
+	    fi
+	done
+	if [ -n "$localconf" ]; then
+                db_reset bind9/start-as-user
+	else
+                db_set bind9/start-as-user bind || true
+	fi
+   
+        echo '#' >> $config
+        echo '# run resolvconf?' >> $config
+        db_get bind9/run-resolvconf
+        if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+                echo "RESOLVCONF=yes" >> $config
+        else
+                echo "RESOLVCONF=no" >> $config
+        fi
+
+        db_get bind9/start-as-user
+        USER=$RET
+        db_get bind9/different-configuration-file
+        CONFFILE=$RET
+        
+        echo '' >> $config
+        echo '# startup options for the server' >> $config
+        if [ ! -z "$USER" ] && [ ! -z "$CONFFILE" ]; then
+                echo "OPTIONS=\"-u $USER -c $CONFFILE\"" >> $config
+        elif [ ! -z "$USER" ]; then
+                echo "OPTIONS=\"-u $USER\"" >> $config
+        elif [ ! -z "$CONFFILE" ]; then
+                echo "OPTIONS=\"-c $CONFFILE\"" >> $config
+        else
+                echo "OPTIONS=\"\"" >> $config
+        fi
+    else
+        db_get bind9/run-resolvconf
+         if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+	        sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2yes#g" -i $config
+        else
+	        sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2no#g" -i $config
+        fi
+        db_get bind9/start-as-user
+        if [ ! -z "$RET" ]; then
+            if [ ! -z "`grep OPTIONS $config`" ]; then
+                if [ ! -z "`grep OPTIONS $config | grep '\-u'`" ]; then
+                        sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-u[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-u $RET\3\"#g" -i $config
+                else 
+                        sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -u $RET\"#g" -i $config
+                fi
+            else
+                echo "OPTIONS=\"-u $RET\"" >> $config
+            fi
+        fi
+        db_get bind9/different-configuration-file
+        if [ ! -z "$RET" ]; then
+            if [ ! -z "`grep OPTIONS $config | grep '\-c'`" ]; then
+                sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-c[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-c $RET\3\"#g" -i $config
+            else 
+                sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -c $RET\"#g" -i $config
+            fi
+        fi
+    fi
+
+    if [ "$config" = "/etc/default/bind9" ]; then
+        md5sum /etc/default/bind9 > /var/lib/bind/bind9-default.md5sum
+    fi
+
+    uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}')
+    if [ "$uid" = "0" ]; then
+	[ -n "$localconf" ] || chown bind /etc/bind/rndc.key
+	chgrp bind /etc/bind
+	chmod g+s /etc/bind
+	chgrp bind /etc/bind/rndc.key /var/cache/bind
+	chgrp bind /etc/bind/named.conf* || true
+	chmod g+r /etc/bind/rndc.key /etc/bind/named.conf* || true
+	chmod g+rwx /var/cache/bind
+    fi
+fi
+
+db_stop
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.postrm b/debian/bind9.postrm
new file mode 100644
index 0000000..8e28807
--- /dev/null
+++ b/debian/bind9.postrm
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
+
+if [ "$1" = "purge" ]; then
+	rm -f /etc/bind/rndc.key /etc/default/bind9
+	rmdir /etc/bind >/dev/null 2>&1 || true
+	rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true
+	rm -f /var/lib/bind/bind9-default.md5sum
+	rmdir /var/lib/bind || true
+	# delete bind daemon user, if it exists
+	if getent passwd bind > /dev/null ; then
+		deluser  --quiet bind > /dev/null || true
+	fi
+fi
+
+exit 0
diff --git a/debian/bind9.preinst b/debian/bind9.preinst
new file mode 100644
index 0000000..66b06ab
--- /dev/null
+++ b/debian/bind9.preinst
@@ -0,0 +1,57 @@
+#!/bin/sh
+# preinst script for bind9
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+#        * <new-preinst> `install'
+#        * <new-preinst> `install' <old-version>
+#        * <new-preinst> `upgrade' <old-version>
+#        * <old-preinst> `abort-upgrade' <new-version>
+# for details, see https://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+    install|upgrade)
+	if [ -n "$2" ] && dpkg --compare-versions "$2" lt "1:9.11.2+dfsg-6"; then
+	    theirs=$(md5sum /etc/bind/named.conf.options | sed 's/ .*$//')
+	    mine=56919cbc0d819c9a303a8bdeb306b5f1
+	    if [ "$mine" = "$theirs" ]; then
+		if [ -n "$(dpkg-query -f '${Conffiles}' -W bind9 | grep /etc/bind/named.conf.options)" ]; then
+		    # dpkg knows /etc/bind/named.conf.options as a conffile (from squeeze or older)
+		    # cannot move the outdated file aside to avoid dpkg noticing deleted-by-local-admin
+		    # therefore edit it in place to make it match the to-be-installed version
+		    cp -p /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old
+		    sed -i '26{/^$/d}; 23{/auth-nxdomain no;/d}' /etc/bind/named.conf.options
+		else
+		    mv /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old
+		fi
+	    fi
+	fi
+    ;;
+
+    abort-upgrade)
+	if [ ! -f "/etc/bind/named.conf.options" ] && [ -f "/etc/bind/named.conf.options.dpkg-old" ]; then
+	    theirs=$(md5sum /etc/bind/named.conf.options.dpkg-old | sed 's/ .*$//')
+	    mine=56919cbc0d819c9a303a8bdeb306b5f1
+	    if [ "$mine" = "$theirs" ]; then
+		mv /etc/bind/named.conf.options.dpkg-old /etc/bind/named.conf.options
+	    fi
+	fi
+    ;;
+
+    *)
+        echo "preinst called with unknown argument \`$1'" >&2
+        exit 1
+    ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.prerm b/debian/bind9.prerm
new file mode 100644
index 0000000..12afbea
--- /dev/null
+++ b/debian/bind9.prerm
@@ -0,0 +1,30 @@
+#!/bin/sh
+set -e
+
+case "$1" in
+    remove)
+	# if bind is running, stop it before removing
+	if pidof named >/dev/null 2>&1; then
+		# test if invoke-rc.d command is present on this system
+		if command -v invoke-rc.d >/dev/null 2>&1; then
+		    invoke-rc.d bind9 stop
+		# if really not, use initscript
+		else
+		    /etc/init.d/bind9 stop
+		fi
+	fi
+    ;;
+
+    upgrade)
+	# leave bind running during the upgrade
+    ;;
+
+    *)
+	echo "prerm called with unknown argument \`$1'" >&2
+	exit 1
+    ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.service b/debian/bind9.service
new file mode 100644
index 0000000..3b91a17
--- /dev/null
+++ b/debian/bind9.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=BIND Domain Name Server
+Documentation=man:named(8)
+After=network.target
+Wants=nss-lookup.target
+Before=nss-lookup.target
+
+[Service]
+Type=forking
+EnvironmentFile=-/etc/default/bind9
+ExecStart=/usr/sbin/named $OPTIONS
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/bind9.tmpfile b/debian/bind9.tmpfile
new file mode 100644
index 0000000..36fc91d
--- /dev/null
+++ b/debian/bind9.tmpfile
@@ -0,0 +1 @@
+d /run/named 0775 root bind - -
diff --git a/debian/bind9utils.install b/debian/bind9utils.install
new file mode 100644
index 0000000..12fcc2f
--- /dev/null
+++ b/debian/bind9utils.install
@@ -0,0 +1,46 @@
+usr/lib/python3/dist-packages/
+usr/sbin/dnssec-checkds
+usr/sbin/dnssec-coverage
+usr/sbin/dnssec-dsfromkey
+usr/sbin/dnssec-dsfromkey-pkcs11
+usr/sbin/dnssec-importkey-pkcs11
+usr/sbin/dnssec-keyfromlabel
+usr/sbin/dnssec-keyfromlabel-pkcs11
+usr/sbin/dnssec-keygen
+usr/sbin/dnssec-keygen-pkcs11
+usr/sbin/dnssec-keymgr
+usr/sbin/dnssec-revoke
+usr/sbin/dnssec-revoke-pkcs11
+usr/sbin/dnssec-settime
+usr/sbin/dnssec-settime-pkcs11
+usr/sbin/dnssec-signzone
+usr/sbin/dnssec-signzone-pkcs11
+usr/sbin/dnssec-verify
+usr/sbin/dnssec-verify-pkcs11
+usr/sbin/named-checkconf
+usr/sbin/named-checkzone
+usr/sbin/named-compilezone
+usr/sbin/pkcs11-destroy
+usr/sbin/pkcs11-keygen
+usr/sbin/pkcs11-list
+usr/sbin/pkcs11-tokens
+usr/sbin/rndc
+usr/sbin/rndc-confgen
+usr/share/man/man8/dnssec-checkds.8
+usr/share/man/man8/dnssec-dsfromkey.8
+usr/share/man/man8/dnssec-keyfromlabel.8
+usr/share/man/man8/dnssec-keygen.8
+usr/share/man/man8/dnssec-keymgr.8
+usr/share/man/man8/dnssec-revoke.8
+usr/share/man/man8/dnssec-settime.8
+usr/share/man/man8/dnssec-signzone.8
+usr/share/man/man8/dnssec-verify.8
+usr/share/man/man8/named-checkconf.8
+usr/share/man/man8/named-checkzone.8
+usr/share/man/man8/named-compilezone.8
+usr/share/man/man8/pkcs11-destroy.8
+usr/share/man/man8/pkcs11-keygen.8
+usr/share/man/man8/pkcs11-list.8
+usr/share/man/man8/pkcs11-tokens.8
+usr/share/man/man8/rndc-confgen.8
+usr/share/man/man8/rndc.8
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..4a0cfd0
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,2965 @@
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u7) buster-security; urgency=high
+
+  * CVE-2021-25220: The rules for acceptance of records into the cache
+    have been tightened to prevent the possibility of poisoning if
+    forwarders send records outside the configured bailiwick.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 14 Mar 2022 15:21:48 +0100
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u6) buster-security; urgency=high
+
+  * CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
+    effectively disables the lame server cache, as it could previously be
+    abused by an attacker to significantly degrade resolver performance.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 25 Oct 2021 13:42:31 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u5) buster-security; urgency=high
+
+  * CVE-2021-25214: A malformed incoming IXFR transfer could trigger
+    an assertion failure in ``named``, causing it to quit abnormally.
+  * CVE-2021-25215: ``named`` crashed when a DNAME record placed in
+    the ANSWER section during DNAME chasing turned out to be the final
+    answer to a client query.
+  * CVE-2021-25216: Compile with system provided SPNEGO
+  * Ensure all resources are properly cleaned up when a call to
+    gss_accept_sec_context() fails.
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 29 Apr 2021 12:42:26 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u3) buster-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Buffer overflow in GSSAPI security policy negotiation (CVE-2020-8625)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 15 Feb 2021 08:51:28 +0100
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u2) buster-security; urgency=high
+
+  [ Salvatore Bonaccorso ]
+  * [CVE-2020-8622] Properly handle malformed truncated responses to TSIG
+    queries
+  * [CVE-2020-8623] Fix crash in pk11_numbits() with crafted packet when
+    native-pkcs11 is used
+  * Wait more than 1 second for NSEC3 chain changes
+  * [CVE-2020-8624] Fix processing of "update-policy" rules of type
+    "subdomain" (Closes: #966497)
+
+  [ Ondřej Surý ]
+  * [CVE-2020-8619]: It was possible to trigger a INSIST when a zone with
+    interior (non-leaf) wildcard label
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 25 Aug 2020 10:10:23 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u1) buster-security; urgency=high
+
+  * [CVE-2019-6477]: TCP-pipelined queries can bypass tcp-clients limit.
+    (Closes: #945171)
+  * [CVE-2020-8616]: Fix NXNSATTACK amplification attack on BIND 9
+  * [CVE-2020-8617]: Fix assertion failure in TSIG processing code
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 18 May 2020 10:02:41 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
+    (Closes: #930746)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 21 Jun 2019 11:24:31 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5) unstable; urgency=medium
+
+  * AppArmor: Allow /var/tmp/krb5_* (owner-only) for Samba AD DLZ.
+    Thanks to Steven Monai (Closes: 928398)
+
+ -- Bernhard Schmidt <berni@debian.org>  Fri, 03 May 2019 19:44:57 +0200
+
+bind9 (1:9.11.5.P4+dfsg-4) unstable; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * AppArmor: Also add /var/lib/samba/bind-dns/dns/** (Closes: #927827)
+
+  [ Ondřej Surý ]
+  * [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective
+    (Closes: #927932)
+  * Update symbols file for new symbol in libisc
+  * Enable EDDSA again, but disable broken Ed448 support (Closes: #927962)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 26 Apr 2019 08:33:13 +0000
+
+bind9 (1:9.11.5.P4+dfsg-3) unstable; urgency=medium
+
+  * More fixes to the AppArmor policy for Samba AD DLZ
+    - allow access to /dev/urandom
+    - allow locking for dns.keytab
+    - fix path to smb.conf
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 22 Apr 2019 22:31:06 +0200
+
+bind9 (1:9.11.5.P4+dfsg-2) unstable; urgency=medium
+
+  [ Ondřej Surý ]
+  * Update d/gbp.conf for Debian Buster
+
+  [ Bernhard Schmidt ]
+  * Cherry-Pick upstream commit to prevent dnssec-keymgr from immediately
+    expiring and deleting old DNSSEC keys when being run for the first
+    time (Closes: #923984)
+  * Update AppArmor policy for Samba AD DLZ
+    - Add changed default location for named.conf
+    - Allow read/mmap on some Samba libraries
+    Thanks to Steven Monai (Closes: #920530)
+
+  [ Andreas Beckmann ]
+  * bind9.preinst: cope with ancient conffile named.conf.options
+    (Closes: #905177)
+
+ -- Bernhard Schmidt <berni@debian.org>  Tue, 02 Apr 2019 21:12:50 +0200
+
+bind9 (1:9.11.5.P4+dfsg-1) unstable; urgency=high
+
+  [ Bernhard Schmidt ]
+  * New upstream version 9.11.5.P4+dfsg
+    - CVE-2018-5744: A specially crafted packet can cause named to leak memory
+    - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over
+      to an unsupported key algorithm when using managed-keys
+    - CVE-2019-6465: Controls for zone transfers might not be properly applied
+      to Dynamically Loadable Zones (DLZs) if the zones are writable.
+  * d/watch: Do not use beta or RC versions
+  * d/libdns1104.symbols: fix symbols-file-contains-debian-revision for dnstap
+    symbols
+
+  [ Ondřej Surý ]
+  * Add new upstream GPG signing-key
+
+ -- Bernhard Schmidt <berni@debian.org>  Fri, 22 Feb 2019 17:54:10 +0100
+
+bind9 (1:9.11.5.P1+dfsg-2) unstable; urgency=medium
+
+  [ Dominik George ]
+  * Support dyndb modules with apparmor. (Closes: #900879)
+
+  [ Bernhard Schmidt ]
+  * apparmor-policy: permit locking of the allow-new-zones database
+    (Closes: #922065)
+  * apparmor-policy: allow access to Samba DLZ files (Closes: #920530)
+
+ -- Bernhard Schmidt <berni@debian.org>  Tue, 12 Feb 2019 00:34:21 +0100
+
+bind9 (1:9.11.5.P1+dfsg-1) unstable; urgency=medium
+
+  * New upstream version 9.11.5.P1+dfsg
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 18 Dec 2018 13:59:25 +0000
+
+bind9 (1:9.11.5+dfsg-1) unstable; urgency=medium
+
+  * Use team+dns@tracker.debian.org as Maintainer address
+  * New upstream version 9.11.5+dfsg
+  * Add EXTENSIONS= to version file programmatically, not with the patch
+  * Rebase patches for BIND 9.11.5
+  * Adjust package names for new SONAMEs
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 22 Oct 2018 10:30:28 +0000
+
+bind9 (1:9.11.4.P2+dfsg-3) unstable; urgency=medium
+
+  * Also avoid OpenSSL 1.1.1 in udebs.
+    Thanks to KiBi for the hint
+  * autopkgtest: Make an external query and check for DNSSEC
+
+ -- Bernhard Schmidt <berni@debian.org>  Wed, 26 Sep 2018 11:21:35 +0200
+
+bind9 (1:9.11.4.P2+dfsg-2) unstable; urgency=medium
+
+  * Temporarily disable EDDSA to relax OpenSSL version requirement
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 24 Sep 2018 11:08:15 +0200
+
+bind9 (1:9.11.4.P2+dfsg-1) unstable; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * Add a very simple autopkgtest (dig @127.0.0.1)
+
+  [ Ondřej Surý ]
+  * New upstream version 9.11.4.P2+dfsg
+  * Rebase patches for BIND 9.11.4-P2
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 10 Sep 2018 08:36:06 +0000
+
+bind9 (1:9.11.4.P1+dfsg-1) unstable; urgency=medium
+
+  [ Timo Aaltonen ]
+  * skip-rtld-deepbind-for-dyndb.diff: Add a patch to fix named-pkcs11
+    crashing on startup. (LP: #1769440)
+
+  [ Bernhard Schmidt ]
+  * Add gbp.conf for pristine-tar usage
+  * d/watch: Properly deal with -P patch releases
+
+  [ Ondřej Surý ]
+  * Don't fail to start if /etc/default/bind9 doesn't exist
+  * New upstream version 9.11.4.P1+dfsg
+  * Rebase patches for BIND 9.11.4-P1
+  * Add new dst__openssleddsa_init optional symbol (it depends on OpenSSL version) (Closes: #897643)
+  * Put aside named.conf.option from stretch when upgrading (Closes: #905177)
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 31 Aug 2018 09:53:27 +0000
+
+bind9 (1:9.11.4+dfsg-4) unstable; urgency=medium
+
+  * Brown-paper-bag release :-(
+  * Fix missing colon in AppArmor profile (Closes: #904983)
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 30 Jul 2018 16:28:21 +0200
+
+bind9 (1:9.11.4+dfsg-3) unstable; urgency=medium
+
+  * Enable IDN support for dig+host using libidn2 (Closes: #459010)
+  * Use root.hints from dns-root-data (Closes: #888491)
+
+ -- Bernhard Schmidt <berni@debian.org>  Sun, 29 Jul 2018 23:26:09 +0200
+
+bind9 (1:9.11.4+dfsg-2) unstable; urgency=medium
+
+  * Enable dnstap support (Courtesy of Richard James Salts) (Closes: #890483)
+  * Remove auth-nxdomain no; from named.conf.options (Closes: #896889)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 16 Jul 2018 18:49:50 +0000
+
+bind9 (1:9.11.4+dfsg-1) unstable; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * Use systemd Type=forking to signal daemon init.
+    Thanks to Elie Roudninski (Closes: #900788)
+
+  [ Ondřej Surý ]
+  * New upstream version 9.11.4+dfsg
+  * Rebase patches for 9.11.4+dfsg release
+  * Bump libdns SONAME to libdns.so.1102
+  * Add a SONAME version check early in a build process
+  * Use debian/getapi to dynamically pick soversions for dh_makeshlibs
+  * Update the symbols in libdns and libisccfg packages
+
+ -- Ondřej Surý <ondrej@debian.org>  Sat, 14 Jul 2018 12:27:56 +0000
+
+bind9 (1:9.11.3+dfsg-2) unstable; urgency=medium
+
+  * [CVE-2018-5738]: Add upstream fix to close the default open recursion
+    (Closes: #901483)
+  * Change the maintainer address (Closes: #899959)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 14 Jun 2018 13:01:47 +0000
+
+bind9 (1:9.11.3+dfsg-1) unstable; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * New upstream version 9.11.3+dfsg
+    (Closes: #867570, #888463)
+    - Refresh patches
+    - Drop stdatomic.h patches applied upstream
+  * Follow SONAME bump of libdns
+  * Follow SONAME bump of libisc
+  * Add missing symbols for libisccfg160
+  * Add python3-distutils Build-Dependency
+  * Drop Priority: standard for library packages
+  * Fix apparmor profile name (Closes: #893005)
+    Thanks to Andreas Hasenack
+  * Update bind9-host description (Closes: #729561)
+  * Add flags=(attach_disconnected) to AppArmor profile to prepare
+    to use more systemd hardening options, see #863841
+  * Add myself to Uploaders
+
+  [ Ondřej Surý ]
+  * Update Vcs-* links to salsa.d.o
+
+ -- Bernhard Schmidt <berni@debian.org>  Fri, 23 Mar 2018 00:09:58 +0100
+
+bind9 (1:9.11.2.P1-1) unstable; urgency=medium
+
+  * New upstream version 9.11.2-P1
+  * Refresh patches for new release
+
+ -- Ondřej Surý <ondrej@debian.org>  Wed, 17 Jan 2018 06:06:04 +0000
+
+bind9 (1:9.11.2+dfsg-10) unstable; urgency=medium
+
+  * Disable lmdb usage in export version of libraries (Closes: #887407)
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 16 Jan 2018 05:59:31 +0000
+
+bind9 (1:9.11.2+dfsg-9) unstable; urgency=medium
+
+  * Fix various mistakes in bind9 conffiles (Closes: #887398)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 23:12:43 +0000
+
+bind9 (1:9.11.2+dfsg-8) unstable; urgency=medium
+
+  * Pull more stdatomic patch to fix builds on 32-bit architectures
+  * Remove extra native pkcs11 patch (it has been replaced by sed rules)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 21:02:30 +0000
+
+bind9 (1:9.11.2+dfsg-7) unstable; urgency=medium
+
+  * Pull upstream patch to use C11 stdatomic where available (Closes: #778720)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 15:59:48 +0000
+
+bind9 (1:9.11.2+dfsg-6) unstable; urgency=medium
+
+  * Add named-nzd2nzf to bind9 package
+  * Simplify installation rules
+  * Enable lmdb (to actually build named-nzd2nzf)
+  * Move delv from bind9 to dnsutils package (Closes: #887326)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 15 Jan 2018 14:19:31 +0000
+
+bind9 (1:9.11.2+dfsg-5) unstable; urgency=medium
+
+  * Remove duplicate invoke-rc.d start invocation (Closes: #883575)
+  * Don't fail in postrm when /var/lib/bind cannot be removed (Closes: #882999)
+  * Use dh-apparmor for profile management
+  * apparmor-profile: allow changing thread name (Closes: #883228)
+  * Bump debhelper compat level to 10
+  * Bump Standards-Version to 4.1.2, no changes necessary
+
+ -- Bernhard Schmidt <berni@debian.org>  Sun, 10 Dec 2017 20:23:12 +0100
+
+bind9 (1:9.11.2+dfsg-4) unstable; urgency=medium
+
+  * Team upload.
+  * Fix symlinks in libbind-export-dev to point to /lib (Closes: #883536)
+
+ -- Bernhard Schmidt <berni@debian.org>  Tue, 05 Dec 2017 00:09:25 +0100
+
+bind9 (1:9.11.2+dfsg-3) unstable; urgency=medium
+
+  * Team upload.
+  * Only install files into bind9:any on arch-any builds (Closes: #883448)
+  * Adjust dependencies for udeb packages (Closes: #883449)
+
+ -- Bernhard Schmidt <berni@debian.org>  Mon, 04 Dec 2017 10:56:58 +0100
+
+bind9 (1:9.11.2+dfsg-2) unstable; urgency=medium
+
+  * Team upload.
+  * Workaround for FTBFS on binary-any builds (Closes: #883159)
+
+ -- Bernhard Schmidt <berni@debian.org>  Sun, 03 Dec 2017 20:36:32 +0100
+
+bind9 (1:9.11.2+dfsg-1) unstable; urgency=low
+
+  * d/watch: Bump the BIND version to 9.11.x
+  * Remove 'order random_1' patch, it was a horrible deviation from standards
+  * Modernize d/rules using debhelper
+  * New upstream version 9.11.2+dfsg
+  * Delete dyndb patch, as dyndb is now included in upstream sources
+  * Rebase patches for new upstream release.
+  * Add python3-ply to Build-Depends
+  * Restore the native pkcs11 patch
+  * Fix the Debian version parsing
+  * Remove lwresd as it has been deprecated by upstream anyway
+  * Add new tools: mdig to dnsutils and dnssec-keymgr to bind9utils
+  * Update the SONAMEs of BIND libraries
+  * Fix python3 packaging errors
+  * Bump the standards version to 4.1.1.1 (no change)
+  * Add support for dh_missing
+
+ -- Ondřej Surý <ondrej@debian.org>  Tue, 28 Nov 2017 22:59:30 +0000
+
+bind9 (1:9.10.6+dfsg-5) unstable; urgency=medium
+
+  [ Chris Lamb ]
+  * Make the build reproducible (Closes: #828012)
+
+  [ Micah Cowan ]
+  * Try not to be fragile to varying value of LIBS make var. (Closes: #833307)
+
+  [ Ondřej Surý ]
+  * Update the softhsm2.so non-MA path (Closes: #860722)
+  * Enable JSON output in the statistics channel (Closes: #860722)
+  * Merge NMUs' changelogs (Closes: #880077)
+  * Use /dev/urandom to avoid blocking in the server process. (Closes: #854243)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 02 Nov 2017 10:31:01 +0000
+
+bind9 (1:9.10.6+dfsg-4) unstable; urgency=medium
+
+  [ Michael Biebl ]
+  * Improve bind9-resolvconf.service (Closes: #826353)
+
+  [ Ondřej Surý ]
+  * Add insserv.conf.d configuration (Closes: #650538)
+  * Change bind9-resolvconf.server to Type=oneshot + RemainAfterExit=yes (Closes: #832040)
+  * Only add static and development symlinks for *-export.{a,so} libraries (Closes: #857522)
+  * Update Vcs-* fields to standard variants
+  * Rebuild with newer debhelper (Closes: #879542)
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 23 Oct 2017 07:02:50 +0000
+
+bind9 (1:9.10.6+dfsg-3) unstable; urgency=medium
+
+  * Make lwresd hard depend on bind9 package (Closes: #879127)
+
+ -- Ondřej Surý <ondrej@debian.org>  Sun, 22 Oct 2017 11:08:20 +0000
+
+bind9 (1:9.10.6+dfsg-2) unstable; urgency=medium
+
+  [ Timo Aaltonen ]
+  * d/copyright: Add Bv9ARM.pdf to Files-Excluded.
+
+  [ Ondřej Surý ]
+  * Replace lwresd with symlink instead of hard copy (Closes: #868538)
+  * Fix the symbols file to compensate for missing bsdcompat symbol on kFreeBSD (Closes: #879017)
+  * Re-enable threading support on kFreeBSD (Closes: #879018)
+  * Drop Multi-Arch: same header from libbind-dev (Closes: #874232)
+  * Remove transitional host package (Closes: #645437, #878228)
+
+ -- Ondřej Surý <ondrej@debian.org>  Thu, 19 Oct 2017 09:35:03 +0000
+
+bind9 (1:9.10.6+dfsg-1) unstable; urgency=medium
+
+  * New upstream version 9.10.6+dfsg
+  * Use OpenSSL 1.1.0 for crypto
+  * Add support for downloading upstream sources using d/watch
+    + Make d/copyright machine readable for Files-Excluded: support
+    + Update Files-Exclude: * to remove obsolete software dropped in
+      contrib/, but not really used
+  * Add initial README.source
+  * Limit the d/watch to 9.10.x (aka stable) for now
+  * Update patches for BIND 9.10.6 release
+  * Update PKCS11 patch
+  * Move under pkg-dns umbrella
+  * Reformat files in debian/ with wrap-and-sort -a for better maintainability
+  * Update the d/export.diff for BIND 9.10.6
+  * Remove FAQ from d/bind9.docs
+  * Bump SONAME versions for BIND libraries
+  * Add symbols files for libraries and enable strict symbol checks
+  * arpaname and named-rrchecker has been moved to /usr/bin
+  * Install required python library into bind9utils to accompany
+    dnssec-checkds and dnssec-coverage
+  * Change Vcs-* to pkg-dns/bind9
+  * Also exclude idnkit from upstream tarball
+  * Finish the debian/copyright update into machine readable format
+  * Enable Multi-Arch on libirs-export189
+  * Cleanup maintainer scripts
+  * Add lintian override for false positive on full-path command
+  * Remove unnecessary complexity when generating ${Description} to d/control
+
+ -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Oct 2017 06:18:21 +0000
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u3) stretch; urgency=medium
+
+  [ Bernhard Schmidt ]
+  * Import upcoming DNSSEC KSK-2017 from 9.10.5
+
+  [ Ondřej Surý ]
+  * Non-maintainer upload.
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 28 Aug 2017 09:36:28 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u2) stretch-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * debian/patches:
+    - CVE-2017-3142_regression added, fix a regression introduced in with the
+    correction for CVE-2017-3142.
+
+ -- Yves-Alexis Perez <corsac@debian.org>  Sat, 22 Jul 2017 21:24:54 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u1) stretch-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * debian/patches:
+    - debian/patches/CVE-2017-3142+CVE-2017-3143 added, fix TSIG bypasses
+      CVE-2017-3142: error in TSIG authentication can permit unauthorized zone
+      transfers. An attacker may be able to circumvent TSIG authentication of
+      AXFR and Notify requests.
+      CVE-2017-3143: error in TSIG authentication can permit unauthorized
+      dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0)
+      signature for a dynamic update.
+
+ -- Yves-Alexis Perez <corsac@debian.org>  Fri, 30 Jun 2017 16:20:29 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Dns64 with "break-dnssec yes;" can result in a assertion failure
+    (CVE-2017-3136) (Closes: #860224)
+  * Some chaining (CNAME or DNAME) responses to upstream queries could trigger
+    assertion failures (CVE-2017-3137) (Closes: #860225)
+  * 'rndc ""' could trigger a assertion failure in named (CVE-2017-3138)
+    (Closes: #860226)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 07 May 2017 15:22:46 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Replace 32_mips_atomic.diff with a version that uses C11 atomics. Fixes
+    hangs and crashes on MIPS. (Closes: #778720)
+
+ -- James Cowgill <jcowgill@debian.org>  Tue, 18 Apr 2017 16:42:50 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Use /dev/urandom to avoid blocking in the server process.
+    (closes: #854243)
+
+ -- Bastian Blank <waldi@debian.org>  Fri, 17 Mar 2017 19:07:16 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12) unstable; urgency=high
+
+  * Merge and accept the non-maintainer upload.
+  * Fix regression caused by the fix for CVE-2016-8864 (closes: #855540).
+  * Fix CVE-2017-3135: a malicously crafted query can cause named to crash if
+    both DNS64 and RPZ are being used (closes: #855520).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 19 Feb 2017 22:39:32 +0000
+
+bind9 (1:9.10.3.dfsg.P4-11.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Disable GOST to prevent ENGINE_by_id failed (crypto failure) in chroot.
+    Patch by Marc Haber <mh+debian-bugs@zugschlus.de> (Closes: #820974).
+
+ -- Arturo Borrero Gonzalez <arturo@debian.org>  Tue, 07 Feb 2017 10:42:00 +0100
+
+bind9 (1:9.10.3.dfsg.P4-11) unstable; urgency=medium
+
+  * Fix some lintian warnings.
+  * Add lsb-base dependency to lwresd (closes: #848519).
+  * Fix CVE-2016-2775: crash in lwresd due to a long query name
+    (closes: #831796).
+  * Fix CVE-2016-2776: maliciously crafted query can cause named to crash
+    (closes: #839010).
+  * Fix CVE-2016-8864: incorrect handling of a DNAME record can cause
+    named to crash (closes: #842858).
+  * Fix CVE-2016-9131: maliciously crafted response to an ANY query can
+    cause named to crash (closes: #851065).
+  * Fix CVE-2016-9147: query with contradictory DNSSEC information can
+    cause named to crash (closes: #851063).
+  * Fix CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS)
+    record can cause named to crash (closes: #851062).
+  * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now
+    (closes: #828082).
+
+  [ LaMont Jones ]
+  * Update VCS fields in control.
+  * -DDIG_SIGCHASE got dropped by the change in hardening.
+
+  [ Stefan Bader ]
+  * Use the defaults file in systemd.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 19 Jan 2017 04:03:28 +0000
+
+bind9 (1:9.10.3.dfsg.P4-10.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Add explicit ordering for nss-lookup.target in bind9.service,
+    lwresd.service. Patches by Michael Biebl <biebl@debian.org>.
+    (Closes: #826243, #826245)
+
+ -- Christian Hofstaedtler <zeha@debian.org>  Sat, 02 Jul 2016 14:32:50 +0200
+
+bind9 (1:9.10.3.dfsg.P4-10) unstable; urgency=medium
+
+  * Use python3
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 03 May 2016 17:39:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-9) unstable; urgency=medium
+
+  * Fix bad patch from when we switched to quilt.  Closes: #820847  LP:
+    #1552801, #1549788, #1553460
+  * freshen patch to remove fuzz.
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 26 Apr 2016 15:17:58 -0600
+
+bind9 (1:9.10.3.dfsg.P4-8) unstable; urgency=medium
+
+  [Timo Aaltonen]
+
+  * Fix bind9-resolvconf.service installation.
+  * Add support for native pkcs11.  LP: #1565392
+
+  [Samuel Thibault]
+
+  * Detect in6_pktinfo on hurd-i386.  Closes: #820404
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 13 Apr 2016 13:19:37 -0600
+
+bind9 (1:9.10.3.dfsg.P4-7) unstable; urgency=medium
+
+  * Fix libisccc-export dependencies.  Closes: #820043
+
+ -- Michael Gilbert <mgilbert@debian.org>  Tue, 05 Apr 2016 02:53:22 +0000
+
+bind9 (1:9.10.3.dfsg.P4-6) unstable; urgency=medium
+
+  * Upload 9.10 to unstable.  Closes: #781739
+  * Add -DNO_VERSION_DATE to CFLAGS.  Closes: #783885
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 04 Apr 2016 00:39:57 +0000
+
+bind9 (1:9.10.3.dfsg.P4-5) experimental; urgency=medium
+
+  * Drop dead code in bind9.preinst.
+  * move from /var/run to /run for policy.
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2016 19:52:04 -0600
+
+bind9 (1:9.10.3.dfsg.P4-4) experimental; urgency=medium
+
+  * use multiarch path in udebs
+  * Updated root cache file.  Closes: #806954
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 18 Mar 2016 20:50:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-3) experimental; urgency=medium
+
+  * Fix vcs links
+  * build in debian/tmp, use bind9.install
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 18 Mar 2016 14:46:30 -0600
+
+bind9 (1:9.10.3.dfsg.P4-2) experimental; urgency=medium
+
+  * updated precise_time patch
+  * add RT#s to some patches
+  * Merge ubuntu changes
+  * Fix debian/rules to properly remove files from bind9 that are delivered
+    elsewhere.  LP: #1559090
+
+ -- LaMont Jones <lamont@canonical.com>  Fri, 18 Mar 2016 10:58:07 -0600
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu2) xenial; urgency=medium
+
+  * Bump debhelper to v9 to use dh-exec.
+  * libbind-export-dev: Fix the libbind.so symlink.
+  * Move static libs to the multiarch libdir again.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 18 Mar 2016 13:30:03 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu1) xenial; urgency=medium
+
+  * Fix udeb dependencies.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 18 Mar 2016 12:47:02 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1) experimental; urgency=medium
+
+  [ ISC ]
+  * New upstream: 9.10.3-P3
+    - Specific APL data could trigger a INSIST.  (CVE-2015-8704) [RT #41396]
+    - render_ecs errors were mishandled when printing out a OPT record
+      resulting in a assertion failure.  (CVE-2015-8705) [RT #41397]
+    - Fixed a regression in resolver.c:possibly_mark() which caused
+      known-bogus servers to be queried anyway. [RT #41321]
+  * New upstream: 9.10.3-P4
+    - Malformed control messages can trigger assertions in named and rndc.
+      (CVE-2016-1285) [RT #41666]
+    - Fix resolver assertion failure due to improper DNAME handling when
+      parsing fetch reply messages. (CVE-2016-1286) [RT #41753]
+    - Duplicate EDNS COOKIE options in a response could trigger an
+      assertion failure. (CVE-2016-2088) [RT #41809]
+
+  [LaMont Jones]
+
+  * Do not build -export libs for libbind90 and liblwres.  Relates in part
+    to, and is the last fix to LP: #1551351
+  * update patches for 9.10.3.dfsg.P4.  Drop 50_CVE_2015-8704.diff
+
+  [ Stefan Bader ]
+
+  * Do not modify signal handlers for external apps. LP: #1556175
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 17 Mar 2016 14:53:36 -0600
+
+bind9 (1:9.10.3.dfsg.P2-7) experimental; urgency=medium
+
+  * Fix my bad merge of autoreconf workaround.
+  * Re-implement -export libraries.  LP: #1556175
+  * Deliver libisccc-export library.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 16 Mar 2016 15:14:48 -0600
+
+bind9 (1:9.10.3.dfsg.P2-5) experimental; urgency=medium
+
+  [Timo Aaltonen]
+
+  * Sync 30_dynamic_db.diff from Fedora.
+  * rules: Backup some files which dh_autoreconf_clean would remove, restore
+    on clean.
+
+  [Jamie Strandboge]
+
+  * apparmor: use @{PROC} instead of /proc, allow read on
+    sys.net.ipv4.ip_local_port_range.  LP: #1552441
+
+  [LaMont Jones]
+
+  * Return nanosecond-precise time for files, so that we more-correctly know
+    when we can skip loading a zonefile.  (Bug introduced 9.9.3b2)
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 03 Mar 2016 18:17:06 -0700
+
+bind9 (1:9.10.3.dfsg.P2-4) experimental; urgency=medium
+
+  [Matthias Klose]
+
+  * Fix .so symlinks.
+  * libbind-dev: Depend on libirs141.
+  * For the udeb's, use a separate build with a reduced feature set, drop the
+    name difference, and do both builds in a separate directory.
+
+  [Filip Pytloun]
+
+  * Add apparmor rules needed by freeipa-server.  Closes: #814314
+
+  [LaMont Jones]
+
+  * Do not deliver libraries (left in /lib) as part of bind9.  LP: #1547052
+  * clean up library path for libirs.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 19 Feb 2016 14:26:08 -0700
+
+bind9 (1:9.10.3.dfsg.P2-3ubuntu3) xenial; urgency=medium
+
+  * For the udeb's, use a separate build with a reduced feature set.
+  * Don't call the reduced build "export"; it was used by isc-dhcp as well.
+  * Do both builds in a separate builddir.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu2) xenial; urgency=medium
+
+  * libbind-dev: Depend on libirs141.
+  * Ship libirs.{a,so} in libbind-dev.
+  * Remove obsolete debian/*.dirs files.
+
+ -- Matthias Klose <doko@ubuntu.com>  Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu1) xenial; urgency=medium
+
+  * Fix .so symlinks.
+
+ -- Matthias Klose <doko@ubuntu.com>  Thu, 18 Feb 2016 13:55:19 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3) experimental; urgency=medium
+
+  [Marc Deslauriers]
+
+  * SECURITY UPDATE: denial of service via string formatting operations.
+    CVE-2015-8704
+
+  [Matthias Klose]
+
+  * Add multiarch support.  Closes: #802584.
+  * Standards cleanup.
+
+  [LaMont Jones]
+
+  * Properly finish converting to 3.0 (quilt) format.
+  * Drop geoip_acl patch temporarily while we evaluate the upstream geoip
+    changes.
+  * Prechroot init appears to have been taken upstream.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Feb 2016 10:34:24 -0700
+
+bind9 (1:9.10.3.dfsg.P2-1) experimental; urgency=medium
+
+  * New upstream, no need for export packages with 9.10
+  * Fix sonames
+  * Update how we do hardening.
+  * Add Robie Basak as an uploader
+  * Migrate quilt patches from 9.9.5 branch, and incorporate Michael Gilbert's
+    changes.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 31 Dec 2015 18:41:31 -0700
+
+bind9 (1:9.9.5.dfsg-12.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Add patch to fix CVE-2015-8000.
+    CVE-2015-8000: Insufficient testing when parsing a message allowed
+    records with an incorrect class to be accepted, triggering a REQUIRE
+    failure when those records were subsequently cached. (Closes: #808081)
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 16 Dec 2015 15:01:39 +0100
+
+bind9 (1:9.9.5.dfsg-12) unstable; urgency=high
+
+  * Fix CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 03 Sep 2015 01:16:32 +0000
+
+bind9 (1:9.9.5.dfsg-11) unstable; urgency=high
+
+  * Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit
+    (closes: #793903).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Wed, 29 Jul 2015 23:46:48 +0000
+
+bind9 (1:9.9.5.dfsg-10) unstable; urgency=high
+
+  * Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can
+    cause the resolver to crash (closes: #791715).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 09 Jul 2015 00:43:38 +0000
+
+bind9 (1:9.9.5.dfsg-9) unstable; urgency=high
+
+  * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only
+    affecting setups using DNSSEC (closes: #778733).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 19 Feb 2015 03:42:21 +0000
+
+bind9 (1:9.9.5.dfsg-8) unstable; urgency=medium
+
+  * Launch rndc command in the background in networking scripts to avoid a
+    hang in named from bringing down the entire network (closes: #760555).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 01 Jan 2015 17:51:52 +0000
+
+bind9 (1:9.9.5.dfsg-7) unstable; urgency=medium
+
+  * Fix CVE-2014-8500: limit recursion in order to avoid memory consuption
+    issues that can lead to denial-of-service (closes: #772610).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 14 Dec 2014 05:05:48 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+  * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+  * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium
+
+  * Avoid libnsl dependency on non-linux architectures.  Closes: #766430
+  * Install export libraries to /lib instead of /usr/lib.  Closes: #766544
+  * Add myself to the maintainer team with approval from LaMont and Bdale.
+
+ -- Michael Gilbert <mgilbert@debian.org>  Thu, 30 Oct 2014 02:42:17 +0000
+
+bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Mark critical section as not parallel in the makefile.  Closes: #762766
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 13 Oct 2014 04:37:55 +0000
+
+bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix intermittent parallel build failure.  Closes: #762766
+  * Set -fno-delete-null-pointer-checks.  Closes: #750760
+  * Use separate packages for the udebs.  Closes: #762762
+  * Don't install configuration files to /usr.  Closes: #762948
+
+ -- Michael Gilbert <mgilbert@debian.org>  Mon, 06 Oct 2014 01:23:57 +0000
+
+bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Add support for hurd.  Closes: #746540
+  * Provide shared libraries for isc-dhcp.  Closes: #656150
+
+ -- Michael Gilbert <mgilbert@debian.org>  Sun, 14 Sep 2014 00:58:06 +0000
+
+bind9 (1:9.9.5.dfsg-4) unstable; urgency=low
+
+  [Julien Cristau]
+
+  * FTBFS on kfreebsd.  Closes: #741285
+
+  [LaMont Jones]
+
+  * revert aclocal.m4 expansion from earlier merge
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 29 Apr 2014 14:48:50 -0600
+
+bind9 (1:9.9.5.dfsg-3) unstable; urgency=low
+
+  * Re-enable rrl (now a configure option).  Closes: #741059 LP: #1288823
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 24 Mar 2014 06:55:55 -0600
+
+bind9 (1:9.9.5.dfsg-2) unstable; urgency=low
+
+  * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3
+  * move dnssec-coverage to bind9utils.  Closes: #739994
+  * dnssec-{checkds,verify} manpages in wrong package.  Closes: #739995
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 26 Feb 2014 09:30:31 -0700
+
+bind9 (1:9.9.5.dfsg-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream version: 9.9.5  Closes: #735190
+
+  [Martin Nagy]
+
+  * dynamic loading of database backends. See:
+    http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch. 
+    Closes: #722669
+
+  [LaMont Jones]
+
+  * fix sonames
+  * merge ubuntu changes
+  * Deliver dns/rrl.h.  Closes: #724844
+  * rules tweak to make backports to pre-dh-systemd releases easier
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 11 Feb 2014 09:16:05 -0700
+
+bind9 (1:9.9.4.dfsg-0.3) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Upstream version 9.9.4
+
+  [LaMont Jones]
+
+  * fix sonames
+  * merge ubuntu change
+  * Deliver dns/rrl.h.  Closes: #724844
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 06 Nov 2013 13:27:37 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu3) trusty; urgency=low
+
+  * SECURITY UPDATE: denial of service when processing NSEC3-signed zone
+    queries
+    - debian/patches/CVE-2014-0591.patch: don't call memcpy with
+      overlapping ranges in bin/named/query.c.
+    - patch backported from 9.9.4-P2.
+    - CVE-2014-0591
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Jan 2014 09:36:55 -0500
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu2) trusty; urgency=medium
+
+  * Use dh-autoreconf to update libtool and configure for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com>  Wed, 18 Dec 2013 04:42:22 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu1) saucy; urgency=low
+
+  * Use dh_autotools-dev to update config.{sub,guess} for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com>  Mon, 07 Oct 2013 23:09:45 -0600
+
+bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low
+
+  [Peter Marschall]
+
+  * If rndc.conf exists, skip creation of rndc.key.  Closes: #620394
+
+  [Al Tarakanoff]
+
+  * properly quote check of pid in bind9 init.d.  LP: #1092243
+
+  [LaMont Jones]
+
+  * include distro and package version in version string
+  * apparmor: allow GeoIP data file access.  LP: #834901
+  * enable filter-aaaa.  Closes: #701704  LP: #1115168
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 29 Aug 2013 16:22:29 -0600
+
+bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low
+
+  [Michael Stapelberg]
+
+  * add systemd service file.  Closes: #718212
+
+  [LaMont Jones]
+
+  * deliver more dnssec-* tools in bind9utils.  Closes: #713026
+  * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025
+  * deliver rrl.h and stat.h Closes: #692483, #720813
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 27 Aug 2013 10:06:37 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2build1) saucy; urgency=low
+
+  [Marc Deslauriers]
+
+  * 9.9.2.dfsg.P1-2ubuntu1: fixed in 9.9.3b1
+  * 9.9.2.dfsg.P1-2ubuntu3: fixed in 9.9.3-P2
+
+  [Robie Basak]
+
+  * 9.9.2.dfsg.P1-2ubuntu2: fixed in 9.9.3b1
+
+  [LaMont Jones]
+
+  * Merge ubuntu changes, except: autoconf files are generated as part
+    of the source packagee creation, not on the build host.  NAK
+  * deliver more dnssec-* tools in bind9utils.  Closes: #713026
+  * support parallel=N DEB_BUILD_OPTIONS, fix -j build
+
+  [Michael Stapelberg]
+
+  * add systemd service file.  Closes: #718212
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 22 Aug 2013 10:57:17 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low
+
+  * ack NMUs of 9.8.4
+    - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689,
+      CVE-2013-2266
+    - deliver rrl.h
+
+  [LaMont Jones]
+
+  * Use ISC's bin/tests
+  * Diff cleanup and rationalization to 9.9.3 upstream
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 17 Aug 2013 07:09:54 -0600
+
+bind9 (1:9.9.3.dfsg.P2-1) unstable; urgency=low
+
+
+  [Internet Software Consortium, Inc]
+
+  * 9.9.3-P2
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+  [LaMont Jones]
+
+  * soname changes
+
+  [Paul Vixie]
+
+  * Reapply rpz/rrl patches from http://www.redbarn.org/dns/ratelimits
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 14 Aug 2013 10:38:59 -0600
+
+bind9 (1:9.9.2.dfsg.P1-3) experimental; urgency=low
+
+  [LaMont Jones]
+  
+  * Merge 1:9.8.4.dfsg.P1-6
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 04 Mar 2013 09:30:50 -0700
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu3) saucy; urgency=low
+
+  * SECURITY UPDATE: denial of service via incorrect bounds checking on
+    private type 'keydata'
+    - lib/dns/rdata/generic/keydata_65533.c: check for correct length.
+    - Patch backported from 9.9.3-P2
+    - CVE-2013-4854
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Sun, 28 Jul 2013 10:13:06 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu2) raring; urgency=low
+
+  * configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475). 
+  * debian/control: add Build-Depends on dh-autoreconf.
+  * debian/rules: use dh_autoreconf and dh_autoreconf_clean.
+
+ -- Robie Basak <robie.basak@canonical.com>  Wed, 10 Apr 2013 16:50:28 +0000
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu1) raring; urgency=low
+
+  * SECURITY UPDATE: denial of service via regex syntax checking
+    - configure,configure.in,config.h.in: remove check for regex.h to
+      disable regex syntax checking.
+    - CVE-2013-2266
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 28 Mar 2013 15:04:57 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low
+
+  [Michael Gilbert]
+
+  * Use /var/lib/bind for state file.  Closes: #689332
+
+  [LaMont Jones]
+
+  * zone transfers now involve link(), update the apparmor profile
+  * Update db.root with new IP for D.root-servers.net.  Closes: #697352
+  * re-drop dlzexternal test
+  * Reduce log level for "sucessfully validated after lower casing" dnssec
+    based on mail from Mark Andrews.  Closes: #697681
+  * remove /var/lib/bind/bind9-default.md5sum in postrm
+  * remove /etc/bind/named.conf.options on purge.  Closes: #668801
+
+  [Sebastian Wiesinger]
+
+  * Build and deliver dnssec-checkds and dnssec-verify in bind9utils
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 09 Jan 2013 10:09:40 -0700
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * CVE-2013-4854: A specially crafted query that includes malformed rdata can
+    cause named to terminate with an assertion failure while rejecting the
+    malformed query. (Closes: #717936).
+
+ -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 27 Jul 2013 10:24:07 +0200
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Install /usr/include/dns/rrl.h (closes: #699834).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Tue, 16 Apr 2013 01:59:05 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA
+    lookup for a record with an A record overwrite rule in a Response Policy
+    Zone (closes: #699145).
+  * Fix cve-2013-2266: issues in regular expression handling (closes: #704174).
+
+ -- Michael Gilbert <mgilbert@debian.org>  Fri, 29 Mar 2013 00:47:25 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low
+
+  [Ben Hutchings]
+
+  * Initialise OpenSSL before calling chroot().  Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 01 Mar 2013 08:23:27 -0700
+
+bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern]
+    - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch.
+
+  [Paul Vixie]
+
+  * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits. 
+    Closes: #698641
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 30 Jan 2013 14:04:35 -0700
+
+bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high
+
+  * The rest of the dnssec validation logspam removal.  Closes: #697681
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 21 Jan 2013 13:18:53 -0700
+
+bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low
+
+  [Marc Deslauriers]
+
+  * debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+  [LaMont Jones]
+
+  * Reduce log level for "sucessfully validated after lower casing" dnssec
+    based on mail from Mark Andrews.  Closes: #697681
+  * remove /var/lib/bind/bind9-default.md5sum in postrm
+  * remove /etc/bind/named.conf.options on purge.  Closes: #668801
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 09 Jan 2013 09:47:24 -0700
+
+bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low
+
+  * Named could die on specific queries with dns64 enabled.
+    [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+    CVE-2012-5688  Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 05 Dec 2012 05:27:18 -0700
+
+bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low
+
+  [Michael Gilbert]
+
+  * Use /var/lib/bind for state file.  Closes: #689332
+
+  [LaMont Jones]
+
+  * Re-enable dlopen, do not build the test that fails.  Closes: #692416
+  * Update db.root with new IP for D.root-servers.net.  Closes: #697352
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 07 Jan 2013 06:50:25 -0700
+
+bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low
+
+  * Named could die on specific queries with dns64 enabled.
+    [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+    CVE-2012-5688  Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 05 Dec 2012 05:22:06 -0700
+
+bind9 (1:9.9.2.dfsg-1) experimental; urgency=low
+
+  [Matthew Grant]
+
+  * Turn off dlopen as it was causing test compile failures.
+  * Add missing library .postrm files for debhelper
+
+  [LaMont Jones]
+
+  * New upstream version 9.9.2
+  * soname fixes
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 01 Nov 2012 08:59:57 -0600
+
+bind9 (1:9.9.1.dfsg.P1-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * New upstream 9.9.1-P1
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 13 Jun 2012 08:22:15 -0600
+
+bind9 (1:9.9.0.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.9.0 release
+
+  [Christoph Egger]
+
+  * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201
+
+  [LaMont Jones]
+
+  * chmod typo in postinst.  LP: #980798
+  * Correctly order debhelper bits in postrm.  Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 23 Apr 2012 09:52:51 -0600
+
+bind9 (1:9.9.0.dfsg~rc4-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream release
+
+  [LaMont Jones]
+
+  * soname changes for new release
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 17 Feb 2012 17:51:39 -0700
+
+bind9 (1:9.8.4.dfsg-1ubuntu2) raring; urgency=low
+
+  * SECURITY UPDATE: denial of service via DNS64 and crafted query
+    - bin/named/query.c: init rdataset before cleanup.
+    - Patch backported from 9.8.4-P1
+    - CVE-2012-5688
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 05 Dec 2012 15:42:08 -0500
+
+bind9 (1:9.8.4.dfsg-1ubuntu1) raring; urgency=low
+
+  * Merge from Debian unstable. Remaining changes:
+    - debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 23 Nov 2012 08:13:50 -0500
+
+bind9 (1:9.8.4.dfsg-1) unstable; urgency=low
+
+  [Matthew Grant]
+
+  * Turn off dlopen as it was causing test compile failures.
+  * Add missing library .postrm files for debhelper
+
+  [LaMont Jones]
+
+  * New upstream version
+  * soname fixup
+  * Ack NMUs
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 29 Oct 2012 08:37:49 -0600
+
+bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low
+
+  * Non-maintainer upload.
+  * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing
+    the patch.
+
+ -- Philipp Kern <pkern@debian.org>  Sat, 03 Nov 2012 20:43:43 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium
+
+  [ Philipp Kern ]
+  * Non-maintainer upload.
+
+  [ Marc Deslauriers ]
+  * SECURITY UPDATE: denial of service via specific combinations of RDATA
+    - bin/named/query.c: fix logic
+    - Patch backported from 9.8.3-P4
+    - CVE-2012-5166
+
+ -- Philipp Kern <pkern@debian.org>  Sun, 28 Oct 2012 20:28:11 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Fix denial of service vulnerability triggered
+    through an assert because of using bad cache
+    (CVE-2012-3817; Closes: #683259).
+
+ -- Nico Golde <nion@debian.org>  Mon, 30 Jul 2012 20:56:10 +0200
+
+bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * SECURITY UPDATE: ghost domain names attack
+    - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
+      of the old NS RRset when replacing it.
+    - Patch backported from 9.8.2.
+    - CVE-2012-1033
+  * SECURITY UPDATE: denial of service via zero length rdata handling
+    - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
+      duplicate rdata.
+    - Patch backported from 9.8.3-P1.
+    - CVE-2012-1667
+
+ -- Luk Claes <luk@debian.org>  Wed, 20 Jun 2012 15:26:09 -0400
+
+bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low
+
+  [Christoph Egger]
+
+  * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201
+
+  [LaMont Jones]
+
+  * chmod typo in postinst.  LP: #980798
+  * Correctly order debhelper bits in postrm.  Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 Apr 2012 12:09:24 -0600
+
+bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low
+
+  [Zlatan Todoric]
+
+  * fixed Serbian latin translation of debconf template.  Closes: #634951
+
+  [Peter Eisentraut]
+
+  * Add support for "status" action to lwresd init script.  Closes: #651540
+
+  [Bjørn Steensrud]
+
+  * NB Translations.  Closes: #654454
+
+  [LaMont Jones]
+
+  * Default to run_resolvconf=false.  LP: #933723
+  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202
+  * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb. 
+    Closes: #620007  LP: #681536
+  * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
+    LP: #929563
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 17 Feb 2012 14:40:29 -0800
+
+bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low
+
+  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 25 Jan 2012 03:55:21 -0700
+
+bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.8.1-P1
+    -  Cache lookup could return RRSIG data associated with nonexistent
+       records, leading to an assertion failure.
+
+  [LaMont Jones]
+
+  * add a readme entry for DNSSEC-by-default
+  * Failed to install due to chgrp on non-existant directory.  Closes: #647598
+  * ack NMU: l10n issues
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Jan 2012 10:44:14 -0700
+
+bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Fix pending l10n issues. Debconf translations:
+    - Danish (Joe Hansen).  Closes: #619302
+    - Korean (강민지).  Closes: #632006, #632016
+    - Serbian (FULL NAME).  Closes: #634886
+
+ -- Christian Perrier <bubulle@debian.org>  Sat, 03 Dec 2011 17:22:12 +0100
+
+bind9 (1:9.8.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream release
+
+  [LaMont Jones]
+
+  * cleanup the messages around killing named
+  * enable dnssec validation: deliver named.conf.options outside of
+    conffiledom, and update if able, complain and do not update if not
+    Closes: #516979
+  * typo in min-ncache-ttl processing
+  * disable dlz until we get a patch to make it build again
+
+  [Jay Ford]
+
+  * Fix "waiting for pid $pid to die" loop to not be infinite.  Closes: #570852
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 01 Nov 2011 16:39:19 -0600
+
+bind9 (1:9.8.0.dfsg.P1-0) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.8.0-P1
+
+  [LaMont Jones]
+
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 May 2011 03:46:22 -0600
+
+bind9 (1:9.7.4.dfsg-0) unstable; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 21 Aug 2011 04:43:16 -0600
+
+bind9 (1:9.7.3.dfsg-1ubuntu4) oneiric; urgency=low
+
+  * debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)
+
+ -- Martin Pitt <martin.pitt@ubuntu.com>  Thu, 14 Jul 2011 15:15:45 +0200
+
+bind9 (1:9.7.3.dfsg-1ubuntu3) oneiric; urgency=low
+
+  * SECURITY UPDATE: denial of service via specially crafted packet
+    - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache,
+      nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute
+      flag to indicate negative-cache records rather than using rrtype 0.
+    - Patch backported from 9.7.3-P3.
+    - CVE-2011-2464
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 05 Jul 2011 08:33:30 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2.1) natty-security; urgency=low
+
+  * SECURITY UPDATE: denial of service via off-by-one
+    - lib/dns/ncache.c: correctly validate length.
+    - Patch backported from 9.7.3-P1.
+    - CVE-2011-1910
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 27 May 2011 12:50:40 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2) natty; urgency=low
+
+  * debian/rules, configure, contrib/dlz/config.dlz.in: use
+    DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS.
+    (LP: #745642)
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 30 Mar 2011 10:19:37 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu1) natty; urgency=low
+
+  * debian/bind9-default.md5sum:
+    - updated to reflect the default md5sum in maverick and natty, this
+      avoids a bogus /etc/default/bind9.dpkg-dist file
+      (LP: #556332)
+
+ -- Michael Vogt <michael.vogt@ubuntu.com>  Tue, 29 Mar 2011 10:13:11 +0200
+
+bind9 (1:9.7.3.dfsg-1) unstable; urgency=low
+
+  [Peter Palfrader]
+
+  * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+    db.
+
+  [Internet Systems Consortium, Inc]
+
+  * 9.7.3 - Closes: #612287
+
+  [Mahyuddin Susanto]
+
+  * Updated Indonesian debconf templates.  Closes: #608559
+
+  [LaMont Jones]
+
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 23 Feb 2011 09:14:36 -0700
+
+bind9 (1:9.7.3.dfsg~rc1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * New upstream
+
+  [Peter Palfrader]
+
+  * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+    db.
+
+  [Mahyuddin Susanto]
+
+  * Updated Indonesian debconf templates.  Closes: #608559
+
+  [LaMont Jones]
+
+  * soname changes for new upstream
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 04 Feb 2011 21:20:05 -0700
+
+bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high
+
+  [ISC]
+  * Fix denial of service via ncache entry and a rrsig for the
+    same type (CVE-2010-3613)
+  * answers were incorrectly marked as insecure during key algorithm
+    rollover (CVE-2010-3614)
+  * Using "allow-query" in the "options" or "view" statements to
+    restrict access to authoritative zones had no effect.
+    (CVE-2010-3615)
+
+  [LaMont Jones]
+
+  * Adjust indentation for dpkg change.  Closes: #597171
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 01 Dec 2010 16:32:48 -0700
+
+bind9 (1:9.7.2.dfsg.P2-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * Adjust indentation for dpkg change.  Closes: #597171
+  * acknowledge and incorporate ubuntu change.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 26 Nov 2010 05:18:43 -0700
+
+bind9 (1:9.7.2.dfsg.P2-2ubuntu1) natty; urgency=low
+
+  [ Andres Rodriguez ]
+  * Add apport hook (LP: #533601):
+    - debian/bind9.apport: Added.
+
+  [ Martin Pitt ]
+  * debian/rules: Install Apport hook when building on Ubuntu.
+
+ -- Martin Pitt <martin.pitt@ubuntu.com>  Fri, 26 Nov 2010 10:50:17 +0100
+
+bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low
+
+  [Roy Jamison]
+
+  * lib/isc/unix/resource.c was missing inttypes.h include.  LP: #674199
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Nov 2010 10:52:32 -0700
+
+bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low
+
+  [Joe Dalton]
+
+  * Add Danish translation of debconf templates.  Closes: #599431
+
+  [Internet Software Consortium, Inc]
+
+  * v9.7.2-P2
+
+  [José Figueiredo]
+
+  * Add Brazilian Portuguese debconf templates translation.  Closes: #597616
+
+  [LaMont Jones]
+
+  * drop this v3 (quilt) source format idea.  Closes: #589916
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 10 Oct 2010 19:01:57 -0600
+
+bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low
+
+  * Correct conflicts for bind9-host
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 16 Jul 2010 05:24:38 -0600
+
+bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Temporarily and partially disable change 2864 because it would cause
+    inifinite attempts of RRSIG queries.  This is an urgent care fix; we'll
+    revisit the issue and complete the fix later.  [RT #21710]
+  * Temporarially rollback change 2748. [RT #21594]
+  * Named failed to accept uncachable negative responses from insecure zones.
+    [RT# 21555]
+
+  [LaMont Jones]
+
+  * freshen copyright file
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 15 Jul 2010 15:07:54 -0600
+
+bind9 (1:9.7.1.dfsg.0-1) unstable; urgency=low
+
+  * Repack to drop zkt/doc/{draft,rfc}*  Closes: #588055
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 05 Jul 2010 07:21:34 -0600
+
+bind9 (1:9.7.1.dfsg-2) unstable; urgency=low
+
+  [Regid Ichira]
+
+  * explicitly add nsupdate to dynamic updates in README.Debian. 
+    Closes: #577398
+
+  [LaMont Jones]
+
+  * Cleanup bind9-host description.  Closes: #579421
+  * switch to 3.0 (quilt) source format, but not to quilt.  Closes: #578210
+
+  [Stephen Gran]
+
+  * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley
+    <warthog9@eaglescrag.net>.  Closes: #584603
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 02 Jul 2010 08:19:29 -0600
+
+bind9 (1:9.7.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.1
+
+  [LaMont Jones]
+
+  * Add freebsd support.  Closes: #578447
+  * soname changes
+  * freshen root cache.  LP: #596363
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 21 Jun 2010 09:53:30 -0600
+
+bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0-P1
+    - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Mar 2010 08:06:42 -0600
+
+bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low
+
+  [Niko Tyni]
+
+  * fix mips/mipsel startup.  Closes: #516616
+
+  [LaMont Jones]
+
+  * ignore failures due to a lack of /etc/bind/named.conf*.  LP: #422968
+  * ldap API changed regarding % sign.  LP: #227344
+  * Drop more rfc and draft files.  Closes: #572606
+  * update config.guess, config.sub.  Closes: #572528
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Mar 2010 14:56:08 -0700
+
+bind9 (1:9.7.0.dfsg-2) unstable; urgency=low
+
+  [Aurelien Jarno]
+
+  * kfreebsd has linux threads.  Closes: #470500
+
+  [LaMont Jones]
+
+  * do not error out on initial install.  Closes: #572443
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 04 Mar 2010 09:32:13 -0700
+
+bind9 (1:9.7.0.dfsg-1) unstable; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Feb 2010 14:53:36 -0700
+
+bind9 (1:9.7.0.dfsg~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Jan 2010 05:46:50 -0700
+
+bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low
+
+  * merge changes from 9.6.1.dfsg.P2-1
+  * meta: drop verisoned depends from library packages, for less upgrade pain
+  * apparmor: allow named to create /var/run/named/session.key
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Dec 2009 11:46:17 -0700
+
+bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0b3
+
+  [LaMont Jones]
+
+  * Merge remote branch 'origin/master'
+  * soname changes
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Nov 2009 21:07:58 -0700
+
+bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.1-P2
+    - When validating, track whether pending data was from the
+      additional section or not and only return it if validates
+      as secure. [RT #20438] CVE-2009-4022
+
+  [LaMont Jones]
+
+  * prerm: do not stop named on upgrade.  Closes: #542888
+  * Drop some RFCs that crept into the diff.
+  * meta: add ${misc:Depends}
+  * lintian: update config.guess, config.sub in idnkit-1.0 tree
+  * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+  * meta: soname changes
+  * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 27 Nov 2009 10:07:10 -0700
+
+bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low
+
+  * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 17 Nov 2009 22:42:40 -0600
+
+bind9 (1:9.7.0.dfsg~b2-1) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0b2
+
+  [LaMont Jones]
+
+  * /etc/bind/bind.keys need not be executable.
+  * bind9: drop old stale code from postinst
+  * prerm: do not stop named on upgrade.  Closes: #542888
+  * Drop some RFCs that crept into the diff.
+  * meta: add ${misc:Depends}
+  * lintian: update config.guess, config.sub in idnkit-1.0 tree
+  * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 16 Nov 2009 18:53:24 -0700
+
+bind9 (1:9.7.0~a1.dfsg-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.7.0a1
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 24 Jun 2009 15:10:08 -0600
+
+bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low
+
+  * Build-Depend on the fixed libgeoip-dev.  Closes: #540973
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 17 Aug 2009 06:53:11 -0600
+
+bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * reload individual named profile, not all of apparmor.  LP: #412751
+
+  [Guillaume Delacour]
+
+  * bind9 did not purge cleanly.  Closes: #497959
+
+  [LaMont Jones]
+
+  * postinst: do not append a blank line to /etc/default/bind9. 
+    Closes: #541469
+  * init.d stop needs to not error out.  LP: #398033
+  * meta: fix build-depends.  Closes: #539230
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 14 Aug 2009 17:03:31 -0600
+
+bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * A specially crafted update packet will cause named to exit. 
+    CVE-2009-0696, CERT VU#725188.  Closes: #538975
+
+  [InterNIC]
+
+  * Update db.root hints file.
+
+  [LaMont Jones]
+
+  * Move default zone definitions from named.conf to named.conf.default-zones.
+     Closes: #492308
+  * use start-stop-daemon if rndc stop fails.  Closes: #536487
+  * lwresd: pidfile name was wrong in init script.  Closes: #527137
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 28 Jul 2009 22:03:14 -0600
+
+bind9 (1:9.6.1.dfsg-2) unstable; urgency=low
+
+  * ia64: fix atomic.h
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 23 Jun 2009 01:56:35 -0600
+
+bind9 (1:9.6.1.dfsg-1) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.1
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Jun 2009 14:33:20 -0600
+
+bind9 (1:9.6.0.dfsg.P1-3) unstable; urgency=low
+
+  [Martin Zobel-Helas]
+
+  * GEO-IP Patch from
+    git://git.kernel.org/pub/scm/network/bind/bind-geodns.git.  Closes: #395191
+
+  [LaMont Jones]
+
+  * Remove /var/lib/bind on purge.  Closes: #527613
+  * Build-Depend: libdb-dev (>4.6).  Closes: #527877, #528772
+  * init.d: detect rndc errors better.  LP: #380962
+  * init.d: clean up exit status.  Closes: #523454
+  * Enable pkcs11 support, and then Revert - causes assertion failures
+    c.f.: #516552
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Jun 2009 13:58:32 -0600
+
+bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low
+
+  * random_1 broke memory usage assertions.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 23 Apr 2009 05:15:45 -0600
+
+bind9 (1:9.6.0.dfsg.P1-1) experimental; urgency=low
+
+  [Michael Milligan]
+
+  * Add min-cache-ttl and min-ncache-ttl keywords
+
+  [LaMont Jones]
+  
+  * Fix merge errors from 9.6.0.dfsg.P1-0
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 20 Mar 2009 15:50:50 -0600
+
+bind9 (1:9.6.0.dfsg.P1-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.6.0-P1
+
+  [LaMont Jones]
+
+  * meta: fix override disparity
+  * meta: soname package fixups for 9.6.0
+  * meta: update Standards-Version: 3.7.3.0
+  * upstream now uses a bind subdir.  Closes: #212659
+
+  [Sven Joachim]
+
+  * meta: pass host and build into configure for hybrid build machines. 
+    Closes: #515110
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 20 Mar 2009 11:54:55 -0600
+
+bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low
+
+  * package -2 for unstable
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 09:40:18 -0600
+
+bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low
+
+  [Juhana Helovuo]
+
+  * fix atomic operations on alpha.  Closes: #512285
+
+  [Dann Frazier]
+
+  * fix atomic operations on ia64.  Closes: #520179
+
+  [LaMont Jones]
+
+  * build-conflict: libdb4.2-dev.  Closes: #515074, #507013
+
+  [localization folks]
+
+  * l10n: Basque debconf template.  Closes: #516549 (Piarres Beobide)
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 18 Mar 2009 05:30:22 -0600
+
+bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low
+
+  * New upstream patch release
+    - supportable version of fix from 9.5.0.dfsg.P2-5.1
+    - CVE-2009-0025:  Closes: #511936
+    - 2475: Overly agressive cache entry removal.  Closes: #511768
+    - other bug fixes worthy of patch-release inclusion
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 26 Jan 2009 10:33:42 -0700
+
+bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided
+    by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot
+    contacted him. Closes: #496954, #501800.
+  * Remove obsolete dh_installmanpages invocation which was adding
+    unwanted manual pages to bind9. Closes: #486196.
+
+ -- Ben Hutchings <ben@decadent.org.uk>  Fri, 02 Jan 2009 16:51:42 +0000
+
+bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low
+
+  [ISC]
+
+  * 2463: IPv6 Advanced Socket API broken on linux.  LP: #249824
+
+  [Jamie Strandboge]
+
+  * apparmor: add capability sys_resource
+  * apparmor: add krb keytab access.  LP: #277370
+
+  [LaMont Jones]
+
+  * apparmor: allow proc/*/net/if_inet6 read access too.  LP: #289060
+  * apparmor: add /var/log/named/* entries.  LP: #294935
+
+  [Ben Hutchings]
+
+  * meta: Add dependency of bind9 on net-tools (ifconfig used in init script)
+  * meta: Fix bind9utils Depends.
+  * meta: fix typo in package description
+
+  [localization folks]
+
+  * l10n: add polish debconf translations.  Closes: #506856 (L)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 07 Dec 2008 21:03:29 -0700
+
+bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low
+
+  * meta: fix typo in Depends: lsb-base.  Closes: #501365
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 07 Oct 2008 17:20:11 -0600
+
+bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * enable largefile support.  Closes: #497040
+
+  [localization folks]
+
+  * l10n: Dutch translation.  Closes: #499977 (Paul Gevers)
+  * l10n: simplified chinese debconf template.  Closes: #501103 (LI Daobing)
+  * l10n: Update spanish template.  Closes: #493775 (Ignacio Mondino)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 05 Oct 2008 20:20:00 -0600
+
+bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low
+
+  [Kees Cook]
+
+  * debian/{control,rules}: enable PIE hardening (from -1ubuntu1)
+
+  [Nicolas Valcárcel]
+
+  * Add ufw integration (from -1ubuntu2)
+
+  [Dustin Kirkland]
+
+  * use pid file in init.d/bind9 status.  LP: #247084
+
+  [LaMont Jones]
+
+  * dig: add -DDIG_SIGCHASE to compile options.  LP: #257682
+  * apparmor profile: add /var/log/named
+
+  [Nikita Ofitserov]
+
+  * ipv6 support requires _GNU_SOURCE definition.  LP: #249824
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2008 23:08:36 -0600
+
+bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * default to using resolvconf if it is installed
+  * fix sonames and dependencies.  Closes: #149259, #492418
+  * Do not build-depend libcap2-dev on non-linux.  Closes: #493392
+  * drop unused query-loc manpage.  Closes: #492564
+  * lwresd: Deliver /etc/bind directory.  Closes: #490027
+  * fix query-source comment in default install
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0-P2.  Closes: #492949
+
+  [localization folks]
+
+  * l10n: Spanish debconf translation.  Closes: #492425 (Ignacio Mondino)
+  * l10n: Swedish debconf templates.  Closes: #491369 (Martin Ågren)
+  * l10n: Japanese debconf translations.  Closes: #492048 (Hideki Yamane
+    (Debian-JP))
+  * l10n: Finnish translation.  Closes: #490630 (Esko Arajärvi)
+  * l10n: Italian debconf translations.  Closes: #492587 (Alessandro Vietta)
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 02 Aug 2008 14:20:20 -0600
+
+bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
+
+  * Revert "meta: merge the mess of single-lib packages back into one large
+    one." - That way lies madness and pain.
+  * init.d/bind9: implement status function.  LP: #203169
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 21:56:58 -0600
+
+bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low
+
+  * Repackage 9.5.0.dfsg-5 with the -P1 tarball.
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Jul 2008 15:06:07 -0600
+
+bind9 (1:9.5.0.dfsg-5) unstable; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * Randomize UDP query source ports to improve forgery resilience.
+    (CVE-2008-1447)                                                                              
+
+  [LaMont Jones]
+
+  * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean
+  * fix sonames
+  * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf
+  * meta: cleanup libbind9-41 Provides/Conflicts
+  * build: fix sonames for new libraries
+  * postinst: really restart bind/lwresd in postinst
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jul 2008 21:34:18 -0600
+
+bind9 (1:9.5.0.dfsg-4) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+  * lwresd: restart in postinst.  Closes: #486481
+  * meta: merge the mess of single-lib packages back into one large one.
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+  * build: drop .la files.  Closes: #486969
+  * build: drop the extra lib path from the library-package merge
+  * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0
+
+  [localization folks]
+
+  * l10n: German debconf translation.  Closes: #486547 (Helge Kreutzmann)
+  * l10n: Indonesian debconf translations.  Closes: #486503 (Arief S Fitrianto)
+  * l10n: Slovak po-debconf translation Closes: #488905 (helix84)
+  * l10n: Turkish debconf template.  Closes: #486479 (Mert Dirik)
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:22:05 -0600
+
+bind9 (1:9.4.2-12) unstable; urgency=low
+
+  * apparmor: allow bind to create files in /var/{lib,cache}/bind
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Jun 2008 11:17:53 -0600
+
+bind9 (1:9.4.2-11) unstable; urgency=low
+
+  * apparmor: add dnscvsutil package files
+  * lwresd Depends: adduser
+  * control: fix dnsutils description to avoid list reformatting. 
+    Closes: #480317
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 17 Jun 2008 21:30:12 -0600
+
+bind9 (1:9.5.0.dfsg-3) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * bind9utils Depends: libbind9-40.  Closes: #486194
+  * bind9 should not deliver manpages for nonexistant binaries. 
+    Closes: #486196
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf templates translation update.  Closes: #486185
+    (Clytie Siddall)
+  * l10n: Russian debconf templates translation.  Closes: #486191 (Yuri Kozlov)
+  * l10n: Galician debconf template.  Closes: #486215 (Jacobo Tarrio)
+  * l10n: French debconf templates.  Closes: #486325 (CALARESU Luc)
+  * l10n: Czech debconf translation.  Closes: #486337 (Miroslav Kure)
+  * l10n: Updated Portuguese translation.  Closes: #486267 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 15 Jun 2008 18:25:02 -0600
+
+bind9 (1:9.5.0.dfsg-2) unstable; urgency=low
+
+  [Tim Spriggs]
+
+  * init.d: Nexenta has different ifconfig arguments
+
+  [LaMont Jones]
+
+  * templates rework from debian-l10n-english
+  * reload named when an interface goes up or down.  LP: #226495
+  * build: need to create the directories for interface restart triggering
+  * Build-Depends: libcap2-dev.  Closes: #485747
+  * Leave named running during update.  Closes: #453765
+  * Fix path to uname, cleaning up the nexenta checks.
+  * l10n: avoid double-question in templates.
+
+  [localization folks]
+
+  * l10n: Vietnamese debconf translations.  Closes: #483911 (Clytie Siddall)
+  * l10n: Portuguese debconf translations.  Closes: #483872 (Traduz -
+    Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 13 Jun 2008 16:54:42 -0600
+
+bind9 (1:9.5.0.dfsg-1) unstable; urgency=low
+
+  [LaMont Jones]
+
+  * manpages: fix references that should say /etc/bind
+  * meta: build-depend libxml2-dev for statistics support
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 31 May 2008 12:17:21 -0600
+
+bind9 (1:9.5.0.dfsg-0) experimental; urgency=low
+
+  [Internet Software Consortium, Inc]
+
+  * 9.5.0 release
+
+  [LaMont Jones]
+
+  * Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+  * control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  No pgsql or mysql support yet.  LP: #227344
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 29 May 2008 22:05:19 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low
+
+  * build: use the correct directories in dh_shlibdeps invocation
+  * build: turn on dlz.  LP: #227344
+
+ -- LaMont Jones <lamont@ubuntu.com>  Tue, 27 May 2008 21:43:06 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low
+
+  * Upload what will become (maybe an ancestor of) -2 to intrepid.
+    - Only use capabilities if they are present: reprise.  Closes: #360339, #212226
+    - control: fix dnsutils description to avoid list reformatting.  Closes: #480317
+
+ -- LaMont Jones <lamont@ubuntu.com>  Mon, 26 May 2008 11:46:27 -0600
+
+bind9 (1:9.5.0~rc1-1) experimental; urgency=low
+
+  [Patrick Winnertz]
+
+  * postinst: make add debconf support.  Closes: #473460
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: Apparmor force-complain on upgrade without
+    existing profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * bind9utils: fix typos in .install
+  * host: manpage inaccurately describes default query.  LP: #203087
+  * apparmor: add dnscvsutil package files
+  * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1.
+  * soname: libdns41 -> 42
+  * fix typos in debconf patch, #473460
+  * cleanup more files in clean target
+  * lwresd Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 15 May 2008 17:59:54 -0600
+
+bind9 (1:9.5.0~b2-2) experimental; urgency=low
+
+  * meta: add bind9utils binary package, with various useful utilities.  Closes: #151957, #130445, #160483
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 03 Apr 2008 07:01:42 -0600
+
+bind9 (1:9.4.2-10) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * debian/bind9.preinst: AA force-complain on upgrade without existing
+    profile.  LP: #204658
+
+  [LaMont Jones]
+
+  * host: manpage inaccurately describes default query.  LP: #203087
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 08 Apr 2008 22:45:57 -0600
+
+bind9 (1:9.4.2-9) unstable; urgency=low
+
+  * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
+  * apparmor: make profile match README.Debian
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 01 Apr 2008 21:13:05 -0600
+
+bind9 (1:9.4.2-8) unstable; urgency=low
+
+  [ISC]
+
+  * CVE-2008-0122: off by one error in (unused) inet_network function.
+    Closes: #462783  LP: #203476
+
+  [Michael Milligan]
+
+  * Fix min-cache-ttl and min-ncache-ttl keywords
+
+  [Jamie Strandboge]
+
+  * apparmor: force complain-mode for apparmor on certain upgrades.  LP: #203528
+  * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Mar 2008 18:35:15 -0600
+
+bind9 (1:9.4.2-7) unstable; urgency=low
+
+  [Jamie Strandboge]
+
+  * Allow rw access to /var/lib/bind/* in apparmor-profile.  LP: #201954
+
+  [LaMont Jones]
+
+  * Drop root-delegation comments from named.conf.  Closes: #217829, #297219
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2008 09:48:10 -0600
+
+bind9 (1:9.4.2-6) unstable; urgency=low
+
+  * Correct apparmor profile filename.  LP: #200739
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 14:28:01 -0600
+
+bind9 (1:9.4.2-5) unstable; urgency=low
+
+  * add "order random_1" support (return one random RR)
+  * Fix doc pathnames in README.Debian.  Closes: #266891
+  * Add AAAA ::1 entry to db.local.  Closes: #230088
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 10 Mar 2008 13:51:28 -0600
+
+bind9 (1:9.5.0~b2-1) experimental; urgency=low
+
+  [Thiemo Seufer]
+
+  * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64}
+
+  [LaMont Jones]
+
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * manpages: fix typo errors.  Closes: #395834
+  * Makefile.in: be explicit about library paths
+  * build: Turn on GSS-TSIG support.  LP: #158197
+  * build: soname changes
+  * db.root: include AAAA RRs.  Closes: #464111
+  * soname: lib{dns,isc}40 -> 41
+  * meta: use binary:Version instead of Source-Version
+
+  [Andreas John]
+
+  * Only use capabilities if they are present.  Closes: #360339, #212226
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 23 Feb 2008 08:06:17 -0700
+
+bind9 (1:9.4.2-4) unstable; urgency=low
+
+  * incorporate ubuntu apparmor change from Jamie Strandboge,
+    with changes:
+    - Add apparmor profile, reload apparmor profile on config
+    - Add a note about apparmor to README.Debian
+    - conflicts/replaces old apparmor versions
+  * db.root: include AAAA RRs.  Closes: #464111
+  * Don't die when /var/lib/bind already exists.  LP: #191685
+  * build: turn on optimization.  Closes: #435194
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 22 Feb 2008 22:05:25 -0700
+
+bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low
+
+  * add AppArmor profile
+    + debian/apparmor-profile
+    + debian/bind9.postinst: Reload AA profile on configuration
+  * updated debian/README.Debian for note on AppArmor
+  * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we
+    should now take control
+  * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4
+    to make sure that if earlier version of apparmor-profiles gets installed
+    it won't overwrite our profile
+  * Modify Maintainer value to match the DebianMaintainerField
+    specification.
+
+ -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 13 Feb 2008 17:30:45 +0000
+
+bind9 (1:9.4.2-3) unstable; urgency=low
+
+  * don't run rndc-confgen when it's not there.  Closes: #459551
+  * control: drop use of ${Source-Version}
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 07 Jan 2008 10:16:06 -0700
+
+bind9 (1:9.4.2-2) unstable; urgency=low
+
+  * init.d: add --oknodo to start-stop-daemon.  Closes: #411881
+  * init: LSB dependency info.  Closes: #459421, #448006
+  * meta: bind9 Suggests: resolvconf.  Closes: #252285
+  * bind9: deliver /var/lib/bind directory, and document.
+    Closes: #248771, #200253, #202981, #209022
+  * lwresd: create bind user/group and rndc key if needed, at install.
+    Closes: #190742
+  * dnsutils: update long description.  Closes: #236901
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 06 Jan 2008 12:25:31 -0700
+
+bind9 (1:9.4.2-1) unstable; urgency=low
+
+  [Mike O'Connor]
+
+  * bind9.init: LSB compliance.  Closes: #448006
+
+  [Internet Software Consortium, Inc]
+
+  * New release: 9.4.2
+
+  [LaMont Jones]
+
+  * soname shifts for new release
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 17 Nov 2007 10:50:07 -0700
+
+bind9 (1:9.4.2~rc2-1) experimental; urgency=low
+
+  * New upstream release
+
+ -- LaMont Jones <lamont@debian.org>  Fri, 12 Oct 2007 18:33:57 -0600
+
+bind9 (1:9.4.1-P1-4) unstable; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148  LP: #160176
+  * init.d: if there are no networks configured, error out quickly
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 08 Nov 2007 21:31:55 -0700
+
+bind9 (1:9.4.1-P1-3) unstable; urgency=low
+
+  * Only deliver upstream changes with bind9-doc
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 04 Oct 2007 08:30:55 -0600
+
+bind9 (1:9.4.1-P1-2) unstable; urgency=low
+
+  * manpages: fix typo errors.  Closes: #395834
+  * manpages: call it /etc/bind/named.conf throughout, and typos.  Closes: #419750
+  * named.conf.5: correct filename.  Closes: #428015
+  * bind9.NEWS: update version for ACL change doc.  Closes: #435225
+  * build: don't have dnsutils deliver man pages that it shouldn't.  LP: #82178
+  * nslookup.1: some of the manpage was not visible.  LP: #131415
+  * document git repositories
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 03 Oct 2007 01:10:59 -0600
+
+bind9 (1:9.4.1-P1-1) unstable; urgency=high
+
+  * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925 
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 26 Jul 2007 16:41:50 -0600
+
+bind9 (1:9.4.1-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 30 Apr 2007 16:59:05 -0600
+
+bind9 (1:9.4.0-2) unstable; urgency=low
+
+  * upload to unstable
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 10 Apr 2007 11:12:16 -0600
+
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+  * New upstream version
+  * more mipsel patch.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 25 Feb 2007 11:44:11 -0700
+
+bind9 (1:9.4.0~rc2-1) experimental; urgency=low
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:26:12 -0700
+
+bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low
+
+  * add NEWS file talking about the change in defaults:
+    As of bind 9.4, allow-query-cache and allow-recursion default to the
+    builtin acls 'localnets' and 'localhost'.  If you are setting up a
+    name server for a network, you will almost certainly need to change
+    this.
+
+    The change in default has been done to make caching servers less
+    attractive as reflective amplifying targets for spoofed traffic.
+    This still leaves authoritative servers exposed.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 24 Jan 2007 09:35:06 -0700
+
+bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low
+
+  * Fix mips64.  Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 21 Jan 2007 15:32:27 -0700
+
+bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low
+
+  * Broken orig.tar.gz.
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 23:04:05 -0700
+
+bind9 (1:9.4.0~rc1-1) experimental; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Dec 2006 19:00:37 -0700
+
+bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low
+
+  [Thomas Antepoth]
+
+  * unix/socket.c: don't send to a socket with pending_send.  Closes: #430065
+
+  [LaMont Jones]
+
+  * document git repositories
+  * db.root: l.root-servers.net changed IP address.  Closes: #449148
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 05 Nov 2007 19:48:23 -0700
+
+bind9 (1:9.3.4-2etch1) stable-security; urgency=high
+
+  * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926)
+
+ -- Moritz Muehlenhoff <jmm@debian.org>  Tue, 24 Jul 2007 22:09:35 +0000
+
+bind9 (1:9.3.4-2) unstable; urgency=high
+
+  * Actually really do the merge of 9.3.4.  Sigh.  Closes: #408925
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 29 Jan 2007 06:09:03 -0700
+
+bind9 (1:9.3.4-1) unstable; urgency=high
+
+  * New upstream version.  Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 25 Jan 2007 14:31:09 -0700
+
+bind9 (1:9.3.3-1) unstable; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 12 Dec 2006 23:31:51 -0700
+
+bind9 (1:9.3.2-P1.0-1) unstable; urgency=low
+
+  * Fix README.Debian to point to the URL.  Closes: #387437
+  * Strip rfc's from orig.tar.gz.  Closes: #393359
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Mon, 16 Oct 2006 06:38:22 -0600
+
+bind9 (1:9.3.2-P1-2) unstable; urgency=low
+
+  * Fix init script output.  Closes: #354192
+    Thanks to Joey Hess for the patch.
+  * Default install should listen on ipv6 interfaces.  Closes: #382438
+
+ -- LaMont Jones <lamont@debian.org>  Sat,  9 Sep 2006 19:01:53 -0600
+
+bind9 (1:9.3.2-P1-1) unstable; urgency=high
+
+  * New upstream, fixes CVE-2006-4095 and CVE-2006-4096.
+    Closes: #386237, #386245
+  * Drop gcc-3.4 [powerpc] dependency.  Closes: #342957, #372203
+  * Add -fno-strict-aliasing for type-punned pointer aliasing issues
+    Closes: #386224
+  * Use getent in postinst instead of chown/chgrp.  Closes: #386091, #239665
+  * Drop redundant update-rc.d calls.  Closes: #356914
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  6 Sep 2006 08:07:13 -0600
+
+bind9 (1:9.3.2-2) unstable; urgency=low
+
+  * correct force-reload.  Closes: #333841
+  * Fix init.d's usage message.  Closes: #331090
+  * resolvconf tweaks.  Closes: #252232, #275412
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 16 Jan 2006 15:17:04 -0700
+
+bind9 (1:9.3.2-1) unstable; urgency=low
+
+  * New upstream
+  * use lsb-base for start/stop messages in init.d.
+  * switch to debhelper 4
+
+ -- LaMont Jones <lamont@debian.org>  Thu,  5 Jan 2006 12:29:28 -0700
+
+bind9 (1:9.3.1-2) unstable; urgency=low
+
+  * Getting good reports from experimental, uploading to sid.
+    Release team, please consider this package for sarge.  Thanks.
+  * correct pidfile name in init.d/lwresd.  Closes: #298100
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 17:46:31 -0700
+
+bind9 (1:9.3.1-1) experimental; urgency=low
+
+  * Build with gcc-3.4 on powerpc, to work around #292958.
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 19 Mar 2005 11:40:06 -0700
+
+bind9 (1:9.3.1-0) experimental; urgency=low
+
+  * New upstream version.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 13 Mar 2005 21:44:57 -0700
+
+bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low
+
+  * new upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 25 Jan 2005 14:21:51 -0700
+
+bind9 (1:9.3.0-1) experimental; urgency=low
+
+  * New upstream version
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 25 Sep 2004 21:35:46 -0600
+
+bind9 (1:9.2.4-1) unstable; urgency=high
+
+  * New upstream version.  Closes: #269157 and others.
+  * Version debhelper build-dep.  Closes: #262720
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Thu, 23 Sep 2004 09:11:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low
+
+  * New upstream
+
+ -- LaMont Jones <lamont@mmjgroup.com>  Wed,  1 Sep 2004 00:04:55 -0600
+
+bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low
+
+  * New upstream.
+  * Comment out delegation-only directives in named.conf
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  2 Aug 2004 10:00:38 -0600
+
+bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low
+
+  * New upstream release candidate
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 17 Jun 2004 19:50:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low
+
+  * New upstream release candidate
+  * Remove shared library symlinks in clean.  Closes: #243109
+  * Deal with capset being a module.  Closes: #245043, #240874, #241605
+  * deliver /var/run/bind/run in lwresd as well.  Closes: #186569
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 22 Apr 2004 12:20:05 -0600
+
+bind9 (1:9.2.3-3) unstable; urgency=low
+
+  * new IP for b.root-servers.net.  Closes: #234278
+  * Fix RC linkages to match bind8.  Closes: #218007
+
+ -- LaMont Jones <lamont@debian.org>  Mon,  1 Mar 2004 15:00:44 -0700
+
+bind9 (1:9.2.3-2) unstable; urgency=low
+
+  * Rebuild autoconf files for mips.  Closes: #221419
+
+ -- LaMont Jones <lamont@debian.org>  Tue, 18 Nov 2003 06:33:34 -0700
+
+bind9 (1:9.2.3-1) unstable; urgency=low
+
+  * New upstream.
+  * cleanup zones.rfc1918/db.empty stuff.
+  * Fix Makefiles to work even if the build environment is unclean.
+    Closes: #211503
+  * Add comments about root-delegation-only to named.conf.  Closes: #212243
+  * Add resolvconf support.  Closes: #199255
+  * more SO_BSDCOMPAT hacks for linux.  Closes: #220735, #214460
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 17 Nov 2003 21:30:33 -0700
+
+bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low
+
+  * Yet another new upstream release.
+
+ -- LaMont Jones <lamont@debian.org>  Mon, 22 Sep 2003 09:39:50 -0600
+
+bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low
+
+  * New upstream.  Closes: #211752. #211503. #211496, #211520
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 20 Sep 2003 12:22:59 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low
+
+  * Really fix versioned depends.  Closes: #211590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 18 Sep 2003 17:29:47 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low
+
+  * Version depends for all the libraries. sigh.  Closes: #211412,#210293
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:56:36 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low
+
+  * Need a versioned depend. sigh.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 10:25:35 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low
+
+  * New upstream release.  Closes: #211373
+  * Remove RFC's from package, per policy.
+  * Make com and net zones delegation-only by default.
+
+ -- LaMont Jones <lamont@debian.org>  Wed, 17 Sep 2003 07:15:37 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low
+
+  * A bit more cleanup of descriptions.
+  * fix package sections
+  * Fix b0rkage with dependencies.
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 14 Sep 2003 09:05:10 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low
+
+  * Explicitly link libraries.  Closes: #210653
+  * Fix descriptions.  Closes: #209563, #209853, #210063
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 13 Sep 2003 19:29:05 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low
+
+  * New upstream release candidate.
+  * Quit using SO_BSDCOMPAT (why is it still in the header files??) so
+    that the kernel will shut up about it's advertised, obsolete option.
+    Closes: #201293, #204282, #205590
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 28 Aug 2003 14:44:28 -0600
+
+bind9 (1:9.2.2-2) unstable; urgency=low
+
+  * Fix libtool.m4. Closes: #183791
+  * move lib packages into Section: libs.  Closes: #184788
+  * make sure it's libssl0.9.7.  Closes: #182363
+  * Add /etc/default/lwresd.  Closes: #169727
+  * Add fakeroot dir to dh_shlibdeps.  Closes: #169622
+  * Fix rndc manpage.  Closes: #179353
+  * Deliver /usr/bin/isc-config.sh (in libbind-dev).  Closes: #178186
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 15 Mar 2003 16:34:15 -0700
+
+bind9 (1:9.2.2-1) unstable; urgency=low
+
+  * New upstream version
+  * Document /etc/default/bind9 in init.d script.  Closes: #170267
+
+ -- LaMont Jones <lamont@debian.org>  Tue,  4 Mar 2003 22:43:58 -0700
+
+bind9 (1:9.2.1-7) unstable; urgency=low
+
+  * One more overrides disparity.
+  * Fix bashism in postinst.  Closes: #169531
+
+ -- LaMont Jones <lamont@debian.org>  Sun, 17 Nov 2002 19:22:58 -0700
+
+bind9 (1:9.2.1-6) unstable; urgency=low
+
+  * The "I give up for now" release.
+  *   Only convert to running as bind if named.conf hasn't been modified.
+  *   Closes: #163552, #164352
+  * Fix overrides
+  * Cleanup README.Debian wrt non-root-by-default.
+  * Make sure that /var/run/bind/run exists in init.d script.  Closes: #168912
+  * New IP for j.root-servers.net.  Closes: #167818
+  * Check for 2.2.18 kernel in preinst.  Closes: #164349
+  * Move local options to /etc/default/bind9.  Closes: #169132, #163073
+  * Cleanup old bugs (fixed in -5, really).  Closes: #165864
+  * Add /etc/bind/named.conf.local, included from named.conf.  Closes: #129576
+  * Do options definitions in /etc/bind/named.conf.options, makes life
+    easier in the face of named.conf changes from upstream.
+  * Add missing Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org>  Sat, 16 Nov 2002 17:05:45 -0700
+
+bind9 (1:9.2.1-5) unstable; urgency=low
+
+  * Run named a non-privileged user by default.  Closes: #149059
+
+ -- LaMont Jones <lamont@debian.org>  Thu, 12 Sep 2002 16:57:37 -0600
+
+bind9 (1:9.2.1-4) unstable; urgency=low
+
+  * swap maintainer/uploader status so LaMont is primary and Bdale is backup
+  * Deal with bind/bind9 collisions better.  Closes: #149580
+  * Fix some documentation.  Closes: #151579
+
+ -- LaMont Jones <lamont@debian.org>  Wed,  4 Sep 2002 23:25:33 -0600
+
+bind9 (1:9.2.1-3) unstable; urgency=high
+
+  * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in
+    resolver library, closes: #151342, #151431
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  1 Jul 2002 00:16:31 -0600
+
+bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high
+
+  * backport to woody (simple rebuild) since 9.2.1 resolves a security issue
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  4 Jun 2002 10:30:57 -0600
+
+bind9 (1:9.2.1-2) unstable; urgency=low
+
+  * don't include nslint man page, closes: #148695
+  * fix typo in rndc.8, closes: #139602
+  * add a section to README.Debian explaining the rndc key mode that has been
+    our default since 9.2.0-2, closes: #129849
+  * fix paths for named.conf in named.8 to reflect our default, closes: #143443
+  * upstream fixed the nsupdate man page at some point, closes: #121108
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  3 Jun 2002 15:44:37 -0600
+
+bind9 (1:9.2.1-1) unstable; urgency=medium
+
+  * new upstream version
+  * have bind9-host provide host, closes: #140174
+  * move bind9-host to priority standard since dnsutils depends on it or host,
+    and we prefer bind9-host over host.
+  * move libdns5 and libisc4 to priority standard since dnsutils depends on
+    them and is priority standard
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 30 May 2002 10:38:39 -0600
+
+bind9 (1:9.2.0-6) unstable; urgency=low
+
+  * move to US main!  Yippee!  Closes: #123969
+  * add info to README.Debian about 2.5 kernels vs --disable-linux-caps
+
+ -- Bdale Garbee <bdale@gag.com>  Sat, 23 Mar 2002 00:18:05 -0700
+
+bind9 (1:9.2.0-5) unstable; urgency=medium
+
+  * clean up various issues in the rules file
+  * make bind9-host conflict/replace old dnsutils as host does, otherwise we
+    can have problems upgrading from potato to woody, closes: #136686
+  * use /dev/urandom for rndc-confgen in postinst, it should be good enough for
+    this purpose, and will keep the postinst from blocking arbitrarily.
+    closes: #130372
+  * add fresh pointers to chroot howto to README.Debian, closes: #135774
+
+ -- Bdale Garbee <bdale@gag.com>  Sun,  3 Mar 2002 16:47:12 -0700
+
+bind9 (1:9.2.0-4) unstable; urgency=low
+
+  * bind9-host needs to conflict with host, closes: #127395
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  1 Jan 2002 20:12:14 -0700
+
+bind9 (1:9.2.0-3) unstable; urgency=low
+
+  * force removal of old diverted files, closes: #126236
+  * change priority of liblwres1 from optional to standard per ftp admins
+  * add a bind9-host package so that the 'host' provided with the BIND 9.X
+    source tree can be an alternative to the aging NIKHEF version packaged
+    separately.  Update dnsutils dependencies to depend on one of the two,
+    with preference to this one since it has fewer bugs (but fewer features,
+    too).
+
+ -- Bdale Garbee <bdale@gag.com>  Sun, 23 Dec 2001 00:59:15 -0700
+
+bind9 (1:9.2.0-2) unstable; urgency=medium
+
+  * change rc.d links to ensure daemon starts before and stops after other
+    daemons that may fail if name service is not working (bug was filed 
+    against 8.X bind packages, but is just as relevant here!)
+  * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935
+  * add a postinst to dnsutils to remove any lingering diversions from old 
+    dnsutils packages, closes: #122227
+  * not much point in delivering zone2ldap.1 since we aren't delivering 
+    zone2ldap right now (though we might someday?), closes: #124058
+  * be more verbose with shared library descriptions, closes: #123426, #123428
+  * 9.2.0 added a new rndc.key file that both named and rndc will read to 
+    obtain a shared key, and rndc-confgen will easily create this file with 
+    a unique-per-system key.  Modify named.conf and remove rndc.conf
+    to take advantage of this mechanism and stop delivering a pre-determined 
+    static key to all Debian systems (which has been a mild security risk).  
+    Create the key in postinst if the key file doesn't already exist, and 
+    remove the file in postrm if purging.
+    Closes: #86718, #87208
+
+ -- Bdale Garbee <bdale@gag.com>  Fri, 21 Dec 2001 04:04:30 -0700
+
+bind9 (1:9.2.0-1) unstable; urgency=low
+
+  * new upstream version, closes: #108243, #112266, #114250, #119506, #120657
+  * /etc/bind/rndc.conf is now a conffile
+  * minor hacks to the README.Debian since the chroot instructions it points
+    to are 8.X specific, part of addressing bug 111868.
+  * libomapi is gone, replaced by libisccc and libisccfg
+  * a few lintian-motivated cosmetic cleanups
+  * lose task-dns-server meta package, since tasksel doesn't need it now
+  * dig problem not reproducible in this version, closes: #89526
+  * named-checkconf now uses $sysconfdir, closes: #107835
+  * no longer deliver man pages for contributed binaries we're not including
+    in dnsutils, closes: #108220
+  * fix section in nslookup man page, though that's the least of the man
+    page's problems...  glitch reported is unreproducible
+    closes: #103630, #120946
+  * update libbind-dev README.Debian, closes: #121050
+
+ -- Bdale Garbee <bdale@gag.com>  Tue, 27 Nov 2001 01:41:00 -0700
+
+bind9 (1:9.1.3-1) unstable; urgency=low
+
+  * new upstream version, closes: #96483, #99824, #100647, #101568, #103429
+  * update config.sub/guess for hppa/ia64 support
+  * small init.d patch from Marco d'Itri to ease adding options on invocation
+  * stop having bind9-doc conflict/replace bind-doc since they don't really
+    conflict and there's no reason to prevent having both installed at the
+    same time, closes: #90994
+  * the CHANGES file documents fixes since 9.1.1 that probably cured the
+    reported assertion failure.  If it turns out that I'm wrong, the bug can
+    be re-opened or a new one filed.  I can't see any way to reproduce the bug 
+    in a test case here.  Closes: #99352
+  * have libbind-dev depend on the runtime library packages it delivers 
+    compile-time symlinks for, closes: #100898, #103855
+  * fix lwres man pages to source man3/* instead of * so all the page content
+    can actually be found, closes: #85450, #103865
+
+ -- Bdale Garbee <bdale@gag.com>  Mon,  9 Jul 2001 11:30:39 -0600
+
+bind9 (1:9.1.1-1) unstable; urgency=low
+
+  * new upstream release
+  * update build-depends for libssl-dev
+  * add build-depends on bison, closes: #90150, #90752, #90159
+  * split up libbind0 since libdns is changing so numbers
+  * downgrade rblcheck from a depends to a suggests, closes: #90783
+  * bind9 mkdep creates files in the current working directory, closes: #58353
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 25 Apr 2001 22:53:21 -0600
+
+bind9 (1:9.1.0-3) unstable; urgency=low
+
+  * merge patch from Zack Weinberg that solves compilation problem, and 
+    reduces the memory footprint of applications by making configure.in
+    smarter.  Closes: #86776, #86910
+  * the bind-doc package includes all relevant documentation from the bind9
+    source tree, including HTML content in /usr/share/doc/bind9-doc/arm,
+    closes: #85718
+  * default named.conf and rndc.conf to not world-readable.  This is an
+    interim step towards addressing the concerns about security raised by 
+    bugs 86718 and closes: #86836  A better long-term solution would be for
+    rndc.conf to allow includes, so that both named.conf and rndc.conf could
+    include a key file built on the fly during installation while themselves
+    retaining conffile status.  The required functionality has been requested
+    of the bind9 upstream, this will limit vulnerability in the meantime.
+  * add replaces logic to the dnsutils package to avoid complaints about the
+    delivery of nsupdate.8.gz, closes: #86759
+  * move a couple of man pages back from dnsutils to bind9 that really belong
+    there.  sigh.
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 22 Feb 2001 16:39:02 -0700
+
+bind9 (1:9.1.0-2) unstable; urgency=low
+
+  * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks!
+    + bind9:  ships with a working rndc.conf file, closes: #84572
+    + bind9:  init.d calls rndc rather than ndc on reload, closes: #85481
+    + bind9:  named.conf ships with 'key' and 'control' sections
+    + bind9:  correctly creates /var/cache/bind, closes: #85457
+    + lwresd: lwresd is split off into its own package, closes: #85627
+  * nsupdate is delivered by the dnsutils package, but the (wrong) man page 
+    was accidentally also included in the bind9 package, closes: #85717
+  * freshen config.sub and config.guess for ia64 and hppa support
+
+ -- Bdale Garbee <bdale@gag.com>  Mon, 12 Feb 2001 23:43:55 -0700
+
+bind9 (1:9.1.0-1) unstable; urgency=low
+
+  * Initial packaging of BIND 9.1.0.  Must use epoch so that meta packages 
+    retain their sequencing from the bind 8 package version stream.
+  * snarf a couple of man pages from the 8.X tree for now
+
+ -- Bdale Garbee <bdale@gag.com>  Thu,  1 Feb 2001 16:30:35 -0700
+
diff --git a/debian/checkapi b/debian/checkapi
new file mode 100755
index 0000000..52eec8e
--- /dev/null
+++ b/debian/checkapi
@@ -0,0 +1,11 @@
+#!/bin/sh
+ret=0
+for LIB in bind9 dns irs isc lwres isccc isccfg; do
+    OLD_SOVERSION=$(sed -ne "s/Package: lib$LIB[-]*\([0-9]*\)$/\1/p" debian/control)
+    NEW_SOVERSION=$(debian/getapi "${LIB}")
+    if [ "$OLD_SOVERSION" -ne "$NEW_SOVERSION" ]; then
+	echo "ERROR: SONAME of lib$LIB has changed from lib$LIB.so.$OLD_SOVERSION to lib$1.so.$NEW_SOVERSION"
+	ret=1
+    fi
+done
+exit $ret
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..f599e28
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+10
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..73c2a17
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,394 @@
+Source: bind9
+Section: net
+Priority: optional
+Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
+Uploaders: LaMont Jones <lamont@debian.org>,
+           Michael Gilbert <mgilbert@debian.org>,
+           Robie Basak <robie.basak@canonical.com>,
+           Ondřej Surý <ondrej@debian.org>,
+           Bernhard Schmidt <berni@debian.org>
+Build-Depends: bison,
+               debhelper (>= 10),
+               dh-apparmor,
+               dh-exec,
+               dh-python,
+               dpkg-dev (>= 1.16.1~),
+               libcap2-dev [!kfreebsd-i386 !kfreebsd-amd64 !hurd-i386],
+               libdb-dev (>>4.6),
+               libfstrm-dev,
+               libgeoip-dev (>= 1.4.6.dfsg-5),
+               libidn2-dev,
+               libjson-c-dev,
+               libkrb5-dev,
+               libldap2-dev,
+               liblmdb-dev,
+               libprotobuf-c-dev,
+               libssl-dev,
+               libtool,
+               libxml2-dev,
+               protobuf-c-compiler,
+               python3,
+               python3-distutils,
+               python3-ply
+Standards-Version: 4.1.2
+Vcs-Browser: https://salsa.debian.org/dns-team/bind9
+Vcs-Git: https://salsa.debian.org/dns-team/bind9.git
+Homepage: https://www.isc.org/downloads/bind/
+
+Package: bind9
+Architecture: any
+Depends: adduser,
+         bind9utils (= ${binary:Version}),
+         debconf | debconf-2.0,
+         dns-root-data,
+         libbind9-161 (= ${binary:Version}),
+         libdns1104 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccc161 (= ${binary:Version}),
+         libisccfg163 (= ${binary:Version}),
+         liblwres161 (= ${binary:Version}),
+         lsb-base (>= 3.2-14),
+         net-tools,
+         netbase,
+         ${misc:Depends},
+         ${shlibs:Depends}
+Suggests: bind9-doc,
+          dnsutils,
+          resolvconf,
+          ufw
+Description: Internet Domain Name Server
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package provides the server and related configuration files.
+
+Package: bind9utils
+Architecture: any
+Depends: python3,
+         ${misc:Depends},
+         ${python3:Depends},
+         ${shlibs:Depends}
+Description: Utilities for BIND
+ This package provides various utilities that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-doc
+Architecture: all
+Section: doc
+Depends: ${misc:Depends}
+Description: Documentation for BIND
+ This package provides various documents that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-host
+Priority: standard
+Architecture: any
+Depends: libbind9-161 (= ${binary:Version}),
+         libdns1104 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccfg163 (= ${binary:Version}),
+         liblwres161 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Provides: host
+Description: DNS lookup utility (deprecated)
+ This package provides /usr/bin/host, a simple utility (bundled with the
+ BIND 9.X sources) which can be used for converting domain names to IP
+ addresses and the reverse.
+ .
+ This utility is deprecated, use dig or delv from the dnsutils package.
+
+Package: libbind-dev
+Section: libdevel
+Architecture: any
+Replaces: bind9 (<< 1:9.10.3.dfsg.P2-4)
+Depends: libbind9-161 (= ${binary:Version}),
+         libdns1104 (= ${binary:Version}),
+         libirs161 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccc161 (= ${binary:Version}),
+         libisccfg163 (= ${binary:Version}),
+         liblwres161 (= ${binary:Version}),
+         ${misc:Depends}
+Description: Static Libraries and Headers used by BIND
+ This package delivers archive-style libraries, header files, and API man
+ pages for libbind, libdns, libisc, and liblwres.  These are only needed
+ if you want to compile other packages that need more nameserver API than the
+ resolver code provided in libc.
+
+Package: libbind9-161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libdns1104 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccfg163 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: BIND9 Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libbind9 shared library used by BIND's daemons and
+ clients.
+
+Package: libdns1104
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: DNS Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libdns shared library used by BIND's daemons and
+ clients.
+
+Package: libirs161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: DNS Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libirs shared library used by BIND's daemons and
+ clients.
+
+Package: libisc1100
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: ISC Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisc shared library used by BIND's daemons and
+ clients.
+
+Package: liblwres161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: Lightweight Resolver Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the liblwres shared library used by BIND's daemons
+ and clients.
+
+Package: libisccc161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccfg163
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libdns1104 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccc161 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: Config File Handling Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccfg shared library used by BIND's daemons
+ and clients to read and write ISC-style configuration files like named.conf
+ and rndc.conf.
+
+Package: dnsutils
+Priority: standard
+Architecture: any
+Depends: bind9-host | host,
+         libbind9-161 (= ${binary:Version}),
+         libdns1104 (= ${binary:Version}),
+         libisc1100 (= ${binary:Version}),
+         libisccfg163 (= ${binary:Version}),
+         liblwres161 (= ${binary:Version}),
+         ${misc:Depends},
+         ${shlibs:Depends}
+Suggests: rblcheck
+Breaks: bind9 (<< 1:9.11.2+dfsg-6~)
+Replaces: bind9 (<< 1:9.11.2+dfsg-6)
+Description: Clients provided with BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers various client programs related to DNS that are
+ derived from the BIND source tree.
+ .
+  - dig - query the DNS in various ways
+  - nslookup - the older way to do it
+  - nsupdate - perform dynamic updates (See RFC2136)
+
+Package: libbind-export-dev
+Section: libdevel
+Architecture: any
+Conflicts: libbind-dev
+Depends: libdns-export1104 (= ${binary:Version}),
+         libirs-export161 (= ${binary:Version}),
+         libisc-export1100 (= ${binary:Version}),
+         libisccc-export161 (= ${binary:Version}),
+         libisccfg-export163 (= ${binary:Version}),
+         ${misc:Depends}
+Description: Development files for the exported BIND libraries
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers development files for the exported BIND libraries.
+
+Package: libdns-export1104
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: Exported DNS Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libdns shared library.
+
+Package: libdns-export1104-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported DNS library for debian-installer
+
+Package: libirs-export161
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: Exported IRS Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libirs shared library.
+
+Package: libirs-export161-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported IRS library for debian-installer
+
+Package: libisc-export1100
+Section: libs
+Architecture: any
+Multi-Arch: same
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: Exported ISC Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisc shared library.
+
+Package: libisc-export1100-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported ISC library for debian-installer
+
+Package: libisccc-export161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc-export1100,
+         ${misc:Depends},
+         ${shlibs:Depends}
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccc-export161-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: libisc-export1100-udeb,
+         ${misc:Depends},
+         ${shlibs:Depends}
+Package-Type: udeb
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccfg-export163
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Description: Exported ISC CFG Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisccfg shared library.
+
+Package: libisccfg-export163-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+         ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported ISC CFG library for debian-installer
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server.  BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisccfg shared library.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..3b0579c
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,159 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: BIND
+Upstream-Contact: Internet Systems Consortium <info@isc.org>
+Source: https://ftp.isc.org/isc/bind9/
+Files-Excluded: contrib/idn
+		contrib/dnsperf-2.1.0.0-1
+		contrib/nslint-3.0a2
+		contrib/query-loc-0.4.0
+		contrib/queryperf
+		contrib/zkt-1.1.3
+		doc/arm/Bv9ARM.pdf
+
+Files: *
+Copyright: 2004-2017, Internet Systems Consortium, Inc. ("ISC")
+           1996-2003, Internet Software Consortium
+	   2012, Vadim Goncharov
+	   2009-2012, John Eaglesham
+	   2008, Damien Miller
+	   2004, 2008, Nominet, Ltd.
+	   2004, Masarykova universita
+	   1997-2003, Kungliga Tekniska Högskolan
+	   2002, Nuno M. Rodrigues.
+	   2002, Stichting NLnet, Netherlands
+	   2000-2002, Japan Network Information Center.
+	   2001, Jake Burkholder
+	   1996-2001, Nominum, Inc.
+	   1995-2000, Network Associates, Inc.
+	   2000, Aaron D. Gifford
+	   1999-2000, Nortel Networks Corporation
+	   1996, David Mazieres
+	   1993, Digital Equipment Corporation.
+	   1990, 1993, The Regents of the University of California.
+License: ISC and BSD-2-clause and BSD-3-clause and BSD-4-clause
+
+Files: bin/tests/system/chain/
+       doc/misc/docbook-options.pl
+Copyright: 2016-2017, Internet Systems Consortium, Inc. ("ISC")
+License: MPL-2.0 or ISC
+
+Files: unit/atf-src/
+Copyright: 2007-2012, The NetBSD Foundation, Inc.
+License: BSD-2-clause
+
+Files: contrib/idn/
+Copyright: 2000-2002, Japan Network Information Center
+License: BSD-4-clause
+
+Files: debian/
+Copyright: 2007-2017 LaMont Jones
+	   2013-2017 Michael Gilbert
+           2017 Ondřej Surý
+	   2008-2016 Jamie Strandboge
+License: ISC or MPL-2.0
+
+License: ISC
+ Permission to use, copy, modify, and/or distribute this software for any
+ purpose with or without fee is hereby granted, provided that the above
+ copyright notice and this permission notice appear in all copies.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ PERFORMANCE OF THIS SOFTWARE.
+
+License: BSD-2-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ 3. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-4-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ 3. All advertising materials mentioning features or use of this
+ software must display the following acknowledgement: This product
+ includes software developed by the the organization .
+ .
+ 4. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY COPYRIGHT HOLDER "AS IS" AND ANY EXPRESS
+ OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ ARE DISCLAIMED. IN NO EVENT SHALL COPYRIGHT HOLDER BE LIABLE FOR ANY
+ DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
+ GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
+ IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+ OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+ IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License: MPL-2.0
+  This Source Code Form is subject to the terms of the Mozilla Public
+  License, v. 2.0.
+  .
+  On Debian systems, the full copy of MPL-2.0 can be found at
+  /usr/share/common-licenses/MPL-2.0
diff --git a/debian/dnsutils.install b/debian/dnsutils.install
new file mode 100644
index 0000000..90e4fba
--- /dev/null
+++ b/debian/dnsutils.install
@@ -0,0 +1,12 @@
+usr/bin/delv
+usr/bin/dig
+usr/bin/dnstap-read
+usr/bin/mdig
+usr/bin/nslookup
+usr/bin/nsupdate
+usr/share/man/man1/delv.1
+usr/share/man/man1/dig.1
+usr/share/man/man1/dnstap-read.1
+usr/share/man/man1/mdig.1
+usr/share/man/man1/nslookup.1
+usr/share/man/man1/nsupdate.1
diff --git a/debian/export.diff b/debian/export.diff
new file mode 100644
index 0000000..14f5320
--- /dev/null
+++ b/debian/export.diff
@@ -0,0 +1,11 @@
+diff -urNap lib/isccfg/Makefile lib/isccfg/Makefile
+--- lib/isccfg/Makefile	2017-10-04 21:26:10.589804751 +0000
++++ lib/isccfg/Makefile	2017-10-04 21:26:55.969698162 +0000
+@@ -506,6 +506,7 @@ libisccfg-export.la: ${OBJS}
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} ${DNSLIBS} ${ISCLIBS}  \
+ 		${LIBS}
++	ln -sf .libs/libisccfg-export.so .
+ 
+ timestamp: libisccfg-export.la
+ 	touch timestamp
diff --git a/debian/extras/apparmor.d/usr.sbin.named b/debian/extras/apparmor.d/usr.sbin.named
new file mode 100644
index 0000000..a4622da
--- /dev/null
+++ b/debian/extras/apparmor.d/usr.sbin.named
@@ -0,0 +1,94 @@
+# vim:syntax=apparmor
+# Last Modified: Fri Jun  1 16:43:22 2007
+#include <tunables/global>
+
+/usr/sbin/named flags=(attach_disconnected) {
+  #include <abstractions/base>
+  #include <abstractions/nameservice>
+
+  capability net_bind_service,
+  capability setgid,
+  capability setuid,
+  capability sys_chroot,
+  capability sys_resource,
+
+  # /etc/bind should be read-only for bind
+  # /var/lib/bind is for dynamically updated zone (and journal) files.
+  # /var/cache/bind is for slave/stub data, since we're not the origin of it.
+  # See /usr/share/doc/bind9/README.Debian.gz
+  /etc/bind/** r,
+  /var/lib/bind/** rw,
+  /var/lib/bind/ rw,
+  /var/cache/bind/** lrw,
+  /var/cache/bind/ rw,
+
+  # Database file used by allow-new-zones
+  /var/cache/bind/_default.nzd-lock rwk,
+
+  # gssapi
+  /etc/krb5.keytab kr,
+  /etc/bind/krb5.keytab kr,
+
+  # ssl
+  /etc/ssl/openssl.cnf r,
+
+  # root hints from dns-data-root
+  /usr/share/dns/root.* r,
+
+  # GeoIP data files for GeoIP ACLs
+  /usr/share/GeoIP/** r,
+
+  # dnscvsutil package
+  /var/lib/dnscvsutil/compiled/** rw,
+
+  # Allow changing worker thread names
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
+  @{PROC}/net/if_inet6 r,
+  @{PROC}/*/net/if_inet6 r,
+  @{PROC}/sys/net/ipv4/ip_local_port_range r,
+  /usr/sbin/named mr,
+  /{,var/}run/named/named.pid w,
+  /{,var/}run/named/session.key w,
+  # support for resolvconf
+  /{,var/}run/named/named.options r,
+
+  # some people like to put logs in /var/log/named/ instead of having
+  # syslog do the heavy lifting.
+  /var/log/named/** rw,
+  /var/log/named/ rw,
+
+  # gssapi
+  /var/lib/sss/pubconf/krb5.include.d/** r,
+  /var/lib/sss/pubconf/krb5.include.d/ r,
+  /var/lib/sss/mc/initgroups r,
+  /etc/gss/mech.d/ r,
+
+  # ldap
+  /etc/ldap/ldap.conf r,
+  /{,var/}run/slapd-*.socket rw,
+
+  # dynamic updates
+  /var/tmp/DNS_* rw,
+
+  # dyndb backends
+  /usr/lib/bind/*.so rm,
+
+  # Samba DLZ
+  /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm,
+  /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm,
+  /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm,
+  /var/lib/samba/bind-dns/dns.keytab rk,
+  /var/lib/samba/bind-dns/named.conf r,
+  /var/lib/samba/bind-dns/dns/** rwk,
+  /var/lib/samba/private/dns.keytab rk,
+  /var/lib/samba/private/named.conf r,
+  /var/lib/samba/private/dns/** rwk,
+  /etc/samba/smb.conf r,
+  /dev/urandom rwmk,
+  owner /var/tmp/krb5_* rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.named>
+}
diff --git a/debian/extras/etc/db.0 b/debian/extras/etc/db.0
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.0
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.127 b/debian/extras/etc/db.127
new file mode 100644
index 0000000..cd05bef
--- /dev/null
+++ b/debian/extras/etc/db.127
@@ -0,0 +1,13 @@
+;
+; BIND reverse data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+1.0.0	IN	PTR	localhost.
diff --git a/debian/extras/etc/db.255 b/debian/extras/etc/db.255
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.255
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.empty b/debian/extras/etc/db.empty
new file mode 100644
index 0000000..8a12858
--- /dev/null
+++ b/debian/extras/etc/db.empty
@@ -0,0 +1,14 @@
+; BIND reverse data file for empty rfc1918 zone
+;
+; DO NOT EDIT THIS FILE - it is used for multiple zones.
+; Instead, copy it, edit named.conf, and use that copy.
+;
+$TTL	86400
+@	IN	SOA	localhost. root.localhost. (
+			      1		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			  86400 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
diff --git a/debian/extras/etc/db.local b/debian/extras/etc/db.local
new file mode 100644
index 0000000..2f272d4
--- /dev/null
+++ b/debian/extras/etc/db.local
@@ -0,0 +1,14 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL	604800
+@	IN	SOA	localhost. root.localhost. (
+			      2		; Serial
+			 604800		; Refresh
+			  86400		; Retry
+			2419200		; Expire
+			 604800 )	; Negative Cache TTL
+;
+@	IN	NS	localhost.
+@	IN	A	127.0.0.1
+@	IN	AAAA	::1
diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf
new file mode 100644
index 0000000..880786a
--- /dev/null
+++ b/debian/extras/etc/named.conf
@@ -0,0 +1,11 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
+// structure of BIND configuration files in Debian, *BEFORE* you customize 
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.default-zones
new file mode 100644
index 0000000..1a85ad3
--- /dev/null
+++ b/debian/extras/etc/named.conf.default-zones
@@ -0,0 +1,30 @@
+// prime the server with knowledge of the root servers
+zone "." {
+	type hint;
+	file "/usr/share/dns/root.hints";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+	type master;
+	file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+	type master;
+	file "/etc/bind/db.255";
+};
+
+
diff --git a/debian/extras/etc/named.conf.local b/debian/extras/etc/named.conf.local
new file mode 100644
index 0000000..7a57b10
--- /dev/null
+++ b/debian/extras/etc/named.conf.local
@@ -0,0 +1,8 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
diff --git a/debian/extras/etc/named.conf.options b/debian/extras/etc/named.conf.options
new file mode 100644
index 0000000..4778d18
--- /dev/null
+++ b/debian/extras/etc/named.conf.options
@@ -0,0 +1,24 @@
+options {
+	directory "/var/cache/bind";
+
+	// If there is a firewall between you and nameservers you want
+	// to talk to, you may need to fix the firewall to allow multiple
+	// ports to talk.  See http://www.kb.cert.org/vuls/id/800113
+
+	// If your ISP provided one or more IP addresses for stable 
+	// nameservers, you probably want to use them as forwarders.  
+	// Uncomment the following block, and insert the addresses replacing 
+	// the all-0's placeholder.
+
+	// forwarders {
+	// 	0.0.0.0;
+	// };
+
+	//========================================================================
+	// If BIND logs error messages about the root key being expired,
+	// you will need to update your keys.  See https://www.isc.org/bind-keys
+	//========================================================================
+	dnssec-validation auto;
+
+	listen-on-v6 { any; };
+};
diff --git a/debian/extras/etc/zones.rfc1918 b/debian/extras/etc/zones.rfc1918
new file mode 100644
index 0000000..03b5546
--- /dev/null
+++ b/debian/extras/etc/zones.rfc1918
@@ -0,0 +1,20 @@
+zone "10.in-addr.arpa"      { type master; file "/etc/bind/db.empty"; };
+ 
+zone "16.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "17.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "18.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "19.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "20.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "21.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "22.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "23.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "24.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "25.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "26.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "27.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "28.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "29.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "30.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+zone "31.172.in-addr.arpa"  { type master; file "/etc/bind/db.empty"; };
+
+zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
diff --git a/debian/extras/if-reconfig.d/bind9 b/debian/extras/if-reconfig.d/bind9
new file mode 100755
index 0000000..d06965f
--- /dev/null
+++ b/debian/extras/if-reconfig.d/bind9
@@ -0,0 +1,15 @@
+#!/bin/sh -e
+# Called when an interfaces comes up or down
+# Written by LaMont Jones <lamont@debian.org>
+
+# kick named as needed
+
+# If /usr isn't mounted yet, silently bail.
+if [ ! -d /usr/sbin ]; then
+	exit 0
+fi
+
+# if named is running, reconfig it.
+rndc reconfig >/dev/null 2>&1 &
+
+exit 0
diff --git a/debian/extras/insserv.conf.d/bind9 b/debian/extras/insserv.conf.d/bind9
new file mode 100644
index 0000000..1861a99
--- /dev/null
+++ b/debian/extras/insserv.conf.d/bind9
@@ -0,0 +1 @@
+$named bind9
diff --git a/debian/extras/ufw/bind9 b/debian/extras/ufw/bind9
new file mode 100644
index 0000000..6cd6fca
--- /dev/null
+++ b/debian/extras/ufw/bind9
@@ -0,0 +1,5 @@
+[Bind9]
+title=Internet Domain Name Server
+description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server.
+ports=53
+
diff --git a/debian/gbp.conf b/debian/gbp.conf
new file mode 100644
index 0000000..bddd585
--- /dev/null
+++ b/debian/gbp.conf
@@ -0,0 +1,4 @@
+[DEFAULT]
+debian-branch = debian/buster
+pristine-tar = True
+upstream-branch = upstream/buster
diff --git a/debian/getapi b/debian/getapi
new file mode 100755
index 0000000..3c1456a
--- /dev/null
+++ b/debian/getapi
@@ -0,0 +1,8 @@
+#!/bin/sh
+CURRENT=$(sed -ne "s/^LIBINTERFACE = //p" lib/$1/api)
+REVISION=$(sed -ne "s/^LIBREVISION = //p" lib/$1/api)
+AGE=$(sed -ne "s/^LIBAGE = //p" lib/$1/api)
+
+echo $((${CURRENT}-${AGE}))
+
+exit 0
diff --git a/debian/libbind-dev.README.Debian b/debian/libbind-dev.README.Debian
new file mode 100644
index 0000000..ff47ab5
--- /dev/null
+++ b/debian/libbind-dev.README.Debian
@@ -0,0 +1,9 @@
+The include files for BIND are in /usr/include/{isc,dns,dst,lwres}.  If 
+you're compiling something that uses them, use something like 
+
+	'-I/usr/include/isc' 
+
+and so on in the call to the compiler to pick up the BIND versions before 
+the normal system versions for files that have conflicting filenames.
+
+
diff --git a/debian/libbind-dev.install b/debian/libbind-dev.install
new file mode 100644
index 0000000..0b706db
--- /dev/null
+++ b/debian/libbind-dev.install
@@ -0,0 +1,21 @@
+usr/bin/isc-config.sh
+usr/include
+usr/lib/*/libbind9.a
+usr/lib/*/libbind9.so
+usr/lib/*/libdns-pkcs11.a
+usr/lib/*/libdns-pkcs11.so
+usr/lib/*/libdns.a
+usr/lib/*/libdns.so
+usr/lib/*/libirs.a
+usr/lib/*/libirs.so
+usr/lib/*/libisc-pkcs11.a
+usr/lib/*/libisc-pkcs11.so
+usr/lib/*/libisc.a
+usr/lib/*/libisc.so
+usr/lib/*/libisccc.a
+usr/lib/*/libisccc.so
+usr/lib/*/libisccfg.a
+usr/lib/*/libisccfg.so
+usr/lib/*/liblwres.a
+usr/lib/*/liblwres.so
+usr/share/man/man3
diff --git a/debian/libbind-export-dev.install b/debian/libbind-export-dev.install
new file mode 100755
index 0000000..90b2efb
--- /dev/null
+++ b/debian/libbind-export-dev.install
@@ -0,0 +1,4 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/*-export.a usr/lib/${DEB_HOST_MULTIARCH}
+../tmp-udeb/lib/*/*-export.so usr/lib/${DEB_HOST_MULTIARCH}
+../tmp-udeb/usr/include/bind-export usr/include
diff --git a/debian/libbind9-161.install b/debian/libbind9-161.install
new file mode 100644
index 0000000..f6fa55a
--- /dev/null
+++ b/debian/libbind9-161.install
@@ -0,0 +1 @@
+usr/lib/*/libbind9.so.*
diff --git a/debian/libbind9-161.symbols b/debian/libbind9-161.symbols
new file mode 100644
index 0000000..fd6ae78
--- /dev/null
+++ b/debian/libbind9-161.symbols
@@ -0,0 +1,8 @@
+libbind9.so.161 libbind9-161 #MINVER#
+ bind9_check_key@Base 1:9.10.6+dfsg
+ bind9_check_namedconf@Base 1:9.10.6+dfsg
+ bind9_getaddresses@Base 1:9.10.6+dfsg
+ bind9_libage@Base 1:9.10.6+dfsg
+ bind9_libinterface@Base 1:9.10.6+dfsg
+ bind9_librevision@Base 1:9.10.6+dfsg
+ bind9_version@Base 1:9.10.6+dfsg
diff --git a/debian/libdns-export1104-udeb.install b/debian/libdns-export1104-udeb.install
new file mode 100755
index 0000000..d29ae61
--- /dev/null
+++ b/debian/libdns-export1104-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libdns-export1104.install b/debian/libdns-export1104.install
new file mode 100755
index 0000000..d29ae61
--- /dev/null
+++ b/debian/libdns-export1104.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libdns1104.install b/debian/libdns1104.install
new file mode 100644
index 0000000..ea2d435
--- /dev/null
+++ b/debian/libdns1104.install
@@ -0,0 +1,2 @@
+usr/lib/*/libdns-pkcs11.so.*
+usr/lib/*/libdns.so.*
diff --git a/debian/libdns1104.symbols b/debian/libdns1104.symbols
new file mode 100644
index 0000000..d630917
--- /dev/null
+++ b/debian/libdns1104.symbols
@@ -0,0 +1,3173 @@
+libdns-pkcs11.so.1104 libdns1104 #MINVER#
+ dns__rbt_checkproperties@Base 1:9.11.3+dfsg
+ dns__rbt_getheight@Base 1:9.11.3+dfsg
+ dns__rbtnode_getdistance@Base 1:9.11.3+dfsg
+ dns__zone_findkeys@Base 1:9.11.4+dfsg
+ dns__zone_loadpending@Base 1:9.11.3+dfsg
+ dns__zone_updatesigs@Base 1:9.11.4+dfsg
+ dns_acache_attach@Base 1:9.11.3+dfsg
+ dns_acache_attachentry@Base 1:9.11.3+dfsg
+ dns_acache_cancelentry@Base 1:9.11.3+dfsg
+ dns_acache_countquerymiss@Base 1:9.11.3+dfsg
+ dns_acache_create@Base 1:9.11.3+dfsg
+ dns_acache_createentry@Base 1:9.11.3+dfsg
+ dns_acache_detach@Base 1:9.11.3+dfsg
+ dns_acache_detachentry@Base 1:9.11.3+dfsg
+ dns_acache_getentry@Base 1:9.11.3+dfsg
+ dns_acache_putdb@Base 1:9.11.3+dfsg
+ dns_acache_setcachesize@Base 1:9.11.3+dfsg
+ dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_acache_setdb@Base 1:9.11.3+dfsg
+ dns_acache_setentry@Base 1:9.11.3+dfsg
+ dns_acache_shutdown@Base 1:9.11.3+dfsg
+ dns_acl_any@Base 1:9.11.3+dfsg
+ dns_acl_attach@Base 1:9.11.3+dfsg
+ dns_acl_create@Base 1:9.11.3+dfsg
+ dns_acl_detach@Base 1:9.11.3+dfsg
+ dns_acl_isany@Base 1:9.11.3+dfsg
+ dns_acl_isinsecure@Base 1:9.11.3+dfsg
+ dns_acl_isnone@Base 1:9.11.3+dfsg
+ dns_acl_match2@Base 1:9.11.3+dfsg
+ dns_acl_match@Base 1:9.11.3+dfsg
+ dns_acl_merge@Base 1:9.11.3+dfsg
+ dns_acl_none@Base 1:9.11.3+dfsg
+ dns_aclelement_match2@Base 1:9.11.3+dfsg
+ dns_aclelement_match@Base 1:9.11.3+dfsg
+ dns_aclenv_copy@Base 1:9.11.3+dfsg
+ dns_aclenv_destroy@Base 1:9.11.3+dfsg
+ dns_aclenv_init@Base 1:9.11.3+dfsg
+ dns_adb_adjustsrtt@Base 1:9.11.3+dfsg
+ dns_adb_agesrtt@Base 1:9.11.3+dfsg
+ dns_adb_attach@Base 1:9.11.3+dfsg
+ dns_adb_beginudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_cancelfind@Base 1:9.11.3+dfsg
+ dns_adb_changeflags@Base 1:9.11.3+dfsg
+ dns_adb_create@Base 1:9.11.3+dfsg
+ dns_adb_createfind2@Base 1:9.11.3+dfsg
+ dns_adb_createfind@Base 1:9.11.3+dfsg
+ dns_adb_destroyfind@Base 1:9.11.3+dfsg
+ dns_adb_detach@Base 1:9.11.3+dfsg
+ dns_adb_dump@Base 1:9.11.3+dfsg
+ dns_adb_dumpfind@Base 1:9.11.3+dfsg
+ dns_adb_ednsto@Base 1:9.11.3+dfsg
+ dns_adb_endudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_findaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_flush@Base 1:9.11.3+dfsg
+ dns_adb_flushname@Base 1:9.11.3+dfsg
+ dns_adb_flushnames@Base 1:9.11.3+dfsg
+ dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_getcookie@Base 1:9.11.3+dfsg
+ dns_adb_getudpsize@Base 1:9.11.3+dfsg
+ dns_adb_marklame@Base 1:9.11.3+dfsg
+ dns_adb_noedns@Base 1:9.11.3+dfsg
+ dns_adb_plainresponse@Base 1:9.11.3+dfsg
+ dns_adb_probesize2@Base 1:9.11.3+dfsg
+ dns_adb_probesize@Base 1:9.11.3+dfsg
+ dns_adb_setadbsize@Base 1:9.11.3+dfsg
+ dns_adb_setcookie@Base 1:9.11.3+dfsg
+ dns_adb_setquota@Base 1:9.11.3+dfsg
+ dns_adb_setudpsize@Base 1:9.11.3+dfsg
+ dns_adb_shutdown@Base 1:9.11.3+dfsg
+ dns_adb_timeout@Base 1:9.11.3+dfsg
+ dns_adb_whenshutdown@Base 1:9.11.3+dfsg
+ dns_adbentry_overquota@Base 1:9.11.3+dfsg
+ dns_badcache_add@Base 1:9.11.3+dfsg
+ dns_badcache_destroy@Base 1:9.11.3+dfsg
+ dns_badcache_find@Base 1:9.11.3+dfsg
+ dns_badcache_flush@Base 1:9.11.3+dfsg
+ dns_badcache_flushname@Base 1:9.11.3+dfsg
+ dns_badcache_flushtree@Base 1:9.11.3+dfsg
+ dns_badcache_init@Base 1:9.11.3+dfsg
+ dns_badcache_print@Base 1:9.11.3+dfsg
+ dns_byaddr_cancel@Base 1:9.11.3+dfsg
+ dns_byaddr_create@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname2@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname@Base 1:9.11.3+dfsg
+ dns_byaddr_destroy@Base 1:9.11.3+dfsg
+ dns_cache_attach@Base 1:9.11.3+dfsg
+ dns_cache_attachdb@Base 1:9.11.3+dfsg
+ dns_cache_clean@Base 1:9.11.3+dfsg
+ dns_cache_create2@Base 1:9.11.3+dfsg
+ dns_cache_create3@Base 1:9.11.3+dfsg
+ dns_cache_create@Base 1:9.11.3+dfsg
+ dns_cache_detach@Base 1:9.11.3+dfsg
+ dns_cache_dump@Base 1:9.11.3+dfsg
+ dns_cache_dumpstats@Base 1:9.11.3+dfsg
+ dns_cache_flush@Base 1:9.11.3+dfsg
+ dns_cache_flushname@Base 1:9.11.3+dfsg
+ dns_cache_flushnode@Base 1:9.11.3+dfsg
+ dns_cache_getcachesize@Base 1:9.11.3+dfsg
+ dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_getname@Base 1:9.11.3+dfsg
+ dns_cache_getstats@Base 1:9.11.3+dfsg
+ dns_cache_load@Base 1:9.11.3+dfsg
+ dns_cache_renderjson@Base 1:9.11.3+dfsg
+ dns_cache_renderxml@Base 1:9.11.3+dfsg
+ dns_cache_setcachesize@Base 1:9.11.3+dfsg
+ dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_setfilename@Base 1:9.11.3+dfsg
+ dns_cache_updatestats@Base 1:9.11.3+dfsg
+ dns_categories@Base 1:9.11.3+dfsg
+ dns_catz_add_zone@Base 1:9.11.3+dfsg
+ dns_catz_catzs_attach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_detach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_set_view@Base 1:9.11.3+dfsg
+ dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg
+ dns_catz_entry_attach@Base 1:9.11.3+dfsg
+ dns_catz_entry_cmp@Base 1:9.11.3+dfsg
+ dns_catz_entry_copy@Base 1:9.11.3+dfsg
+ dns_catz_entry_detach@Base 1:9.11.3+dfsg
+ dns_catz_entry_getname@Base 1:9.11.3+dfsg
+ dns_catz_entry_new@Base 1:9.11.3+dfsg
+ dns_catz_entry_validate@Base 1:9.11.3+dfsg
+ dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg
+ dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg
+ dns_catz_get_iterator@Base 1:9.11.3+dfsg
+ dns_catz_get_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zones@Base 1:9.11.3+dfsg
+ dns_catz_options_copy@Base 1:9.11.3+dfsg
+ dns_catz_options_free@Base 1:9.11.3+dfsg
+ dns_catz_options_init@Base 1:9.11.3+dfsg
+ dns_catz_options_setdefault@Base 1:9.11.3+dfsg
+ dns_catz_postreconfig@Base 1:9.11.3+dfsg
+ dns_catz_prereconfig@Base 1:9.11.3+dfsg
+ dns_catz_update_from_db@Base 1:9.11.3+dfsg
+ dns_catz_update_process@Base 1:9.11.3+dfsg
+ dns_catz_update_taskaction@Base 1:9.11.3+dfsg
+ dns_catz_zone_attach@Base 1:9.11.3+dfsg
+ dns_catz_zone_detach@Base 1:9.11.3+dfsg
+ dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zone_getname@Base 1:9.11.3+dfsg
+ dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zones_merge@Base 1:9.11.3+dfsg
+ dns_cert_fromtext@Base 1:9.11.3+dfsg
+ dns_cert_totext@Base 1:9.11.3+dfsg
+ dns_client_addtrustedkey@Base 1:9.11.3+dfsg
+ dns_client_cancelrequest@Base 1:9.11.3+dfsg
+ dns_client_cancelresolve@Base 1:9.11.3+dfsg
+ dns_client_cancelupdate@Base 1:9.11.3+dfsg
+ dns_client_clearservers@Base 1:9.11.3+dfsg
+ dns_client_create@Base 1:9.11.3+dfsg
+ dns_client_createx2@Base 1:9.11.3+dfsg
+ dns_client_createx@Base 1:9.11.3+dfsg
+ dns_client_destroy@Base 1:9.11.3+dfsg
+ dns_client_destroyreqtrans@Base 1:9.11.3+dfsg
+ dns_client_destroyrestrans@Base 1:9.11.3+dfsg
+ dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg
+ dns_client_freeresanswer@Base 1:9.11.3+dfsg
+ dns_client_freeupdate@Base 1:9.11.3+dfsg
+ dns_client_mctx@Base 1:9.11.3+dfsg
+ dns_client_request@Base 1:9.11.3+dfsg
+ dns_client_resolve@Base 1:9.11.3+dfsg
+ dns_client_setdlv@Base 1:9.11.3+dfsg
+ dns_client_setservers@Base 1:9.11.3+dfsg
+ dns_client_startrequest@Base 1:9.11.3+dfsg
+ dns_client_startresolve@Base 1:9.11.3+dfsg
+ dns_client_startupdate@Base 1:9.11.3+dfsg
+ dns_client_update@Base 1:9.11.3+dfsg
+ dns_client_updaterec@Base 1:9.11.3+dfsg
+ dns_clientinfo_init@Base 1:9.11.3+dfsg
+ dns_clientinfomethods_init@Base 1:9.11.3+dfsg
+ dns_compress_add@Base 1:9.11.3+dfsg
+ dns_compress_disable@Base 1:9.11.3+dfsg
+ dns_compress_findglobal@Base 1:9.11.3+dfsg
+ dns_compress_getedns@Base 1:9.11.3+dfsg
+ dns_compress_getmethods@Base 1:9.11.3+dfsg
+ dns_compress_getsensitive@Base 1:9.11.3+dfsg
+ dns_compress_init@Base 1:9.11.3+dfsg
+ dns_compress_invalidate@Base 1:9.11.3+dfsg
+ dns_compress_rollback@Base 1:9.11.3+dfsg
+ dns_compress_setmethods@Base 1:9.11.3+dfsg
+ dns_compress_setsensitive@Base 1:9.11.3+dfsg
+ dns_counter_fromtext@Base 1:9.11.3+dfsg
+ dns_db_addrdataset@Base 1:9.11.3+dfsg
+ dns_db_allrdatasets@Base 1:9.11.3+dfsg
+ dns_db_attach@Base 1:9.11.3+dfsg
+ dns_db_attachnode@Base 1:9.11.3+dfsg
+ dns_db_attachversion@Base 1:9.11.3+dfsg
+ dns_db_beginload@Base 1:9.11.3+dfsg
+ dns_db_class@Base 1:9.11.3+dfsg
+ dns_db_closeversion@Base 1:9.11.3+dfsg
+ dns_db_create@Base 1:9.11.3+dfsg
+ dns_db_createiterator@Base 1:9.11.3+dfsg
+ dns_db_createsoatuple@Base 1:9.11.3+dfsg
+ dns_db_currentversion@Base 1:9.11.3+dfsg
+ dns_db_deleterdataset@Base 1:9.11.3+dfsg
+ dns_db_detach@Base 1:9.11.3+dfsg
+ dns_db_detachnode@Base 1:9.11.3+dfsg
+ dns_db_diff@Base 1:9.11.3+dfsg
+ dns_db_diffx@Base 1:9.11.3+dfsg
+ dns_db_dump2@Base 1:9.11.3+dfsg
+ dns_db_dump@Base 1:9.11.3+dfsg
+ dns_db_endload@Base 1:9.11.3+dfsg
+ dns_db_expirenode@Base 1:9.11.3+dfsg
+ dns_db_find@Base 1:9.11.3+dfsg
+ dns_db_findext@Base 1:9.11.3+dfsg
+ dns_db_findnode@Base 1:9.11.3+dfsg
+ dns_db_findnodeext@Base 1:9.11.3+dfsg
+ dns_db_findnsec3node@Base 1:9.11.3+dfsg
+ dns_db_findrdataset@Base 1:9.11.3+dfsg
+ dns_db_findzonecut@Base 1:9.11.3+dfsg
+ dns_db_getnsec3parameters@Base 1:9.11.3+dfsg
+ dns_db_getoriginnode@Base 1:9.11.3+dfsg
+ dns_db_getrrsetstats@Base 1:9.11.3+dfsg
+ dns_db_getsigningtime@Base 1:9.11.3+dfsg
+ dns_db_getsize@Base 1:9.11.3+dfsg
+ dns_db_getsoaserial@Base 1:9.11.3+dfsg
+ dns_db_hashsize@Base 1:9.11.3+dfsg
+ dns_db_iscache@Base 1:9.11.3+dfsg
+ dns_db_isdnssec@Base 1:9.11.3+dfsg
+ dns_db_ispersistent@Base 1:9.11.3+dfsg
+ dns_db_issecure@Base 1:9.11.3+dfsg
+ dns_db_isstub@Base 1:9.11.3+dfsg
+ dns_db_iszone@Base 1:9.11.3+dfsg
+ dns_db_load2@Base 1:9.11.3+dfsg
+ dns_db_load3@Base 1:9.11.3+dfsg
+ dns_db_load@Base 1:9.11.3+dfsg
+ dns_db_newversion@Base 1:9.11.3+dfsg
+ dns_db_nodecount@Base 1:9.11.3+dfsg
+ dns_db_nodefullname@Base 1:9.11.3+dfsg
+ dns_db_ondestroy@Base 1:9.11.3+dfsg
+ dns_db_origin@Base 1:9.11.3+dfsg
+ dns_db_overmem@Base 1:9.11.3+dfsg
+ dns_db_printnode@Base 1:9.11.3+dfsg
+ dns_db_register@Base 1:9.11.3+dfsg
+ dns_db_resigned@Base 1:9.11.3+dfsg
+ dns_db_rpz_attach@Base 1:9.11.3+dfsg
+ dns_db_rpz_ready@Base 1:9.11.3+dfsg
+ dns_db_serialize@Base 1:9.11.3+dfsg
+ dns_db_setcachestats@Base 1:9.11.3+dfsg
+ dns_db_setsigningtime@Base 1:9.11.3+dfsg
+ dns_db_settask@Base 1:9.11.3+dfsg
+ dns_db_subtractrdataset@Base 1:9.11.3+dfsg
+ dns_db_transfernode@Base 1:9.11.3+dfsg
+ dns_db_unregister@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_register@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg
+ dns_dbiterator_current@Base 1:9.11.3+dfsg
+ dns_dbiterator_destroy@Base 1:9.11.3+dfsg
+ dns_dbiterator_first@Base 1:9.11.3+dfsg
+ dns_dbiterator_last@Base 1:9.11.3+dfsg
+ dns_dbiterator_next@Base 1:9.11.3+dfsg
+ dns_dbiterator_origin@Base 1:9.11.3+dfsg
+ dns_dbiterator_pause@Base 1:9.11.3+dfsg
+ dns_dbiterator_prev@Base 1:9.11.3+dfsg
+ dns_dbiterator_seek@Base 1:9.11.3+dfsg
+ dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg
+ dns_dbtable_add@Base 1:9.11.3+dfsg
+ dns_dbtable_adddefault@Base 1:9.11.3+dfsg
+ dns_dbtable_attach@Base 1:9.11.3+dfsg
+ dns_dbtable_create@Base 1:9.11.3+dfsg
+ dns_dbtable_detach@Base 1:9.11.3+dfsg
+ dns_dbtable_find@Base 1:9.11.3+dfsg
+ dns_dbtable_getdefault@Base 1:9.11.3+dfsg
+ dns_dbtable_remove@Base 1:9.11.3+dfsg
+ dns_dbtable_removedefault@Base 1:9.11.3+dfsg
+ dns_decompress_edns@Base 1:9.11.3+dfsg
+ dns_decompress_getmethods@Base 1:9.11.3+dfsg
+ dns_decompress_init@Base 1:9.11.3+dfsg
+ dns_decompress_invalidate@Base 1:9.11.3+dfsg
+ dns_decompress_setmethods@Base 1:9.11.3+dfsg
+ dns_decompress_type@Base 1:9.11.3+dfsg
+ dns_diff_append@Base 1:9.11.3+dfsg
+ dns_diff_appendminimal@Base 1:9.11.3+dfsg
+ dns_diff_apply@Base 1:9.11.3+dfsg
+ dns_diff_applysilently@Base 1:9.11.3+dfsg
+ dns_diff_clear@Base 1:9.11.3+dfsg
+ dns_diff_init@Base 1:9.11.3+dfsg
+ dns_diff_load@Base 1:9.11.3+dfsg
+ dns_diff_print@Base 1:9.11.3+dfsg
+ dns_diff_sort@Base 1:9.11.3+dfsg
+ dns_difftuple_copy@Base 1:9.11.3+dfsg
+ dns_difftuple_create@Base 1:9.11.3+dfsg
+ dns_difftuple_free@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse2@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse3@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_attach@Base 1:9.11.3+dfsg
+ dns_dispatch_cancel@Base 1:9.11.3+dfsg
+ dns_dispatch_changeattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp@Base 1:9.11.3+dfsg
+ dns_dispatch_detach@Base 1:9.11.3+dfsg
+ dns_dispatch_getattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_getdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg
+ dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg
+ dns_dispatch_getnext@Base 1:9.11.3+dfsg
+ dns_dispatch_getsocket@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg
+ dns_dispatch_importrecv@Base 1:9.11.3+dfsg
+ dns_dispatch_removeresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_setdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_starttcp@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_create@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg
+ dns_dispatchset_cancelall@Base 1:9.11.3+dfsg
+ dns_dispatchset_create@Base 1:9.11.3+dfsg
+ dns_dispatchset_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchset_get@Base 1:9.11.3+dfsg
+ dns_dlz_ssumatch@Base 1:9.11.3+dfsg
+ dns_dlz_writeablezone@Base 1:9.11.3+dfsg
+ dns_dlzallowzonexfr@Base 1:9.11.3+dfsg
+ dns_dlzconfigure@Base 1:9.11.3+dfsg
+ dns_dlzcreate@Base 1:9.11.3+dfsg
+ dns_dlzdestroy@Base 1:9.11.3+dfsg
+ dns_dlzregister@Base 1:9.11.3+dfsg
+ dns_dlzstrtoargv@Base 1:9.11.3+dfsg
+ dns_dlzunregister@Base 1:9.11.3+dfsg
+ dns_dns64_aaaafroma@Base 1:9.11.3+dfsg
+ dns_dns64_aaaaok@Base 1:9.11.3+dfsg
+ dns_dns64_append@Base 1:9.11.3+dfsg
+ dns_dns64_create@Base 1:9.11.3+dfsg
+ dns_dns64_destroy@Base 1:9.11.3+dfsg
+ dns_dns64_next@Base 1:9.11.3+dfsg
+ dns_dns64_unlink@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_keyactive@Base 1:9.11.3+dfsg
+ dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg
+ dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg
+ dns_dnssec_selfsigns@Base 1:9.11.3+dfsg
+ dns_dnssec_sign@Base 1:9.11.3+dfsg
+ dns_dnssec_signmessage@Base 1:9.11.3+dfsg
+ dns_dnssec_signs@Base 1:9.11.3+dfsg
+ dns_dnssec_stats@Base 1:9.11.3+dfsg
+ dns_dnssec_syncupdate@Base 1:9.11.3+dfsg
+ dns_dnssec_updatekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_verify2@Base 1:9.11.3+dfsg
+ dns_dnssec_verify3@Base 1:9.11.3+dfsg
+ dns_dnssec_verify@Base 1:9.11.3+dfsg
+ dns_dnssec_verifymessage@Base 1:9.11.3+dfsg
+ dns_dnsseckey_create@Base 1:9.11.3+dfsg
+ dns_dnsseckey_destroy@Base 1:9.11.3+dfsg
+ dns_ds_buildrdata@Base 1:9.11.3+dfsg
+ dns_dsdigest_format@Base 1:9.11.3+dfsg
+ dns_dsdigest_fromtext@Base 1:9.11.3+dfsg
+ dns_dsdigest_totext@Base 1:9.11.3+dfsg
+ dns_dt_attach@Base 1:9.11.4.P1
+ dns_dt_close@Base 1:9.11.4.P1
+ dns_dt_create@Base 1:9.11.4.P1
+ dns_dt_datatotext@Base 1:9.11.4.P1
+ dns_dt_detach@Base 1:9.11.4.P1
+ dns_dt_getframe@Base 1:9.11.4.P1
+ dns_dt_getstats@Base 1:9.11.4.P1
+ dns_dt_open@Base 1:9.11.4.P1
+ dns_dt_parse@Base 1:9.11.4.P1
+ dns_dt_reopen@Base 1:9.11.4.P1
+ dns_dt_send@Base 1:9.11.4.P1
+ dns_dt_setidentity@Base 1:9.11.4.P1
+ dns_dt_setversion@Base 1:9.11.4.P1
+ dns_dt_shutdown@Base 1:9.11.4.P1
+ dns_dtdata_free@Base 1:9.11.4.P1
+ dns_dumpctx_attach@Base 1:9.11.3+dfsg
+ dns_dumpctx_cancel@Base 1:9.11.3+dfsg
+ dns_dumpctx_db@Base 1:9.11.3+dfsg
+ dns_dumpctx_detach@Base 1:9.11.3+dfsg
+ dns_dumpctx_version@Base 1:9.11.3+dfsg
+ dns_dyndb_cleanup@Base 1:9.11.3+dfsg
+ dns_dyndb_createctx@Base 1:9.11.3+dfsg
+ dns_dyndb_destroyctx@Base 1:9.11.3+dfsg
+ dns_dyndb_load@Base 1:9.11.3+dfsg
+ dns_ecdb_register@Base 1:9.11.3+dfsg
+ dns_ecdb_unregister@Base 1:9.11.3+dfsg
+ dns_fixedname_init@Base 1:9.11.4+dfsg
+ dns_fixedname_initname@Base 1:9.11.4+dfsg
+ dns_fixedname_invalidate@Base 1:9.11.4+dfsg
+ dns_fixedname_name@Base 1:9.11.4+dfsg
+ dns_fullname_hash@Base 1:9.11.3+dfsg
+ dns_fwdtable_add@Base 1:9.11.3+dfsg
+ dns_fwdtable_addfwd@Base 1:9.11.3+dfsg
+ dns_fwdtable_create@Base 1:9.11.3+dfsg
+ dns_fwdtable_delete@Base 1:9.11.3+dfsg
+ dns_fwdtable_destroy@Base 1:9.11.3+dfsg
+ dns_fwdtable_find2@Base 1:9.11.3+dfsg
+ dns_fwdtable_find@Base 1:9.11.3+dfsg
+ dns_generalstats_create@Base 1:9.11.3+dfsg
+ dns_generalstats_dump@Base 1:9.11.3+dfsg
+ dns_generalstats_increment@Base 1:9.11.3+dfsg
+ dns_geoip_match@Base 1:9.11.3+dfsg
+ dns_geoip_shutdown@Base 1:9.11.3+dfsg
+ dns_hashalg_fromtext@Base 1:9.11.3+dfsg
+ dns_ipkeylist_clear@Base 1:9.11.3+dfsg
+ dns_ipkeylist_copy@Base 1:9.11.3+dfsg
+ dns_ipkeylist_init@Base 1:9.11.3+dfsg
+ dns_ipkeylist_resize@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix2@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix@Base 1:9.11.3+dfsg
+ dns_iptable_attach@Base 1:9.11.3+dfsg
+ dns_iptable_create@Base 1:9.11.3+dfsg
+ dns_iptable_detach@Base 1:9.11.3+dfsg
+ dns_iptable_merge@Base 1:9.11.3+dfsg
+ dns_journal_begin_transaction@Base 1:9.11.3+dfsg
+ dns_journal_commit@Base 1:9.11.3+dfsg
+ dns_journal_compact@Base 1:9.11.3+dfsg
+ dns_journal_current_rr@Base 1:9.11.3+dfsg
+ dns_journal_destroy@Base 1:9.11.3+dfsg
+ dns_journal_first_rr@Base 1:9.11.3+dfsg
+ dns_journal_first_serial@Base 1:9.11.3+dfsg
+ dns_journal_get_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_iter_init@Base 1:9.11.3+dfsg
+ dns_journal_last_serial@Base 1:9.11.3+dfsg
+ dns_journal_next_rr@Base 1:9.11.3+dfsg
+ dns_journal_open@Base 1:9.11.3+dfsg
+ dns_journal_print@Base 1:9.11.3+dfsg
+ dns_journal_rollforward@Base 1:9.11.3+dfsg
+ dns_journal_set_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_write_transaction@Base 1:9.11.3+dfsg
+ dns_journal_writediff@Base 1:9.11.3+dfsg
+ dns_keydata_fromdnskey@Base 1:9.11.3+dfsg
+ dns_keydata_todnskey@Base 1:9.11.3+dfsg
+ dns_keyflags_fromtext@Base 1:9.11.3+dfsg
+ dns_keynode_attach@Base 1:9.11.3+dfsg
+ dns_keynode_create@Base 1:9.11.3+dfsg
+ dns_keynode_detach@Base 1:9.11.3+dfsg
+ dns_keynode_detachall@Base 1:9.11.3+dfsg
+ dns_keynode_key@Base 1:9.11.3+dfsg
+ dns_keynode_managed@Base 1:9.11.3+dfsg
+ dns_keyring_restore@Base 1:9.11.3+dfsg
+ dns_keytable_add@Base 1:9.11.3+dfsg
+ dns_keytable_attach@Base 1:9.11.3+dfsg
+ dns_keytable_attachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_create@Base 1:9.11.3+dfsg
+ dns_keytable_delete@Base 1:9.11.3+dfsg
+ dns_keytable_deletekeynode@Base 1:9.11.3+dfsg
+ dns_keytable_detach@Base 1:9.11.3+dfsg
+ dns_keytable_detachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_dump@Base 1:9.11.3+dfsg
+ dns_keytable_find@Base 1:9.11.3+dfsg
+ dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg
+ dns_keytable_findkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_forall@Base 1:9.11.3+dfsg
+ dns_keytable_issecuredomain@Base 1:9.11.3+dfsg
+ dns_keytable_marksecure@Base 1:9.11.3+dfsg
+ dns_keytable_nextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_totext@Base 1:9.11.3+dfsg
+ dns_lctx@Base 1:9.11.3+dfsg
+ dns_lib_init@Base 1:9.11.3+dfsg
+ dns_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dns_lib_shutdown@Base 1:9.11.3+dfsg
+ dns_libage@Base 1:9.11.3+dfsg
+ dns_libinterface@Base 1:9.11.3+dfsg
+ dns_librevision@Base 1:9.11.3+dfsg
+ dns_loadctx_attach@Base 1:9.11.3+dfsg
+ dns_loadctx_cancel@Base 1:9.11.3+dfsg
+ dns_loadctx_detach@Base 1:9.11.3+dfsg
+ dns_log_init@Base 1:9.11.3+dfsg
+ dns_log_setcontext@Base 1:9.11.3+dfsg
+ dns_lookup_cancel@Base 1:9.11.3+dfsg
+ dns_lookup_create@Base 1:9.11.3+dfsg
+ dns_lookup_destroy@Base 1:9.11.3+dfsg
+ dns_major@Base 1:9.11.3+dfsg
+ dns_mapapi@Base 1:9.11.3+dfsg
+ dns_master_dump2@Base 1:9.11.3+dfsg
+ dns_master_dump3@Base 1:9.11.3+dfsg
+ dns_master_dump@Base 1:9.11.3+dfsg
+ dns_master_dumpinc2@Base 1:9.11.3+dfsg
+ dns_master_dumpinc3@Base 1:9.11.3+dfsg
+ dns_master_dumpinc@Base 1:9.11.3+dfsg
+ dns_master_dumpnode@Base 1:9.11.3+dfsg
+ dns_master_dumpnodetostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostream2@Base 1:9.11.3+dfsg
+ dns_master_dumptostream3@Base 1:9.11.3+dfsg
+ dns_master_dumptostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostreaminc@Base 1:9.11.3+dfsg
+ dns_master_indent@Base 1:9.11.3+dfsg
+ dns_master_indentstr@Base 1:9.11.3+dfsg
+ dns_master_initrawheader@Base 1:9.11.3+dfsg
+ dns_master_loadbuffer@Base 1:9.11.3+dfsg
+ dns_master_loadbufferinc@Base 1:9.11.3+dfsg
+ dns_master_loadfile2@Base 1:9.11.3+dfsg
+ dns_master_loadfile3@Base 1:9.11.3+dfsg
+ dns_master_loadfile4@Base 1:9.11.3+dfsg
+ dns_master_loadfile5@Base 1:9.11.3+dfsg
+ dns_master_loadfile@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc2@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc3@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc4@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc5@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc@Base 1:9.11.3+dfsg
+ dns_master_loadlexer@Base 1:9.11.3+dfsg
+ dns_master_loadlexerinc@Base 1:9.11.3+dfsg
+ dns_master_loadstream@Base 1:9.11.3+dfsg
+ dns_master_loadstreaminc@Base 1:9.11.3+dfsg
+ dns_master_questiontotext@Base 1:9.11.3+dfsg
+ dns_master_rdatasettotext@Base 1:9.11.3+dfsg
+ dns_master_style_cache@Base 1:9.11.3+dfsg
+ dns_master_style_comment@Base 1:9.11.3+dfsg
+ dns_master_style_debug@Base 1:9.11.3+dfsg
+ dns_master_style_default@Base 1:9.11.3+dfsg
+ dns_master_style_explicitttl@Base 1:9.11.3+dfsg
+ dns_master_style_full@Base 1:9.11.3+dfsg
+ dns_master_style_indent@Base 1:9.11.3+dfsg
+ dns_master_style_keyzone@Base 1:9.11.3+dfsg
+ dns_master_style_simple@Base 1:9.11.3+dfsg
+ dns_master_style_yaml@Base 1:9.11.3+dfsg
+ dns_master_stylecreate2@Base 1:9.11.3+dfsg
+ dns_master_stylecreate@Base 1:9.11.3+dfsg
+ dns_master_styledestroy@Base 1:9.11.3+dfsg
+ dns_master_styleflags@Base 1:9.11.3+dfsg
+ dns_message_addname@Base 1:9.11.3+dfsg
+ dns_message_buildopt@Base 1:9.11.3+dfsg
+ dns_message_checksig@Base 1:9.11.3+dfsg
+ dns_message_create@Base 1:9.11.3+dfsg
+ dns_message_currentname@Base 1:9.11.3+dfsg
+ dns_message_destroy@Base 1:9.11.3+dfsg
+ dns_message_find@Base 1:9.11.3+dfsg
+ dns_message_findname@Base 1:9.11.3+dfsg
+ dns_message_findtype@Base 1:9.11.3+dfsg
+ dns_message_firstname@Base 1:9.11.3+dfsg
+ dns_message_getopt@Base 1:9.11.3+dfsg
+ dns_message_getquerytsig@Base 1:9.11.3+dfsg
+ dns_message_getrawmessage@Base 1:9.11.3+dfsg
+ dns_message_getsig0@Base 1:9.11.3+dfsg
+ dns_message_getsig0key@Base 1:9.11.3+dfsg
+ dns_message_gettempname@Base 1:9.11.3+dfsg
+ dns_message_gettempoffsets@Base 1:9.11.3+dfsg
+ dns_message_gettemprdata@Base 1:9.11.3+dfsg
+ dns_message_gettemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_gettemprdataset@Base 1:9.11.3+dfsg
+ dns_message_gettimeadjust@Base 1:9.11.3+dfsg
+ dns_message_gettsig@Base 1:9.11.3+dfsg
+ dns_message_gettsigkey@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket2@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket@Base 1:9.11.3+dfsg
+ dns_message_logpacket2@Base 1:9.11.3+dfsg
+ dns_message_logpacket@Base 1:9.11.3+dfsg
+ dns_message_movename@Base 1:9.11.3+dfsg
+ dns_message_nextname@Base 1:9.11.3+dfsg
+ dns_message_parse@Base 1:9.11.3+dfsg
+ dns_message_peekheader@Base 1:9.11.3+dfsg
+ dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg
+ dns_message_puttempname@Base 1:9.11.3+dfsg
+ dns_message_puttemprdata@Base 1:9.11.3+dfsg
+ dns_message_puttemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_puttemprdataset@Base 1:9.11.3+dfsg
+ dns_message_rechecksig@Base 1:9.11.3+dfsg
+ dns_message_removename@Base 1:9.11.3+dfsg
+ dns_message_renderbegin@Base 1:9.11.3+dfsg
+ dns_message_renderchangebuffer@Base 1:9.11.3+dfsg
+ dns_message_renderend@Base 1:9.11.3+dfsg
+ dns_message_renderheader@Base 1:9.11.3+dfsg
+ dns_message_renderrelease@Base 1:9.11.3+dfsg
+ dns_message_renderreserve@Base 1:9.11.3+dfsg
+ dns_message_renderreset@Base 1:9.11.3+dfsg
+ dns_message_rendersection@Base 1:9.11.3+dfsg
+ dns_message_reply@Base 1:9.11.3+dfsg
+ dns_message_reset@Base 1:9.11.3+dfsg
+ dns_message_resetsig@Base 1:9.11.3+dfsg
+ dns_message_sectiontotext@Base 1:9.11.3+dfsg
+ dns_message_setclass@Base 1:9.11.3+dfsg
+ dns_message_setopt@Base 1:9.11.3+dfsg
+ dns_message_setquerytsig@Base 1:9.11.3+dfsg
+ dns_message_setsig0key@Base 1:9.11.3+dfsg
+ dns_message_setsortorder@Base 1:9.11.3+dfsg
+ dns_message_settimeadjust@Base 1:9.11.3+dfsg
+ dns_message_settsigkey@Base 1:9.11.3+dfsg
+ dns_message_signer@Base 1:9.11.3+dfsg
+ dns_message_takebuffer@Base 1:9.11.3+dfsg
+ dns_message_totext@Base 1:9.11.3+dfsg
+ dns_modules@Base 1:9.11.3+dfsg
+ dns_msgcat@Base 1:9.11.3+dfsg
+ dns_name_caseequal@Base 1:9.11.3+dfsg
+ dns_name_clone@Base 1:9.11.3+dfsg
+ dns_name_compare@Base 1:9.11.3+dfsg
+ dns_name_concatenate@Base 1:9.11.3+dfsg
+ dns_name_copy@Base 1:9.11.3+dfsg
+ dns_name_countlabels@Base 1:9.11.3+dfsg
+ dns_name_destroy@Base 1:9.11.3+dfsg
+ dns_name_digest@Base 1:9.11.3+dfsg
+ dns_name_downcase@Base 1:9.11.3+dfsg
+ dns_name_dup@Base 1:9.11.3+dfsg
+ dns_name_dupwithoffsets@Base 1:9.11.3+dfsg
+ dns_name_dynamic@Base 1:9.11.3+dfsg
+ dns_name_equal@Base 1:9.11.3+dfsg
+ dns_name_format@Base 1:9.11.3+dfsg
+ dns_name_free@Base 1:9.11.3+dfsg
+ dns_name_fromregion@Base 1:9.11.3+dfsg
+ dns_name_fromstring2@Base 1:9.11.3+dfsg
+ dns_name_fromstring@Base 1:9.11.3+dfsg
+ dns_name_fromtext@Base 1:9.11.3+dfsg
+ dns_name_fromwire@Base 1:9.11.3+dfsg
+ dns_name_fullcompare@Base 1:9.11.3+dfsg
+ dns_name_fullhash@Base 1:9.11.3+dfsg
+ dns_name_getlabel@Base 1:9.11.3+dfsg
+ dns_name_getlabelsequence@Base 1:9.11.3+dfsg
+ dns_name_hasbuffer@Base 1:9.11.3+dfsg
+ dns_name_hash@Base 1:9.11.3+dfsg
+ dns_name_hashbylabel@Base 1:9.11.3+dfsg
+ dns_name_init@Base 1:9.11.3+dfsg
+ dns_name_internalwildcard@Base 1:9.11.3+dfsg
+ dns_name_invalidate@Base 1:9.11.3+dfsg
+ dns_name_isabsolute@Base 1:9.11.3+dfsg
+ dns_name_isdnssd@Base 1:9.11.3+dfsg
+ dns_name_ishostname@Base 1:9.11.3+dfsg
+ dns_name_ismailbox@Base 1:9.11.3+dfsg
+ dns_name_isrfc1918@Base 1:9.11.3+dfsg
+ dns_name_issubdomain@Base 1:9.11.3+dfsg
+ dns_name_istat@Base 1:9.11.3+dfsg
+ dns_name_isula@Base 1:9.11.3+dfsg
+ dns_name_isvalid@Base 1:9.11.3+dfsg
+ dns_name_iswildcard@Base 1:9.11.3+dfsg
+ dns_name_matcheswildcard@Base 1:9.11.3+dfsg
+ dns_name_print@Base 1:9.11.3+dfsg
+ dns_name_rdatacompare@Base 1:9.11.3+dfsg
+ dns_name_reset@Base 1:9.11.3+dfsg
+ dns_name_setbuffer@Base 1:9.11.3+dfsg
+ dns_name_settotextfilter@Base 1:9.11.3+dfsg
+ dns_name_split@Base 1:9.11.3+dfsg
+ dns_name_tofilenametext@Base 1:9.11.3+dfsg
+ dns_name_toprincipal@Base 1:9.11.3+dfsg
+ dns_name_toregion@Base 1:9.11.3+dfsg
+ dns_name_tostring@Base 1:9.11.3+dfsg
+ dns_name_totext2@Base 1:9.11.3+dfsg
+ dns_name_totext@Base 1:9.11.3+dfsg
+ dns_name_towire@Base 1:9.11.3+dfsg
+ dns_ncache_add@Base 1:9.11.3+dfsg
+ dns_ncache_addoptout@Base 1:9.11.3+dfsg
+ dns_ncache_current@Base 1:9.11.3+dfsg
+ dns_ncache_getrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_towire@Base 1:9.11.3+dfsg
+ dns_nsec3_active@Base 1:9.11.3+dfsg
+ dns_nsec3_activex@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_hashlength@Base 1:9.11.3+dfsg
+ dns_nsec3_hashname@Base 1:9.11.3+dfsg
+ dns_nsec3_maxiterations@Base 1:9.11.3+dfsg
+ dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec3_supportedhash@Base 1:9.11.3+dfsg
+ dns_nsec3_typepresent@Base 1:9.11.3+dfsg
+ dns_nsec3param_deletechains@Base 1:9.11.3+dfsg
+ dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg
+ dns_nsec3param_salttotext@Base 1:9.11.3+dfsg
+ dns_nsec3param_toprivate@Base 1:9.11.3+dfsg
+ dns_nsec_build@Base 1:9.11.3+dfsg
+ dns_nsec_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec_compressbitmap@Base 1:9.11.3+dfsg
+ dns_nsec_isset@Base 1:9.11.3+dfsg
+ dns_nsec_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec_nseconly@Base 1:9.11.3+dfsg
+ dns_nsec_setbit@Base 1:9.11.3+dfsg
+ dns_nsec_typepresent@Base 1:9.11.3+dfsg
+ dns_ntatable_add@Base 1:9.11.3+dfsg
+ dns_ntatable_attach@Base 1:9.11.3+dfsg
+ dns_ntatable_covered@Base 1:9.11.3+dfsg
+ dns_ntatable_create@Base 1:9.11.3+dfsg
+ dns_ntatable_delete@Base 1:9.11.3+dfsg
+ dns_ntatable_detach@Base 1:9.11.3+dfsg
+ dns_ntatable_dump@Base 1:9.11.3+dfsg
+ dns_ntatable_save@Base 1:9.11.3+dfsg
+ dns_ntatable_totext@Base 1:9.11.3+dfsg
+ dns_opcode_totext@Base 1:9.11.3+dfsg
+ dns_opcodestats_create@Base 1:9.11.3+dfsg
+ dns_opcodestats_dump@Base 1:9.11.3+dfsg
+ dns_opcodestats_increment@Base 1:9.11.3+dfsg
+ dns_order_add@Base 1:9.11.3+dfsg
+ dns_order_attach@Base 1:9.11.3+dfsg
+ dns_order_create@Base 1:9.11.3+dfsg
+ dns_order_detach@Base 1:9.11.3+dfsg
+ dns_order_find@Base 1:9.11.3+dfsg
+ dns_peer_attach@Base 1:9.11.3+dfsg
+ dns_peer_detach@Base 1:9.11.3+dfsg
+ dns_peer_getbogus@Base 1:9.11.3+dfsg
+ dns_peer_getednsversion@Base 1:9.11.3+dfsg
+ dns_peer_getforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_getkey@Base 1:9.11.3+dfsg
+ dns_peer_getmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_getprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_getquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_getquerysource@Base 1:9.11.3+dfsg
+ dns_peer_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_getrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_getsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_getsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_gettransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_gettransferformat@Base 1:9.11.3+dfsg
+ dns_peer_gettransfers@Base 1:9.11.3+dfsg
+ dns_peer_gettransfersource@Base 1:9.11.3+dfsg
+ dns_peer_getudpsize@Base 1:9.11.3+dfsg
+ dns_peer_new@Base 1:9.11.3+dfsg
+ dns_peer_newprefix@Base 1:9.11.3+dfsg
+ dns_peer_setbogus@Base 1:9.11.3+dfsg
+ dns_peer_setednsversion@Base 1:9.11.3+dfsg
+ dns_peer_setforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_setkey@Base 1:9.11.3+dfsg
+ dns_peer_setkeybycharp@Base 1:9.11.3+dfsg
+ dns_peer_setmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_setprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_setquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_setquerysource@Base 1:9.11.3+dfsg
+ dns_peer_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_setrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_setsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_setsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_settransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_settransferformat@Base 1:9.11.3+dfsg
+ dns_peer_settransfers@Base 1:9.11.3+dfsg
+ dns_peer_settransfersource@Base 1:9.11.3+dfsg
+ dns_peer_setudpsize@Base 1:9.11.3+dfsg
+ dns_peerlist_addpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_attach@Base 1:9.11.3+dfsg
+ dns_peerlist_currpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_detach@Base 1:9.11.3+dfsg
+ dns_peerlist_new@Base 1:9.11.3+dfsg
+ dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg
+ dns_portlist_add@Base 1:9.11.3+dfsg
+ dns_portlist_attach@Base 1:9.11.3+dfsg
+ dns_portlist_create@Base 1:9.11.3+dfsg
+ dns_portlist_detach@Base 1:9.11.3+dfsg
+ dns_portlist_match@Base 1:9.11.3+dfsg
+ dns_portlist_remove@Base 1:9.11.3+dfsg
+ dns_pps@Base 1:9.11.3+dfsg
+ dns_private_chains@Base 1:9.11.3+dfsg
+ dns_private_totext@Base 1:9.11.3+dfsg
+ dns_rbt_addname@Base 1:9.11.3+dfsg
+ dns_rbt_addnode@Base 1:9.11.3+dfsg
+ dns_rbt_create@Base 1:9.11.3+dfsg
+ dns_rbt_deletename@Base 1:9.11.3+dfsg
+ dns_rbt_deletenode@Base 1:9.11.3+dfsg
+ dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg
+ dns_rbt_destroy2@Base 1:9.11.3+dfsg
+ dns_rbt_destroy@Base 1:9.11.3+dfsg
+ dns_rbt_findname@Base 1:9.11.3+dfsg
+ dns_rbt_findnode@Base 1:9.11.3+dfsg
+ dns_rbt_formatnodename@Base 1:9.11.3+dfsg
+ dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_hashsize@Base 1:9.11.3+dfsg
+ dns_rbt_namefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_nodecount@Base 1:9.11.3+dfsg
+ dns_rbt_printdot@Base 1:9.11.3+dfsg
+ dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg
+ dns_rbt_printtext@Base 1:9.11.3+dfsg
+ dns_rbt_root@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_align@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_tree@Base 1:9.11.3+dfsg
+ dns_rbtdb64_create@Base 1:9.11.3+dfsg
+ dns_rbtdb_create@Base 1:9.11.3+dfsg
+ dns_rbtnode_nodename@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_current@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_down@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_first@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_init@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_last@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_next@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_prev@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_reset@Base 1:9.11.3+dfsg
+ dns_rcode_fromtext@Base 1:9.11.3+dfsg
+ dns_rcode_totext@Base 1:9.11.3+dfsg
+ dns_rcodestats_create@Base 1:9.11.3+dfsg
+ dns_rcodestats_dump@Base 1:9.11.3+dfsg
+ dns_rcodestats_increment@Base 1:9.11.3+dfsg
+ dns_rdata_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdata_apl_count@Base 1:9.11.3+dfsg
+ dns_rdata_apl_current@Base 1:9.11.3+dfsg
+ dns_rdata_apl_first@Base 1:9.11.3+dfsg
+ dns_rdata_apl_next@Base 1:9.11.3+dfsg
+ dns_rdata_casecompare@Base 1:9.11.3+dfsg
+ dns_rdata_checknames@Base 1:9.11.3+dfsg
+ dns_rdata_checkowner@Base 1:9.11.3+dfsg
+ dns_rdata_clone@Base 1:9.11.3+dfsg
+ dns_rdata_compare@Base 1:9.11.3+dfsg
+ dns_rdata_covers@Base 1:9.11.3+dfsg
+ dns_rdata_deleterrset@Base 1:9.11.3+dfsg
+ dns_rdata_digest@Base 1:9.11.3+dfsg
+ dns_rdata_exists@Base 1:9.11.3+dfsg
+ dns_rdata_freestruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromregion@Base 1:9.11.3+dfsg
+ dns_rdata_fromstruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromtext@Base 1:9.11.3+dfsg
+ dns_rdata_fromwire@Base 1:9.11.3+dfsg
+ dns_rdata_hip_current@Base 1:9.11.3+dfsg
+ dns_rdata_hip_first@Base 1:9.11.3+dfsg
+ dns_rdata_hip_next@Base 1:9.11.3+dfsg
+ dns_rdata_init@Base 1:9.11.3+dfsg
+ dns_rdata_makedelete@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_current@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_first@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_next@Base 1:9.11.3+dfsg
+ dns_rdata_notexist@Base 1:9.11.3+dfsg
+ dns_rdata_opt_current@Base 1:9.11.3+dfsg
+ dns_rdata_opt_first@Base 1:9.11.3+dfsg
+ dns_rdata_opt_next@Base 1:9.11.3+dfsg
+ dns_rdata_reset@Base 1:9.11.3+dfsg
+ dns_rdata_tofmttext@Base 1:9.11.3+dfsg
+ dns_rdata_toregion@Base 1:9.11.3+dfsg
+ dns_rdata_tostruct@Base 1:9.11.3+dfsg
+ dns_rdata_totext@Base 1:9.11.3+dfsg
+ dns_rdata_towire@Base 1:9.11.3+dfsg
+ dns_rdata_txt_current@Base 1:9.11.3+dfsg
+ dns_rdata_txt_first@Base 1:9.11.3+dfsg
+ dns_rdata_txt_next@Base 1:9.11.3+dfsg
+ dns_rdata_updateop@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg
+ dns_rdataclass_format@Base 1:9.11.3+dfsg
+ dns_rdataclass_fromtext@Base 1:9.11.3+dfsg
+ dns_rdataclass_ismeta@Base 1:9.11.3+dfsg
+ dns_rdataclass_totext@Base 1:9.11.3+dfsg
+ dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdatalist_init@Base 1:9.11.3+dfsg
+ dns_rdatalist_tordataset@Base 1:9.11.3+dfsg
+ dns_rdataset_addclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdataset_addnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg
+ dns_rdataset_clone@Base 1:9.11.3+dfsg
+ dns_rdataset_count@Base 1:9.11.3+dfsg
+ dns_rdataset_current@Base 1:9.11.3+dfsg
+ dns_rdataset_disassociate@Base 1:9.11.3+dfsg
+ dns_rdataset_expire@Base 1:9.11.3+dfsg
+ dns_rdataset_first@Base 1:9.11.3+dfsg
+ dns_rdataset_getadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_getclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_getnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_getownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_init@Base 1:9.11.3+dfsg
+ dns_rdataset_invalidate@Base 1:9.11.3+dfsg
+ dns_rdataset_isassociated@Base 1:9.11.3+dfsg
+ dns_rdataset_makequestion@Base 1:9.11.3+dfsg
+ dns_rdataset_next@Base 1:9.11.3+dfsg
+ dns_rdataset_putadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_settrust@Base 1:9.11.3+dfsg
+ dns_rdataset_totext@Base 1:9.11.3+dfsg
+ dns_rdataset_towire@Base 1:9.11.3+dfsg
+ dns_rdataset_towirepartial@Base 1:9.11.3+dfsg
+ dns_rdataset_towiresorted@Base 1:9.11.3+dfsg
+ dns_rdataset_trimttl@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_current@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_first@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_next@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_create@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_dump@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_increment@Base 1:9.11.3+dfsg
+ dns_rdataslab_count@Base 1:9.11.3+dfsg
+ dns_rdataslab_equal@Base 1:9.11.3+dfsg
+ dns_rdataslab_equalx@Base 1:9.11.3+dfsg
+ dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdataslab_merge@Base 1:9.11.3+dfsg
+ dns_rdataslab_size@Base 1:9.11.3+dfsg
+ dns_rdataslab_subtract@Base 1:9.11.3+dfsg
+ dns_rdataslab_tordataset@Base 1:9.11.3+dfsg
+ dns_rdatatype_atparent@Base 1:9.11.3+dfsg
+ dns_rdatatype_attributes@Base 1:9.11.3+dfsg
+ dns_rdatatype_format@Base 1:9.11.3+dfsg
+ dns_rdatatype_fromtext@Base 1:9.11.3+dfsg
+ dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg
+ dns_rdatatype_isknown@Base 1:9.11.3+dfsg
+ dns_rdatatype_ismeta@Base 1:9.11.3+dfsg
+ dns_rdatatype_issingleton@Base 1:9.11.3+dfsg
+ dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg
+ dns_rdatatype_notquestion@Base 1:9.11.3+dfsg
+ dns_rdatatype_questiononly@Base 1:9.11.3+dfsg
+ dns_rdatatype_totext@Base 1:9.11.3+dfsg
+ dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_create@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_dump@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_increment@Base 1:9.11.3+dfsg
+ dns_request_cancel@Base 1:9.11.3+dfsg
+ dns_request_create@Base 1:9.11.3+dfsg
+ dns_request_createraw2@Base 1:9.11.3+dfsg
+ dns_request_createraw3@Base 1:9.11.3+dfsg
+ dns_request_createraw4@Base 1:9.11.3+dfsg
+ dns_request_createraw@Base 1:9.11.3+dfsg
+ dns_request_createvia2@Base 1:9.11.3+dfsg
+ dns_request_createvia3@Base 1:9.11.3+dfsg
+ dns_request_createvia4@Base 1:9.11.3+dfsg
+ dns_request_createvia@Base 1:9.11.3+dfsg
+ dns_request_destroy@Base 1:9.11.3+dfsg
+ dns_request_getresponse@Base 1:9.11.3+dfsg
+ dns_request_usedtcp@Base 1:9.11.3+dfsg
+ dns_requestmgr_attach@Base 1:9.11.3+dfsg
+ dns_requestmgr_create@Base 1:9.11.3+dfsg
+ dns_requestmgr_detach@Base 1:9.11.3+dfsg
+ dns_requestmgr_shutdown@Base 1:9.11.3+dfsg
+ dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg
+ dns_resolver_addalternate@Base 1:9.11.3+dfsg
+ dns_resolver_addbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg
+ dns_resolver_attach@Base 1:9.11.3+dfsg
+ dns_resolver_cancelfetch@Base 1:9.11.3+dfsg
+ dns_resolver_create@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch2@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch3@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch@Base 1:9.11.3+dfsg
+ dns_resolver_destroyfetch@Base 1:9.11.3+dfsg
+ dns_resolver_detach@Base 1:9.11.3+dfsg
+ dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg
+ dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv4@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv6@Base 1:9.11.3+dfsg
+ dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg
+ dns_resolver_dumpfetches@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadnames@Base 1:9.11.3+dfsg
+ dns_resolver_freeze@Base 1:9.11.3+dfsg
+ dns_resolver_getbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_getlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_getoptions@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_gettimeout@Base 1:9.11.3+dfsg
+ dns_resolver_getudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_logfetch@Base 1:9.11.3+dfsg
+ dns_resolver_nrunning@Base 1:9.11.3+dfsg
+ dns_resolver_prime@Base 1:9.11.3+dfsg
+ dns_resolver_printbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg
+ dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg
+ dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg
+ dns_resolver_setlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_settimeout@Base 1:9.11.3+dfsg
+ dns_resolver_setudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_shutdown@Base 1:9.11.3+dfsg
+ dns_resolver_socketmgr@Base 1:9.11.3+dfsg
+ dns_resolver_taskmgr@Base 1:9.11.3+dfsg
+ dns_resolver_whenshutdown@Base 1:9.11.3+dfsg
+ dns_result_register@Base 1:9.11.3+dfsg
+ dns_result_torcode@Base 1:9.11.3+dfsg
+ dns_result_totext@Base 1:9.11.3+dfsg
+ dns_root_checkhints@Base 1:9.11.3+dfsg
+ dns_rootname@Base 1:9.11.3+dfsg
+ dns_rootns_create@Base 1:9.11.3+dfsg
+ dns_rpz_add@Base 1:9.11.3+dfsg
+ dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_beginload@Base 1:9.11.3+dfsg
+ dns_rpz_decode_cname@Base 1:9.11.3+dfsg
+ dns_rpz_delete@Base 1:9.11.3+dfsg
+ dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_find_ip@Base 1:9.11.3+dfsg
+ dns_rpz_find_name@Base 1:9.11.3+dfsg
+ dns_rpz_new_zones@Base 1:9.11.3+dfsg
+ dns_rpz_policy2str@Base 1:9.11.3+dfsg
+ dns_rpz_ready@Base 1:9.11.3+dfsg
+ dns_rpz_str2policy@Base 1:9.11.3+dfsg
+ dns_rpz_type2str@Base 1:9.11.3+dfsg
+ dns_rriterator_current@Base 1:9.11.3+dfsg
+ dns_rriterator_destroy@Base 1:9.11.3+dfsg
+ dns_rriterator_first@Base 1:9.11.3+dfsg
+ dns_rriterator_init@Base 1:9.11.3+dfsg
+ dns_rriterator_next@Base 1:9.11.3+dfsg
+ dns_rriterator_nextrrset@Base 1:9.11.3+dfsg
+ dns_rriterator_pause@Base 1:9.11.3+dfsg
+ dns_rrl@Base 1:9.11.3+dfsg
+ dns_rrl_init@Base 1:9.11.3+dfsg
+ dns_rrl_view_destroy@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdb_putrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putrr@Base 1:9.11.3+dfsg
+ dns_sdb_putsoa@Base 1:9.11.3+dfsg
+ dns_sdb_register@Base 1:9.11.3+dfsg
+ dns_sdb_unregister@Base 1:9.11.3+dfsg
+ dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putsoa@Base 1:9.11.3+dfsg
+ dns_sdlz_setdb@Base 1:9.11.3+dfsg
+ dns_sdlzregister@Base 1:9.11.3+dfsg
+ dns_sdlzunregister@Base 1:9.11.3+dfsg
+ dns_secalg_format@Base 1:9.11.3+dfsg
+ dns_secalg_fromtext@Base 1:9.11.3+dfsg
+ dns_secalg_totext@Base 1:9.11.3+dfsg
+ dns_secproto_fromtext@Base 1:9.11.3+dfsg
+ dns_secproto_totext@Base 1:9.11.3+dfsg
+ dns_soa_buildrdata@Base 1:9.11.3+dfsg
+ dns_soa_getexpire@Base 1:9.11.3+dfsg
+ dns_soa_getminimum@Base 1:9.11.3+dfsg
+ dns_soa_getrefresh@Base 1:9.11.3+dfsg
+ dns_soa_getretry@Base 1:9.11.3+dfsg
+ dns_soa_getserial@Base 1:9.11.3+dfsg
+ dns_soa_setexpire@Base 1:9.11.3+dfsg
+ dns_soa_setminimum@Base 1:9.11.3+dfsg
+ dns_soa_setrefresh@Base 1:9.11.3+dfsg
+ dns_soa_setretry@Base 1:9.11.3+dfsg
+ dns_soa_setserial@Base 1:9.11.3+dfsg
+ dns_ssu_external_match@Base 1:9.11.3+dfsg
+ dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg
+ dns_ssurule_identity@Base 1:9.11.3+dfsg
+ dns_ssurule_isgrant@Base 1:9.11.3+dfsg
+ dns_ssurule_matchtype@Base 1:9.11.3+dfsg
+ dns_ssurule_name@Base 1:9.11.3+dfsg
+ dns_ssurule_types@Base 1:9.11.3+dfsg
+ dns_ssutable_addrule@Base 1:9.11.3+dfsg
+ dns_ssutable_attach@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules2@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules@Base 1:9.11.3+dfsg
+ dns_ssutable_create@Base 1:9.11.3+dfsg
+ dns_ssutable_createdlz@Base 1:9.11.3+dfsg
+ dns_ssutable_detach@Base 1:9.11.3+dfsg
+ dns_ssutable_firstrule@Base 1:9.11.3+dfsg
+ dns_ssutable_nextrule@Base 1:9.11.3+dfsg
+ dns_stats_alloccounters@Base 1:9.11.3+dfsg
+ dns_stats_attach@Base 1:9.11.3+dfsg
+ dns_stats_detach@Base 1:9.11.3+dfsg
+ dns_stats_freecounters@Base 1:9.11.3+dfsg
+ dns_statscounter_names@Base 1:9.11.3+dfsg
+ dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg
+ dns_tcpmsg_init@Base 1:9.11.3+dfsg
+ dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg
+ dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg
+ dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg
+ dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg
+ dns_time32_fromtext@Base 1:9.11.3+dfsg
+ dns_time32_totext@Base 1:9.11.3+dfsg
+ dns_time64_from32@Base 1:9.11.3+dfsg
+ dns_time64_fromtext@Base 1:9.11.3+dfsg
+ dns_time64_totext@Base 1:9.11.3+dfsg
+ dns_timer_setidle@Base 1:9.11.3+dfsg
+ dns_tkey_builddeletequery@Base 1:9.11.3+dfsg
+ dns_tkey_builddhquery@Base 1:9.11.3+dfsg
+ dns_tkey_buildgssquery@Base 1:9.11.3+dfsg
+ dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg
+ dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processdhresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processgssresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processquery@Base 1:9.11.3+dfsg
+ dns_tkeyctx_create@Base 1:9.11.3+dfsg
+ dns_tkeyctx_destroy@Base 1:9.11.3+dfsg
+ dns_trust_totext@Base 1:9.11.3+dfsg
+ dns_tsec_create@Base 1:9.11.3+dfsg
+ dns_tsec_destroy@Base 1:9.11.3+dfsg
+ dns_tsec_getkey@Base 1:9.11.3+dfsg
+ dns_tsec_gettype@Base 1:9.11.3+dfsg
+ dns_tsig_gssapi_name@Base 1:9.11.3+dfsg
+ dns_tsig_gssapims_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg
+ dns_tsig_sign@Base 1:9.11.3+dfsg
+ dns_tsig_verify@Base 1:9.11.3+dfsg
+ dns_tsigkey_attach@Base 1:9.11.3+dfsg
+ dns_tsigkey_create@Base 1:9.11.3+dfsg
+ dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg
+ dns_tsigkey_detach@Base 1:9.11.3+dfsg
+ dns_tsigkey_find@Base 1:9.11.3+dfsg
+ dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_add@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_attach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_create@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_detach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg
+ dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg
+ dns_tsigrcode_totext@Base 1:9.11.3+dfsg
+ dns_ttl_fromtext@Base 1:9.11.3+dfsg
+ dns_ttl_totext2@Base 1:9.11.3+dfsg
+ dns_ttl_totext@Base 1:9.11.3+dfsg
+ dns_update_signatures@Base 1:9.11.3+dfsg
+ dns_update_signaturesinc@Base 1:9.11.3+dfsg
+ dns_update_soaserial@Base 1:9.11.3+dfsg
+ dns_validator_cancel@Base 1:9.11.3+dfsg
+ dns_validator_create@Base 1:9.11.3+dfsg
+ dns_validator_destroy@Base 1:9.11.3+dfsg
+ dns_validator_send@Base 1:9.11.3+dfsg
+ dns_version@Base 1:9.11.3+dfsg
+ dns_view_adddelegationonly@Base 1:9.11.3+dfsg
+ dns_view_addzone@Base 1:9.11.3+dfsg
+ dns_view_asyncload2@Base 1:9.11.5+dfsg
+ dns_view_asyncload@Base 1:9.11.3+dfsg
+ dns_view_attach@Base 1:9.11.3+dfsg
+ dns_view_checksig@Base 1:9.11.3+dfsg
+ dns_view_create@Base 1:9.11.3+dfsg
+ dns_view_createresolver@Base 1:9.11.3+dfsg
+ dns_view_createzonetable@Base 1:9.11.3+dfsg
+ dns_view_detach@Base 1:9.11.3+dfsg
+ dns_view_dialup@Base 1:9.11.3+dfsg
+ dns_view_dumpdbtostream@Base 1:9.11.3+dfsg
+ dns_view_excludedelegationonly@Base 1:9.11.3+dfsg
+ dns_view_find2@Base 1:9.11.3+dfsg
+ dns_view_find@Base 1:9.11.3+dfsg
+ dns_view_findzone@Base 1:9.11.3+dfsg
+ dns_view_findzonecut2@Base 1:9.11.3+dfsg
+ dns_view_findzonecut@Base 1:9.11.3+dfsg
+ dns_view_flushanddetach@Base 1:9.11.3+dfsg
+ dns_view_flushcache2@Base 1:9.11.3+dfsg
+ dns_view_flushcache@Base 1:9.11.3+dfsg
+ dns_view_flushname@Base 1:9.11.3+dfsg
+ dns_view_flushnode@Base 1:9.11.3+dfsg
+ dns_view_freeze@Base 1:9.11.3+dfsg
+ dns_view_freezezones@Base 1:9.11.3+dfsg
+ dns_view_getadbstats@Base 1:9.11.3+dfsg
+ dns_view_getdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_getfailttl@Base 1:9.11.3+dfsg
+ dns_view_getntatable@Base 1:9.11.3+dfsg
+ dns_view_getpeertsig@Base 1:9.11.3+dfsg
+ dns_view_getresquerystats@Base 1:9.11.3+dfsg
+ dns_view_getresstats@Base 1:9.11.3+dfsg
+ dns_view_getrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_getsecroots@Base 1:9.11.3+dfsg
+ dns_view_gettsig@Base 1:9.11.3+dfsg
+ dns_view_initntatable@Base 1:9.11.3+dfsg
+ dns_view_initsecroots@Base 1:9.11.3+dfsg
+ dns_view_iscacheshared@Base 1:9.11.3+dfsg
+ dns_view_isdelegationonly@Base 1:9.11.3+dfsg
+ dns_view_issecuredomain@Base 1:9.11.3+dfsg
+ dns_view_load@Base 1:9.11.3+dfsg
+ dns_view_loadnew@Base 1:9.11.3+dfsg
+ dns_view_loadnta@Base 1:9.11.3+dfsg
+ dns_view_ntacovers@Base 1:9.11.3+dfsg
+ dns_view_restorekeyring@Base 1:9.11.3+dfsg
+ dns_view_saventa@Base 1:9.11.3+dfsg
+ dns_view_searchdlz@Base 1:9.11.3+dfsg
+ dns_view_setadbstats@Base 1:9.11.3+dfsg
+ dns_view_setcache2@Base 1:9.11.3+dfsg
+ dns_view_setcache@Base 1:9.11.3+dfsg
+ dns_view_setdstport@Base 1:9.11.3+dfsg
+ dns_view_setdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_setfailttl@Base 1:9.11.3+dfsg
+ dns_view_sethints@Base 1:9.11.3+dfsg
+ dns_view_setkeyring@Base 1:9.11.3+dfsg
+ dns_view_setnewzones@Base 1:9.11.3+dfsg
+ dns_view_setresquerystats@Base 1:9.11.3+dfsg
+ dns_view_setresstats@Base 1:9.11.3+dfsg
+ dns_view_setrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_simplefind@Base 1:9.11.3+dfsg
+ dns_view_thaw@Base 1:9.11.3+dfsg
+ dns_view_untrust@Base 1:9.11.3+dfsg
+ dns_view_weakattach@Base 1:9.11.3+dfsg
+ dns_view_weakdetach@Base 1:9.11.3+dfsg
+ dns_viewlist_find@Base 1:9.11.3+dfsg
+ dns_viewlist_findzone@Base 1:9.11.3+dfsg
+ dns_wildcardname@Base 1:9.11.3+dfsg
+ dns_xfrin_attach@Base 1:9.11.3+dfsg
+ dns_xfrin_create2@Base 1:9.11.3+dfsg
+ dns_xfrin_create3@Base 1:9.11.3+dfsg
+ dns_xfrin_create@Base 1:9.11.3+dfsg
+ dns_xfrin_detach@Base 1:9.11.3+dfsg
+ dns_xfrin_shutdown@Base 1:9.11.3+dfsg
+ dns_zone_addnsec3chain@Base 1:9.11.3+dfsg
+ dns_zone_asyncload2@Base 1:9.11.5+dfsg
+ dns_zone_asyncload@Base 1:9.11.3+dfsg
+ dns_zone_attach@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_cdscheck@Base 1:9.11.3+dfsg
+ dns_zone_checknames@Base 1:9.11.3+dfsg
+ dns_zone_clearforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_clearupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_clearxfracl@Base 1:9.11.3+dfsg
+ dns_zone_create@Base 1:9.11.3+dfsg
+ dns_zone_detach@Base 1:9.11.3+dfsg
+ dns_zone_dialup@Base 1:9.11.3+dfsg
+ dns_zone_dlzpostload@Base 1:9.11.3+dfsg
+ dns_zone_dump@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream2@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream3@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream@Base 1:9.11.3+dfsg
+ dns_zone_expire@Base 1:9.11.3+dfsg
+ dns_zone_first@Base 1:9.11.3+dfsg
+ dns_zone_flush@Base 1:9.11.3+dfsg
+ dns_zone_forcereload@Base 1:9.11.3+dfsg
+ dns_zone_forwardupdate@Base 1:9.11.3+dfsg
+ dns_zone_fulldumptostream@Base 1:9.11.3+dfsg
+ dns_zone_get_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_get_rpz_num@Base 1:9.11.3+dfsg
+ dns_zone_getadded@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getautomatic@Base 1:9.11.3+dfsg
+ dns_zone_getchecknames@Base 1:9.11.3+dfsg
+ dns_zone_getclass@Base 1:9.11.3+dfsg
+ dns_zone_getdb@Base 1:9.11.3+dfsg
+ dns_zone_getdbtype@Base 1:9.11.3+dfsg
+ dns_zone_getexpiretime@Base 1:9.11.3+dfsg
+ dns_zone_getfile@Base 1:9.11.3+dfsg
+ dns_zone_getforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_getidlein@Base 1:9.11.3+dfsg
+ dns_zone_getidleout@Base 1:9.11.3+dfsg
+ dns_zone_getincludes@Base 1:9.11.3+dfsg
+ dns_zone_getjournal@Base 1:9.11.3+dfsg
+ dns_zone_getjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_getkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_getkeyopts@Base 1:9.11.3+dfsg
+ dns_zone_getloadtime@Base 1:9.11.3+dfsg
+ dns_zone_getmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_getmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_getmctx@Base 1:9.11.3+dfsg
+ dns_zone_getmgr@Base 1:9.11.3+dfsg
+ dns_zone_getnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_getnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getoptions2@Base 1:9.11.3+dfsg
+ dns_zone_getoptions@Base 1:9.11.3+dfsg
+ dns_zone_getorigin@Base 1:9.11.3+dfsg
+ dns_zone_getprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_getqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_getqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_getraw@Base 1:9.11.3+dfsg
+ dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_getrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_getserial2@Base 1:9.11.3+dfsg
+ dns_zone_getserial@Base 1:9.11.3+dfsg
+ dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_getsignatures@Base 1:9.11.3+dfsg
+ dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_getssutable@Base 1:9.11.3+dfsg
+ dns_zone_getstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_getstatscounters@Base 1:9.11.3+dfsg
+ dns_zone_gettask@Base 1:9.11.3+dfsg
+ dns_zone_gettype@Base 1:9.11.3+dfsg
+ dns_zone_getupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_getview@Base 1:9.11.3+dfsg
+ dns_zone_getxfracl@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_iattach@Base 1:9.11.3+dfsg
+ dns_zone_idetach@Base 1:9.11.3+dfsg
+ dns_zone_isdynamic@Base 1:9.11.3+dfsg
+ dns_zone_isforced@Base 1:9.11.3+dfsg
+ dns_zone_keydone@Base 1:9.11.3+dfsg
+ dns_zone_link@Base 1:9.11.3+dfsg
+ dns_zone_load@Base 1:9.11.3+dfsg
+ dns_zone_loadandthaw@Base 1:9.11.3+dfsg
+ dns_zone_loadnew@Base 1:9.11.3+dfsg
+ dns_zone_log@Base 1:9.11.3+dfsg
+ dns_zone_logc@Base 1:9.11.3+dfsg
+ dns_zone_logv@Base 1:9.11.4+dfsg
+ dns_zone_maintenance@Base 1:9.11.3+dfsg
+ dns_zone_markdirty@Base 1:9.11.3+dfsg
+ dns_zone_mkey_day@Base 1:9.11.3+dfsg
+ dns_zone_mkey_hour@Base 1:9.11.3+dfsg
+ dns_zone_mkey_month@Base 1:9.11.3+dfsg
+ dns_zone_name@Base 1:9.11.3+dfsg
+ dns_zone_nameonly@Base 1:9.11.3+dfsg
+ dns_zone_next@Base 1:9.11.3+dfsg
+ dns_zone_notify@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive@Base 1:9.11.3+dfsg
+ dns_zone_nscheck@Base 1:9.11.3+dfsg
+ dns_zone_refresh@Base 1:9.11.3+dfsg
+ dns_zone_rekey@Base 1:9.11.3+dfsg
+ dns_zone_replacedb@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_set_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_setacache@Base 1:9.11.3+dfsg
+ dns_zone_setadded@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotify@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setautomatic@Base 1:9.11.3+dfsg
+ dns_zone_setcheckmx@Base 1:9.11.3+dfsg
+ dns_zone_setchecknames@Base 1:9.11.3+dfsg
+ dns_zone_setcheckns@Base 1:9.11.3+dfsg
+ dns_zone_setchecksrv@Base 1:9.11.3+dfsg
+ dns_zone_setclass@Base 1:9.11.3+dfsg
+ dns_zone_setdb@Base 1:9.11.3+dfsg
+ dns_zone_setdbtype@Base 1:9.11.3+dfsg
+ dns_zone_setdialup@Base 1:9.11.3+dfsg
+ dns_zone_setfile2@Base 1:9.11.3+dfsg
+ dns_zone_setfile3@Base 1:9.11.3+dfsg
+ dns_zone_setfile@Base 1:9.11.3+dfsg
+ dns_zone_setflag@Base 1:9.11.3+dfsg
+ dns_zone_setforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_setidlein@Base 1:9.11.3+dfsg
+ dns_zone_setidleout@Base 1:9.11.3+dfsg
+ dns_zone_setisself@Base 1:9.11.3+dfsg
+ dns_zone_setjournal@Base 1:9.11.3+dfsg
+ dns_zone_setjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_setkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_setkeyopt@Base 1:9.11.3+dfsg
+ dns_zone_setmasters@Base 1:9.11.3+dfsg
+ dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setminretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setnodes@Base 1:9.11.3+dfsg
+ dns_zone_setnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_setnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifytype@Base 1:9.11.3+dfsg
+ dns_zone_setnsec3param@Base 1:9.11.3+dfsg
+ dns_zone_setoption2@Base 1:9.11.3+dfsg
+ dns_zone_setoption@Base 1:9.11.3+dfsg
+ dns_zone_setorigin@Base 1:9.11.3+dfsg
+ dns_zone_setprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_setqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_setqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_setrawdata@Base 1:9.11.3+dfsg
+ dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg
+ dns_zone_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_setrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_setserial@Base 1:9.11.3+dfsg
+ dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_setsignatures@Base 1:9.11.3+dfsg
+ dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_setssutable@Base 1:9.11.3+dfsg
+ dns_zone_setstatistics@Base 1:9.11.3+dfsg
+ dns_zone_setstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_setstats@Base 1:9.11.3+dfsg
+ dns_zone_settask@Base 1:9.11.3+dfsg
+ dns_zone_settype@Base 1:9.11.3+dfsg
+ dns_zone_setupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_setview@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setxfracl@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_signwithkey@Base 1:9.11.3+dfsg
+ dns_zone_synckeyzone@Base 1:9.11.3+dfsg
+ dns_zone_unload@Base 1:9.11.3+dfsg
+ dns_zonekey_iszonekey@Base 1:9.11.3+dfsg
+ dns_zonemgr_attach@Base 1:9.11.3+dfsg
+ dns_zonemgr_create@Base 1:9.11.3+dfsg
+ dns_zonemgr_createzone@Base 1:9.11.3+dfsg
+ dns_zonemgr_detach@Base 1:9.11.3+dfsg
+ dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg
+ dns_zonemgr_getcount@Base 1:9.11.3+dfsg
+ dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_managezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_releasezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg
+ dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setsize@Base 1:9.11.3+dfsg
+ dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_shutdown@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachable@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg
+ dns_zt_apply2@Base 1:9.11.3+dfsg
+ dns_zt_apply@Base 1:9.11.3+dfsg
+ dns_zt_asyncload2@Base 1:9.11.5+dfsg
+ dns_zt_asyncload@Base 1:9.11.3+dfsg
+ dns_zt_attach@Base 1:9.11.3+dfsg
+ dns_zt_create@Base 1:9.11.3+dfsg
+ dns_zt_detach@Base 1:9.11.3+dfsg
+ dns_zt_find@Base 1:9.11.3+dfsg
+ dns_zt_flushanddetach@Base 1:9.11.3+dfsg
+ dns_zt_freezezones@Base 1:9.11.3+dfsg
+ dns_zt_load@Base 1:9.11.3+dfsg
+ dns_zt_loadnew@Base 1:9.11.3+dfsg
+ dns_zt_mount@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_unmount@Base 1:9.11.3+dfsg
+ dnstap__dnstap__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1
+ dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1
+ dnstap__dnstap__init@Base 1:9.11.4.P1
+ dnstap__dnstap__pack@Base 1:9.11.4.P1
+ dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__unpack@Base 1:9.11.4.P1
+ dnstap__message__descriptor@Base 1:9.11.4.P1
+ dnstap__message__free_unpacked@Base 1:9.11.4.P1
+ dnstap__message__get_packed_size@Base 1:9.11.4.P1
+ dnstap__message__init@Base 1:9.11.4.P1
+ dnstap__message__pack@Base 1:9.11.4.P1
+ dnstap__message__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__message__type__descriptor@Base 1:9.11.4.P1
+ dnstap__message__unpack@Base 1:9.11.4.P1
+ dnstap__socket_family__descriptor@Base 1:9.11.4.P1
+ dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1
+ dst__entropy_getdata@Base 1:9.11.3+dfsg
+ dst__entropy_status@Base 1:9.11.3+dfsg
+ dst__gssapi_init@Base 1:9.11.3+dfsg
+ dst__hmacmd5_init@Base 1:9.11.3+dfsg
+ dst__hmacsha1_init@Base 1:9.11.3+dfsg
+ dst__hmacsha224_init@Base 1:9.11.3+dfsg
+ dst__hmacsha256_init@Base 1:9.11.3+dfsg
+ dst__hmacsha384_init@Base 1:9.11.3+dfsg
+ dst__hmacsha512_init@Base 1:9.11.3+dfsg
+ dst__memory_pool@Base 1:9.11.3+dfsg
+ dst__pkcs11_toresult@Base 1:9.11.3+dfsg
+ dst__pkcs11dh_init@Base 1:9.11.3+dfsg
+ dst__pkcs11dsa_init@Base 1:9.11.3+dfsg
+ dst__pkcs11ecdsa_init@Base 1:9.11.3+dfsg
+ dst__pkcs11rsa_init@Base 1:9.11.3+dfsg
+ dst__privstruct_free@Base 1:9.11.3+dfsg
+ dst__privstruct_parse@Base 1:9.11.3+dfsg
+ dst__privstruct_writefile@Base 1:9.11.3+dfsg
+ dst_algorithm_supported@Base 1:9.11.3+dfsg
+ dst_context_adddata@Base 1:9.11.3+dfsg
+ dst_context_create2@Base 1:9.11.3+dfsg
+ dst_context_create3@Base 1:9.11.3+dfsg
+ dst_context_create4@Base 1:9.11.3+dfsg
+ dst_context_create@Base 1:9.11.3+dfsg
+ dst_context_destroy@Base 1:9.11.3+dfsg
+ dst_context_sign@Base 1:9.11.3+dfsg
+ dst_context_verify2@Base 1:9.11.3+dfsg
+ dst_context_verify@Base 1:9.11.3+dfsg
+ dst_ds_digest_supported@Base 1:9.11.3+dfsg
+ dst_gssapi_acceptctx@Base 1:9.11.3+dfsg
+ dst_gssapi_acquirecred@Base 1:9.11.3+dfsg
+ dst_gssapi_deletectx@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg
+ dst_gssapi_initctx@Base 1:9.11.3+dfsg
+ dst_gssapi_releasecred@Base 1:9.11.3+dfsg
+ dst_key_alg@Base 1:9.11.3+dfsg
+ dst_key_attach@Base 1:9.11.3+dfsg
+ dst_key_buildfilename@Base 1:9.11.3+dfsg
+ dst_key_buildinternal@Base 1:9.11.3+dfsg
+ dst_key_class@Base 1:9.11.3+dfsg
+ dst_key_compare@Base 1:9.11.3+dfsg
+ dst_key_computesecret@Base 1:9.11.3+dfsg
+ dst_key_dump@Base 1:9.11.3+dfsg
+ dst_key_flags@Base 1:9.11.3+dfsg
+ dst_key_format@Base 1:9.11.3+dfsg
+ dst_key_free@Base 1:9.11.3+dfsg
+ dst_key_frombuffer@Base 1:9.11.3+dfsg
+ dst_key_fromdns@Base 1:9.11.3+dfsg
+ dst_key_fromfile@Base 1:9.11.3+dfsg
+ dst_key_fromgssapi@Base 1:9.11.3+dfsg
+ dst_key_fromlabel@Base 1:9.11.3+dfsg
+ dst_key_fromnamedfile@Base 1:9.11.3+dfsg
+ dst_key_generate2@Base 1:9.11.3+dfsg
+ dst_key_generate@Base 1:9.11.3+dfsg
+ dst_key_getbits@Base 1:9.11.3+dfsg
+ dst_key_getfilename@Base 1:9.11.3+dfsg
+ dst_key_getgssctx@Base 1:9.11.3+dfsg
+ dst_key_getnum@Base 1:9.11.3+dfsg
+ dst_key_getprivateformat@Base 1:9.11.3+dfsg
+ dst_key_gettime@Base 1:9.11.3+dfsg
+ dst_key_getttl@Base 1:9.11.3+dfsg
+ dst_key_id@Base 1:9.11.3+dfsg
+ dst_key_inactive@Base 1:9.11.3+dfsg
+ dst_key_isexternal@Base 1:9.11.3+dfsg
+ dst_key_isnullkey@Base 1:9.11.3+dfsg
+ dst_key_isprivate@Base 1:9.11.3+dfsg
+ dst_key_iszonekey@Base 1:9.11.3+dfsg
+ dst_key_name@Base 1:9.11.3+dfsg
+ dst_key_paramcompare@Base 1:9.11.3+dfsg
+ dst_key_privatefrombuffer@Base 1:9.11.3+dfsg
+ dst_key_proto@Base 1:9.11.3+dfsg
+ dst_key_pubcompare@Base 1:9.11.3+dfsg
+ dst_key_read_public@Base 1:9.11.3+dfsg
+ dst_key_restore@Base 1:9.11.3+dfsg
+ dst_key_rid@Base 1:9.11.3+dfsg
+ dst_key_secretsize@Base 1:9.11.3+dfsg
+ dst_key_setbits@Base 1:9.11.3+dfsg
+ dst_key_setexternal@Base 1:9.11.3+dfsg
+ dst_key_setflags@Base 1:9.11.3+dfsg
+ dst_key_setinactive@Base 1:9.11.3+dfsg
+ dst_key_setnum@Base 1:9.11.3+dfsg
+ dst_key_setprivateformat@Base 1:9.11.3+dfsg
+ dst_key_settime@Base 1:9.11.3+dfsg
+ dst_key_setttl@Base 1:9.11.3+dfsg
+ dst_key_sigsize@Base 1:9.11.3+dfsg
+ dst_key_size@Base 1:9.11.3+dfsg
+ dst_key_tkeytoken@Base 1:9.11.3+dfsg
+ dst_key_tobuffer@Base 1:9.11.3+dfsg
+ dst_key_todns@Base 1:9.11.3+dfsg
+ dst_key_tofile@Base 1:9.11.3+dfsg
+ dst_key_unsetnum@Base 1:9.11.3+dfsg
+ dst_key_unsettime@Base 1:9.11.3+dfsg
+ dst_lib_destroy@Base 1:9.11.3+dfsg
+ dst_lib_init2@Base 1:9.11.3+dfsg
+ dst_lib_init@Base 1:9.11.3+dfsg
+ dst_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dst_msgcat@Base 1:9.11.3+dfsg
+ dst_region_computeid@Base 1:9.11.3+dfsg
+ dst_region_computerid@Base 1:9.11.3+dfsg
+ dst_result_register@Base 1:9.11.3+dfsg
+ dst_result_totext@Base 1:9.11.3+dfsg
+ gss_error_tostring@Base 1:9.11.3+dfsg
+ gss_log@Base 1:9.11.3+dfsg
+ isc__rdatalist_addclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_clone@Base 1:9.11.3+dfsg
+ isc__rdatalist_count@Base 1:9.11.3+dfsg
+ isc__rdatalist_current@Base 1:9.11.3+dfsg
+ isc__rdatalist_disassociate@Base 1:9.11.3+dfsg
+ isc__rdatalist_first@Base 1:9.11.3+dfsg
+ isc__rdatalist_getclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_getownercase@Base 1:9.11.3+dfsg
+ isc__rdatalist_next@Base 1:9.11.3+dfsg
+ isc__rdatalist_setownercase@Base 1:9.11.3+dfsg
+ ishex@Base 1:9.11.3+dfsg
+libdns.so.1104 libdns1104 #MINVER#
+ dns__rbt_checkproperties@Base 1:9.11.3+dfsg
+ dns__rbt_getheight@Base 1:9.11.3+dfsg
+ dns__rbtnode_getdistance@Base 1:9.11.3+dfsg
+ dns__zone_findkeys@Base 1:9.11.4+dfsg
+ dns__zone_loadpending@Base 1:9.11.3+dfsg
+ dns__zone_updatesigs@Base 1:9.11.4+dfsg
+ dns_acache_attach@Base 1:9.11.3+dfsg
+ dns_acache_attachentry@Base 1:9.11.3+dfsg
+ dns_acache_cancelentry@Base 1:9.11.3+dfsg
+ dns_acache_countquerymiss@Base 1:9.11.3+dfsg
+ dns_acache_create@Base 1:9.11.3+dfsg
+ dns_acache_createentry@Base 1:9.11.3+dfsg
+ dns_acache_detach@Base 1:9.11.3+dfsg
+ dns_acache_detachentry@Base 1:9.11.3+dfsg
+ dns_acache_getentry@Base 1:9.11.3+dfsg
+ dns_acache_putdb@Base 1:9.11.3+dfsg
+ dns_acache_setcachesize@Base 1:9.11.3+dfsg
+ dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_acache_setdb@Base 1:9.11.3+dfsg
+ dns_acache_setentry@Base 1:9.11.3+dfsg
+ dns_acache_shutdown@Base 1:9.11.3+dfsg
+ dns_acl_any@Base 1:9.11.3+dfsg
+ dns_acl_attach@Base 1:9.11.3+dfsg
+ dns_acl_create@Base 1:9.11.3+dfsg
+ dns_acl_detach@Base 1:9.11.3+dfsg
+ dns_acl_isany@Base 1:9.11.3+dfsg
+ dns_acl_isinsecure@Base 1:9.11.3+dfsg
+ dns_acl_isnone@Base 1:9.11.3+dfsg
+ dns_acl_match2@Base 1:9.11.3+dfsg
+ dns_acl_match@Base 1:9.11.3+dfsg
+ dns_acl_merge@Base 1:9.11.3+dfsg
+ dns_acl_none@Base 1:9.11.3+dfsg
+ dns_aclelement_match2@Base 1:9.11.3+dfsg
+ dns_aclelement_match@Base 1:9.11.3+dfsg
+ dns_aclenv_copy@Base 1:9.11.3+dfsg
+ dns_aclenv_destroy@Base 1:9.11.3+dfsg
+ dns_aclenv_init@Base 1:9.11.3+dfsg
+ dns_adb_adjustsrtt@Base 1:9.11.3+dfsg
+ dns_adb_agesrtt@Base 1:9.11.3+dfsg
+ dns_adb_attach@Base 1:9.11.3+dfsg
+ dns_adb_beginudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_cancelfind@Base 1:9.11.3+dfsg
+ dns_adb_changeflags@Base 1:9.11.3+dfsg
+ dns_adb_create@Base 1:9.11.3+dfsg
+ dns_adb_createfind2@Base 1:9.11.3+dfsg
+ dns_adb_createfind@Base 1:9.11.3+dfsg
+ dns_adb_destroyfind@Base 1:9.11.3+dfsg
+ dns_adb_detach@Base 1:9.11.3+dfsg
+ dns_adb_dump@Base 1:9.11.3+dfsg
+ dns_adb_dumpfind@Base 1:9.11.3+dfsg
+ dns_adb_ednsto@Base 1:9.11.3+dfsg
+ dns_adb_endudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_findaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_flush@Base 1:9.11.3+dfsg
+ dns_adb_flushname@Base 1:9.11.3+dfsg
+ dns_adb_flushnames@Base 1:9.11.3+dfsg
+ dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_getcookie@Base 1:9.11.3+dfsg
+ dns_adb_getudpsize@Base 1:9.11.3+dfsg
+ dns_adb_marklame@Base 1:9.11.3+dfsg
+ dns_adb_noedns@Base 1:9.11.3+dfsg
+ dns_adb_plainresponse@Base 1:9.11.3+dfsg
+ dns_adb_probesize2@Base 1:9.11.3+dfsg
+ dns_adb_probesize@Base 1:9.11.3+dfsg
+ dns_adb_setadbsize@Base 1:9.11.3+dfsg
+ dns_adb_setcookie@Base 1:9.11.3+dfsg
+ dns_adb_setquota@Base 1:9.11.3+dfsg
+ dns_adb_setudpsize@Base 1:9.11.3+dfsg
+ dns_adb_shutdown@Base 1:9.11.3+dfsg
+ dns_adb_timeout@Base 1:9.11.3+dfsg
+ dns_adb_whenshutdown@Base 1:9.11.3+dfsg
+ dns_adbentry_overquota@Base 1:9.11.3+dfsg
+ dns_badcache_add@Base 1:9.11.3+dfsg
+ dns_badcache_destroy@Base 1:9.11.3+dfsg
+ dns_badcache_find@Base 1:9.11.3+dfsg
+ dns_badcache_flush@Base 1:9.11.3+dfsg
+ dns_badcache_flushname@Base 1:9.11.3+dfsg
+ dns_badcache_flushtree@Base 1:9.11.3+dfsg
+ dns_badcache_init@Base 1:9.11.3+dfsg
+ dns_badcache_print@Base 1:9.11.3+dfsg
+ dns_byaddr_cancel@Base 1:9.11.3+dfsg
+ dns_byaddr_create@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname2@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname@Base 1:9.11.3+dfsg
+ dns_byaddr_destroy@Base 1:9.11.3+dfsg
+ dns_cache_attach@Base 1:9.11.3+dfsg
+ dns_cache_attachdb@Base 1:9.11.3+dfsg
+ dns_cache_clean@Base 1:9.11.3+dfsg
+ dns_cache_create2@Base 1:9.11.3+dfsg
+ dns_cache_create3@Base 1:9.11.3+dfsg
+ dns_cache_create@Base 1:9.11.3+dfsg
+ dns_cache_detach@Base 1:9.11.3+dfsg
+ dns_cache_dump@Base 1:9.11.3+dfsg
+ dns_cache_dumpstats@Base 1:9.11.3+dfsg
+ dns_cache_flush@Base 1:9.11.3+dfsg
+ dns_cache_flushname@Base 1:9.11.3+dfsg
+ dns_cache_flushnode@Base 1:9.11.3+dfsg
+ dns_cache_getcachesize@Base 1:9.11.3+dfsg
+ dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_getname@Base 1:9.11.3+dfsg
+ dns_cache_getstats@Base 1:9.11.3+dfsg
+ dns_cache_load@Base 1:9.11.3+dfsg
+ dns_cache_renderjson@Base 1:9.11.3+dfsg
+ dns_cache_renderxml@Base 1:9.11.3+dfsg
+ dns_cache_setcachesize@Base 1:9.11.3+dfsg
+ dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_setfilename@Base 1:9.11.3+dfsg
+ dns_cache_updatestats@Base 1:9.11.3+dfsg
+ dns_categories@Base 1:9.11.3+dfsg
+ dns_catz_add_zone@Base 1:9.11.3+dfsg
+ dns_catz_catzs_attach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_detach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_set_view@Base 1:9.11.3+dfsg
+ dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg
+ dns_catz_entry_attach@Base 1:9.11.3+dfsg
+ dns_catz_entry_cmp@Base 1:9.11.3+dfsg
+ dns_catz_entry_copy@Base 1:9.11.3+dfsg
+ dns_catz_entry_detach@Base 1:9.11.3+dfsg
+ dns_catz_entry_getname@Base 1:9.11.3+dfsg
+ dns_catz_entry_new@Base 1:9.11.3+dfsg
+ dns_catz_entry_validate@Base 1:9.11.3+dfsg
+ dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg
+ dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg
+ dns_catz_get_iterator@Base 1:9.11.3+dfsg
+ dns_catz_get_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zones@Base 1:9.11.3+dfsg
+ dns_catz_options_copy@Base 1:9.11.3+dfsg
+ dns_catz_options_free@Base 1:9.11.3+dfsg
+ dns_catz_options_init@Base 1:9.11.3+dfsg
+ dns_catz_options_setdefault@Base 1:9.11.3+dfsg
+ dns_catz_postreconfig@Base 1:9.11.3+dfsg
+ dns_catz_prereconfig@Base 1:9.11.3+dfsg
+ dns_catz_update_from_db@Base 1:9.11.3+dfsg
+ dns_catz_update_process@Base 1:9.11.3+dfsg
+ dns_catz_update_taskaction@Base 1:9.11.3+dfsg
+ dns_catz_zone_attach@Base 1:9.11.3+dfsg
+ dns_catz_zone_detach@Base 1:9.11.3+dfsg
+ dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zone_getname@Base 1:9.11.3+dfsg
+ dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zones_merge@Base 1:9.11.3+dfsg
+ dns_cert_fromtext@Base 1:9.11.3+dfsg
+ dns_cert_totext@Base 1:9.11.3+dfsg
+ dns_client_addtrustedkey@Base 1:9.11.3+dfsg
+ dns_client_cancelrequest@Base 1:9.11.3+dfsg
+ dns_client_cancelresolve@Base 1:9.11.3+dfsg
+ dns_client_cancelupdate@Base 1:9.11.3+dfsg
+ dns_client_clearservers@Base 1:9.11.3+dfsg
+ dns_client_create@Base 1:9.11.3+dfsg
+ dns_client_createx2@Base 1:9.11.3+dfsg
+ dns_client_createx@Base 1:9.11.3+dfsg
+ dns_client_destroy@Base 1:9.11.3+dfsg
+ dns_client_destroyreqtrans@Base 1:9.11.3+dfsg
+ dns_client_destroyrestrans@Base 1:9.11.3+dfsg
+ dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg
+ dns_client_freeresanswer@Base 1:9.11.3+dfsg
+ dns_client_freeupdate@Base 1:9.11.3+dfsg
+ dns_client_mctx@Base 1:9.11.3+dfsg
+ dns_client_request@Base 1:9.11.3+dfsg
+ dns_client_resolve@Base 1:9.11.3+dfsg
+ dns_client_setdlv@Base 1:9.11.3+dfsg
+ dns_client_setservers@Base 1:9.11.3+dfsg
+ dns_client_startrequest@Base 1:9.11.3+dfsg
+ dns_client_startresolve@Base 1:9.11.3+dfsg
+ dns_client_startupdate@Base 1:9.11.3+dfsg
+ dns_client_update@Base 1:9.11.3+dfsg
+ dns_client_updaterec@Base 1:9.11.3+dfsg
+ dns_clientinfo_init@Base 1:9.11.3+dfsg
+ dns_clientinfomethods_init@Base 1:9.11.3+dfsg
+ dns_compress_add@Base 1:9.11.3+dfsg
+ dns_compress_disable@Base 1:9.11.3+dfsg
+ dns_compress_findglobal@Base 1:9.11.3+dfsg
+ dns_compress_getedns@Base 1:9.11.3+dfsg
+ dns_compress_getmethods@Base 1:9.11.3+dfsg
+ dns_compress_getsensitive@Base 1:9.11.3+dfsg
+ dns_compress_init@Base 1:9.11.3+dfsg
+ dns_compress_invalidate@Base 1:9.11.3+dfsg
+ dns_compress_rollback@Base 1:9.11.3+dfsg
+ dns_compress_setmethods@Base 1:9.11.3+dfsg
+ dns_compress_setsensitive@Base 1:9.11.3+dfsg
+ dns_counter_fromtext@Base 1:9.11.3+dfsg
+ dns_db_addrdataset@Base 1:9.11.3+dfsg
+ dns_db_allrdatasets@Base 1:9.11.3+dfsg
+ dns_db_attach@Base 1:9.11.3+dfsg
+ dns_db_attachnode@Base 1:9.11.3+dfsg
+ dns_db_attachversion@Base 1:9.11.3+dfsg
+ dns_db_beginload@Base 1:9.11.3+dfsg
+ dns_db_class@Base 1:9.11.3+dfsg
+ dns_db_closeversion@Base 1:9.11.3+dfsg
+ dns_db_create@Base 1:9.11.3+dfsg
+ dns_db_createiterator@Base 1:9.11.3+dfsg
+ dns_db_createsoatuple@Base 1:9.11.3+dfsg
+ dns_db_currentversion@Base 1:9.11.3+dfsg
+ dns_db_deleterdataset@Base 1:9.11.3+dfsg
+ dns_db_detach@Base 1:9.11.3+dfsg
+ dns_db_detachnode@Base 1:9.11.3+dfsg
+ dns_db_diff@Base 1:9.11.3+dfsg
+ dns_db_diffx@Base 1:9.11.3+dfsg
+ dns_db_dump2@Base 1:9.11.3+dfsg
+ dns_db_dump@Base 1:9.11.3+dfsg
+ dns_db_endload@Base 1:9.11.3+dfsg
+ dns_db_expirenode@Base 1:9.11.3+dfsg
+ dns_db_find@Base 1:9.11.3+dfsg
+ dns_db_findext@Base 1:9.11.3+dfsg
+ dns_db_findnode@Base 1:9.11.3+dfsg
+ dns_db_findnodeext@Base 1:9.11.3+dfsg
+ dns_db_findnsec3node@Base 1:9.11.3+dfsg
+ dns_db_findrdataset@Base 1:9.11.3+dfsg
+ dns_db_findzonecut@Base 1:9.11.3+dfsg
+ dns_db_getnsec3parameters@Base 1:9.11.3+dfsg
+ dns_db_getoriginnode@Base 1:9.11.3+dfsg
+ dns_db_getrrsetstats@Base 1:9.11.3+dfsg
+ dns_db_getsigningtime@Base 1:9.11.3+dfsg
+ dns_db_getsize@Base 1:9.11.3+dfsg
+ dns_db_getsoaserial@Base 1:9.11.3+dfsg
+ dns_db_hashsize@Base 1:9.11.3+dfsg
+ dns_db_iscache@Base 1:9.11.3+dfsg
+ dns_db_isdnssec@Base 1:9.11.3+dfsg
+ dns_db_ispersistent@Base 1:9.11.3+dfsg
+ dns_db_issecure@Base 1:9.11.3+dfsg
+ dns_db_isstub@Base 1:9.11.3+dfsg
+ dns_db_iszone@Base 1:9.11.3+dfsg
+ dns_db_load2@Base 1:9.11.3+dfsg
+ dns_db_load3@Base 1:9.11.3+dfsg
+ dns_db_load@Base 1:9.11.3+dfsg
+ dns_db_newversion@Base 1:9.11.3+dfsg
+ dns_db_nodecount@Base 1:9.11.3+dfsg
+ dns_db_nodefullname@Base 1:9.11.3+dfsg
+ dns_db_ondestroy@Base 1:9.11.3+dfsg
+ dns_db_origin@Base 1:9.11.3+dfsg
+ dns_db_overmem@Base 1:9.11.3+dfsg
+ dns_db_printnode@Base 1:9.11.3+dfsg
+ dns_db_register@Base 1:9.11.3+dfsg
+ dns_db_resigned@Base 1:9.11.3+dfsg
+ dns_db_rpz_attach@Base 1:9.11.3+dfsg
+ dns_db_rpz_ready@Base 1:9.11.3+dfsg
+ dns_db_serialize@Base 1:9.11.3+dfsg
+ dns_db_setcachestats@Base 1:9.11.3+dfsg
+ dns_db_setsigningtime@Base 1:9.11.3+dfsg
+ dns_db_settask@Base 1:9.11.3+dfsg
+ dns_db_subtractrdataset@Base 1:9.11.3+dfsg
+ dns_db_transfernode@Base 1:9.11.3+dfsg
+ dns_db_unregister@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_register@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg
+ dns_dbiterator_current@Base 1:9.11.3+dfsg
+ dns_dbiterator_destroy@Base 1:9.11.3+dfsg
+ dns_dbiterator_first@Base 1:9.11.3+dfsg
+ dns_dbiterator_last@Base 1:9.11.3+dfsg
+ dns_dbiterator_next@Base 1:9.11.3+dfsg
+ dns_dbiterator_origin@Base 1:9.11.3+dfsg
+ dns_dbiterator_pause@Base 1:9.11.3+dfsg
+ dns_dbiterator_prev@Base 1:9.11.3+dfsg
+ dns_dbiterator_seek@Base 1:9.11.3+dfsg
+ dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg
+ dns_dbtable_add@Base 1:9.11.3+dfsg
+ dns_dbtable_adddefault@Base 1:9.11.3+dfsg
+ dns_dbtable_attach@Base 1:9.11.3+dfsg
+ dns_dbtable_create@Base 1:9.11.3+dfsg
+ dns_dbtable_detach@Base 1:9.11.3+dfsg
+ dns_dbtable_find@Base 1:9.11.3+dfsg
+ dns_dbtable_getdefault@Base 1:9.11.3+dfsg
+ dns_dbtable_remove@Base 1:9.11.3+dfsg
+ dns_dbtable_removedefault@Base 1:9.11.3+dfsg
+ dns_decompress_edns@Base 1:9.11.3+dfsg
+ dns_decompress_getmethods@Base 1:9.11.3+dfsg
+ dns_decompress_init@Base 1:9.11.3+dfsg
+ dns_decompress_invalidate@Base 1:9.11.3+dfsg
+ dns_decompress_setmethods@Base 1:9.11.3+dfsg
+ dns_decompress_type@Base 1:9.11.3+dfsg
+ dns_diff_append@Base 1:9.11.3+dfsg
+ dns_diff_appendminimal@Base 1:9.11.3+dfsg
+ dns_diff_apply@Base 1:9.11.3+dfsg
+ dns_diff_applysilently@Base 1:9.11.3+dfsg
+ dns_diff_clear@Base 1:9.11.3+dfsg
+ dns_diff_init@Base 1:9.11.3+dfsg
+ dns_diff_load@Base 1:9.11.3+dfsg
+ dns_diff_print@Base 1:9.11.3+dfsg
+ dns_diff_sort@Base 1:9.11.3+dfsg
+ dns_difftuple_copy@Base 1:9.11.3+dfsg
+ dns_difftuple_create@Base 1:9.11.3+dfsg
+ dns_difftuple_free@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse2@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse3@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_attach@Base 1:9.11.3+dfsg
+ dns_dispatch_cancel@Base 1:9.11.3+dfsg
+ dns_dispatch_changeattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp@Base 1:9.11.3+dfsg
+ dns_dispatch_detach@Base 1:9.11.3+dfsg
+ dns_dispatch_getattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_getdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg
+ dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg
+ dns_dispatch_getnext@Base 1:9.11.3+dfsg
+ dns_dispatch_getsocket@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg
+ dns_dispatch_importrecv@Base 1:9.11.3+dfsg
+ dns_dispatch_removeresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_setdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_starttcp@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_create@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg
+ dns_dispatchset_cancelall@Base 1:9.11.3+dfsg
+ dns_dispatchset_create@Base 1:9.11.3+dfsg
+ dns_dispatchset_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchset_get@Base 1:9.11.3+dfsg
+ dns_dlz_ssumatch@Base 1:9.11.3+dfsg
+ dns_dlz_writeablezone@Base 1:9.11.3+dfsg
+ dns_dlzallowzonexfr@Base 1:9.11.3+dfsg
+ dns_dlzconfigure@Base 1:9.11.3+dfsg
+ dns_dlzcreate@Base 1:9.11.3+dfsg
+ dns_dlzdestroy@Base 1:9.11.3+dfsg
+ dns_dlzregister@Base 1:9.11.3+dfsg
+ dns_dlzstrtoargv@Base 1:9.11.3+dfsg
+ dns_dlzunregister@Base 1:9.11.3+dfsg
+ dns_dns64_aaaafroma@Base 1:9.11.3+dfsg
+ dns_dns64_aaaaok@Base 1:9.11.3+dfsg
+ dns_dns64_append@Base 1:9.11.3+dfsg
+ dns_dns64_create@Base 1:9.11.3+dfsg
+ dns_dns64_destroy@Base 1:9.11.3+dfsg
+ dns_dns64_next@Base 1:9.11.3+dfsg
+ dns_dns64_unlink@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_keyactive@Base 1:9.11.3+dfsg
+ dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg
+ dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg
+ dns_dnssec_selfsigns@Base 1:9.11.3+dfsg
+ dns_dnssec_sign@Base 1:9.11.3+dfsg
+ dns_dnssec_signmessage@Base 1:9.11.3+dfsg
+ dns_dnssec_signs@Base 1:9.11.3+dfsg
+ dns_dnssec_stats@Base 1:9.11.3+dfsg
+ dns_dnssec_syncupdate@Base 1:9.11.3+dfsg
+ dns_dnssec_updatekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_verify2@Base 1:9.11.3+dfsg
+ dns_dnssec_verify3@Base 1:9.11.3+dfsg
+ dns_dnssec_verify@Base 1:9.11.3+dfsg
+ dns_dnssec_verifymessage@Base 1:9.11.3+dfsg
+ dns_dnsseckey_create@Base 1:9.11.3+dfsg
+ dns_dnsseckey_destroy@Base 1:9.11.3+dfsg
+ dns_ds_buildrdata@Base 1:9.11.3+dfsg
+ dns_dsdigest_format@Base 1:9.11.3+dfsg
+ dns_dsdigest_fromtext@Base 1:9.11.3+dfsg
+ dns_dsdigest_totext@Base 1:9.11.3+dfsg
+ dns_dt_attach@Base 1:9.11.4.P1
+ dns_dt_close@Base 1:9.11.4.P1
+ dns_dt_create@Base 1:9.11.4.P1
+ dns_dt_datatotext@Base 1:9.11.4.P1
+ dns_dt_detach@Base 1:9.11.4.P1
+ dns_dt_getframe@Base 1:9.11.4.P1
+ dns_dt_getstats@Base 1:9.11.4.P1
+ dns_dt_open@Base 1:9.11.4.P1
+ dns_dt_parse@Base 1:9.11.4.P1
+ dns_dt_reopen@Base 1:9.11.4.P1
+ dns_dt_send@Base 1:9.11.4.P1
+ dns_dt_setidentity@Base 1:9.11.4.P1
+ dns_dt_setversion@Base 1:9.11.4.P1
+ dns_dt_shutdown@Base 1:9.11.4.P1
+ dns_dtdata_free@Base 1:9.11.4.P1
+ dns_dumpctx_attach@Base 1:9.11.3+dfsg
+ dns_dumpctx_cancel@Base 1:9.11.3+dfsg
+ dns_dumpctx_db@Base 1:9.11.3+dfsg
+ dns_dumpctx_detach@Base 1:9.11.3+dfsg
+ dns_dumpctx_version@Base 1:9.11.3+dfsg
+ dns_dyndb_cleanup@Base 1:9.11.3+dfsg
+ dns_dyndb_createctx@Base 1:9.11.3+dfsg
+ dns_dyndb_destroyctx@Base 1:9.11.3+dfsg
+ dns_dyndb_load@Base 1:9.11.3+dfsg
+ dns_ecdb_register@Base 1:9.11.3+dfsg
+ dns_ecdb_unregister@Base 1:9.11.3+dfsg
+ dns_fixedname_init@Base 1:9.11.4+dfsg
+ dns_fixedname_initname@Base 1:9.11.4+dfsg
+ dns_fixedname_invalidate@Base 1:9.11.4+dfsg
+ dns_fixedname_name@Base 1:9.11.4+dfsg
+ dns_fullname_hash@Base 1:9.11.3+dfsg
+ dns_fwdtable_add@Base 1:9.11.3+dfsg
+ dns_fwdtable_addfwd@Base 1:9.11.3+dfsg
+ dns_fwdtable_create@Base 1:9.11.3+dfsg
+ dns_fwdtable_delete@Base 1:9.11.3+dfsg
+ dns_fwdtable_destroy@Base 1:9.11.3+dfsg
+ dns_fwdtable_find2@Base 1:9.11.3+dfsg
+ dns_fwdtable_find@Base 1:9.11.3+dfsg
+ dns_generalstats_create@Base 1:9.11.3+dfsg
+ dns_generalstats_dump@Base 1:9.11.3+dfsg
+ dns_generalstats_increment@Base 1:9.11.3+dfsg
+ dns_geoip_match@Base 1:9.11.3+dfsg
+ dns_geoip_shutdown@Base 1:9.11.3+dfsg
+ dns_hashalg_fromtext@Base 1:9.11.3+dfsg
+ dns_ipkeylist_clear@Base 1:9.11.3+dfsg
+ dns_ipkeylist_copy@Base 1:9.11.3+dfsg
+ dns_ipkeylist_init@Base 1:9.11.3+dfsg
+ dns_ipkeylist_resize@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix2@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix@Base 1:9.11.3+dfsg
+ dns_iptable_attach@Base 1:9.11.3+dfsg
+ dns_iptable_create@Base 1:9.11.3+dfsg
+ dns_iptable_detach@Base 1:9.11.3+dfsg
+ dns_iptable_merge@Base 1:9.11.3+dfsg
+ dns_journal_begin_transaction@Base 1:9.11.3+dfsg
+ dns_journal_commit@Base 1:9.11.3+dfsg
+ dns_journal_compact@Base 1:9.11.3+dfsg
+ dns_journal_current_rr@Base 1:9.11.3+dfsg
+ dns_journal_destroy@Base 1:9.11.3+dfsg
+ dns_journal_first_rr@Base 1:9.11.3+dfsg
+ dns_journal_first_serial@Base 1:9.11.3+dfsg
+ dns_journal_get_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_iter_init@Base 1:9.11.3+dfsg
+ dns_journal_last_serial@Base 1:9.11.3+dfsg
+ dns_journal_next_rr@Base 1:9.11.3+dfsg
+ dns_journal_open@Base 1:9.11.3+dfsg
+ dns_journal_print@Base 1:9.11.3+dfsg
+ dns_journal_rollforward@Base 1:9.11.3+dfsg
+ dns_journal_set_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_write_transaction@Base 1:9.11.3+dfsg
+ dns_journal_writediff@Base 1:9.11.3+dfsg
+ dns_keydata_fromdnskey@Base 1:9.11.3+dfsg
+ dns_keydata_todnskey@Base 1:9.11.3+dfsg
+ dns_keyflags_fromtext@Base 1:9.11.3+dfsg
+ dns_keynode_attach@Base 1:9.11.3+dfsg
+ dns_keynode_create@Base 1:9.11.3+dfsg
+ dns_keynode_detach@Base 1:9.11.3+dfsg
+ dns_keynode_detachall@Base 1:9.11.3+dfsg
+ dns_keynode_key@Base 1:9.11.3+dfsg
+ dns_keynode_managed@Base 1:9.11.3+dfsg
+ dns_keyring_restore@Base 1:9.11.3+dfsg
+ dns_keytable_add@Base 1:9.11.3+dfsg
+ dns_keytable_attach@Base 1:9.11.3+dfsg
+ dns_keytable_attachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_create@Base 1:9.11.3+dfsg
+ dns_keytable_delete@Base 1:9.11.3+dfsg
+ dns_keytable_deletekeynode@Base 1:9.11.3+dfsg
+ dns_keytable_detach@Base 1:9.11.3+dfsg
+ dns_keytable_detachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_dump@Base 1:9.11.3+dfsg
+ dns_keytable_find@Base 1:9.11.3+dfsg
+ dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg
+ dns_keytable_findkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_forall@Base 1:9.11.3+dfsg
+ dns_keytable_issecuredomain@Base 1:9.11.3+dfsg
+ dns_keytable_marksecure@Base 1:9.11.3+dfsg
+ dns_keytable_nextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_totext@Base 1:9.11.3+dfsg
+ dns_lctx@Base 1:9.11.3+dfsg
+ dns_lib_init@Base 1:9.11.3+dfsg
+ dns_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dns_lib_shutdown@Base 1:9.11.3+dfsg
+ dns_libage@Base 1:9.11.3+dfsg
+ dns_libinterface@Base 1:9.11.3+dfsg
+ dns_librevision@Base 1:9.11.3+dfsg
+ dns_loadctx_attach@Base 1:9.11.3+dfsg
+ dns_loadctx_cancel@Base 1:9.11.3+dfsg
+ dns_loadctx_detach@Base 1:9.11.3+dfsg
+ dns_log_init@Base 1:9.11.3+dfsg
+ dns_log_setcontext@Base 1:9.11.3+dfsg
+ dns_lookup_cancel@Base 1:9.11.3+dfsg
+ dns_lookup_create@Base 1:9.11.3+dfsg
+ dns_lookup_destroy@Base 1:9.11.3+dfsg
+ dns_major@Base 1:9.11.3+dfsg
+ dns_mapapi@Base 1:9.11.3+dfsg
+ dns_master_dump2@Base 1:9.11.3+dfsg
+ dns_master_dump3@Base 1:9.11.3+dfsg
+ dns_master_dump@Base 1:9.11.3+dfsg
+ dns_master_dumpinc2@Base 1:9.11.3+dfsg
+ dns_master_dumpinc3@Base 1:9.11.3+dfsg
+ dns_master_dumpinc@Base 1:9.11.3+dfsg
+ dns_master_dumpnode@Base 1:9.11.3+dfsg
+ dns_master_dumpnodetostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostream2@Base 1:9.11.3+dfsg
+ dns_master_dumptostream3@Base 1:9.11.3+dfsg
+ dns_master_dumptostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostreaminc@Base 1:9.11.3+dfsg
+ dns_master_indent@Base 1:9.11.3+dfsg
+ dns_master_indentstr@Base 1:9.11.3+dfsg
+ dns_master_initrawheader@Base 1:9.11.3+dfsg
+ dns_master_loadbuffer@Base 1:9.11.3+dfsg
+ dns_master_loadbufferinc@Base 1:9.11.3+dfsg
+ dns_master_loadfile2@Base 1:9.11.3+dfsg
+ dns_master_loadfile3@Base 1:9.11.3+dfsg
+ dns_master_loadfile4@Base 1:9.11.3+dfsg
+ dns_master_loadfile5@Base 1:9.11.3+dfsg
+ dns_master_loadfile@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc2@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc3@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc4@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc5@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc@Base 1:9.11.3+dfsg
+ dns_master_loadlexer@Base 1:9.11.3+dfsg
+ dns_master_loadlexerinc@Base 1:9.11.3+dfsg
+ dns_master_loadstream@Base 1:9.11.3+dfsg
+ dns_master_loadstreaminc@Base 1:9.11.3+dfsg
+ dns_master_questiontotext@Base 1:9.11.3+dfsg
+ dns_master_rdatasettotext@Base 1:9.11.3+dfsg
+ dns_master_style_cache@Base 1:9.11.3+dfsg
+ dns_master_style_comment@Base 1:9.11.3+dfsg
+ dns_master_style_debug@Base 1:9.11.3+dfsg
+ dns_master_style_default@Base 1:9.11.3+dfsg
+ dns_master_style_explicitttl@Base 1:9.11.3+dfsg
+ dns_master_style_full@Base 1:9.11.3+dfsg
+ dns_master_style_indent@Base 1:9.11.3+dfsg
+ dns_master_style_keyzone@Base 1:9.11.3+dfsg
+ dns_master_style_simple@Base 1:9.11.3+dfsg
+ dns_master_style_yaml@Base 1:9.11.3+dfsg
+ dns_master_stylecreate2@Base 1:9.11.3+dfsg
+ dns_master_stylecreate@Base 1:9.11.3+dfsg
+ dns_master_styledestroy@Base 1:9.11.3+dfsg
+ dns_master_styleflags@Base 1:9.11.3+dfsg
+ dns_message_addname@Base 1:9.11.3+dfsg
+ dns_message_buildopt@Base 1:9.11.3+dfsg
+ dns_message_checksig@Base 1:9.11.3+dfsg
+ dns_message_create@Base 1:9.11.3+dfsg
+ dns_message_currentname@Base 1:9.11.3+dfsg
+ dns_message_destroy@Base 1:9.11.3+dfsg
+ dns_message_find@Base 1:9.11.3+dfsg
+ dns_message_findname@Base 1:9.11.3+dfsg
+ dns_message_findtype@Base 1:9.11.3+dfsg
+ dns_message_firstname@Base 1:9.11.3+dfsg
+ dns_message_getopt@Base 1:9.11.3+dfsg
+ dns_message_getquerytsig@Base 1:9.11.3+dfsg
+ dns_message_getrawmessage@Base 1:9.11.3+dfsg
+ dns_message_getsig0@Base 1:9.11.3+dfsg
+ dns_message_getsig0key@Base 1:9.11.3+dfsg
+ dns_message_gettempname@Base 1:9.11.3+dfsg
+ dns_message_gettempoffsets@Base 1:9.11.3+dfsg
+ dns_message_gettemprdata@Base 1:9.11.3+dfsg
+ dns_message_gettemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_gettemprdataset@Base 1:9.11.3+dfsg
+ dns_message_gettimeadjust@Base 1:9.11.3+dfsg
+ dns_message_gettsig@Base 1:9.11.3+dfsg
+ dns_message_gettsigkey@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket2@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket@Base 1:9.11.3+dfsg
+ dns_message_logpacket2@Base 1:9.11.3+dfsg
+ dns_message_logpacket@Base 1:9.11.3+dfsg
+ dns_message_movename@Base 1:9.11.3+dfsg
+ dns_message_nextname@Base 1:9.11.3+dfsg
+ dns_message_parse@Base 1:9.11.3+dfsg
+ dns_message_peekheader@Base 1:9.11.3+dfsg
+ dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg
+ dns_message_puttempname@Base 1:9.11.3+dfsg
+ dns_message_puttemprdata@Base 1:9.11.3+dfsg
+ dns_message_puttemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_puttemprdataset@Base 1:9.11.3+dfsg
+ dns_message_rechecksig@Base 1:9.11.3+dfsg
+ dns_message_removename@Base 1:9.11.3+dfsg
+ dns_message_renderbegin@Base 1:9.11.3+dfsg
+ dns_message_renderchangebuffer@Base 1:9.11.3+dfsg
+ dns_message_renderend@Base 1:9.11.3+dfsg
+ dns_message_renderheader@Base 1:9.11.3+dfsg
+ dns_message_renderrelease@Base 1:9.11.3+dfsg
+ dns_message_renderreserve@Base 1:9.11.3+dfsg
+ dns_message_renderreset@Base 1:9.11.3+dfsg
+ dns_message_rendersection@Base 1:9.11.3+dfsg
+ dns_message_reply@Base 1:9.11.3+dfsg
+ dns_message_reset@Base 1:9.11.3+dfsg
+ dns_message_resetsig@Base 1:9.11.3+dfsg
+ dns_message_sectiontotext@Base 1:9.11.3+dfsg
+ dns_message_setclass@Base 1:9.11.3+dfsg
+ dns_message_setopt@Base 1:9.11.3+dfsg
+ dns_message_setquerytsig@Base 1:9.11.3+dfsg
+ dns_message_setsig0key@Base 1:9.11.3+dfsg
+ dns_message_setsortorder@Base 1:9.11.3+dfsg
+ dns_message_settimeadjust@Base 1:9.11.3+dfsg
+ dns_message_settsigkey@Base 1:9.11.3+dfsg
+ dns_message_signer@Base 1:9.11.3+dfsg
+ dns_message_takebuffer@Base 1:9.11.3+dfsg
+ dns_message_totext@Base 1:9.11.3+dfsg
+ dns_modules@Base 1:9.11.3+dfsg
+ dns_msgcat@Base 1:9.11.3+dfsg
+ dns_name_caseequal@Base 1:9.11.3+dfsg
+ dns_name_clone@Base 1:9.11.3+dfsg
+ dns_name_compare@Base 1:9.11.3+dfsg
+ dns_name_concatenate@Base 1:9.11.3+dfsg
+ dns_name_copy@Base 1:9.11.3+dfsg
+ dns_name_countlabels@Base 1:9.11.3+dfsg
+ dns_name_destroy@Base 1:9.11.3+dfsg
+ dns_name_digest@Base 1:9.11.3+dfsg
+ dns_name_downcase@Base 1:9.11.3+dfsg
+ dns_name_dup@Base 1:9.11.3+dfsg
+ dns_name_dupwithoffsets@Base 1:9.11.3+dfsg
+ dns_name_dynamic@Base 1:9.11.3+dfsg
+ dns_name_equal@Base 1:9.11.3+dfsg
+ dns_name_format@Base 1:9.11.3+dfsg
+ dns_name_free@Base 1:9.11.3+dfsg
+ dns_name_fromregion@Base 1:9.11.3+dfsg
+ dns_name_fromstring2@Base 1:9.11.3+dfsg
+ dns_name_fromstring@Base 1:9.11.3+dfsg
+ dns_name_fromtext@Base 1:9.11.3+dfsg
+ dns_name_fromwire@Base 1:9.11.3+dfsg
+ dns_name_fullcompare@Base 1:9.11.3+dfsg
+ dns_name_fullhash@Base 1:9.11.3+dfsg
+ dns_name_getlabel@Base 1:9.11.3+dfsg
+ dns_name_getlabelsequence@Base 1:9.11.3+dfsg
+ dns_name_hasbuffer@Base 1:9.11.3+dfsg
+ dns_name_hash@Base 1:9.11.3+dfsg
+ dns_name_hashbylabel@Base 1:9.11.3+dfsg
+ dns_name_init@Base 1:9.11.3+dfsg
+ dns_name_internalwildcard@Base 1:9.11.3+dfsg
+ dns_name_invalidate@Base 1:9.11.3+dfsg
+ dns_name_isabsolute@Base 1:9.11.3+dfsg
+ dns_name_isdnssd@Base 1:9.11.3+dfsg
+ dns_name_ishostname@Base 1:9.11.3+dfsg
+ dns_name_ismailbox@Base 1:9.11.3+dfsg
+ dns_name_isrfc1918@Base 1:9.11.3+dfsg
+ dns_name_issubdomain@Base 1:9.11.3+dfsg
+ dns_name_istat@Base 1:9.11.3+dfsg
+ dns_name_isula@Base 1:9.11.3+dfsg
+ dns_name_isvalid@Base 1:9.11.3+dfsg
+ dns_name_iswildcard@Base 1:9.11.3+dfsg
+ dns_name_matcheswildcard@Base 1:9.11.3+dfsg
+ dns_name_print@Base 1:9.11.3+dfsg
+ dns_name_rdatacompare@Base 1:9.11.3+dfsg
+ dns_name_reset@Base 1:9.11.3+dfsg
+ dns_name_setbuffer@Base 1:9.11.3+dfsg
+ dns_name_settotextfilter@Base 1:9.11.3+dfsg
+ dns_name_split@Base 1:9.11.3+dfsg
+ dns_name_tofilenametext@Base 1:9.11.3+dfsg
+ dns_name_toprincipal@Base 1:9.11.3+dfsg
+ dns_name_toregion@Base 1:9.11.3+dfsg
+ dns_name_tostring@Base 1:9.11.3+dfsg
+ dns_name_totext2@Base 1:9.11.3+dfsg
+ dns_name_totext@Base 1:9.11.3+dfsg
+ dns_name_towire@Base 1:9.11.3+dfsg
+ dns_ncache_add@Base 1:9.11.3+dfsg
+ dns_ncache_addoptout@Base 1:9.11.3+dfsg
+ dns_ncache_current@Base 1:9.11.3+dfsg
+ dns_ncache_getrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_towire@Base 1:9.11.3+dfsg
+ dns_nsec3_active@Base 1:9.11.3+dfsg
+ dns_nsec3_activex@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_hashlength@Base 1:9.11.3+dfsg
+ dns_nsec3_hashname@Base 1:9.11.3+dfsg
+ dns_nsec3_maxiterations@Base 1:9.11.3+dfsg
+ dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec3_supportedhash@Base 1:9.11.3+dfsg
+ dns_nsec3_typepresent@Base 1:9.11.3+dfsg
+ dns_nsec3param_deletechains@Base 1:9.11.3+dfsg
+ dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg
+ dns_nsec3param_salttotext@Base 1:9.11.3+dfsg
+ dns_nsec3param_toprivate@Base 1:9.11.3+dfsg
+ dns_nsec_build@Base 1:9.11.3+dfsg
+ dns_nsec_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec_compressbitmap@Base 1:9.11.3+dfsg
+ dns_nsec_isset@Base 1:9.11.3+dfsg
+ dns_nsec_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec_nseconly@Base 1:9.11.3+dfsg
+ dns_nsec_setbit@Base 1:9.11.3+dfsg
+ dns_nsec_typepresent@Base 1:9.11.3+dfsg
+ dns_ntatable_add@Base 1:9.11.3+dfsg
+ dns_ntatable_attach@Base 1:9.11.3+dfsg
+ dns_ntatable_covered@Base 1:9.11.3+dfsg
+ dns_ntatable_create@Base 1:9.11.3+dfsg
+ dns_ntatable_delete@Base 1:9.11.3+dfsg
+ dns_ntatable_detach@Base 1:9.11.3+dfsg
+ dns_ntatable_dump@Base 1:9.11.3+dfsg
+ dns_ntatable_save@Base 1:9.11.3+dfsg
+ dns_ntatable_totext@Base 1:9.11.3+dfsg
+ dns_opcode_totext@Base 1:9.11.3+dfsg
+ dns_opcodestats_create@Base 1:9.11.3+dfsg
+ dns_opcodestats_dump@Base 1:9.11.3+dfsg
+ dns_opcodestats_increment@Base 1:9.11.3+dfsg
+ dns_order_add@Base 1:9.11.3+dfsg
+ dns_order_attach@Base 1:9.11.3+dfsg
+ dns_order_create@Base 1:9.11.3+dfsg
+ dns_order_detach@Base 1:9.11.3+dfsg
+ dns_order_find@Base 1:9.11.3+dfsg
+ dns_peer_attach@Base 1:9.11.3+dfsg
+ dns_peer_detach@Base 1:9.11.3+dfsg
+ dns_peer_getbogus@Base 1:9.11.3+dfsg
+ dns_peer_getednsversion@Base 1:9.11.3+dfsg
+ dns_peer_getforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_getkey@Base 1:9.11.3+dfsg
+ dns_peer_getmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_getprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_getquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_getquerysource@Base 1:9.11.3+dfsg
+ dns_peer_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_getrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_getsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_getsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_gettransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_gettransferformat@Base 1:9.11.3+dfsg
+ dns_peer_gettransfers@Base 1:9.11.3+dfsg
+ dns_peer_gettransfersource@Base 1:9.11.3+dfsg
+ dns_peer_getudpsize@Base 1:9.11.3+dfsg
+ dns_peer_new@Base 1:9.11.3+dfsg
+ dns_peer_newprefix@Base 1:9.11.3+dfsg
+ dns_peer_setbogus@Base 1:9.11.3+dfsg
+ dns_peer_setednsversion@Base 1:9.11.3+dfsg
+ dns_peer_setforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_setkey@Base 1:9.11.3+dfsg
+ dns_peer_setkeybycharp@Base 1:9.11.3+dfsg
+ dns_peer_setmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_setprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_setquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_setquerysource@Base 1:9.11.3+dfsg
+ dns_peer_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_setrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_setsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_setsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_settransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_settransferformat@Base 1:9.11.3+dfsg
+ dns_peer_settransfers@Base 1:9.11.3+dfsg
+ dns_peer_settransfersource@Base 1:9.11.3+dfsg
+ dns_peer_setudpsize@Base 1:9.11.3+dfsg
+ dns_peerlist_addpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_attach@Base 1:9.11.3+dfsg
+ dns_peerlist_currpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_detach@Base 1:9.11.3+dfsg
+ dns_peerlist_new@Base 1:9.11.3+dfsg
+ dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg
+ dns_portlist_add@Base 1:9.11.3+dfsg
+ dns_portlist_attach@Base 1:9.11.3+dfsg
+ dns_portlist_create@Base 1:9.11.3+dfsg
+ dns_portlist_detach@Base 1:9.11.3+dfsg
+ dns_portlist_match@Base 1:9.11.3+dfsg
+ dns_portlist_remove@Base 1:9.11.3+dfsg
+ dns_pps@Base 1:9.11.3+dfsg
+ dns_private_chains@Base 1:9.11.3+dfsg
+ dns_private_totext@Base 1:9.11.3+dfsg
+ dns_rbt_addname@Base 1:9.11.3+dfsg
+ dns_rbt_addnode@Base 1:9.11.3+dfsg
+ dns_rbt_create@Base 1:9.11.3+dfsg
+ dns_rbt_deletename@Base 1:9.11.3+dfsg
+ dns_rbt_deletenode@Base 1:9.11.3+dfsg
+ dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg
+ dns_rbt_destroy2@Base 1:9.11.3+dfsg
+ dns_rbt_destroy@Base 1:9.11.3+dfsg
+ dns_rbt_findname@Base 1:9.11.3+dfsg
+ dns_rbt_findnode@Base 1:9.11.3+dfsg
+ dns_rbt_formatnodename@Base 1:9.11.3+dfsg
+ dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_hashsize@Base 1:9.11.3+dfsg
+ dns_rbt_namefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_nodecount@Base 1:9.11.3+dfsg
+ dns_rbt_printdot@Base 1:9.11.3+dfsg
+ dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg
+ dns_rbt_printtext@Base 1:9.11.3+dfsg
+ dns_rbt_root@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_align@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_tree@Base 1:9.11.3+dfsg
+ dns_rbtdb64_create@Base 1:9.11.3+dfsg
+ dns_rbtdb_create@Base 1:9.11.3+dfsg
+ dns_rbtnode_nodename@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_current@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_down@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_first@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_init@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_last@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_next@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_prev@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_reset@Base 1:9.11.3+dfsg
+ dns_rcode_fromtext@Base 1:9.11.3+dfsg
+ dns_rcode_totext@Base 1:9.11.3+dfsg
+ dns_rcodestats_create@Base 1:9.11.3+dfsg
+ dns_rcodestats_dump@Base 1:9.11.3+dfsg
+ dns_rcodestats_increment@Base 1:9.11.3+dfsg
+ dns_rdata_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdata_apl_count@Base 1:9.11.3+dfsg
+ dns_rdata_apl_current@Base 1:9.11.3+dfsg
+ dns_rdata_apl_first@Base 1:9.11.3+dfsg
+ dns_rdata_apl_next@Base 1:9.11.3+dfsg
+ dns_rdata_casecompare@Base 1:9.11.3+dfsg
+ dns_rdata_checknames@Base 1:9.11.3+dfsg
+ dns_rdata_checkowner@Base 1:9.11.3+dfsg
+ dns_rdata_clone@Base 1:9.11.3+dfsg
+ dns_rdata_compare@Base 1:9.11.3+dfsg
+ dns_rdata_covers@Base 1:9.11.3+dfsg
+ dns_rdata_deleterrset@Base 1:9.11.3+dfsg
+ dns_rdata_digest@Base 1:9.11.3+dfsg
+ dns_rdata_exists@Base 1:9.11.3+dfsg
+ dns_rdata_freestruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromregion@Base 1:9.11.3+dfsg
+ dns_rdata_fromstruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromtext@Base 1:9.11.3+dfsg
+ dns_rdata_fromwire@Base 1:9.11.3+dfsg
+ dns_rdata_hip_current@Base 1:9.11.3+dfsg
+ dns_rdata_hip_first@Base 1:9.11.3+dfsg
+ dns_rdata_hip_next@Base 1:9.11.3+dfsg
+ dns_rdata_init@Base 1:9.11.3+dfsg
+ dns_rdata_makedelete@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_current@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_first@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_next@Base 1:9.11.3+dfsg
+ dns_rdata_notexist@Base 1:9.11.3+dfsg
+ dns_rdata_opt_current@Base 1:9.11.3+dfsg
+ dns_rdata_opt_first@Base 1:9.11.3+dfsg
+ dns_rdata_opt_next@Base 1:9.11.3+dfsg
+ dns_rdata_reset@Base 1:9.11.3+dfsg
+ dns_rdata_tofmttext@Base 1:9.11.3+dfsg
+ dns_rdata_toregion@Base 1:9.11.3+dfsg
+ dns_rdata_tostruct@Base 1:9.11.3+dfsg
+ dns_rdata_totext@Base 1:9.11.3+dfsg
+ dns_rdata_towire@Base 1:9.11.3+dfsg
+ dns_rdata_txt_current@Base 1:9.11.3+dfsg
+ dns_rdata_txt_first@Base 1:9.11.3+dfsg
+ dns_rdata_txt_next@Base 1:9.11.3+dfsg
+ dns_rdata_updateop@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg
+ dns_rdataclass_format@Base 1:9.11.3+dfsg
+ dns_rdataclass_fromtext@Base 1:9.11.3+dfsg
+ dns_rdataclass_ismeta@Base 1:9.11.3+dfsg
+ dns_rdataclass_totext@Base 1:9.11.3+dfsg
+ dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdatalist_init@Base 1:9.11.3+dfsg
+ dns_rdatalist_tordataset@Base 1:9.11.3+dfsg
+ dns_rdataset_addclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdataset_addnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg
+ dns_rdataset_clone@Base 1:9.11.3+dfsg
+ dns_rdataset_count@Base 1:9.11.3+dfsg
+ dns_rdataset_current@Base 1:9.11.3+dfsg
+ dns_rdataset_disassociate@Base 1:9.11.3+dfsg
+ dns_rdataset_expire@Base 1:9.11.3+dfsg
+ dns_rdataset_first@Base 1:9.11.3+dfsg
+ dns_rdataset_getadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_getclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_getnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_getownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_init@Base 1:9.11.3+dfsg
+ dns_rdataset_invalidate@Base 1:9.11.3+dfsg
+ dns_rdataset_isassociated@Base 1:9.11.3+dfsg
+ dns_rdataset_makequestion@Base 1:9.11.3+dfsg
+ dns_rdataset_next@Base 1:9.11.3+dfsg
+ dns_rdataset_putadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_settrust@Base 1:9.11.3+dfsg
+ dns_rdataset_totext@Base 1:9.11.3+dfsg
+ dns_rdataset_towire@Base 1:9.11.3+dfsg
+ dns_rdataset_towirepartial@Base 1:9.11.3+dfsg
+ dns_rdataset_towiresorted@Base 1:9.11.3+dfsg
+ dns_rdataset_trimttl@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_current@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_first@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_next@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_create@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_dump@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_increment@Base 1:9.11.3+dfsg
+ dns_rdataslab_count@Base 1:9.11.3+dfsg
+ dns_rdataslab_equal@Base 1:9.11.3+dfsg
+ dns_rdataslab_equalx@Base 1:9.11.3+dfsg
+ dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdataslab_merge@Base 1:9.11.3+dfsg
+ dns_rdataslab_size@Base 1:9.11.3+dfsg
+ dns_rdataslab_subtract@Base 1:9.11.3+dfsg
+ dns_rdataslab_tordataset@Base 1:9.11.3+dfsg
+ dns_rdatatype_atparent@Base 1:9.11.3+dfsg
+ dns_rdatatype_attributes@Base 1:9.11.3+dfsg
+ dns_rdatatype_format@Base 1:9.11.3+dfsg
+ dns_rdatatype_fromtext@Base 1:9.11.3+dfsg
+ dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg
+ dns_rdatatype_isknown@Base 1:9.11.3+dfsg
+ dns_rdatatype_ismeta@Base 1:9.11.3+dfsg
+ dns_rdatatype_issingleton@Base 1:9.11.3+dfsg
+ dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg
+ dns_rdatatype_notquestion@Base 1:9.11.3+dfsg
+ dns_rdatatype_questiononly@Base 1:9.11.3+dfsg
+ dns_rdatatype_totext@Base 1:9.11.3+dfsg
+ dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_create@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_dump@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_increment@Base 1:9.11.3+dfsg
+ dns_request_cancel@Base 1:9.11.3+dfsg
+ dns_request_create@Base 1:9.11.3+dfsg
+ dns_request_createraw2@Base 1:9.11.3+dfsg
+ dns_request_createraw3@Base 1:9.11.3+dfsg
+ dns_request_createraw4@Base 1:9.11.3+dfsg
+ dns_request_createraw@Base 1:9.11.3+dfsg
+ dns_request_createvia2@Base 1:9.11.3+dfsg
+ dns_request_createvia3@Base 1:9.11.3+dfsg
+ dns_request_createvia4@Base 1:9.11.3+dfsg
+ dns_request_createvia@Base 1:9.11.3+dfsg
+ dns_request_destroy@Base 1:9.11.3+dfsg
+ dns_request_getresponse@Base 1:9.11.3+dfsg
+ dns_request_usedtcp@Base 1:9.11.3+dfsg
+ dns_requestmgr_attach@Base 1:9.11.3+dfsg
+ dns_requestmgr_create@Base 1:9.11.3+dfsg
+ dns_requestmgr_detach@Base 1:9.11.3+dfsg
+ dns_requestmgr_shutdown@Base 1:9.11.3+dfsg
+ dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg
+ dns_resolver_addalternate@Base 1:9.11.3+dfsg
+ dns_resolver_addbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg
+ dns_resolver_attach@Base 1:9.11.3+dfsg
+ dns_resolver_cancelfetch@Base 1:9.11.3+dfsg
+ dns_resolver_create@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch2@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch3@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch@Base 1:9.11.3+dfsg
+ dns_resolver_destroyfetch@Base 1:9.11.3+dfsg
+ dns_resolver_detach@Base 1:9.11.3+dfsg
+ dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg
+ dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv4@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv6@Base 1:9.11.3+dfsg
+ dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg
+ dns_resolver_dumpfetches@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadnames@Base 1:9.11.3+dfsg
+ dns_resolver_freeze@Base 1:9.11.3+dfsg
+ dns_resolver_getbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_getlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_getoptions@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_gettimeout@Base 1:9.11.3+dfsg
+ dns_resolver_getudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_logfetch@Base 1:9.11.3+dfsg
+ dns_resolver_nrunning@Base 1:9.11.3+dfsg
+ dns_resolver_prime@Base 1:9.11.3+dfsg
+ dns_resolver_printbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg
+ dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg
+ dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg
+ dns_resolver_setlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_settimeout@Base 1:9.11.3+dfsg
+ dns_resolver_setudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_shutdown@Base 1:9.11.3+dfsg
+ dns_resolver_socketmgr@Base 1:9.11.3+dfsg
+ dns_resolver_taskmgr@Base 1:9.11.3+dfsg
+ dns_resolver_whenshutdown@Base 1:9.11.3+dfsg
+ dns_result_register@Base 1:9.11.3+dfsg
+ dns_result_torcode@Base 1:9.11.3+dfsg
+ dns_result_totext@Base 1:9.11.3+dfsg
+ dns_root_checkhints@Base 1:9.11.3+dfsg
+ dns_rootname@Base 1:9.11.3+dfsg
+ dns_rootns_create@Base 1:9.11.3+dfsg
+ dns_rpz_add@Base 1:9.11.3+dfsg
+ dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_beginload@Base 1:9.11.3+dfsg
+ dns_rpz_decode_cname@Base 1:9.11.3+dfsg
+ dns_rpz_delete@Base 1:9.11.3+dfsg
+ dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_find_ip@Base 1:9.11.3+dfsg
+ dns_rpz_find_name@Base 1:9.11.3+dfsg
+ dns_rpz_new_zones@Base 1:9.11.3+dfsg
+ dns_rpz_policy2str@Base 1:9.11.3+dfsg
+ dns_rpz_ready@Base 1:9.11.3+dfsg
+ dns_rpz_str2policy@Base 1:9.11.3+dfsg
+ dns_rpz_type2str@Base 1:9.11.3+dfsg
+ dns_rriterator_current@Base 1:9.11.3+dfsg
+ dns_rriterator_destroy@Base 1:9.11.3+dfsg
+ dns_rriterator_first@Base 1:9.11.3+dfsg
+ dns_rriterator_init@Base 1:9.11.3+dfsg
+ dns_rriterator_next@Base 1:9.11.3+dfsg
+ dns_rriterator_nextrrset@Base 1:9.11.3+dfsg
+ dns_rriterator_pause@Base 1:9.11.3+dfsg
+ dns_rrl@Base 1:9.11.3+dfsg
+ dns_rrl_init@Base 1:9.11.3+dfsg
+ dns_rrl_view_destroy@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdb_putrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putrr@Base 1:9.11.3+dfsg
+ dns_sdb_putsoa@Base 1:9.11.3+dfsg
+ dns_sdb_register@Base 1:9.11.3+dfsg
+ dns_sdb_unregister@Base 1:9.11.3+dfsg
+ dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putsoa@Base 1:9.11.3+dfsg
+ dns_sdlz_setdb@Base 1:9.11.3+dfsg
+ dns_sdlzregister@Base 1:9.11.3+dfsg
+ dns_sdlzunregister@Base 1:9.11.3+dfsg
+ dns_secalg_format@Base 1:9.11.3+dfsg
+ dns_secalg_fromtext@Base 1:9.11.3+dfsg
+ dns_secalg_totext@Base 1:9.11.3+dfsg
+ dns_secproto_fromtext@Base 1:9.11.3+dfsg
+ dns_secproto_totext@Base 1:9.11.3+dfsg
+ dns_soa_buildrdata@Base 1:9.11.3+dfsg
+ dns_soa_getexpire@Base 1:9.11.3+dfsg
+ dns_soa_getminimum@Base 1:9.11.3+dfsg
+ dns_soa_getrefresh@Base 1:9.11.3+dfsg
+ dns_soa_getretry@Base 1:9.11.3+dfsg
+ dns_soa_getserial@Base 1:9.11.3+dfsg
+ dns_soa_setexpire@Base 1:9.11.3+dfsg
+ dns_soa_setminimum@Base 1:9.11.3+dfsg
+ dns_soa_setrefresh@Base 1:9.11.3+dfsg
+ dns_soa_setretry@Base 1:9.11.3+dfsg
+ dns_soa_setserial@Base 1:9.11.3+dfsg
+ dns_ssu_external_match@Base 1:9.11.3+dfsg
+ dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg
+ dns_ssurule_identity@Base 1:9.11.3+dfsg
+ dns_ssurule_isgrant@Base 1:9.11.3+dfsg
+ dns_ssurule_matchtype@Base 1:9.11.3+dfsg
+ dns_ssurule_name@Base 1:9.11.3+dfsg
+ dns_ssurule_types@Base 1:9.11.3+dfsg
+ dns_ssutable_addrule@Base 1:9.11.3+dfsg
+ dns_ssutable_attach@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules2@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules@Base 1:9.11.3+dfsg
+ dns_ssutable_create@Base 1:9.11.3+dfsg
+ dns_ssutable_createdlz@Base 1:9.11.3+dfsg
+ dns_ssutable_detach@Base 1:9.11.3+dfsg
+ dns_ssutable_firstrule@Base 1:9.11.3+dfsg
+ dns_ssutable_nextrule@Base 1:9.11.3+dfsg
+ dns_stats_alloccounters@Base 1:9.11.3+dfsg
+ dns_stats_attach@Base 1:9.11.3+dfsg
+ dns_stats_detach@Base 1:9.11.3+dfsg
+ dns_stats_freecounters@Base 1:9.11.3+dfsg
+ dns_statscounter_names@Base 1:9.11.3+dfsg
+ dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg
+ dns_tcpmsg_init@Base 1:9.11.3+dfsg
+ dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg
+ dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg
+ dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg
+ dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg
+ dns_time32_fromtext@Base 1:9.11.3+dfsg
+ dns_time32_totext@Base 1:9.11.3+dfsg
+ dns_time64_from32@Base 1:9.11.3+dfsg
+ dns_time64_fromtext@Base 1:9.11.3+dfsg
+ dns_time64_totext@Base 1:9.11.3+dfsg
+ dns_timer_setidle@Base 1:9.11.3+dfsg
+ dns_tkey_builddeletequery@Base 1:9.11.3+dfsg
+ dns_tkey_builddhquery@Base 1:9.11.3+dfsg
+ dns_tkey_buildgssquery@Base 1:9.11.3+dfsg
+ dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg
+ dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processdhresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processgssresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processquery@Base 1:9.11.3+dfsg
+ dns_tkeyctx_create@Base 1:9.11.3+dfsg
+ dns_tkeyctx_destroy@Base 1:9.11.3+dfsg
+ dns_trust_totext@Base 1:9.11.3+dfsg
+ dns_tsec_create@Base 1:9.11.3+dfsg
+ dns_tsec_destroy@Base 1:9.11.3+dfsg
+ dns_tsec_getkey@Base 1:9.11.3+dfsg
+ dns_tsec_gettype@Base 1:9.11.3+dfsg
+ dns_tsig_gssapi_name@Base 1:9.11.3+dfsg
+ dns_tsig_gssapims_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg
+ dns_tsig_sign@Base 1:9.11.3+dfsg
+ dns_tsig_verify@Base 1:9.11.3+dfsg
+ dns_tsigkey_attach@Base 1:9.11.3+dfsg
+ dns_tsigkey_create@Base 1:9.11.3+dfsg
+ dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg
+ dns_tsigkey_detach@Base 1:9.11.3+dfsg
+ dns_tsigkey_find@Base 1:9.11.3+dfsg
+ dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_add@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_attach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_create@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_detach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg
+ dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg
+ dns_tsigrcode_totext@Base 1:9.11.3+dfsg
+ dns_ttl_fromtext@Base 1:9.11.3+dfsg
+ dns_ttl_totext2@Base 1:9.11.3+dfsg
+ dns_ttl_totext@Base 1:9.11.3+dfsg
+ dns_update_signatures@Base 1:9.11.3+dfsg
+ dns_update_signaturesinc@Base 1:9.11.3+dfsg
+ dns_update_soaserial@Base 1:9.11.3+dfsg
+ dns_validator_cancel@Base 1:9.11.3+dfsg
+ dns_validator_create@Base 1:9.11.3+dfsg
+ dns_validator_destroy@Base 1:9.11.3+dfsg
+ dns_validator_send@Base 1:9.11.3+dfsg
+ dns_version@Base 1:9.11.3+dfsg
+ dns_view_adddelegationonly@Base 1:9.11.3+dfsg
+ dns_view_addzone@Base 1:9.11.3+dfsg
+ dns_view_asyncload2@Base 1:9.11.5+dfsg
+ dns_view_asyncload@Base 1:9.11.3+dfsg
+ dns_view_attach@Base 1:9.11.3+dfsg
+ dns_view_checksig@Base 1:9.11.3+dfsg
+ dns_view_create@Base 1:9.11.3+dfsg
+ dns_view_createresolver@Base 1:9.11.3+dfsg
+ dns_view_createzonetable@Base 1:9.11.3+dfsg
+ dns_view_detach@Base 1:9.11.3+dfsg
+ dns_view_dialup@Base 1:9.11.3+dfsg
+ dns_view_dumpdbtostream@Base 1:9.11.3+dfsg
+ dns_view_excludedelegationonly@Base 1:9.11.3+dfsg
+ dns_view_find2@Base 1:9.11.3+dfsg
+ dns_view_find@Base 1:9.11.3+dfsg
+ dns_view_findzone@Base 1:9.11.3+dfsg
+ dns_view_findzonecut2@Base 1:9.11.3+dfsg
+ dns_view_findzonecut@Base 1:9.11.3+dfsg
+ dns_view_flushanddetach@Base 1:9.11.3+dfsg
+ dns_view_flushcache2@Base 1:9.11.3+dfsg
+ dns_view_flushcache@Base 1:9.11.3+dfsg
+ dns_view_flushname@Base 1:9.11.3+dfsg
+ dns_view_flushnode@Base 1:9.11.3+dfsg
+ dns_view_freeze@Base 1:9.11.3+dfsg
+ dns_view_freezezones@Base 1:9.11.3+dfsg
+ dns_view_getadbstats@Base 1:9.11.3+dfsg
+ dns_view_getdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_getfailttl@Base 1:9.11.3+dfsg
+ dns_view_getntatable@Base 1:9.11.3+dfsg
+ dns_view_getpeertsig@Base 1:9.11.3+dfsg
+ dns_view_getresquerystats@Base 1:9.11.3+dfsg
+ dns_view_getresstats@Base 1:9.11.3+dfsg
+ dns_view_getrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_getsecroots@Base 1:9.11.3+dfsg
+ dns_view_gettsig@Base 1:9.11.3+dfsg
+ dns_view_initntatable@Base 1:9.11.3+dfsg
+ dns_view_initsecroots@Base 1:9.11.3+dfsg
+ dns_view_iscacheshared@Base 1:9.11.3+dfsg
+ dns_view_isdelegationonly@Base 1:9.11.3+dfsg
+ dns_view_issecuredomain@Base 1:9.11.3+dfsg
+ dns_view_load@Base 1:9.11.3+dfsg
+ dns_view_loadnew@Base 1:9.11.3+dfsg
+ dns_view_loadnta@Base 1:9.11.3+dfsg
+ dns_view_ntacovers@Base 1:9.11.3+dfsg
+ dns_view_restorekeyring@Base 1:9.11.3+dfsg
+ dns_view_saventa@Base 1:9.11.3+dfsg
+ dns_view_searchdlz@Base 1:9.11.3+dfsg
+ dns_view_setadbstats@Base 1:9.11.3+dfsg
+ dns_view_setcache2@Base 1:9.11.3+dfsg
+ dns_view_setcache@Base 1:9.11.3+dfsg
+ dns_view_setdstport@Base 1:9.11.3+dfsg
+ dns_view_setdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_setfailttl@Base 1:9.11.3+dfsg
+ dns_view_sethints@Base 1:9.11.3+dfsg
+ dns_view_setkeyring@Base 1:9.11.3+dfsg
+ dns_view_setnewzones@Base 1:9.11.3+dfsg
+ dns_view_setresquerystats@Base 1:9.11.3+dfsg
+ dns_view_setresstats@Base 1:9.11.3+dfsg
+ dns_view_setrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_simplefind@Base 1:9.11.3+dfsg
+ dns_view_thaw@Base 1:9.11.3+dfsg
+ dns_view_untrust@Base 1:9.11.3+dfsg
+ dns_view_weakattach@Base 1:9.11.3+dfsg
+ dns_view_weakdetach@Base 1:9.11.3+dfsg
+ dns_viewlist_find@Base 1:9.11.3+dfsg
+ dns_viewlist_findzone@Base 1:9.11.3+dfsg
+ dns_wildcardname@Base 1:9.11.3+dfsg
+ dns_xfrin_attach@Base 1:9.11.3+dfsg
+ dns_xfrin_create2@Base 1:9.11.3+dfsg
+ dns_xfrin_create3@Base 1:9.11.3+dfsg
+ dns_xfrin_create@Base 1:9.11.3+dfsg
+ dns_xfrin_detach@Base 1:9.11.3+dfsg
+ dns_xfrin_shutdown@Base 1:9.11.3+dfsg
+ dns_zone_addnsec3chain@Base 1:9.11.3+dfsg
+ dns_zone_asyncload2@Base 1:9.11.5+dfsg
+ dns_zone_asyncload@Base 1:9.11.3+dfsg
+ dns_zone_attach@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_cdscheck@Base 1:9.11.3+dfsg
+ dns_zone_checknames@Base 1:9.11.3+dfsg
+ dns_zone_clearforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_clearupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_clearxfracl@Base 1:9.11.3+dfsg
+ dns_zone_create@Base 1:9.11.3+dfsg
+ dns_zone_detach@Base 1:9.11.3+dfsg
+ dns_zone_dialup@Base 1:9.11.3+dfsg
+ dns_zone_dlzpostload@Base 1:9.11.3+dfsg
+ dns_zone_dump@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream2@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream3@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream@Base 1:9.11.3+dfsg
+ dns_zone_expire@Base 1:9.11.3+dfsg
+ dns_zone_first@Base 1:9.11.3+dfsg
+ dns_zone_flush@Base 1:9.11.3+dfsg
+ dns_zone_forcereload@Base 1:9.11.3+dfsg
+ dns_zone_forwardupdate@Base 1:9.11.3+dfsg
+ dns_zone_fulldumptostream@Base 1:9.11.3+dfsg
+ dns_zone_get_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_get_rpz_num@Base 1:9.11.3+dfsg
+ dns_zone_getadded@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getautomatic@Base 1:9.11.3+dfsg
+ dns_zone_getchecknames@Base 1:9.11.3+dfsg
+ dns_zone_getclass@Base 1:9.11.3+dfsg
+ dns_zone_getdb@Base 1:9.11.3+dfsg
+ dns_zone_getdbtype@Base 1:9.11.3+dfsg
+ dns_zone_getexpiretime@Base 1:9.11.3+dfsg
+ dns_zone_getfile@Base 1:9.11.3+dfsg
+ dns_zone_getforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_getidlein@Base 1:9.11.3+dfsg
+ dns_zone_getidleout@Base 1:9.11.3+dfsg
+ dns_zone_getincludes@Base 1:9.11.3+dfsg
+ dns_zone_getjournal@Base 1:9.11.3+dfsg
+ dns_zone_getjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_getkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_getkeyopts@Base 1:9.11.3+dfsg
+ dns_zone_getloadtime@Base 1:9.11.3+dfsg
+ dns_zone_getmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_getmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_getmctx@Base 1:9.11.3+dfsg
+ dns_zone_getmgr@Base 1:9.11.3+dfsg
+ dns_zone_getnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_getnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getoptions2@Base 1:9.11.3+dfsg
+ dns_zone_getoptions@Base 1:9.11.3+dfsg
+ dns_zone_getorigin@Base 1:9.11.3+dfsg
+ dns_zone_getprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_getqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_getqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_getraw@Base 1:9.11.3+dfsg
+ dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_getrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_getserial2@Base 1:9.11.3+dfsg
+ dns_zone_getserial@Base 1:9.11.3+dfsg
+ dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_getsignatures@Base 1:9.11.3+dfsg
+ dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_getssutable@Base 1:9.11.3+dfsg
+ dns_zone_getstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_getstatscounters@Base 1:9.11.3+dfsg
+ dns_zone_gettask@Base 1:9.11.3+dfsg
+ dns_zone_gettype@Base 1:9.11.3+dfsg
+ dns_zone_getupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_getview@Base 1:9.11.3+dfsg
+ dns_zone_getxfracl@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_iattach@Base 1:9.11.3+dfsg
+ dns_zone_idetach@Base 1:9.11.3+dfsg
+ dns_zone_isdynamic@Base 1:9.11.3+dfsg
+ dns_zone_isforced@Base 1:9.11.3+dfsg
+ dns_zone_keydone@Base 1:9.11.3+dfsg
+ dns_zone_link@Base 1:9.11.3+dfsg
+ dns_zone_load@Base 1:9.11.3+dfsg
+ dns_zone_loadandthaw@Base 1:9.11.3+dfsg
+ dns_zone_loadnew@Base 1:9.11.3+dfsg
+ dns_zone_log@Base 1:9.11.3+dfsg
+ dns_zone_logc@Base 1:9.11.3+dfsg
+ dns_zone_logv@Base 1:9.11.4+dfsg
+ dns_zone_maintenance@Base 1:9.11.3+dfsg
+ dns_zone_markdirty@Base 1:9.11.3+dfsg
+ dns_zone_mkey_day@Base 1:9.11.3+dfsg
+ dns_zone_mkey_hour@Base 1:9.11.3+dfsg
+ dns_zone_mkey_month@Base 1:9.11.3+dfsg
+ dns_zone_name@Base 1:9.11.3+dfsg
+ dns_zone_nameonly@Base 1:9.11.3+dfsg
+ dns_zone_next@Base 1:9.11.3+dfsg
+ dns_zone_notify@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive@Base 1:9.11.3+dfsg
+ dns_zone_nscheck@Base 1:9.11.3+dfsg
+ dns_zone_refresh@Base 1:9.11.3+dfsg
+ dns_zone_rekey@Base 1:9.11.3+dfsg
+ dns_zone_replacedb@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_set_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_setacache@Base 1:9.11.3+dfsg
+ dns_zone_setadded@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotify@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setautomatic@Base 1:9.11.3+dfsg
+ dns_zone_setcheckmx@Base 1:9.11.3+dfsg
+ dns_zone_setchecknames@Base 1:9.11.3+dfsg
+ dns_zone_setcheckns@Base 1:9.11.3+dfsg
+ dns_zone_setchecksrv@Base 1:9.11.3+dfsg
+ dns_zone_setclass@Base 1:9.11.3+dfsg
+ dns_zone_setdb@Base 1:9.11.3+dfsg
+ dns_zone_setdbtype@Base 1:9.11.3+dfsg
+ dns_zone_setdialup@Base 1:9.11.3+dfsg
+ dns_zone_setfile2@Base 1:9.11.3+dfsg
+ dns_zone_setfile3@Base 1:9.11.3+dfsg
+ dns_zone_setfile@Base 1:9.11.3+dfsg
+ dns_zone_setflag@Base 1:9.11.3+dfsg
+ dns_zone_setforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_setidlein@Base 1:9.11.3+dfsg
+ dns_zone_setidleout@Base 1:9.11.3+dfsg
+ dns_zone_setisself@Base 1:9.11.3+dfsg
+ dns_zone_setjournal@Base 1:9.11.3+dfsg
+ dns_zone_setjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_setkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_setkeyopt@Base 1:9.11.3+dfsg
+ dns_zone_setmasters@Base 1:9.11.3+dfsg
+ dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setminretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setnodes@Base 1:9.11.3+dfsg
+ dns_zone_setnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_setnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifytype@Base 1:9.11.3+dfsg
+ dns_zone_setnsec3param@Base 1:9.11.3+dfsg
+ dns_zone_setoption2@Base 1:9.11.3+dfsg
+ dns_zone_setoption@Base 1:9.11.3+dfsg
+ dns_zone_setorigin@Base 1:9.11.3+dfsg
+ dns_zone_setprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_setqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_setqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_setrawdata@Base 1:9.11.3+dfsg
+ dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg
+ dns_zone_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_setrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_setserial@Base 1:9.11.3+dfsg
+ dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_setsignatures@Base 1:9.11.3+dfsg
+ dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_setssutable@Base 1:9.11.3+dfsg
+ dns_zone_setstatistics@Base 1:9.11.3+dfsg
+ dns_zone_setstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_setstats@Base 1:9.11.3+dfsg
+ dns_zone_settask@Base 1:9.11.3+dfsg
+ dns_zone_settype@Base 1:9.11.3+dfsg
+ dns_zone_setupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_setview@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setxfracl@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_signwithkey@Base 1:9.11.3+dfsg
+ dns_zone_synckeyzone@Base 1:9.11.3+dfsg
+ dns_zone_unload@Base 1:9.11.3+dfsg
+ dns_zonekey_iszonekey@Base 1:9.11.3+dfsg
+ dns_zonemgr_attach@Base 1:9.11.3+dfsg
+ dns_zonemgr_create@Base 1:9.11.3+dfsg
+ dns_zonemgr_createzone@Base 1:9.11.3+dfsg
+ dns_zonemgr_detach@Base 1:9.11.3+dfsg
+ dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg
+ dns_zonemgr_getcount@Base 1:9.11.3+dfsg
+ dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_managezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_releasezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg
+ dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setsize@Base 1:9.11.3+dfsg
+ dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_shutdown@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachable@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg
+ dns_zt_apply2@Base 1:9.11.3+dfsg
+ dns_zt_apply@Base 1:9.11.3+dfsg
+ dns_zt_asyncload2@Base 1:9.11.5+dfsg
+ dns_zt_asyncload@Base 1:9.11.3+dfsg
+ dns_zt_attach@Base 1:9.11.3+dfsg
+ dns_zt_create@Base 1:9.11.3+dfsg
+ dns_zt_detach@Base 1:9.11.3+dfsg
+ dns_zt_find@Base 1:9.11.3+dfsg
+ dns_zt_flushanddetach@Base 1:9.11.3+dfsg
+ dns_zt_freezezones@Base 1:9.11.3+dfsg
+ dns_zt_load@Base 1:9.11.3+dfsg
+ dns_zt_loadnew@Base 1:9.11.3+dfsg
+ dns_zt_mount@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_unmount@Base 1:9.11.3+dfsg
+ dnstap__dnstap__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1
+ dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1
+ dnstap__dnstap__init@Base 1:9.11.4.P1
+ dnstap__dnstap__pack@Base 1:9.11.4.P1
+ dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__unpack@Base 1:9.11.4.P1
+ dnstap__message__descriptor@Base 1:9.11.4.P1
+ dnstap__message__free_unpacked@Base 1:9.11.4.P1
+ dnstap__message__get_packed_size@Base 1:9.11.4.P1
+ dnstap__message__init@Base 1:9.11.4.P1
+ dnstap__message__pack@Base 1:9.11.4.P1
+ dnstap__message__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__message__type__descriptor@Base 1:9.11.4.P1
+ dnstap__message__unpack@Base 1:9.11.4.P1
+ dnstap__socket_family__descriptor@Base 1:9.11.4.P1
+ dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1
+ dst__entropy_getdata@Base 1:9.11.3+dfsg
+ dst__entropy_status@Base 1:9.11.3+dfsg
+ dst__gssapi_init@Base 1:9.11.3+dfsg
+ dst__hmacmd5_init@Base 1:9.11.3+dfsg
+ dst__hmacsha1_init@Base 1:9.11.3+dfsg
+ dst__hmacsha224_init@Base 1:9.11.3+dfsg
+ dst__hmacsha256_init@Base 1:9.11.3+dfsg
+ dst__hmacsha384_init@Base 1:9.11.3+dfsg
+ dst__hmacsha512_init@Base 1:9.11.3+dfsg
+ dst__memory_pool@Base 1:9.11.3+dfsg
+ dst__openssl_destroy@Base 1:9.11.3+dfsg
+ dst__openssl_getengine@Base 1:9.11.3+dfsg
+ dst__openssl_init@Base 1:9.11.3+dfsg
+ dst__openssl_toresult2@Base 1:9.11.3+dfsg
+ dst__openssl_toresult3@Base 1:9.11.3+dfsg
+ dst__openssl_toresult@Base 1:9.11.3+dfsg
+ dst__openssldh_init@Base 1:9.11.3+dfsg
+ dst__openssldsa_init@Base 1:9.11.3+dfsg
+ dst__opensslecdsa_init@Base 1:9.11.3+dfsg
+ (optional)dst__openssleddsa_init@Base 1:9.11.4.P1+dfsg
+ dst__opensslrsa_init@Base 1:9.11.3+dfsg
+ dst__privstruct_free@Base 1:9.11.3+dfsg
+ dst__privstruct_parse@Base 1:9.11.3+dfsg
+ dst__privstruct_writefile@Base 1:9.11.3+dfsg
+ dst_algorithm_supported@Base 1:9.11.3+dfsg
+ dst_context_adddata@Base 1:9.11.3+dfsg
+ dst_context_create2@Base 1:9.11.3+dfsg
+ dst_context_create3@Base 1:9.11.3+dfsg
+ dst_context_create4@Base 1:9.11.3+dfsg
+ dst_context_create@Base 1:9.11.3+dfsg
+ dst_context_destroy@Base 1:9.11.3+dfsg
+ dst_context_sign@Base 1:9.11.3+dfsg
+ dst_context_verify2@Base 1:9.11.3+dfsg
+ dst_context_verify@Base 1:9.11.3+dfsg
+ dst_ds_digest_supported@Base 1:9.11.3+dfsg
+ dst_gssapi_acceptctx@Base 1:9.11.3+dfsg
+ dst_gssapi_acquirecred@Base 1:9.11.3+dfsg
+ dst_gssapi_deletectx@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg
+ dst_gssapi_initctx@Base 1:9.11.3+dfsg
+ dst_gssapi_releasecred@Base 1:9.11.3+dfsg
+ dst_key_alg@Base 1:9.11.3+dfsg
+ dst_key_attach@Base 1:9.11.3+dfsg
+ dst_key_buildfilename@Base 1:9.11.3+dfsg
+ dst_key_buildinternal@Base 1:9.11.3+dfsg
+ dst_key_class@Base 1:9.11.3+dfsg
+ dst_key_compare@Base 1:9.11.3+dfsg
+ dst_key_computesecret@Base 1:9.11.3+dfsg
+ dst_key_dump@Base 1:9.11.3+dfsg
+ dst_key_flags@Base 1:9.11.3+dfsg
+ dst_key_format@Base 1:9.11.3+dfsg
+ dst_key_free@Base 1:9.11.3+dfsg
+ dst_key_frombuffer@Base 1:9.11.3+dfsg
+ dst_key_fromdns@Base 1:9.11.3+dfsg
+ dst_key_fromfile@Base 1:9.11.3+dfsg
+ dst_key_fromgssapi@Base 1:9.11.3+dfsg
+ dst_key_fromlabel@Base 1:9.11.3+dfsg
+ dst_key_fromnamedfile@Base 1:9.11.3+dfsg
+ dst_key_generate2@Base 1:9.11.3+dfsg
+ dst_key_generate@Base 1:9.11.3+dfsg
+ dst_key_getbits@Base 1:9.11.3+dfsg
+ dst_key_getfilename@Base 1:9.11.3+dfsg
+ dst_key_getgssctx@Base 1:9.11.3+dfsg
+ dst_key_getnum@Base 1:9.11.3+dfsg
+ dst_key_getprivateformat@Base 1:9.11.3+dfsg
+ dst_key_gettime@Base 1:9.11.3+dfsg
+ dst_key_getttl@Base 1:9.11.3+dfsg
+ dst_key_id@Base 1:9.11.3+dfsg
+ dst_key_inactive@Base 1:9.11.3+dfsg
+ dst_key_isexternal@Base 1:9.11.3+dfsg
+ dst_key_isnullkey@Base 1:9.11.3+dfsg
+ dst_key_isprivate@Base 1:9.11.3+dfsg
+ dst_key_iszonekey@Base 1:9.11.3+dfsg
+ dst_key_name@Base 1:9.11.3+dfsg
+ dst_key_paramcompare@Base 1:9.11.3+dfsg
+ dst_key_privatefrombuffer@Base 1:9.11.3+dfsg
+ dst_key_proto@Base 1:9.11.3+dfsg
+ dst_key_pubcompare@Base 1:9.11.3+dfsg
+ dst_key_read_public@Base 1:9.11.3+dfsg
+ dst_key_restore@Base 1:9.11.3+dfsg
+ dst_key_rid@Base 1:9.11.3+dfsg
+ dst_key_secretsize@Base 1:9.11.3+dfsg
+ dst_key_setbits@Base 1:9.11.3+dfsg
+ dst_key_setexternal@Base 1:9.11.3+dfsg
+ dst_key_setflags@Base 1:9.11.3+dfsg
+ dst_key_setinactive@Base 1:9.11.3+dfsg
+ dst_key_setnum@Base 1:9.11.3+dfsg
+ dst_key_setprivateformat@Base 1:9.11.3+dfsg
+ dst_key_settime@Base 1:9.11.3+dfsg
+ dst_key_setttl@Base 1:9.11.3+dfsg
+ dst_key_sigsize@Base 1:9.11.3+dfsg
+ dst_key_size@Base 1:9.11.3+dfsg
+ dst_key_tkeytoken@Base 1:9.11.3+dfsg
+ dst_key_tobuffer@Base 1:9.11.3+dfsg
+ dst_key_todns@Base 1:9.11.3+dfsg
+ dst_key_tofile@Base 1:9.11.3+dfsg
+ dst_key_unsetnum@Base 1:9.11.3+dfsg
+ dst_key_unsettime@Base 1:9.11.3+dfsg
+ dst_lib_destroy@Base 1:9.11.3+dfsg
+ dst_lib_init2@Base 1:9.11.3+dfsg
+ dst_lib_init@Base 1:9.11.3+dfsg
+ dst_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dst_msgcat@Base 1:9.11.3+dfsg
+ dst_region_computeid@Base 1:9.11.3+dfsg
+ dst_region_computerid@Base 1:9.11.3+dfsg
+ dst_result_register@Base 1:9.11.3+dfsg
+ dst_result_totext@Base 1:9.11.3+dfsg
+ gss_error_tostring@Base 1:9.11.3+dfsg
+ gss_log@Base 1:9.11.3+dfsg
+ isc__rdatalist_addclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_clone@Base 1:9.11.3+dfsg
+ isc__rdatalist_count@Base 1:9.11.3+dfsg
+ isc__rdatalist_current@Base 1:9.11.3+dfsg
+ isc__rdatalist_disassociate@Base 1:9.11.3+dfsg
+ isc__rdatalist_first@Base 1:9.11.3+dfsg
+ isc__rdatalist_getclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_getownercase@Base 1:9.11.3+dfsg
+ isc__rdatalist_next@Base 1:9.11.3+dfsg
+ isc__rdatalist_setownercase@Base 1:9.11.3+dfsg
+ ishex@Base 1:9.11.3+dfsg
diff --git a/debian/libirs-export161-udeb.install b/debian/libirs-export161-udeb.install
new file mode 100755
index 0000000..921782a
--- /dev/null
+++ b/debian/libirs-export161-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libirs-export161.install b/debian/libirs-export161.install
new file mode 100755
index 0000000..921782a
--- /dev/null
+++ b/debian/libirs-export161.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libirs161.install b/debian/libirs161.install
new file mode 100644
index 0000000..e4e9fdc
--- /dev/null
+++ b/debian/libirs161.install
@@ -0,0 +1 @@
+usr/lib/*/libirs.so.*
diff --git a/debian/libirs161.symbols b/debian/libirs161.symbols
new file mode 100644
index 0000000..3f26f57
--- /dev/null
+++ b/debian/libirs161.symbols
@@ -0,0 +1,28 @@
+libirs.so.161 libirs161 #MINVER#
+ freeaddrinfo@Base 1:9.10.6+dfsg
+ gai_strerror@Base 1:9.10.6+dfsg
+ getaddrinfo@Base 1:9.10.6+dfsg
+ getnameinfo@Base 1:9.10.6+dfsg
+ irs_context_create@Base 1:9.10.6+dfsg
+ irs_context_destroy@Base 1:9.10.6+dfsg
+ irs_context_get@Base 1:9.10.6+dfsg
+ irs_context_getappctx@Base 1:9.10.6+dfsg
+ irs_context_getdnsclient@Base 1:9.10.6+dfsg
+ irs_context_getdnsconf@Base 1:9.10.6+dfsg
+ irs_context_getmctx@Base 1:9.10.6+dfsg
+ irs_context_getresconf@Base 1:9.10.6+dfsg
+ irs_context_gettask@Base 1:9.10.6+dfsg
+ irs_context_gettaskmgr@Base 1:9.10.6+dfsg
+ irs_context_gettimermgr@Base 1:9.10.6+dfsg
+ irs_dnsconf_destroy@Base 1:9.10.6+dfsg
+ irs_dnsconf_gettrustedkeys@Base 1:9.10.6+dfsg
+ irs_dnsconf_load@Base 1:9.10.6+dfsg
+ irs_libage@Base 1:9.10.6+dfsg
+ irs_libinterface@Base 1:9.10.6+dfsg
+ irs_librevision@Base 1:9.10.6+dfsg
+ irs_resconf_destroy@Base 1:9.10.6+dfsg
+ irs_resconf_getnameservers@Base 1:9.10.6+dfsg
+ irs_resconf_getndots@Base 1:9.10.6+dfsg
+ irs_resconf_getsearchlist@Base 1:9.10.6+dfsg
+ irs_resconf_load@Base 1:9.10.6+dfsg
+ irs_version@Base 1:9.10.6+dfsg
diff --git a/debian/libisc-export1100-udeb.install b/debian/libisc-export1100-udeb.install
new file mode 100755
index 0000000..f89acd6
--- /dev/null
+++ b/debian/libisc-export1100-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisc-export1100.install b/debian/libisc-export1100.install
new file mode 100755
index 0000000..f89acd6
--- /dev/null
+++ b/debian/libisc-export1100.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisc1100.install b/debian/libisc1100.install
new file mode 100644
index 0000000..5d4c76a
--- /dev/null
+++ b/debian/libisc1100.install
@@ -0,0 +1,2 @@
+usr/lib/*/libisc-pkcs11.so.*
+usr/lib/*/libisc.so.*
diff --git a/debian/libisc1100.symbols b/debian/libisc1100.symbols
new file mode 100644
index 0000000..3197dcb
--- /dev/null
+++ b/debian/libisc1100.symbols
@@ -0,0 +1,1803 @@
+libisc.so.1100 libisc1100 #MINVER#
+ (optional)bsdcompat@Base 1:9.11.3+dfsg
+ isc___errno2result@Base 1:9.11.3+dfsg
+ isc___mem_allocate@Base 1:9.11.3+dfsg
+ isc___mem_free@Base 1:9.11.3+dfsg
+ isc___mem_get@Base 1:9.11.3+dfsg
+ isc___mem_put@Base 1:9.11.3+dfsg
+ isc___mem_putanddetach@Base 1:9.11.3+dfsg
+ isc___mem_reallocate@Base 1:9.11.3+dfsg
+ isc___mem_strdup@Base 1:9.11.3+dfsg
+ isc___mempool_get@Base 1:9.11.3+dfsg
+ isc___mempool_put@Base 1:9.11.3+dfsg
+ isc__app_block@Base 1:9.11.3+dfsg
+ isc__app_ctxfinish@Base 1:9.11.3+dfsg
+ isc__app_ctxonrun@Base 1:9.11.3+dfsg
+ isc__app_ctxrun@Base 1:9.11.3+dfsg
+ isc__app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc__app_ctxstart@Base 1:9.11.3+dfsg
+ isc__app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc__app_finish@Base 1:9.11.3+dfsg
+ isc__app_onrun@Base 1:9.11.3+dfsg
+ isc__app_register@Base 1:9.11.3+dfsg
+ isc__app_reload@Base 1:9.11.3+dfsg
+ isc__app_run@Base 1:9.11.3+dfsg
+ isc__app_shutdown@Base 1:9.11.3+dfsg
+ isc__app_start@Base 1:9.11.3+dfsg
+ isc__app_unblock@Base 1:9.11.3+dfsg
+ isc__appctx_create@Base 1:9.11.3+dfsg
+ isc__appctx_destroy@Base 1:9.11.3+dfsg
+ isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc__backtrace_nsymbols@Base 1:9.11.3+dfsg
+ isc__backtrace_symtable@Base 1:9.11.3+dfsg
+ isc__buffer_activeregion@Base 1:9.11.3+dfsg
+ isc__buffer_add@Base 1:9.11.3+dfsg
+ isc__buffer_availableregion@Base 1:9.11.3+dfsg
+ isc__buffer_back@Base 1:9.11.3+dfsg
+ isc__buffer_clear@Base 1:9.11.3+dfsg
+ isc__buffer_consumedregion@Base 1:9.11.3+dfsg
+ isc__buffer_first@Base 1:9.11.3+dfsg
+ isc__buffer_forward@Base 1:9.11.3+dfsg
+ isc__buffer_init@Base 1:9.11.3+dfsg
+ isc__buffer_initnull@Base 1:9.11.3+dfsg
+ isc__buffer_invalidate@Base 1:9.11.3+dfsg
+ isc__buffer_putmem@Base 1:9.11.3+dfsg
+ isc__buffer_putstr@Base 1:9.11.3+dfsg
+ isc__buffer_putuint16@Base 1:9.11.3+dfsg
+ isc__buffer_putuint24@Base 1:9.11.3+dfsg
+ isc__buffer_putuint32@Base 1:9.11.3+dfsg
+ isc__buffer_putuint48@Base 1:9.11.3+dfsg
+ isc__buffer_putuint8@Base 1:9.11.3+dfsg
+ isc__buffer_region@Base 1:9.11.3+dfsg
+ isc__buffer_remainingregion@Base 1:9.11.3+dfsg
+ isc__buffer_setactive@Base 1:9.11.3+dfsg
+ isc__buffer_subtract@Base 1:9.11.3+dfsg
+ isc__buffer_usedregion@Base 1:9.11.3+dfsg
+ isc__hash_setvec@Base 1:9.11.3+dfsg
+ isc__mem_allocate@Base 1:9.11.3+dfsg
+ isc__mem_attach@Base 1:9.11.3+dfsg
+ isc__mem_create2@Base 1:9.11.3+dfsg
+ isc__mem_destroy@Base 1:9.11.3+dfsg
+ isc__mem_detach@Base 1:9.11.3+dfsg
+ isc__mem_free@Base 1:9.11.3+dfsg
+ isc__mem_get@Base 1:9.11.3+dfsg
+ isc__mem_inuse@Base 1:9.11.3+dfsg
+ isc__mem_isovermem@Base 1:9.11.3+dfsg
+ isc__mem_maxinuse@Base 1:9.11.3+dfsg
+ isc__mem_printactive@Base 1:9.11.3+dfsg
+ isc__mem_put@Base 1:9.11.3+dfsg
+ isc__mem_putanddetach@Base 1:9.11.3+dfsg
+ isc__mem_reallocate@Base 1:9.11.3+dfsg
+ isc__mem_register@Base 1:9.11.3+dfsg
+ isc__mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc__mem_setwater@Base 1:9.11.3+dfsg
+ isc__mem_strdup@Base 1:9.11.3+dfsg
+ isc__mem_total@Base 1:9.11.3+dfsg
+ isc__mem_waterack@Base 1:9.11.3+dfsg
+ isc__mempool_associatelock@Base 1:9.11.3+dfsg
+ isc__mempool_create@Base 1:9.11.3+dfsg
+ isc__mempool_destroy@Base 1:9.11.3+dfsg
+ isc__mempool_get@Base 1:9.11.3+dfsg
+ isc__mempool_getallocated@Base 1:9.11.3+dfsg
+ isc__mempool_put@Base 1:9.11.3+dfsg
+ isc__mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc__mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc__mempool_setname@Base 1:9.11.3+dfsg
+ isc__mutex_init@Base 1:9.11.3+dfsg
+ isc__socket_accept@Base 1:9.11.3+dfsg
+ isc__socket_attach@Base 1:9.11.3+dfsg
+ isc__socket_bind@Base 1:9.11.3+dfsg
+ isc__socket_cancel@Base 1:9.11.3+dfsg
+ isc__socket_cleanunix@Base 1:9.11.3+dfsg
+ isc__socket_close@Base 1:9.11.3+dfsg
+ isc__socket_connect@Base 1:9.11.3+dfsg
+ isc__socket_create@Base 1:9.11.3+dfsg
+ isc__socket_detach@Base 1:9.11.3+dfsg
+ isc__socket_dscp@Base 1:9.11.3+dfsg
+ isc__socket_dup@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc__socket_filter@Base 1:9.11.3+dfsg
+ isc__socket_getfd@Base 1:9.11.3+dfsg
+ isc__socket_getname@Base 1:9.11.3+dfsg
+ isc__socket_getpeername@Base 1:9.11.3+dfsg
+ isc__socket_getsockname@Base 1:9.11.3+dfsg
+ isc__socket_gettag@Base 1:9.11.3+dfsg
+ isc__socket_gettype@Base 1:9.11.3+dfsg
+ isc__socket_ipv6only@Base 1:9.11.3+dfsg
+ isc__socket_isbound@Base 1:9.11.3+dfsg
+ isc__socket_listen@Base 1:9.11.3+dfsg
+ isc__socket_open@Base 1:9.11.3+dfsg
+ isc__socket_permunix@Base 1:9.11.3+dfsg
+ isc__socket_recv2@Base 1:9.11.3+dfsg
+ isc__socket_recv@Base 1:9.11.3+dfsg
+ isc__socket_recvv@Base 1:9.11.3+dfsg
+ isc__socket_register@Base 1:9.11.3+dfsg
+ isc__socket_send@Base 1:9.11.3+dfsg
+ isc__socket_sendto2@Base 1:9.11.3+dfsg
+ isc__socket_sendto@Base 1:9.11.3+dfsg
+ isc__socket_sendtov2@Base 1:9.11.3+dfsg
+ isc__socket_sendtov@Base 1:9.11.3+dfsg
+ isc__socket_sendv@Base 1:9.11.3+dfsg
+ isc__socket_setname@Base 1:9.11.3+dfsg
+ isc__socketmgr_create2@Base 1:9.11.3+dfsg
+ isc__socketmgr_create@Base 1:9.11.3+dfsg
+ isc__socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc__socketmgr_maxudp@Base 1:9.11.3+dfsg
+ isc__socketmgr_setreserved@Base 1:9.11.3+dfsg
+ isc__strerror@Base 1:9.11.3+dfsg
+ isc__task_attach@Base 1:9.11.3+dfsg
+ isc__task_beginexclusive@Base 1:9.11.3+dfsg
+ isc__task_create@Base 1:9.11.3+dfsg
+ isc__task_destroy@Base 1:9.11.3+dfsg
+ isc__task_detach@Base 1:9.11.3+dfsg
+ isc__task_endexclusive@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc__task_getname@Base 1:9.11.3+dfsg
+ isc__task_gettag@Base 1:9.11.3+dfsg
+ isc__task_onshutdown@Base 1:9.11.3+dfsg
+ isc__task_privilege@Base 1:9.11.3+dfsg
+ isc__task_purge@Base 1:9.11.3+dfsg
+ isc__task_purgerange@Base 1:9.11.3+dfsg
+ isc__task_register@Base 1:9.11.3+dfsg
+ isc__task_send@Base 1:9.11.3+dfsg
+ isc__task_sendanddetach@Base 1:9.11.3+dfsg
+ isc__task_setname@Base 1:9.11.3+dfsg
+ isc__task_setprivilege@Base 1:9.11.3+dfsg
+ isc__task_shutdown@Base 1:9.11.3+dfsg
+ isc__task_unsend@Base 1:9.11.3+dfsg
+ isc__task_unsendrange@Base 1:9.11.3+dfsg
+ isc__taskmgr_create@Base 1:9.11.3+dfsg
+ isc__taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc__taskmgr_mode@Base 1:9.11.3+dfsg
+ isc__taskmgr_pause@Base 1:9.11.3+dfsg
+ isc__taskmgr_resume@Base 1:9.11.3+dfsg
+ isc__taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc__timer_attach@Base 1:9.11.3+dfsg
+ isc__timer_create@Base 1:9.11.3+dfsg
+ isc__timer_detach@Base 1:9.11.3+dfsg
+ isc__timer_register@Base 1:9.11.3+dfsg
+ isc__timer_reset@Base 1:9.11.3+dfsg
+ isc__timer_touch@Base 1:9.11.3+dfsg
+ isc__timermgr_create@Base 1:9.11.3+dfsg
+ isc__timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_aes128_crypt@Base 1:9.11.3+dfsg
+ isc_aes192_crypt@Base 1:9.11.3+dfsg
+ isc_aes256_crypt@Base 1:9.11.3+dfsg
+ isc_app_block@Base 1:9.11.3+dfsg
+ isc_app_ctxfinish@Base 1:9.11.3+dfsg
+ isc_app_ctxonrun@Base 1:9.11.3+dfsg
+ isc_app_ctxrun@Base 1:9.11.3+dfsg
+ isc_app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc_app_ctxstart@Base 1:9.11.3+dfsg
+ isc_app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc_app_finish@Base 1:9.11.3+dfsg
+ isc_app_isrunning@Base 1:9.11.3+dfsg
+ isc_app_onrun@Base 1:9.11.3+dfsg
+ isc_app_register@Base 1:9.11.3+dfsg
+ isc_app_reload@Base 1:9.11.3+dfsg
+ isc_app_run@Base 1:9.11.3+dfsg
+ isc_app_shutdown@Base 1:9.11.3+dfsg
+ isc_app_start@Base 1:9.11.3+dfsg
+ isc_app_unblock@Base 1:9.11.3+dfsg
+ isc_appctx_create@Base 1:9.11.3+dfsg
+ isc_appctx_destroy@Base 1:9.11.3+dfsg
+ isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc_assertion_failed@Base 1:9.11.3+dfsg
+ isc_assertion_setcallback@Base 1:9.11.3+dfsg
+ isc_assertion_typetotext@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbol@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg
+ isc_backtrace_gettrace@Base 1:9.11.3+dfsg
+ isc_base32_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32_decodestring@Base 1:9.11.3+dfsg
+ isc_base32_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32_totext@Base 1:9.11.3+dfsg
+ isc_base32hex_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hex_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hex_totext@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hexnp_totext@Base 1:9.11.3+dfsg
+ isc_base64_decodestring@Base 1:9.11.3+dfsg
+ isc_base64_tobuffer@Base 1:9.11.3+dfsg
+ isc_base64_totext@Base 1:9.11.3+dfsg
+ isc_bind9@Base 1:9.11.3+dfsg
+ isc_buffer_allocate@Base 1:9.11.3+dfsg
+ isc_buffer_compact@Base 1:9.11.3+dfsg
+ isc_buffer_copyregion@Base 1:9.11.3+dfsg
+ isc_buffer_dup@Base 1:9.11.3+dfsg
+ isc_buffer_free@Base 1:9.11.3+dfsg
+ isc_buffer_getuint16@Base 1:9.11.3+dfsg
+ isc_buffer_getuint32@Base 1:9.11.3+dfsg
+ isc_buffer_getuint48@Base 1:9.11.3+dfsg
+ isc_buffer_getuint8@Base 1:9.11.3+dfsg
+ isc_buffer_putdecint@Base 1:9.11.3+dfsg
+ isc_buffer_reallocate@Base 1:9.11.3+dfsg
+ isc_buffer_reinit@Base 1:9.11.3+dfsg
+ isc_buffer_reserve@Base 1:9.11.3+dfsg
+ isc_buffer_setautorealloc@Base 1:9.11.3+dfsg
+ isc_bufferlist_availablecount@Base 1:9.11.3+dfsg
+ isc_bufferlist_usedcount@Base 1:9.11.3+dfsg
+ isc_categories@Base 1:9.11.3+dfsg
+ isc_commandline_argument@Base 1:9.11.3+dfsg
+ isc_commandline_errprint@Base 1:9.11.3+dfsg
+ isc_commandline_index@Base 1:9.11.3+dfsg
+ isc_commandline_option@Base 1:9.11.3+dfsg
+ isc_commandline_parse@Base 1:9.11.3+dfsg
+ isc_commandline_progname@Base 1:9.11.3+dfsg
+ isc_commandline_reset@Base 1:9.11.3+dfsg
+ isc_commandline_strtoargv@Base 1:9.11.3+dfsg
+ isc_condition_waituntil@Base 1:9.11.3+dfsg
+ isc_counter_attach@Base 1:9.11.3+dfsg
+ isc_counter_create@Base 1:9.11.3+dfsg
+ isc_counter_detach@Base 1:9.11.3+dfsg
+ isc_counter_increment@Base 1:9.11.3+dfsg
+ isc_counter_setlimit@Base 1:9.11.3+dfsg
+ isc_counter_used@Base 1:9.11.3+dfsg
+ isc_crc64_final@Base 1:9.11.3+dfsg
+ isc_crc64_init@Base 1:9.11.3+dfsg
+ isc_crc64_update@Base 1:9.11.3+dfsg
+ isc_dir_chdir@Base 1:9.11.3+dfsg
+ isc_dir_chroot@Base 1:9.11.3+dfsg
+ isc_dir_close@Base 1:9.11.3+dfsg
+ isc_dir_createunique@Base 1:9.11.3+dfsg
+ isc_dir_init@Base 1:9.11.3+dfsg
+ isc_dir_open@Base 1:9.11.3+dfsg
+ isc_dir_read@Base 1:9.11.3+dfsg
+ isc_dir_reset@Base 1:9.11.3+dfsg
+ isc_dscp_check_value@Base 1:9.11.3+dfsg
+ isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg
+ isc_entropy_addsample@Base 1:9.11.3+dfsg
+ isc_entropy_attach@Base 1:9.11.3+dfsg
+ isc_entropy_create@Base 1:9.11.3+dfsg
+ isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg
+ isc_entropy_createfilesource@Base 1:9.11.3+dfsg
+ isc_entropy_createsamplesource@Base 1:9.11.3+dfsg
+ isc_entropy_destroysource@Base 1:9.11.3+dfsg
+ isc_entropy_detach@Base 1:9.11.3+dfsg
+ isc_entropy_getdata@Base 1:9.11.3+dfsg
+ isc_entropy_putdata@Base 1:9.11.3+dfsg
+ isc_entropy_stats@Base 1:9.11.3+dfsg
+ isc_entropy_status@Base 1:9.11.3+dfsg
+ isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg
+ isc_entropy_usebestsource@Base 1:9.11.3+dfsg
+ isc_errno_toresult@Base 1:9.11.3+dfsg
+ isc_error_fatal@Base 1:9.11.3+dfsg
+ isc_error_runtimecheck@Base 1:9.11.3+dfsg
+ isc_error_setfatal@Base 1:9.11.3+dfsg
+ isc_error_setunexpected@Base 1:9.11.3+dfsg
+ isc_error_unexpected@Base 1:9.11.3+dfsg
+ isc_event_allocate@Base 1:9.11.3+dfsg
+ isc_event_constallocate@Base 1:9.11.3+dfsg
+ isc_event_free@Base 1:9.11.3+dfsg
+ isc_file_absolutepath@Base 1:9.11.3+dfsg
+ isc_file_basename@Base 1:9.11.3+dfsg
+ isc_file_bopenunique@Base 1:9.11.3+dfsg
+ isc_file_bopenuniquemode@Base 1:9.11.3+dfsg
+ isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_exists@Base 1:9.11.3+dfsg
+ isc_file_getmodtime@Base 1:9.11.3+dfsg
+ isc_file_getsize@Base 1:9.11.3+dfsg
+ isc_file_getsizefd@Base 1:9.11.3+dfsg
+ isc_file_isabsolute@Base 1:9.11.3+dfsg
+ isc_file_ischdiridempotent@Base 1:9.11.3+dfsg
+ isc_file_iscurrentdir@Base 1:9.11.3+dfsg
+ isc_file_isdirectory@Base 1:9.11.3+dfsg
+ isc_file_isdirwritable@Base 1:9.11.3+dfsg
+ isc_file_isplainfile@Base 1:9.11.3+dfsg
+ isc_file_isplainfilefd@Base 1:9.11.3+dfsg
+ isc_file_mktemplate@Base 1:9.11.3+dfsg
+ isc_file_mmap@Base 1:9.11.3+dfsg
+ isc_file_mode@Base 1:9.11.3+dfsg
+ isc_file_munmap@Base 1:9.11.3+dfsg
+ isc_file_openunique@Base 1:9.11.3+dfsg
+ isc_file_openuniquemode@Base 1:9.11.3+dfsg
+ isc_file_openuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_progname@Base 1:9.11.3+dfsg
+ isc_file_remove@Base 1:9.11.3+dfsg
+ isc_file_rename@Base 1:9.11.3+dfsg
+ isc_file_renameunique@Base 1:9.11.3+dfsg
+ isc_file_safecreate@Base 1:9.11.3+dfsg
+ isc_file_sanitize@Base 1:9.11.3+dfsg
+ isc_file_settime@Base 1:9.11.3+dfsg
+ isc_file_splitpath@Base 1:9.11.3+dfsg
+ isc_file_template@Base 1:9.11.3+dfsg
+ isc_file_truncate@Base 1:9.11.3+dfsg
+ isc_fsaccess_add@Base 1:9.11.3+dfsg
+ isc_fsaccess_remove@Base 1:9.11.3+dfsg
+ isc_fsaccess_set@Base 1:9.11.3+dfsg
+ isc_hash_calc@Base 1:9.11.3+dfsg
+ isc_hash_create@Base 1:9.11.3+dfsg
+ isc_hash_ctxattach@Base 1:9.11.3+dfsg
+ isc_hash_ctxcalc@Base 1:9.11.3+dfsg
+ isc_hash_ctxcreate@Base 1:9.11.3+dfsg
+ isc_hash_ctxdetach@Base 1:9.11.3+dfsg
+ isc_hash_ctxinit@Base 1:9.11.3+dfsg
+ isc_hash_destroy@Base 1:9.11.3+dfsg
+ isc_hash_function@Base 1:9.11.3+dfsg
+ isc_hash_function_reverse@Base 1:9.11.3+dfsg
+ isc_hash_get_initializer@Base 1:9.11.3+dfsg
+ isc_hash_init@Base 1:9.11.3+dfsg
+ isc_hash_set_initializer@Base 1:9.11.3+dfsg
+ isc_hashctx@Base 1:9.11.3+dfsg
+ isc_heap_create@Base 1:9.11.3+dfsg
+ isc_heap_decreased@Base 1:9.11.3+dfsg
+ isc_heap_delete@Base 1:9.11.3+dfsg
+ isc_heap_destroy@Base 1:9.11.3+dfsg
+ isc_heap_element@Base 1:9.11.3+dfsg
+ isc_heap_foreach@Base 1:9.11.3+dfsg
+ isc_heap_increased@Base 1:9.11.3+dfsg
+ isc_heap_insert@Base 1:9.11.3+dfsg
+ isc_hex_decodestring@Base 1:9.11.3+dfsg
+ isc_hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_hex_totext@Base 1:9.11.3+dfsg
+ isc_hmacmd5_check@Base 1:9.11.3+dfsg
+ isc_hmacmd5_init@Base 1:9.11.3+dfsg
+ isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacmd5_sign@Base 1:9.11.3+dfsg
+ isc_hmacmd5_update@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify2@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha1_check@Base 1:9.11.3+dfsg
+ isc_hmacsha1_init@Base 1:9.11.3+dfsg
+ isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha1_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha1_update@Base 1:9.11.3+dfsg
+ isc_hmacsha1_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha224_init@Base 1:9.11.3+dfsg
+ isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha224_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha224_update@Base 1:9.11.3+dfsg
+ isc_hmacsha224_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha256_init@Base 1:9.11.3+dfsg
+ isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha256_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha256_update@Base 1:9.11.3+dfsg
+ isc_hmacsha256_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha384_init@Base 1:9.11.3+dfsg
+ isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha384_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha384_update@Base 1:9.11.3+dfsg
+ isc_hmacsha384_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha512_init@Base 1:9.11.3+dfsg
+ isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha512_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha512_update@Base 1:9.11.3+dfsg
+ isc_hmacsha512_verify@Base 1:9.11.3+dfsg
+ isc_ht_add@Base 1:9.11.3+dfsg
+ isc_ht_count@Base 1:9.11.3+dfsg
+ isc_ht_delete@Base 1:9.11.3+dfsg
+ isc_ht_destroy@Base 1:9.11.3+dfsg
+ isc_ht_find@Base 1:9.11.3+dfsg
+ isc_ht_init@Base 1:9.11.3+dfsg
+ isc_ht_iter_create@Base 1:9.11.3+dfsg
+ isc_ht_iter_current@Base 1:9.11.3+dfsg
+ isc_ht_iter_currentkey@Base 1:9.11.3+dfsg
+ isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg
+ isc_ht_iter_destroy@Base 1:9.11.3+dfsg
+ isc_ht_iter_first@Base 1:9.11.3+dfsg
+ isc_ht_iter_next@Base 1:9.11.3+dfsg
+ isc_httpd_addheader@Base 1:9.11.3+dfsg
+ isc_httpd_addheaderuint@Base 1:9.11.3+dfsg
+ isc_httpd_endheaders@Base 1:9.11.3+dfsg
+ isc_httpd_response@Base 1:9.11.3+dfsg
+ isc_httpd_setfinishhook@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl@Base 1:9.11.3+dfsg
+ isc_httpdmgr_create@Base 1:9.11.3+dfsg
+ isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg
+ isc_interfaceiter_create@Base 1:9.11.3+dfsg
+ isc_interfaceiter_current@Base 1:9.11.3+dfsg
+ isc_interfaceiter_destroy@Base 1:9.11.3+dfsg
+ isc_interfaceiter_first@Base 1:9.11.3+dfsg
+ isc_interfaceiter_next@Base 1:9.11.3+dfsg
+ isc_interval_iszero@Base 1:9.11.3+dfsg
+ isc_interval_set@Base 1:9.11.3+dfsg
+ isc_interval_zero@Base 1:9.11.3+dfsg
+ isc_iterated_hash@Base 1:9.11.3+dfsg
+ isc_keyboard_canceled@Base 1:9.11.3+dfsg
+ isc_keyboard_close@Base 1:9.11.3+dfsg
+ isc_keyboard_getchar@Base 1:9.11.3+dfsg
+ isc_keyboard_open@Base 1:9.11.3+dfsg
+ isc_lctx@Base 1:9.11.3+dfsg
+ isc_lex_close@Base 1:9.11.3+dfsg
+ isc_lex_create@Base 1:9.11.3+dfsg
+ isc_lex_destroy@Base 1:9.11.3+dfsg
+ isc_lex_getcomments@Base 1:9.11.3+dfsg
+ isc_lex_getlasttokentext@Base 1:9.11.3+dfsg
+ isc_lex_getmastertoken@Base 1:9.11.3+dfsg
+ isc_lex_getoctaltoken@Base 1:9.11.3+dfsg
+ isc_lex_getsourceline@Base 1:9.11.3+dfsg
+ isc_lex_getsourcename@Base 1:9.11.3+dfsg
+ isc_lex_getspecials@Base 1:9.11.3+dfsg
+ isc_lex_gettoken@Base 1:9.11.3+dfsg
+ isc_lex_isfile@Base 1:9.11.3+dfsg
+ isc_lex_openbuffer@Base 1:9.11.3+dfsg
+ isc_lex_openfile@Base 1:9.11.3+dfsg
+ isc_lex_openstream@Base 1:9.11.3+dfsg
+ isc_lex_setcomments@Base 1:9.11.3+dfsg
+ isc_lex_setsourceline@Base 1:9.11.3+dfsg
+ isc_lex_setsourcename@Base 1:9.11.3+dfsg
+ isc_lex_setspecials@Base 1:9.11.3+dfsg
+ isc_lex_ungettoken@Base 1:9.11.3+dfsg
+ isc_lfsr_generate32@Base 1:9.11.3+dfsg
+ isc_lfsr_generate@Base 1:9.11.3+dfsg
+ isc_lfsr_init@Base 1:9.11.3+dfsg
+ isc_lfsr_skip@Base 1:9.11.3+dfsg
+ isc_lib_initmsgcat@Base 1:9.11.3+dfsg
+ isc_lib_register@Base 1:9.11.3+dfsg
+ isc_libage@Base 1:9.11.3+dfsg
+ isc_libinterface@Base 1:9.11.3+dfsg
+ isc_librevision@Base 1:9.11.3+dfsg
+ isc_log_categorybyname@Base 1:9.11.3+dfsg
+ isc_log_closefilelogs@Base 1:9.11.3+dfsg
+ isc_log_create@Base 1:9.11.3+dfsg
+ isc_log_createchannel@Base 1:9.11.3+dfsg
+ isc_log_destroy@Base 1:9.11.3+dfsg
+ isc_log_getdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_getduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_gettag@Base 1:9.11.3+dfsg
+ isc_log_ivwrite1@Base 1:9.11.3+dfsg
+ isc_log_ivwrite@Base 1:9.11.3+dfsg
+ isc_log_iwrite1@Base 1:9.11.3+dfsg
+ isc_log_iwrite@Base 1:9.11.3+dfsg
+ isc_log_modulebyname@Base 1:9.11.3+dfsg
+ isc_log_opensyslog@Base 1:9.11.3+dfsg
+ isc_log_registercategories@Base 1:9.11.3+dfsg
+ isc_log_registermodules@Base 1:9.11.3+dfsg
+ isc_log_setcontext@Base 1:9.11.3+dfsg
+ isc_log_setdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_setduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_settag@Base 1:9.11.3+dfsg
+ isc_log_usechannel@Base 1:9.11.3+dfsg
+ isc_log_vwrite1@Base 1:9.11.3+dfsg
+ isc_log_vwrite@Base 1:9.11.3+dfsg
+ isc_log_wouldlog@Base 1:9.11.3+dfsg
+ isc_log_write1@Base 1:9.11.3+dfsg
+ isc_log_write@Base 1:9.11.3+dfsg
+ isc_logconfig_create@Base 1:9.11.3+dfsg
+ isc_logconfig_destroy@Base 1:9.11.3+dfsg
+ isc_logconfig_get@Base 1:9.11.3+dfsg
+ isc_logconfig_use@Base 1:9.11.3+dfsg
+ isc_logfile_roll@Base 1:9.11.3+dfsg
+ isc_md5_check@Base 1:9.11.3+dfsg
+ isc_md5_final@Base 1:9.11.3+dfsg
+ isc_md5_init@Base 1:9.11.3+dfsg
+ isc_md5_invalidate@Base 1:9.11.3+dfsg
+ isc_md5_update@Base 1:9.11.3+dfsg
+ isc_mem_attach@Base 1:9.11.3+dfsg
+ isc_mem_checkdestroyed@Base 1:9.11.3+dfsg
+ isc_mem_create2@Base 1:9.11.3+dfsg
+ isc_mem_create@Base 1:9.11.3+dfsg
+ isc_mem_createx2@Base 1:9.11.3+dfsg
+ isc_mem_createx@Base 1:9.11.3+dfsg
+ isc_mem_debugging@Base 1:9.11.3+dfsg
+ isc_mem_defaultflags@Base 1:9.11.3+dfsg
+ isc_mem_destroy@Base 1:9.11.3+dfsg
+ isc_mem_detach@Base 1:9.11.3+dfsg
+ isc_mem_getname@Base 1:9.11.3+dfsg
+ isc_mem_getquota@Base 1:9.11.3+dfsg
+ isc_mem_gettag@Base 1:9.11.3+dfsg
+ isc_mem_inuse@Base 1:9.11.3+dfsg
+ isc_mem_isovermem@Base 1:9.11.3+dfsg
+ isc_mem_maxinuse@Base 1:9.11.3+dfsg
+ isc_mem_ondestroy@Base 1:9.11.3+dfsg
+ isc_mem_printallactive@Base 1:9.11.3+dfsg
+ isc_mem_references@Base 1:9.11.3+dfsg
+ isc_mem_register@Base 1:9.11.3+dfsg
+ isc_mem_renderjson@Base 1:9.11.3+dfsg
+ isc_mem_renderxml@Base 1:9.11.3+dfsg
+ isc_mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc_mem_setname@Base 1:9.11.3+dfsg
+ isc_mem_setquota@Base 1:9.11.3+dfsg
+ isc_mem_setwater@Base 1:9.11.3+dfsg
+ isc_mem_stats@Base 1:9.11.3+dfsg
+ isc_mem_total@Base 1:9.11.3+dfsg
+ isc_mem_waterack@Base 1:9.11.3+dfsg
+ isc_meminfo_totalphys@Base 1:9.11.3+dfsg
+ isc_mempool_associatelock@Base 1:9.11.3+dfsg
+ isc_mempool_create@Base 1:9.11.3+dfsg
+ isc_mempool_destroy@Base 1:9.11.3+dfsg
+ isc_mempool_getallocated@Base 1:9.11.3+dfsg
+ isc_mempool_getfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreecount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setname@Base 1:9.11.3+dfsg
+ isc_modules@Base 1:9.11.3+dfsg
+ isc_msgcat@Base 1:9.11.3+dfsg
+ isc_msgcat_close@Base 1:9.11.3+dfsg
+ isc_msgcat_get@Base 1:9.11.3+dfsg
+ isc_msgcat_open@Base 1:9.11.3+dfsg
+ isc_mutexblock_destroy@Base 1:9.11.3+dfsg
+ isc_mutexblock_init@Base 1:9.11.3+dfsg
+ isc_net_aton@Base 1:9.11.3+dfsg
+ isc_net_disableipv4@Base 1:9.11.3+dfsg
+ isc_net_disableipv6@Base 1:9.11.3+dfsg
+ isc_net_enableipv4@Base 1:9.11.3+dfsg
+ isc_net_enableipv6@Base 1:9.11.3+dfsg
+ isc_net_getudpportrange@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6only@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg
+ isc_net_probedscp@Base 1:9.11.3+dfsg
+ isc_net_probeipv4@Base 1:9.11.3+dfsg
+ isc_net_probeipv6@Base 1:9.11.3+dfsg
+ isc_net_probeunix@Base 1:9.11.3+dfsg
+ isc_netaddr_any6@Base 1:9.11.3+dfsg
+ isc_netaddr_any@Base 1:9.11.3+dfsg
+ isc_netaddr_eqprefix@Base 1:9.11.3+dfsg
+ isc_netaddr_equal@Base 1:9.11.3+dfsg
+ isc_netaddr_format@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin@Base 1:9.11.3+dfsg
+ isc_netaddr_frompath@Base 1:9.11.3+dfsg
+ isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg
+ isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg
+ isc_netaddr_getzone@Base 1:9.11.3+dfsg
+ isc_netaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_netaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_netaddr_isloopback@Base 1:9.11.3+dfsg
+ isc_netaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_netaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_netaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg
+ isc_netaddr_prefixok@Base 1:9.11.3+dfsg
+ isc_netaddr_setzone@Base 1:9.11.3+dfsg
+ isc_netaddr_totext@Base 1:9.11.3+dfsg
+ isc_netscope_pton@Base 1:9.11.3+dfsg
+ isc_ondestroy_init@Base 1:9.11.3+dfsg
+ isc_ondestroy_notify@Base 1:9.11.3+dfsg
+ isc_ondestroy_register@Base 1:9.11.3+dfsg
+ isc_os_ncpus@Base 1:9.11.3+dfsg
+ isc_parse_uint16@Base 1:9.11.3+dfsg
+ isc_parse_uint32@Base 1:9.11.3+dfsg
+ isc_parse_uint8@Base 1:9.11.3+dfsg
+ isc_pool_count@Base 1:9.11.3+dfsg
+ isc_pool_create@Base 1:9.11.3+dfsg
+ isc_pool_destroy@Base 1:9.11.3+dfsg
+ isc_pool_expand@Base 1:9.11.3+dfsg
+ isc_pool_get@Base 1:9.11.3+dfsg
+ isc_portset_add@Base 1:9.11.3+dfsg
+ isc_portset_addrange@Base 1:9.11.3+dfsg
+ isc_portset_create@Base 1:9.11.3+dfsg
+ isc_portset_destroy@Base 1:9.11.3+dfsg
+ isc_portset_isset@Base 1:9.11.3+dfsg
+ isc_portset_nports@Base 1:9.11.3+dfsg
+ isc_portset_remove@Base 1:9.11.3+dfsg
+ isc_portset_removerange@Base 1:9.11.3+dfsg
+ isc_quota_attach@Base 1:9.11.3+dfsg
+ isc_quota_destroy@Base 1:9.11.3+dfsg
+ isc_quota_detach@Base 1:9.11.3+dfsg
+ isc_quota_force@Base 1:9.11.5.P4+dfsg
+ isc_quota_init@Base 1:9.11.3+dfsg
+ isc_quota_max@Base 1:9.11.3+dfsg
+ isc_quota_release@Base 1:9.11.3+dfsg
+ isc_quota_reserve@Base 1:9.11.3+dfsg
+ isc_quota_soft@Base 1:9.11.3+dfsg
+ isc_radix_create@Base 1:9.11.3+dfsg
+ isc_radix_destroy@Base 1:9.11.3+dfsg
+ isc_radix_insert@Base 1:9.11.3+dfsg
+ isc_radix_process@Base 1:9.11.3+dfsg
+ isc_radix_remove@Base 1:9.11.3+dfsg
+ isc_radix_search@Base 1:9.11.3+dfsg
+ isc_random_get@Base 1:9.11.3+dfsg
+ isc_random_jitter@Base 1:9.11.3+dfsg
+ isc_random_seed@Base 1:9.11.3+dfsg
+ isc_ratelimiter_attach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_create@Base 1:9.11.3+dfsg
+ isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_detach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_release@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg
+ isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg
+ isc_ratelimiter_stall@Base 1:9.11.3+dfsg
+ isc_refcount_init@Base 1:9.11.3+dfsg
+ isc_regex_validate@Base 1:9.11.3+dfsg
+ isc_region_compare@Base 1:9.11.3+dfsg
+ isc_resource_getcurlimit@Base 1:9.11.3+dfsg
+ isc_resource_getlimit@Base 1:9.11.3+dfsg
+ isc_resource_setlimit@Base 1:9.11.3+dfsg
+ isc_result_register@Base 1:9.11.3+dfsg
+ isc_result_registerids@Base 1:9.11.3+dfsg
+ isc_result_toid@Base 1:9.11.3+dfsg
+ isc_result_totext@Base 1:9.11.3+dfsg
+ isc_rng_attach@Base 1:9.11.3+dfsg
+ isc_rng_create@Base 1:9.11.3+dfsg
+ isc_rng_detach@Base 1:9.11.3+dfsg
+ isc_rng_random@Base 1:9.11.3+dfsg
+ isc_rng_uniformrandom@Base 1:9.11.3+dfsg
+ isc_rwlock_destroy@Base 1:9.11.3+dfsg
+ isc_rwlock_downgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_init@Base 1:9.11.3+dfsg
+ isc_rwlock_lock@Base 1:9.11.3+dfsg
+ isc_rwlock_trylock@Base 1:9.11.3+dfsg
+ isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_unlock@Base 1:9.11.3+dfsg
+ isc_safe_memcompare@Base 1:9.11.3+dfsg
+ isc_safe_memequal@Base 1:9.11.3+dfsg
+ isc_safe_memwipe@Base 1:9.11.3+dfsg
+ isc_serial_eq@Base 1:9.11.3+dfsg
+ isc_serial_ge@Base 1:9.11.3+dfsg
+ isc_serial_gt@Base 1:9.11.3+dfsg
+ isc_serial_le@Base 1:9.11.3+dfsg
+ isc_serial_lt@Base 1:9.11.3+dfsg
+ isc_serial_ne@Base 1:9.11.3+dfsg
+ isc_sha1_check@Base 1:9.11.3+dfsg
+ isc_sha1_final@Base 1:9.11.3+dfsg
+ isc_sha1_init@Base 1:9.11.3+dfsg
+ isc_sha1_invalidate@Base 1:9.11.3+dfsg
+ isc_sha1_update@Base 1:9.11.3+dfsg
+ isc_sha224_data@Base 1:9.11.3+dfsg
+ isc_sha224_end@Base 1:9.11.3+dfsg
+ isc_sha224_final@Base 1:9.11.3+dfsg
+ isc_sha224_init@Base 1:9.11.3+dfsg
+ isc_sha224_invalidate@Base 1:9.11.3+dfsg
+ isc_sha224_update@Base 1:9.11.3+dfsg
+ isc_sha256_data@Base 1:9.11.3+dfsg
+ isc_sha256_end@Base 1:9.11.3+dfsg
+ isc_sha256_final@Base 1:9.11.3+dfsg
+ isc_sha256_init@Base 1:9.11.3+dfsg
+ isc_sha256_invalidate@Base 1:9.11.3+dfsg
+ isc_sha256_transform@Base 1:9.11.3+dfsg
+ isc_sha256_update@Base 1:9.11.3+dfsg
+ isc_sha384_data@Base 1:9.11.3+dfsg
+ isc_sha384_end@Base 1:9.11.3+dfsg
+ isc_sha384_final@Base 1:9.11.3+dfsg
+ isc_sha384_init@Base 1:9.11.3+dfsg
+ isc_sha384_invalidate@Base 1:9.11.3+dfsg
+ isc_sha384_update@Base 1:9.11.3+dfsg
+ isc_sha512_data@Base 1:9.11.3+dfsg
+ isc_sha512_end@Base 1:9.11.3+dfsg
+ isc_sha512_final@Base 1:9.11.3+dfsg
+ isc_sha512_init@Base 1:9.11.3+dfsg
+ isc_sha512_invalidate@Base 1:9.11.3+dfsg
+ isc_sha512_last@Base 1:9.11.3+dfsg
+ isc_sha512_transform@Base 1:9.11.3+dfsg
+ isc_sha512_update@Base 1:9.11.3+dfsg
+ isc_sockaddr_any6@Base 1:9.11.3+dfsg
+ isc_sockaddr_any@Base 1:9.11.3+dfsg
+ isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg
+ isc_sockaddr_compare@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg
+ isc_sockaddr_equal@Base 1:9.11.3+dfsg
+ isc_sockaddr_format@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_frompath@Base 1:9.11.3+dfsg
+ isc_sockaddr_getport@Base 1:9.11.3+dfsg
+ isc_sockaddr_hash@Base 1:9.11.3+dfsg
+ isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_pf@Base 1:9.11.3+dfsg
+ isc_sockaddr_setport@Base 1:9.11.3+dfsg
+ isc_sockaddr_totext@Base 1:9.11.3+dfsg
+ isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg
+ isc_socket_accept@Base 1:9.11.3+dfsg
+ isc_socket_attach@Base 1:9.11.3+dfsg
+ isc_socket_bind@Base 1:9.11.3+dfsg
+ isc_socket_cancel@Base 1:9.11.3+dfsg
+ isc_socket_cleanunix@Base 1:9.11.3+dfsg
+ isc_socket_close@Base 1:9.11.3+dfsg
+ isc_socket_connect@Base 1:9.11.3+dfsg
+ isc_socket_create@Base 1:9.11.3+dfsg
+ isc_socket_detach@Base 1:9.11.3+dfsg
+ isc_socket_dscp@Base 1:9.11.3+dfsg
+ isc_socket_dup@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc_socket_filter@Base 1:9.11.3+dfsg
+ isc_socket_getfd@Base 1:9.11.3+dfsg
+ isc_socket_getpeername@Base 1:9.11.3+dfsg
+ isc_socket_getsockname@Base 1:9.11.3+dfsg
+ isc_socket_gettype@Base 1:9.11.3+dfsg
+ isc_socket_ipv6only@Base 1:9.11.3+dfsg
+ isc_socket_listen@Base 1:9.11.3+dfsg
+ isc_socket_open@Base 1:9.11.3+dfsg
+ isc_socket_permunix@Base 1:9.11.3+dfsg
+ isc_socket_recv2@Base 1:9.11.3+dfsg
+ isc_socket_recv@Base 1:9.11.3+dfsg
+ isc_socket_recvv@Base 1:9.11.3+dfsg
+ isc_socket_register@Base 1:9.11.3+dfsg
+ isc_socket_send@Base 1:9.11.3+dfsg
+ isc_socket_sendto2@Base 1:9.11.3+dfsg
+ isc_socket_sendto@Base 1:9.11.3+dfsg
+ isc_socket_sendtov2@Base 1:9.11.3+dfsg
+ isc_socket_sendtov@Base 1:9.11.3+dfsg
+ isc_socket_sendv@Base 1:9.11.3+dfsg
+ isc_socket_setname@Base 1:9.11.3+dfsg
+ isc_socket_socketevent@Base 1:9.11.3+dfsg
+ isc_socketmgr_create2@Base 1:9.11.3+dfsg
+ isc_socketmgr_create@Base 1:9.11.3+dfsg
+ isc_socketmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_socketmgr_setstats@Base 1:9.11.3+dfsg
+ isc_stats_attach@Base 1:9.11.3+dfsg
+ isc_stats_create@Base 1:9.11.3+dfsg
+ isc_stats_decrement@Base 1:9.11.3+dfsg
+ isc_stats_detach@Base 1:9.11.3+dfsg
+ isc_stats_dump@Base 1:9.11.3+dfsg
+ isc_stats_increment@Base 1:9.11.3+dfsg
+ isc_stats_ncounters@Base 1:9.11.3+dfsg
+ isc_stats_set@Base 1:9.11.3+dfsg
+ isc_stdio_close@Base 1:9.11.3+dfsg
+ isc_stdio_flush@Base 1:9.11.3+dfsg
+ isc_stdio_open@Base 1:9.11.3+dfsg
+ isc_stdio_read@Base 1:9.11.3+dfsg
+ isc_stdio_seek@Base 1:9.11.3+dfsg
+ isc_stdio_sync@Base 1:9.11.3+dfsg
+ isc_stdio_tell@Base 1:9.11.3+dfsg
+ isc_stdio_write@Base 1:9.11.3+dfsg
+ isc_stdtime_get@Base 1:9.11.3+dfsg
+ isc_string_append@Base 1:9.11.3+dfsg
+ isc_string_append_truncate@Base 1:9.11.3+dfsg
+ isc_string_copy@Base 1:9.11.3+dfsg
+ isc_string_copy_truncate@Base 1:9.11.3+dfsg
+ isc_string_printf@Base 1:9.11.3+dfsg
+ isc_string_printf_truncate@Base 1:9.11.3+dfsg
+ isc_string_regiondup@Base 1:9.11.3+dfsg
+ isc_string_separate@Base 1:9.11.3+dfsg
+ isc_string_strcasestr@Base 1:9.11.3+dfsg
+ isc_string_strlcat@Base 1:9.11.3+dfsg
+ isc_string_strlcpy@Base 1:9.11.3+dfsg
+ isc_string_touint64@Base 1:9.11.3+dfsg
+ isc_strtoul@Base 1:9.11.3+dfsg
+ isc_symtab_count@Base 1:9.11.3+dfsg
+ isc_symtab_create@Base 1:9.11.3+dfsg
+ isc_symtab_define@Base 1:9.11.3+dfsg
+ isc_symtab_destroy@Base 1:9.11.3+dfsg
+ isc_symtab_lookup@Base 1:9.11.3+dfsg
+ isc_symtab_undefine@Base 1:9.11.3+dfsg
+ isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg
+ isc_task_attach@Base 1:9.11.3+dfsg
+ isc_task_beginexclusive@Base 1:9.11.3+dfsg
+ isc_task_create@Base 1:9.11.3+dfsg
+ isc_task_destroy@Base 1:9.11.3+dfsg
+ isc_task_detach@Base 1:9.11.3+dfsg
+ isc_task_endexclusive@Base 1:9.11.3+dfsg
+ isc_task_exiting@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc_task_onshutdown@Base 1:9.11.3+dfsg
+ isc_task_privilege@Base 1:9.11.3+dfsg
+ isc_task_purge@Base 1:9.11.3+dfsg
+ isc_task_purgeevent@Base 1:9.11.3+dfsg
+ isc_task_purgerange@Base 1:9.11.3+dfsg
+ isc_task_register@Base 1:9.11.3+dfsg
+ isc_task_send@Base 1:9.11.3+dfsg
+ isc_task_sendanddetach@Base 1:9.11.3+dfsg
+ isc_task_setname@Base 1:9.11.3+dfsg
+ isc_task_setprivilege@Base 1:9.11.3+dfsg
+ isc_task_shutdown@Base 1:9.11.3+dfsg
+ isc_task_unsend@Base 1:9.11.3+dfsg
+ isc_taskmgr_create@Base 1:9.11.3+dfsg
+ isc_taskmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc_taskmgr_excltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_mode@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc_taskpool_create@Base 1:9.11.3+dfsg
+ isc_taskpool_destroy@Base 1:9.11.3+dfsg
+ isc_taskpool_expand@Base 1:9.11.3+dfsg
+ isc_taskpool_gettask@Base 1:9.11.3+dfsg
+ isc_taskpool_setprivilege@Base 1:9.11.3+dfsg
+ isc_taskpool_size@Base 1:9.11.3+dfsg
+ isc_thread_create@Base 1:9.11.3+dfsg
+ isc_thread_setconcurrency@Base 1:9.11.3+dfsg
+ isc_thread_setname@Base 1:9.11.3+dfsg
+ isc_thread_yield@Base 1:9.11.3+dfsg
+ isc_time_add@Base 1:9.11.3+dfsg
+ isc_time_compare@Base 1:9.11.3+dfsg
+ isc_time_epoch@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601ms@Base 1:9.11.3+dfsg
+ isc_time_formathttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_formattimestamp@Base 1:9.11.3+dfsg
+ isc_time_isepoch@Base 1:9.11.3+dfsg
+ isc_time_microdiff@Base 1:9.11.3+dfsg
+ isc_time_nanoseconds@Base 1:9.11.3+dfsg
+ isc_time_now@Base 1:9.11.3+dfsg
+ isc_time_nowplusinterval@Base 1:9.11.3+dfsg
+ isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_seconds@Base 1:9.11.3+dfsg
+ isc_time_secondsastimet@Base 1:9.11.3+dfsg
+ isc_time_set@Base 1:9.11.3+dfsg
+ isc_time_settoepoch@Base 1:9.11.3+dfsg
+ isc_time_subtract@Base 1:9.11.3+dfsg
+ isc_timer_attach@Base 1:9.11.3+dfsg
+ isc_timer_create@Base 1:9.11.3+dfsg
+ isc_timer_detach@Base 1:9.11.3+dfsg
+ isc_timer_gettype@Base 1:9.11.3+dfsg
+ isc_timer_register@Base 1:9.11.3+dfsg
+ isc_timer_reset@Base 1:9.11.3+dfsg
+ isc_timer_touch@Base 1:9.11.3+dfsg
+ isc_timermgr_create@Base 1:9.11.3+dfsg
+ isc_timermgr_createinctx@Base 1:9.11.3+dfsg
+ isc_timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_timermgr_poke@Base 1:9.11.3+dfsg
+ isc_tm_strptime@Base 1:9.11.3+dfsg
+ isc_tm_timegm@Base 1:9.11.3+dfsg
+ isc_version@Base 1:9.11.3+dfsg
+ pk11_attribute_bytype@Base 1:9.11.3+dfsg
+ pk11_attribute_first@Base 1:9.11.3+dfsg
+ pk11_attribute_next@Base 1:9.11.3+dfsg
+ pk11_dump_tokens@Base 1:9.11.3+dfsg
+ pk11_error_fatalcheck@Base 1:9.11.3+dfsg
+ pk11_finalize@Base 1:9.11.3+dfsg
+ pk11_get_best_token@Base 1:9.11.3+dfsg
+ pk11_get_lib_name@Base 1:9.11.3+dfsg
+ pk11_get_load_error_message@Base 1:9.11.3+dfsg
+ pk11_get_session@Base 1:9.11.3+dfsg
+ pk11_initialize@Base 1:9.11.3+dfsg
+ pk11_initmsgcat@Base 1:9.11.3+dfsg
+ pk11_mem_get@Base 1:9.11.3+dfsg
+ pk11_mem_put@Base 1:9.11.3+dfsg
+ pk11_msgcat@Base 1:9.11.3+dfsg
+ pk11_numbits@Base 1:9.11.3+dfsg
+ pk11_parse_uri@Base 1:9.11.3+dfsg
+ pk11_rand_bytes@Base 1:9.11.3+dfsg
+ pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg
+ pk11_result_register@Base 1:9.11.3+dfsg
+ pk11_result_totext@Base 1:9.11.3+dfsg
+ pk11_return_session@Base 1:9.11.3+dfsg
+ pk11_set_lib_name@Base 1:9.11.3+dfsg
+ pk11_verbose_init@Base 1:9.11.3+dfsg
+ pkcs_C_CloseSession@Base 1:9.11.3+dfsg
+ pkcs_C_CreateObject@Base 1:9.11.3+dfsg
+ pkcs_C_DeriveKey@Base 1:9.11.3+dfsg
+ pkcs_C_DestroyObject@Base 1:9.11.3+dfsg
+ pkcs_C_DigestFinal@Base 1:9.11.3+dfsg
+ pkcs_C_DigestInit@Base 1:9.11.3+dfsg
+ pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Encrypt@Base 1:9.11.3+dfsg
+ pkcs_C_EncryptInit@Base 1:9.11.3+dfsg
+ pkcs_C_Finalize@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjects@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKey@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg
+ pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg
+ pkcs_C_GetSlotList@Base 1:9.11.3+dfsg
+ pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg
+ pkcs_C_Initialize@Base 1:9.11.3+dfsg
+ pkcs_C_Login@Base 1:9.11.3+dfsg
+ pkcs_C_Logout@Base 1:9.11.3+dfsg
+ pkcs_C_OpenSession@Base 1:9.11.3+dfsg
+ pkcs_C_SeedRandom@Base 1:9.11.3+dfsg
+ pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_Sign@Base 1:9.11.3+dfsg
+ pkcs_C_SignFinal@Base 1:9.11.3+dfsg
+ pkcs_C_SignInit@Base 1:9.11.3+dfsg
+ pkcs_C_SignUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Verify@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyInit@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg
+libisc-pkcs11.so.1100 libisc1100 #MINVER#
+ (optional)bsdcompat@Base 1:9.11.3+dfsg
+ isc___errno2result@Base 1:9.11.3+dfsg
+ isc___mem_allocate@Base 1:9.11.3+dfsg
+ isc___mem_free@Base 1:9.11.3+dfsg
+ isc___mem_get@Base 1:9.11.3+dfsg
+ isc___mem_put@Base 1:9.11.3+dfsg
+ isc___mem_putanddetach@Base 1:9.11.3+dfsg
+ isc___mem_reallocate@Base 1:9.11.3+dfsg
+ isc___mem_strdup@Base 1:9.11.3+dfsg
+ isc___mempool_get@Base 1:9.11.3+dfsg
+ isc___mempool_put@Base 1:9.11.3+dfsg
+ isc__app_block@Base 1:9.11.3+dfsg
+ isc__app_ctxfinish@Base 1:9.11.3+dfsg
+ isc__app_ctxonrun@Base 1:9.11.3+dfsg
+ isc__app_ctxrun@Base 1:9.11.3+dfsg
+ isc__app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc__app_ctxstart@Base 1:9.11.3+dfsg
+ isc__app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc__app_finish@Base 1:9.11.3+dfsg
+ isc__app_onrun@Base 1:9.11.3+dfsg
+ isc__app_register@Base 1:9.11.3+dfsg
+ isc__app_reload@Base 1:9.11.3+dfsg
+ isc__app_run@Base 1:9.11.3+dfsg
+ isc__app_shutdown@Base 1:9.11.3+dfsg
+ isc__app_start@Base 1:9.11.3+dfsg
+ isc__app_unblock@Base 1:9.11.3+dfsg
+ isc__appctx_create@Base 1:9.11.3+dfsg
+ isc__appctx_destroy@Base 1:9.11.3+dfsg
+ isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc__backtrace_nsymbols@Base 1:9.11.3+dfsg
+ isc__backtrace_symtable@Base 1:9.11.3+dfsg
+ isc__buffer_activeregion@Base 1:9.11.3+dfsg
+ isc__buffer_add@Base 1:9.11.3+dfsg
+ isc__buffer_availableregion@Base 1:9.11.3+dfsg
+ isc__buffer_back@Base 1:9.11.3+dfsg
+ isc__buffer_clear@Base 1:9.11.3+dfsg
+ isc__buffer_consumedregion@Base 1:9.11.3+dfsg
+ isc__buffer_first@Base 1:9.11.3+dfsg
+ isc__buffer_forward@Base 1:9.11.3+dfsg
+ isc__buffer_init@Base 1:9.11.3+dfsg
+ isc__buffer_initnull@Base 1:9.11.3+dfsg
+ isc__buffer_invalidate@Base 1:9.11.3+dfsg
+ isc__buffer_putmem@Base 1:9.11.3+dfsg
+ isc__buffer_putstr@Base 1:9.11.3+dfsg
+ isc__buffer_putuint16@Base 1:9.11.3+dfsg
+ isc__buffer_putuint24@Base 1:9.11.3+dfsg
+ isc__buffer_putuint32@Base 1:9.11.3+dfsg
+ isc__buffer_putuint48@Base 1:9.11.3+dfsg
+ isc__buffer_putuint8@Base 1:9.11.3+dfsg
+ isc__buffer_region@Base 1:9.11.3+dfsg
+ isc__buffer_remainingregion@Base 1:9.11.3+dfsg
+ isc__buffer_setactive@Base 1:9.11.3+dfsg
+ isc__buffer_subtract@Base 1:9.11.3+dfsg
+ isc__buffer_usedregion@Base 1:9.11.3+dfsg
+ isc__hash_setvec@Base 1:9.11.3+dfsg
+ isc__mem_allocate@Base 1:9.11.3+dfsg
+ isc__mem_attach@Base 1:9.11.3+dfsg
+ isc__mem_create2@Base 1:9.11.3+dfsg
+ isc__mem_destroy@Base 1:9.11.3+dfsg
+ isc__mem_detach@Base 1:9.11.3+dfsg
+ isc__mem_free@Base 1:9.11.3+dfsg
+ isc__mem_get@Base 1:9.11.3+dfsg
+ isc__mem_inuse@Base 1:9.11.3+dfsg
+ isc__mem_isovermem@Base 1:9.11.3+dfsg
+ isc__mem_maxinuse@Base 1:9.11.3+dfsg
+ isc__mem_printactive@Base 1:9.11.3+dfsg
+ isc__mem_put@Base 1:9.11.3+dfsg
+ isc__mem_putanddetach@Base 1:9.11.3+dfsg
+ isc__mem_reallocate@Base 1:9.11.3+dfsg
+ isc__mem_register@Base 1:9.11.3+dfsg
+ isc__mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc__mem_setwater@Base 1:9.11.3+dfsg
+ isc__mem_strdup@Base 1:9.11.3+dfsg
+ isc__mem_total@Base 1:9.11.3+dfsg
+ isc__mem_waterack@Base 1:9.11.3+dfsg
+ isc__mempool_associatelock@Base 1:9.11.3+dfsg
+ isc__mempool_create@Base 1:9.11.3+dfsg
+ isc__mempool_destroy@Base 1:9.11.3+dfsg
+ isc__mempool_get@Base 1:9.11.3+dfsg
+ isc__mempool_getallocated@Base 1:9.11.3+dfsg
+ isc__mempool_put@Base 1:9.11.3+dfsg
+ isc__mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc__mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc__mempool_setname@Base 1:9.11.3+dfsg
+ isc__mutex_init@Base 1:9.11.3+dfsg
+ isc__socket_accept@Base 1:9.11.3+dfsg
+ isc__socket_attach@Base 1:9.11.3+dfsg
+ isc__socket_bind@Base 1:9.11.3+dfsg
+ isc__socket_cancel@Base 1:9.11.3+dfsg
+ isc__socket_cleanunix@Base 1:9.11.3+dfsg
+ isc__socket_close@Base 1:9.11.3+dfsg
+ isc__socket_connect@Base 1:9.11.3+dfsg
+ isc__socket_create@Base 1:9.11.3+dfsg
+ isc__socket_detach@Base 1:9.11.3+dfsg
+ isc__socket_dscp@Base 1:9.11.3+dfsg
+ isc__socket_dup@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc__socket_filter@Base 1:9.11.3+dfsg
+ isc__socket_getfd@Base 1:9.11.3+dfsg
+ isc__socket_getname@Base 1:9.11.3+dfsg
+ isc__socket_getpeername@Base 1:9.11.3+dfsg
+ isc__socket_getsockname@Base 1:9.11.3+dfsg
+ isc__socket_gettag@Base 1:9.11.3+dfsg
+ isc__socket_gettype@Base 1:9.11.3+dfsg
+ isc__socket_ipv6only@Base 1:9.11.3+dfsg
+ isc__socket_isbound@Base 1:9.11.3+dfsg
+ isc__socket_listen@Base 1:9.11.3+dfsg
+ isc__socket_open@Base 1:9.11.3+dfsg
+ isc__socket_permunix@Base 1:9.11.3+dfsg
+ isc__socket_recv2@Base 1:9.11.3+dfsg
+ isc__socket_recv@Base 1:9.11.3+dfsg
+ isc__socket_recvv@Base 1:9.11.3+dfsg
+ isc__socket_register@Base 1:9.11.3+dfsg
+ isc__socket_send@Base 1:9.11.3+dfsg
+ isc__socket_sendto2@Base 1:9.11.3+dfsg
+ isc__socket_sendto@Base 1:9.11.3+dfsg
+ isc__socket_sendtov2@Base 1:9.11.3+dfsg
+ isc__socket_sendtov@Base 1:9.11.3+dfsg
+ isc__socket_sendv@Base 1:9.11.3+dfsg
+ isc__socket_setname@Base 1:9.11.3+dfsg
+ isc__socketmgr_create2@Base 1:9.11.3+dfsg
+ isc__socketmgr_create@Base 1:9.11.3+dfsg
+ isc__socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc__socketmgr_maxudp@Base 1:9.11.3+dfsg
+ isc__socketmgr_setreserved@Base 1:9.11.3+dfsg
+ isc__strerror@Base 1:9.11.3+dfsg
+ isc__task_attach@Base 1:9.11.3+dfsg
+ isc__task_beginexclusive@Base 1:9.11.3+dfsg
+ isc__task_create@Base 1:9.11.3+dfsg
+ isc__task_destroy@Base 1:9.11.3+dfsg
+ isc__task_detach@Base 1:9.11.3+dfsg
+ isc__task_endexclusive@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc__task_getname@Base 1:9.11.3+dfsg
+ isc__task_gettag@Base 1:9.11.3+dfsg
+ isc__task_onshutdown@Base 1:9.11.3+dfsg
+ isc__task_privilege@Base 1:9.11.3+dfsg
+ isc__task_purge@Base 1:9.11.3+dfsg
+ isc__task_purgerange@Base 1:9.11.3+dfsg
+ isc__task_register@Base 1:9.11.3+dfsg
+ isc__task_send@Base 1:9.11.3+dfsg
+ isc__task_sendanddetach@Base 1:9.11.3+dfsg
+ isc__task_setname@Base 1:9.11.3+dfsg
+ isc__task_setprivilege@Base 1:9.11.3+dfsg
+ isc__task_shutdown@Base 1:9.11.3+dfsg
+ isc__task_unsend@Base 1:9.11.3+dfsg
+ isc__task_unsendrange@Base 1:9.11.3+dfsg
+ isc__taskmgr_create@Base 1:9.11.3+dfsg
+ isc__taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc__taskmgr_mode@Base 1:9.11.3+dfsg
+ isc__taskmgr_pause@Base 1:9.11.3+dfsg
+ isc__taskmgr_resume@Base 1:9.11.3+dfsg
+ isc__taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc__timer_attach@Base 1:9.11.3+dfsg
+ isc__timer_create@Base 1:9.11.3+dfsg
+ isc__timer_detach@Base 1:9.11.3+dfsg
+ isc__timer_register@Base 1:9.11.3+dfsg
+ isc__timer_reset@Base 1:9.11.3+dfsg
+ isc__timer_touch@Base 1:9.11.3+dfsg
+ isc__timermgr_create@Base 1:9.11.3+dfsg
+ isc__timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_aes128_crypt@Base 1:9.11.3+dfsg
+ isc_aes192_crypt@Base 1:9.11.3+dfsg
+ isc_aes256_crypt@Base 1:9.11.3+dfsg
+ isc_app_block@Base 1:9.11.3+dfsg
+ isc_app_ctxfinish@Base 1:9.11.3+dfsg
+ isc_app_ctxonrun@Base 1:9.11.3+dfsg
+ isc_app_ctxrun@Base 1:9.11.3+dfsg
+ isc_app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc_app_ctxstart@Base 1:9.11.3+dfsg
+ isc_app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc_app_finish@Base 1:9.11.3+dfsg
+ isc_app_isrunning@Base 1:9.11.3+dfsg
+ isc_app_onrun@Base 1:9.11.3+dfsg
+ isc_app_register@Base 1:9.11.3+dfsg
+ isc_app_reload@Base 1:9.11.3+dfsg
+ isc_app_run@Base 1:9.11.3+dfsg
+ isc_app_shutdown@Base 1:9.11.3+dfsg
+ isc_app_start@Base 1:9.11.3+dfsg
+ isc_app_unblock@Base 1:9.11.3+dfsg
+ isc_appctx_create@Base 1:9.11.3+dfsg
+ isc_appctx_destroy@Base 1:9.11.3+dfsg
+ isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc_assertion_failed@Base 1:9.11.3+dfsg
+ isc_assertion_setcallback@Base 1:9.11.3+dfsg
+ isc_assertion_typetotext@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbol@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg
+ isc_backtrace_gettrace@Base 1:9.11.3+dfsg
+ isc_base32_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32_decodestring@Base 1:9.11.3+dfsg
+ isc_base32_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32_totext@Base 1:9.11.3+dfsg
+ isc_base32hex_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hex_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hex_totext@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hexnp_totext@Base 1:9.11.3+dfsg
+ isc_base64_decodestring@Base 1:9.11.3+dfsg
+ isc_base64_tobuffer@Base 1:9.11.3+dfsg
+ isc_base64_totext@Base 1:9.11.3+dfsg
+ isc_bind9@Base 1:9.11.3+dfsg
+ isc_buffer_allocate@Base 1:9.11.3+dfsg
+ isc_buffer_compact@Base 1:9.11.3+dfsg
+ isc_buffer_copyregion@Base 1:9.11.3+dfsg
+ isc_buffer_dup@Base 1:9.11.3+dfsg
+ isc_buffer_free@Base 1:9.11.3+dfsg
+ isc_buffer_getuint16@Base 1:9.11.3+dfsg
+ isc_buffer_getuint32@Base 1:9.11.3+dfsg
+ isc_buffer_getuint48@Base 1:9.11.3+dfsg
+ isc_buffer_getuint8@Base 1:9.11.3+dfsg
+ isc_buffer_putdecint@Base 1:9.11.3+dfsg
+ isc_buffer_reallocate@Base 1:9.11.3+dfsg
+ isc_buffer_reinit@Base 1:9.11.3+dfsg
+ isc_buffer_reserve@Base 1:9.11.3+dfsg
+ isc_buffer_setautorealloc@Base 1:9.11.3+dfsg
+ isc_bufferlist_availablecount@Base 1:9.11.3+dfsg
+ isc_bufferlist_usedcount@Base 1:9.11.3+dfsg
+ isc_categories@Base 1:9.11.3+dfsg
+ isc_commandline_argument@Base 1:9.11.3+dfsg
+ isc_commandline_errprint@Base 1:9.11.3+dfsg
+ isc_commandline_index@Base 1:9.11.3+dfsg
+ isc_commandline_option@Base 1:9.11.3+dfsg
+ isc_commandline_parse@Base 1:9.11.3+dfsg
+ isc_commandline_progname@Base 1:9.11.3+dfsg
+ isc_commandline_reset@Base 1:9.11.3+dfsg
+ isc_commandline_strtoargv@Base 1:9.11.3+dfsg
+ isc_condition_waituntil@Base 1:9.11.3+dfsg
+ isc_counter_attach@Base 1:9.11.3+dfsg
+ isc_counter_create@Base 1:9.11.3+dfsg
+ isc_counter_detach@Base 1:9.11.3+dfsg
+ isc_counter_increment@Base 1:9.11.3+dfsg
+ isc_counter_setlimit@Base 1:9.11.3+dfsg
+ isc_counter_used@Base 1:9.11.3+dfsg
+ isc_crc64_final@Base 1:9.11.3+dfsg
+ isc_crc64_init@Base 1:9.11.3+dfsg
+ isc_crc64_update@Base 1:9.11.3+dfsg
+ isc_dir_chdir@Base 1:9.11.3+dfsg
+ isc_dir_chroot@Base 1:9.11.3+dfsg
+ isc_dir_close@Base 1:9.11.3+dfsg
+ isc_dir_createunique@Base 1:9.11.3+dfsg
+ isc_dir_init@Base 1:9.11.3+dfsg
+ isc_dir_open@Base 1:9.11.3+dfsg
+ isc_dir_read@Base 1:9.11.3+dfsg
+ isc_dir_reset@Base 1:9.11.3+dfsg
+ isc_dscp_check_value@Base 1:9.11.3+dfsg
+ isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg
+ isc_entropy_addsample@Base 1:9.11.3+dfsg
+ isc_entropy_attach@Base 1:9.11.3+dfsg
+ isc_entropy_create@Base 1:9.11.3+dfsg
+ isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg
+ isc_entropy_createfilesource@Base 1:9.11.3+dfsg
+ isc_entropy_createsamplesource@Base 1:9.11.3+dfsg
+ isc_entropy_destroysource@Base 1:9.11.3+dfsg
+ isc_entropy_detach@Base 1:9.11.3+dfsg
+ isc_entropy_getdata@Base 1:9.11.3+dfsg
+ isc_entropy_putdata@Base 1:9.11.3+dfsg
+ isc_entropy_stats@Base 1:9.11.3+dfsg
+ isc_entropy_status@Base 1:9.11.3+dfsg
+ isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg
+ isc_entropy_usebestsource@Base 1:9.11.3+dfsg
+ isc_errno_toresult@Base 1:9.11.3+dfsg
+ isc_error_fatal@Base 1:9.11.3+dfsg
+ isc_error_runtimecheck@Base 1:9.11.3+dfsg
+ isc_error_setfatal@Base 1:9.11.3+dfsg
+ isc_error_setunexpected@Base 1:9.11.3+dfsg
+ isc_error_unexpected@Base 1:9.11.3+dfsg
+ isc_event_allocate@Base 1:9.11.3+dfsg
+ isc_event_constallocate@Base 1:9.11.3+dfsg
+ isc_event_free@Base 1:9.11.3+dfsg
+ isc_file_absolutepath@Base 1:9.11.3+dfsg
+ isc_file_basename@Base 1:9.11.3+dfsg
+ isc_file_bopenunique@Base 1:9.11.3+dfsg
+ isc_file_bopenuniquemode@Base 1:9.11.3+dfsg
+ isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_exists@Base 1:9.11.3+dfsg
+ isc_file_getmodtime@Base 1:9.11.3+dfsg
+ isc_file_getsize@Base 1:9.11.3+dfsg
+ isc_file_getsizefd@Base 1:9.11.3+dfsg
+ isc_file_isabsolute@Base 1:9.11.3+dfsg
+ isc_file_ischdiridempotent@Base 1:9.11.3+dfsg
+ isc_file_iscurrentdir@Base 1:9.11.3+dfsg
+ isc_file_isdirectory@Base 1:9.11.3+dfsg
+ isc_file_isdirwritable@Base 1:9.11.3+dfsg
+ isc_file_isplainfile@Base 1:9.11.3+dfsg
+ isc_file_isplainfilefd@Base 1:9.11.3+dfsg
+ isc_file_mktemplate@Base 1:9.11.3+dfsg
+ isc_file_mmap@Base 1:9.11.3+dfsg
+ isc_file_mode@Base 1:9.11.3+dfsg
+ isc_file_munmap@Base 1:9.11.3+dfsg
+ isc_file_openunique@Base 1:9.11.3+dfsg
+ isc_file_openuniquemode@Base 1:9.11.3+dfsg
+ isc_file_openuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_progname@Base 1:9.11.3+dfsg
+ isc_file_remove@Base 1:9.11.3+dfsg
+ isc_file_rename@Base 1:9.11.3+dfsg
+ isc_file_renameunique@Base 1:9.11.3+dfsg
+ isc_file_safecreate@Base 1:9.11.3+dfsg
+ isc_file_sanitize@Base 1:9.11.3+dfsg
+ isc_file_settime@Base 1:9.11.3+dfsg
+ isc_file_splitpath@Base 1:9.11.3+dfsg
+ isc_file_template@Base 1:9.11.3+dfsg
+ isc_file_truncate@Base 1:9.11.3+dfsg
+ isc_fsaccess_add@Base 1:9.11.3+dfsg
+ isc_fsaccess_remove@Base 1:9.11.3+dfsg
+ isc_fsaccess_set@Base 1:9.11.3+dfsg
+ isc_hash_calc@Base 1:9.11.3+dfsg
+ isc_hash_create@Base 1:9.11.3+dfsg
+ isc_hash_ctxattach@Base 1:9.11.3+dfsg
+ isc_hash_ctxcalc@Base 1:9.11.3+dfsg
+ isc_hash_ctxcreate@Base 1:9.11.3+dfsg
+ isc_hash_ctxdetach@Base 1:9.11.3+dfsg
+ isc_hash_ctxinit@Base 1:9.11.3+dfsg
+ isc_hash_destroy@Base 1:9.11.3+dfsg
+ isc_hash_function@Base 1:9.11.3+dfsg
+ isc_hash_function_reverse@Base 1:9.11.3+dfsg
+ isc_hash_get_initializer@Base 1:9.11.3+dfsg
+ isc_hash_init@Base 1:9.11.3+dfsg
+ isc_hash_set_initializer@Base 1:9.11.3+dfsg
+ isc_hashctx@Base 1:9.11.3+dfsg
+ isc_heap_create@Base 1:9.11.3+dfsg
+ isc_heap_decreased@Base 1:9.11.3+dfsg
+ isc_heap_delete@Base 1:9.11.3+dfsg
+ isc_heap_destroy@Base 1:9.11.3+dfsg
+ isc_heap_element@Base 1:9.11.3+dfsg
+ isc_heap_foreach@Base 1:9.11.3+dfsg
+ isc_heap_increased@Base 1:9.11.3+dfsg
+ isc_heap_insert@Base 1:9.11.3+dfsg
+ isc_hex_decodestring@Base 1:9.11.3+dfsg
+ isc_hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_hex_totext@Base 1:9.11.3+dfsg
+ isc_hmacmd5_check@Base 1:9.11.3+dfsg
+ isc_hmacmd5_init@Base 1:9.11.3+dfsg
+ isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacmd5_sign@Base 1:9.11.3+dfsg
+ isc_hmacmd5_update@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify2@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha1_check@Base 1:9.11.3+dfsg
+ isc_hmacsha1_init@Base 1:9.11.3+dfsg
+ isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha1_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha1_update@Base 1:9.11.3+dfsg
+ isc_hmacsha1_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha224_init@Base 1:9.11.3+dfsg
+ isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha224_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha224_update@Base 1:9.11.3+dfsg
+ isc_hmacsha224_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha256_init@Base 1:9.11.3+dfsg
+ isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha256_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha256_update@Base 1:9.11.3+dfsg
+ isc_hmacsha256_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha384_init@Base 1:9.11.3+dfsg
+ isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha384_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha384_update@Base 1:9.11.3+dfsg
+ isc_hmacsha384_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha512_init@Base 1:9.11.3+dfsg
+ isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha512_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha512_update@Base 1:9.11.3+dfsg
+ isc_hmacsha512_verify@Base 1:9.11.3+dfsg
+ isc_ht_add@Base 1:9.11.3+dfsg
+ isc_ht_count@Base 1:9.11.3+dfsg
+ isc_ht_delete@Base 1:9.11.3+dfsg
+ isc_ht_destroy@Base 1:9.11.3+dfsg
+ isc_ht_find@Base 1:9.11.3+dfsg
+ isc_ht_init@Base 1:9.11.3+dfsg
+ isc_ht_iter_create@Base 1:9.11.3+dfsg
+ isc_ht_iter_current@Base 1:9.11.3+dfsg
+ isc_ht_iter_currentkey@Base 1:9.11.3+dfsg
+ isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg
+ isc_ht_iter_destroy@Base 1:9.11.3+dfsg
+ isc_ht_iter_first@Base 1:9.11.3+dfsg
+ isc_ht_iter_next@Base 1:9.11.3+dfsg
+ isc_httpd_addheader@Base 1:9.11.3+dfsg
+ isc_httpd_addheaderuint@Base 1:9.11.3+dfsg
+ isc_httpd_endheaders@Base 1:9.11.3+dfsg
+ isc_httpd_response@Base 1:9.11.3+dfsg
+ isc_httpd_setfinishhook@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl@Base 1:9.11.3+dfsg
+ isc_httpdmgr_create@Base 1:9.11.3+dfsg
+ isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg
+ isc_interfaceiter_create@Base 1:9.11.3+dfsg
+ isc_interfaceiter_current@Base 1:9.11.3+dfsg
+ isc_interfaceiter_destroy@Base 1:9.11.3+dfsg
+ isc_interfaceiter_first@Base 1:9.11.3+dfsg
+ isc_interfaceiter_next@Base 1:9.11.3+dfsg
+ isc_interval_iszero@Base 1:9.11.3+dfsg
+ isc_interval_set@Base 1:9.11.3+dfsg
+ isc_interval_zero@Base 1:9.11.3+dfsg
+ isc_iterated_hash@Base 1:9.11.3+dfsg
+ isc_keyboard_canceled@Base 1:9.11.3+dfsg
+ isc_keyboard_close@Base 1:9.11.3+dfsg
+ isc_keyboard_getchar@Base 1:9.11.3+dfsg
+ isc_keyboard_open@Base 1:9.11.3+dfsg
+ isc_lctx@Base 1:9.11.3+dfsg
+ isc_lex_close@Base 1:9.11.3+dfsg
+ isc_lex_create@Base 1:9.11.3+dfsg
+ isc_lex_destroy@Base 1:9.11.3+dfsg
+ isc_lex_getcomments@Base 1:9.11.3+dfsg
+ isc_lex_getlasttokentext@Base 1:9.11.3+dfsg
+ isc_lex_getmastertoken@Base 1:9.11.3+dfsg
+ isc_lex_getoctaltoken@Base 1:9.11.3+dfsg
+ isc_lex_getsourceline@Base 1:9.11.3+dfsg
+ isc_lex_getsourcename@Base 1:9.11.3+dfsg
+ isc_lex_getspecials@Base 1:9.11.3+dfsg
+ isc_lex_gettoken@Base 1:9.11.3+dfsg
+ isc_lex_isfile@Base 1:9.11.3+dfsg
+ isc_lex_openbuffer@Base 1:9.11.3+dfsg
+ isc_lex_openfile@Base 1:9.11.3+dfsg
+ isc_lex_openstream@Base 1:9.11.3+dfsg
+ isc_lex_setcomments@Base 1:9.11.3+dfsg
+ isc_lex_setsourceline@Base 1:9.11.3+dfsg
+ isc_lex_setsourcename@Base 1:9.11.3+dfsg
+ isc_lex_setspecials@Base 1:9.11.3+dfsg
+ isc_lex_ungettoken@Base 1:9.11.3+dfsg
+ isc_lfsr_generate32@Base 1:9.11.3+dfsg
+ isc_lfsr_generate@Base 1:9.11.3+dfsg
+ isc_lfsr_init@Base 1:9.11.3+dfsg
+ isc_lfsr_skip@Base 1:9.11.3+dfsg
+ isc_lib_initmsgcat@Base 1:9.11.3+dfsg
+ isc_lib_register@Base 1:9.11.3+dfsg
+ isc_libage@Base 1:9.11.3+dfsg
+ isc_libinterface@Base 1:9.11.3+dfsg
+ isc_librevision@Base 1:9.11.3+dfsg
+ isc_log_categorybyname@Base 1:9.11.3+dfsg
+ isc_log_closefilelogs@Base 1:9.11.3+dfsg
+ isc_log_create@Base 1:9.11.3+dfsg
+ isc_log_createchannel@Base 1:9.11.3+dfsg
+ isc_log_destroy@Base 1:9.11.3+dfsg
+ isc_log_getdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_getduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_gettag@Base 1:9.11.3+dfsg
+ isc_log_ivwrite1@Base 1:9.11.3+dfsg
+ isc_log_ivwrite@Base 1:9.11.3+dfsg
+ isc_log_iwrite1@Base 1:9.11.3+dfsg
+ isc_log_iwrite@Base 1:9.11.3+dfsg
+ isc_log_modulebyname@Base 1:9.11.3+dfsg
+ isc_log_opensyslog@Base 1:9.11.3+dfsg
+ isc_log_registercategories@Base 1:9.11.3+dfsg
+ isc_log_registermodules@Base 1:9.11.3+dfsg
+ isc_log_setcontext@Base 1:9.11.3+dfsg
+ isc_log_setdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_setduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_settag@Base 1:9.11.3+dfsg
+ isc_log_usechannel@Base 1:9.11.3+dfsg
+ isc_log_vwrite1@Base 1:9.11.3+dfsg
+ isc_log_vwrite@Base 1:9.11.3+dfsg
+ isc_log_wouldlog@Base 1:9.11.3+dfsg
+ isc_log_write1@Base 1:9.11.3+dfsg
+ isc_log_write@Base 1:9.11.3+dfsg
+ isc_logconfig_create@Base 1:9.11.3+dfsg
+ isc_logconfig_destroy@Base 1:9.11.3+dfsg
+ isc_logconfig_get@Base 1:9.11.3+dfsg
+ isc_logconfig_use@Base 1:9.11.3+dfsg
+ isc_logfile_roll@Base 1:9.11.3+dfsg
+ isc_md5_check@Base 1:9.11.3+dfsg
+ isc_md5_final@Base 1:9.11.3+dfsg
+ isc_md5_init@Base 1:9.11.3+dfsg
+ isc_md5_invalidate@Base 1:9.11.3+dfsg
+ isc_md5_update@Base 1:9.11.3+dfsg
+ isc_mem_attach@Base 1:9.11.3+dfsg
+ isc_mem_checkdestroyed@Base 1:9.11.3+dfsg
+ isc_mem_create2@Base 1:9.11.3+dfsg
+ isc_mem_create@Base 1:9.11.3+dfsg
+ isc_mem_createx2@Base 1:9.11.3+dfsg
+ isc_mem_createx@Base 1:9.11.3+dfsg
+ isc_mem_debugging@Base 1:9.11.3+dfsg
+ isc_mem_defaultflags@Base 1:9.11.3+dfsg
+ isc_mem_destroy@Base 1:9.11.3+dfsg
+ isc_mem_detach@Base 1:9.11.3+dfsg
+ isc_mem_getname@Base 1:9.11.3+dfsg
+ isc_mem_getquota@Base 1:9.11.3+dfsg
+ isc_mem_gettag@Base 1:9.11.3+dfsg
+ isc_mem_inuse@Base 1:9.11.3+dfsg
+ isc_mem_isovermem@Base 1:9.11.3+dfsg
+ isc_mem_maxinuse@Base 1:9.11.3+dfsg
+ isc_mem_ondestroy@Base 1:9.11.3+dfsg
+ isc_mem_printallactive@Base 1:9.11.3+dfsg
+ isc_mem_references@Base 1:9.11.3+dfsg
+ isc_mem_register@Base 1:9.11.3+dfsg
+ isc_mem_renderjson@Base 1:9.11.3+dfsg
+ isc_mem_renderxml@Base 1:9.11.3+dfsg
+ isc_mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc_mem_setname@Base 1:9.11.3+dfsg
+ isc_mem_setquota@Base 1:9.11.3+dfsg
+ isc_mem_setwater@Base 1:9.11.3+dfsg
+ isc_mem_stats@Base 1:9.11.3+dfsg
+ isc_mem_total@Base 1:9.11.3+dfsg
+ isc_mem_waterack@Base 1:9.11.3+dfsg
+ isc_meminfo_totalphys@Base 1:9.11.3+dfsg
+ isc_mempool_associatelock@Base 1:9.11.3+dfsg
+ isc_mempool_create@Base 1:9.11.3+dfsg
+ isc_mempool_destroy@Base 1:9.11.3+dfsg
+ isc_mempool_getallocated@Base 1:9.11.3+dfsg
+ isc_mempool_getfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreecount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setname@Base 1:9.11.3+dfsg
+ isc_modules@Base 1:9.11.3+dfsg
+ isc_msgcat@Base 1:9.11.3+dfsg
+ isc_msgcat_close@Base 1:9.11.3+dfsg
+ isc_msgcat_get@Base 1:9.11.3+dfsg
+ isc_msgcat_open@Base 1:9.11.3+dfsg
+ isc_mutexblock_destroy@Base 1:9.11.3+dfsg
+ isc_mutexblock_init@Base 1:9.11.3+dfsg
+ isc_net_aton@Base 1:9.11.3+dfsg
+ isc_net_disableipv4@Base 1:9.11.3+dfsg
+ isc_net_disableipv6@Base 1:9.11.3+dfsg
+ isc_net_enableipv4@Base 1:9.11.3+dfsg
+ isc_net_enableipv6@Base 1:9.11.3+dfsg
+ isc_net_getudpportrange@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6only@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg
+ isc_net_probedscp@Base 1:9.11.3+dfsg
+ isc_net_probeipv4@Base 1:9.11.3+dfsg
+ isc_net_probeipv6@Base 1:9.11.3+dfsg
+ isc_net_probeunix@Base 1:9.11.3+dfsg
+ isc_netaddr_any6@Base 1:9.11.3+dfsg
+ isc_netaddr_any@Base 1:9.11.3+dfsg
+ isc_netaddr_eqprefix@Base 1:9.11.3+dfsg
+ isc_netaddr_equal@Base 1:9.11.3+dfsg
+ isc_netaddr_format@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin@Base 1:9.11.3+dfsg
+ isc_netaddr_frompath@Base 1:9.11.3+dfsg
+ isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg
+ isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg
+ isc_netaddr_getzone@Base 1:9.11.3+dfsg
+ isc_netaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_netaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_netaddr_isloopback@Base 1:9.11.3+dfsg
+ isc_netaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_netaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_netaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg
+ isc_netaddr_prefixok@Base 1:9.11.3+dfsg
+ isc_netaddr_setzone@Base 1:9.11.3+dfsg
+ isc_netaddr_totext@Base 1:9.11.3+dfsg
+ isc_netscope_pton@Base 1:9.11.3+dfsg
+ isc_ondestroy_init@Base 1:9.11.3+dfsg
+ isc_ondestroy_notify@Base 1:9.11.3+dfsg
+ isc_ondestroy_register@Base 1:9.11.3+dfsg
+ isc_os_ncpus@Base 1:9.11.3+dfsg
+ isc_parse_uint16@Base 1:9.11.3+dfsg
+ isc_parse_uint32@Base 1:9.11.3+dfsg
+ isc_parse_uint8@Base 1:9.11.3+dfsg
+ isc_pool_count@Base 1:9.11.3+dfsg
+ isc_pool_create@Base 1:9.11.3+dfsg
+ isc_pool_destroy@Base 1:9.11.3+dfsg
+ isc_pool_expand@Base 1:9.11.3+dfsg
+ isc_pool_get@Base 1:9.11.3+dfsg
+ isc_portset_add@Base 1:9.11.3+dfsg
+ isc_portset_addrange@Base 1:9.11.3+dfsg
+ isc_portset_create@Base 1:9.11.3+dfsg
+ isc_portset_destroy@Base 1:9.11.3+dfsg
+ isc_portset_isset@Base 1:9.11.3+dfsg
+ isc_portset_nports@Base 1:9.11.3+dfsg
+ isc_portset_remove@Base 1:9.11.3+dfsg
+ isc_portset_removerange@Base 1:9.11.3+dfsg
+ isc_quota_attach@Base 1:9.11.3+dfsg
+ isc_quota_destroy@Base 1:9.11.3+dfsg
+ isc_quota_detach@Base 1:9.11.3+dfsg
+ isc_quota_force@Base 1:9.11.5.P4+dfsg
+ isc_quota_init@Base 1:9.11.3+dfsg
+ isc_quota_max@Base 1:9.11.3+dfsg
+ isc_quota_release@Base 1:9.11.3+dfsg
+ isc_quota_reserve@Base 1:9.11.3+dfsg
+ isc_quota_soft@Base 1:9.11.3+dfsg
+ isc_radix_create@Base 1:9.11.3+dfsg
+ isc_radix_destroy@Base 1:9.11.3+dfsg
+ isc_radix_insert@Base 1:9.11.3+dfsg
+ isc_radix_process@Base 1:9.11.3+dfsg
+ isc_radix_remove@Base 1:9.11.3+dfsg
+ isc_radix_search@Base 1:9.11.3+dfsg
+ isc_random_get@Base 1:9.11.3+dfsg
+ isc_random_jitter@Base 1:9.11.3+dfsg
+ isc_random_seed@Base 1:9.11.3+dfsg
+ isc_ratelimiter_attach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_create@Base 1:9.11.3+dfsg
+ isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_detach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_release@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg
+ isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg
+ isc_ratelimiter_stall@Base 1:9.11.3+dfsg
+ isc_refcount_init@Base 1:9.11.3+dfsg
+ isc_regex_validate@Base 1:9.11.3+dfsg
+ isc_region_compare@Base 1:9.11.3+dfsg
+ isc_resource_getcurlimit@Base 1:9.11.3+dfsg
+ isc_resource_getlimit@Base 1:9.11.3+dfsg
+ isc_resource_setlimit@Base 1:9.11.3+dfsg
+ isc_result_register@Base 1:9.11.3+dfsg
+ isc_result_registerids@Base 1:9.11.3+dfsg
+ isc_result_toid@Base 1:9.11.3+dfsg
+ isc_result_totext@Base 1:9.11.3+dfsg
+ isc_rng_attach@Base 1:9.11.3+dfsg
+ isc_rng_create@Base 1:9.11.3+dfsg
+ isc_rng_detach@Base 1:9.11.3+dfsg
+ isc_rng_random@Base 1:9.11.3+dfsg
+ isc_rng_uniformrandom@Base 1:9.11.3+dfsg
+ isc_rwlock_destroy@Base 1:9.11.3+dfsg
+ isc_rwlock_downgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_init@Base 1:9.11.3+dfsg
+ isc_rwlock_lock@Base 1:9.11.3+dfsg
+ isc_rwlock_trylock@Base 1:9.11.3+dfsg
+ isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_unlock@Base 1:9.11.3+dfsg
+ isc_safe_memcompare@Base 1:9.11.3+dfsg
+ isc_safe_memequal@Base 1:9.11.3+dfsg
+ isc_safe_memwipe@Base 1:9.11.3+dfsg
+ isc_serial_eq@Base 1:9.11.3+dfsg
+ isc_serial_ge@Base 1:9.11.3+dfsg
+ isc_serial_gt@Base 1:9.11.3+dfsg
+ isc_serial_le@Base 1:9.11.3+dfsg
+ isc_serial_lt@Base 1:9.11.3+dfsg
+ isc_serial_ne@Base 1:9.11.3+dfsg
+ isc_sha1_check@Base 1:9.11.3+dfsg
+ isc_sha1_final@Base 1:9.11.3+dfsg
+ isc_sha1_init@Base 1:9.11.3+dfsg
+ isc_sha1_invalidate@Base 1:9.11.3+dfsg
+ isc_sha1_update@Base 1:9.11.3+dfsg
+ isc_sha224_data@Base 1:9.11.3+dfsg
+ isc_sha224_end@Base 1:9.11.3+dfsg
+ isc_sha224_final@Base 1:9.11.3+dfsg
+ isc_sha224_init@Base 1:9.11.3+dfsg
+ isc_sha224_invalidate@Base 1:9.11.3+dfsg
+ isc_sha224_update@Base 1:9.11.3+dfsg
+ isc_sha256_data@Base 1:9.11.3+dfsg
+ isc_sha256_end@Base 1:9.11.3+dfsg
+ isc_sha256_final@Base 1:9.11.3+dfsg
+ isc_sha256_init@Base 1:9.11.3+dfsg
+ isc_sha256_invalidate@Base 1:9.11.3+dfsg
+ isc_sha256_update@Base 1:9.11.3+dfsg
+ isc_sha384_data@Base 1:9.11.3+dfsg
+ isc_sha384_end@Base 1:9.11.3+dfsg
+ isc_sha384_final@Base 1:9.11.3+dfsg
+ isc_sha384_init@Base 1:9.11.3+dfsg
+ isc_sha384_invalidate@Base 1:9.11.3+dfsg
+ isc_sha384_update@Base 1:9.11.3+dfsg
+ isc_sha512_data@Base 1:9.11.3+dfsg
+ isc_sha512_end@Base 1:9.11.3+dfsg
+ isc_sha512_final@Base 1:9.11.3+dfsg
+ isc_sha512_init@Base 1:9.11.3+dfsg
+ isc_sha512_invalidate@Base 1:9.11.3+dfsg
+ isc_sha512_update@Base 1:9.11.3+dfsg
+ isc_sockaddr_any6@Base 1:9.11.3+dfsg
+ isc_sockaddr_any@Base 1:9.11.3+dfsg
+ isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg
+ isc_sockaddr_compare@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg
+ isc_sockaddr_equal@Base 1:9.11.3+dfsg
+ isc_sockaddr_format@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_frompath@Base 1:9.11.3+dfsg
+ isc_sockaddr_getport@Base 1:9.11.3+dfsg
+ isc_sockaddr_hash@Base 1:9.11.3+dfsg
+ isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_pf@Base 1:9.11.3+dfsg
+ isc_sockaddr_setport@Base 1:9.11.3+dfsg
+ isc_sockaddr_totext@Base 1:9.11.3+dfsg
+ isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg
+ isc_socket_accept@Base 1:9.11.3+dfsg
+ isc_socket_attach@Base 1:9.11.3+dfsg
+ isc_socket_bind@Base 1:9.11.3+dfsg
+ isc_socket_cancel@Base 1:9.11.3+dfsg
+ isc_socket_cleanunix@Base 1:9.11.3+dfsg
+ isc_socket_close@Base 1:9.11.3+dfsg
+ isc_socket_connect@Base 1:9.11.3+dfsg
+ isc_socket_create@Base 1:9.11.3+dfsg
+ isc_socket_detach@Base 1:9.11.3+dfsg
+ isc_socket_dscp@Base 1:9.11.3+dfsg
+ isc_socket_dup@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc_socket_filter@Base 1:9.11.3+dfsg
+ isc_socket_getfd@Base 1:9.11.3+dfsg
+ isc_socket_getpeername@Base 1:9.11.3+dfsg
+ isc_socket_getsockname@Base 1:9.11.3+dfsg
+ isc_socket_gettype@Base 1:9.11.3+dfsg
+ isc_socket_ipv6only@Base 1:9.11.3+dfsg
+ isc_socket_listen@Base 1:9.11.3+dfsg
+ isc_socket_open@Base 1:9.11.3+dfsg
+ isc_socket_permunix@Base 1:9.11.3+dfsg
+ isc_socket_recv2@Base 1:9.11.3+dfsg
+ isc_socket_recv@Base 1:9.11.3+dfsg
+ isc_socket_recvv@Base 1:9.11.3+dfsg
+ isc_socket_register@Base 1:9.11.3+dfsg
+ isc_socket_send@Base 1:9.11.3+dfsg
+ isc_socket_sendto2@Base 1:9.11.3+dfsg
+ isc_socket_sendto@Base 1:9.11.3+dfsg
+ isc_socket_sendtov2@Base 1:9.11.3+dfsg
+ isc_socket_sendtov@Base 1:9.11.3+dfsg
+ isc_socket_sendv@Base 1:9.11.3+dfsg
+ isc_socket_setname@Base 1:9.11.3+dfsg
+ isc_socket_socketevent@Base 1:9.11.3+dfsg
+ isc_socketmgr_create2@Base 1:9.11.3+dfsg
+ isc_socketmgr_create@Base 1:9.11.3+dfsg
+ isc_socketmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_socketmgr_setstats@Base 1:9.11.3+dfsg
+ isc_stats_attach@Base 1:9.11.3+dfsg
+ isc_stats_create@Base 1:9.11.3+dfsg
+ isc_stats_decrement@Base 1:9.11.3+dfsg
+ isc_stats_detach@Base 1:9.11.3+dfsg
+ isc_stats_dump@Base 1:9.11.3+dfsg
+ isc_stats_increment@Base 1:9.11.3+dfsg
+ isc_stats_ncounters@Base 1:9.11.3+dfsg
+ isc_stats_set@Base 1:9.11.3+dfsg
+ isc_stdio_close@Base 1:9.11.3+dfsg
+ isc_stdio_flush@Base 1:9.11.3+dfsg
+ isc_stdio_open@Base 1:9.11.3+dfsg
+ isc_stdio_read@Base 1:9.11.3+dfsg
+ isc_stdio_seek@Base 1:9.11.3+dfsg
+ isc_stdio_sync@Base 1:9.11.3+dfsg
+ isc_stdio_tell@Base 1:9.11.3+dfsg
+ isc_stdio_write@Base 1:9.11.3+dfsg
+ isc_stdtime_get@Base 1:9.11.3+dfsg
+ isc_string_append@Base 1:9.11.3+dfsg
+ isc_string_append_truncate@Base 1:9.11.3+dfsg
+ isc_string_copy@Base 1:9.11.3+dfsg
+ isc_string_copy_truncate@Base 1:9.11.3+dfsg
+ isc_string_printf@Base 1:9.11.3+dfsg
+ isc_string_printf_truncate@Base 1:9.11.3+dfsg
+ isc_string_regiondup@Base 1:9.11.3+dfsg
+ isc_string_separate@Base 1:9.11.3+dfsg
+ isc_string_strcasestr@Base 1:9.11.3+dfsg
+ isc_string_strlcat@Base 1:9.11.3+dfsg
+ isc_string_strlcpy@Base 1:9.11.3+dfsg
+ isc_string_touint64@Base 1:9.11.3+dfsg
+ isc_strtoul@Base 1:9.11.3+dfsg
+ isc_symtab_count@Base 1:9.11.3+dfsg
+ isc_symtab_create@Base 1:9.11.3+dfsg
+ isc_symtab_define@Base 1:9.11.3+dfsg
+ isc_symtab_destroy@Base 1:9.11.3+dfsg
+ isc_symtab_lookup@Base 1:9.11.3+dfsg
+ isc_symtab_undefine@Base 1:9.11.3+dfsg
+ isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg
+ isc_task_attach@Base 1:9.11.3+dfsg
+ isc_task_beginexclusive@Base 1:9.11.3+dfsg
+ isc_task_create@Base 1:9.11.3+dfsg
+ isc_task_destroy@Base 1:9.11.3+dfsg
+ isc_task_detach@Base 1:9.11.3+dfsg
+ isc_task_endexclusive@Base 1:9.11.3+dfsg
+ isc_task_exiting@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc_task_onshutdown@Base 1:9.11.3+dfsg
+ isc_task_privilege@Base 1:9.11.3+dfsg
+ isc_task_purge@Base 1:9.11.3+dfsg
+ isc_task_purgeevent@Base 1:9.11.3+dfsg
+ isc_task_purgerange@Base 1:9.11.3+dfsg
+ isc_task_register@Base 1:9.11.3+dfsg
+ isc_task_send@Base 1:9.11.3+dfsg
+ isc_task_sendanddetach@Base 1:9.11.3+dfsg
+ isc_task_setname@Base 1:9.11.3+dfsg
+ isc_task_setprivilege@Base 1:9.11.3+dfsg
+ isc_task_shutdown@Base 1:9.11.3+dfsg
+ isc_task_unsend@Base 1:9.11.3+dfsg
+ isc_taskmgr_create@Base 1:9.11.3+dfsg
+ isc_taskmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc_taskmgr_excltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_mode@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc_taskpool_create@Base 1:9.11.3+dfsg
+ isc_taskpool_destroy@Base 1:9.11.3+dfsg
+ isc_taskpool_expand@Base 1:9.11.3+dfsg
+ isc_taskpool_gettask@Base 1:9.11.3+dfsg
+ isc_taskpool_setprivilege@Base 1:9.11.3+dfsg
+ isc_taskpool_size@Base 1:9.11.3+dfsg
+ isc_thread_create@Base 1:9.11.3+dfsg
+ isc_thread_setconcurrency@Base 1:9.11.3+dfsg
+ isc_thread_setname@Base 1:9.11.3+dfsg
+ isc_thread_yield@Base 1:9.11.3+dfsg
+ isc_time_add@Base 1:9.11.3+dfsg
+ isc_time_compare@Base 1:9.11.3+dfsg
+ isc_time_epoch@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601ms@Base 1:9.11.3+dfsg
+ isc_time_formathttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_formattimestamp@Base 1:9.11.3+dfsg
+ isc_time_isepoch@Base 1:9.11.3+dfsg
+ isc_time_microdiff@Base 1:9.11.3+dfsg
+ isc_time_nanoseconds@Base 1:9.11.3+dfsg
+ isc_time_now@Base 1:9.11.3+dfsg
+ isc_time_nowplusinterval@Base 1:9.11.3+dfsg
+ isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_seconds@Base 1:9.11.3+dfsg
+ isc_time_secondsastimet@Base 1:9.11.3+dfsg
+ isc_time_set@Base 1:9.11.3+dfsg
+ isc_time_settoepoch@Base 1:9.11.3+dfsg
+ isc_time_subtract@Base 1:9.11.3+dfsg
+ isc_timer_attach@Base 1:9.11.3+dfsg
+ isc_timer_create@Base 1:9.11.3+dfsg
+ isc_timer_detach@Base 1:9.11.3+dfsg
+ isc_timer_gettype@Base 1:9.11.3+dfsg
+ isc_timer_register@Base 1:9.11.3+dfsg
+ isc_timer_reset@Base 1:9.11.3+dfsg
+ isc_timer_touch@Base 1:9.11.3+dfsg
+ isc_timermgr_create@Base 1:9.11.3+dfsg
+ isc_timermgr_createinctx@Base 1:9.11.3+dfsg
+ isc_timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_timermgr_poke@Base 1:9.11.3+dfsg
+ isc_tm_strptime@Base 1:9.11.3+dfsg
+ isc_tm_timegm@Base 1:9.11.3+dfsg
+ isc_version@Base 1:9.11.3+dfsg
+ pk11_attribute_bytype@Base 1:9.11.3+dfsg
+ pk11_attribute_first@Base 1:9.11.3+dfsg
+ pk11_attribute_next@Base 1:9.11.3+dfsg
+ pk11_dump_tokens@Base 1:9.11.3+dfsg
+ pk11_error_fatalcheck@Base 1:9.11.3+dfsg
+ pk11_finalize@Base 1:9.11.3+dfsg
+ pk11_get_best_token@Base 1:9.11.3+dfsg
+ pk11_get_lib_name@Base 1:9.11.3+dfsg
+ pk11_get_load_error_message@Base 1:9.11.3+dfsg
+ pk11_get_session@Base 1:9.11.3+dfsg
+ pk11_initialize@Base 1:9.11.3+dfsg
+ pk11_initmsgcat@Base 1:9.11.3+dfsg
+ pk11_mem_get@Base 1:9.11.3+dfsg
+ pk11_mem_put@Base 1:9.11.3+dfsg
+ pk11_msgcat@Base 1:9.11.3+dfsg
+ pk11_numbits@Base 1:9.11.3+dfsg
+ pk11_parse_uri@Base 1:9.11.3+dfsg
+ pk11_rand_bytes@Base 1:9.11.3+dfsg
+ pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg
+ pk11_result_register@Base 1:9.11.3+dfsg
+ pk11_result_totext@Base 1:9.11.3+dfsg
+ pk11_return_session@Base 1:9.11.3+dfsg
+ pk11_set_lib_name@Base 1:9.11.3+dfsg
+ pk11_verbose_init@Base 1:9.11.3+dfsg
+ pkcs_C_CloseSession@Base 1:9.11.3+dfsg
+ pkcs_C_CreateObject@Base 1:9.11.3+dfsg
+ pkcs_C_DeriveKey@Base 1:9.11.3+dfsg
+ pkcs_C_DestroyObject@Base 1:9.11.3+dfsg
+ pkcs_C_DigestFinal@Base 1:9.11.3+dfsg
+ pkcs_C_DigestInit@Base 1:9.11.3+dfsg
+ pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Encrypt@Base 1:9.11.3+dfsg
+ pkcs_C_EncryptInit@Base 1:9.11.3+dfsg
+ pkcs_C_Finalize@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjects@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKey@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg
+ pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg
+ pkcs_C_GetSlotList@Base 1:9.11.3+dfsg
+ pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg
+ pkcs_C_Initialize@Base 1:9.11.3+dfsg
+ pkcs_C_Login@Base 1:9.11.3+dfsg
+ pkcs_C_Logout@Base 1:9.11.3+dfsg
+ pkcs_C_OpenSession@Base 1:9.11.3+dfsg
+ pkcs_C_SeedRandom@Base 1:9.11.3+dfsg
+ pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_Sign@Base 1:9.11.3+dfsg
+ pkcs_C_SignFinal@Base 1:9.11.3+dfsg
+ pkcs_C_SignInit@Base 1:9.11.3+dfsg
+ pkcs_C_SignUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Verify@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyInit@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg
diff --git a/debian/libisccc-export161-udeb.install b/debian/libisccc-export161-udeb.install
new file mode 100755
index 0000000..f75e75f
--- /dev/null
+++ b/debian/libisccc-export161-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccc-export161.install b/debian/libisccc-export161.install
new file mode 100755
index 0000000..f75e75f
--- /dev/null
+++ b/debian/libisccc-export161.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccc161.install b/debian/libisccc161.install
new file mode 100644
index 0000000..25c2515
--- /dev/null
+++ b/debian/libisccc161.install
@@ -0,0 +1 @@
+usr/lib/*/libisccc.so.*
diff --git a/debian/libisccc161.symbols b/debian/libisccc161.symbols
new file mode 100644
index 0000000..b119c27
--- /dev/null
+++ b/debian/libisccc161.symbols
@@ -0,0 +1,66 @@
+libisccc.so.161 libisccc161 #MINVER#
+ isccc_alist_alistp@Base 1:9.10.6+dfsg
+ isccc_alist_assq@Base 1:9.10.6+dfsg
+ isccc_alist_create@Base 1:9.10.6+dfsg
+ isccc_alist_define@Base 1:9.10.6+dfsg
+ isccc_alist_definebinary@Base 1:9.10.6+dfsg
+ isccc_alist_definestring@Base 1:9.10.6+dfsg
+ isccc_alist_delete@Base 1:9.10.6+dfsg
+ isccc_alist_emptyp@Base 1:9.10.6+dfsg
+ isccc_alist_first@Base 1:9.10.6+dfsg
+ isccc_alist_lookup@Base 1:9.10.6+dfsg
+ isccc_alist_lookupbinary@Base 1:9.10.6+dfsg
+ isccc_alist_lookupstring@Base 1:9.10.6+dfsg
+ isccc_alist_prettyprint@Base 1:9.10.6+dfsg
+ isccc_base64_decode@Base 1:9.10.6+dfsg
+ isccc_base64_encode@Base 1:9.10.6+dfsg
+ isccc_cc_checkdup@Base 1:9.10.6+dfsg
+ isccc_cc_cleansymtab@Base 1:9.10.6+dfsg
+ isccc_cc_createack@Base 1:9.10.6+dfsg
+ isccc_cc_createmessage@Base 1:9.10.6+dfsg
+ isccc_cc_createresponse@Base 1:9.10.6+dfsg
+ isccc_cc_createsymtab@Base 1:9.10.6+dfsg
+ isccc_cc_definestring@Base 1:9.10.6+dfsg
+ isccc_cc_defineuint32@Base 1:9.10.6+dfsg
+ isccc_cc_fromwire@Base 1:9.10.6+dfsg
+ isccc_cc_isack@Base 1:9.10.6+dfsg
+ isccc_cc_isreply@Base 1:9.10.6+dfsg
+ isccc_cc_lookupstring@Base 1:9.10.6+dfsg
+ isccc_cc_lookupuint32@Base 1:9.10.6+dfsg
+ isccc_cc_towire@Base 1:9.10.6+dfsg
+ isccc_ccmsg_cancelread@Base 1:9.10.6+dfsg
+ isccc_ccmsg_init@Base 1:9.10.6+dfsg
+ isccc_ccmsg_invalidate@Base 1:9.10.6+dfsg
+ isccc_ccmsg_readmessage@Base 1:9.10.6+dfsg
+ isccc_ccmsg_setmaxsize@Base 1:9.10.6+dfsg
+ isccc_lib_initmsgcat@Base 1:9.10.6+dfsg
+ isccc_libage@Base 1:9.10.6+dfsg
+ isccc_libinterface@Base 1:9.10.6+dfsg
+ isccc_librevision@Base 1:9.10.6+dfsg
+ isccc_msgcat@Base 1:9.10.6+dfsg
+ isccc_result_register@Base 1:9.10.6+dfsg
+ isccc_result_totext@Base 1:9.10.6+dfsg
+ isccc_sexpr_addtolist@Base 1:9.10.6+dfsg
+ isccc_sexpr_binaryp@Base 1:9.10.6+dfsg
+ isccc_sexpr_car@Base 1:9.10.6+dfsg
+ isccc_sexpr_cdr@Base 1:9.10.6+dfsg
+ isccc_sexpr_cons@Base 1:9.10.6+dfsg
+ isccc_sexpr_emptyp@Base 1:9.10.6+dfsg
+ isccc_sexpr_free@Base 1:9.10.6+dfsg
+ isccc_sexpr_frombinary@Base 1:9.10.6+dfsg
+ isccc_sexpr_fromstring@Base 1:9.10.6+dfsg
+ isccc_sexpr_listp@Base 1:9.10.6+dfsg
+ isccc_sexpr_print@Base 1:9.10.6+dfsg
+ isccc_sexpr_setcar@Base 1:9.10.6+dfsg
+ isccc_sexpr_setcdr@Base 1:9.10.6+dfsg
+ isccc_sexpr_stringp@Base 1:9.10.6+dfsg
+ isccc_sexpr_tconst@Base 1:9.10.6+dfsg
+ isccc_sexpr_tobinary@Base 1:9.10.6+dfsg
+ isccc_sexpr_tostring@Base 1:9.10.6+dfsg
+ isccc_symtab_create@Base 1:9.10.6+dfsg
+ isccc_symtab_define@Base 1:9.10.6+dfsg
+ isccc_symtab_destroy@Base 1:9.10.6+dfsg
+ isccc_symtab_foreach@Base 1:9.10.6+dfsg
+ isccc_symtab_lookup@Base 1:9.10.6+dfsg
+ isccc_symtab_undefine@Base 1:9.10.6+dfsg
+ isccc_version@Base 1:9.10.6+dfsg
diff --git a/debian/libisccfg-export163-udeb.install b/debian/libisccfg-export163-udeb.install
new file mode 100755
index 0000000..dc18cc6
--- /dev/null
+++ b/debian/libisccfg-export163-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccfg-export163.install b/debian/libisccfg-export163.install
new file mode 100755
index 0000000..dc18cc6
--- /dev/null
+++ b/debian/libisccfg-export163.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccfg163.install b/debian/libisccfg163.install
new file mode 100644
index 0000000..7127996
--- /dev/null
+++ b/debian/libisccfg163.install
@@ -0,0 +1 @@
+usr/lib/*/libisccfg.so.*
diff --git a/debian/libisccfg163.symbols b/debian/libisccfg163.symbols
new file mode 100644
index 0000000..dbc7e0e
--- /dev/null
+++ b/debian/libisccfg163.symbols
@@ -0,0 +1,173 @@
+libisccfg.so.163 libisccfg163 #MINVER#
+ cfg_acl_fromconfig2@Base 1:9.10.6+dfsg
+ cfg_acl_fromconfig@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_attach@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_create@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_detach@Base 1:9.10.6+dfsg
+ cfg_categories@Base 1:9.10.6+dfsg
+ cfg_clause_validforzone@Base 1:9.11.3+dfsg
+ cfg_create_list@Base 1:9.10.6+dfsg
+ cfg_create_obj@Base 1:9.10.6+dfsg
+ cfg_create_tuple@Base 1:9.10.6+dfsg
+ cfg_doc_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_doc_enum@Base 1:9.10.6+dfsg
+ cfg_doc_map@Base 1:9.10.6+dfsg
+ cfg_doc_mapbody@Base 1:9.10.6+dfsg
+ cfg_doc_obj@Base 1:9.10.6+dfsg
+ cfg_doc_sockaddr@Base 1:9.10.6+dfsg
+ cfg_doc_terminal@Base 1:9.10.6+dfsg
+ cfg_doc_tuple@Base 1:9.10.6+dfsg
+ cfg_doc_void@Base 1:9.10.6+dfsg
+ cfg_gettoken@Base 1:9.10.6+dfsg
+ cfg_is_enum@Base 1:9.10.6+dfsg
+ cfg_libage@Base 1:9.10.6+dfsg
+ cfg_libinterface@Base 1:9.10.6+dfsg
+ cfg_librevision@Base 1:9.10.6+dfsg
+ cfg_list_first@Base 1:9.10.6+dfsg
+ cfg_list_length@Base 1:9.10.6+dfsg
+ cfg_list_next@Base 1:9.10.6+dfsg
+ cfg_listelt_value@Base 1:9.10.6+dfsg
+ cfg_log_init@Base 1:9.10.6+dfsg
+ cfg_lookingat_netaddr@Base 1:9.10.6+dfsg
+ cfg_map_count@Base 1:9.10.6+dfsg
+ cfg_map_firstclause@Base 1:9.11.3+dfsg
+ cfg_map_get@Base 1:9.10.6+dfsg
+ cfg_map_getname@Base 1:9.10.6+dfsg
+ cfg_map_nextclause@Base 1:9.11.3+dfsg
+ cfg_modules@Base 1:9.10.6+dfsg
+ cfg_obj_asboolean@Base 1:9.10.6+dfsg
+ cfg_obj_asfixedpoint@Base 1:9.10.6+dfsg
+ cfg_obj_asnetprefix@Base 1:9.10.6+dfsg
+ cfg_obj_aspercentage@Base 1:9.11.2+dfsg
+ cfg_obj_assockaddr@Base 1:9.10.6+dfsg
+ cfg_obj_asstring@Base 1:9.10.6+dfsg
+ cfg_obj_asuint32@Base 1:9.10.6+dfsg
+ cfg_obj_asuint64@Base 1:9.10.6+dfsg
+ cfg_obj_attach@Base 1:9.10.6+dfsg
+ cfg_obj_destroy@Base 1:9.10.6+dfsg
+ cfg_obj_file@Base 1:9.10.6+dfsg
+ cfg_obj_getdscp@Base 1:9.10.6+dfsg
+ cfg_obj_isboolean@Base 1:9.10.6+dfsg
+ cfg_obj_isfixedpoint@Base 1:9.11.2+dfsg
+ cfg_obj_islist@Base 1:9.10.6+dfsg
+ cfg_obj_ismap@Base 1:9.10.6+dfsg
+ cfg_obj_isnetprefix@Base 1:9.10.6+dfsg
+ cfg_obj_ispercentage@Base 1:9.11.2+dfsg
+ cfg_obj_issockaddr@Base 1:9.10.6+dfsg
+ cfg_obj_isstring@Base 1:9.10.6+dfsg
+ cfg_obj_istuple@Base 1:9.10.6+dfsg
+ cfg_obj_istype@Base 1:9.10.6+dfsg
+ cfg_obj_isuint32@Base 1:9.10.6+dfsg
+ cfg_obj_isuint64@Base 1:9.10.6+dfsg
+ cfg_obj_isvoid@Base 1:9.10.6+dfsg
+ cfg_obj_line@Base 1:9.10.6+dfsg
+ cfg_obj_log@Base 1:9.10.6+dfsg
+ cfg_parse_addressed_map@Base 1:9.10.6+dfsg
+ cfg_parse_astring@Base 1:9.10.6+dfsg
+ cfg_parse_boolean@Base 1:9.10.6+dfsg
+ cfg_parse_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_parse_buffer2@Base 1:9.11.2+dfsg
+ cfg_parse_buffer3@Base 1:9.11.2+dfsg
+ cfg_parse_buffer4@Base 1:9.11.4+dfsg
+ cfg_parse_buffer@Base 1:9.10.6+dfsg
+ cfg_parse_dscp@Base 1:9.10.6+dfsg
+ cfg_parse_enum@Base 1:9.10.6+dfsg
+ cfg_parse_file@Base 1:9.10.6+dfsg
+ cfg_parse_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_parse_listelt@Base 1:9.10.6+dfsg
+ cfg_parse_map@Base 1:9.10.6+dfsg
+ cfg_parse_mapbody@Base 1:9.10.6+dfsg
+ cfg_parse_named_map@Base 1:9.10.6+dfsg
+ cfg_parse_netprefix@Base 1:9.10.6+dfsg
+ cfg_parse_netprefix_map@Base 1:9.10.6+dfsg
+ cfg_parse_obj@Base 1:9.10.6+dfsg
+ cfg_parse_percentage@Base 1:9.11.2+dfsg
+ cfg_parse_qstring@Base 1:9.10.6+dfsg
+ cfg_parse_rawaddr@Base 1:9.10.6+dfsg
+ cfg_parse_rawport@Base 1:9.10.6+dfsg
+ cfg_parse_sockaddr@Base 1:9.10.6+dfsg
+ cfg_parse_spacelist@Base 1:9.10.6+dfsg
+ cfg_parse_special@Base 1:9.10.6+dfsg
+ cfg_parse_sstring@Base 1:9.10.6+dfsg
+ cfg_parse_tuple@Base 1:9.10.6+dfsg
+ cfg_parse_uint32@Base 1:9.10.6+dfsg
+ cfg_parse_void@Base 1:9.10.6+dfsg
+ cfg_parser_attach@Base 1:9.10.6+dfsg
+ cfg_parser_create@Base 1:9.10.6+dfsg
+ cfg_parser_destroy@Base 1:9.10.6+dfsg
+ cfg_parser_error@Base 1:9.10.6+dfsg
+ cfg_parser_mapadd@Base 1:9.11.2+dfsg
+ cfg_parser_reset@Base 1:9.11.2+dfsg
+ cfg_parser_setcallback@Base 1:9.10.6+dfsg
+ cfg_parser_warning@Base 1:9.10.6+dfsg
+ cfg_peektoken@Base 1:9.10.6+dfsg
+ cfg_print@Base 1:9.10.6+dfsg
+ cfg_print_boolean@Base 1:9.10.6+dfsg
+ cfg_print_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_print_chars@Base 1:9.10.6+dfsg
+ cfg_print_clauseflags@Base 1:9.11.3+dfsg
+ cfg_print_cstr@Base 1:9.10.6+dfsg
+ cfg_print_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_print_grammar@Base 1:9.10.6+dfsg
+ cfg_print_indent@Base 1:9.11.3+dfsg
+ cfg_print_map@Base 1:9.10.6+dfsg
+ cfg_print_mapbody@Base 1:9.10.6+dfsg
+ cfg_print_obj@Base 1:9.10.6+dfsg
+ cfg_print_percentage@Base 1:9.11.2+dfsg
+ cfg_print_rawaddr@Base 1:9.10.6+dfsg
+ cfg_print_rawuint@Base 1:9.10.6+dfsg
+ cfg_print_sockaddr@Base 1:9.10.6+dfsg
+ cfg_print_spacelist@Base 1:9.10.6+dfsg
+ cfg_print_tuple@Base 1:9.10.6+dfsg
+ cfg_print_uint32@Base 1:9.10.6+dfsg
+ cfg_print_uint64@Base 1:9.10.6+dfsg
+ cfg_print_ustring@Base 1:9.10.6+dfsg
+ cfg_print_void@Base 1:9.10.6+dfsg
+ cfg_print_zonegrammar@Base 1:9.11.3+dfsg
+ cfg_printx@Base 1:9.10.6+dfsg
+ cfg_rep_boolean@Base 1:9.10.6+dfsg
+ cfg_rep_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_rep_list@Base 1:9.10.6+dfsg
+ cfg_rep_map@Base 1:9.10.6+dfsg
+ cfg_rep_netprefix@Base 1:9.10.6+dfsg
+ cfg_rep_percentage@Base 1:9.11.2+dfsg
+ cfg_rep_sockaddr@Base 1:9.10.6+dfsg
+ cfg_rep_string@Base 1:9.10.6+dfsg
+ cfg_rep_tuple@Base 1:9.10.6+dfsg
+ cfg_rep_uint32@Base 1:9.10.6+dfsg
+ cfg_rep_uint64@Base 1:9.10.6+dfsg
+ cfg_rep_void@Base 1:9.10.6+dfsg
+ cfg_tuple_get@Base 1:9.10.6+dfsg
+ cfg_type_addzoneconf@Base 1:9.10.6+dfsg
+ cfg_type_astring@Base 1:9.10.6+dfsg
+ cfg_type_bindkeys@Base 1:9.10.6+dfsg
+ cfg_type_boolean@Base 1:9.10.6+dfsg
+ cfg_type_bracketed_text@Base 1:9.11.2+dfsg
+ cfg_type_dnsconf@Base 1:9.10.6+dfsg
+ cfg_type_ecsprefix@Base 1:9.11.2+dfsg
+ cfg_type_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_type_keyref@Base 1:9.10.6+dfsg
+ cfg_type_namedconf@Base 1:9.10.6+dfsg
+ cfg_type_netaddr4@Base 1:9.10.6+dfsg
+ cfg_type_netaddr4wild@Base 1:9.10.6+dfsg
+ cfg_type_netaddr6@Base 1:9.10.6+dfsg
+ cfg_type_netaddr6wild@Base 1:9.10.6+dfsg
+ cfg_type_netaddr@Base 1:9.10.6+dfsg
+ cfg_type_netprefix@Base 1:9.10.6+dfsg
+ cfg_type_percentage@Base 1:9.11.2+dfsg
+ cfg_type_qstring@Base 1:9.10.6+dfsg
+ cfg_type_rndcconf@Base 1:9.10.6+dfsg
+ cfg_type_rndckey@Base 1:9.10.6+dfsg
+ cfg_type_sessionkey@Base 1:9.10.6+dfsg
+ cfg_type_sockaddr@Base 1:9.10.6+dfsg
+ cfg_type_sockaddrdscp@Base 1:9.10.6+dfsg
+ cfg_type_sstring@Base 1:9.10.6+dfsg
+ cfg_type_token@Base 1:9.10.6+dfsg
+ cfg_type_uint32@Base 1:9.10.6+dfsg
+ cfg_type_uint64@Base 1:9.10.6+dfsg
+ cfg_type_unsupported@Base 1:9.10.6+dfsg
+ cfg_type_ustring@Base 1:9.10.6+dfsg
+ cfg_type_void@Base 1:9.10.6+dfsg
+ cfg_type_zoneopts@Base 1:9.11.3+dfsg
+ cfg_ungettoken@Base 1:9.10.6+dfsg
+ cfg_version@Base 1:9.10.6+dfsg
diff --git a/debian/liblwres161.install b/debian/liblwres161.install
new file mode 100644
index 0000000..791183e
--- /dev/null
+++ b/debian/liblwres161.install
@@ -0,0 +1 @@
+usr/lib/*/liblwres.so.*
diff --git a/debian/liblwres161.symbols b/debian/liblwres161.symbols
new file mode 100644
index 0000000..553ad4e
--- /dev/null
+++ b/debian/liblwres161.symbols
@@ -0,0 +1,101 @@
+liblwres.so.161 liblwres161 #MINVER#
+ lwres__print_snprintf@Base 1:9.10.6+dfsg
+ lwres__print_sprintf@Base 1:9.10.6+dfsg
+ lwres__print_vsnprintf@Base 1:9.10.6+dfsg
+ lwres_addr_parse@Base 1:9.10.6+dfsg
+ lwres_buffer_add@Base 1:9.10.6+dfsg
+ lwres_buffer_back@Base 1:9.10.6+dfsg
+ lwres_buffer_clear@Base 1:9.10.6+dfsg
+ lwres_buffer_first@Base 1:9.10.6+dfsg
+ lwres_buffer_forward@Base 1:9.10.6+dfsg
+ lwres_buffer_getmem@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint16@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint32@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint8@Base 1:9.10.6+dfsg
+ lwres_buffer_init@Base 1:9.10.6+dfsg
+ lwres_buffer_invalidate@Base 1:9.10.6+dfsg
+ lwres_buffer_putmem@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint16@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint32@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint8@Base 1:9.10.6+dfsg
+ lwres_buffer_subtract@Base 1:9.10.6+dfsg
+ lwres_conf_clear@Base 1:9.10.6+dfsg
+ lwres_conf_get@Base 1:9.10.6+dfsg
+ lwres_conf_init@Base 1:9.10.6+dfsg
+ lwres_conf_parse@Base 1:9.10.6+dfsg
+ lwres_conf_print@Base 1:9.10.6+dfsg
+ lwres_context_allocmem@Base 1:9.10.6+dfsg
+ lwres_context_create@Base 1:9.10.6+dfsg
+ lwres_context_destroy@Base 1:9.10.6+dfsg
+ lwres_context_freemem@Base 1:9.10.6+dfsg
+ lwres_context_getsocket@Base 1:9.10.6+dfsg
+ lwres_context_initserial@Base 1:9.10.6+dfsg
+ lwres_context_nextserial@Base 1:9.10.6+dfsg
+ lwres_context_recv@Base 1:9.10.6+dfsg
+ lwres_context_send@Base 1:9.10.6+dfsg
+ lwres_context_sendrecv@Base 1:9.10.6+dfsg
+ lwres_data_parse@Base 1:9.10.6+dfsg
+ lwres_endhostent@Base 1:9.10.6+dfsg
+ lwres_endhostent_r@Base 1:9.10.6+dfsg
+ lwres_freeaddrinfo@Base 1:9.10.6+dfsg
+ lwres_freehostent@Base 1:9.10.6+dfsg
+ lwres_freerrset@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_free@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_parse@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_render@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_free@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_parse@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_render@Base 1:9.10.6+dfsg
+ lwres_gai_strerror@Base 1:9.10.6+dfsg
+ lwres_getaddrinfo@Base 1:9.10.6+dfsg
+ lwres_getaddrsbyname@Base 1:9.10.6+dfsg
+ lwres_gethostbyaddr@Base 1:9.10.6+dfsg
+ lwres_gethostbyaddr_r@Base 1:9.10.6+dfsg
+ lwres_gethostbyname2@Base 1:9.10.6+dfsg
+ lwres_gethostbyname@Base 1:9.10.6+dfsg
+ lwres_gethostbyname_r@Base 1:9.10.6+dfsg
+ lwres_gethostent@Base 1:9.10.6+dfsg
+ lwres_gethostent_r@Base 1:9.10.6+dfsg
+ lwres_getipnodebyaddr@Base 1:9.10.6+dfsg
+ lwres_getipnodebyname@Base 1:9.10.6+dfsg
+ lwres_getnamebyaddr@Base 1:9.10.6+dfsg
+ lwres_getnameinfo@Base 1:9.10.6+dfsg
+ lwres_getrdatabyname@Base 1:9.10.6+dfsg
+ lwres_getrrsetbyname@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_free@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_parse@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_render@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_free@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_parse@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_render@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_free@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_parse@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_render@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_free@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_parse@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_render@Base 1:9.10.6+dfsg
+ lwres_h_errno@Base 1:9.10.6+dfsg
+ lwres_herror@Base 1:9.10.6+dfsg
+ lwres_hstrerror@Base 1:9.10.6+dfsg
+ lwres_libage@Base 1:9.10.6+dfsg
+ lwres_libinterface@Base 1:9.10.6+dfsg
+ lwres_librevision@Base 1:9.10.6+dfsg
+ lwres_lwpacket_parseheader@Base 1:9.10.6+dfsg
+ lwres_lwpacket_renderheader@Base 1:9.10.6+dfsg
+ lwres_net_aton@Base 1:9.10.6+dfsg
+ lwres_net_ntop@Base 1:9.10.6+dfsg
+ lwres_net_pton@Base 1:9.10.6+dfsg
+ lwres_nooprequest_free@Base 1:9.10.6+dfsg
+ lwres_nooprequest_parse@Base 1:9.10.6+dfsg
+ lwres_nooprequest_render@Base 1:9.10.6+dfsg
+ lwres_noopresponse_free@Base 1:9.10.6+dfsg
+ lwres_noopresponse_parse@Base 1:9.10.6+dfsg
+ lwres_noopresponse_render@Base 1:9.10.6+dfsg
+ lwres_resolv_conf@Base 1:9.10.6+dfsg
+ lwres_sethostent@Base 1:9.10.6+dfsg
+ lwres_sethostent_r@Base 1:9.10.6+dfsg
+ lwres_string_parse@Base 1:9.10.6+dfsg
+ lwres_strlcpy@Base 1:9.10.6+dfsg
+ lwres_strtoul@Base 1:9.10.6+dfsg
+ lwres_udp_port@Base 1:9.10.6+dfsg
+ lwres_version@Base 1:9.10.6+dfsg
diff --git a/debian/nslookup.1 b/debian/nslookup.1
new file mode 100644
index 0000000..1c68dbe
--- /dev/null
+++ b/debian/nslookup.1
@@ -0,0 +1,536 @@
+.\"
+.\" ++Copyright++ 1985, 1989
+.\" -
+.\" Copyright (c) 1985, 1989
+.\"    The Regents of the University of California.  All rights reserved.
+.\" 
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\"    notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\"    notice, this list of conditions and the following disclaimer in the
+.\"    documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\"    must display the following acknowledgement:
+.\" 	This product includes software developed by the University of
+.\" 	California, Berkeley and its contributors.
+.\" 4. Neither the name of the University nor the names of its contributors
+.\"    may be used to endorse or promote products derived from this software
+.\"    without specific prior written permission.
+.\" 
+.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+.\" SUCH DAMAGE.
+.\" -
+.\" Portions Copyright (c) 1993 by Digital Equipment Corporation.
+.\" 
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies, and that
+.\" the name of Digital Equipment Corporation not be used in advertising or
+.\" publicity pertaining to distribution of the document or software without
+.\" specific, written prior permission.
+.\" 
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
+.\" WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
+.\" OF MERCHANTABILITY AND FITNESS.   IN NO EVENT SHALL DIGITAL EQUIPMENT
+.\" CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
+.\" DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
+.\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
+.\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
+.\" SOFTWARE.
+.\" -
+.\" --Copyright--
+.\"
+.\"	@(#)nslookup.8	5.3 (Berkeley) 6/24/90
+.\"
+.Dd June 24, 1990
+.Dt NSLOOKUP 1
+.Os BSD 4
+.Sh NAME
+.Nm nslookup 
+.Nd query Internet name servers interactively
+.Sh SYNOPSIS
+.Nm nslookup
+.Op Fl option Ar ...
+.Op Ar host-to-find | Fl Op Ar server
+.Sh DESCRIPTION
+.Ic Nslookup
+is a program to query Internet domain name servers. 
+.Ic Nslookup 
+has two modes: interactive and non-interactive.
+Interactive mode allows the user to query name servers for
+information about various hosts and domains or to print a list of hosts 
+in a domain. 
+Non-interactive mode is used to print just the name and requested information
+for a host or domain.
+.Sh ARGUMENTS
+Interactive mode is entered in the following cases:
+.Bl -tag -width "a)  " 
+.It a)
+when no arguments are given (the default name server will be used),
+.It b)
+when the first argument is a hyphen (-) and the second argument
+is the host name or Internet address of a name server.
+.El
+.Pp
+Non-interactive mode is used when the name or Internet address 
+of the host to be looked up
+is given as the first argument. The optional second argument specifies
+the host name or address of a name server.
+.Pp
+The options listed under the 
+.Dq Li set 
+command below can be specified in
+the 
+.Pa .nslookuprc 
+file in the user's home directory if they are listed 
+one per line.  Options can also be specified
+on the command line if they precede the arguments and are prefixed with
+a hyphen.  For example, to change the default query type to host information,
+and the initial timeout to 10 seconds, type:
+.Bd -literal -offset indent
+	nslookup -query=hinfo  -timeout=10
+.Ed
+.Sh INTERACTIVE COMMANDS
+Commands may be interrupted at any time by typing a control-C.
+To exit, type a control-D 
+.Pq Dv EOF 
+or type 
+.Li exit .
+The command line length must be less than 256 characters.
+To treat a built-in command as a host name, 
+precede it with an escape character 
+.Pq .&\\ . 
+.Sy N.B.:  An unrecognized command will be interpreted as a host name.
+.Bl -tag -width "lserver" 
+.It Ar host Op Ar server
+Look up information for 
+.Ar host 
+using the current default server or using 
+.Ar server , 
+if specified.
+If 
+.Ar host 
+is an Internet address and the query type is 
+.Dv A 
+or 
+.Dv PTR , 
+the name of the host is returned.
+If 
+.Ar host 
+is a name and does not have a trailing period, the default 
+domain name is appended to the name.  (This behavior depends on the state of the
+.Ic set
+options 
+.Ic domain , srchlist , defname , 
+and 
+.Ic search . )
+.Pp
+To look up a host not in the current domain, append a period to 
+the name.
+.It Ic server Ar domain
+.It Ic lserver Ar domain
+Change the default server to 
+.Ar domain ; 
+.Ic lserver 
+uses the initial server to look up information about 
+.Ar domain ,
+while 
+.Ic server
+uses the current default server. 
+If an authoritative answer can't be found, the names of servers
+that might have the answer are returned.
+.It Ic root
+Changes the default server to the server for the root of the domain name space.
+Currently, the host 
+.Li ns.internic.net 
+is used.
+(This command is a synonym for 
+.Dq Ic lserver ns.internic.net . )
+The name of the root server can be changed with the 
+.Dq Ic set root 
+command.
+.It Xo Ic finger Op Ar name 
+.Op Ic > Ar filename
+.Xc
+.It Xo Ic finger Op Ar name 
+.Op Ic >> Ar filename
+.Xc
+Connects with the finger server on the current host. 
+The current host is defined when a previous lookup for a host
+was successful and returned address information (see the 
+.Dq Ic set querytype=A 
+command).
+The 
+.Ar name 
+is optional. 
+.Ic > 
+and 
+.Ic >> 
+can be used to redirect output in the usual manner.
+.It Xo Ic ls Op Ar option 
+.Ar domain Op Ic > Ar filename
+.Xc
+.It Xo Ic ls Op Ar option 
+.Ar domain Op Ic >> Ar filename
+.Xc
+List the information available for 
+.Ar domain , 
+optionally creating or appending to 
+.Ar filename .
+The default output contains host names and their Internet addresses. 
+.Ar Option 
+can be one of the following:
+.Bl -tag -width "-a  "
+.It Fl t Ar querytype
+lists all records of the specified type (see 
+.Ar querytype 
+below).
+.It Fl a
+lists aliases of hosts in the domain;
+synonym for 
+.Dq Fl t Dv CNAME .
+.It Fl d
+lists all records for the domain;
+synonym for 
+.Dq Fl t Dv ANY .
+.It Fl h
+lists CPU and operating system information for the domain;
+synonym for 
+.Dq Fl t Dv HINFO .
+.It Fl s
+lists well-known services of hosts in the domain;
+synonym for 
+.Dq Fl t Dv WKS .
+.El
+.Pp
+When output is directed to a file, hash marks are printed for every
+50 records received from the server.
+.It Ic view Ar filename
+Sorts and lists the output of previous 
+.Ic ls 
+command(s) with 
+.Xr more @CMD_EXT@ .
+.It Ic help
+.It Ic ?
+Prints a brief summary of commands.
+.It Ic exit
+Exits the program.
+.It Xo Ic set Ar keyword 
+.Ns Op = Ns Ar value
+.Xc
+This command is used to change state information that affects the lookups.
+Valid keywords are:
+.Bl -tag -width "class=v"
+.It Ic all
+Prints the current values of the frequently-used options to 
+.Ic set .
+Information about the  current default server and host is also printed.
+.It Ic class= Ns Ar value
+Change the query class to one of:
+.Bl -tag -width "HESIOD  "
+.It Dv IN
+the Internet class
+.It Dv CHAOS
+the Chaos class
+.It Dv HESIOD
+the MIT Athena Hesiod class
+.It Dv ANY
+wildcard (any of the above)
+.El
+.Pp
+The class specifies the protocol group of the information.
+.Pp
+(Default = 
+.Dv IN ; 
+abbreviation = 
+.Ic cl )
+.It Xo Op Ic no 
+.Ns Ic debug
+.Xc
+Turn debugging mode on.  A lot more information is printed about the
+packet sent to the server and the resulting answer.
+.Pp
+(Default = 
+.Ic nodebug ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic deb )
+.Xc
+.It Xo Op Ic no 
+.Ns Ic d2
+.Xc
+Turn exhaustive debugging mode on.
+Essentially all fields of every packet are printed.
+.Pp
+(Default = 
+.Ic nod2 )
+.It Ic domain= Ns Ar name
+Change the default domain name to 
+.Ar name . 
+The default domain name is appended to a lookup request depending on the
+state of the 
+.Ic defname 
+and 
+.Ic search 
+options.
+The domain search list contains the parents of the default domain if it has 
+at least two components in its name. 
+For example, if the default domain
+is CC.Berkeley.EDU, the search list is CC.Berkeley.EDU and Berkeley.EDU.
+Use the 
+.Dq Ic set srchlist 
+command to specify a different list.
+Use the 
+.Dq Ic set all 
+command to display the list.
+.Pp
+(Default = value from 
+.Xr hostname @CMD_EXT@ , 
+.Pa /etc/resolv.conf ,
+or 
+.Ev LOCALDOMAIN;
+abbreviation = 
+.Ic do )
+.It Ic srchlist= Ns Ar name1/name2/...
+Change the default domain name to 
+.Ar name1 
+and the domain search list
+to 
+.Ar name1 , name2 , 
+etc.  A maximum of 6 names separated by slashes (/)
+can be specified.
+For example,
+.Bd -literal -offset indent
+set srchlist=lcs.MIT.EDU/ai.MIT.EDU/MIT.EDU
+.Ed
+.Pp
+sets the domain to lcs.MIT.EDU and the search list to the three names.
+This command overrides the
+default domain name and search list of the 
+.Dq Ic set domain 
+command.
+Use the 
+.Dq Ic set all 
+command to display the list.
+.Pp
+(Default = value based on 
+.Xr hostname @CMD_EXT@ , 
+.Pa /etc/resolv.conf ,
+or 
+.Ev LOCALDOMAIN;
+abbreviation = 
+.Ic srchl )
+.It Xo Op Ic no
+.Ns Ic defname
+.Xc
+If set, append the default domain name to a single-component lookup request 
+(i.e., one that does not contain a period).
+.Pp
+(Default = 
+.Ic defname ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic defname )
+.Xc
+.It Xo Op Ic no 
+.Ns Ic search
+.Xc
+If the lookup request contains at least one period but 
+.Em doesn't 
+end with a trailing period, append the domain names in the domain search list
+to the request until an answer is received.
+.Pp
+(Default = 
+.Ic search ; 
+abbreviation = 
+.Xo Op Ic no 
+.Ns Ic sea )
+.Xc
+.It Ic port= Ns Ar value
+Change the default TCP/UDP name server port to 
+.Ar value .
+.Pp
+(Default = 53; 
+abbreviation = 
+.Ic \&po )
+.It Ic querytype= Ns Ar value
+.It Ic type= Ns Ar value
+Change the type of information query to one of:
+.Bl -tag -width "HINFO   "
+.It Dv A
+the host's Internet address.
+.It Dv CNAME
+the canonical name for an alias.
+.It Dv HINFO
+the host CPU and operating system type.
+.It Dv MINFO
+the mailbox or mail list information.
+.It Dv MX
+the mail exchanger.
+.It Dv NS
+the name server for the named zone.
+.It Dv PTR
+the host name if the query is an Internet address;
+otherwise, the pointer to other information.
+.It Dv SOA
+the domain's 
+.Dq start-of-authority 
+information.
+.It Dv TXT
+the text information.
+.It Dv UINFO
+the user information.
+.It Dv WKS
+the supported well-known services.
+.El
+.Pp
+Other types 
+.Pq Dv ANY, AXFR, MB, MD, MF, NULL 
+are described in the RFC-1035 document.
+.Pp
+(Default = 
+.Dv A ; 
+abbreviations = 
+.Ic q , ty )
+.It Xo Op Ic no
+.Ns Ic recurse
+.Xc
+Tell the name server to query other servers if it does not have the
+information.
+.Pp
+(Default = 
+.Ic recurse ; 
+abbreviation =
+.Xo Op Ic no
+.Ns Ic rec )
+.Xc
+.It Ic retry= Ns Ar number
+Set the number of retries to 
+.Ar number .
+When a reply to a request is not received within a certain 
+amount of time (changed with 
+.Dq Ic set timeout ) , 
+the timeout period is doubled and the request is resent. 
+The retry value controls how many times a request is resent before giving up.
+.Pp
+(Default = 4, abbreviation = 
+.Ic ret )
+.It Ic root= Ns Ar host
+Change the name of the root server to 
+.Ar host . 
+This affects the 
+.Dq Ic root 
+command. 
+.Pp
+(Default = 
+.Ic ns.internic.net. ;
+abbreviation = 
+.Ic ro )
+.It Ic timeout= Ns Ar number
+Change the initial timeout interval for waiting for a reply to 
+.Ar number 
+seconds. Each retry doubles the timeout period.
+.Pp
+(Default = 5 seconds; abbreviation = 
+.Ic ti )
+.It Xo Op Ic no
+.Ns Ic vc
+.Xc
+Always use a virtual circuit when sending requests to the server.
+.Pp
+(Default = 
+.Ic novc ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic v )
+.Xc
+.It Xo Op Ic no
+.Ns Ic ignoretc
+.Xc 
+Ignore packet truncation errors.
+.Pp
+(Default = 
+.Ic noignoretc ; 
+abbreviation = 
+.Xo Op Ic no
+.Ns Ic ig )
+.Xc 
+.El
+.El
+.Sh DIAGNOSTICS
+If the lookup request was not successful, an error message is printed.
+Possible errors are:
+.Bl -tag -width "Timed"
+.It Li Timed out
+The server did not respond to a request after a certain amount of
+time (changed with 
+.Dq Ic set timeout= Ns Ar value ) 
+and a certain number of retries (changed with 
+.Dq Ic set retry= Ns Ar value ) .
+.It Li \&No response from server
+No name server is running on the server machine.
+.It Li \&No records
+The server does not have resource records of the current query type for the
+host, although the host name is valid.
+The query type is specified with the 
+.Dq Ic set querytype 
+command.
+.It Li Non-existent domain
+The host or domain name does not exist.
+.It Li Connection refused
+.It Li Network is unreachable
+The connection to the name or finger server could not be made 
+at the current time.
+This error commonly occurs with 
+.Ic ls 
+and 
+.Ic finger 
+requests. 
+.It Li Server failure
+The name server found an internal inconsistency in its database
+and could not return a valid answer.
+.It Li Refused
+The name server refused to service the request.
+.It Li Format error
+The name server found that the request packet was not in the proper format.
+It may indicate an error in 
+.Nm nslookup .
+.El
+.Sh FILES
+.Bl -tag -width "/usr/share/misc/nslookup.helpXXX" -compact
+.It Pa /etc/resolv.conf
+initial domain name and name server addresses
+.It Pa $HOME/.nslookuprc
+user's initial options
+.It Pa /usr/share/misc/nslookup.help
+summary of commands
+.El
+.Sh ENVIRONMENT
+.Bl -tag -width "HOSTALIASESXXXX" -compact
+.It Ev HOSTALIASES
+file containing host aliases
+.It Ev LOCALDOMAIN
+overrides default domain
+.El
+.Sh SEE ALSO
+.Xr @INDOT@named @SYS_OPS_EXT@ ,
+.Xr resolver @LIB_NETWORK_EXT@ , 
+.Xr resolver @FORMAT_EXT@ ;
+RFC-1034,
+.Dq Domain Names - Concepts and Facilities ;
+RFC-1035,
+.Dq Domain Names - Implementation and Specification .
+.Sh AUTHOR
+Andrew Cherenson
diff --git a/debian/patches/0001-non-linux.diff b/debian/patches/0001-non-linux.diff
new file mode 100644
index 0000000..9a5c95f
--- /dev/null
+++ b/debian/patches/0001-non-linux.diff
@@ -0,0 +1,42 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:53 +0000
+Subject: _non-linux
+
+    FTBFS on kfreebsd, hurd
+
+    Addresses-Debian-Bug: 741285, 746540
+    Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ configure.in | 5 ++---
+ 1 file changed, 2 insertions(+), 3 deletions(-)
+
+diff --git a/configure.in b/configure.in
+index 9aa7e2d..bf028fe 100644
+--- a/configure.in
++++ b/configure.in
+@@ -462,7 +462,7 @@ case "$host" in
+ 	# as it breaks how the two halves (Basic and Advanced) of the IPv6
+ 	# Socket API were designed to be used but we have to live with it.
+ 	# Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API.
+-	*-linux* | *-kfreebsd*-gnu*)
++	*-linux* | *-kfreebsd*-gnu* | *-gnu*)
+ 		STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE"
+ 		CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+ 		;;
+@@ -1327,7 +1327,7 @@ then
+ 		# LinuxThreads requires some changes to the way we
+ 		# deal with signals.
+ 		#
+-		*-linux*)
++		*-linux*|*-kfreebsd*-gnu)
+ 			AC_DEFINE(HAVE_LINUXTHREADS)
+ 			;;
+ 		#
+@@ -2780,7 +2780,6 @@ case "$host" in
+ 		;;
+ 	*)
+ 		AC_CHECK_LIB(socket, socket)
+-		AC_CHECK_LIB(nsl, inet_addr)
+ 		;;
+ esac
+ 
diff --git a/debian/patches/0002-multiarch.diff b/debian/patches/0002-multiarch.diff
new file mode 100644
index 0000000..3ba24f4
--- /dev/null
+++ b/debian/patches/0002-multiarch.diff
@@ -0,0 +1,29 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:53 +0000
+Subject: _multiarch
+
+---
+ isc-config.sh.in | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+diff --git a/isc-config.sh.in b/isc-config.sh.in
+index a8a0a89..1e7903e 100644
+--- a/isc-config.sh.in
++++ b/isc-config.sh.in
+@@ -13,7 +13,6 @@ prefix=@prefix@
+ exec_prefix=@exec_prefix@
+ exec_prefix_set=
+ includedir=@includedir@
+-libdir=@libdir@
+ 
+ usage()
+ {
+@@ -132,7 +131,7 @@ if test x"$echo_libs" = x"true"; then
+ 	if test x"${exec_prefix_set}" = x"true"; then
+ 		libs="-L${exec_prefix}/lib"
+ 	else
+-		libs="-L${libdir}"
++		libs=
+ 	fi
+ 	if test x"$libirs" = x"true" ; then
+ 		libs="$libs -lirs"
diff --git a/debian/patches/0003-min-cache-ttl.diff b/debian/patches/0003-min-cache-ttl.diff
new file mode 100644
index 0000000..13453fd
--- /dev/null
+++ b/debian/patches/0003-min-cache-ttl.diff
@@ -0,0 +1,254 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _min-cache-ttl
+
+    Add min-cache-ttl and min-ncache-ttl keywords
+
+    Sometimes it is useful to set a 'floor' on the TTL for records
+    to be cached.  Some sites like to use ridiculously low TTLs for
+    some reason, and that often is not compatible with slow links.
+
+    Signed-off-by: Michael Milligan <milli@acmeps.com>
+    Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ bin/named/config.c           |  2 ++
+ bin/named/server.c           | 12 ++++++++++++
+ bin/tests/named.conf         |  2 ++
+ lib/dns/include/dns/ncache.h |  6 ++++--
+ lib/dns/include/dns/view.h   |  2 ++
+ lib/dns/ncache.c             | 18 ++++++++++++------
+ lib/dns/resolver.c           | 22 ++++++++++++++++------
+ lib/isccfg/namedconf.c       |  2 ++
+ 8 files changed, 52 insertions(+), 14 deletions(-)
+
+diff --git a/bin/named/config.c b/bin/named/config.c
+index 2732a8f..d22ee4b 100644
+--- a/bin/named/config.c
++++ b/bin/named/config.c
+@@ -182,6 +182,8 @@ options {\n\
+ 	max-recursion-depth 7;\n\
+ 	max-recursion-queries 75;\n\
+ 	message-compression yes;\n\
++	min-ncache-ttl 0; /* 0 hours */\n\
++	min-cache-ttl 0; /* 0 seconds */\n\
+ #	min-roots <obsolete>;\n\
+ 	minimal-any false;\n\
+ 	minimal-responses false;\n\
+diff --git a/bin/named/server.c b/bin/named/server.c
+index 7f87ccf..149458e 100644
+--- a/bin/named/server.c
++++ b/bin/named/server.c
+@@ -3706,6 +3706,18 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
+ 	if (view->maxncachettl > 7 * 24 * 3600)
+ 		view->maxncachettl = 7 * 24 * 3600;
+ 
++	obj = NULL;
++	result = ns_config_get(maps, "min-cache-ttl", &obj);
++	INSIST(result == ISC_R_SUCCESS);
++	view->mincachettl = cfg_obj_asuint32(obj);
++
++	obj = NULL;
++	result = ns_config_get(maps, "min-ncache-ttl", &obj);
++	INSIST(result == ISC_R_SUCCESS);
++	view->minncachettl = cfg_obj_asuint32(obj);
++	if (view->minncachettl > 7 * 24 * 3600)
++		view->minncachettl = 7 * 24 * 3600;
++
+ 	/*
+ 	 * Configure the view's cache.
+ 	 *
+diff --git a/bin/tests/named.conf b/bin/tests/named.conf
+index 5673e98..34435b6 100644
+--- a/bin/tests/named.conf
++++ b/bin/tests/named.conf
+@@ -46,6 +46,7 @@ options {
+ 	memstatistics-file "named.memstats";	// _PATH_MEMSTATS
+ 
+ 	max-cache-ttl 999;
++	min-cache-ttl 666;
+ 	auth-nxdomain yes;		// always set AA on NXDOMAIN.
+ 					// don't set this to 'no' unless
+ 					// you know what you're doing -- older
+@@ -148,6 +149,7 @@ options {
+ 	min-refresh-time 777;
+ 
+ 	max-ncache-ttl 333;
++	min-ncache-ttl 222;
+ 	min-roots 15;
+ 	serial-queries 34;
+ 
+diff --git a/lib/dns/include/dns/ncache.h b/lib/dns/include/dns/ncache.h
+index 2942c26..c2e1e7b 100644
+--- a/lib/dns/include/dns/ncache.h
++++ b/lib/dns/include/dns/ncache.h
+@@ -56,12 +56,14 @@ ISC_LANG_BEGINDECLS
+ 
+ isc_result_t
+ dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+-	       dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++	       dns_rdatatype_t covers, isc_stdtime_t now,
++	       dns_ttl_t minttl, dns_ttl_t maxttl,
+ 	       dns_rdataset_t *addedrdataset);
+ isc_result_t
+ dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
+ 		     dns_dbnode_t *node, dns_rdatatype_t covers,
+-		     isc_stdtime_t now, dns_ttl_t maxttl,
++		     isc_stdtime_t now,
++		     dns_ttl_t minttl, dns_ttl_t maxttl,
+ 		     bool optout, dns_rdataset_t *addedrdataset);
+ /*%<
+  * Convert the authority data from 'message' into a negative cache
+diff --git a/lib/dns/include/dns/view.h b/lib/dns/include/dns/view.h
+index 8e21298..3b3ecc9 100644
+--- a/lib/dns/include/dns/view.h
++++ b/lib/dns/include/dns/view.h
+@@ -153,6 +153,8 @@ struct dns_view {
+ 	bool			sendcookie;
+ 	dns_ttl_t			maxcachettl;
+ 	dns_ttl_t			maxncachettl;
++	dns_ttl_t			mincachettl;
++	dns_ttl_t			minncachettl;
+ 	uint32_t			nta_lifetime;
+ 	uint32_t			nta_recheck;
+ 	char				*nta_file;
+diff --git a/lib/dns/ncache.c b/lib/dns/ncache.c
+index c5078de..9cde098 100644
+--- a/lib/dns/ncache.c
++++ b/lib/dns/ncache.c
+@@ -45,7 +45,8 @@
+ 
+ static isc_result_t
+ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+-	  dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++	  dns_rdatatype_t covers, isc_stdtime_t now,
++	  dns_ttl_t minttl, dns_ttl_t maxttl,
+ 	  bool optout, bool secure,
+ 	  dns_rdataset_t *addedrdataset);
+ 
+@@ -95,26 +96,29 @@ copy_rdataset(dns_rdataset_t *rdataset, isc_buffer_t *buffer) {
+ 
+ isc_result_t
+ dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+-	       dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++	       dns_rdatatype_t covers, isc_stdtime_t now,
++	       dns_ttl_t minttl, dns_ttl_t maxttl,
+ 	       dns_rdataset_t *addedrdataset)
+ {
+-	return (addoptout(message, cache, node, covers, now, maxttl,
++	return (addoptout(message, cache, node, covers, now, minttl, maxttl,
+ 			  false, false, addedrdataset));
+ }
+ 
+ isc_result_t
+ dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
+ 		     dns_dbnode_t *node, dns_rdatatype_t covers,
+-		     isc_stdtime_t now, dns_ttl_t maxttl,
++		     isc_stdtime_t now,
++		     dns_ttl_t minttl, dns_ttl_t maxttl,
+ 		     bool optout, dns_rdataset_t *addedrdataset)
+ {
+-	return (addoptout(message, cache, node, covers, now, maxttl,
++	return (addoptout(message, cache, node, covers, now, minttl, maxttl,
+ 			  optout, true, addedrdataset));
+ }
+ 
+ static isc_result_t
+ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+-	  dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++	  dns_rdatatype_t covers, isc_stdtime_t now,
++	  dns_ttl_t minttl, dns_ttl_t maxttl,
+ 	  bool optout, bool secure,
+ 	  dns_rdataset_t *addedrdataset)
+ {
+@@ -181,6 +185,8 @@ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+ 				    type == dns_rdatatype_nsec3) {
+ 					if (ttl > rdataset->ttl)
+ 						ttl = rdataset->ttl;
++					if (ttl < minttl)
++						ttl = minttl;
+ 					if (trust > rdataset->trust)
+ 						trust = rdataset->trust;
+ 					/*
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 0abf4de..1d76504 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -564,7 +564,9 @@ static bool fctx_unlink(fetchctx_t *fctx);
+ static isc_result_t ncache_adderesult(dns_message_t *message,
+ 				      dns_db_t *cache, dns_dbnode_t *node,
+ 				      dns_rdatatype_t covers,
+-				      isc_stdtime_t now, dns_ttl_t maxttl,
++				      isc_stdtime_t now,
++				      dns_ttl_t minttl,
++				      dns_ttl_t maxttl,
+ 				      bool optout,
+ 				      bool secure,
+ 				      dns_rdataset_t *ardataset,
+@@ -5015,7 +5017,7 @@ validated(isc_task_t *task, isc_event_t *event) {
+ 			ttl = 0;
+ 
+ 		result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
+-					   covers, now, ttl, vevent->optout,
++					   covers, now, fctx->res->view->minncachettl, ttl, vevent->optout,
+ 					   vevent->secure, ardataset, &eresult);
+ 		if (result != ISC_R_SUCCESS)
+ 			goto noanswer_response;
+@@ -5480,6 +5482,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adbaddrinfo_t *addrinfo,
+ 			rdataset->ttl = res->view->maxcachettl;
+ 		}
+ 
++		/*
++		 * Enforce configured minimum cache TTL.
++		 */
++		if (rdataset->ttl < res->view->mincachettl)
++			rdataset->ttl = res->view->mincachettl;
++
+ 		/*
+ 		 * Mark the rdataset as being prefetch eligible.
+ 		 */
+@@ -5868,7 +5876,8 @@ cache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo, isc_stdtime_t now)
+  */
+ static isc_result_t
+ ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+-		  dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++		  dns_rdatatype_t covers, isc_stdtime_t now,
++		  dns_ttl_t minttl, dns_ttl_t maxttl,
+ 		  bool optout, bool secure,
+ 		  dns_rdataset_t *ardataset, isc_result_t *eresultp)
+ {
+@@ -5881,10 +5890,10 @@ ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+ 	}
+ 	if (secure)
+ 		result = dns_ncache_addoptout(message, cache, node, covers,
+-					      now, maxttl, optout, ardataset);
++					      now, minttl, maxttl, optout, ardataset);
+ 	else
+ 		result = dns_ncache_add(message, cache, node, covers, now,
+-					maxttl, ardataset);
++					minttl, maxttl, ardataset);
+ 	if (result == DNS_R_UNCHANGED || result == ISC_R_SUCCESS) {
+ 		/*
+ 		 * If the cache now contains a negative entry and we
+@@ -6059,7 +6068,8 @@ ncache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo,
+ 		ttl = 0;
+ 
+ 	result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
+-				   covers, now, ttl, false,
++				   covers, now, ttl,
++				   fctx->res->view->minncachettl, false,
+ 				   false, ardataset, &eresult);
+ 	if (result != ISC_R_SUCCESS)
+ 		goto unlock;
+diff --git a/lib/isccfg/namedconf.c b/lib/isccfg/namedconf.c
+index cd797a6..fdaf8ff 100644
+--- a/lib/isccfg/namedconf.c
++++ b/lib/isccfg/namedconf.c
+@@ -1780,6 +1780,8 @@ view_clauses[] = {
+ 	{ "max-recursion-queries", &cfg_type_uint32, 0 },
+ 	{ "max-udp-size", &cfg_type_uint32, 0 },
+ 	{ "message-compression", &cfg_type_boolean, 0 },
++	{ "min-cache-ttl", &cfg_type_uint32, 0 },
++	{ "min-ncache-ttl", &cfg_type_uint32, 0 },
+ 	{ "min-roots", &cfg_type_uint32, CFG_CLAUSEFLAG_NOTIMP },
+ 	{ "minimal-any", &cfg_type_boolean, 0 },
+ 	{ "minimal-responses", &cfg_type_minimal, 0 },
diff --git a/debian/patches/0004-library_paths.diff b/debian/patches/0004-library_paths.diff
new file mode 100644
index 0000000..abc8d66
--- /dev/null
+++ b/debian/patches/0004-library_paths.diff
@@ -0,0 +1,136 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _library_paths
+
+    Makefile.in: be explicit about library paths
+
+    Debian policy requires that all dependent libs be in the .so, not just the
+    immediately depended ones.
+
+    Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ lib/dns/Makefile.in    | 4 +++-
+ lib/irs/Makefile.in    | 4 +++-
+ lib/isc/Makefile.in    | 3 +++
+ lib/isccc/Makefile.in  | 4 +++-
+ lib/isccfg/Makefile.in | 2 +-
+ 5 files changed, 13 insertions(+), 4 deletions(-)
+
+diff --git a/lib/dns/Makefile.in b/lib/dns/Makefile.in
+index 4a8549e..e0fcca4 100644
+--- a/lib/dns/Makefile.in
++++ b/lib/dns/Makefile.in
+@@ -37,7 +37,7 @@ ISCLIBS =	../../lib/isc/libisc.@A@
+ 
+ ISCDEPLIBS =	../../lib/isc/libisc.@A@
+ 
+-LIBS =		@LIBS@
++LIBS =		@LIBS@ -L../../lib/isc -lcrypto
+ 
+ # Alphabetically
+ 
+@@ -155,6 +155,7 @@ libdns.la: ${OBJS}
+ 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libdns.la -rpath ${libdir} \
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} ${ISCLIBS} @DNS_CRYPTO_LIBS@ ${LIBS}
++	ln -sf .libs/libdns.so .
+ 
+ include: gen
+ 	${MAKE} include/dns/enumtype.h
+@@ -206,6 +207,7 @@ clean distclean::
+ newrr::
+ 	rm -f code.h include/dns/enumtype.h include/dns/enumclass.h
+ 	rm -f include/dns/rdatastruct.h
++	rm -f libdns.so
+ 
+ rdata.@O@: include
+ 
+diff --git a/lib/irs/Makefile.in b/lib/irs/Makefile.in
+index fc11447..4bb85b1 100644
+--- a/lib/irs/Makefile.in
++++ b/lib/irs/Makefile.in
+@@ -36,7 +36,7 @@ SRCS =		context.c \
+ 		gai_strerror.c getaddrinfo.c getnameinfo.c \
+ 		resconf.c
+ 
+-LIBS =		@LIBS@
++LIBS =		@LIBS@ -L../../lib/isc -L../../lib/dns -L../../lib/isccfg -lcrypto -lisc -ldns -lisccfg
+ 
+ SUBDIRS =	include
+ TESTDIRS =	@UNITTESTS@
+@@ -61,6 +61,7 @@ libirs.la: ${OBJS} version.@O@
+ 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libirs.la -rpath ${libdir} \
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} version.@O@ ${LIBS}
++	ln -sf .libs/libirs.so .
+ 
+ timestamp: libirs.@A@
+ 	touch timestamp
+@@ -78,3 +79,4 @@ uninstall::
+ 
+ clean distclean::
+ 	rm -f libirs.@A@ libirs.la timestamp
++	rm -f libdns.so
+diff --git a/lib/isc/Makefile.in b/lib/isc/Makefile.in
+index ba53ef1..ba3f013 100644
+--- a/lib/isc/Makefile.in
++++ b/lib/isc/Makefile.in
+@@ -120,12 +120,14 @@ libisc.la: ${OBJS} ${SYMTBLOBJS}
+ 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc.la -rpath ${libdir} \
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} ${SYMTBLOBJS} ${LIBS}
++	ln -sf .libs/libisc.so .
+ 
+ libisc-nosymtbl.la: ${OBJS}
+ 	${LIBTOOL_MODE_LINK} \
+ 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc-nosymtbl.la -rpath ${libdir} \
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} ${LIBS}
++	ln -sf .libs/libisc-nosymtbl.so .
+ 
+ timestamp: libisc.@A@ libisc-nosymtbl.@A@
+ 	touch timestamp
+@@ -144,3 +146,4 @@ uninstall::
+ clean distclean::
+ 	rm -f libisc.@A@ libisc-nosymtbl.@A@ libisc.la \
+ 	libisc-nosymtbl.la timestamp
++	rm -f libisc.so libisc-nosymtbl.so
+diff --git a/lib/isccc/Makefile.in b/lib/isccc/Makefile.in
+index ca88e98..8d875bc 100644
+--- a/lib/isccc/Makefile.in
++++ b/lib/isccc/Makefile.in
+@@ -31,7 +31,7 @@ ISCCCLIBS =	../../lib/isccc/libisccc.@A@
+ ISCDEPLIBS =	../../lib/isc/libisc.@A@
+ ISCCCDEPLIBS =	libisccc.@A@
+ 
+-LIBS =		@LIBS@
++LIBS =		@LIBS@ -L../../lib/isc
+ 
+ SUBDIRS =	include
+ 
+@@ -67,6 +67,7 @@ libisccc.la: ${OBJS}
+ 		${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisccc.la -rpath ${libdir} \
+ 		-version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ 		${OBJS} ${ISCLIBS} ${LIBS}
++	ln -sf .libs/libisccc.so .
+ 
+ timestamp: libisccc.@A@
+ 	touch timestamp
+@@ -82,3 +83,4 @@ uninstall::
+ 
+ clean distclean::
+ 	rm -f libisccc.@A@ timestamp
++	rm -f libisccc.so
+diff --git a/lib/isccfg/Makefile.in b/lib/isccfg/Makefile.in
+index f459bd5..0c42b2a 100644
+--- a/lib/isccfg/Makefile.in
++++ b/lib/isccfg/Makefile.in
+@@ -29,7 +29,7 @@ ISCCFGLIBS =	../../lib/cfg/libisccfg.@A@
+ ISCDEPLIBS =	../../lib/isc/libisc.@A@
+ ISCCFGDEPLIBS =	libisccfg.@A@
+ 
+-LIBS =		@LIBS@
++LIBS =		@LIBS@ -L../dns -L../isc -L../isccc
+ 
+ SUBDIRS =	include
+ TESTDIRS =	@UNITTESTS@
diff --git a/debian/patches/0005-resource_missing_include.diff b/debian/patches/0005-resource_missing_include.diff
new file mode 100644
index 0000000..cc1fe91
--- /dev/null
+++ b/debian/patches/0005-resource_missing_include.diff
@@ -0,0 +1,24 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _resource_missing_include
+
+    lib/isc/unix/resource.c was missing inttypes.h include.
+
+    Addresses-Ubuntu-Bug: 674199
+    Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ lib/isc/unix/resource.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/lib/isc/unix/resource.c b/lib/isc/unix/resource.c
+index 6d5c5aa..a4302c6 100644
+--- a/lib/isc/unix/resource.c
++++ b/lib/isc/unix/resource.c
+@@ -25,6 +25,7 @@
+ #include <isc/util.h>
+ 
+ #ifdef __linux__
++#include <inttypes.h>
+ #include <linux/fs.h>	/* To get the large NR_OPEN. */
+ #endif
+ 
diff --git a/debian/patches/0006-prepare_native_pkcs11.diff b/debian/patches/0006-prepare_native_pkcs11.diff
new file mode 100644
index 0000000..9cd63b6
--- /dev/null
+++ b/debian/patches/0006-prepare_native_pkcs11.diff
@@ -0,0 +1,246 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _prepare_native_pkcs11
+
+---
+ bin/Makefile.in        |  2 +-
+ bin/dnssec/Makefile.in |  2 +-
+ bin/named/Makefile.in  |  2 +-
+ bin/pkcs11/Makefile.in |  6 +++---
+ configure.in           | 51 +++++++++++++++++++++++++++++++++++---------------
+ lib/Makefile.in        |  2 +-
+ make/includes.in       | 10 ++++++++++
+ 7 files changed, 53 insertions(+), 22 deletions(-)
+
+diff --git a/bin/Makefile.in b/bin/Makefile.in
+index f0c504a..ef6bf5f 100644
+--- a/bin/Makefile.in
++++ b/bin/Makefile.in
+@@ -11,7 +11,7 @@ srcdir =	@srcdir@
+ VPATH =		@srcdir@
+ top_srcdir =	@top_srcdir@
+ 
+-SUBDIRS =	named rndc dig delv dnssec tools nsupdate check confgen \
++SUBDIRS =	named named-pkcs11 rndc dig delv dnssec dnssec-pkcs11 tools nsupdate check confgen \
+ 		@NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests
+ TARGETS =
+ 
+diff --git a/bin/dnssec/Makefile.in b/bin/dnssec/Makefile.in
+index 2239ad1..1ded1fa 100644
+--- a/bin/dnssec/Makefile.in
++++ b/bin/dnssec/Makefile.in
+@@ -19,7 +19,7 @@ VERSION=@BIND9_VERSION@
+ 
+ CINCLUDES =	${DNS_INCLUDES} ${ISC_INCLUDES} @DST_OPENSSL_INC@
+ 
+-CDEFINES =	-DVERSION=\"${VERSION}\" @USE_PKCS11@ @PKCS11_ENGINE@ \
++CDEFINES =	-DVERSION=\"${VERSION}\" \
+ 		@CRYPTO@ -DPK11_LIB_LOCATION=\"@PKCS11_PROVIDER@\"
+ CWARNINGS =
+ 
+diff --git a/bin/named/Makefile.in b/bin/named/Makefile.in
+index 1c41397..5e6e84c 100644
+--- a/bin/named/Makefile.in
++++ b/bin/named/Makefile.in
+@@ -47,7 +47,7 @@ CINCLUDES =	-I${srcdir}/include -I${srcdir}/unix/include -I. \
+ 		${ISCCFG_INCLUDES} ${ISCCC_INCLUDES} ${ISC_INCLUDES} \
+ 		${DLZDRIVER_INCLUDES} ${DBDRIVER_INCLUDES} @DST_OPENSSL_INC@
+ 
+-CDEFINES =      @CONTRIB_DLZ@ @USE_PKCS11@ @PKCS11_ENGINE@ @CRYPTO@
++CDEFINES =      @CONTRIB_DLZ@ @CRYPTO@
+ 
+ CWARNINGS =
+ 
+diff --git a/bin/pkcs11/Makefile.in b/bin/pkcs11/Makefile.in
+index ae90616..4bc1256 100644
+--- a/bin/pkcs11/Makefile.in
++++ b/bin/pkcs11/Makefile.in
+@@ -15,13 +15,13 @@ top_srcdir =	@top_srcdir@
+ 
+ @BIND9_MAKE_INCLUDES@
+ 
+-CINCLUDES =	${ISC_INCLUDES}
++CINCLUDES =	${ISC_PKCS11_INCLUDES}
+ 
+ CDEFINES =
+ 
+-ISCLIBS =	../../lib/isc/libisc.@A@ @ISC_OPENSSL_LIBS@
++ISCLIBS =	../../lib/isc-pkcs11/libisc-pkcs11.@A@ @ISC_OPENSSL_LIBS@
+ 
+-ISCDEPLIBS =	../../lib/isc/libisc.@A@
++ISCDEPLIBS =	../../lib/isc-pkcs11/libisc-pkcs11.@A@
+ 
+ DEPLIBS =	${ISCDEPLIBS}
+ 
+diff --git a/configure.in b/configure.in
+index bf028fe..f8603b8 100644
+--- a/configure.in
++++ b/configure.in
+@@ -1109,12 +1109,14 @@ AC_SUBST(USE_GSSAPI)
+ AC_SUBST(DST_GSSAPI_INC)
+ AC_SUBST(DNS_GSSAPI_LIBS)
+ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS"
+ 
+ #
+ # Applications linking with libdns also need to link with these libraries.
+ #
+ 
+ AC_SUBST(DNS_CRYPTO_LIBS)
++AC_SUBST(DNS_CRYPTO_PK11_LIBS)
+ 
+ #
+ # was --with-randomdev specified?
+@@ -1499,11 +1501,6 @@ fi
+ AC_MSG_CHECKING(for OpenSSL library)
+ OPENSSL_WARNING=
+ openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw"
+-if test "yes" = "$want_native_pkcs11"
+-then
+-	use_openssl="native_pkcs11"
+-	AC_MSG_RESULT(use of native PKCS11 instead)
+-fi
+ 
+ if test "auto" = "$use_openssl"
+ then
+@@ -1516,6 +1513,7 @@ then
+ 		fi
+ 	done
+ fi
++CRYPTO_PK11=""
+ OPENSSL_ECDSA=""
+ OPENSSL_GOST=""
+ OPENSSL_ED25519=""
+@@ -1537,11 +1535,10 @@ case "$with_gost" in
+ 		;;
+ esac
+ 
+-case "$use_openssl" in
+-	native_pkcs11)
+-		AC_MSG_RESULT(disabled because of native PKCS11)
++if test "$want_native_pkcs11" = "yes"
++then
+ 		DST_OPENSSL_INC=""
+-		CRYPTO="-DPKCS11CRYPTO"
++		CRYPTO_PK11="-DPKCS11CRYPTO"
+ 		OPENSSLECDSALINKOBJS=""
+ 		OPENSSLECDSALINKSRCS=""
+ 		OPENSSLEDDSALINKOBJS=""
+@@ -1550,7 +1547,9 @@ case "$use_openssl" in
+ 		OPENSSLGOSTLINKSRCS=""
+ 		OPENSSLLINKOBJS=""
+ 		OPENSSLLINKSRCS=""
+-		;;
++fi
++
++case "$use_openssl" in
+ 	no)
+ 		AC_MSG_RESULT(no)
+ 		DST_OPENSSL_INC=""
+@@ -1580,11 +1579,6 @@ case "$use_openssl" in
+ If you don't want OpenSSL, use --without-openssl])
+ 		;;
+ 	*)
+-		if test "yes" = "$want_native_pkcs11"
+-		then
+-			AC_MSG_RESULT()
+-			AC_MSG_ERROR([OpenSSL and native PKCS11 cannot be used together.])
+-		fi
+ 		if test "yes" = "$use_openssl"
+ 		then
+ 			# User did not specify a path - guess it
+@@ -2007,6 +2001,7 @@ AC_SUBST(OPENSSL_ED25519)
+ AC_SUBST(OPENSSL_GOST)
+ 
+ DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS"
+ 
+ ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES"
+ if test "yes" = "$with_aes"
+@@ -2326,6 +2321,7 @@ esac
+ AC_SUBST(PKCS11LINKOBJS)
+ AC_SUBST(PKCS11LINKSRCS)
+ AC_SUBST(CRYPTO)
++AC_SUBST(CRYPTO_PK11)
+ AC_SUBST(PKCS11_ECDSA)
+ AC_SUBST(PKCS11_GOST)
+ AC_SUBST(PKCS11_ED25519)
+@@ -5331,8 +5327,11 @@ AC_CONFIG_FILES([
+ 	bin/delv/Makefile
+ 	bin/dig/Makefile
+ 	bin/dnssec/Makefile
++	bin/dnssec-pkcs11/Makefile
+ 	bin/named/Makefile
+ 	bin/named/unix/Makefile
++	bin/named-pkcs11/Makefile
++	bin/named-pkcs11/unix/Makefile
+ 	bin/nsupdate/Makefile
+ 	bin/pkcs11/Makefile
+ 	bin/python/Makefile
+@@ -5406,6 +5405,10 @@ AC_CONFIG_FILES([
+ 	lib/dns/include/dns/Makefile
+ 	lib/dns/include/dst/Makefile
+ 	lib/dns/tests/Makefile
++	lib/dns-pkcs11/Makefile
++	lib/dns-pkcs11/include/Makefile
++	lib/dns-pkcs11/include/dns/Makefile
++	lib/dns-pkcs11/include/dst/Makefile
+ 	lib/irs/Makefile
+ 	lib/irs/include/Makefile
+ 	lib/irs/include/irs/Makefile
+@@ -5430,6 +5433,24 @@ AC_CONFIG_FILES([
+ 	lib/isc/unix/include/Makefile
+ 	lib/isc/unix/include/isc/Makefile
+ 	lib/isc/unix/include/pkcs11/Makefile
++	lib/isc-pkcs11/$arch/Makefile
++	lib/isc-pkcs11/$arch/include/Makefile
++	lib/isc-pkcs11/$arch/include/isc/Makefile
++	lib/isc-pkcs11/$thread_dir/Makefile
++	lib/isc-pkcs11/$thread_dir/include/Makefile
++	lib/isc-pkcs11/$thread_dir/include/isc/Makefile
++	lib/isc-pkcs11/Makefile
++	lib/isc-pkcs11/include/Makefile
++	lib/isc-pkcs11/include/isc/Makefile
++	lib/isc-pkcs11/include/isc/platform.h
++	lib/isc-pkcs11/include/pk11/Makefile
++	lib/isc-pkcs11/include/pkcs11/Makefile
++	lib/isc-pkcs11/tests/Makefile
++	lib/isc-pkcs11/nls/Makefile
++	lib/isc-pkcs11/unix/Makefile
++	lib/isc-pkcs11/unix/include/Makefile
++	lib/isc-pkcs11/unix/include/isc/Makefile
++	lib/isc-pkcs11/unix/include/pkcs11/Makefile
+ 	lib/isccc/Makefile
+ 	lib/isccc/include/Makefile
+ 	lib/isccc/include/isccc/Makefile
+diff --git a/lib/Makefile.in b/lib/Makefile.in
+index 81270a0..bcb5312 100644
+--- a/lib/Makefile.in
++++ b/lib/Makefile.in
+@@ -15,7 +15,7 @@ top_srcdir =	@top_srcdir@
+ # Attempt to disable parallel processing.
+ .NOTPARALLEL:
+ .NO_PARALLEL:
+-SUBDIRS =	isc isccc dns isccfg bind9 lwres irs samples
++SUBDIRS =	isc isc-pkcs11 isccc dns dns-pkcs11 isccfg bind9 lwres irs samples
+ TARGETS =
+ 
+ @BIND9_MAKE_RULES@
+diff --git a/make/includes.in b/make/includes.in
+index fa86ad1..3cfbe9f 100644
+--- a/make/includes.in
++++ b/make/includes.in
+@@ -43,3 +43,13 @@ BIND9_INCLUDES = @BIND9_BIND9_BUILDINCLUDE@ \
+ 
+ TEST_INCLUDES = \
+ 	-I${top_srcdir}/lib/tests/include
++
++ISC_PKCS11_INCLUDES = @BIND9_ISC_BUILDINCLUDE@ \
++	-I${top_srcdir}/lib/isc-pkcs11 \
++	-I${top_srcdir}/lib/isc-pkcs11/include \
++	-I${top_srcdir}/lib/isc-pkcs11/unix/include \
++	-I${top_srcdir}/lib/isc-pkcs11/@ISC_THREAD_DIR@/include \
++	-I${top_srcdir}/lib/isc-pkcs11/@ISC_ARCH_DIR@/include
++
++DNS_PKCS11_INCLUDES = @BIND9_DNS_BUILDINCLUDE@ \
++	-I${top_srcdir}/lib/dns-pkcs11/include
diff --git a/debian/patches/0007-ctxstart_no_sighandling.diff b/debian/patches/0007-ctxstart_no_sighandling.diff
new file mode 100644
index 0000000..9304fea
--- /dev/null
+++ b/debian/patches/0007-ctxstart_no_sighandling.diff
@@ -0,0 +1,22 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _ctxstart_no_sighandling
+
+---
+ lib/isc/unix/app.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/lib/isc/unix/app.c b/lib/isc/unix/app.c
+index 7e5a0ee..8574141 100644
+--- a/lib/isc/unix/app.c
++++ b/lib/isc/unix/app.c
+@@ -262,6 +262,9 @@ isc__app_ctxstart(isc_appctx_t *ctx0) {
+ 	ctx->want_reload = false;
+ 	ctx->blocked = false;
+ 
++	if (!isc_bind9)
++		return (ISC_R_SUCCESS);
++
+ #ifndef HAVE_SIGWAIT
+ 	/*
+ 	 * Install do-nothing handlers for SIGINT and SIGTERM.
diff --git a/debian/patches/0008-reproducible_build.diff b/debian/patches/0008-reproducible_build.diff
new file mode 100644
index 0000000..94d8b58
--- /dev/null
+++ b/debian/patches/0008-reproducible_build.diff
@@ -0,0 +1,68 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _reproducible_build
+
+---
+ lib/dns/gen.c | 35 +++++++++++++++++++++++++++++++++--
+ 1 file changed, 33 insertions(+), 2 deletions(-)
+
+diff --git a/lib/dns/gen.c b/lib/dns/gen.c
+index 2a3b94b..b26a509 100644
+--- a/lib/dns/gen.c
++++ b/lib/dns/gen.c
+@@ -32,6 +32,8 @@
+ #include <stdlib.h>
+ #include <string.h>
+ #include <time.h>
++#include <errno.h>
++#include <limits.h>
+ 
+ #ifdef WIN32
+ #include "gen-win32.h"
+@@ -528,6 +530,9 @@ main(int argc, char **argv) {
+ 	char *prefix = NULL;
+ 	char *suffix = NULL;
+ 	char *file = NULL;
++	char *source_date_epoch;
++	unsigned long long epoch;
++	char *endptr;
+ 	isc_dir_t dir;
+ 
+ 	for (i = 0; i < TYPENAMES; i++)
+@@ -618,8 +623,34 @@ main(int argc, char **argv) {
+ 	INSIST(n > 0 && (unsigned)n < sizeof(srcdir));
+ 	sd(0, "", buf, filetype);
+ 
+-	if (time(&now) != -1) {
+-		if ((tm = localtime(&now)) != NULL && tm->tm_year > 104) {
++	source_date_epoch = getenv("SOURCE_DATE_EPOCH");
++	if (source_date_epoch) {
++		errno = 0;
++		epoch = strtoull(source_date_epoch, &endptr, 10);
++		if ((errno == ERANGE && (epoch == ULLONG_MAX || epoch == 0))
++				|| (errno != 0 && epoch == 0)) {
++			fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: strtoull: %s\n", strerror(errno));
++			exit(EXIT_FAILURE);
++		}
++		if (endptr == source_date_epoch) {
++			fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: No digits were found: %s\n", endptr);
++			exit(EXIT_FAILURE);
++		}
++		if (*endptr != '\0') {
++			fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: Trailing garbage: %s\n", endptr);
++			exit(EXIT_FAILURE);
++		}
++		if (epoch > ULONG_MAX) {
++			fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: value must be smaller than or equal to: %lu but was found to be: %llu \n", ULONG_MAX, epoch);
++			exit(EXIT_FAILURE);
++		}
++		now = epoch;
++	} else {
++		time(&now);
++	}
++
++	if (now != -1) {
++		if ((tm = gmtime(&now)) != NULL && tm->tm_year > 104) {
+ 			n = snprintf(year, sizeof(year), "-%d",
+ 				     tm->tm_year + 1900);
+ 			INSIST(n > 0 && (unsigned)n < sizeof(year));
diff --git a/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch
new file mode 100644
index 0000000..d64e51d
--- /dev/null
+++ b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch
@@ -0,0 +1,24 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:55 +0000
+Subject: Add_--install-layout=deb_to_setup.py_call
+
+---
+ bin/python/Makefile.in | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in
+index aa678d4..a58d72f 100644
+--- a/bin/python/Makefile.in
++++ b/bin/python/Makefile.in
+@@ -56,9 +56,9 @@ install:: ${TARGETS} installdirs
+ 	${INSTALL_DATA} ${srcdir}/dnssec-keymgr.8 ${DESTDIR}${mandir}/man8
+ 	if test -n "${PYTHON}" ; then \
+ 		if test -n "${DESTDIR}" ; then \
+-			${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++			${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \
+ 		else \
+-			${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++			${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \
+ 		fi ; \
+ 		rm -rf build ; \
+ 	fi
diff --git a/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff
new file mode 100644
index 0000000..4455d46
--- /dev/null
+++ b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff
@@ -0,0 +1,24 @@
+From: BIND 9 Package <bind9@package.debian.org>
+Date: Fri, 31 Aug 2018 08:42:51 +0000
+Subject: skip-rtld-deepbind-for-dyndb
+
+https://bugzilla.redhat.com/show_bug.cgi?id=1410433
+https://bugs.launchpad.net/bugs/1769440
+---
+ lib/dns/dyndb.c | 3 ---
+ 1 file changed, 3 deletions(-)
+
+diff --git a/lib/dns/dyndb.c b/lib/dns/dyndb.c
+index 93ad795..11ba0f5 100644
+--- a/lib/dns/dyndb.c
++++ b/lib/dns/dyndb.c
+@@ -133,9 +133,6 @@ load_library(isc_mem_t *mctx, const char *filename, const char *instname,
+ 		      instname, filename);
+ 
+ 	flags = RTLD_NOW|RTLD_LOCAL;
+-#ifdef RTLD_DEEPBIND
+-	flags |= RTLD_DEEPBIND;
+-#endif
+ 
+ 	handle = dlopen(filename, flags);
+ 	if (handle == NULL)
diff --git a/debian/patches/0011-keymgr-dont-immediately-delete.diff b/debian/patches/0011-keymgr-dont-immediately-delete.diff
new file mode 100644
index 0000000..e0a9cb8
--- /dev/null
+++ b/debian/patches/0011-keymgr-dont-immediately-delete.diff
@@ -0,0 +1,236 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Wed, 20 Nov 2019 22:17:10 +0100
+Subject: keymgr-dont-immediately-delete
+
+---
+ bin/python/isc/keyseries.py.in                  | 28 ++++++++++++++++++--
+ bin/tests/system/keymgr/19-old-keys/README      |  7 +++++
+ bin/tests/system/keymgr/19-old-keys/expect      | 12 +++++++++
+ bin/tests/system/keymgr/19-old-keys/extra.sh    | 19 ++++++++++++++
+ bin/tests/system/keymgr/19-old-keys/policy.conf | 18 +++++++++++++
+ bin/tests/system/keymgr/clean.sh                |  2 ++
+ bin/tests/system/keymgr/setup.sh                | 10 ++++++++
+ bin/tests/system/keymgr/tests.sh                | 34 +++++++++++++++----------
+ 8 files changed, 114 insertions(+), 16 deletions(-)
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/README
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/expect
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/extra.sh
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/policy.conf
+
+diff --git a/bin/python/isc/keyseries.py.in b/bin/python/isc/keyseries.py.in
+index e1241f0..74ccc64 100644
+--- a/bin/python/isc/keyseries.py.in
++++ b/bin/python/isc/keyseries.py.in
+@@ -77,15 +77,39 @@ class keyseries:
+         a = key.activate()
+         if not p or p > now:
+             key.setpublish(now)
++            p = now
+         if not a or a > now:
+             key.setactivate(now)
++            a = now
+ 
++        i = key.inactive()
+         if not rp:
+             key.setinactive(None, **kwargs)
+             key.setdelete(None, **kwargs)
++        elif not i or a + rp != i:
++            if not i and a + rp > now + prepub:
++                key.setinactive(a + rp, **kwargs)
++                key.setdelete(a + rp + postpub, **kwargs)
++            elif not i:
++                key.setinactive(now + prepub, **kwargs)
++                key.setdelete(now + prepub + postpub, **kwargs)
++            elif a + rp > i:
++                key.setinactive(a + rp, **kwargs)
++                key.setdelete(a + rp + postpub, **kwargs)
++            elif a + rp > now + prepub:
++                key.setinactive(a + rp, **kwargs)
++                key.setdelete(a + rp + postpub, **kwargs)
++            else:
++                key.setinactive(now + prepub, **kwargs)
++                key.setdelete(now + prepub + postpub, **kwargs)
+         else:
+-            key.setinactive(a + rp, **kwargs)
+-            key.setdelete(a + rp + postpub, **kwargs)
++            d = key.delete()
++            if not d or i + postpub > now:
++                key.setdelete(i + postpub, **kwargs)
++            elif not d:
++                key.setdelete(now + postpub, **kwargs)
++            elif d < i + postpub:
++                key.setdelete(i + postpub, **kwargs)
+ 
+         if policy.keyttl != key.ttl:
+             key.setttl(policy.keyttl)
+diff --git a/bin/tests/system/keymgr/19-old-keys/README b/bin/tests/system/keymgr/19-old-keys/README
+new file mode 100644
+index 0000000..424b70c
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/README
+@@ -0,0 +1,7 @@
++Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++
++See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.
++
++This directory has a key set which is valid, but which was published
++and activated more than one rollover period ago. dnssec-keymgr should
++not mark the keys as already being inactive and deleted.
+diff --git a/bin/tests/system/keymgr/19-old-keys/expect b/bin/tests/system/keymgr/19-old-keys/expect
+new file mode 100644
+index 0000000..f3e49b3
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/expect
+@@ -0,0 +1,12 @@
++kargs="-c policy.conf example.com"
++kmatch=""
++kret=0
++cargs="-d 1w -m 2w example.com"
++cmatch="4,Publish
++4,Activate
++2,Inactive
++2,Delete"
++cret=0
++warn=0
++error=0
++ok=2
+diff --git a/bin/tests/system/keymgr/19-old-keys/extra.sh b/bin/tests/system/keymgr/19-old-keys/extra.sh
+new file mode 100644
+index 0000000..8da6aa1
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/extra.sh
+@@ -0,0 +1,19 @@
++# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++#
++# This Source Code Form is subject to the terms of the Mozilla Public
++# License, v. 2.0. If a copy of the MPL was not distributed with this
++# file, You can obtain one at http://mozilla.org/MPL/2.0/.
++#
++# See the COPYRIGHT file distributed with this work for additional
++# information regarding copyright ownership.
++
++now=`$PERL -e 'print time()."\n";'`
++for keyfile in K*.key; do
++    inactive=`$SETTIME -upI $keyfile | awk '{print $2}'`
++    if [ "$inactive" = UNSET ]; then
++        continue
++    elif [ "$inactive" -lt "$now" ]; then
++        echo_d "inactive date is in the past"
++        ret=1
++    fi
++done
+diff --git a/bin/tests/system/keymgr/19-old-keys/policy.conf b/bin/tests/system/keymgr/19-old-keys/policy.conf
+new file mode 100644
+index 0000000..91817ff
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/policy.conf
+@@ -0,0 +1,18 @@
++/*
++ * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++ *
++ * This Source Code Form is subject to the terms of the Mozilla Public
++ * License, v. 2.0. If a copy of the MPL was not distributed with this
++ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
++ *
++ * See the COPYRIGHT file distributed with this work for additional
++ * information regarding copyright ownership.
++ */
++
++policy default {
++	policy global;
++	algorithm nsec3rsasha1;
++	pre-publish zsk 2w;
++	roll-period zsk 6mo;
++	coverage 364d;
++};
+diff --git a/bin/tests/system/keymgr/clean.sh b/bin/tests/system/keymgr/clean.sh
+index dc9f0a0..3b9b1a2 100644
+--- a/bin/tests/system/keymgr/clean.sh
++++ b/bin/tests/system/keymgr/clean.sh
+@@ -11,5 +11,7 @@
+ 
+ rm -f */K*.key
+ rm -f */K*.private
++rm -f Kexample.com.*.key
++rm -f Kexample.com.*.private
+ rm -f coverage.* keymgr.*
+ rm -f policy.out
+diff --git a/bin/tests/system/keymgr/setup.sh b/bin/tests/system/keymgr/setup.sh
+index 24e6c7c..ea6e566 100644
+--- a/bin/tests/system/keymgr/setup.sh
++++ b/bin/tests/system/keymgr/setup.sh
+@@ -214,3 +214,13 @@ rm -f $dir/K*.private
+ ksk1=`$KEYGEN -K $dir -3fk example.com`
+ zsk1=`$KEYGEN -K $dir -3 example.com`
+ $SETTIME -K $dir -I now+2mo -D now+3mo $zsk1 > /dev/null
++
++# Test 19: Key has been published/active a long time
++dir=19-old-keys
++echo_i "set up $dir"
++rm -f $dir/K*.key
++rm -f $dir/K*.private
++ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
++zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
++$SETTIME -K $dir -P now-2y -A now-2y $ksk1 > /dev/null
++$SETTIME -K $dir -P now-2y -A now-2y $zsk1 > /dev/null
+diff --git a/bin/tests/system/keymgr/tests.sh b/bin/tests/system/keymgr/tests.sh
+index 88b43d9..89fedd3 100644
+--- a/bin/tests/system/keymgr/tests.sh
++++ b/bin/tests/system/keymgr/tests.sh
+@@ -16,13 +16,19 @@ status=0
+ n=1
+ 
+ matchall () {
++    match_result=ok
+     file=$1
+-    echo "$2" | while read matchline; do
+-        grep "$matchline" $file > /dev/null 2>&1 || {
+-            echo "FAIL"
+-            return
++    while IFS="," read expect matchline; do
++        [ -z "$matchline" ] && continue
++        matches=`grep "$matchline" $file | wc -l`
++        [ "$matches" -ne "$expect" ] && {
++            echo "'$matchline': expected $expect found $matches"
++            return 1
+         }
+-    done
++    done << EOF
++    $2
++EOF
++    return 0
+ }
+ 
+ echo_i "checking for DNSSEC key coverage issues"
+@@ -51,11 +57,8 @@ for dir in [0-9][0-9]-*; do
+             ret=1
+         fi
+ 
+-        found=`matchall keymgr.$n "$kmatch"`
+-        if [ "$found" = "FAIL" ]; then
+-            echo "no match on '$kmatch'"
+-            ret=1
+-        fi
++        # check for matches in keymgr output
++        matchall keymgr.$n "$kmatch" || ret=1
+ 
+         # now check coverage
+         $COVERAGE -K $dir $cargs > coverage.$n 2>&1
+@@ -87,10 +90,13 @@ for dir in [0-9][0-9]-*; do
+             ret=1
+         fi
+ 
+-        found=`matchall coverage.$n "$cmatch"`
+-        if [ "$found" = "FAIL" ]; then
+-            echo "no match on '$cmatch'"
+-            ret=1
++        # check for matches in coverage output
++        matchall coverage.$n "$cmatch" || ret=1
++
++        if [ -f $dir/extra.sh ]; then
++           cd $dir
++           . ./extra.sh
++           cd ..
+         fi
+ 
+         n=`expr $n + 1`
diff --git a/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
new file mode 100644
index 0000000..b451238
--- /dev/null
+++ b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
@@ -0,0 +1,912 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Thu, 3 Jan 2019 14:17:43 +0100
+Subject: [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective
+
+---
+ bin/named/client.c                     | 427 ++++++++++++++++++++++++++-------
+ bin/named/include/named/client.h       |  23 +-
+ bin/named/include/named/interfacemgr.h |  13 +-
+ bin/named/interfacemgr.c               |   9 +-
+ doc/arm/Bv9ARM-book.xml                |   3 +-
+ lib/isc/include/isc/quota.h            |   7 +
+ lib/isc/quota.c                        |  33 ++-
+ lib/isc/win32/libisc.def.in            |   1 +
+ 8 files changed, 396 insertions(+), 120 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 4d26eff..020603d 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -246,10 +246,11 @@ static void ns_client_dumpmessage(ns_client_t *client, const char *reason);
+ static isc_result_t get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ 			       dns_dispatch_t *disp, bool tcp);
+ static isc_result_t get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp,
+-			       isc_socket_t *sock);
++			       isc_socket_t *sock, ns_client_t *oldclient);
+ static inline bool
+-allowed(isc_netaddr_t *addr, dns_name_t *signer, isc_netaddr_t *ecs_addr,
+-	uint8_t ecs_addrlen, uint8_t *ecs_scope, dns_acl_t *acl);
++allowed(isc_netaddr_t *addr, dns_name_t *signer,
++	isc_netaddr_t *ecs_addr, uint8_t ecs_addrlen,
++	uint8_t *ecs_scope, dns_acl_t *acl);
+ static void compute_cookie(ns_client_t *client, uint32_t when,
+ 			   uint32_t nonce, const unsigned char *secret,
+ 			   isc_buffer_t *buf);
+@@ -298,6 +299,119 @@ ns_client_settimeout(ns_client_t *client, unsigned int seconds) {
+ 	}
+ }
+ 
++/*%
++ * Allocate a reference-counted object that will maintain a single pointer to
++ * the (also reference-counted) TCP client quota, shared between all the
++ * clients processing queries on a single TCP connection, so that all
++ * clients sharing the one socket will together consume only one slot in
++ * the 'tcp-clients' quota.
++ */
++static isc_result_t
++tcpconn_init(ns_client_t *client, bool force) {
++	isc_result_t result;
++	isc_quota_t *quota = NULL;
++	ns_tcpconn_t *tconn = NULL;
++
++	REQUIRE(client->tcpconn == NULL);
++
++	/*
++	 * Try to attach to the quota first, so we won't pointlessly
++	 * allocate memory for a tcpconn object if we can't get one.
++	 */
++	if (force) {
++		result = isc_quota_force(&ns_g_server->tcpquota, &quota);
++	} else {
++		result = isc_quota_attach(&ns_g_server->tcpquota, &quota);
++	}
++	if (result != ISC_R_SUCCESS) {
++		return (result);
++	}
++
++	/*
++	 * A global memory context is used for the allocation as different
++	 * client structures may have different memory contexts assigned and a
++	 * reference counter allocated here might need to be freed by a
++	 * different client.  The performance impact caused by memory context
++	 * contention here is expected to be negligible, given that this code
++	 * is only executed for TCP connections.
++	 */
++	tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
++
++	isc_refcount_init(&tconn->refs, 1);
++	tconn->tcpquota = quota;
++	quota = NULL;
++	tconn->pipelined = false;
++
++	client->tcpconn = tconn;
++
++	return (ISC_R_SUCCESS);
++}
++
++/*%
++ * Increase the count of client structures sharing the TCP connection
++ * that 'source' is associated with; add a pointer to the same tcpconn
++ * to 'target', thus associating it with the same TCP connection.
++ */
++static void
++tcpconn_attach(ns_client_t *source, ns_client_t *target) {
++	int refs;
++
++	REQUIRE(source->tcpconn != NULL);
++	REQUIRE(target->tcpconn == NULL);
++	REQUIRE(source->tcpconn->pipelined);
++
++	isc_refcount_increment(&source->tcpconn->refs, &refs);
++	INSIST(refs > 1);
++	target->tcpconn = source->tcpconn;
++}
++
++/*%
++ * Decrease the count of client structures sharing the TCP connection that
++ * 'client' is associated with.  If this is the last client using this TCP
++ * connection, we detach from the TCP quota and free the tcpconn
++ * object. Either way, client->tcpconn is set to NULL.
++ */
++static void
++tcpconn_detach(ns_client_t *client) {
++	ns_tcpconn_t *tconn = NULL;
++	int refs;
++
++	REQUIRE(client->tcpconn != NULL);
++
++	tconn = client->tcpconn;
++	client->tcpconn = NULL;
++
++	isc_refcount_decrement(&tconn->refs, &refs);
++	if (refs == 0) {
++		isc_quota_detach(&tconn->tcpquota);
++		isc_mem_free(ns_g_mctx, tconn);
++	}
++}
++
++/*%
++ * Mark a client as active and increment the interface's 'ntcpactive'
++ * counter, as a signal that there is at least one client servicing
++ * TCP queries for the interface. If we reach the TCP client quota at
++ * some point, this will be used to determine whether a quota overrun
++ * should be permitted.
++ *
++ * Marking the client active with the 'tcpactive' flag ensures proper
++ * accounting, by preventing us from incrementing or decrementing
++ * 'ntcpactive' more than once per client.
++ */
++static void
++mark_tcp_active(ns_client_t *client, bool active) {
++	if (active && !client->tcpactive) {
++		isc_atomic_xadd(&client->interface->ntcpactive, 1);
++		client->tcpactive = active;
++	} else if (!active && client->tcpactive) {
++		uint32_t old =
++			isc_atomic_xadd(&client->interface->ntcpactive, -1);
++		INSIST(old > 0);
++		client->tcpactive = active;
++	}
++}
++
+ /*%
+  * Check for a deactivation or shutdown request and take appropriate
+  * action.  Returns true if either is in progress; in this case
+@@ -387,7 +501,8 @@ exit_check(ns_client_t *client) {
+ 		INSIST(client->recursionquota == NULL);
+ 
+ 		if (NS_CLIENTSTATE_READING == client->newstate) {
+-			if (!client->pipelined) {
++			INSIST(client->tcpconn != NULL);
++			if (!client->tcpconn->pipelined) {
+ 				client_read(client);
+ 				client->newstate = NS_CLIENTSTATE_MAX;
+ 				return (true); /* We're done. */
+@@ -405,10 +520,13 @@ exit_check(ns_client_t *client) {
+ 		 */
+ 		INSIST(client->recursionquota == NULL);
+ 		INSIST(client->newstate <= NS_CLIENTSTATE_READY);
+-		if (client->nreads > 0)
++
++		if (client->nreads > 0) {
+ 			dns_tcpmsg_cancelread(&client->tcpmsg);
+-		if (client->nreads != 0) {
+-			/* Still waiting for read cancel completion. */
++		}
++
++		/* Still waiting for read cancel completion. */
++		if (client->nreads > 0) {
+ 			return (true);
+ 		}
+ 
+@@ -416,14 +534,49 @@ exit_check(ns_client_t *client) {
+ 			dns_tcpmsg_invalidate(&client->tcpmsg);
+ 			client->tcpmsg_valid = false;
+ 		}
++
++		/*
++		 * Soon the client will be ready to accept a new TCP
++		 * connection or UDP request, but we may have enough
++		 * clients doing that already.  Check whether this client
++		 * needs to remain active and allow it go inactive if
++		 * not.
++		 *
++		 * UDP clients always go inactive at this point, but a TCP
++		 * client may need to stay active and return to READY
++		 * state if no other clients are available to listen
++		 * for TCP requests on this interface.
++		 *
++		 * Regardless, if we're going to FREED state, that means
++		 * the system is shutting down and we don't need to
++		 * retain clients.
++		 */
++		if (client->mortal && TCP_CLIENT(client) &&
++		    client->newstate != NS_CLIENTSTATE_FREED &&
++		    !ns_g_clienttest &&
++		    isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0)
++		{
++			/* Nobody else is accepting */
++			client->mortal = false;
++			client->newstate = NS_CLIENTSTATE_READY;
++		}
++
++		/*
++		 * Detach from TCP connection and TCP client quota,
++		 * if appropriate. If this is the last reference to
++		 * the TCP connection in our pipeline group, the
++		 * TCP quota slot will be released.
++		 */
++		if (client->tcpconn) {
++			tcpconn_detach(client);
++		}
++
+ 		if (client->tcpsocket != NULL) {
+ 			CTRACE("closetcp");
+ 			isc_socket_detach(&client->tcpsocket);
++			mark_tcp_active(client, false);
+ 		}
+ 
+-		if (client->tcpquota != NULL)
+-			isc_quota_detach(&client->tcpquota);
+-
+ 		if (client->timerset) {
+ 			(void)isc_timer_reset(client->timer,
+ 					      isc_timertype_inactive,
+@@ -431,45 +584,26 @@ exit_check(ns_client_t *client) {
+ 			client->timerset = false;
+ 		}
+ 
+-		client->pipelined = false;
+-
+ 		client->peeraddr_valid = false;
+ 
+ 		client->state = NS_CLIENTSTATE_READY;
+-		INSIST(client->recursionquota == NULL);
+-
+-		/*
+-		 * Now the client is ready to accept a new TCP connection
+-		 * or UDP request, but we may have enough clients doing
+-		 * that already.  Check whether this client needs to remain
+-		 * active and force it to go inactive if not.
+-		 *
+-		 * UDP clients go inactive at this point, but TCP clients
+-		 * may remain active if we have fewer active TCP client
+-		 * objects than desired due to an earlier quota exhaustion.
+-		 */
+-		if (client->mortal && TCP_CLIENT(client) && !ns_g_clienttest) {
+-			LOCK(&client->interface->lock);
+-			if (client->interface->ntcpcurrent <
+-				    client->interface->ntcptarget)
+-				client->mortal = false;
+-			UNLOCK(&client->interface->lock);
+-		}
+ 
+ 		/*
+ 		 * We don't need the client; send it to the inactive
+ 		 * queue for recycling.
+ 		 */
+ 		if (client->mortal) {
+-			if (client->newstate > NS_CLIENTSTATE_INACTIVE)
++			if (client->newstate > NS_CLIENTSTATE_INACTIVE) {
+ 				client->newstate = NS_CLIENTSTATE_INACTIVE;
++			}
+ 		}
+ 
+ 		if (NS_CLIENTSTATE_READY == client->newstate) {
+ 			if (TCP_CLIENT(client)) {
+ 				client_accept(client);
+-			} else
++			} else {
+ 				client_udprecv(client);
++			}
+ 			client->newstate = NS_CLIENTSTATE_MAX;
+ 			return (true);
+ 		}
+@@ -481,41 +615,50 @@ exit_check(ns_client_t *client) {
+ 		/*
+ 		 * We are trying to enter the inactive state.
+ 		 */
+-		if (client->naccepts > 0)
++		if (client->naccepts > 0) {
+ 			isc_socket_cancel(client->tcplistener, client->task,
+ 					  ISC_SOCKCANCEL_ACCEPT);
++		}
+ 
+ 		/* Still waiting for accept cancel completion. */
+-		if (! (client->naccepts == 0))
++		if (client->naccepts > 0) {
+ 			return (true);
++		}
+ 
+ 		/* Accept cancel is complete. */
+-		if (client->nrecvs > 0)
++		if (client->nrecvs > 0) {
+ 			isc_socket_cancel(client->udpsocket, client->task,
+ 					  ISC_SOCKCANCEL_RECV);
++		}
+ 
+ 		/* Still waiting for recv cancel completion. */
+-		if (! (client->nrecvs == 0))
++		if (client->nrecvs > 0) {
+ 			return (true);
++		}
+ 
+ 		/* Still waiting for control event to be delivered */
+-		if (client->nctls > 0)
++		if (client->nctls > 0) {
+ 			return (true);
+-
+-		/* Deactivate the client. */
+-		if (client->interface)
+-			ns_interface_detach(&client->interface);
++		}
+ 
+ 		INSIST(client->naccepts == 0);
+ 		INSIST(client->recursionquota == NULL);
+-		if (client->tcplistener != NULL)
++		if (client->tcplistener != NULL) {
+ 			isc_socket_detach(&client->tcplistener);
+-
+-		if (client->udpsocket != NULL)
++			mark_tcp_active(client, false);
++		}
++		if (client->udpsocket != NULL) {
+ 			isc_socket_detach(&client->udpsocket);
++		}
++
++		/* Deactivate the client. */
++		if (client->interface != NULL) {
++			ns_interface_detach(&client->interface);
++		}
+ 
+-		if (client->dispatch != NULL)
++		if (client->dispatch != NULL) {
+ 			dns_dispatch_detach(&client->dispatch);
++		}
+ 
+ 		client->attributes = 0;
+ 		client->mortal = false;
+@@ -540,10 +683,13 @@ exit_check(ns_client_t *client) {
+ 			client->newstate = NS_CLIENTSTATE_MAX;
+ 			if (!ns_g_clienttest && manager != NULL &&
+ 			    !manager->exiting)
++			{
+ 				ISC_QUEUE_PUSH(manager->inactive, client,
+ 					       ilink);
+-			if (client->needshutdown)
++			}
++			if (client->needshutdown) {
+ 				isc_task_shutdown(client->task);
++			}
+ 			return (true);
+ 		}
+ 	}
+@@ -653,7 +799,7 @@ client_start(isc_task_t *task, isc_event_t *event) {
+ 		return;
+ 
+ 	if (TCP_CLIENT(client)) {
+-		if (client->pipelined) {
++		if (client->tcpconn != NULL) {
+ 			client_read(client);
+ 		} else {
+ 			client_accept(client);
+@@ -663,7 +809,6 @@ client_start(isc_task_t *task, isc_event_t *event) {
+ 	}
+ }
+ 
+-
+ /*%
+  * The client's task has received a shutdown event.
+  */
+@@ -2304,6 +2449,7 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ 		client->nrecvs--;
+ 	} else {
+ 		INSIST(TCP_CLIENT(client));
++		INSIST(client->tcpconn != NULL);
+ 		REQUIRE(event->ev_type == DNS_EVENT_TCPMSG);
+ 		REQUIRE(event->ev_sender == &client->tcpmsg);
+ 		buffer = &client->tcpmsg.buffer;
+@@ -2487,18 +2633,27 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ 	/*
+ 	 * Pipeline TCP query processing.
+ 	 */
+-	if (client->message->opcode != dns_opcode_query)
+-		client->pipelined = false;
+-	if (TCP_CLIENT(client) && client->pipelined) {
+-		result = isc_quota_reserve(&ns_g_server->tcpquota);
+-		if (result == ISC_R_SUCCESS)
+-			result = ns_client_replace(client);
++	if (TCP_CLIENT(client) &&
++	    client->message->opcode != dns_opcode_query)
++	{
++		client->tcpconn->pipelined = false;
++	}
++	if (TCP_CLIENT(client) && client->tcpconn->pipelined) {
++		/*
++		 * We're pipelining. Replace the client; the
++		 * replacement can read the TCP socket looking
++		 * for new messages and this one can process the
++		 * current message asynchronously.
++		 *
++		 * There will now be at least three clients using this
++		 * TCP socket - one accepting new connections,
++		 * one reading an existing connection to get new
++		 * messages, and one answering the message already
++		 * received.
++		 */
++		result = ns_client_replace(client);
+ 		if (result != ISC_R_SUCCESS) {
+-			ns_client_log(client, NS_LOGCATEGORY_CLIENT,
+-				      NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
+-				      "no more TCP clients(read): %s",
+-				      isc_result_totext(result));
+-			client->pipelined = false;
++			client->tcpconn->pipelined = false;
+ 		}
+ 	}
+ 
+@@ -3054,8 +3209,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) {
+ 	client->signer = NULL;
+ 	dns_name_init(&client->signername, NULL);
+ 	client->mortal = false;
+-	client->pipelined = false;
+-	client->tcpquota = NULL;
++	client->tcpconn = NULL;
+ 	client->recursionquota = NULL;
+ 	client->interface = NULL;
+ 	client->peeraddr_valid = false;
+@@ -3065,6 +3219,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) {
+ 	client->filter_aaaa = dns_aaaa_ok;
+ #endif
+ 	client->needshutdown = ns_g_clienttest;
++	client->tcpactive = false;
+ 
+ 	ISC_EVENT_INIT(&client->ctlevent, sizeof(client->ctlevent), 0, NULL,
+ 		       NS_EVENT_CLIENTCONTROL, client_start, client, client,
+@@ -3159,9 +3314,10 @@ client_read(ns_client_t *client) {
+ 
+ static void
+ client_newconn(isc_task_t *task, isc_event_t *event) {
++	isc_result_t result;
+ 	ns_client_t *client = event->ev_arg;
+ 	isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event;
+-	isc_result_t result;
++	uint32_t old;
+ 
+ 	REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN);
+ 	REQUIRE(NS_CLIENT_VALID(client));
+@@ -3171,13 +3327,18 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ 
+ 	INSIST(client->state == NS_CLIENTSTATE_READY);
+ 
++	/*
++	 * The accept() was successful and we're now establishing a new
++	 * connection. We need to make note of it in the client and
++	 * interface objects so client objects can do the right thing
++	 * when going inactive in exit_check() (see comments in
++	 * client_accept() for details).
++	 */
+ 	INSIST(client->naccepts == 1);
+ 	client->naccepts--;
+ 
+-	LOCK(&client->interface->lock);
+-	INSIST(client->interface->ntcpcurrent > 0);
+-	client->interface->ntcpcurrent--;
+-	UNLOCK(&client->interface->lock);
++	old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1);
++	INSIST(old > 0);
+ 
+ 	/*
+ 	 * We must take ownership of the new socket before the exit
+@@ -3210,6 +3371,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ 			      NS_LOGMODULE_CLIENT, ISC_LOG_DEBUG(3),
+ 			      "accept failed: %s",
+ 			      isc_result_totext(nevent->result));
++		tcpconn_detach(client);
+ 	}
+ 
+ 	if (exit_check(client))
+@@ -3247,20 +3409,13 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ 		 * telnetting to port 53 (once per CPU) will
+ 		 * deny service to legitimate TCP clients.
+ 		 */
+-		client->pipelined = false;
+-		result = isc_quota_attach(&ns_g_server->tcpquota,
+-					  &client->tcpquota);
+-		if (result == ISC_R_SUCCESS)
+-			result = ns_client_replace(client);
+-		if (result != ISC_R_SUCCESS) {
+-			ns_client_log(client, NS_LOGCATEGORY_CLIENT,
+-				      NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
+-				      "no more TCP clients(accept): %s",
+-				      isc_result_totext(result));
+-		} else if (ns_g_server->keepresporder == NULL ||
+-			   !allowed(&netaddr, NULL, NULL, 0, NULL,
+-				    ns_g_server->keepresporder)) {
+-			client->pipelined = true;
++		result = ns_client_replace(client);
++		if (result == ISC_R_SUCCESS &&
++		    (ns_g_server->keepresporder == NULL ||
++		     !allowed(&netaddr, NULL, NULL, 0, NULL,
++			      ns_g_server->keepresporder)))
++		{
++			client->tcpconn->pipelined = true;
+ 		}
+ 
+ 		client_read(client);
+@@ -3276,12 +3431,66 @@ client_accept(ns_client_t *client) {
+ 
+ 	CTRACE("accept");
+ 
++	/*
++	 * Set up a new TCP connection. This means try to attach to the
++	 * TCP client quota (tcp-clients), but fail if we're over quota.
++	 */
++	result = tcpconn_init(client, false);
++	if (result != ISC_R_SUCCESS) {
++		bool exit;
++
++		ns_client_log(client, NS_LOGCATEGORY_CLIENT,
++			      NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
++			      "TCP client quota reached: %s",
++			      isc_result_totext(result));
++
++		/*
++		 * We have exceeded the system-wide TCP client quota.  But,
++		 * we can't just block this accept in all cases, because if
++		 * we did, a heavy TCP load on other interfaces might cause
++		 * this interface to be starved, with no clients able to
++		 * accept new connections.
++		 *
++		 * So, we check here to see if any other clients are
++		 * already servicing TCP queries on this interface (whether
++		 * accepting, reading, or processing). If we find that at
++		 * least one client other than this one is active, then
++		 * it's okay *not* to call accept - we can let this
++		 * client go inactive and another will take over when it's
++		 * done.
++		 *
++		 * If there aren't enough active clients on the interface,
++		 * then we can be a little bit flexible about the quota.
++		 * We'll allow *one* extra client through to ensure we're
++		 * listening on every interface; we do this by setting the
++		 * 'force' option to tcpconn_init().
++		 *
++		 * (Note: In practice this means that the real TCP client
++		 * quota is tcp-clients plus the number of listening
++		 * interfaces plus 1.)
++		 */
++		exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) >
++			(client->tcpactive ? 1 : 0));
++		if (exit) {
++			client->newstate = NS_CLIENTSTATE_INACTIVE;
++			(void)exit_check(client);
++			return;
++		}
++
++		result = tcpconn_init(client, true);
++		RUNTIME_CHECK(result == ISC_R_SUCCESS);
++	}
++
++	/*
++	 * If this client was set up using get_client() or get_worker(),
++	 * then TCP is already marked active. However, if it was restarted
++	 * from exit_check(), it might not be, so we take care of it now.
++	 */
++	mark_tcp_active(client, true);
++
+ 	result = isc_socket_accept(client->tcplistener, client->task,
+ 				   client_newconn, client);
+ 	if (result != ISC_R_SUCCESS) {
+-		UNEXPECTED_ERROR(__FILE__, __LINE__,
+-				 "isc_socket_accept() failed: %s",
+-				 isc_result_totext(result));
+ 		/*
+ 		 * XXXRTH  What should we do?  We're trying to accept but
+ 		 *	   it didn't work.  If we just give up, then TCP
+@@ -3289,13 +3498,37 @@ client_accept(ns_client_t *client) {
+ 		 *
+ 		 *	   For now, we just go idle.
+ 		 */
++		UNEXPECTED_ERROR(__FILE__, __LINE__,
++				 "isc_socket_accept() failed: %s",
++				 isc_result_totext(result));
++
++		tcpconn_detach(client);
++		mark_tcp_active(client, false);
+ 		return;
+ 	}
++
++	/*
++	 * The client's 'naccepts' counter indicates that this client has
++	 * called accept() and is waiting for a new connection. It should
++	 * never exceed 1.
++	 */
+ 	INSIST(client->naccepts == 0);
+ 	client->naccepts++;
+-	LOCK(&client->interface->lock);
+-	client->interface->ntcpcurrent++;
+-	UNLOCK(&client->interface->lock);
++
++	/*
++	 * The interface's 'ntcpaccepting' counter is incremented when
++	 * any client calls accept(), and decremented in client_newconn()
++	 * once the connection is established.
++	 *
++	 * When the client object is shutting down after handling a TCP
++	 * request (see exit_check()), if this value is at least one, that
++	 * means another client has called accept() and is waiting to
++	 * establish the next connection. That means the client may be
++	 * be free to become inactive; otherwise it may need to start
++	 * listening for connections itself to prevent the interface
++	 * going dead.
++	 */
++	isc_atomic_xadd(&client->interface->ntcpaccepting, 1);
+ }
+ 
+ static void
+@@ -3366,15 +3599,17 @@ ns_client_replace(ns_client_t *client) {
+ 	REQUIRE(client->manager != NULL);
+ 
+ 	tcp = TCP_CLIENT(client);
+-	if (tcp && client->pipelined) {
++	if (tcp && client->tcpconn != NULL && client->tcpconn->pipelined) {
+ 		result = get_worker(client->manager, client->interface,
+-				    client->tcpsocket);
++				    client->tcpsocket, client);
+ 	} else {
+ 		result = get_client(client->manager, client->interface,
+ 				    client->dispatch, tcp);
++
+ 	}
+-	if (result != ISC_R_SUCCESS)
++	if (result != ISC_R_SUCCESS) {
+ 		return (result);
++	}
+ 
+ 	/*
+ 	 * The responsibility for listening for new requests is hereby
+@@ -3560,9 +3795,12 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ 	client->dscp = ifp->dscp;
+ 
+ 	if (tcp) {
++		mark_tcp_active(client, true);
++
+ 		client->attributes |= NS_CLIENTATTR_TCP;
+ 		isc_socket_attach(ifp->tcpsocket,
+ 				  &client->tcplistener);
++
+ 	} else {
+ 		isc_socket_t *sock;
+ 
+@@ -3580,7 +3818,8 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ }
+ 
+ static isc_result_t
+-get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
++get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock,
++	   ns_client_t *oldclient)
+ {
+ 	isc_result_t result = ISC_R_SUCCESS;
+ 	isc_event_t *ev;
+@@ -3588,6 +3827,7 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
+ 	MTRACE("get worker");
+ 
+ 	REQUIRE(manager != NULL);
++	REQUIRE(oldclient != NULL);
+ 
+ 	if (manager->exiting)
+ 		return (ISC_R_SHUTTINGDOWN);
+@@ -3620,14 +3860,15 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
+ 	ns_interface_attach(ifp, &client->interface);
+ 	client->newstate = client->state = NS_CLIENTSTATE_WORKING;
+ 	INSIST(client->recursionquota == NULL);
+-	client->tcpquota = &ns_g_server->tcpquota;
+ 
+ 	client->dscp = ifp->dscp;
+ 
+ 	client->attributes |= NS_CLIENTATTR_TCP;
+-	client->pipelined = true;
+ 	client->mortal = true;
+ 
++	tcpconn_attach(oldclient, client);
++	mark_tcp_active(client, true);
++
+ 	isc_socket_attach(ifp->tcpsocket, &client->tcplistener);
+ 	isc_socket_attach(sock, &client->tcpsocket);
+ 	isc_socket_setname(client->tcpsocket, "worker-tcp", NULL);
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index b23a7b1..969ee4c 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -9,8 +9,6 @@
+  * information regarding copyright ownership.
+  */
+ 
+-/* $Id: client.h,v 1.96 2012/01/31 23:47:31 tbox Exp $ */
+-
+ #ifndef NAMED_CLIENT_H
+ #define NAMED_CLIENT_H 1
+ 
+@@ -80,6 +78,13 @@
+  *** Types
+  ***/
+ 
++/*% reference-counted TCP connection object */
++typedef struct ns_tcpconn {
++	isc_refcount_t		refs;
++	isc_quota_t		*tcpquota;
++	bool			pipelined;
++} ns_tcpconn_t;
++
+ /*% nameserver client structure */
+ struct ns_client {
+ 	unsigned int		magic;
+@@ -94,7 +99,8 @@ struct ns_client {
+ 	int			nupdates;
+ 	int			nctls;
+ 	int			references;
+-	bool		needshutdown; 	/*
++	bool			tcpactive;
++	bool			needshutdown; 	/*
+ 						 * Used by clienttest to get
+ 						 * the client to go from
+ 						 * inactive to free state
+@@ -130,10 +136,9 @@ struct ns_client {
+ 	isc_stdtime_t		now;
+ 	isc_time_t		tnow;
+ 	dns_name_t		signername;   /*%< [T]SIG key name */
+-	dns_name_t *		signer;	      /*%< NULL if not valid sig */
+-	bool		mortal;	      /*%< Die after handling request */
+-	bool		pipelined;   /*%< TCP queries not in sequence */
+-	isc_quota_t		*tcpquota;
++	dns_name_t		*signer;      /*%< NULL if not valid sig */
++	bool			mortal;	      /*%< Die after handling request */
++	ns_tcpconn_t		*tcpconn;
+ 	isc_quota_t		*recursionquota;
+ 	ns_interface_t		*interface;
+ 
+@@ -143,8 +148,8 @@ struct ns_client {
+ 	isc_sockaddr_t		destsockaddr;
+ 
+ 	isc_netaddr_t		ecs_addr;	/*%< EDNS client subnet */
+-	uint8_t		ecs_addrlen;
+-	uint8_t		ecs_scope;
++	uint8_t			ecs_addrlen;
++	uint8_t			ecs_scope;
+ 
+ 	struct in6_pktinfo	pktinfo;
+ 	isc_dscp_t		dscp;
+diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h
+index 7d1883e..3535ef2 100644
+--- a/bin/named/include/named/interfacemgr.h
++++ b/bin/named/include/named/interfacemgr.h
+@@ -9,8 +9,6 @@
+  * information regarding copyright ownership.
+  */
+ 
+-/* $Id: interfacemgr.h,v 1.35 2011/07/28 23:47:58 tbox Exp $ */
+-
+ #ifndef NAMED_INTERFACEMGR_H
+ #define NAMED_INTERFACEMGR_H 1
+ 
+@@ -77,9 +75,14 @@ struct ns_interface {
+ 						/*%< UDP dispatchers. */
+ 	isc_socket_t *		tcpsocket;	/*%< TCP socket. */
+ 	isc_dscp_t		dscp;		/*%< "listen-on" DSCP value */
+-	int			ntcptarget;	/*%< Desired number of concurrent
+-						     TCP accepts */
+-	int			ntcpcurrent;	/*%< Current ditto, locked */
++	int32_t			ntcpaccepting;	/*%< Number of clients
++						     ready to accept new
++						     TCP connections on this
++						     interface */
++	int32_t			ntcpactive;	/*%< Number of clients
++						     servicing TCP queries
++						     (whether accepting or
++						     connected) */
+ 	int			nudpdispatch;	/*%< Number of UDP dispatches */
+ 	ns_clientmgr_t *	clientmgr;	/*%< Client manager. */
+ 	ISC_LINK(ns_interface_t) link;
+diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c
+index 419927b..d9f6df5 100644
+--- a/bin/named/interfacemgr.c
++++ b/bin/named/interfacemgr.c
+@@ -386,8 +386,9 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr,
+ 	 * connections will be handled in parallel even though there is
+ 	 * only one client initially.
+ 	 */
+-	ifp->ntcptarget = 1;
+-	ifp->ntcpcurrent = 0;
++	ifp->ntcpaccepting = 0;
++	ifp->ntcpactive = 0;
++
+ 	ifp->nudpdispatch = 0;
+ 
+ 	ifp->dscp = -1;
+@@ -522,9 +523,7 @@ ns_interface_accepttcp(ns_interface_t *ifp) {
+ 	 */
+ 	(void)isc_socket_filter(ifp->tcpsocket, "dataready");
+ 
+-	result = ns_clientmgr_createclients(ifp->clientmgr,
+-					    ifp->ntcptarget, ifp,
+-					    true);
++	result = ns_clientmgr_createclients(ifp->clientmgr, 1, ifp, true);
+ 	if (result != ISC_R_SUCCESS) {
+ 		UNEXPECTED_ERROR(__FILE__, __LINE__,
+ 				 "TCP ns_clientmgr_createclients(): %s",
+diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
+index 719b074..4b36bd0 100644
+--- a/doc/arm/Bv9ARM-book.xml
++++ b/doc/arm/Bv9ARM-book.xml
+@@ -8487,7 +8487,8 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
+ 		<para>
+ 		  The number of file descriptors reserved for TCP, stdio,
+ 		  etc.  This needs to be big enough to cover the number of
+-		  interfaces <command>named</command> listens on, <command>tcp-clients</command> as well as
++		  interfaces <command>named</command> listens on plus
++		  <command>tcp-clients</command>, as well as
+ 		  to provide room for outgoing TCP queries and incoming zone
+ 		  transfers.  The default is <literal>512</literal>.
+ 		  The minimum value is <literal>128</literal> and the
+diff --git a/lib/isc/include/isc/quota.h b/lib/isc/include/isc/quota.h
+index b9bf598..36c5830 100644
+--- a/lib/isc/include/isc/quota.h
++++ b/lib/isc/include/isc/quota.h
+@@ -100,6 +100,13 @@ isc_quota_attach(isc_quota_t *quota, isc_quota_t **p);
+  * quota if successful (ISC_R_SUCCESS or ISC_R_SOFTQUOTA).
+  */
+ 
++isc_result_t
++isc_quota_force(isc_quota_t *quota, isc_quota_t **p);
++/*%<
++ * Like isc_quota_attach, but will attach '*p' to the quota
++ * even if the hard quota has been exceeded.
++ */
++
+ void
+ isc_quota_detach(isc_quota_t **p);
+ /*%<
+diff --git a/lib/isc/quota.c b/lib/isc/quota.c
+index 3ddff0d..556a61f 100644
+--- a/lib/isc/quota.c
++++ b/lib/isc/quota.c
+@@ -74,20 +74,39 @@ isc_quota_release(isc_quota_t *quota) {
+ 	UNLOCK(&quota->lock);
+ }
+ 
+-isc_result_t
+-isc_quota_attach(isc_quota_t *quota, isc_quota_t **p)
+-{
++static isc_result_t
++doattach(isc_quota_t *quota, isc_quota_t **p, bool force) {
+ 	isc_result_t result;
+-	INSIST(p != NULL && *p == NULL);
++	REQUIRE(p != NULL && *p == NULL);
++
+ 	result = isc_quota_reserve(quota);
+-	if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA)
++	if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA) {
++		*p = quota;
++	} else if (result == ISC_R_QUOTA && force) {
++		/* attach anyway */
++		LOCK(&quota->lock);
++		quota->used++;
++		UNLOCK(&quota->lock);
++
+ 		*p = quota;
++		result = ISC_R_SUCCESS;
++	}
++
+ 	return (result);
+ }
+ 
++isc_result_t
++isc_quota_attach(isc_quota_t *quota, isc_quota_t **p) {
++	return (doattach(quota, p, false));
++}
++
++isc_result_t
++isc_quota_force(isc_quota_t *quota, isc_quota_t **p) {
++	return (doattach(quota, p, true));
++}
++
+ void
+-isc_quota_detach(isc_quota_t **p)
+-{
++isc_quota_detach(isc_quota_t **p) {
+ 	INSIST(p != NULL && *p != NULL);
+ 	isc_quota_release(*p);
+ 	*p = NULL;
+diff --git a/lib/isc/win32/libisc.def.in b/lib/isc/win32/libisc.def.in
+index a82face..7b9f23d 100644
+--- a/lib/isc/win32/libisc.def.in
++++ b/lib/isc/win32/libisc.def.in
+@@ -519,6 +519,7 @@ isc_portset_removerange
+ isc_quota_attach
+ isc_quota_destroy
+ isc_quota_detach
++isc_quota_force
+ isc_quota_init
+ isc_quota_max
+ isc_quota_release
diff --git a/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
new file mode 100644
index 0000000..4ce3abe
--- /dev/null
+++ b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
@@ -0,0 +1,128 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Wed, 17 Apr 2019 15:22:27 +0200
+Subject: Replace atomic operations in bin/named/client.c with isc_refcount
+ reference counting
+
+---
+ bin/named/client.c                     | 18 +++++++-----------
+ bin/named/include/named/interfacemgr.h |  5 +++--
+ bin/named/interfacemgr.c               |  7 +++++--
+ 3 files changed, 15 insertions(+), 15 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 020603d..8155c6b 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -402,12 +402,10 @@ tcpconn_detach(ns_client_t *client) {
+ static void
+ mark_tcp_active(ns_client_t *client, bool active) {
+ 	if (active && !client->tcpactive) {
+-		isc_atomic_xadd(&client->interface->ntcpactive, 1);
++		isc_refcount_increment0(&client->interface->ntcpactive, NULL);
+ 		client->tcpactive = active;
+ 	} else if (!active && client->tcpactive) {
+-		uint32_t old =
+-			isc_atomic_xadd(&client->interface->ntcpactive, -1);
+-		INSIST(old > 0);
++		isc_refcount_decrement(&client->interface->ntcpactive, NULL);
+ 		client->tcpactive = active;
+ 	}
+ }
+@@ -554,7 +552,7 @@ exit_check(ns_client_t *client) {
+ 		if (client->mortal && TCP_CLIENT(client) &&
+ 		    client->newstate != NS_CLIENTSTATE_FREED &&
+ 		    !ns_g_clienttest &&
+-		    isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0)
++		    isc_refcount_current(&client->interface->ntcpaccepting) == 0)
+ 		{
+ 			/* Nobody else is accepting */
+ 			client->mortal = false;
+@@ -3317,7 +3315,6 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ 	isc_result_t result;
+ 	ns_client_t *client = event->ev_arg;
+ 	isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event;
+-	uint32_t old;
+ 
+ 	REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN);
+ 	REQUIRE(NS_CLIENT_VALID(client));
+@@ -3337,8 +3334,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ 	INSIST(client->naccepts == 1);
+ 	client->naccepts--;
+ 
+-	old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1);
+-	INSIST(old > 0);
++	isc_refcount_decrement(&client->interface->ntcpaccepting, NULL);
+ 
+ 	/*
+ 	 * We must take ownership of the new socket before the exit
+@@ -3469,8 +3465,8 @@ client_accept(ns_client_t *client) {
+ 		 * quota is tcp-clients plus the number of listening
+ 		 * interfaces plus 1.)
+ 		 */
+-		exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) >
+-			(client->tcpactive ? 1 : 0));
++		exit = (isc_refcount_current(&client->interface->ntcpactive) >
++			(client->tcpactive ? 1U : 0U));
+ 		if (exit) {
+ 			client->newstate = NS_CLIENTSTATE_INACTIVE;
+ 			(void)exit_check(client);
+@@ -3528,7 +3524,7 @@ client_accept(ns_client_t *client) {
+ 	 * listening for connections itself to prevent the interface
+ 	 * going dead.
+ 	 */
+-	isc_atomic_xadd(&client->interface->ntcpaccepting, 1);
++	isc_refcount_increment0(&client->interface->ntcpaccepting, NULL);
+ }
+ 
+ static void
+diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h
+index 3535ef2..6e10f21 100644
+--- a/bin/named/include/named/interfacemgr.h
++++ b/bin/named/include/named/interfacemgr.h
+@@ -45,6 +45,7 @@
+ #include <isc/magic.h>
+ #include <isc/mem.h>
+ #include <isc/socket.h>
++#include <isc/refcount.h>
+ 
+ #include <dns/result.h>
+ 
+@@ -75,11 +76,11 @@ struct ns_interface {
+ 						/*%< UDP dispatchers. */
+ 	isc_socket_t *		tcpsocket;	/*%< TCP socket. */
+ 	isc_dscp_t		dscp;		/*%< "listen-on" DSCP value */
+-	int32_t			ntcpaccepting;	/*%< Number of clients
++	isc_refcount_t		ntcpaccepting;	/*%< Number of clients
+ 						     ready to accept new
+ 						     TCP connections on this
+ 						     interface */
+-	int32_t			ntcpactive;	/*%< Number of clients
++	isc_refcount_t		ntcpactive;	/*%< Number of clients
+ 						     servicing TCP queries
+ 						     (whether accepting or
+ 						     connected) */
+diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c
+index d9f6df5..135533b 100644
+--- a/bin/named/interfacemgr.c
++++ b/bin/named/interfacemgr.c
+@@ -386,8 +386,8 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr,
+ 	 * connections will be handled in parallel even though there is
+ 	 * only one client initially.
+ 	 */
+-	ifp->ntcpaccepting = 0;
+-	ifp->ntcpactive = 0;
++	isc_refcount_init(&ifp->ntcpaccepting, 0);
++	isc_refcount_init(&ifp->ntcpactive, 0);
+ 
+ 	ifp->nudpdispatch = 0;
+ 
+@@ -618,6 +618,9 @@ ns_interface_destroy(ns_interface_t *ifp) {
+ 
+ 	ns_interfacemgr_detach(&ifp->mgr);
+ 
++	isc_refcount_destroy(&ifp->ntcpactive);
++	isc_refcount_destroy(&ifp->ntcpaccepting);
++
+ 	ifp->magic = 0;
+ 	isc_mem_put(mctx, ifp, sizeof(*ifp));
+ }
diff --git a/debian/patches/0014-Disable-broken-Ed448-support.patch b/debian/patches/0014-Disable-broken-Ed448-support.patch
new file mode 100644
index 0000000..29c8289
--- /dev/null
+++ b/debian/patches/0014-Disable-broken-Ed448-support.patch
@@ -0,0 +1,508 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Fri, 26 Apr 2019 07:58:26 +0000
+Subject: Disable broken Ed448 support
+
+---
+ config.h.in  |   3 -
+ configure    | 201 ++++++++++++++++++++++-------------------------------------
+ configure.in |  33 ----------
+ 3 files changed, 75 insertions(+), 162 deletions(-)
+
+diff --git a/config.h.in b/config.h.in
+index b6f1a28..8268259 100644
+--- a/config.h.in
++++ b/config.h.in
+@@ -387,9 +387,6 @@ int sigwait(const unsigned int *set, int *sig);
+ /* Define if your OpenSSL version supports Ed25519. */
+ #undef HAVE_OPENSSL_ED25519
+ 
+-/* Define if your OpenSSL version supports Ed448. */
+-#undef HAVE_OPENSSL_ED448
+-
+ /* Define if your OpenSSL version supports EVP AES */
+ #undef HAVE_OPENSSL_EVP_AES
+ 
+diff --git a/configure b/configure
+index 80b8eca..160e996 100755
+--- a/configure
++++ b/configure
+@@ -827,6 +827,7 @@ PKCS11_TEST
+ PKCS11_ED25519
+ PKCS11_GOST
+ PKCS11_ECDSA
++CRYPTO_PK11
+ CRYPTO
+ PKCS11LINKSRCS
+ PKCS11LINKOBJS
+@@ -865,6 +866,7 @@ THREADOPTOBJS
+ ISC_PLATFORM_USETHREADS
+ ALWAYS_DEFINES
+ CHECK_DSA
++DNS_CRYPTO_PK11_LIBS
+ DNS_CRYPTO_LIBS
+ DNS_GSSAPI_LIBS
+ DST_GSSAPI_INC
+@@ -968,6 +970,7 @@ infodir
+ docdir
+ oldincludedir
+ includedir
++runstatedir
+ localstatedir
+ sharedstatedir
+ sysconfdir
+@@ -1129,6 +1132,7 @@ datadir='${datarootdir}'
+ sysconfdir='${prefix}/etc'
+ sharedstatedir='${prefix}/com'
+ localstatedir='${prefix}/var'
++runstatedir='${localstatedir}/run'
+ includedir='${prefix}/include'
+ oldincludedir='/usr/include'
+ docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
+@@ -1381,6 +1385,15 @@ do
+   | -silent | --silent | --silen | --sile | --sil)
+     silent=yes ;;
+ 
++  -runstatedir | --runstatedir | --runstatedi | --runstated \
++  | --runstate | --runstat | --runsta | --runst | --runs \
++  | --run | --ru | --r)
++    ac_prev=runstatedir ;;
++  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
++  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
++  | --run=* | --ru=* | --r=*)
++    runstatedir=$ac_optarg ;;
++
+   -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
+     ac_prev=sbindir ;;
+   -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
+@@ -1518,7 +1531,7 @@ fi
+ for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
+ 		datadir sysconfdir sharedstatedir localstatedir includedir \
+ 		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
+-		libdir localedir mandir
++		libdir localedir mandir runstatedir
+ do
+   eval ac_val=\$$ac_var
+   # Remove trailing slashes.
+@@ -1671,6 +1684,7 @@ Fine tuning of the installation directories:
+   --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
+   --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
+   --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
++  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
+   --libdir=DIR            object code libraries [EPREFIX/lib]
+   --includedir=DIR        C header files [PREFIX/include]
+   --oldincludedir=DIR     C header files for non-gcc [/usr/include]
+@@ -5037,7 +5051,7 @@ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+   lt_cv_deplibs_check_method=pass_all
+   ;;
+ 
+-netbsd*)
++netbsd* | netbsdelf*-gnu)
+   if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
+     lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
+   else
+@@ -5943,11 +5957,8 @@ _LT_EOF
+   test $ac_status = 0; }; then
+     # Now try to grab the symbols.
+     nlist=conftest.nm
+-    if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist\""; } >&5
+-  (eval $NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) 2>&5
+-  ac_status=$?
+-  $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+-  test $ac_status = 0; } && test -s "$nlist"; then
++    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
++    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
+       # Try sorting and uniquifying the output.
+       if sort "$nlist" | uniq > "$nlist"T; then
+ 	mv -f "$nlist"T "$nlist"
+@@ -8772,6 +8783,9 @@ $as_echo_n "checking whether the $compiler linker ($LD) supports shared librarie
+   openbsd* | bitrig*)
+     with_gnu_ld=no
+     ;;
++  linux* | k*bsd*-gnu | gnu*)
++    link_all_deplibs=no
++    ;;
+   esac
+ 
+   ld_shlibs=yes
+@@ -9026,7 +9040,7 @@ _LT_EOF
+       fi
+       ;;
+ 
+-    netbsd*)
++    netbsd* | netbsdelf*-gnu)
+       if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ 	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
+ 	wlarc=
+@@ -9696,6 +9710,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; }
+ 	if test yes = "$lt_cv_irix_exported_symbol"; then
+           archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
+ 	fi
++	link_all_deplibs=no
+       else
+ 	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ 	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
+@@ -9717,7 +9732,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; }
+       esac
+       ;;
+ 
+-    netbsd*)
++    netbsd* | netbsdelf*-gnu)
+       if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ 	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
+       else
+@@ -10832,6 +10847,18 @@ fi
+   dynamic_linker='GNU/Linux ld.so'
+   ;;
+ 
++netbsdelf*-gnu)
++  version_type=linux
++  need_lib_prefix=no
++  need_version=no
++  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}'
++  soname_spec='${libname}${release}${shared_ext}$major'
++  shlibpath_var=LD_LIBRARY_PATH
++  shlibpath_overrides_runpath=no
++  hardcode_into_libs=yes
++  dynamic_linker='NetBSD ld.elf_so'
++  ;;
++
+ netbsd*)
+   version_type=sunos
+   need_lib_prefix=no
+@@ -13427,7 +13454,7 @@ case "$host" in
+ 	# as it breaks how the two halves (Basic and Advanced) of the IPv6
+ 	# Socket API were designed to be used but we have to live with it.
+ 	# Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API.
+-	*-linux* | *-kfreebsd*-gnu*)
++	*-linux* | *-kfreebsd*-gnu* | *-gnu*)
+ 		STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE"
+ 		CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+ 		;;
+@@ -15227,6 +15254,7 @@ esac
+ 
+ 
+ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS"
+ 
+ #
+ # Applications linking with libdns also need to link with these libraries.
+@@ -15234,6 +15262,7 @@ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
+ 
+ 
+ 
++
+ #
+ # was --with-randomdev specified?
+ #
+@@ -16330,7 +16359,7 @@ fi
+ 		# LinuxThreads requires some changes to the way we
+ 		# deal with signals.
+ 		#
+-		*-linux*)
++		*-linux*|*-kfreebsd*-gnu)
+ 			$as_echo "#define HAVE_LINUXTHREADS 1" >>confdefs.h
+ 
+ 			;;
+@@ -16585,12 +16614,6 @@ fi
+ $as_echo_n "checking for OpenSSL library... " >&6; }
+ OPENSSL_WARNING=
+ openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw"
+-if test "yes" = "$want_native_pkcs11"
+-then
+-	use_openssl="native_pkcs11"
+-	{ $as_echo "$as_me:${as_lineno-$LINENO}: result: use of native PKCS11 instead" >&5
+-$as_echo "use of native PKCS11 instead" >&6; }
+-fi
+ 
+ if test "auto" = "$use_openssl"
+ then
+@@ -16603,6 +16626,7 @@ then
+ 		fi
+ 	done
+ fi
++CRYPTO_PK11=""
+ OPENSSL_ECDSA=""
+ OPENSSL_GOST=""
+ OPENSSL_ED25519=""
+@@ -16625,12 +16649,10 @@ $as_echo "#define PREFER_GOSTASN1 1" >>confdefs.h
+ 		;;
+ esac
+ 
+-case "$use_openssl" in
+-	native_pkcs11)
+-		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: disabled because of native PKCS11" >&5
+-$as_echo "disabled because of native PKCS11" >&6; }
++if test "$want_native_pkcs11" = "yes"
++then
+ 		DST_OPENSSL_INC=""
+-		CRYPTO="-DPKCS11CRYPTO"
++		CRYPTO_PK11="-DPKCS11CRYPTO"
+ 		OPENSSLECDSALINKOBJS=""
+ 		OPENSSLECDSALINKSRCS=""
+ 		OPENSSLEDDSALINKOBJS=""
+@@ -16639,7 +16661,9 @@ $as_echo "disabled because of native PKCS11" >&6; }
+ 		OPENSSLGOSTLINKSRCS=""
+ 		OPENSSLLINKOBJS=""
+ 		OPENSSLLINKSRCS=""
+-		;;
++fi
++
++case "$use_openssl" in
+ 	no)
+ 		{ $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+ $as_echo "no" >&6; }
+@@ -16669,12 +16693,6 @@ $as_echo "no" >&6; }
+ If you don't want OpenSSL, use --without-openssl" "$LINENO" 5
+ 		;;
+ 	*)
+-		if test "yes" = "$want_native_pkcs11"
+-		then
+-			{ $as_echo "$as_me:${as_lineno-$LINENO}: result: " >&5
+-$as_echo "" >&6; }
+-			as_fn_error $? "OpenSSL and native PKCS11 cannot be used together." "$LINENO" 5
+-		fi
+ 		if test "yes" = "$use_openssl"
+ 		then
+ 			# User did not specify a path - guess it
+@@ -17126,60 +17144,10 @@ fi
+ 
+ $as_echo "#define HAVE_OPENSSL_ED25519 1" >>confdefs.h
+ 
+-		{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL Ed448 support" >&5
+-$as_echo_n "checking for OpenSSL Ed448 support... " >&6; }
+-		if test "$cross_compiling" = yes; then :
+-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: using --with-eddsa" >&5
+-$as_echo "using --with-eddsa" >&6; }
+-else
+-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+-/* end confdefs.h.  */
+-
+-#include <openssl/evp.h>
+-#include <openssl/objects.h>
+-int main() {
+-	EVP_PKEY_CTX *ctx;
+-
+-	ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL);
+-	if (ctx == NULL)
+-		return (2);
+-	return (0);
+-}
+-
+-_ACEOF
+-if ac_fn_c_try_run "$LINENO"; then :
+-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+-$as_echo "yes" >&6; }
+-		have_ed448="yes"
+-else
+-  { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+-$as_echo "no" >&6; }
+-		have_ed448="no"
+-fi
+-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+-  conftest.$ac_objext conftest.beam conftest.$ac_ext
+-fi
+-
+-		case $with_eddsa in
+-		all)
+-			have_ed448=yes ;;
+-		*)
+-			;;
+-		esac
+-		case $have_ed448 in
+-		yes)
+-
+-$as_echo "#define HAVE_OPENSSL_ED448 1" >>confdefs.h
+-
+-			;;
+-		*)
+-			;;
+-		esac
+ 		;;
+ 	*)
+ 		;;
+ 	esac
+-
+ 	have_aes="no"
+ 	{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL AES support" >&5
+ $as_echo_n "checking for OpenSSL AES support... " >&6; }
+@@ -17278,6 +17246,7 @@ esac
+ 
+ 
+ DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS"
+ 
+ ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES"
+ if test "yes" = "$with_aes"
+@@ -17667,6 +17636,7 @@ esac
+ 
+ 
+ 
++
+ # for PKCS11 benchmarks
+ 
+ have_clock_gt=no
+@@ -18526,51 +18496,6 @@ _ACEOF
+ 
+   LIBS="-lsocket $LIBS"
+ 
+-fi
+-
+-		{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for inet_addr in -lnsl" >&5
+-$as_echo_n "checking for inet_addr in -lnsl... " >&6; }
+-if ${ac_cv_lib_nsl_inet_addr+:} false; then :
+-  $as_echo_n "(cached) " >&6
+-else
+-  ac_check_lib_save_LIBS=$LIBS
+-LIBS="-lnsl  $LIBS"
+-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+-/* end confdefs.h.  */
+-
+-/* Override any GCC internal prototype to avoid an error.
+-   Use char because int might match the return type of a GCC
+-   builtin and then its argument prototype would still apply.  */
+-#ifdef __cplusplus
+-extern "C"
+-#endif
+-char inet_addr ();
+-int
+-main ()
+-{
+-return inet_addr ();
+-  ;
+-  return 0;
+-}
+-_ACEOF
+-if ac_fn_c_try_link "$LINENO"; then :
+-  ac_cv_lib_nsl_inet_addr=yes
+-else
+-  ac_cv_lib_nsl_inet_addr=no
+-fi
+-rm -f core conftest.err conftest.$ac_objext \
+-    conftest$ac_exeext conftest.$ac_ext
+-LIBS=$ac_check_lib_save_LIBS
+-fi
+-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_inet_addr" >&5
+-$as_echo "$ac_cv_lib_nsl_inet_addr" >&6; }
+-if test "x$ac_cv_lib_nsl_inet_addr" = xyes; then :
+-  cat >>confdefs.h <<_ACEOF
+-#define HAVE_LIBNSL 1
+-_ACEOF
+-
+-  LIBS="-lnsl $LIBS"
+-
+ fi
+ 
+ 		;;
+@@ -24555,7 +24480,7 @@ ac_config_commands="$ac_config_commands chmod"
+ # elsewhere if there's a good reason for doing so.
+ #
+ 
+-ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/named/Makefile bin/named/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh"
++ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/dnssec-pkcs11/Makefile bin/named/Makefile bin/named/unix/Makefile bin/named-pkcs11/Makefile bin/named-pkcs11/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/dns-pkcs11/Makefile lib/dns-pkcs11/include/Makefile lib/dns-pkcs11/include/dns/Makefile lib/dns-pkcs11/include/dst/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isc-pkcs11/$arch/Makefile lib/isc-pkcs11/$arch/include/Makefile lib/isc-pkcs11/$arch/include/isc/Makefile lib/isc-pkcs11/$thread_dir/Makefile lib/isc-pkcs11/$thread_dir/include/Makefile lib/isc-pkcs11/$thread_dir/include/isc/Makefile lib/isc-pkcs11/Makefile lib/isc-pkcs11/include/Makefile lib/isc-pkcs11/include/isc/Makefile lib/isc-pkcs11/include/isc/platform.h lib/isc-pkcs11/include/pk11/Makefile lib/isc-pkcs11/include/pkcs11/Makefile lib/isc-pkcs11/tests/Makefile lib/isc-pkcs11/nls/Makefile lib/isc-pkcs11/unix/Makefile lib/isc-pkcs11/unix/include/Makefile lib/isc-pkcs11/unix/include/isc/Makefile lib/isc-pkcs11/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh"
+ 
+ 
+ #
+@@ -25567,8 +25492,11 @@ do
+     "bin/delv/Makefile") CONFIG_FILES="$CONFIG_FILES bin/delv/Makefile" ;;
+     "bin/dig/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dig/Makefile" ;;
+     "bin/dnssec/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec/Makefile" ;;
++    "bin/dnssec-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec-pkcs11/Makefile" ;;
+     "bin/named/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/Makefile" ;;
+     "bin/named/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/unix/Makefile" ;;
++    "bin/named-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/Makefile" ;;
++    "bin/named-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/unix/Makefile" ;;
+     "bin/nsupdate/Makefile") CONFIG_FILES="$CONFIG_FILES bin/nsupdate/Makefile" ;;
+     "bin/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/pkcs11/Makefile" ;;
+     "bin/python/Makefile") CONFIG_FILES="$CONFIG_FILES bin/python/Makefile" ;;
+@@ -25642,6 +25570,10 @@ do
+     "lib/dns/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dns/Makefile" ;;
+     "lib/dns/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dst/Makefile" ;;
+     "lib/dns/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/tests/Makefile" ;;
++    "lib/dns-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/Makefile" ;;
++    "lib/dns-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/Makefile" ;;
++    "lib/dns-pkcs11/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dns/Makefile" ;;
++    "lib/dns-pkcs11/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dst/Makefile" ;;
+     "lib/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/Makefile" ;;
+     "lib/irs/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/Makefile" ;;
+     "lib/irs/include/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/irs/Makefile" ;;
+@@ -25666,6 +25598,24 @@ do
+     "lib/isc/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/Makefile" ;;
+     "lib/isc/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/isc/Makefile" ;;
+     "lib/isc/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/pkcs11/Makefile" ;;
++    "lib/isc-pkcs11/$arch/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/Makefile" ;;
++    "lib/isc-pkcs11/$arch/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/Makefile" ;;
++    "lib/isc-pkcs11/$arch/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/isc/Makefile" ;;
++    "lib/isc-pkcs11/$thread_dir/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/Makefile" ;;
++    "lib/isc-pkcs11/$thread_dir/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/Makefile" ;;
++    "lib/isc-pkcs11/$thread_dir/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/isc/Makefile" ;;
++    "lib/isc-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/Makefile" ;;
++    "lib/isc-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/Makefile" ;;
++    "lib/isc-pkcs11/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/Makefile" ;;
++    "lib/isc-pkcs11/include/isc/platform.h") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/platform.h" ;;
++    "lib/isc-pkcs11/include/pk11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pk11/Makefile" ;;
++    "lib/isc-pkcs11/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pkcs11/Makefile" ;;
++    "lib/isc-pkcs11/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/tests/Makefile" ;;
++    "lib/isc-pkcs11/nls/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/nls/Makefile" ;;
++    "lib/isc-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/Makefile" ;;
++    "lib/isc-pkcs11/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/Makefile" ;;
++    "lib/isc-pkcs11/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/isc/Makefile" ;;
++    "lib/isc-pkcs11/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/pkcs11/Makefile" ;;
+     "lib/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/Makefile" ;;
+     "lib/isccc/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/Makefile" ;;
+     "lib/isccc/include/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/isccc/Makefile" ;;
+@@ -26296,7 +26246,6 @@ $as_echo "$as_me: executing $ac_file commands" >&6;}
+     cat <<_LT_EOF >> "$cfgfile"
+ #! $SHELL
+ # Generated automatically by $as_me ($PACKAGE) $VERSION
+-# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`:
+ # NOTE: Changes made to this file will be lost: look at ltmain.sh.
+ 
+ # Provide generalized library-building support services.
+diff --git a/configure.in b/configure.in
+index f8603b8..324ac97 100644
+--- a/configure.in
++++ b/configure.in
+@@ -1889,43 +1889,10 @@ int main() {
+ 		OPENSSLEDDSALINKSRCS='${OPENSSLEDDSALINKSRCS}'
+ 		AC_DEFINE(HAVE_OPENSSL_ED25519, 1,
+ 			  [Define if your OpenSSL version supports Ed25519.])
+-		AC_MSG_CHECKING(for OpenSSL Ed448 support)
+-		AC_TRY_RUN([
+-#include <openssl/evp.h>
+-#include <openssl/objects.h>
+-int main() {
+-	EVP_PKEY_CTX *ctx;
+-
+-	ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL);
+-	if (ctx == NULL)
+-		return (2);
+-	return (0);
+-}
+-],
+-		[AC_MSG_RESULT(yes)
+-		have_ed448="yes"],
+-		[AC_MSG_RESULT(no)
+-		have_ed448="no"],
+-		[AC_MSG_RESULT(using --with-eddsa)])
+-		case $with_eddsa in
+-		all)
+-			have_ed448=yes ;;
+-		*)
+-			;;
+-		esac
+-		case $have_ed448 in
+-		yes)
+-			AC_DEFINE(HAVE_OPENSSL_ED448, 1,
+-				  [Define if your OpenSSL version supports Ed448.])
+-			;;
+-		*)
+-			;;
+-		esac
+ 		;;
+ 	*)
+ 		;;
+ 	esac
+-
+ 	have_aes="no"
+ 	AC_MSG_CHECKING(for OpenSSL AES support)
+ 	AC_TRY_RUN([
diff --git a/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
new file mode 100644
index 0000000..5b665a9
--- /dev/null
+++ b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
@@ -0,0 +1,54 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 19 Mar 2019 14:14:21 +1100
+Subject: move item_out test inside lock in dns_dispatch_getnext()
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/3a9c7bb80d4a609b86427406d9dd783199920b5b
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-6471
+Bug-Debian: https://bugs.debian.org/930746
+
+(cherry picked from commit 60c42f849d520564ed42e5ed0ba46b4b69c07712)
+---
+ lib/dns/dispatch.c | 12 ++++++++----
+ 1 file changed, 8 insertions(+), 4 deletions(-)
+
+diff --git a/lib/dns/dispatch.c b/lib/dns/dispatch.c
+index d1e4c16..b5a8f74 100644
+--- a/lib/dns/dispatch.c
++++ b/lib/dns/dispatch.c
+@@ -134,7 +134,7 @@ struct dns_dispentry {
+ 	isc_task_t		       *task;
+ 	isc_taskaction_t		action;
+ 	void			       *arg;
+-	bool			item_out;
++	bool				item_out;
+ 	dispsocket_t			*dispsocket;
+ 	ISC_LIST(dns_dispatchevent_t)	items;
+ 	ISC_LINK(dns_dispentry_t)	link;
+@@ -3422,13 +3422,14 @@ dns_dispatch_getnext(dns_dispentry_t *resp, dns_dispatchevent_t **sockevent) {
+ 	disp = resp->disp;
+ 	REQUIRE(VALID_DISPATCH(disp));
+ 
+-	REQUIRE(resp->item_out == true);
+-	resp->item_out = false;
+-
+ 	ev = *sockevent;
+ 	*sockevent = NULL;
+ 
+ 	LOCK(&disp->lock);
++
++	REQUIRE(resp->item_out == true);
++	resp->item_out = false;
++
+ 	if (ev->buffer.base != NULL)
+ 		free_buffer(disp, ev->buffer.base, ev->buffer.length);
+ 	free_devent(disp, ev);
+@@ -3573,6 +3574,9 @@ dns_dispatch_removeresponse(dns_dispentry_t **resp,
+ 		isc_task_send(disp->task[0], &disp->ctlevent);
+ }
+ 
++/*
++ * disp must be locked.
++ */
+ static void
+ do_cancel(dns_dispatch_t *disp) {
+ 	dns_dispatchevent_t *ev;
diff --git a/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
new file mode 100644
index 0000000..a57296a
--- /dev/null
+++ b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
@@ -0,0 +1,117 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Wed, 16 Oct 2019 13:18:48 +0200
+Subject: Set a limit on number of simultaneous pipelined TCP queries
+
+There was no limit on concurrently served queries served over one pipelined TCP
+connection, thus it was possible to send thousands queries over a single TCP
+connection, possibly exhausting the server resources.
+
+(cherry picked from commit efaa67749de825073cd7f19778386d0815c4ce29)
+---
+ bin/named/client.c               | 57 ++++++++++++++++++++++++++--------------
+ bin/named/include/named/client.h |  5 +++-
+ 2 files changed, 42 insertions(+), 20 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 8155c6b..30877c5 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -101,7 +101,15 @@
+ #define SEND_BUFFER_SIZE		4096
+ #define RECV_BUFFER_SIZE		4096
+ 
++#define TCP_CLIENTS_PER_CONN		23
++/*%<
++ * Number of simultaneous ns_clients_t (queries in flight) for one
++ * TCP connection.  The number was arbitrarily picked and might be
++ * changed in the future.
++ */
++
+ #ifdef ISC_PLATFORM_USETHREADS
++
+ #define NMCTXS				100
+ /*%<
+  * Number of 'mctx pools' for clients. (Should this be configurable?)
+@@ -337,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) {
+ 	 */
+ 	tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
+ 
+-	isc_refcount_init(&tconn->refs, 1);
++	isc_refcount_init(&tconn->refs, 1);	/* Current client */
+ 	tconn->tcpquota = quota;
+ 	quota = NULL;
+ 	tconn->pipelined = false;
+@@ -2631,28 +2639,39 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ 	/*
+ 	 * Pipeline TCP query processing.
+ 	 */
+-	if (TCP_CLIENT(client) &&
+-	    client->message->opcode != dns_opcode_query)
+-	{
+-		client->tcpconn->pipelined = false;
+-	}
+-	if (TCP_CLIENT(client) && client->tcpconn->pipelined) {
++	if (TCP_CLIENT(client)) {
++		if (client->message->opcode != dns_opcode_query) {
++			client->tcpconn->pipelined = false;
++		}
++
+ 		/*
+-		 * We're pipelining. Replace the client; the
+-		 * replacement can read the TCP socket looking
+-		 * for new messages and this one can process the
+-		 * current message asynchronously.
+-		 *
+-		 * There will now be at least three clients using this
+-		 * TCP socket - one accepting new connections,
+-		 * one reading an existing connection to get new
+-		 * messages, and one answering the message already
+-		 * received.
++		 * Limit the maximum number of simultaenous pipelined
++		 * queries on TCP connection to TCP_CLIENTS_PER_CONN.
+ 		 */
+-		result = ns_client_replace(client);
+-		if (result != ISC_R_SUCCESS) {
++		if ((isc_refcount_current(&client->tcpconn->refs)
++			    > TCP_CLIENTS_PER_CONN))
++		{
+ 			client->tcpconn->pipelined = false;
+ 		}
++
++		if (client->tcpconn->pipelined) {
++			/*
++			 * We're pipelining. Replace the client; the
++			 * replacement can read the TCP socket looking
++			 * for new messages and this one can process the
++			 * current message asynchronously.
++			 *
++			 * There will now be at least three clients using this
++			 * TCP socket - one accepting new connections,
++			 * one reading an existing connection to get new
++			 * messages, and one answering the message already
++			 * received.
++			 */
++			result = ns_client_replace(client);
++			if (result != ISC_R_SUCCESS) {
++				client->tcpconn->pipelined = false;
++			}
++		}
+ 	}
+ 
+ 	dns_opcodestats_increment(ns_g_server->opcodestats,
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index 969ee4c..5ae10ae 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -80,7 +80,10 @@
+ 
+ /*% reference-counted TCP connection object */
+ typedef struct ns_tcpconn {
+-	isc_refcount_t		refs;
++	isc_refcount_t		refs;		/* Number of clients using
++						 * this connection. Conn can
++						 * be freed if goes to 0
++						 */
+ 	isc_quota_t		*tcpquota;
+ 	bool			pipelined;
+ } ns_tcpconn_t;
diff --git a/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
new file mode 100644
index 0000000..4045792
--- /dev/null
+++ b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
@@ -0,0 +1,82 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Wed, 16 Oct 2019 13:18:48 +0200
+Subject: libns: Rename ns_tcpconn refs member to clients
+
+(cherry picked from commit b6d6b50c997b3a00fdde9e0d32c4594ffe94f369)
+---
+ bin/named/client.c               | 16 ++++++++--------
+ bin/named/include/named/client.h |  2 +-
+ 2 files changed, 9 insertions(+), 9 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 30877c5..5dc309a 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -345,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) {
+ 	 */
+ 	tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
+ 
+-	isc_refcount_init(&tconn->refs, 1);	/* Current client */
++	isc_refcount_init(&tconn->clients, 1);	/* Current client */
+ 	tconn->tcpquota = quota;
+ 	quota = NULL;
+ 	tconn->pipelined = false;
+@@ -362,14 +362,14 @@ tcpconn_init(ns_client_t *client, bool force) {
+  */
+ static void
+ tcpconn_attach(ns_client_t *source, ns_client_t *target) {
+-	int refs;
++	int old_clients;
+ 
+ 	REQUIRE(source->tcpconn != NULL);
+ 	REQUIRE(target->tcpconn == NULL);
+ 	REQUIRE(source->tcpconn->pipelined);
+ 
+-	isc_refcount_increment(&source->tcpconn->refs, &refs);
+-	INSIST(refs > 1);
++	isc_refcount_increment(&source->tcpconn->clients, &old_clients);
++	INSIST(old_clients > 1);
+ 	target->tcpconn = source->tcpconn;
+ }
+ 
+@@ -382,15 +382,15 @@ tcpconn_attach(ns_client_t *source, ns_client_t *target) {
+ static void
+ tcpconn_detach(ns_client_t *client) {
+ 	ns_tcpconn_t *tconn = NULL;
+-	int refs;
++	int old_clients;
+ 
+ 	REQUIRE(client->tcpconn != NULL);
+ 
+ 	tconn = client->tcpconn;
+ 	client->tcpconn = NULL;
+ 
+-	isc_refcount_decrement(&tconn->refs, &refs);
+-	if (refs == 0) {
++	isc_refcount_decrement(&tconn->clients, &old_clients);
++	if (old_clients == 0) {
+ 		isc_quota_detach(&tconn->tcpquota);
+ 		isc_mem_free(ns_g_mctx, tconn);
+ 	}
+@@ -2648,7 +2648,7 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ 		 * Limit the maximum number of simultaenous pipelined
+ 		 * queries on TCP connection to TCP_CLIENTS_PER_CONN.
+ 		 */
+-		if ((isc_refcount_current(&client->tcpconn->refs)
++		if ((isc_refcount_current(&client->tcpconn->clients)
+ 			    > TCP_CLIENTS_PER_CONN))
+ 		{
+ 			client->tcpconn->pipelined = false;
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index 5ae10ae..01b6141 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -80,7 +80,7 @@
+ 
+ /*% reference-counted TCP connection object */
+ typedef struct ns_tcpconn {
+-	isc_refcount_t		refs;		/* Number of clients using
++	isc_refcount_t		clients;	/* Number of clients using
+ 						 * this connection. Conn can
+ 						 * be freed if goes to 0
+ 						 */
diff --git a/debian/patches/0018-CVE-2020-8616.patch b/debian/patches/0018-CVE-2020-8616.patch
new file mode 100644
index 0000000..1342140
--- /dev/null
+++ b/debian/patches/0018-CVE-2020-8616.patch
@@ -0,0 +1,212 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Thu, 14 May 2020 12:24:03 +0200
+Subject: CVE-2020-8616
+
+---
+ lib/dns/adb.c             | 33 ++++++++++++++++------------
+ lib/dns/include/dns/adb.h |  4 ++++
+ lib/dns/resolver.c        | 55 +++++++++++++++++++++++++++++++----------------
+ 3 files changed, 60 insertions(+), 32 deletions(-)
+
+diff --git a/lib/dns/adb.c b/lib/dns/adb.c
+index 956f368..55fa416 100644
+--- a/lib/dns/adb.c
++++ b/lib/dns/adb.c
+@@ -404,14 +404,13 @@ static void log_quota(dns_adbentry_t *entry, const char *fmt, ...)
+  */
+ #define FIND_WANTEVENT(fn)      (((fn)->options & DNS_ADBFIND_WANTEVENT) != 0)
+ #define FIND_WANTEMPTYEVENT(fn) (((fn)->options & DNS_ADBFIND_EMPTYEVENT) != 0)
+-#define FIND_AVOIDFETCHES(fn)   (((fn)->options & DNS_ADBFIND_AVOIDFETCHES) \
+-				 != 0)
+-#define FIND_STARTATZONE(fn)    (((fn)->options & DNS_ADBFIND_STARTATZONE) \
+-				 != 0)
+-#define FIND_HINTOK(fn)         (((fn)->options & DNS_ADBFIND_HINTOK) != 0)
+-#define FIND_GLUEOK(fn)         (((fn)->options & DNS_ADBFIND_GLUEOK) != 0)
+-#define FIND_HAS_ADDRS(fn)      (!ISC_LIST_EMPTY((fn)->list))
+-#define FIND_RETURNLAME(fn)     (((fn)->options & DNS_ADBFIND_RETURNLAME) != 0)
++#define FIND_AVOIDFETCHES(fn)	(((fn)->options & DNS_ADBFIND_AVOIDFETCHES) != 0)
++#define FIND_STARTATZONE(fn)	(((fn)->options & DNS_ADBFIND_STARTATZONE) != 0)
++#define FIND_HINTOK(fn)		(((fn)->options & DNS_ADBFIND_HINTOK) != 0)
++#define FIND_GLUEOK(fn)		(((fn)->options & DNS_ADBFIND_GLUEOK) != 0)
++#define FIND_HAS_ADDRS(fn)	(!ISC_LIST_EMPTY((fn)->list))
++#define FIND_RETURNLAME(fn)	(((fn)->options & DNS_ADBFIND_RETURNLAME) != 0)
++#define FIND_NOFETCH(fn)	(((fn)->options & DNS_ADBFIND_NOFETCH) != 0)
+ 
+ /*
+  * These are currently used on simple unsigned ints, so they are
+@@ -3155,21 +3154,26 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ 		 * Listen to negative cache hints, and don't start
+ 		 * another query.
+ 		 */
+-		if (NCACHE_RESULT(result) || AUTH_NX(result))
++		if (NCACHE_RESULT(result) || AUTH_NX(result)) {
+ 			goto fetch;
++		}
+ 
+-		if (!NAME_FETCH_V6(adbname))
++		if (!NAME_FETCH_V6(adbname)) {
+ 			wanted_fetches |= DNS_ADBFIND_INET6;
++		}
+ 	}
+ 
+  fetch:
+ 	if ((WANT_INET(wanted_addresses) && NAME_HAS_V4(adbname)) ||
+ 	    (WANT_INET6(wanted_addresses) && NAME_HAS_V6(adbname)))
++	{
+ 		have_address = true;
+-	else
++	} else {
+ 		have_address = false;
+-	if (wanted_fetches != 0 &&
+-	    ! (FIND_AVOIDFETCHES(find) && have_address)) {
++	}
++	if (wanted_fetches != 0 && !(FIND_AVOIDFETCHES(find) && have_address) &&
++	    !FIND_NOFETCH(find))
++	{
+ 		/*
+ 		 * We're missing at least one address family.  Either the
+ 		 * caller hasn't instructed us to avoid fetches, or we don't
+@@ -3177,8 +3181,9 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ 		 * be acceptable so we have to launch fetches.
+ 		 */
+ 
+-		if (FIND_STARTATZONE(find))
++		if (FIND_STARTATZONE(find)) {
+ 			start_at_zone = true;
++		}
+ 
+ 		/*
+ 		 * Start V4.
+diff --git a/lib/dns/include/dns/adb.h b/lib/dns/include/dns/adb.h
+index ca35bac..3e27c9e 100644
+--- a/lib/dns/include/dns/adb.h
++++ b/lib/dns/include/dns/adb.h
+@@ -207,6 +207,10 @@ struct dns_adbfind {
+  *      lame for this query.
+  */
+ #define DNS_ADBFIND_OVERQUOTA		0x00000400
++/*%
++ *	Don't perform a fetch even if there are no address records available.
++ */
++#define DNS_ADBFIND_NOFETCH		0x00000800
+ 
+ /*%
+  * The answers to queries come back as a list of these.
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 1d76504..1e4fcab 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -177,6 +177,14 @@
+ #define DEFAULT_MAX_QUERIES 75
+ #endif
+ 
++/*
++ * After NS_FAIL_LIMIT attempts to fetch a name server address,
++ * if the number of addresses in the NS RRset exceeds NS_RR_LIMIT,
++ * stop trying to fetch, in order to avoid wasting resources.
++ */
++#define NS_FAIL_LIMIT 4
++#define NS_RR_LIMIT   5
++
+ /* Number of hash buckets for zone counters */
+ #ifndef RES_DOMAIN_BUCKETS
+ #define RES_DOMAIN_BUCKETS	523
+@@ -3089,8 +3097,7 @@ sort_finds(dns_adbfindlist_t *findlist, unsigned int bias) {
+ static void
+ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port,
+ 	 unsigned int options, unsigned int flags, isc_stdtime_t now,
+-	 bool *overquota, bool *need_alternate)
+-{
++	 bool *overquota, bool *need_alternate, unsigned int *no_addresses) {
+ 	dns_adbaddrinfo_t *ai;
+ 	dns_adbfind_t *find;
+ 	dns_resolver_t *res;
+@@ -3178,7 +3185,12 @@ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port,
+ 			      find->result_v6 != DNS_R_NXDOMAIN) ||
+ 			     (res->dispatches6 == NULL &&
+ 			      find->result_v4 != DNS_R_NXDOMAIN)))
++			{
+ 				*need_alternate = true;
++			}
++			if (no_addresses != NULL) {
++				(*no_addresses)++;
++			}
+ 		} else {
+ 			if ((find->options & DNS_ADBFIND_OVERQUOTA) != 0) {
+ 				if (overquota != NULL)
+@@ -3229,6 +3241,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ 	dns_rdata_ns_t ns;
+ 	bool need_alternate = false;
+ 	bool all_spilled = true;
++	unsigned int no_addresses = 0;
+ 
+ 	FCTXTRACE5("getaddresses", "fctx->depth=", fctx->depth);
+ 
+@@ -3384,20 +3397,28 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ 		 * Extract the name from the NS record.
+ 		 */
+ 		result = dns_rdata_tostruct(&rdata, &ns, NULL);
+-		if (result != ISC_R_SUCCESS)
++		if (result != ISC_R_SUCCESS) {
+ 			continue;
++		}
+ 
+-		findname(fctx, &ns.name, 0, stdoptions, 0, now,
+-			 &overquota, &need_alternate);
++		if (no_addresses > NS_FAIL_LIMIT &&
++		    dns_rdataset_count(&fctx->nameservers) > NS_RR_LIMIT)
++		{
++			stdoptions |= DNS_ADBFIND_NOFETCH;
++		}
++		findname(fctx, &ns.name, 0, stdoptions, 0, now, &overquota,
++			 &need_alternate, &no_addresses);
+ 
+-		if (!overquota)
++		if (!overquota) {
+ 			all_spilled = false;
++		}
+ 
+ 		dns_rdata_reset(&rdata);
+ 		dns_rdata_freestruct(&ns);
+ 	}
+-	if (result != ISC_R_NOMORE)
++	if (result != ISC_R_NOMORE) {
+ 		return (result);
++	}
+ 
+ 	/*
+ 	 * Do we need to use 6 to 4?
+@@ -3412,7 +3433,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ 			if (!a->isaddress) {
+ 				findname(fctx, &a->_u._n.name, a->_u._n.port,
+ 					 stdoptions, FCTX_ADDRINFO_FORWARDER,
+-					 now, NULL, NULL);
++					 now, NULL, NULL, NULL);
+ 				continue;
+ 			}
+ 			if (isc_sockaddr_pf(&a->_u.addr) != family)
+@@ -3774,16 +3795,14 @@ fctx_try(fetchctx_t *fctx, bool retrying, bool badcache) {
+ 		}
+ 	}
+ 
+-	if (dns_name_countlabels(&fctx->domain) > 2) {
+-		result = isc_counter_increment(fctx->qc);
+-		if (result != ISC_R_SUCCESS) {
+-			isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+-				      DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
+-				      "exceeded max queries resolving '%s'",
+-				      fctx->info);
+-			fctx_done(fctx, DNS_R_SERVFAIL, __LINE__);
+-			return;
+-		}
++	result = isc_counter_increment(fctx->qc);
++	if (result != ISC_R_SUCCESS) {
++		isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
++			      DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
++			      "exceeded max queries resolving '%s'",
++			      fctx->info);
++		fctx_done(fctx, DNS_R_SERVFAIL, __LINE__);
++		return;
+ 	}
+ 
+ 	bucketnum = fctx->bucketnum;
diff --git a/debian/patches/0019-CVE-2020-8617.patch b/debian/patches/0019-CVE-2020-8617.patch
new file mode 100644
index 0000000..63e84d3
--- /dev/null
+++ b/debian/patches/0019-CVE-2020-8617.patch
@@ -0,0 +1,33 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Thu, 14 May 2020 12:24:23 +0200
+Subject: CVE-2020-8617
+
+---
+ lib/dns/tsig.c | 7 ++++---
+ 1 file changed, 4 insertions(+), 3 deletions(-)
+
+diff --git a/lib/dns/tsig.c b/lib/dns/tsig.c
+index a94ec69..ff40b99 100644
+--- a/lib/dns/tsig.c
++++ b/lib/dns/tsig.c
+@@ -1422,8 +1422,9 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
+ 			goto cleanup_context;
+ 		}
+ 		msg->verified_sig = 1;
+-	} else if (tsig.error != dns_tsigerror_badsig &&
+-		   tsig.error != dns_tsigerror_badkey) {
++	} else if (!response || (tsig.error != dns_tsigerror_badsig &&
++				 tsig.error != dns_tsigerror_badkey))
++	{
+ 		tsig_log(msg->tsigkey, 2, "signature was empty");
+ 		return (DNS_R_TSIGVERIFYFAILURE);
+ 	}
+@@ -1489,7 +1490,7 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
+ 		}
+ 	}
+ 
+-	if (tsig.error != dns_rcode_noerror) {
++	if (response && tsig.error != dns_rcode_noerror) {
+ 		msg->tsigstatus = tsig.error;
+ 		if (tsig.error == dns_tsigerror_badtime)
+ 			ret = DNS_R_CLOCKSKEW;
diff --git a/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch
new file mode 100644
index 0000000..5880fd5
--- /dev/null
+++ b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch
@@ -0,0 +1,568 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 2 Jun 2020 12:38:40 +1000
+Subject: Remove INSIST from from new_reference
+
+RBTDB node can now appear on the deadnodes lists following the changes
+to decrement_reference in 176b23b6cd98e5b58f832902fdbe964ee5f762d0 to
+defer checking of node->down when the tree write lock is not held.  The
+node should be unlinked instead.
+
+(cherry picked from commit b8c4efb10fc8ef1489120a8169fea42adf97025e)
+---
+ lib/dns/rbtdb.c | 238 +++++++++++++++++++++++++++++++++-----------------------
+ 1 file changed, 142 insertions(+), 96 deletions(-)
+
+diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
+index 0861139..792c443 100644
+--- a/lib/dns/rbtdb.c
++++ b/lib/dns/rbtdb.c
+@@ -2069,11 +2069,16 @@ delete_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) {
+  * Caller must be holding the node lock.
+  */
+ static inline void
+-new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) {
++new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
++	      isc_rwlocktype_t locktype) {
+ 	unsigned int lockrefs, noderefs;
+ 	isc_refcount_t *lockref;
+ 
+-	INSIST(!ISC_LINK_LINKED(node, deadlink));
++	if (locktype == isc_rwlocktype_write && ISC_LINK_LINKED(node, deadlink))
++	{
++		ISC_LIST_UNLINK(rbtdb->deadnodes[node->locknum], node,
++				deadlink);
++	}
+ 	dns_rbtnode_refincrement0(node, &noderefs);
+ 	if (noderefs == 1) {    /* this is the first reference to the node */
+ 		lockref = &rbtdb->node_locks[node->locknum].references;
+@@ -2119,7 +2124,7 @@ cleanup_dead_nodes(dns_rbtdb_t *rbtdb, int bucketnum) {
+ 						prune_tree, node,
+ 						sizeof(isc_event_t));
+ 			if (ev != NULL) {
+-				new_reference(rbtdb, node);
++				new_reference(rbtdb, node, isc_rwlocktype_write);
+ 				db = NULL;
+ 				attach((dns_db_t *)rbtdb, &db);
+ 				ev->ev_sender = db;
+@@ -2183,7 +2188,7 @@ reactivate_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ 			cleanup_dead_nodes(rbtdb, node->locknum);
+ 	}
+ 
+-	new_reference(rbtdb, node);
++	new_reference(rbtdb, node, locktype);
+ 
+ 	NODE_WEAKUNLOCK(nodelock, locktype);
+ 	NODE_STRONGUNLOCK(nodelock);
+@@ -2329,7 +2334,7 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ 						prune_tree, node,
+ 						sizeof(isc_event_t));
+ 			if (ev != NULL) {
+-				new_reference(rbtdb, node);
++				new_reference(rbtdb, node, isc_rwlocktype_write);
+ 				db = NULL;
+ 				attach((dns_db_t *)rbtdb, &db);
+ 				ev->ev_sender = db;
+@@ -2361,8 +2366,10 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ 		}
+ 	} else {
+ 		INSIST(node->data == NULL);
+-		INSIST(!ISC_LINK_LINKED(node, deadlink));
+-		ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node, deadlink);
++		if (!ISC_LINK_LINKED(node, deadlink)) {
++			ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node,
++					deadlink);
++		}
+ 	}
+ 
+  restore_locks:
+@@ -2427,17 +2434,16 @@ prune_tree(isc_task_t *task, isc_event_t *event) {
+ 
+ 			/*
+ 			 * We need to gain a reference to the node before
+-			 * decrementing it in the next iteration.  In addition,
+-			 * if the node is in the dead-nodes list, extract it
+-			 * from the list beforehand as we do in
+-			 * reactivate_node().
++			 * decrementing it in the next iteration.
+ 			 */
+-			if (ISC_LINK_LINKED(parent, deadlink))
++			if (ISC_LINK_LINKED(parent, deadlink)) {
+ 				ISC_LIST_UNLINK(rbtdb->deadnodes[locknum],
+ 						parent, deadlink);
+-			new_reference(rbtdb, parent);
+-		} else
++			}
++			new_reference(rbtdb, parent, isc_rwlocktype_write);
++		} else {
+ 			parent = NULL;
++		}
+ 
+ 		node = parent;
+ 	} while (node != NULL);
+@@ -3219,7 +3225,7 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ 		 * We increment the reference count on node to ensure that
+ 		 * search->zonecut_rdataset will still be valid later.
+ 		 */
+-		new_reference(search->rbtdb, node);
++		new_reference(search->rbtdb, node, isc_rwlocktype_read);
+ 		search->zonecut = node;
+ 		search->zonecut_rdataset = found;
+ 		search->need_cleanup = true;
+@@ -3270,11 +3276,10 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ }
+ 
+ static inline void
+-bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+-	      rdatasetheader_t *header, isc_stdtime_t now,
+-	      dns_rdataset_t *rdataset)
+-{
+-	unsigned char *raw;     /* RDATASLAB */
++bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, rdatasetheader_t *header,
++	      isc_stdtime_t now, isc_rwlocktype_t locktype,
++	      dns_rdataset_t *rdataset) {
++	unsigned char *raw; /* RDATASLAB */
+ 
+ 	/*
+ 	 * Caller must be holding the node reader lock.
+@@ -3287,7 +3292,7 @@ bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ 	if (rdataset == NULL)
+ 		return;
+ 
+-	new_reference(rbtdb, node);
++	new_reference(rbtdb, node, locktype);
+ 
+ 	INSIST(rdataset->methods == NULL);      /* We must be disassociated. */
+ 
+@@ -3382,11 +3387,13 @@ setup_delegation(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ 		NODE_LOCK(&(search->rbtdb->node_locks[node->locknum].lock),
+ 			  isc_rwlocktype_read);
+ 		bind_rdataset(search->rbtdb, node, search->zonecut_rdataset,
+-			      search->now, rdataset);
++			      search->now, isc_rwlocktype_read, rdataset);
+ 		if (sigrdataset != NULL && search->zonecut_sigrdataset != NULL)
++		{
+ 			bind_rdataset(search->rbtdb, node,
+-				      search->zonecut_sigrdataset,
+-				      search->now, sigrdataset);
++				      search->zonecut_sigrdataset, search->now,
++				      isc_rwlocktype_read, sigrdataset);
++		}
+ 		NODE_UNLOCK(&(search->rbtdb->node_locks[node->locknum].lock),
+ 			    isc_rwlocktype_read);
+ 	}
+@@ -4045,19 +4052,22 @@ find_closest_nsec(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ 							      foundname, NULL);
+ 				if (result == ISC_R_SUCCESS) {
+ 					if (nodep != NULL) {
+-						new_reference(search->rbtdb,
+-							      node);
++						new_reference(
++							search->rbtdb, node,
++							isc_rwlocktype_read);
+ 						*nodep = node;
+ 					}
+ 					bind_rdataset(search->rbtdb, node,
+ 						      found, search->now,
++						      isc_rwlocktype_read,
+ 						      rdataset);
+-					if (foundsig != NULL)
+-						bind_rdataset(search->rbtdb,
+-							      node,
+-							      foundsig,
+-							      search->now,
+-							      sigrdataset);
++					if (foundsig != NULL) {
++						bind_rdataset(
++							search->rbtdb, node,
++							foundsig, search->now,
++							isc_rwlocktype_read,
++							sigrdataset);
++					}
+ 				}
+ 			} else if (found == NULL && foundsig == NULL) {
+ 				/*
+@@ -4331,7 +4341,8 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 				 * ensure that search->zonecut_rdataset will
+ 				 * still be valid later.
+ 				 */
+-				new_reference(search.rbtdb, node);
++				new_reference(search.rbtdb, node,
++					      isc_rwlocktype_read);
+ 				search.zonecut = node;
+ 				search.zonecut_rdataset = header;
+ 				search.zonecut_sigrdataset = NULL;
+@@ -4504,18 +4515,19 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 			goto node_exit;
+ 		}
+ 		if (nodep != NULL) {
+-			new_reference(search.rbtdb, node);
++			new_reference(search.rbtdb, node, isc_rwlocktype_read);
+ 			*nodep = node;
+ 		}
+ 		if ((search.rbtversion->secure == dns_db_secure &&
+ 		     !search.rbtversion->havensec3) ||
+ 		    (search.options & DNS_DBFIND_FORCENSEC) != 0)
+ 		{
+-			bind_rdataset(search.rbtdb, node, nsecheader,
+-				      0, rdataset);
+-			if (nsecsig != NULL)
+-				bind_rdataset(search.rbtdb, node,
+-					      nsecsig, 0, sigrdataset);
++			bind_rdataset(search.rbtdb, node, nsecheader, 0,
++				      isc_rwlocktype_read, rdataset);
++			if (nsecsig != NULL) {
++				bind_rdataset(search.rbtdb, node, nsecsig, 0,
++					      isc_rwlocktype_read, sigrdataset);
++			}
+ 		}
+ 		if (wild)
+ 			foundname->attributes |= DNS_NAMEATTR_WILDCARD;
+@@ -4581,18 +4593,21 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 	}
+ 
+ 	if (nodep != NULL) {
+-		if (!at_zonecut)
+-			new_reference(search.rbtdb, node);
+-		else
++		if (!at_zonecut) {
++			new_reference(search.rbtdb, node, isc_rwlocktype_read);
++		} else {
+ 			search.need_cleanup = false;
++		}
+ 		*nodep = node;
+ 	}
+ 
+ 	if (type != dns_rdatatype_any) {
+-		bind_rdataset(search.rbtdb, node, found, 0, rdataset);
+-		if (foundsig != NULL)
++		bind_rdataset(search.rbtdb, node, found, 0, isc_rwlocktype_read,
++			      rdataset);
++		if (foundsig != NULL) {
+ 			bind_rdataset(search.rbtdb, node, foundsig, 0,
+-				      sigrdataset);
++				      isc_rwlocktype_read, sigrdataset);
++		}
+ 	}
+ 
+ 	if (wild)
+@@ -4762,8 +4777,7 @@ cache_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ 		 * We increment the reference count on node to ensure that
+ 		 * search->zonecut_rdataset will still be valid later.
+ 		 */
+-		new_reference(search->rbtdb, node);
+-		INSIST(!ISC_LINK_LINKED(node, deadlink));
++		new_reference(search->rbtdb, node, locktype);
+ 		search->zonecut = node;
+ 		search->zonecut_rdataset = dname_header;
+ 		search->zonecut_sigrdataset = sigdname_header;
+@@ -4869,14 +4883,16 @@ find_deepest_zonecut(rbtdb_search_t *search, dns_rbtnode_t *node,
+ 			}
+ 			result = DNS_R_DELEGATION;
+ 			if (nodep != NULL) {
+-				new_reference(search->rbtdb, node);
++				new_reference(search->rbtdb, node, locktype);
+ 				*nodep = node;
+ 			}
+ 			bind_rdataset(search->rbtdb, node, found, search->now,
+-				      rdataset);
+-			if (foundsig != NULL)
++				      locktype, rdataset);
++			if (foundsig != NULL) {
+ 				bind_rdataset(search->rbtdb, node, foundsig,
+-					      search->now, sigrdataset);
++					      search->now, locktype,
++					      sigrdataset);
++			}
+ 			if (need_headerupdate(found, search->now) ||
+ 			    (foundsig != NULL &&
+ 			     need_headerupdate(foundsig, search->now))) {
+@@ -4968,14 +4984,16 @@ find_coveringnsec(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ 		if (found != NULL) {
+ 			result = dns_name_concatenate(name, origin,
+ 						      foundname, NULL);
+-			if (result != ISC_R_SUCCESS)
++			if (result != ISC_R_SUCCESS) {
+ 				goto unlock_node;
+-			bind_rdataset(search->rbtdb, node, found,
+-				      now, rdataset);
+-			if (foundsig != NULL)
++			}
++			bind_rdataset(search->rbtdb, node, found, now, locktype,
++				      rdataset);
++			if (foundsig != NULL) {
+ 				bind_rdataset(search->rbtdb, node, foundsig,
+-					      now, sigrdataset);
+-			new_reference(search->rbtdb, node);
++					      now, locktype, sigrdataset);
++			}
++			new_reference(search->rbtdb, node, locktype);
+ 			*nodep = node;
+ 			result = DNS_R_COVERINGNSEC;
+ 		} else if (!empty_node) {
+@@ -5230,19 +5248,21 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 		 */
+ 		if (nsheader != NULL) {
+ 			if (nodep != NULL) {
+-				new_reference(search.rbtdb, node);
+-				INSIST(!ISC_LINK_LINKED(node, deadlink));
++				new_reference(search.rbtdb, node, locktype);
+ 				*nodep = node;
+ 			}
+ 			bind_rdataset(search.rbtdb, node, nsheader, search.now,
+-				      rdataset);
+-			if (need_headerupdate(nsheader, search.now))
++				      locktype, rdataset);
++			if (need_headerupdate(nsheader, search.now)) {
+ 				update = nsheader;
++			}
+ 			if (nssig != NULL) {
+ 				bind_rdataset(search.rbtdb, node, nssig,
+-					      search.now, sigrdataset);
+-				if (need_headerupdate(nssig, search.now))
++					      search.now, locktype,
++					      sigrdataset);
++				if (need_headerupdate(nssig, search.now)) {
+ 					updatesig = nssig;
++				}
+ 			}
+ 			result = DNS_R_DELEGATION;
+ 			goto node_exit;
+@@ -5260,8 +5280,7 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 	 */
+ 
+ 	if (nodep != NULL) {
+-		new_reference(search.rbtdb, node);
+-		INSIST(!ISC_LINK_LINKED(node, deadlink));
++		new_reference(search.rbtdb, node, locktype);
+ 		*nodep = node;
+ 	}
+ 
+@@ -5290,16 +5309,19 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ 	}
+ 
+ 	if (type != dns_rdatatype_any || result == DNS_R_NCACHENXDOMAIN ||
+-	    result == DNS_R_NCACHENXRRSET) {
+-		bind_rdataset(search.rbtdb, node, found, search.now,
++	    result == DNS_R_NCACHENXRRSET)
++	{
++		bind_rdataset(search.rbtdb, node, found, search.now, locktype,
+ 			      rdataset);
+-		if (need_headerupdate(found, search.now))
++		if (need_headerupdate(found, search.now)) {
+ 			update = found;
++		}
+ 		if (!NEGATIVE(found) && foundsig != NULL) {
+ 			bind_rdataset(search.rbtdb, node, foundsig, search.now,
+-				      sigrdataset);
+-			if (need_headerupdate(foundsig, search.now))
++				      locktype, sigrdataset);
++			if (need_headerupdate(foundsig, search.now)) {
+ 				updatesig = foundsig;
++			}
+ 		}
+ 	}
+ 
+@@ -5445,15 +5467,16 @@ cache_findzonecut(dns_db_t *db, dns_name_t *name, unsigned int options,
+ 	}
+ 
+ 	if (nodep != NULL) {
+-		new_reference(search.rbtdb, node);
+-		INSIST(!ISC_LINK_LINKED(node, deadlink));
++		new_reference(search.rbtdb, node, locktype);
+ 		*nodep = node;
+ 	}
+ 
+-	bind_rdataset(search.rbtdb, node, found, search.now, rdataset);
+-	if (foundsig != NULL)
++	bind_rdataset(search.rbtdb, node, found, search.now, locktype,
++		      rdataset);
++	if (foundsig != NULL) {
+ 		bind_rdataset(search.rbtdb, node, foundsig, search.now,
+-			      sigrdataset);
++			      locktype, sigrdataset);
++	}
+ 
+ 	if (need_headerupdate(found, search.now) ||
+ 	    (foundsig != NULL &&  need_headerupdate(foundsig, search.now))) {
+@@ -5804,10 +5827,12 @@ zone_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ 		}
+ 	}
+ 	if (found != NULL) {
+-		bind_rdataset(rbtdb, rbtnode, found, now, rdataset);
+-		if (foundsig != NULL)
++		bind_rdataset(rbtdb, rbtnode, found, now, isc_rwlocktype_read,
++			      rdataset);
++		if (foundsig != NULL) {
+ 			bind_rdataset(rbtdb, rbtnode, foundsig, now,
+-				      sigrdataset);
++				      isc_rwlocktype_read, sigrdataset);
++		}
+ 	}
+ 
+ 	NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+@@ -5892,10 +5917,11 @@ cache_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ 		}
+ 	}
+ 	if (found != NULL) {
+-		bind_rdataset(rbtdb, rbtnode, found, now, rdataset);
+-		if (!NEGATIVE(found) && foundsig != NULL)
+-			bind_rdataset(rbtdb, rbtnode, foundsig, now,
++		bind_rdataset(rbtdb, rbtnode, found, now, locktype, rdataset);
++		if (!NEGATIVE(found) && foundsig != NULL) {
++			bind_rdataset(rbtdb, rbtnode, foundsig, now, locktype,
+ 				      sigrdataset);
++		}
+ 	}
+ 
+ 	NODE_UNLOCK(lock, locktype);
+@@ -6061,6 +6087,9 @@ resign_insert(dns_rbtdb_t *rbtdb, int idx, rdatasetheader_t *newheader) {
+ 	return (result);
+ }
+ 
++/*
++ * node write lock must be held.
++ */
+ static void
+ resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ 	      rdatasetheader_t *header)
+@@ -6073,7 +6102,8 @@ resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ 				header->heap_index);
+ 		header->heap_index = 0;
+ 		if (version != NULL) {
+-			new_reference(rbtdb, header->node);
++			new_reference(rbtdb, header->node,
++				      isc_rwlocktype_write);
+ 			ISC_LIST_APPEND(version->resigned_list, header, link);
+ 		}
+ 	}
+@@ -6095,6 +6125,9 @@ update_recordsandbytes(bool add, rbtdb_version_t *rbtversion,
+ 	}
+ }
+ 
++/*
++ * write lock on rbtnode must be held.
++ */
+ static isc_result_t
+ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+       rdatasetheader_t *newheader, unsigned int options, bool loading,
+@@ -6218,10 +6251,13 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ 					free_rdataset(rbtdb,
+ 						      rbtdb->common.mctx,
+ 						      newheader);
+-					if (addedrdataset != NULL)
+-						bind_rdataset(rbtdb, rbtnode,
+-							      topheader, now,
+-							      addedrdataset);
++					if (addedrdataset != NULL) {
++						bind_rdataset(
++							rbtdb, rbtnode,
++							topheader, now,
++							isc_rwlocktype_write,
++							addedrdataset);
++					}
+ 					return (DNS_R_UNCHANGED);
+ 				}
+ 				/*
+@@ -6275,6 +6311,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ 			free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ 			if (addedrdataset != NULL)
+ 				bind_rdataset(rbtdb, rbtnode, header, now,
++					      isc_rwlocktype_write,
+ 					      addedrdataset);
+ 			return (DNS_R_UNCHANGED);
+ 		}
+@@ -6374,6 +6411,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ 			free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ 			if (addedrdataset != NULL)
+ 				bind_rdataset(rbtdb, rbtnode, header, now,
++					      isc_rwlocktype_write,
+ 					      addedrdataset);
+ 			return (ISC_R_SUCCESS);
+ 		}
+@@ -6420,6 +6458,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ 			free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ 			if (addedrdataset != NULL)
+ 				bind_rdataset(rbtdb, rbtnode, header, now,
++					      isc_rwlocktype_write,
+ 					      addedrdataset);
+ 			return (ISC_R_SUCCESS);
+ 		}
+@@ -6617,8 +6656,10 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ 	    cname_and_other_data(rbtnode, rbtversion->serial))
+ 		return (DNS_R_CNAMEANDOTHER);
+ 
+-	if (addedrdataset != NULL)
+-		bind_rdataset(rbtdb, rbtnode, newheader, now, addedrdataset);
++	if (addedrdataset != NULL) {
++		bind_rdataset(rbtdb, rbtnode, newheader, now,
++			      isc_rwlocktype_write, addedrdataset);
++	}
+ 
+ 	return (ISC_R_SUCCESS);
+ }
+@@ -7141,12 +7182,17 @@ subtractrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ 			result = DNS_R_UNCHANGED;
+ 	}
+ 
+-	if (result == ISC_R_SUCCESS && newrdataset != NULL)
+-		bind_rdataset(rbtdb, rbtnode, newheader, 0, newrdataset);
++	if (result == ISC_R_SUCCESS && newrdataset != NULL) {
++		bind_rdataset(rbtdb, rbtnode, newheader, 0,
++			      isc_rwlocktype_write, newrdataset);
++	}
+ 
+ 	if (result == DNS_R_NXRRSET && newrdataset != NULL &&
+ 	    (options & DNS_DBSUB_WANTOLD) != 0)
+-		bind_rdataset(rbtdb, rbtnode, header, 0, newrdataset);
++	{
++		bind_rdataset(rbtdb, rbtnode, header, 0, isc_rwlocktype_write,
++			      newrdataset);
++	}
+ 
+  unlock:
+ 	NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+@@ -8057,7 +8103,7 @@ getoriginnode(dns_db_t *db, dns_dbnode_t **nodep) {
+ 	onode = (dns_rbtnode_t *)rbtdb->origin_node;
+ 	if (onode != NULL) {
+ 		NODE_STRONGLOCK(&rbtdb->node_locks[onode->locknum].lock);
+-		new_reference(rbtdb, onode);
++		new_reference(rbtdb, onode, isc_rwlocktype_none);
+ 		NODE_STRONGUNLOCK(&rbtdb->node_locks[onode->locknum].lock);
+ 
+ 		*nodep = rbtdb->origin_node;
+@@ -8222,7 +8268,7 @@ getsigningtime(dns_db_t *db, dns_rdataset_t *rdataset,
+ 	if (header == NULL)
+ 		goto unlock;
+ 
+-	bind_rdataset(rbtdb, header->node, header, 0, rdataset);
++	bind_rdataset(rbtdb, header->node, header, 0, isc_rwlocktype_read, rdataset);
+ 
+ 	if (foundname != NULL)
+ 		dns_rbt_fullnamefromnode(header->node, foundname);
+@@ -9214,7 +9260,7 @@ rdatasetiter_current(dns_rdatasetiter_t *iterator, dns_rdataset_t *rdataset) {
+ 		  isc_rwlocktype_read);
+ 
+ 	bind_rdataset(rbtdb, rbtnode, header, rbtiterator->common.now,
+-		      rdataset);
++		      isc_rwlocktype_read, rdataset);
+ 
+ 	NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+ 		    isc_rwlocktype_read);
+@@ -9650,7 +9696,7 @@ dbiterator_current(dns_dbiterator_t *iterator, dns_dbnode_t **nodep,
+ 		result = ISC_R_SUCCESS;
+ 
+ 	NODE_STRONGLOCK(&rbtdb->node_locks[node->locknum].lock);
+-	new_reference(rbtdb, node);
++	new_reference(rbtdb, node, isc_rwlocktype_none);
+ 	NODE_STRONGUNLOCK(&rbtdb->node_locks[node->locknum].lock);
+ 
+ 	*nodep = rbtdbiter->node;
+@@ -10405,7 +10451,7 @@ expire_header(dns_rbtdb_t *rbtdb, rdatasetheader_t *header,
+ 		 * We first need to gain a new reference to the node to meet a
+ 		 * requirement of decrement_reference().
+ 		 */
+-		new_reference(rbtdb, header->node);
++		new_reference(rbtdb, header->node, isc_rwlocktype_write);
+ 		decrement_reference(rbtdb, header->node, 0,
+ 				    isc_rwlocktype_write,
+ 				    tree_locked ? isc_rwlocktype_write :
diff --git a/debian/patches/0021-Always-keep-a-copy-of-the-message.patch b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch
new file mode 100644
index 0000000..4edc752
--- /dev/null
+++ b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch
@@ -0,0 +1,55 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 15 Jul 2020 16:07:51 +1000
+Subject: Always keep a copy of the message
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/6ed167ad0a647dff20c8cb08c944a7967df2d415
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8622
+
+this allows it to be available even when dns_message_parse()
+returns a error.
+---
+ lib/dns/message.c | 24 +++++++++++++-----------
+ 1 file changed, 13 insertions(+), 11 deletions(-)
+
+diff --git a/lib/dns/message.c b/lib/dns/message.c
+index ac637a2..39ed80f 100644
+--- a/lib/dns/message.c
++++ b/lib/dns/message.c
+@@ -1679,6 +1679,19 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
+ 	msg->header_ok = 0;
+ 	msg->question_ok = 0;
+ 
++	if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0) {
++		isc_buffer_usedregion(&origsource, &msg->saved);
++	} else {
++		msg->saved.length = isc_buffer_usedlength(&origsource);
++		msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
++		if (msg->saved.base == NULL) {
++			return (ISC_R_NOMEMORY);
++		}
++		memmove(msg->saved.base, isc_buffer_base(&origsource),
++			msg->saved.length);
++		msg->free_saved = 1;
++	}
++
+ 	isc_buffer_remainingregion(source, &r);
+ 	if (r.length < DNS_MESSAGE_HEADERLEN)
+ 		return (ISC_R_UNEXPECTEDEND);
+@@ -1754,17 +1767,6 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
+ 	}
+ 
+  truncated:
+-	if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0)
+-		isc_buffer_usedregion(&origsource, &msg->saved);
+-	else {
+-		msg->saved.length = isc_buffer_usedlength(&origsource);
+-		msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
+-		if (msg->saved.base == NULL)
+-			return (ISC_R_NOMEMORY);
+-		memmove(msg->saved.base, isc_buffer_base(&origsource),
+-			msg->saved.length);
+-		msg->free_saved = 1;
+-	}
+ 
+ 	if (ret == ISC_R_UNEXPECTEDEND && ignore_tc)
+ 		return (DNS_R_RECOVERABLE);
diff --git a/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
new file mode 100644
index 0000000..b321616
--- /dev/null
+++ b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
@@ -0,0 +1,400 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@isc.org>
+Date: Tue, 21 Jul 2020 14:42:47 +0200
+Subject: Fix crash in pk11_numbits() when native-pkcs11 is used
+
+origin: https://gitlab.isc.org/isc-projects/bind9/commit/8d807cc21655eaa6e6a08afafeec3682c0f3f2ab
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8623
+
+When pk11_numbits() is passed a user provided input that contains all
+zeroes (via crafted DNS message), it would crash with assertion
+failure.  Fix that by properly handling such input.
+
+[Salvatore Bonaccorso: Backport to 99.11.5.P4 which does not contain
+9d15323e2484 ("Add small tweaks to the code to fix compilation when ISC
+assertions are disabled")]
+---
+ lib/dns/pkcs11dh_link.c         | 15 ++++++--
+ lib/dns/pkcs11dsa_link.c        |  8 ++++-
+ lib/dns/pkcs11rsa_link.c        | 79 +++++++++++++++++++++++++++++++----------
+ lib/isc/include/pk11/internal.h |  3 +-
+ lib/isc/pk11.c                  | 60 ++++++++++++++++++++-----------
+ 5 files changed, 121 insertions(+), 44 deletions(-)
+
+diff --git a/lib/dns/pkcs11dh_link.c b/lib/dns/pkcs11dh_link.c
+index e2b60ea..4cd8e32 100644
+--- a/lib/dns/pkcs11dh_link.c
++++ b/lib/dns/pkcs11dh_link.c
+@@ -748,6 +748,7 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 	CK_BYTE *prime = NULL, *base = NULL, *pub = NULL;
+ 	CK_ATTRIBUTE *attr;
+ 	int special = 0;
++	unsigned int bits;
+ 	isc_result_t result;
+ 
+ 	isc_buffer_remainingregion(data, &r);
+@@ -852,7 +853,11 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 	pub = r.base;
+ 	isc_region_consume(&r, publen);
+ 
+-	key->key_size = pk11_numbits(prime, plen_);
++	result = pk11_numbits(prime, plen_, &bits);
++	if (result != ISC_R_SUCCESS) {
++		goto cleanup;
++	}
++	key->key_size = bits;
+ 
+ 	dh->repr = (CK_ATTRIBUTE *) isc_mem_get(key->mctx, sizeof(*attr) * 3);
+ 	if (dh->repr == NULL)
+@@ -1012,6 +1017,7 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 	dst_private_t priv;
+ 	isc_result_t ret;
+ 	int i;
++	unsigned int bits;
+ 	pk11_object_t *dh = NULL;
+ 	CK_ATTRIBUTE *attr;
+ 	isc_mem_t *mctx;
+@@ -1082,7 +1088,12 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 
+ 	attr = pk11_attribute_bytype(dh, CKA_PRIME);
+ 	INSIST(attr != NULL);
+-	key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	return (ISC_R_SUCCESS);
+ 
+diff --git a/lib/dns/pkcs11dsa_link.c b/lib/dns/pkcs11dsa_link.c
+index 12d707a..24d4c14 100644
+--- a/lib/dns/pkcs11dsa_link.c
++++ b/lib/dns/pkcs11dsa_link.c
+@@ -983,6 +983,7 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 	dst_private_t priv;
+ 	isc_result_t ret;
+ 	int i;
++	unsigned int bits;
+ 	pk11_object_t *dsa = NULL;
+ 	CK_ATTRIBUTE *attr;
+ 	isc_mem_t *mctx = key->mctx;
+@@ -1072,7 +1073,12 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 
+ 	attr = pk11_attribute_bytype(dsa, CKA_PRIME);
+ 	INSIST(attr != NULL);
+-	key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	return (ISC_R_SUCCESS);
+ 
+diff --git a/lib/dns/pkcs11rsa_link.c b/lib/dns/pkcs11rsa_link.c
+index eb782c8..57ee41d 100644
+--- a/lib/dns/pkcs11rsa_link.c
++++ b/lib/dns/pkcs11rsa_link.c
+@@ -330,6 +330,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ 		key->key_alg == DST_ALG_RSASHA256 ||
+ 		key->key_alg == DST_ALG_RSASHA512);
+ #endif
++	REQUIRE(maxbits <= RSA_MAX_PUBEXP_BITS);
+ 
+ 	/*
+ 	 * Reject incorrect RSA key lengths.
+@@ -373,6 +374,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ 	for (attr = pk11_attribute_first(rsa);
+ 	     attr != NULL;
+ 	     attr = pk11_attribute_next(rsa, attr))
++	{
+ 		switch (attr->type) {
+ 		case CKA_MODULUS:
+ 			INSIST(keyTemplate[5].type == attr->type);
+@@ -393,12 +395,16 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ 			memmove(keyTemplate[6].pValue, attr->pValue,
+ 				attr->ulValueLen);
+ 			keyTemplate[6].ulValueLen = attr->ulValueLen;
+-			if (pk11_numbits(attr->pValue,
+-					 attr->ulValueLen) > maxbits &&
+-			    maxbits != 0)
++			unsigned int bits;
++			ret = pk11_numbits(attr->pValue, attr->ulValueLen,
++					   &bits);
++			if (ret != ISC_R_SUCCESS ||
++			    (bits > maxbits && maxbits != 0)) {
+ 				DST_RET(DST_R_VERIFYFAILURE);
++			}
+ 			break;
+ 		}
++	}
+ 	pk11_ctx->object = CK_INVALID_HANDLE;
+ 	pk11_ctx->ontoken = false;
+ 	PK11_RET(pkcs_C_CreateObject,
+@@ -1063,6 +1069,7 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
+ 			keyTemplate[5].ulValueLen = attr->ulValueLen;
+ 			break;
+ 		case CKA_PUBLIC_EXPONENT:
++			unsigned int bits;
+ 			INSIST(keyTemplate[6].type == attr->type);
+ 			keyTemplate[6].pValue = isc_mem_get(dctx->mctx,
+ 							    attr->ulValueLen);
+@@ -1071,10 +1078,12 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
+ 			memmove(keyTemplate[6].pValue, attr->pValue,
+ 				attr->ulValueLen);
+ 			keyTemplate[6].ulValueLen = attr->ulValueLen;
+-			if (pk11_numbits(attr->pValue,
+-					 attr->ulValueLen)
+-				> RSA_MAX_PUBEXP_BITS)
++			ret = pk11_numbits(attr->pValue, attr->ulValueLen,
++					   &bits);
++			if (ret != ISC_R_SUCCESS || bits > RSA_MAX_PUBEXP_BITS)
++			{
+ 				DST_RET(DST_R_VERIFYFAILURE);
++			}
+ 			break;
+ 		}
+ 	pk11_ctx->object = CK_INVALID_HANDLE;
+@@ -1451,6 +1460,8 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 	CK_BYTE *exponent = NULL, *modulus = NULL;
+ 	CK_ATTRIBUTE *attr;
+ 	unsigned int length;
++	unsigned int bits;
++	isc_result_t ret = ISC_R_SUCCESS;
+ 
+ 	isc_buffer_remainingregion(data, &r);
+ 	if (r.length == 0)
+@@ -1468,9 +1479,7 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 
+ 	if (e_bytes == 0) {
+ 		if (r.length < 2) {
+-			isc_safe_memwipe(rsa, sizeof(*rsa));
+-			isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+-			return (DST_R_INVALIDPUBLICKEY);
++			DST_RET(DST_R_INVALIDPUBLICKEY);
+ 		}
+ 		e_bytes = (*r.base) << 8;
+ 		isc_region_consume(&r, 1);
+@@ -1479,16 +1488,18 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 	}
+ 
+ 	if (r.length < e_bytes) {
+-		isc_safe_memwipe(rsa, sizeof(*rsa));
+-		isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+-		return (DST_R_INVALIDPUBLICKEY);
++		DST_RET(DST_R_INVALIDPUBLICKEY);
+ 	}
+ 	exponent = r.base;
+ 	isc_region_consume(&r, e_bytes);
+ 	modulus = r.base;
+ 	mod_bytes = r.length;
+ 
+-	key->key_size = pk11_numbits(modulus, mod_bytes);
++	ret = pk11_numbits(modulus, mod_bytes, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	isc_buffer_forward(data, length);
+ 
+@@ -1538,9 +1549,12 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ 			    rsa->repr,
+ 			    rsa->attrcnt * sizeof(*attr));
+ 	}
++	ret = ISC_R_NOMEMORY;
++
++    err:
+ 	isc_safe_memwipe(rsa, sizeof(*rsa));
+ 	isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+-	return (ISC_R_NOMEMORY);
++	return (ret);
+ }
+ 
+ static isc_result_t
+@@ -1719,6 +1733,7 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
+ 	pk11_object_t *pubrsa;
+ 	pk11_context_t *pk11_ctx = NULL;
+ 	isc_result_t ret;
++	unsigned int bits;
+ 
+ 	if (label == NULL)
+ 		return (DST_R_NOENGINE);
+@@ -1803,7 +1818,11 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
+ 
+ 	attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ 	INSIST(attr != NULL);
+-	key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	return (ISC_R_SUCCESS);
+ 
+@@ -1889,6 +1908,7 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 	CK_ATTRIBUTE *attr;
+ 	isc_mem_t *mctx = key->mctx;
+ 	const char *engine = NULL, *label = NULL;
++	unsigned int bits;
+ 
+ 	/* read private key file */
+ 	ret = dst__privstruct_parse(key, DST_ALG_RSA, lexer, mctx, &priv);
+@@ -2032,12 +2052,22 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ 
+ 	attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ 	INSIST(attr != NULL);
+-	key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
+ 	INSIST(attr != NULL);
+-	if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
++
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	if (bits > RSA_MAX_PUBEXP_BITS) {
+ 		DST_RET(ISC_R_RANGE);
++	}
+ 
+ 	dst__privstruct_free(&priv, mctx);
+ 	isc_safe_memwipe(&priv, sizeof(priv));
+@@ -2072,6 +2102,7 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
+ 	pk11_context_t *pk11_ctx = NULL;
+ 	isc_result_t ret;
+ 	unsigned int i;
++	unsigned int bits;
+ 
+ 	UNUSED(pin);
+ 
+@@ -2166,12 +2197,22 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
+ 
+ 	attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
+ 	INSIST(attr != NULL);
+-	if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
++
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	if (bits > RSA_MAX_PUBEXP_BITS) {
+ 		DST_RET(ISC_R_RANGE);
++	}
+ 
+ 	attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ 	INSIST(attr != NULL);
+-	key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++	ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++	if (ret != ISC_R_SUCCESS) {
++		goto err;
++	}
++	key->key_size = bits;
+ 
+ 	pk11_return_session(pk11_ctx);
+ 	isc_safe_memwipe(pk11_ctx, sizeof(*pk11_ctx));
+diff --git a/lib/isc/include/pk11/internal.h b/lib/isc/include/pk11/internal.h
+index aa8907a..7cc8ec8 100644
+--- a/lib/isc/include/pk11/internal.h
++++ b/lib/isc/include/pk11/internal.h
+@@ -25,7 +25,8 @@ void pk11_mem_put(void *ptr, size_t size);
+ 
+ CK_SLOT_ID pk11_get_best_token(pk11_optype_t optype);
+ 
+-unsigned int pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt);
++isc_result_t
++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits);
+ 
+ CK_ATTRIBUTE *pk11_attribute_first(const pk11_object_t *obj);
+ 
+diff --git a/lib/isc/pk11.c b/lib/isc/pk11.c
+index c5d2310..b2ab6be 100644
+--- a/lib/isc/pk11.c
++++ b/lib/isc/pk11.c
+@@ -962,13 +962,15 @@ pk11_get_best_token(pk11_optype_t optype) {
+ 	return (token->slotid);
+ }
+ 
+-unsigned int
+-pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
++isc_result_t
++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits) {
+ 	unsigned int bitcnt, i;
+ 	CK_BYTE top;
+ 
+-	if (bytecnt == 0)
+-		return (0);
++	if (bytecnt == 0) {
++		*bits = 0;
++		return (ISC_R_SUCCESS);
++	}
+ 	bitcnt = bytecnt * 8;
+ 	for (i = 0; i < bytecnt; i++) {
+ 		top = data[i];
+@@ -976,25 +978,41 @@ pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
+ 			bitcnt -= 8;
+ 			continue;
+ 		}
+-		if (top & 0x80)
+-			return (bitcnt);
+-		if (top & 0x40)
+-			return (bitcnt - 1);
+-		if (top & 0x20)
+-			return (bitcnt - 2);
+-		if (top & 0x10)
+-			return (bitcnt - 3);
+-		if (top & 0x08)
+-			return (bitcnt - 4);
+-		if (top & 0x04)
+-			return (bitcnt - 5);
+-		if (top & 0x02)
+-			return (bitcnt - 6);
+-		if (top & 0x01)
+-			return (bitcnt - 7);
++		if (top & 0x80) {
++			*bits = bitcnt;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x40) {
++			*bits = bitcnt - 1;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x20) {
++			*bits = bitcnt - 2;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x10) {
++			*bits = bitcnt - 3;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x08) {
++			*bits = bitcnt - 4;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x04) {
++			*bits = bitcnt - 5;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x02) {
++			*bits = bitcnt - 6;
++			return (ISC_R_SUCCESS);
++		}
++		if (top & 0x01) {
++			*bits = bitcnt - 7;
++			return (ISC_R_SUCCESS);
++		}
+ 		break;
+ 	}
+-	INSIST(0);
++	return (ISC_R_RANGE);
+ }
+ 
+ CK_ATTRIBUTE *
diff --git a/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
new file mode 100644
index 0000000..6f2593c
--- /dev/null
+++ b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
@@ -0,0 +1,71 @@
+From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org>
+Date: Tue, 23 Apr 2019 14:59:05 +0200
+Subject: Wait more than 1 second for NSEC3 chain changes
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/4e2cc911d2ceb90ec04605451fb1bb518ef75cd0
+
+One second may not be enough for an NSEC3 chain change triggered by an
+UPDATE message to complete.  Wait up to 10 seconds when checking whether
+a given NSEC3 chain change is complete in the "nsupdate" system test.
+
+(cherry picked from commit f8746cddbce838fec2a28f00617df6af1319fbc8)
+---
+ bin/tests/system/nsupdate/tests.sh | 30 +++++++++++++++++++++---------
+ 1 file changed, 21 insertions(+), 9 deletions(-)
+
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index 9f26572..c72753b 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -454,18 +454,24 @@ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ 
+ n=`expr $n + 1`
+ ret=0
+-echo_i "add a new the NSEC3PARAM via update ($n)"
++echo_i "add a new NSEC3PARAM via update ($n)"
+ $NSUPDATE << EOF
+ server 10.53.0.3 ${PORT}
+ update add nsec3param.test 3600 NSEC3PARAM 1 0 4 -
+ send
+ EOF
+ 
+-sleep 1
++_ret=1
++for i in 0 1 2 3 4 5 6 7 8 9; do
++	$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
++	if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then
++		_ret=0
++		break
++	fi
++	sleep 1
++done
+ 
+-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+-        @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 2" dig.out.ns3.$n > /dev/null || ret=1
++if [ $_ret -ne 0 ]; then ret=1; fi
+ grep "NSEC3PARAM 1 0 4 -" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ if [ $ret != 0 ] ; then echo_i "failed"; status=`expr $ret + $status`; fi
+@@ -480,11 +486,17 @@ update add nsec3param.test 7200 NSEC3PARAM 1 0 5 -
+ send
+ EOF
+ 
+-sleep 1
++_ret=1
++for i in 0 1 2 3 4 5 6 7 8 9; do
++	$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
++	if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then
++		_ret=0
++		break
++	fi
++	sleep 1
++done
+ 
+-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+-        @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1
++if [ $_ret -ne 0 ]; then ret=1; fi
+ grep "7200.*NSEC3PARAM 1 0 5 -" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ $JOURNALPRINT ns3/nsec3param.test.db.signed.jnl > jp.out.ns3.$n
diff --git a/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
new file mode 100644
index 0000000..b2e6ac9
--- /dev/null
+++ b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
@@ -0,0 +1,27 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 29 Jul 2020 23:36:03 +1000
+Subject: [1/3] Update-policy 'subdomain' was incorrectly treated as 'zonesub'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/e4cccf9668c7adee4724a7649ec64685f82c8677
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+resulting in names outside the specified subdomain having the wrong
+restrictions for the given key.
+---
+ bin/named/zoneconf.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
+index e237bdb..4898447 100644
+--- a/bin/named/zoneconf.c
++++ b/bin/named/zoneconf.c
+@@ -237,7 +237,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
+ 
+ 		str = cfg_obj_asstring(matchtype);
+ 		CHECK(dns_ssu_mtypefromstring(str, &mtype));
+-		if (mtype == dns_ssumatchtype_subdomain) {
++		if (mtype == dns_ssumatchtype_subdomain &&
++		    strcasecmp(str, "zonesub") == 0) {
+ 			usezone = true;
+ 		}
+ 
diff --git a/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch
new file mode 100644
index 0000000..adcc70d
--- /dev/null
+++ b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch
@@ -0,0 +1,73 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 29 Jul 2020 23:36:03 +1000
+Subject: [2/3] Add a test for update-policy 'subdomain'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/393e8f643c02215fa4e6d4edf67be7d77085da0e
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+The new test checks that 'update-policy subdomain' is properly enforced.
+---
+ bin/tests/system/nsupdate/ns1/named.conf.in |  6 ++++++
+ bin/tests/system/nsupdate/tests.sh          | 25 +++++++++++++++++++++++++
+ 2 files changed, 31 insertions(+)
+
+diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in
+index 1d999ad..87904f4 100644
+--- a/bin/tests/system/nsupdate/ns1/named.conf.in
++++ b/bin/tests/system/nsupdate/ns1/named.conf.in
+@@ -36,6 +36,11 @@ key altkey {
+ 	secret "1234abcd8765";
+ };
+ 
++key restricted.example.nil {
++	algorithm hmac-md5;
++	secret "1234abcd8765";
++};
++
+ include "ddns.key";
+ 
+ zone "example.nil" {
+@@ -45,6 +50,7 @@ zone "example.nil" {
+ 	check-mx ignore;
+ 	update-policy {
+ 		grant ddns-key.example.nil subdomain example.nil ANY;
++		grant restricted.example.nil subdomain restricted.example.nil ANY;
+ 	};
+ 	allow-transfer { any; };
+ };
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index c72753b..432240e 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -635,6 +635,31 @@ then
+ echo_i "failed"; status=1
+ fi
+ 
++n=`expr $n + 1`
++ret=0
++echo_i "check that 'update-policy subdomain' is properly enforced ($n)"
++# "restricted.example.nil" matches "grant ... subdomain restricted.example.nil"
++# and thus this UPDATE should succeed.
++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 || ret=1
++server 10.53.0.1 ${PORT}
++key restricted.example.nil 1234abcd8765
++update add restricted.example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 restricted.example.nil TXT > dig.out.1.test$n || ret=1
++grep "TXT.*everywhere" dig.out.1.test$n > /dev/null || ret=1
++# "example.nil" does not match "grant ... subdomain restricted.example.nil" and
++# thus this UPDATE should fail.
++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 && ret=1
++server 10.53.0.1 ${PORT}
++key restricted.example.nil 1234abcd8765
++update add example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1
++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1
++[ $ret = 0 ] || { echo_i "failed"; status=1; }
++
+ n=`expr $n + 1`
+ ret=0
+ echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)"
diff --git a/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch
new file mode 100644
index 0000000..771c46c
--- /dev/null
+++ b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch
@@ -0,0 +1,111 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 4 Aug 2020 11:41:33 +1000
+Subject: [3/3] Add a test for update-policy 'zonesub'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/58e560beb50873c699f3431cf57e215dc645d7aa
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+The new test checks that 'update-policy zonesub' is properly enforced.
+---
+ bin/tests/system/nsupdate/ns1/named.conf.in |  6 +++++
+ bin/tests/system/nsupdate/tests.sh          | 35 +++++++++++++++++++++++++----
+ 2 files changed, 37 insertions(+), 4 deletions(-)
+
+diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in
+index 87904f4..e90907a 100644
+--- a/bin/tests/system/nsupdate/ns1/named.conf.in
++++ b/bin/tests/system/nsupdate/ns1/named.conf.in
+@@ -41,6 +41,11 @@ key restricted.example.nil {
+ 	secret "1234abcd8765";
+ };
+ 
++key zonesub-key.example.nil {
++	algorithm hmac-md5;
++	secret "1234subk8765";
++};
++
+ include "ddns.key";
+ 
+ zone "example.nil" {
+@@ -49,6 +54,7 @@ zone "example.nil" {
+ 	check-integrity no;
+ 	check-mx ignore;
+ 	update-policy {
++		grant zonesub-key.example.nil zonesub TXT;
+ 		grant ddns-key.example.nil subdomain example.nil ANY;
+ 		grant restricted.example.nil subdomain restricted.example.nil ANY;
+ 	};
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index 432240e..f2f26ab 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -430,7 +430,7 @@ sleep 1
+ # this also proves that the server is still running.
+ $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec example.\
+ 	@10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 0" dig.out.ns3.$n > /dev/null || ret=1
++grep "ANSWER: 0," dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+ 
+@@ -447,7 +447,7 @@ sleep 1
+ 
+ $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+         @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1
++grep "ANSWER: 1," dig.out.ns3.$n > /dev/null || ret=1
+ grep "3600.*NSEC3PARAM" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+@@ -464,7 +464,7 @@ EOF
+ _ret=1
+ for i in 0 1 2 3 4 5 6 7 8 9; do
+ 	$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
+-	if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then
++	if grep "ANSWER: 2," dig.out.ns3.$n > /dev/null; then
+ 		_ret=0
+ 		break
+ 	fi
+@@ -489,7 +489,7 @@ EOF
+ _ret=1
+ for i in 0 1 2 3 4 5 6 7 8 9; do
+ 	$DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
+-	if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then
++	if grep "ANSWER: 1," dig.out.ns3.$n > /dev/null; then
+ 		_ret=0
+ 		break
+ 	fi
+@@ -660,6 +660,33 @@ $DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1
+ grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+ 
++n=`expr $n + 1`
++ret=0
++echo_i "check that 'update-policy zonesub' is properly enforced ($n)"
++# grant zonesub-key.example.nil zonesub TXT;
++# the A record update should be rejected as it is not in the type list
++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 && ret=1
++server 10.53.0.1 ${PORT}
++key zonesub-key.example.nil 1234subk8765
++update add zonesub.example.nil 0 IN A 1.2.3.4
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil A > dig.out.1.test$n || ret=1
++grep "status: REFUSED" nsupdate.out1-$n > /dev/null || ret=1
++grep "ANSWER: 0," dig.out.1.test$n > /dev/null || ret=1
++# the TXT record update should be accepted as it is in the type list
++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 || ret=1
++server 10.53.0.1 ${PORT}
++key zonesub-key.example.nil 1234subk8765
++update add zonesub.example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil TXT > dig.out.2.test$n || ret=1
++grep "status: REFUSED" nsupdate.out2-$n > /dev/null && ret=1
++grep "ANSWER: 1," dig.out.2.test$n > /dev/null || ret=1
++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null || ret=1
++[ $ret = 0 ] || { echo_i "failed"; status=1; }
++
+ n=`expr $n + 1`
+ ret=0
+ echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)"
diff --git a/debian/patches/0027-CVE-2020-8625.patch b/debian/patches/0027-CVE-2020-8625.patch
new file mode 100644
index 0000000..1e036c8
--- /dev/null
+++ b/debian/patches/0027-CVE-2020-8625.patch
@@ -0,0 +1,25 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Thu, 29 Apr 2021 13:06:03 +0200
+Subject: Buffer overflow in  GSSAPI security policy negotiation
+ (CVE-2020-8625)
+
+Origin: vendor
+Forwarded: not-needed
+Last-Update: 2021-02-09
+---
+ lib/dns/spnego.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/dns/spnego.c b/lib/dns/spnego.c
+index ad77f24..28ead69 100644
+--- a/lib/dns/spnego.c
++++ b/lib/dns/spnego.c
+@@ -877,7 +877,7 @@ der_get_oid(const unsigned char *p, size_t len, oid *data, size_t *size) {
+ 		return (ASN1_OVERRUN);
+ 	}
+ 
+-	data->components = malloc(len * sizeof(*data->components));
++	data->components = malloc((len + 1) * sizeof(*data->components));
+ 	if (data->components == NULL) {
+ 		return (ENOMEM);
+ 	}
diff --git a/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch
new file mode 100644
index 0000000..b8ed135
--- /dev/null
+++ b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch
@@ -0,0 +1,28 @@
+From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org>
+Date: Thu, 8 Apr 2021 10:33:44 +0200
+Subject: Free resources when gss_accept_sec_context() fails
+
+Even if a call to gss_accept_sec_context() fails, it might still cause a
+GSS-API response token to be allocated and left for the caller to
+release.  Make sure the token is released before an early return from
+dst_gssapi_acceptctx().
+
+(cherry picked from commit d954e152d9f2901118b1fe36d3931ec244317fab)
+---
+ lib/dns/gssapictx.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
+index 8bd99af..6d787d3 100644
+--- a/lib/dns/gssapictx.c
++++ b/lib/dns/gssapictx.c
+@@ -746,6 +746,9 @@ dst_gssapi_acceptctx(gss_cred_id_t cred,
+ 	default:
+ 		gss_log(3, "failed gss_accept_sec_context: %s",
+ 			gss_error_tostring(gret, minor, buf, sizeof(buf)));
++		if (gouttoken.length > 0U) {
++			(void)gss_release_buffer(&minor, &gouttoken);
++		}
+ 		return (result);
+ 	}
+ 
diff --git a/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch
new file mode 100644
index 0000000..5af5d36
--- /dev/null
+++ b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch
@@ -0,0 +1,40 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 3 Feb 2021 11:10:20 +1100
+Subject: Check SOA owner names in zone transfers
+
+An IXFR containing SOA records with owner names different than the
+transferred zone's origin can result in named serving a version of that
+zone without an SOA record at the apex.  This causes a RUNTIME_CHECK
+assertion failure the next time such a zone is refreshed.  Fix by
+immediately rejecting a zone transfer (either an incremental or
+non-incremental one) upon detecting an SOA record not placed at the apex
+of the transferred zone.
+---
+ lib/dns/xfrin.c | 14 ++++++++++++++
+ 1 file changed, 14 insertions(+)
+
+diff --git a/lib/dns/xfrin.c b/lib/dns/xfrin.c
+index d39ca26..0baf170 100644
+--- a/lib/dns/xfrin.c
++++ b/lib/dns/xfrin.c
+@@ -477,6 +477,20 @@ xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name, uint32_t ttl,
+ 	    dns_rdatatype_ismeta(rdata->type))
+ 		FAIL(DNS_R_FORMERR);
+ 
++	/*
++	 * Immediately reject the entire transfer if the RR that is currently
++	 * being processed is an SOA record that is not placed at the zone
++	 * apex.
++	 */
++	if (rdata->type == dns_rdatatype_soa &&
++	    !dns_name_equal(&xfr->name, name)) {
++		char namebuf[DNS_NAME_FORMATSIZE];
++		dns_name_format(name, namebuf, sizeof(namebuf));
++		xfrin_log(xfr, ISC_LOG_DEBUG(3), "SOA name mismatch: '%s'",
++			  namebuf);
++		FAIL(DNS_R_NOTZONETOP);
++	}
++
+  redo:
+ 	switch (xfr->state) {
+ 	case XFRST_SOAQUERY:
diff --git a/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch
new file mode 100644
index 0000000..23a1b29
--- /dev/null
+++ b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch
@@ -0,0 +1,46 @@
+From: Mark Andrews <marka@isc.org>
+Date: Fri, 12 Feb 2021 14:51:28 +1100
+Subject: Address inconsistencies in checking added RRsets
+
+loading_addrdataset() rejects SOA RRsets which are not at top of zone.
+addrdataset() should similarly reject such RRsets.
+---
+ lib/dns/rbtdb.c | 12 ++++++++++--
+ 1 file changed, 10 insertions(+), 2 deletions(-)
+
+diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
+index 792c443..b1b928c 100644
+--- a/lib/dns/rbtdb.c
++++ b/lib/dns/rbtdb.c
+@@ -117,7 +117,7 @@ struct rbtdb_file_header {
+ /*%
+  * Note that "impmagic" is not the first four bytes of the struct, so
+  * ISC_MAGIC_VALID cannot be used.
+- */
++a */
+ #define VALID_RBTDB(rbtdb)      ((rbtdb) != NULL && \
+ 				 (rbtdb)->common.impmagic == RBTDB_MAGIC)
+ 
+@@ -6806,13 +6806,21 @@ addrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ 	REQUIRE(VALID_RBTDB(rbtdb));
+ 	INSIST(rbtversion == NULL || rbtversion->rbtdb == rbtdb);
+ 
+-	if (rbtdb->common.methods == &zone_methods)
++	if (rbtdb->common.methods == &zone_methods) {
++		/*
++		 * SOA records are only allowed at top of zone.
++		 */
++		if (rdataset->type == dns_rdatatype_soa &&
++		    node != rbtdb->origin_node) {
++			return (DNS_R_NOTZONETOP);
++		}
+ 		REQUIRE(((rbtnode->nsec == DNS_RBT_NSEC_NSEC3 &&
+ 			  (rdataset->type == dns_rdatatype_nsec3 ||
+ 			   rdataset->covers == dns_rdatatype_nsec3)) ||
+ 			 (rbtnode->nsec != DNS_RBT_NSEC_NSEC3 &&
+ 			   rdataset->type != dns_rdatatype_nsec3 &&
+ 			   rdataset->covers != dns_rdatatype_nsec3)));
++	}
+ 
+ 	if (rbtversion == NULL) {
+ 		if (now == 0)
diff --git a/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
new file mode 100644
index 0000000..93c75ec
--- /dev/null
+++ b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
@@ -0,0 +1,40 @@
+From: Mark Andrews <marka@isc.org>
+Date: Thu, 25 Feb 2021 14:11:05 +1100
+Subject: Unload a zone if a transfer breaks its SOA record
+
+If a zone transfer results in a zone not having any NS records, named
+stops serving it because such a zone is broken.  Do the same if an
+incoming zone transfer results in a zone lacking an SOA record at the
+apex or containing more than one SOA record.
+---
+ lib/dns/zone.c | 15 ++++++++++++---
+ 1 file changed, 12 insertions(+), 3 deletions(-)
+
+diff --git a/lib/dns/zone.c b/lib/dns/zone.c
+index 6d4426a..c3c8f94 100644
+--- a/lib/dns/zone.c
++++ b/lib/dns/zone.c
+@@ -15352,11 +15352,20 @@ zone_xfrdone(dns_zone_t *zone, isc_result_t result) {
+ 					  &retry, &expire, &minimum, NULL);
+ 		ZONEDB_UNLOCK(&zone->dblock, isc_rwlocktype_read);
+ 		if (result == ISC_R_SUCCESS) {
+-			if (soacount != 1)
++			if (soacount != 1) {
+ 				dns_zone_log(zone, ISC_LOG_ERROR,
+ 					     "transferred zone "
+-					     "has %d SOA record%s", soacount,
+-					     (soacount != 0) ? "s" : "");
++					     "has %d SOA records",
++					     soacount);
++				if (DNS_ZONE_FLAG(zone,
++						  DNS_ZONEFLG_HAVETIMERS)) {
++					zone->refresh = DNS_ZONE_DEFAULTREFRESH;
++					zone->retry = DNS_ZONE_DEFAULTRETRY;
++				}
++				DNS_ZONE_CLRFLAG(zone, DNS_ZONEFLG_HAVETIMERS);
++				zone_unload(zone);
++				goto next_master;
++			}
+ 			if (nscount == 0) {
+ 				dns_zone_log(zone, ISC_LOG_ERROR,
+ 					     "transferred zone "
diff --git a/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch
new file mode 100644
index 0000000..1b73aad
--- /dev/null
+++ b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch
@@ -0,0 +1,41 @@
+From: Mark Andrews <marka@isc.org>
+Date: Mon, 1 Mar 2021 16:46:07 +1100
+Subject: Handle DNAME lookup via itself
+
+When answering a query, named should never attempt to add the same RRset
+to the ANSWER section more than once.  However, such a situation may
+arise when chasing DNAME records: one of the DNAME records placed in the
+ANSWER section may turn out to be the final answer to a client query,
+but there is no way to know that in advance.  Tweak the relevant INSIST
+assertion in query_find() so that it handles this case properly.  The
+rdataset is freed later anyway, so there is no need to clean it up
+immediately.
+---
+ bin/named/query.c | 13 ++++++++++---
+ 1 file changed, 10 insertions(+), 3 deletions(-)
+
+diff --git a/bin/named/query.c b/bin/named/query.c
+index f8dbef2..b674b67 100644
+--- a/bin/named/query.c
++++ b/bin/named/query.c
+@@ -9087,10 +9087,17 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
+ 		if (noqname != NULL)
+ 			query_addnoqnameproof(client, noqname);
+ 		/*
+-		 * We shouldn't ever fail to add 'rdataset'
+-		 * because it's already in the answer.
++		 * 'rdataset' will only be non-NULL here if the ANSWER section
++		 * of the message to be sent to the client already contains an
++		 * RRset with the same owner name and the same type as
++		 * 'rdataset'.  This should never happen, with one exception:
++		 * when chasing DNAME records, one of the DNAME records placed
++		 * in the ANSWER section may turn out to be the final answer to
++		 * the client's query, but we have no way of knowing that until
++		 * now.  In such a case, 'rdataset' will be freed later, so we
++		 * do not need to free it here.
+ 		 */
+-		INSIST(rdataset == NULL);
++		INSIST(rdataset == NULL || qtype == dns_rdatatype_dname);
+ 	}
+ 
+  addauth:
diff --git a/debian/patches/0033-Disable-lame-ttl-cache.patch b/debian/patches/0033-Disable-lame-ttl-cache.patch
new file mode 100644
index 0000000..efd2132
--- /dev/null
+++ b/debian/patches/0033-Disable-lame-ttl-cache.patch
@@ -0,0 +1,70 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Fri, 24 Sep 2021 09:35:11 +0200
+Subject: Disable lame-ttl cache
+
+The lame-ttl cache is implemented in ADB as per-server locked
+linked-list "indexed" with <qname,qtype>.  This list has to be walked
+every time there's a new query or new record added into the lame cache.
+Determined attacker can use this to degrade performance of the resolver.
+
+Resolver testing has shown that disabling the lame cache has little
+impact on the resolver performance and it's a minimal viable defense
+against this kind of attack.
+---
+ bin/named/config.c      | 2 +-
+ bin/named/server.c      | 8 ++++++--
+ doc/arm/Bv9ARM-book.xml | 9 +++------
+ 3 files changed, 10 insertions(+), 9 deletions(-)
+
+diff --git a/bin/named/config.c b/bin/named/config.c
+index d22ee4b..ba5fa8a 100644
+--- a/bin/named/config.c
++++ b/bin/named/config.c
+@@ -170,7 +170,7 @@ options {\n\
+ #ifdef HAVE_GEOIP
+ "	geoip-use-ecs yes;\n"
+ #endif
+-"	lame-ttl 600;\n"
++"	lame-ttl 0;\n"
+ #ifdef HAVE_LMDB
+ "	lmdb-mapsize 32M;\n"
+ #endif
+diff --git a/bin/named/server.c b/bin/named/server.c
+index 149458e..748a150 100644
+--- a/bin/named/server.c
++++ b/bin/named/server.c
+@@ -3971,8 +3971,12 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
+ 	result = ns_config_get(maps, "lame-ttl", &obj);
+ 	INSIST(result == ISC_R_SUCCESS);
+ 	lame_ttl = cfg_obj_asuint32(obj);
+-	if (lame_ttl > 1800)
+-		lame_ttl = 1800;
++	if (lame_ttl > 0) {
++		cfg_obj_log(obj, ns_g_lctx, ISC_LOG_WARNING,
++			    "disabling lame cache despite lame-ttl > 0 as it "
++			    "may cause performance issues");
++		lame_ttl = 0;
++	}
+ 	dns_resolver_setlamettl(view->resolver, lame_ttl);
+ 
+ 	/*
+diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
+index 4b36bd0..7852b5a 100644
+--- a/doc/arm/Bv9ARM-book.xml
++++ b/doc/arm/Bv9ARM-book.xml
+@@ -8855,12 +8855,9 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
+ 	      <term><command>lame-ttl</command></term>
+ 	      <listitem>
+ 		<para>
+-		  Sets the number of seconds to cache a
+-		  lame server indication. 0 disables caching. (This is
+-		  <emphasis role="bold">NOT</emphasis> recommended.)
+-		  The default is <literal>600</literal> (10 minutes) and the
+-		  maximum value is
+-		  <literal>1800</literal> (30 minutes).
++		  This is always set to 0. More information is available
++		  in the <link xmlns:xlink="http://www.w3.org/1999/xlink"
++		  xlink:href="https://kb.isc.org/docs/cve-2021-25219">security advisory for CVE-2021-25219</link>.
+ 		</para>
+ 
+ 	      </listitem>
diff --git a/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch
new file mode 100644
index 0000000..790b7c1
--- /dev/null
+++ b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch
@@ -0,0 +1,48 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Fri, 24 Sep 2021 09:48:50 +0200
+Subject: Enable lame response detection even with disabled lame cache
+
+Previously, when lame cache would be disabled by setting lame-ttl to 0,
+it would also disable lame answer detection.  In this commit, we enable
+the lame response detection even when the lame cache is disabled.  This
+enables stopping answer processing early rather than going through the
+whole answer processing flow.
+---
+ lib/dns/resolver.c | 22 ++++++++++++----------
+ 1 file changed, 12 insertions(+), 10 deletions(-)
+
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 1e4fcab..bfc1ae2 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -8323,18 +8323,20 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
+ 	/*
+ 	 * Is the server lame?
+ 	 */
+-	if (res->lame_ttl != 0 && !ISFORWARDER(query->addrinfo) &&
+-	    is_lame(fctx)) {
++	if (!ISFORWARDER(query->addrinfo) && is_lame(fctx)) {
+ 		inc_stats(res, dns_resstatscounter_lame);
+ 		log_lame(fctx, query->addrinfo);
+-		result = dns_adb_marklame(fctx->adb, query->addrinfo,
+-					  &fctx->name, fctx->type,
+-					  now + res->lame_ttl);
+-		if (result != ISC_R_SUCCESS)
+-			isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+-				      DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR,
+-				      "could not mark server as lame: %s",
+-				      isc_result_totext(result));
++		if (res->lame_ttl != 0) {
++			result = dns_adb_marklame(fctx->adb, query->addrinfo,
++						  &fctx->name, fctx->type,
++						  now + res->lame_ttl);
++			if (result != ISC_R_SUCCESS) {
++				isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
++					      DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR,
++					      "could not mark server as lame: %s",
++					      isc_result_totext(result));
++			}
++		}
+ 		broken_server = DNS_R_LAME;
+ 		keep_trying = true;
+ 		FCTXTRACE("lame server");
diff --git a/debian/patches/0035-CVE-2021-25220.patch b/debian/patches/0035-CVE-2021-25220.patch
new file mode 100644
index 0000000..48652e1
--- /dev/null
+++ b/debian/patches/0035-CVE-2021-25220.patch
@@ -0,0 +1,203 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Mon, 14 Mar 2022 15:31:10 +0100
+Subject: CVE-2021-25220
+
+---
+ lib/dns/resolver.c | 125 ++++++++++++++++++++++++++++++++++++++++++++++++++---
+ 1 file changed, 120 insertions(+), 5 deletions(-)
+
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index bfc1ae2..cabcbdc 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -68,6 +68,7 @@
+ #include <dns/stats.h>
+ #include <dns/tsig.h>
+ #include <dns/validator.h>
++#include <dns/zone.h>
+ 
+ #ifdef WANT_QUERYTRACE
+ #define RTRACE(m)       isc_log_write(dns_lctx, \
+@@ -314,6 +315,8 @@ struct fetchctx {
+ 	bool			ns_ttl_ok;
+ 	uint32_t			ns_ttl;
+ 	isc_counter_t *			qc;
++	dns_fixedname_t			fwdfname;
++	dns_name_t			*fwdname;
+ 
+ 	/*%
+ 	 * The number of events we're waiting for.
+@@ -3304,6 +3307,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ 		if (result == ISC_R_SUCCESS) {
+ 			fwd = ISC_LIST_HEAD(forwarders->fwdrs);
+ 			fctx->fwdpolicy = forwarders->fwdpolicy;
++			dns_name_copy(domain, fctx->fwdname, NULL);
+ 			if (fctx->fwdpolicy == dns_fwdpolicy_only &&
+ 			    isstrictsubdomain(domain, &fctx->domain)) {
+ 				fcount_decr(fctx);
+@@ -4334,6 +4338,9 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
+ 	fctx->restarts = 0;
+ 	fctx->querysent = 0;
+ 	fctx->referrals = 0;
++
++	fctx->fwdname = dns_fixedname_initname(&fctx->fwdfname);
++
+ 	TIME_NOW(&fctx->start);
+ 	fctx->timeouts = 0;
+ 	fctx->lamecount = 0;
+@@ -4386,8 +4393,10 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
+ 		domain = dns_fixedname_initname(&fixed);
+ 		result = dns_fwdtable_find2(fctx->res->view->fwdtable, fwdname,
+ 					    domain, &forwarders);
+-		if (result == ISC_R_SUCCESS)
++		if (result == ISC_R_SUCCESS) {
+ 			fctx->fwdpolicy = forwarders->fwdpolicy;
++			dns_name_copy(domain, fctx->fwdname, NULL);
++		}
+ 
+ 		if (fctx->fwdpolicy != dns_fwdpolicy_only) {
+ 			/*
+@@ -6144,6 +6153,107 @@ mark_related(dns_name_t *name, dns_rdataset_t *rdataset,
+ 		rdataset->attributes |= DNS_RDATASETATTR_EXTERNAL;
+ }
+ 
++/*
++ * Returns true if 'name' is external to the namespace for which
++ * the server being queried can answer, either because it's not a
++ * subdomain or because it's below a forward declaration or a
++ * locally served zone.
++ */
++static inline bool
++name_external(dns_name_t *name, dns_rdatatype_t type, fetchctx_t *fctx) {
++	isc_result_t result;
++	dns_forwarders_t *forwarders = NULL;
++	dns_fixedname_t fixed, zfixed;
++	dns_name_t *fname = dns_fixedname_initname(&fixed);
++	dns_name_t *zfname = dns_fixedname_initname(&zfixed);
++	dns_name_t *apex = NULL;
++	dns_name_t suffix;
++	dns_zone_t *zone = NULL;
++	unsigned int labels;
++	dns_namereln_t rel;
++
++	apex = ISFORWARDER(fctx->addrinfo) ? fctx->fwdname : &fctx->domain;
++
++	/*
++	 * The name is outside the queried namespace.
++	 */
++	rel = dns_name_fullcompare(name, apex, &(int){ 0 },
++				   &(unsigned int){ 0U });
++	if (rel != dns_namereln_subdomain && rel != dns_namereln_equal) {
++		return (true);
++	}
++
++	/*
++	 * If the record lives in the parent zone, adjust the name so we
++	 * look for the correct zone or forward clause.
++	 */
++	labels = dns_name_countlabels(name);
++	if (dns_rdatatype_atparent(type) && labels > 1U) {
++		dns_name_init(&suffix, NULL);
++		dns_name_getlabelsequence(name, 1, labels - 1, &suffix);
++		name = &suffix;
++	} else if (rel == dns_namereln_equal) {
++		/* If 'name' is 'apex', no further checking is needed. */
++		return (false);
++	}
++
++	/*
++	 * If there is a locally served zone between 'apex' and 'name'
++	 * then don't cache.
++	 */
++	LOCK(&fctx->res->view->lock);
++	if (fctx->res->view->zonetable != NULL) {
++		unsigned int options = DNS_ZTFIND_NOEXACT;
++		result = dns_zt_find(fctx->res->view->zonetable, name, options,
++				     zfname, &zone);
++		if (zone != NULL) {
++			dns_zone_detach(&zone);
++		}
++		if (result == ISC_R_SUCCESS || result == DNS_R_PARTIALMATCH) {
++			if (dns_name_fullcompare(zfname, apex, &(int){ 0 },
++						 &(unsigned int){ 0U }) ==
++			    dns_namereln_subdomain)
++			{
++				UNLOCK(&fctx->res->view->lock);
++				return (true);
++			}
++		}
++	}
++	UNLOCK(&fctx->res->view->lock);
++
++	/*
++	 * Look for a forward declaration below 'name'.
++	 */
++	result = dns_fwdtable_find2(fctx->res->view->fwdtable, name, fname,
++				    &forwarders);
++
++	if (ISFORWARDER(fctx->addrinfo)) {
++		/*
++		 * See if the forwarder declaration is better.
++		 */
++		if (result == ISC_R_SUCCESS) {
++			return (!dns_name_equal(fname, fctx->fwdname));
++		}
++
++		/*
++		 * If the lookup failed, the configuration must have
++		 * changed: play it safe and don't cache.
++		 */
++		return (true);
++	} else if (result == ISC_R_SUCCESS &&
++		   forwarders->fwdpolicy == dns_fwdpolicy_only &&
++		   !ISC_LIST_EMPTY(forwarders->fwdrs))
++	{
++		/*
++		 * If 'name' is covered by a 'forward only' clause then we
++		 * can't cache this repsonse.
++		 */
++		return (true);
++	}
++
++	return (false);
++}
++
+ static isc_result_t
+ check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type,
+ 	      dns_section_t section)
+@@ -6170,7 +6280,7 @@ check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type,
+ 	result = dns_message_findname(fctx->rmessage, section, addname,
+ 				      dns_rdatatype_any, 0, &name, NULL);
+ 	if (result == ISC_R_SUCCESS) {
+-		external = !dns_name_issubdomain(name, &fctx->domain);
++		external = name_external(name, type, fctx);
+ 		if (type == dns_rdatatype_a) {
+ 			for (rdataset = ISC_LIST_HEAD(name->list);
+ 			     rdataset != NULL;
+@@ -7018,6 +7128,13 @@ answer_response(fetchctx_t *fctx) {
+ 			break;
+ 
+ 		case dns_namereln_subdomain:
++			/*
++			 * Don't accept DNAME from parent namespace.
++			 */
++			if (name_external(name, dns_rdatatype_dname, fctx)) {
++				continue;
++			}
++
+ 			/*
+ 			 * In-scope DNAME records must have at least
+ 			 * as many labels as the domain being queried.
+@@ -7246,11 +7363,9 @@ answer_response(fetchctx_t *fctx) {
+ 	 */
+ 	result = dns_message_firstname(message, DNS_SECTION_AUTHORITY);
+ 	while (!done && result == ISC_R_SUCCESS) {
+-		bool external;
+ 		name = NULL;
+ 		dns_message_currentname(message, DNS_SECTION_AUTHORITY, &name);
+-		external = !dns_name_issubdomain(name, &fctx->domain);
+-		if (!external) {
++		if (!name_external(name, dns_rdatatype_ns, fctx)) {
+ 			/*
+ 			 * We expect to find NS or SIG NS rdatasets, and
+ 			 * nothing else.
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..bce493a
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,35 @@
+0001-non-linux.diff
+0002-multiarch.diff
+0003-min-cache-ttl.diff
+0004-library_paths.diff
+0005-resource_missing_include.diff
+0006-prepare_native_pkcs11.diff
+0007-ctxstart_no_sighandling.diff
+0008-reproducible_build.diff
+0009-Add_--install-layout=deb_to_setup.py_call.patch
+0010-skip-rtld-deepbind-for-dyndb.diff
+0011-keymgr-dont-immediately-delete.diff
+0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
+0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
+0014-Disable-broken-Ed448-support.patch
+0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
+0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
+0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
+0018-CVE-2020-8616.patch
+0019-CVE-2020-8617.patch
+0020-Remove-INSIST-from-from-new_reference.patch
+0021-Always-keep-a-copy-of-the-message.patch
+0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
+0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
+0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
+0025-Add-a-test-for-update-policy-subdomain.patch
+0026-Add-a-test-for-update-policy-zonesub.patch
+0027-CVE-2020-8625.patch
+0028-Free-resources-when-gss_accept_sec_context-fails.patch
+0029-Check-SOA-owner-names-in-zone-transfers.patch
+0030-Address-inconsistencies-in-checking-added-RRsets.patch
+0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
+0032-Handle-DNAME-lookup-via-itself.patch
+0033-Disable-lame-ttl-cache.patch
+0034-Enable-lame-response-detection-even-with-disabled-la.patch
+0035-CVE-2021-25220.patch
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 0000000..cef83a3
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] templates
diff --git a/debian/po/cs.po b/debian/po/cs.po
new file mode 100644
index 0000000..0f916c8
--- /dev/null
+++ b/debian/po/cs.po
@@ -0,0 +1,67 @@
+# Czech translation of bind9 debconf messages.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Miroslav Kure <kurem@debian.cz>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 14:38+0200\n"
+"Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
+"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Uživatelský účet pro běh daemona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele "
+"„bind“. Pro použití jiného účtu zadejte jeho jméno."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Další spouštěcí parametry pro named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se "
+"mají předat daemonu BINDu9 (named) při každém spuštění."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má se přepsat nastavení v resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal "
+"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální "
+"připojení."
diff --git a/debian/po/da.po b/debian/po/da.po
new file mode 100644
index 0000000..e9a2df1
--- /dev/null
+++ b/debian/po/da.po
@@ -0,0 +1,67 @@
+# Danish translation bind9.
+# Copyright (C) 2010 bind9 & Joe Hansen.
+# This file is distributed under the same license as the bind9 package.
+# Joe Hansen <joedalton2@yahoo.dk>, 2010.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-10-07 17:30+01:00\n"
+"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n"
+"Language-Team: Danish <debian-l10n-danish@lists.debian.org> \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brugerkonto til kørsel af BIND9-dæmonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standarden er at køre BIND9-dæmonen (navngivet) under brugerkontoen »bind«. "
+"For at bruge en anden konto, så indtast venligst et passende brugernavn."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre opstartsindstillinger for navngivet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Angiv venligst eventuelle yderligere indstillinger (udover brugernavnet) som "
+"skal videresendes til BIND9-dæmonen (navngivet) ved opstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal opsætningen af resolv.conf overskrives?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Vælg venligst hvorvidt opløseren skal tvinges til at bruge den lokale BIND9-"
+"dæmon (navngivet), frem for hvad den aktuelle forbindelse anbefaler, når "
+"denne maskine flytter rundt."
diff --git a/debian/po/de.po b/debian/po/de.po
new file mode 100644
index 0000000..b2a18df
--- /dev/null
+++ b/debian/po/de.po
@@ -0,0 +1,84 @@
+# Translation of bind9 debconf templates to German
+# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008.
+# This file is distributed under the same license as the bind9 package.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-16 20:22+0200\n"
+"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
+"Language-Team: de <debian-l10n-german@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=iso-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardm��ig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers "
+"�bind� betrieben. Um ein anderes Benutzerkonto auszuw�hlen, geben Sie bitte "
+"den entsprechenden Benutzernamen ein."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Weitere Optionen f�r den Start des Named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Bitte geben Sie hier die zus�tzlichen Optionen (au�er dem Benutzernamen) "
+"ein, die dem Bind9-Daemon (Named) beim Starten �bergeben werden sollen."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Bitte w�hlen Sie aus, ob der Namensaufl�ser (Resolver) dazu gezwungen werden "
+"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen "
+"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird."
+
+#~ msgid "Options that should be passed at startup to bind9"
+#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen"
+
+#~ msgid "which user should bind9 run as?"
+#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?"
+
+#~ msgid ""
+#~ "The default is to start bind9 as bind user, if you would  like to change "
+#~ "that, please give here the username as which  bind9 should start as."
+#~ msgstr ""
+#~ "Standardm��ig startet Bind9 unter der Benutzerkennung �bind�. Falls Sie "
+#~ "dies �ndern m�chten geben Sie hier bitte den Benutzernamen ein, unter "
+#~ "dessen Kennung Bind9 starten soll."
+
+#~ msgid "Should resolvconf run when bind9 starts up?"
+#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?"
diff --git a/debian/po/es.po b/debian/po/es.po
new file mode 100644
index 0000000..c909428
--- /dev/null
+++ b/debian/po/es.po
@@ -0,0 +1,86 @@
+# bind9 translation to spanish
+# Copyright (C) 2008 Software in the Public Interest
+# This file is distributed under the same license as the bind9 package.
+# Changes:
+# - Initial translation
+# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008
+# Traductores, si no conoce el formato PO, merece la pena leer la 
+# documentación de gettext, especialmente las secciones dedicadas a este
+# formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+# - El proyecto de traducción de Debian al español
+# http://www.debian.org/intl/spanish
+# especialmente las notas de traducción en
+# http://www.debian.org/intl/spanish/notas
+# - La guía de traducción de po's de debconf:
+# /usr/share/doc/po-debconf/README-trans
+# o http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-08 20:18-0300\n"
+"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n"
+"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Cuenta de usuario que ejecuta el demonio BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es "
+"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de "
+"usuario apropiado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Otras opciones de inicio para «named»:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Ingrese cualquier opción adicional (además del nombre de usuario) que "
+"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del "
+"sistema."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique si se debería forzar al cliente a utilizar el demonio BIND9 "
+"(«named») local en lugar de lo que la conexión actual recomiende, cuando "
+"este equipo este en movimiento."
diff --git a/debian/po/eu.po b/debian/po/eu.po
new file mode 100644
index 0000000..d0d0acf
--- /dev/null
+++ b/debian/po/eu.po
@@ -0,0 +1,68 @@
+# translation of eu.po to Euskara
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Piarres Beobide <pi@beobide.net>, 2009.
+msgid ""
+msgstr ""
+"Project-Id-Version: eu\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2009-02-22 10:36+0100\n"
+"Last-Translator: Piarres Beobide <pi@beobide.net>\n"
+"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 exekutatuko duen erabiltzaile kontua:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin exekutatzea "
+"da. Beste kontu bat erabiltzeko, idatzi dagokion erabiltzaile-izena"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Beste abio aukera batzuek named-rentzat:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera "
+"gehigarriak (erabiltzaile-izenaz beste)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf ezarpenak gainidatzi behar al dira?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala "
+"erabiltzeko ekipo hau mugitzen ari denean konexioak gomendatzen dionaren "
+"ordez."
diff --git a/debian/po/fi.po b/debian/po/fi.po
new file mode 100644
index 0000000..ef9aae0
--- /dev/null
+++ b/debian/po/fi.po
@@ -0,0 +1,64 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-13 08:08-0000\n"
+"Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
+"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
+"Language: fi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Finnish\n"
+"X-Poedit-Country: FINLAND\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. "
+"Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ohjelman named muut käynnistysvalitsimet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-"
+"taustaohjelmalle (named) tulisi antaa käynnistyksessä."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-"
+"taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun "
+"konetta siirrellään eri paikkoihin."
diff --git a/debian/po/fr.po b/debian/po/fr.po
new file mode 100644
index 0000000..757f05d
--- /dev/null
+++ b/debian/po/fr.po
@@ -0,0 +1,69 @@
+# Translation of bind9 debconf templates to French
+# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com>
+# This file is distributed under the same license as the bind9 package.
+# CALARESU Luc <luc.calaresu@gmail.com>, 2008.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 14:26+0200\n"
+"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n"
+"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Identifiant pour l'exécution du démon de BIND9 :"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant "
+"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez "
+"l'indiquer ici."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Autres options à transmettre pour « named » :"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui "
+"doit être transmise au démarrage du démon de BIND9 (« named »)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Faut-il écraser les paramètres de resolv.conf ?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local "
+"(« named ») plutôt que les paramètres recommandés pour la connexion "
+"actuelle, lorsque cette machine est déplacée."
diff --git a/debian/po/gl.po b/debian/po/gl.po
new file mode 100644
index 0000000..f299cb3
--- /dev/null
+++ b/debian/po/gl.po
@@ -0,0 +1,66 @@
+# Galician translation of bind9's debconf templates
+# This file is distributed under the same license as the bind9 package.
+# Jacobo Tarrio <jtarrio@debian.org>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:36+0100\n"
+"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n"
+"Language-Team: Galician <proxecto@trasno.net>\n"
+"Language: gl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuario que executa o servizo de BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta "
+"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opcións de inicio para named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban "
+"pasar ao servizo de BIND9 (named) no inicio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Quere substituír a configuración de resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local "
+"(named) no canto do que recomenda a conexión actual, cando esta máquina "
+"estea en movemento."
diff --git a/debian/po/id.po b/debian/po/id.po
new file mode 100644
index 0000000..e389970
--- /dev/null
+++ b/debian/po/id.po
@@ -0,0 +1,51 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Mahyuddin Susanto <udienz@gmail.com>\n"
+"Language-Team: Debian Indonesia Translator <debian-l10n-indonesian@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Indonesian\n"
+"X-Poedit-Country: INDONESIA\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Akun pengguna untuk menjalankan daemon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Bawaan dari daemon BIND9 adalah menjalankan dengan user akun 'bind'. Untuk menggunakan akun berbeda, silakan masukkan nama pengguna yang sesuai."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Opsi lain startup untuk named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Harap menyediakan opsi tambahan (selain nama pengguna) yang digunakan daemon BIND9 untuk startup"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "haruskah resolv.conf ditimpa?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Silakan tentukan resolver mana yang akan digunakan untuk daemon lokal BIND9 (named) dari koneksi sekarang yang digunakan, ketika mesin ini berjalan"
+
diff --git a/debian/po/it.po b/debian/po/it.po
new file mode 100644
index 0000000..2e3ef2e
--- /dev/null
+++ b/debian/po/it.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Alex <animainvendita@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-27 16:10+0200\n"
+"Last-Translator: Alex <animainvendita@gmail.com>\n"
+"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Account utente con cui eseguire il demone BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) "
+"utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account "
+"utente, inserire il nome corrispondente."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Altre opzioni di avvio per named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Inserire qualsiasi opzione addizionale (differente dal nome utente) che "
+"dovrebbe essere inviata al demone BIND9 (named) durante l'avvio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il "
+"demone BIND9 locale (named) non utilizzando i server raccomandati dalla "
+"connessione attiva."
diff --git a/debian/po/ja.po b/debian/po/ja.po
new file mode 100644
index 0000000..c931748
--- /dev/null
+++ b/debian/po/ja.po
@@ -0,0 +1,66 @@
+# Copyright (C) 2008 LaMont Jones <lamont@debian.org>
+# This file is distributed under the same license as the bind9 package.
+# Hideki Yamane <henrich@debian.or.jp>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-22 00:03+0900\n"
+"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
+"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 デーモンの動作に使うユーザアカウント:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作しま"
+"す。異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "起動時に named に指定するオプション:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを"
+"入力してください。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf の設定を上書きしますか?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うよ"
+"うにするか、現在の接続先で推奨されるネームサーバを使うようにするかを選んでく"
+"ださい。"
diff --git a/debian/po/ko.po b/debian/po/ko.po
new file mode 100644
index 0000000..9da0f6f
--- /dev/null
+++ b/debian/po/ko.po
@@ -0,0 +1,69 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: debconf template\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2011-06-24 18:37+0900\n"
+"Last-Translator: 강민지 <justminji@gmail.com>\n"
+"Language-Team: opensource <justminji@gmail.com>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Korean\n"
+"X-Poedit-Country: KOREA, REPUBLIC OF\n"
+"X-Poedit-SourceCharset: utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 데몬을 실행하기 위한 사용자 계정:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"기본값은 '바인드' 사용자 계정에서 BIND9 데몬(지정된 이름)을 실행합니다. 다른 "
+"계정을 사용하려면 해당 사용자 이름을 입력하세요."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "지명된 다른 시작 옵션:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 데몬(지정된 이름)이 실행으로 전달되기 위해서 추가옵션(사용자 이름 이외)"
+"을 입력하세요."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf 설정은 재정의 되어야하는가?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"이 기계가 근처로 이동될 때 해결자는 현재의 연결을 권장하는 것보다 로컬 BIND9 "
+"데몬(지정된 이름)을 사용하도록 강요해야하는지 여부를 선택하세요."
diff --git a/debian/po/nb.po b/debian/po/nb.po
new file mode 100644
index 0000000..2d42047
--- /dev/null
+++ b/debian/po/nb.po
@@ -0,0 +1,69 @@
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Bjørn Steensrud <bjornst@skogkatt.homelinux.org>, 2012.
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2012-01-03 21:33+0100\n"
+"Last-Translator: Bjørn Steensrud <bjornst@skogkatt.homelinux.org>\n"
+"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Language: nb\n"
+"X-Generator: Lokalize 1.2\n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brukerkonto for å kjøre BIND9-daemonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standard er å kjøre BIND8-daemonen (named) under brukerkontoen «bind». Skriv "
+"inn et passende navn for å bruke en annen konto."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre oppstartsvalg for named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Skriv inn flere valg (annet enn brukernavn) som skal sendes over til "
+"BIND9-daemonen (named) ved oppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal innstillingene i resolv.conf oveerstyres?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Velg om adresseløseren skal tvinges til å bruke den lokale BIND9-daemonen "
+"(named) i stedet for det den gjeldende tilkoblingen anbefaler, når denne "
+"maskinen flyttes omkring."
+
diff --git a/debian/po/nl.po b/debian/po/nl.po
new file mode 100644
index 0000000..b710b34
--- /dev/null
+++ b/debian/po/nl.po
@@ -0,0 +1,72 @@
+# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch
+# translation of bind9 debconf template to Dutch
+# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+#
+# Paul Gevers <paul@climbing.nl>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-09-17 21:15-0500\n"
+"Last-Translator: Paul Gevers <paul@climbing.nl>\n"
+"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n"
+"Language: nl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+"Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de "
+"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier "
+"de geschikte gebruikersnaam invullen."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andere opstartopties voor 'named':"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het "
+"opstarten meegeven aan 'named', de BIND9 achtergronddienst?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 "
+"achtergronddienst (named), in plaats van de aanbevelingen van de huidige "
+"connectie. Bijvoorbeeld, wanneer deze computer veel verplaatst wordt."
diff --git a/debian/po/pl.po b/debian/po/pl.po
new file mode 100644
index 0000000..9cc79bd
--- /dev/null
+++ b/debian/po/pl.po
@@ -0,0 +1,68 @@
+# debconf templates for bind9 package
+# Polish translation
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+# Łukasz Paździora <lukpaz@gmail.com>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-11-24 18:30+0100\n"
+"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n"
+"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n"
+"Language: pl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Konto użytkownika, jako który powinien działać BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. Aby użyć innego "
+"konta podaj inną nazwę użytkownika."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Inne opcje startowe dla named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny "
+"zostać podane demonowi BIND9 (named) przy starcie."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna usługa "
+"BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien korzystać z "
+"zalecanych ustawień aktualnego połączenia."
diff --git a/debian/po/pt.po b/debian/po/pt.po
new file mode 100644
index 0000000..2d3347f
--- /dev/null
+++ b/debian/po/pt.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese
+# Copyright (C) 2008 Américo Monteiro
+# This file is distributed under the same license as the bind9 package.
+#
+# Américo Monteiro <a_monteiro@netcabo.pt>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:55+0100\n"
+"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n"
+"Language-Team: Portuguese <traduz@debianpt.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de utilizador para correr o deamon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador "
+"'bind'. Para usar uma conta diferente, por favor indique o nome de "
+"utilizador apropriado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de arranque para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) "
+"que deverão ser enviadas ao deamon BIND9 (named) durante o arranque. "
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Devem as configurações de resolv.conf ser substituidas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon "
+"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta "
+"máquina está ligada."
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
new file mode 100644
index 0000000..f10725d
--- /dev/null
+++ b/debian/po/pt_BR.po
@@ -0,0 +1,71 @@
+# bind9 Brazilian Portuguese translation
+# Copyright (C) 2009 bind9's COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Luís Gustavo Pessoa Sales <vatsu@gmx.net>, 2009.
+# José Figueiredo <deb.gnulinux@gmail.com>, 2010.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-09-10 22:37-0300\n"
+"Last-Translator: José de Figueiredo <deb.gnulinux@gmail.com>\n"
+"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian."
+"org>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"pt_BR utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuário para execução do daemon do BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"O padrão é executar o daemon do BIND9 (named) com a conta de usuário 'bind'. "
+"Para usar uma conta diferente, por favor informe o nome do usuário."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de inicialização para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor, forneça outras opções adicionais (além de nome de usuário), que "
+"devam ser passadas ao daemon do BIND9 (named) na inicialização."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "As configurações do resolv.conf devem ser sobrescritas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor, escolha se o resolvedor de nomes deve ser forçado a usar o daemon "
+"do BIND9 local (named) em vez daquele que a conexão atual recomendar, quando "
+"esta máquina for movida."
diff --git a/debian/po/ru.po b/debian/po/ru.po
new file mode 100644
index 0000000..b182747
--- /dev/null
+++ b/debian/po/ru.po
@@ -0,0 +1,70 @@
+# translation of ru.po to Russian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Yuri Kozlov <kozlov.y@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:08+0400\n"
+"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n"
+"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"Language: ru\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Учётная запись для запуска службы BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"По умолчанию, служба BIND9 (файл named) запускается с правами учётной записи "
+"'bind'. Если вы хотите использовать другую учётную запись, то введите это "
+"имя здесь."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Другие параметры запуска named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Укажите любые дополнительные параметры (кроме имени учётной записи), которые "
+"нужно передать службе BIND9 (файлу named) при запуске."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Переписать настройки resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Укажите, хотите ли вы, чтобы определитель имён машины использовал локальную "
+"службу BIND9 (named), а не настройки имеющегося подключения."
diff --git a/debian/po/sk.po b/debian/po/sk.po
new file mode 100644
index 0000000..4ea69c6
--- /dev/null
+++ b/debian/po/sk.po
@@ -0,0 +1,67 @@
+# Slovak translation of bind9
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Ivan Masár <helix84@centrum.sk>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Ivan Masár <helix84@centrum.sk>\n"
+"Language-Team: \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Používateľský účet démona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak "
+"chcete použiť iný účet, prosím zadajte príslušný názov účtu."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ďalšie spúšťacie voľby pre named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať "
+"démonovi BIND9 (named) pri spustení."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má sa nastaviť priorita pred resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona "
+"BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa "
+"umiestnenie tohto počítača mení."
diff --git a/debian/po/sr.po b/debian/po/sr.po
new file mode 100644
index 0000000..98b67be
--- /dev/null
+++ b/debian/po/sr.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todoric <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Кориснички налог за покретање BIND9 процеса у позадини:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Подразумијевано је да се BIND9 процес у позадини (Named) покреће под 'bind'"
+"корисничким налогом. Да бисте користили другачији налог, унесите адекватно корисничко име."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Друге опције приликом покретања за (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Молимо вас обезбједите додатне опције (осим корисничког имена) који би требали"
+"бити прослијеђени BIND9 процесу у позадини (Named) приликом покретања."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Желите ли поништити постојећа resolv.conf подешавања?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Одаберите желите ли да аутоматски помагач (Resolver) буде присиљен користити "
+"локални BIND9 процес у позадини (Named) умјесто препорука тренутне мреже, када "
+"ова машина буде помјерана."
diff --git a/debian/po/sr@latin.po b/debian/po/sr@latin.po
new file mode 100644
index 0000000..5456ba6
--- /dev/null
+++ b/debian/po/sr@latin.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) 2011
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <zlatan.todoric@gmail.com>, 2011.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todorić <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Korisnički nalog za pokretanje BIND9 procesa u pozadini:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Podrazumijevano je da se BIND9 proces u pozadini (Named) pokreće pod 'bind'"
+"korisničkim nalogom. Da biste koristili drugačiji nalog, unesite adekvatno korisničko ime."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Druge opcije prilikom pokretanja za (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Molimo vas obezbjedite dodatne opcije (osim korisničkog imena) koji bi trebali"
+"biti proslijeđeni BIND9 procesu u pozadini (Named) prilikom pokretanja."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Želite li poništiti postojeća resolv.conf podešavanja?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Odaberite želite li da automatski pomagač (Resolver) bude prisiljen koristiti"
+"lokalni BIND9 proces u pozadini umjesto preporuka trenutne mreže, kada ova"
+"mašina bude pomjerana."
diff --git a/debian/po/sv.po b/debian/po/sv.po
new file mode 100644
index 0000000..4dbd1e2
--- /dev/null
+++ b/debian/po/sv.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+#
+# Martin Ågren <martin.agren@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-18 19:24+0200\n"
+"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n"
+"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms:  nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Användarkonto att köra BIND9-demonen under:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. "
+"För att använda ett annat konto, var vänlig ange användarnamnet."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Övriga uppstartsval för named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska "
+"skickas till BIND9-demonen (named) vid uppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Ska resolv.conf-inställningar hoppas över?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-"
+"demonen (named) snarare än vad den aktuella uppkopplingen rekommenderar när "
+"den här maskinen flyttar runt."
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 0000000..6001e43
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,60 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
diff --git a/debian/po/tr.po b/debian/po/tr.po
new file mode 100644
index 0000000..3d44ff8
--- /dev/null
+++ b/debian/po/tr.po
@@ -0,0 +1,70 @@
+# turkish translation of bind9 debconf template
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# Mert Dirik <mertdirik@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 23:31+0200\n"
+"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n"
+"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Poedit-Language: Turkish\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı "
+"hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz "
+"hesabın adını girin."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "'named'in kullanacağı diğer başlatma seçenekleri:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı "
+"adı dışındaki ek seçenekleri yazın."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "'resolv.conf' ayarları ezilmeli mi (override)?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının "
+"önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya "
+"zorlanması gerekip gerekmediğini seçin."
diff --git a/debian/po/vi.po b/debian/po/vi.po
new file mode 100644
index 0000000..99865f7
--- /dev/null
+++ b/debian/po/vi.po
@@ -0,0 +1,67 @@
+# Vietnamese translation for Bind 9.
+# Copyright © 2008 Free Software Foundation, Inc.
+# Clytie Siddall <clytie@riverland.net.au>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 15:35+0930\n"
+"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
+"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
+"Language: vi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: LocFactoryEditor 1.7b3\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Tài khoản người dùng để chạy trình nền BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind "
+"». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Tùy chọn khởi chạy khác cần đặt tên:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi "
+"cho trình nền BIND9 vào lúc khởi chạy."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt "
+"tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác."
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
new file mode 100644
index 0000000..9296c1a
--- /dev/null
+++ b/debian/po/zh_CN.po
@@ -0,0 +1,64 @@
+# Chinese translations for bind package.
+# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind package.
+# LI Daobing <lidaobing@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-10-04 14:36+0800\n"
+"Last-Translator: LI Daobing <lidaobing@gmail.com>\n"
+"Language-Team: Chinese (simplified)\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "运行 BIND9 服务的用户账号:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的"
+"用户名。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "named 的其他启动选项:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "是否覆盖 resolv.conf 的设置?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推"
+"荐的域名解析服务器, 特别是当机器需要移动时。"
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..deeb37f
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,186 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+
+export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE
+
+export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
+
+include /usr/share/dpkg/default.mk
+
+DEB_REVISION = $(call dpkg_late_eval,DEB_REVISION,echo '$(DEB_VERSION)' | sed -e 's/^.*-/-/')
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+COMMA = ,
+ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+  NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+endif
+
+export arch = $(DEB_HOST_ARCH)
+
+ifeq ($(DEB_HOST_ARCH_OS),kfreebsd)
+EXTRA_FEATURES=--disable-linux-caps
+endif
+
+SED_NATIVE_PKCS11 := \
+	sed -e 's,libisc\.,libisc-pkcs11.,g' \
+	    -e 's,libisc-nosymtbl\.,libisc-pkcs11-nosymtbl.,g' \
+	    -e 's,libdns\.,libdns-pkcs11.,g' \
+	    -e 's,@CRYPTO@,@CRYPTO_PK11@,g' \
+	    -e 's,ISC_INCLUDES,ISC_PKCS11_INCLUDES,g' \
+	    -e 's,DNS_INCLUDES,DNS_PKCS11_INCLUDES,g' \
+	    -e 's,\(dnssec-[^ ]*\)@EXEEXT@,\1-pkcs11@EXEEXT@,g' \
+	    -e 's,/lib/isc/,/lib/isc-pkcs11/,g' \
+	    -e 's,/lib/dns/,/lib/dns-pkcs11/,g' \
+	    -e 's,named@EXEEXT@,named-pkcs11@EXEEXT@,g' \
+	    -e 's,@CONTRIB_DLZ@,,g' \
+	    -e 's,$${DLZDRIVER_INCLUDES} $${DBDRIVER_INCLUDES},,g' \
+	    -e 's,$${DLZDRIVER_LIBS} $${DBDRIVER_LIBS},,g' \
+	    -e 's,$${DLZDRIVER_OBJS} $${DBDRIVER_OBJS},,g' \
+	    -e 's,$${DLZDRIVER_SRCS} $${DBDRIVER_SRCS},,g' \
+	    -e 's,@DNS_CRYPTO_LIBS@,@DNS_CRYPTO_PK11_LIBS@,g'
+
+%:
+	dh $@ --with python3 --fail-missing --exclude=.la --exclude=lwresd --exclude=__pycache__
+
+prepare_native_pkcs11:
+	rm -rf bin/named-pkcs11 && cp -r bin/named bin/named-pkcs11
+	rm -rf bin/dnssec-pkcs11 && cp -r bin/dnssec bin/dnssec-pkcs11
+	rm -rf lib/isc-pkcs11 && cp -r lib/isc lib/isc-pkcs11
+	rm -rf lib/dns-pkcs11 && cp -r lib/dns lib/dns-pkcs11
+	$(SED_NATIVE_PKCS11) < bin/named/Makefile.in > bin/named-pkcs11/Makefile.in
+	$(SED_NATIVE_PKCS11) < bin/dnssec/Makefile.in > bin/dnssec-pkcs11/Makefile.in
+	$(SED_NATIVE_PKCS11) < lib/isc/Makefile.in > lib/isc-pkcs11/Makefile.in
+	$(SED_NATIVE_PKCS11) < lib/dns/Makefile.in > lib/dns-pkcs11/Makefile.in
+
+clean_native_pkcs11:
+	rm -rf bin/named-pkcs11
+	rm -rf bin/dnssec-pkcs11
+	rm -rf lib/isc-pkcs11
+	rm -rf lib/dns-pkcs11
+
+prepare_version:
+	if [ ! -f version.bak ]; then cp version version.bak; fi
+	sed -i 's,^EXTENSIONS=.*$$,EXTENSIONS=$(DEB_REVISION)-$(DEB_VENDOR),' version
+
+clean_version:
+	if [ -f version.bak ]; then cp version.bak version; fi
+
+override_dh_autoreconf: prepare_native_pkcs11 prepare_version
+	dh_autoreconf
+
+override_dh_auto_configure:
+	debian/checkapi
+	dh_auto_configure -B build -- \
+		--libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \
+		--sysconfdir=/etc/bind \
+		--with-python=python3 \
+		--localstatedir=/ \
+		--enable-threads \
+		--enable-largefile \
+		--with-libtool \
+		--enable-shared \
+		--enable-static \
+		--with-gost=no \
+		--with-openssl=/usr \
+		--with-gssapi=/usr \
+		--disable-isc-spnego \
+		--with-libidn2 \
+		--with-libjson=/usr \
+		--with-lmdb=/usr \
+		--with-gnu-ld \
+		--with-geoip=/usr \
+		--with-atf=no \
+		--enable-ipv6 \
+		--enable-rrl \
+		--enable-filter-aaaa \
+		--enable-native-pkcs11 \
+		--with-pkcs11=\$${prefix}/lib/softhsm/libsofthsm2.so \
+		--with-randomdev=/dev/urandom \
+		--enable-dnstap \
+		$(EXTRA_FEATURES)
+	dh_auto_configure -B build-udeb -- \
+		--sysconfdir=/etc/bind \
+		--with-python=python3 \
+		--localstatedir=/ \
+		--disable-epoll \
+		--disable-kqueue \
+		--disable-devpoll \
+		--disable-threads \
+		--disable-linux-caps \
+		--with-openssl=/usr \
+		--without-libxml2 \
+		--without-libjson \
+		--without-lmdb \
+		--enable-ipv6 \
+		--enable-shared \
+		--with-libtool \
+		--with-gssapi=no \
+		--disable-isc-spnego \
+		--libdir=/lib/$(DEB_HOST_MULTIARCH) \
+		--includedir=/usr/include/bind-export
+	sh debian/apply-export-patch
+	# no need to build these targets here
+	sed -i 's/dnssec-pkcs11//;s/named-pkcs11//' build-udeb/bin/Makefile
+	sed -i 's/dns-pkcs11//;s/isc-pkcs11//' build-udeb/lib/Makefile
+	cp lib/dns/dnstap.proto build/lib/dns
+	cp lib/dns-pkcs11/dnstap.proto build/lib/dns-pkcs11
+
+override_dh_auto_build:
+	dh_auto_build -B build
+	dh_auto_build -B build-udeb
+
+override_dh_auto_clean: clean_native_pkcs11 clean_version
+	dh_auto_clean -B build
+	dh_auto_clean -B build-udeb
+
+override_dh_auto_install:
+	dh_auto_install -B build      --destdir=$(CURDIR)/debian/tmp
+	dh_auto_install -B build-udeb --destdir=$(CURDIR)/debian/tmp-udeb
+
+override_dh_install:
+	dh_install --exclude=.la --exclude=lwresd --exclude=__pycache__ --fail-missing
+
+	# Fix symlink for export libs to be absolute
+	for lib in `find debian/tmp-udeb/lib/$(DEB_HOST_MULTIARCH)/ -type l -name 'lib*-export.so.*'`; do \
+	  lib=$$(basename $$lib); \
+	  dev=$$(echo $$lib | sed 's/\.so\..*/.so/'); \
+	  echo /lib/$(DEB_HOST_MULTIARCH)/$$lib /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+	  dh_link -plibbind-export-dev /lib/$(DEB_HOST_MULTIARCH)/$$lib \
+	    /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+	done
+
+	dh_apparmor -pbind9 --profile-name=usr.sbin.named
+
+override_dh_systemd_enable:
+	dh_systemd_enable -pbind9 --no-enable --name=bind9-resolvconf bind9-resolvconf.service
+	dh_systemd_enable -pbind9 --no-enable --name=bind9-pkcs11 bind9-pkcs11.service
+	dh_systemd_enable -pbind9 bind9.service
+
+override_dh_makeshlibs: DNS_SOVER=$(shell debian/getapi dns)
+override_dh_makeshlibs: IRS_SOVER=$(shell debian/getapi irs)
+override_dh_makeshlibs: ISCCC_SOVER=$(shell debian/getapi isccc)
+override_dh_makeshlibs: ISCCFG_SOVER=$(shell debian/getapi isccfg)
+override_dh_makeshlibs: ISC_SOVER=$(shell debian/getapi isc)
+override_dh_makeshlibs:
+	dh_makeshlibs -plibdns-export$(DNS_SOVER) --add-udeb=libdns-export$(DNS_SOVER)-udeb
+	dh_makeshlibs -plibirs-export$(IRS_SOVER) --add-udeb=libirs-export$(IRS_SOVER)-udeb
+	dh_makeshlibs -plibisccc-export$(ISCCC_SOVER) --add-udeb=libisccc-export$(ISCCC_SOVER)-udeb
+	dh_makeshlibs -plibisccfg-export$(ISCCFG_SOVER) --add-udeb=libisccfg-export$(ISCCFG_SOVER)-udeb
+	dh_makeshlibs -plibisc-export$(ISC_SOVER) --add-udeb=libisc-export$(ISC_SOVER)-udeb
+	dh_makeshlibs --remaining-packages
+
+override_dh_shlibdeps:
+	dh_shlibdeps
+	# Downgrade libcrypto1.1-udeb dependency from 1.1.1 to 1.1.0
+	# The udebs don't use any newer symbols, but due to them using
+	# shlibs the dependency is generated anyway. This blocks migration
+	# to testing until OpenSSL 1.1.1 is sorted out
+	sed -i 's:libcrypto1.1-udeb (>= 1.1.1):libcrypto1.1-udeb (>= 1.1.0):' debian/*-udeb.substvars
+
+.PHONY: prepare_native_pkcs11 clean_native_pkcs11
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/templates b/debian/templates
new file mode 100644
index 0000000..b5dd9bc
--- /dev/null
+++ b/debian/templates
@@ -0,0 +1,21 @@
+Template: bind9/start-as-user
+Type: string
+Default: bind
+_Description: User account for running the BIND9 daemon:
+ The default is to run the BIND9 daemon (named) under the 'bind'
+ user account. To use a different account, please enter the
+ appropriate username.
+
+Template: bind9/different-configuration-file
+Type: string
+_Description: Other startup options for named:
+ Please provide any additional options (other than username) that should
+ be passed to the BIND9 daemon (named) on startup.
+
+Template: bind9/run-resolvconf
+Type: boolean
+Default: false
+_Description: Should resolv.conf settings be overridden?
+ Please choose whether the resolver should be forced to use the
+ local BIND9 daemon (named) rather than what the current connection
+ recommends, when this machine moves around.
diff --git a/debian/tests/control b/debian/tests/control
new file mode 100644
index 0000000..2fad418
--- /dev/null
+++ b/debian/tests/control
@@ -0,0 +1,3 @@
+Tests: simpletest
+Restrictions: needs-root, isolation-container
+Depends: bind9, dnsutils
diff --git a/debian/tests/simpletest b/debian/tests/simpletest
new file mode 100755
index 0000000..468a7c5
--- /dev/null
+++ b/debian/tests/simpletest
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+set -e
+
+setup() {
+	service bind9 stop
+	service bind9 start
+}
+
+run() {
+	# Make a query against a local zone
+	dig -x 127.0.0.1 @127.0.0.1
+
+	# Make a query against an external nameserver and check for DNSSEC validation
+	echo "Checking for DNSSEC validation status of internetsociety.org"
+	dig -t a internetsociety.org @127.0.0.1 | egrep 'flags:.+ad; QUERY'
+}
+
+teardown() {
+	service bind9 stop
+}
+
+setup
+run
+teardown
+
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..98eed56
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,290 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=KES6
+-----END PGP PUBLIC KEY BLOCK-----
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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==
+=fX+D
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..cd00678
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,11 @@
+version=3
+
+opts=\
+repack,\
+compression=xz,\
+repacksuffix=+dfsg,\
+uversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dirversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dversionmangle=s/\.dfsg\./-/;s/[\.\+]dfsg$//,\
+pgpsigurlmangle=s/$/.asc/ \
+  https://ftp.isc.org/isc/bind9/(9\.11\.\d+(?:(?:-P)\d)?)/ bind-@ANY_VERSION@\.tar\.gz
author	Daniel Baumann <daniel.baumann@progress-linux.org>	2024-05-05 18:37:15 +0000
committer	Daniel Baumann <daniel.baumann@progress-linux.org>	2024-05-05 18:37:15 +0000
commit	55ad72d44a94298a96b8f05488ca5ed97ef04736 (patch)
tree	8aaa712c1d8b8d191b77a7eef4dc42c770e3b3d0
parent	Adding upstream version 1:9.11.5.P4+dfsg. (diff)
download	bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.tar.xz bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.zip