summaryrefslogtreecommitdiffstats
path: root/debian
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--debian/README.Debian178
-rw-r--r--debian/README.source12
-rw-r--r--debian/apply-export-patch20
-rw-r--r--debian/bind9-doc.dirs1
-rw-r--r--debian/bind9-doc.docs1
-rw-r--r--debian/bind9-doc.install1
-rw-r--r--debian/bind9-host.install2
-rw-r--r--debian/bind9-pkcs11.service15
-rw-r--r--debian/bind9-resolvconf.service15
-rw-r--r--debian/bind9.NEWS14
-rw-r--r--debian/bind9.apport36
-rw-r--r--debian/bind9.config14
-rw-r--r--debian/bind9.dirs13
-rw-r--r--debian/bind9.docs1
-rw-r--r--debian/bind9.init145
-rw-r--r--debian/bind9.install38
-rw-r--r--debian/bind9.postinst133
-rw-r--r--debian/bind9.postrm19
-rw-r--r--debian/bind9.preinst57
-rw-r--r--debian/bind9.prerm30
-rw-r--r--debian/bind9.service16
-rw-r--r--debian/bind9.tmpfile1
-rw-r--r--debian/bind9utils.install46
-rw-r--r--debian/changelog2965
-rwxr-xr-xdebian/checkapi11
-rw-r--r--debian/compat1
-rw-r--r--debian/control394
-rw-r--r--debian/copyright159
-rw-r--r--debian/dnsutils.install12
-rw-r--r--debian/export.diff11
-rw-r--r--debian/extras/apparmor.d/usr.sbin.named94
-rw-r--r--debian/extras/etc/db.012
-rw-r--r--debian/extras/etc/db.12713
-rw-r--r--debian/extras/etc/db.25512
-rw-r--r--debian/extras/etc/db.empty14
-rw-r--r--debian/extras/etc/db.local14
-rw-r--r--debian/extras/etc/named.conf11
-rw-r--r--debian/extras/etc/named.conf.default-zones30
-rw-r--r--debian/extras/etc/named.conf.local8
-rw-r--r--debian/extras/etc/named.conf.options24
-rw-r--r--debian/extras/etc/zones.rfc191820
-rwxr-xr-xdebian/extras/if-reconfig.d/bind915
-rw-r--r--debian/extras/insserv.conf.d/bind91
-rw-r--r--debian/extras/ufw/bind95
-rw-r--r--debian/gbp.conf4
-rwxr-xr-xdebian/getapi8
-rw-r--r--debian/libbind-dev.README.Debian9
-rw-r--r--debian/libbind-dev.install21
-rwxr-xr-xdebian/libbind-export-dev.install4
-rw-r--r--debian/libbind9-161.install1
-rw-r--r--debian/libbind9-161.symbols8
-rwxr-xr-xdebian/libdns-export1104-udeb.install2
-rwxr-xr-xdebian/libdns-export1104.install2
-rw-r--r--debian/libdns1104.install2
-rw-r--r--debian/libdns1104.symbols3173
-rwxr-xr-xdebian/libirs-export161-udeb.install2
-rwxr-xr-xdebian/libirs-export161.install2
-rw-r--r--debian/libirs161.install1
-rw-r--r--debian/libirs161.symbols28
-rwxr-xr-xdebian/libisc-export1100-udeb.install2
-rwxr-xr-xdebian/libisc-export1100.install2
-rw-r--r--debian/libisc1100.install2
-rw-r--r--debian/libisc1100.symbols1803
-rwxr-xr-xdebian/libisccc-export161-udeb.install2
-rwxr-xr-xdebian/libisccc-export161.install2
-rw-r--r--debian/libisccc161.install1
-rw-r--r--debian/libisccc161.symbols66
-rwxr-xr-xdebian/libisccfg-export163-udeb.install2
-rwxr-xr-xdebian/libisccfg-export163.install2
-rw-r--r--debian/libisccfg163.install1
-rw-r--r--debian/libisccfg163.symbols173
-rw-r--r--debian/liblwres161.install1
-rw-r--r--debian/liblwres161.symbols101
-rw-r--r--debian/nslookup.1536
-rw-r--r--debian/patches/0001-non-linux.diff42
-rw-r--r--debian/patches/0002-multiarch.diff29
-rw-r--r--debian/patches/0003-min-cache-ttl.diff254
-rw-r--r--debian/patches/0004-library_paths.diff136
-rw-r--r--debian/patches/0005-resource_missing_include.diff24
-rw-r--r--debian/patches/0006-prepare_native_pkcs11.diff246
-rw-r--r--debian/patches/0007-ctxstart_no_sighandling.diff22
-rw-r--r--debian/patches/0008-reproducible_build.diff68
-rw-r--r--debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch24
-rw-r--r--debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff24
-rw-r--r--debian/patches/0011-keymgr-dont-immediately-delete.diff236
-rw-r--r--debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch912
-rw-r--r--debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch128
-rw-r--r--debian/patches/0014-Disable-broken-Ed448-support.patch508
-rw-r--r--debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch54
-rw-r--r--debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch117
-rw-r--r--debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch82
-rw-r--r--debian/patches/0018-CVE-2020-8616.patch212
-rw-r--r--debian/patches/0019-CVE-2020-8617.patch33
-rw-r--r--debian/patches/0020-Remove-INSIST-from-from-new_reference.patch568
-rw-r--r--debian/patches/0021-Always-keep-a-copy-of-the-message.patch55
-rw-r--r--debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch400
-rw-r--r--debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch71
-rw-r--r--debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch27
-rw-r--r--debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch73
-rw-r--r--debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch111
-rw-r--r--debian/patches/0027-CVE-2020-8625.patch25
-rw-r--r--debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch28
-rw-r--r--debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch40
-rw-r--r--debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch46
-rw-r--r--debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch40
-rw-r--r--debian/patches/0032-Handle-DNAME-lookup-via-itself.patch41
-rw-r--r--debian/patches/0033-Disable-lame-ttl-cache.patch70
-rw-r--r--debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch48
-rw-r--r--debian/patches/0035-CVE-2021-25220.patch203
-rw-r--r--debian/patches/series35
-rw-r--r--debian/po/POTFILES.in1
-rw-r--r--debian/po/cs.po67
-rw-r--r--debian/po/da.po67
-rw-r--r--debian/po/de.po84
-rw-r--r--debian/po/es.po86
-rw-r--r--debian/po/eu.po68
-rw-r--r--debian/po/fi.po64
-rw-r--r--debian/po/fr.po69
-rw-r--r--debian/po/gl.po66
-rw-r--r--debian/po/id.po51
-rw-r--r--debian/po/it.po69
-rw-r--r--debian/po/ja.po66
-rw-r--r--debian/po/ko.po69
-rw-r--r--debian/po/nb.po69
-rw-r--r--debian/po/nl.po72
-rw-r--r--debian/po/pl.po68
-rw-r--r--debian/po/pt.po69
-rw-r--r--debian/po/pt_BR.po71
-rw-r--r--debian/po/ru.po70
-rw-r--r--debian/po/sk.po67
-rw-r--r--debian/po/sr.po66
-rw-r--r--debian/po/sr@latin.po66
-rw-r--r--debian/po/sv.po69
-rw-r--r--debian/po/templates.pot60
-rw-r--r--debian/po/tr.po70
-rw-r--r--debian/po/vi.po67
-rw-r--r--debian/po/zh_CN.po64
-rwxr-xr-xdebian/rules186
-rw-r--r--debian/source/format1
-rw-r--r--debian/templates21
-rw-r--r--debian/tests/control3
-rwxr-xr-xdebian/tests/simpletest26
-rw-r--r--debian/upstream/signing-key.asc290
-rw-r--r--debian/watch11
144 files changed, 17942 insertions, 0 deletions
diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 0000000..297c52a
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,178 @@
+DNSSEC validation turned on by default as of BIND 9.8.1
+-------------------------------------------------------
+As of version 9.8.1.dfsg-1, BIND ships with DNSSEC validation turned on
+by default. As the keys get changed over time, this means that a fresh
+install of BIND will require that the admin manually upgrade bind.keys
+to account for the change, before BIND will be able to resolve hosts in
+DNSSEC validated zones.
+
+
+Upgrading from BIND 8.X:
+-----------------------
+
+If you are upgrading an authoritative server from BIND 8.X, please install
+the bind9-doc package and read /usr/share/doc/bind9-doc/misc/migration.gz,
+which contains a set of notes from the BIND maintainers on what changed
+that is likely to need your attention during an upgrade.
+
+
+Upgrading from earlier bind9 packages:
+-------------------------------------
+
+If you installed an early version of the Debian bind9 packages, prior to
+version 1:9.2.0-2 to be more precise, you may have an /etc/bind/rndc.conf
+configuration file still on your system. There's nothing wrong with that,
+and if you've explicitly configured keys for using rndc you may well want to
+leave things exactly as they are!
+
+However, since 9.2.0 BIND 9.X has supported an rndc.key file that both named
+and rndc will read to obtain a shared key for rndc use against a daemon on
+the same host. The rndc-confgen program will easily create a suitable key
+file. To take advantage of this mechanism, you may want to:
+
+ remove the /etc/bind/rndc.conf file
+ remove the rndc key specification in the /etc/bind/named.conf file
+
+ rndc-confgen -r /dev/urandom -a
+
+Alternatively, you can 'purge' the bind9 packages and reinstall them and you
+will end up with the new behavior since it is now the default.
+
+This is more secure than using a static key that isn't generated on a per-host
+basis, and is an easy alternative to more complex key schemes if you only need
+to use rndc to talk to named on the same host.
+
+
+Known Issues:
+------------
+
+I've had a report that lwresd, at least, fails to work with some recent 2.5
+kernels. If you see something in your logs like
+
+ loading configuration from '/etc/bind/lwresd.conf'
+ none:0: open: /etc/bind/lwresd.conf: permission denied
+
+Try rebuilding with --disable-linux-caps added to the configure call in the
+rules file. I'm hoping this is a temporary problem in the 2.5 kernel series,
+but we'll see.
+
+
+Configuration Schema:
+--------------------
+
+The Debian BIND package ships with a config that will work for the majority
+of leaf servers with no user input required.
+
+The named configuration file named.conf is located in /etc/bind, so that all
+static configuration files relating to bind are in one place. If you really
+don't want named.conf in /etc/bind, then the best way to handle it is probably
+to replace /etc/bind/named.conf with a symlink to the location you want to use.
+You could also use an option to named in the init.d script, but that only works
+for named, not for things like ndc.
+
+Zone data files for the root servers, and the forward and reverse localhost
+zones are also provided in /etc/bind.
+
+The working directory for named is now /var/cache/bind. Thus, any transient
+files generated by named, such as database files for zones the daemon is
+secondary for, will be written to the /var filesystem, where they belong.
+
+To make this work, the named.conf provided uses explicitly fully-qualified
+pathnames to reference the files in /etc/bind.
+
+Unlike previous BIND packages for Debian, the named.conf and provided db.*
+files are tagged as conffiles. Thus, if you just want a "caching mostly"
+server configuration for a server that does not need to be authoritative for
+anything else, you can run the provided configuration as-is. If you want to
+hack on named.conf, or even the init.d fragment, you can feel free to. Future
+package upgrades will treat your configuration changes sanely, as all Debian
+packages should.
+
+While you are free to craft whatever structure you wish for servers which need
+to be authoritative for additional zones, what we suggest is that you put the
+db files for any zones you are master for in /etc/bind (perhaps even in a
+subdirectory structure depending on complexity), using full pathnames in the
+named.conf file. Any zones you are secondary for should be configured in
+named.conf with simple filenames (relative to /var/cache/bind), so the data
+files will be stored in BIND's working directory (defaults to /var/cache/bind).
+Zones subject to automatic updates (such as via DHCP and/or nsupdate) should be
+stored in /var/lib/bind, and specified with full pathnames.
+
+
+Running Chroot'ed:
+-----------------
+
+Several users have asked for Debian BIND to run in a "chroot jail". There are
+various issues associated with making this the default configuration for the
+package in Debian. In the meantime, reasonable instructions on how to do
+this yourself are available on the web from:
+
+ http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html
+
+
+Running Non-Root:
+-----------------
+
+Recent versions of named can be invoked with options that specify a non-root
+user and/or group for named. Read the named man page for more information.
+Note that when running named as a user other than root, it will not be able
+to find new interfaces that appear dynamically, such as during a PCMCIA card
+insertion, or if you're running some flavors of IPSEC and/or IP over IP
+tunnels. If you cannot live with those limitations, feel free to edit the
+/etc/init.d/bind9 script to change the invocation of named.
+
+The default is now to run as the user 'bind' (which is automatically created
+in the group 'bind', if it doesn't exist), unless named.conf has been changed.
+To change this, edit /etc/default/bind9
+
+Please note that 'ndc restart' doesn't honor all the original command line
+options to named, so we explicitly don't use it in the init.d script provided
+with the package, and you should be careful about using it if you decide to
+run named non-root.
+
+
+PPP Control Script:
+-----------------
+
+Unfortunately, 'ndc reload' will not honor any command line options that were
+fed to named on the initial invocation. If you can live with that, and
+want to wiggle your DNS configuration when your PPP link goes up or down, the
+following script fragment from Francesco Potorti` <pot@gnu.org> may be helpful
+to you:
+
+ I suggest adding this as bot /etc/ppp/ip-up.d/bind and
+ /etc/ppp/ip-down.d/bind:
+
+ ================================================================
+ #!/bin/sh
+ if [ -x /usr/sbin/ndc -a -x /usr/sbin/named ]
+ then
+ /usr/sbin/ndc reload > /dev/null
+ fi
+ ================================================================
+
+ This should cause no harm in any case, and should be helpful in these
+ cases:
+ - you configure bind as a forwarder. When ppp is down, it cannot access
+ the network. As soon as ppp is up, it is forced by the script to try
+ again, and it succeeds.
+ - someone writes a clever script that, coupled with the `usepeerdns'
+ command of pppd, makes a forwarding-only bind use the right servers by
+ rewriting the configuration file after ppp goes up. Then the script
+ above makes bind reload the configuration.
+
+ Now, someone should write that clever script :-)
+
+ By the way, this is a badly wanted feature, that should help setting up
+ a ppp connection automatically. Currently, setting up a ppp connection
+ is much easier on a windows system than on linux, and there is really no
+ reason why it should be so, given that all the tools are there.
+
+
+Apparmor Profile
+----------------
+If your system uses apparmor, please note that the shipped enforcing profile
+works with the default installation, and changes in your configuration may
+require changes to the installed apparmor profile. Please see
+https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this
+software.
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000..d0e527d
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,12 @@
+Just a crude notes about the source handling (it needs cleanup).
+
+- The source has been converted to git-buildpackage structure to allow
+ easy team work
+
+- uscan can be used to download new upstream sources
+
+- d/copyright has been converted to machine readable format (TODO) and
+ has Files-Excludes section for generation upstream tarball using
+ mk-origtarball (via uscan) to remove contrib/ directory
+
+ -- Ondřej Surý <ondrej@debian.org>, Fri, 8 Sep 2017 12:18:26 +0200
diff --git a/debian/apply-export-patch b/debian/apply-export-patch
new file mode 100644
index 0000000..36be293
--- /dev/null
+++ b/debian/apply-export-patch
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+# This pile of horror converts the makefiles into expecting the -export
+# version of the libraries.
+
+set -e
+cd build-udeb
+
+for lib in dns irs isc isccc isccfg lwres; do
+ sed -i "s/lib${lib}\./lib${lib}-export./g" lib/${lib}/Makefile
+done
+
+sed -i 's/ -lisc -ldns -lisccfg$/ -lisc-export -ldns-export -lisccfg-export/' \
+ lib/irs/Makefile
+
+patch -p0 < ../debian/export.diff
+
+for lib in dns irs isc isccc isccfg lwres; do
+ sed -i 's/\(lib'${lib}'\).la/\1-export.la/g' $(find . -name Makefile)
+done
diff --git a/debian/bind9-doc.dirs b/debian/bind9-doc.dirs
new file mode 100644
index 0000000..3d13cf8
--- /dev/null
+++ b/debian/bind9-doc.dirs
@@ -0,0 +1 @@
+usr/share/doc/bind9-doc/arm
diff --git a/debian/bind9-doc.docs b/debian/bind9-doc.docs
new file mode 100644
index 0000000..86d3a6d
--- /dev/null
+++ b/debian/bind9-doc.docs
@@ -0,0 +1 @@
+doc/misc
diff --git a/debian/bind9-doc.install b/debian/bind9-doc.install
new file mode 100644
index 0000000..3fe53ec
--- /dev/null
+++ b/debian/bind9-doc.install
@@ -0,0 +1 @@
+doc/arm/*.html /usr/share/doc/bind9-doc/arm
diff --git a/debian/bind9-host.install b/debian/bind9-host.install
new file mode 100644
index 0000000..f07a04d
--- /dev/null
+++ b/debian/bind9-host.install
@@ -0,0 +1,2 @@
+usr/bin/host
+usr/share/man/man1/host.1*
diff --git a/debian/bind9-pkcs11.service b/debian/bind9-pkcs11.service
new file mode 100644
index 0000000..75f7f63
--- /dev/null
+++ b/debian/bind9-pkcs11.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=BIND Domain Name Server with native PKCS#11
+Documentation=man:named(8)
+After=network.target
+
+[Service]
+EnvironmentFile=-/etc/default/bind9
+Environment=KRB5_KTNAME=/etc/bind/named.keytab
+
+ExecStart=/usr/sbin/named-pkcs11 -f -u bind
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/bind9-resolvconf.service b/debian/bind9-resolvconf.service
new file mode 100644
index 0000000..b0f01a0
--- /dev/null
+++ b/debian/bind9-resolvconf.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=local BIND via resolvconf
+Documentation=man:named(8) man:resolvconf(8)
+PartOf=bind9.service
+After=bind9.service
+ConditionFileIsExecutable=/sbin/resolvconf
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named'
+ExecStop=/sbin/resolvconf -d lo.named
+
+[Install]
+WantedBy=bind9.service
diff --git a/debian/bind9.NEWS b/debian/bind9.NEWS
new file mode 100644
index 0000000..d235da6
--- /dev/null
+++ b/debian/bind9.NEWS
@@ -0,0 +1,14 @@
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+ As of bind 9.4, allow-query-cache and allow-recursion default to the
+ builtin acls 'localnets' and 'localhost'. If you are setting up a
+ name server for a network, you will almost certainly need to change
+ this.
+
+ The change in default has been done to make caching servers less
+ attractive as reflective amplifying targets for spoofed traffic.
+ This still leaves authoritative servers exposed.
+
+ The best fix is for full BCP 38 deployment to remove spoofed traffic.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 03 Oct 2007 00:52:44 -0600
diff --git a/debian/bind9.apport b/debian/bind9.apport
new file mode 100644
index 0000000..e484b94
--- /dev/null
+++ b/debian/bind9.apport
@@ -0,0 +1,36 @@
+#!/usr/bin/python
+
+'''apport hook for bind9
+
+(c) 2010 Andres Rodriguez.
+Author: Andres Rodriguez <andreserl@ubuntu.com>
+
+This program is free software; you can redistribute it and/or modify it
+under the terms of the GNU General Public License as published by the
+Free Software Foundation; either version 2 of the License, or (at your
+option) any later version. See http://www.gnu.org/copyleft/gpl.html for
+the full text of the license.
+'''
+
+from apport.hookutils import *
+import re
+
+def add_info(report, ui):
+ response = ui.yesno("The contents of your /etc/bind/named.conf file "
+ "may help developers diagnose your bug more "
+ "quickly. However, it may contain sensitive "
+ "information. Do you want to include it in your "
+ "bug report?")
+
+ if response == None: # user cancelled
+ raise StopIteration
+ elif response == True:
+ attach_conffiles(report,'bind9')
+
+ # getting syslog stuff
+ report['SyslogBind9'] = recent_syslog(re.compile(r'named\['))
+
+ # Attaching related packages info
+ attach_related_packages(report, ['bind9utils', 'apparmor'])
+
+ attach_mac_events(report, '/usr/sbin/named')
diff --git a/debian/bind9.config b/debian/bind9.config
new file mode 100644
index 0000000..e7f85c5
--- /dev/null
+++ b/debian/bind9.config
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+db_input low bind9/start-as-user || true
+db_go
+
+db_input low bind9/different-configuration-file || true
+db_go
+
+db_input low bind9/run-resolvconf || true
+db_go
diff --git a/debian/bind9.dirs b/debian/bind9.dirs
new file mode 100644
index 0000000..6fc1596
--- /dev/null
+++ b/debian/bind9.dirs
@@ -0,0 +1,13 @@
+etc/apparmor.d/force-complain
+etc/apparmor.d/local
+etc/bind
+etc/insserv.conf.d
+etc/network/if-down.d
+etc/network/if-up.d
+etc/ppp/ip-down.d
+etc/ppp/ip-up.d
+etc/ufw/applications.d
+usr/bin
+usr/sbin
+usr/share/bind9
+var/cache/bind
diff --git a/debian/bind9.docs b/debian/bind9.docs
new file mode 100644
index 0000000..e845566
--- /dev/null
+++ b/debian/bind9.docs
@@ -0,0 +1 @@
+README
diff --git a/debian/bind9.init b/debian/bind9.init
new file mode 100644
index 0000000..59d8e3d
--- /dev/null
+++ b/debian/bind9.init
@@ -0,0 +1,145 @@
+#!/bin/sh -e
+
+### BEGIN INIT INFO
+# Provides: bind9
+# Required-Start: $remote_fs
+# Required-Stop: $remote_fs
+# Should-Start: $network $syslog
+# Should-Stop: $network $syslog
+# Default-Start: 2 3 4 5
+# Default-Stop: 0 1 6
+# Short-Description: Start and stop bind9
+# Description: bind9 is a Domain Name Server (DNS)
+# which translates ip addresses to and from internet names
+### END INIT INFO
+
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+
+# for a chrooted server: "-u bind -t /var/lib/named"
+# Don't modify this line, change or create /etc/default/bind9.
+OPTIONS=""
+RESOLVCONF=no
+
+test -f /etc/default/bind9 && . /etc/default/bind9
+
+test -x /usr/sbin/rndc || exit 0
+
+. /lib/lsb/init-functions
+PIDFILE=/run/named/named.pid
+
+check_network() {
+ if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then
+ IFCONFIG_OPTS="-au"
+ else
+ IFCONFIG_OPTS=""
+ fi
+ if [ -z "$(/sbin/ifconfig $IFCONFIG_OPTS)" ]; then
+ #log_action_msg "No networks configured."
+ return 1
+ fi
+ return 0
+}
+
+case "$1" in
+ start)
+ log_daemon_msg "Starting domain name service..." "bind9"
+
+ modprobe capability >/dev/null 2>&1 || true
+
+ # dirs under /run can go away on reboots.
+ mkdir -p /run/named
+ chmod 775 /run/named
+ chown root:bind /run/named >/dev/null 2>&1 || true
+
+ if [ ! -x /usr/sbin/named ]; then
+ log_action_msg "named binary missing - not starting"
+ log_end_msg 1
+ fi
+
+ if ! check_network; then
+ log_action_msg "no networks configured"
+ log_end_msg 1
+ fi
+
+ if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \
+ --pidfile ${PIDFILE} -- $OPTIONS; then
+ if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+ echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named
+ fi
+ log_end_msg 0
+ else
+ log_end_msg 1
+ fi
+ ;;
+
+ stop)
+ log_daemon_msg "Stopping domain name service..." "bind9"
+ if ! check_network; then
+ log_action_msg "no networks configured"
+ log_end_msg 1
+ fi
+
+ if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then
+ /sbin/resolvconf -d lo.named
+ fi
+ pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true
+ if [ -z "$pid" ]; then # no pid found, so either not running, or error
+ pid=$(pgrep -f ^/usr/sbin/named) || true
+ start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \
+ --pidfile ${PIDFILE} -- $OPTIONS
+ fi
+ if [ -n "$pid" ]; then
+ sig=0
+ n=1
+ while kill -$sig $pid 2>/dev/null; do
+ if [ $n -eq 1 ]; then
+ echo "waiting for pid $pid to die"
+ fi
+ if [ $n -eq 11 ]; then
+ echo "giving up on pid $pid with kill -0; trying -9"
+ sig=9
+ fi
+ if [ $n -gt 20 ]; then
+ echo "giving up on pid $pid"
+ break
+ fi
+ n=$(($n+1))
+ sleep 1
+ done
+ fi
+ log_end_msg 0
+ ;;
+
+ reload|force-reload)
+ log_daemon_msg "Reloading domain name service..." "bind9"
+ if ! check_network; then
+ log_action_msg "no networks configured"
+ log_end_msg 1
+ fi
+
+ /usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1
+ ;;
+
+ restart)
+ if ! check_network; then
+ log_action_msg "no networks configured"
+ exit 1
+ fi
+
+ $0 stop
+ $0 start
+ ;;
+
+ status)
+ ret=0
+ status_of_proc -p ${PIDFILE} /usr/sbin/named bind9 2>/dev/null || ret=$?
+ exit $ret
+ ;;
+
+ *)
+ log_action_msg "Usage: /etc/init.d/bind9 {start|stop|reload|restart|force-reload|status}"
+ exit 1
+ ;;
+esac
+
+exit 0
diff --git a/debian/bind9.install b/debian/bind9.install
new file mode 100644
index 0000000..26d595e
--- /dev/null
+++ b/debian/bind9.install
@@ -0,0 +1,38 @@
+debian/extras/apparmor.d/* /etc/apparmor.d/
+debian/extras/etc/* /etc/bind/
+debian/extras/if-reconfig.d/* /etc/network/if-down.d
+debian/extras/if-reconfig.d/* /etc/network/if-up.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-down.d/
+debian/extras/if-reconfig.d/* /etc/ppp/ip-up.d/
+debian/extras/insserv.conf.d/* /etc/insserv.conf.d/
+debian/extras/ufw/* /etc/ufw/applications.d/
+etc/bind/bind.keys
+usr/bin/arpaname
+usr/bin/bind9-config
+usr/bin/named-rrchecker
+usr/sbin/ddns-confgen
+usr/sbin/dnssec-importkey
+usr/sbin/genrandom
+usr/sbin/isc-hmac-fixup
+usr/sbin/named
+usr/sbin/named-journalprint
+usr/sbin/named-nzd2nzf
+usr/sbin/named-pkcs11
+usr/sbin/nsec3hash
+usr/sbin/tsig-keygen
+usr/share/man/man1/arpaname.1
+usr/share/man/man1/bind9-config.1
+usr/share/man/man1/isc-config.sh.1
+usr/share/man/man1/named-rrchecker.1
+usr/share/man/man5/named.conf.5
+usr/share/man/man5/rndc.conf.5
+usr/share/man/man8/ddns-confgen.8
+usr/share/man/man8/dnssec-coverage.8
+usr/share/man/man8/dnssec-importkey.8
+usr/share/man/man8/genrandom.8
+usr/share/man/man8/isc-hmac-fixup.8
+usr/share/man/man8/named-journalprint.8
+usr/share/man/man8/named-nzd2nzf.8
+usr/share/man/man8/named.8
+usr/share/man/man8/nsec3hash.8
+usr/share/man/man8/tsig-keygen.8
diff --git a/debian/bind9.postinst b/debian/bind9.postinst
new file mode 100644
index 0000000..d1fa83f
--- /dev/null
+++ b/debian/bind9.postinst
@@ -0,0 +1,133 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+if [ "$1" = configure ]; then
+ lastversion="$2";
+
+ # lets give them a bind user/group in all cases.
+ getent group bind >/dev/null 2>&1 || addgroup --system bind
+ getent passwd bind >/dev/null 2>&1 ||
+ adduser --system --home /var/cache/bind --no-create-home \
+ --disabled-password --ingroup bind bind
+
+ if [ -z "$lastversion" ] || dpkg --compare-versions "$lastversion" lt 1:9.4.2-2 ; then
+ mkdir -p /var/lib/bind
+ chown root:bind /var/lib/bind
+ chmod 775 /var/lib/bind
+ fi
+
+ if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then
+ rndc-confgen -r /dev/urandom -a
+ fi
+
+ # no sumfile means you get the default
+ [ -f /var/lib/bind/bind9-default.md5sum ] ||
+ echo "2cfcfb7bf1b99c7930fd475907e38be7 /etc/default/bind9" > /var/lib/bind/bind9-default.md5sum
+
+ if [ -f /etc/default/bind9 ] && \
+ [ "$(cat /var/lib/bind/bind9-default.md5sum)" = "$(md5sum /etc/default/bind9)" ]; then
+ config="/etc/default/bind9"
+ elif [ ! -e /etc/default/bind9 ]; then
+ config="/etc/default/bind9"
+ else
+ config="/etc/default/bind9.dpkg-dist"
+ fi
+
+ localconf=""
+ if [ ! -f $config ]; then
+ CONF=/etc/bind/named.conf
+ for file in ${CONF} ${CONF}.local ${CONF}.default-zones; do
+ if [ -f ${file} ]; then
+ theirs=$(md5sum $file | sed 's/ .*$//')
+ mine=$(dpkg --status bind9 | grep "^ $file " | sed -n 's/.* //p')
+ if [ "$mine" != "$theirs" ]; then
+ localconf="y"
+ fi
+ else
+ localconf="y"
+ fi
+ done
+ if [ -n "$localconf" ]; then
+ db_reset bind9/start-as-user
+ else
+ db_set bind9/start-as-user bind || true
+ fi
+
+ echo '#' >> $config
+ echo '# run resolvconf?' >> $config
+ db_get bind9/run-resolvconf
+ if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+ echo "RESOLVCONF=yes" >> $config
+ else
+ echo "RESOLVCONF=no" >> $config
+ fi
+
+ db_get bind9/start-as-user
+ USER=$RET
+ db_get bind9/different-configuration-file
+ CONFFILE=$RET
+
+ echo '' >> $config
+ echo '# startup options for the server' >> $config
+ if [ ! -z "$USER" ] && [ ! -z "$CONFFILE" ]; then
+ echo "OPTIONS=\"-u $USER -c $CONFFILE\"" >> $config
+ elif [ ! -z "$USER" ]; then
+ echo "OPTIONS=\"-u $USER\"" >> $config
+ elif [ ! -z "$CONFFILE" ]; then
+ echo "OPTIONS=\"-c $CONFFILE\"" >> $config
+ else
+ echo "OPTIONS=\"\"" >> $config
+ fi
+ else
+ db_get bind9/run-resolvconf
+ if [ ! -z "$RET" ] && [ "$RET" = "true" ]; then
+ sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2yes#g" -i $config
+ else
+ sed -e "s#^\([[:space:]]*\)\(RESOLVCONF=[[:space:]]*\)[^ ]*#\1\2no#g" -i $config
+ fi
+ db_get bind9/start-as-user
+ if [ ! -z "$RET" ]; then
+ if [ ! -z "`grep OPTIONS $config`" ]; then
+ if [ ! -z "`grep OPTIONS $config | grep '\-u'`" ]; then
+ sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-u[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-u $RET\3\"#g" -i $config
+ else
+ sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -u $RET\"#g" -i $config
+ fi
+ else
+ echo "OPTIONS=\"-u $RET\"" >> $config
+ fi
+ fi
+ db_get bind9/different-configuration-file
+ if [ ! -z "$RET" ]; then
+ if [ ! -z "`grep OPTIONS $config | grep '\-c'`" ]; then
+ sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)-c[[:space:]]*[^\" ]*\([^\"]*\)\"#\1=\"\2-c $RET\3\"#g" -i $config
+ else
+ sed -e "s#\([[:space:]]*OPTIONS[[:space:]]*\)=\"\([^\"]*\)\"#\1=\"\2 -c $RET\"#g" -i $config
+ fi
+ fi
+ fi
+
+ if [ "$config" = "/etc/default/bind9" ]; then
+ md5sum /etc/default/bind9 > /var/lib/bind/bind9-default.md5sum
+ fi
+
+ uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}')
+ if [ "$uid" = "0" ]; then
+ [ -n "$localconf" ] || chown bind /etc/bind/rndc.key
+ chgrp bind /etc/bind
+ chmod g+s /etc/bind
+ chgrp bind /etc/bind/rndc.key /var/cache/bind
+ chgrp bind /etc/bind/named.conf* || true
+ chmod g+r /etc/bind/rndc.key /etc/bind/named.conf* || true
+ chmod g+rwx /var/cache/bind
+ fi
+fi
+
+db_stop
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.postrm b/debian/bind9.postrm
new file mode 100644
index 0000000..8e28807
--- /dev/null
+++ b/debian/bind9.postrm
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+set -e
+
+#DEBHELPER#
+
+if [ "$1" = "purge" ]; then
+ rm -f /etc/bind/rndc.key /etc/default/bind9
+ rmdir /etc/bind >/dev/null 2>&1 || true
+ rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true
+ rm -f /var/lib/bind/bind9-default.md5sum
+ rmdir /var/lib/bind || true
+ # delete bind daemon user, if it exists
+ if getent passwd bind > /dev/null ; then
+ deluser --quiet bind > /dev/null || true
+ fi
+fi
+
+exit 0
diff --git a/debian/bind9.preinst b/debian/bind9.preinst
new file mode 100644
index 0000000..66b06ab
--- /dev/null
+++ b/debian/bind9.preinst
@@ -0,0 +1,57 @@
+#!/bin/sh
+# preinst script for bind9
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+# * <new-preinst> `install'
+# * <new-preinst> `install' <old-version>
+# * <new-preinst> `upgrade' <old-version>
+# * <old-preinst> `abort-upgrade' <new-version>
+# for details, see https://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+ install|upgrade)
+ if [ -n "$2" ] && dpkg --compare-versions "$2" lt "1:9.11.2+dfsg-6"; then
+ theirs=$(md5sum /etc/bind/named.conf.options | sed 's/ .*$//')
+ mine=56919cbc0d819c9a303a8bdeb306b5f1
+ if [ "$mine" = "$theirs" ]; then
+ if [ -n "$(dpkg-query -f '${Conffiles}' -W bind9 | grep /etc/bind/named.conf.options)" ]; then
+ # dpkg knows /etc/bind/named.conf.options as a conffile (from squeeze or older)
+ # cannot move the outdated file aside to avoid dpkg noticing deleted-by-local-admin
+ # therefore edit it in place to make it match the to-be-installed version
+ cp -p /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old
+ sed -i '26{/^$/d}; 23{/auth-nxdomain no;/d}' /etc/bind/named.conf.options
+ else
+ mv /etc/bind/named.conf.options /etc/bind/named.conf.options.dpkg-old
+ fi
+ fi
+ fi
+ ;;
+
+ abort-upgrade)
+ if [ ! -f "/etc/bind/named.conf.options" ] && [ -f "/etc/bind/named.conf.options.dpkg-old" ]; then
+ theirs=$(md5sum /etc/bind/named.conf.options.dpkg-old | sed 's/ .*$//')
+ mine=56919cbc0d819c9a303a8bdeb306b5f1
+ if [ "$mine" = "$theirs" ]; then
+ mv /etc/bind/named.conf.options.dpkg-old /etc/bind/named.conf.options
+ fi
+ fi
+ ;;
+
+ *)
+ echo "preinst called with unknown argument \`$1'" >&2
+ exit 1
+ ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.prerm b/debian/bind9.prerm
new file mode 100644
index 0000000..12afbea
--- /dev/null
+++ b/debian/bind9.prerm
@@ -0,0 +1,30 @@
+#!/bin/sh
+set -e
+
+case "$1" in
+ remove)
+ # if bind is running, stop it before removing
+ if pidof named >/dev/null 2>&1; then
+ # test if invoke-rc.d command is present on this system
+ if command -v invoke-rc.d >/dev/null 2>&1; then
+ invoke-rc.d bind9 stop
+ # if really not, use initscript
+ else
+ /etc/init.d/bind9 stop
+ fi
+ fi
+ ;;
+
+ upgrade)
+ # leave bind running during the upgrade
+ ;;
+
+ *)
+ echo "prerm called with unknown argument \`$1'" >&2
+ exit 1
+ ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/bind9.service b/debian/bind9.service
new file mode 100644
index 0000000..3b91a17
--- /dev/null
+++ b/debian/bind9.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=BIND Domain Name Server
+Documentation=man:named(8)
+After=network.target
+Wants=nss-lookup.target
+Before=nss-lookup.target
+
+[Service]
+Type=forking
+EnvironmentFile=-/etc/default/bind9
+ExecStart=/usr/sbin/named $OPTIONS
+ExecReload=/usr/sbin/rndc reload
+ExecStop=/usr/sbin/rndc stop
+
+[Install]
+WantedBy=multi-user.target
diff --git a/debian/bind9.tmpfile b/debian/bind9.tmpfile
new file mode 100644
index 0000000..36fc91d
--- /dev/null
+++ b/debian/bind9.tmpfile
@@ -0,0 +1 @@
+d /run/named 0775 root bind - -
diff --git a/debian/bind9utils.install b/debian/bind9utils.install
new file mode 100644
index 0000000..12fcc2f
--- /dev/null
+++ b/debian/bind9utils.install
@@ -0,0 +1,46 @@
+usr/lib/python3/dist-packages/
+usr/sbin/dnssec-checkds
+usr/sbin/dnssec-coverage
+usr/sbin/dnssec-dsfromkey
+usr/sbin/dnssec-dsfromkey-pkcs11
+usr/sbin/dnssec-importkey-pkcs11
+usr/sbin/dnssec-keyfromlabel
+usr/sbin/dnssec-keyfromlabel-pkcs11
+usr/sbin/dnssec-keygen
+usr/sbin/dnssec-keygen-pkcs11
+usr/sbin/dnssec-keymgr
+usr/sbin/dnssec-revoke
+usr/sbin/dnssec-revoke-pkcs11
+usr/sbin/dnssec-settime
+usr/sbin/dnssec-settime-pkcs11
+usr/sbin/dnssec-signzone
+usr/sbin/dnssec-signzone-pkcs11
+usr/sbin/dnssec-verify
+usr/sbin/dnssec-verify-pkcs11
+usr/sbin/named-checkconf
+usr/sbin/named-checkzone
+usr/sbin/named-compilezone
+usr/sbin/pkcs11-destroy
+usr/sbin/pkcs11-keygen
+usr/sbin/pkcs11-list
+usr/sbin/pkcs11-tokens
+usr/sbin/rndc
+usr/sbin/rndc-confgen
+usr/share/man/man8/dnssec-checkds.8
+usr/share/man/man8/dnssec-dsfromkey.8
+usr/share/man/man8/dnssec-keyfromlabel.8
+usr/share/man/man8/dnssec-keygen.8
+usr/share/man/man8/dnssec-keymgr.8
+usr/share/man/man8/dnssec-revoke.8
+usr/share/man/man8/dnssec-settime.8
+usr/share/man/man8/dnssec-signzone.8
+usr/share/man/man8/dnssec-verify.8
+usr/share/man/man8/named-checkconf.8
+usr/share/man/man8/named-checkzone.8
+usr/share/man/man8/named-compilezone.8
+usr/share/man/man8/pkcs11-destroy.8
+usr/share/man/man8/pkcs11-keygen.8
+usr/share/man/man8/pkcs11-list.8
+usr/share/man/man8/pkcs11-tokens.8
+usr/share/man/man8/rndc-confgen.8
+usr/share/man/man8/rndc.8
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..4a0cfd0
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,2965 @@
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u7) buster-security; urgency=high
+
+ * CVE-2021-25220: The rules for acceptance of records into the cache
+ have been tightened to prevent the possibility of poisoning if
+ forwarders send records outside the configured bailiwick.
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 14 Mar 2022 15:21:48 +0100
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u6) buster-security; urgency=high
+
+ * CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
+ effectively disables the lame server cache, as it could previously be
+ abused by an attacker to significantly degrade resolver performance.
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 25 Oct 2021 13:42:31 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u5) buster-security; urgency=high
+
+ * CVE-2021-25214: A malformed incoming IXFR transfer could trigger
+ an assertion failure in ``named``, causing it to quit abnormally.
+ * CVE-2021-25215: ``named`` crashed when a DNAME record placed in
+ the ANSWER section during DNAME chasing turned out to be the final
+ answer to a client query.
+ * CVE-2021-25216: Compile with system provided SPNEGO
+ * Ensure all resources are properly cleaned up when a call to
+ gss_accept_sec_context() fails.
+
+ -- Ondřej Surý <ondrej@debian.org> Thu, 29 Apr 2021 12:42:26 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u3) buster-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Buffer overflow in GSSAPI security policy negotiation (CVE-2020-8625)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Mon, 15 Feb 2021 08:51:28 +0100
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u2) buster-security; urgency=high
+
+ [ Salvatore Bonaccorso ]
+ * [CVE-2020-8622] Properly handle malformed truncated responses to TSIG
+ queries
+ * [CVE-2020-8623] Fix crash in pk11_numbits() with crafted packet when
+ native-pkcs11 is used
+ * Wait more than 1 second for NSEC3 chain changes
+ * [CVE-2020-8624] Fix processing of "update-policy" rules of type
+ "subdomain" (Closes: #966497)
+
+ [ Ondřej Surý ]
+ * [CVE-2020-8619]: It was possible to trigger a INSIST when a zone with
+ interior (non-leaf) wildcard label
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Tue, 25 Aug 2020 10:10:23 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1+deb10u1) buster-security; urgency=high
+
+ * [CVE-2019-6477]: TCP-pipelined queries can bypass tcp-clients limit.
+ (Closes: #945171)
+ * [CVE-2020-8616]: Fix NXNSATTACK amplification attack on BIND 9
+ * [CVE-2020-8617]: Fix assertion failure in TSIG processing code
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 18 May 2020 10:02:41 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5.1) unstable; urgency=high
+
+ * Non-maintainer upload.
+ * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
+ (Closes: #930746)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Fri, 21 Jun 2019 11:24:31 +0200
+
+bind9 (1:9.11.5.P4+dfsg-5) unstable; urgency=medium
+
+ * AppArmor: Allow /var/tmp/krb5_* (owner-only) for Samba AD DLZ.
+ Thanks to Steven Monai (Closes: 928398)
+
+ -- Bernhard Schmidt <berni@debian.org> Fri, 03 May 2019 19:44:57 +0200
+
+bind9 (1:9.11.5.P4+dfsg-4) unstable; urgency=medium
+
+ [ Bernhard Schmidt ]
+ * AppArmor: Also add /var/lib/samba/bind-dns/dns/** (Closes: #927827)
+
+ [ Ondřej Surý ]
+ * [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective
+ (Closes: #927932)
+ * Update symbols file for new symbol in libisc
+ * Enable EDDSA again, but disable broken Ed448 support (Closes: #927962)
+
+ -- Ondřej Surý <ondrej@debian.org> Fri, 26 Apr 2019 08:33:13 +0000
+
+bind9 (1:9.11.5.P4+dfsg-3) unstable; urgency=medium
+
+ * More fixes to the AppArmor policy for Samba AD DLZ
+ - allow access to /dev/urandom
+ - allow locking for dns.keytab
+ - fix path to smb.conf
+
+ -- Bernhard Schmidt <berni@debian.org> Mon, 22 Apr 2019 22:31:06 +0200
+
+bind9 (1:9.11.5.P4+dfsg-2) unstable; urgency=medium
+
+ [ Ondřej Surý ]
+ * Update d/gbp.conf for Debian Buster
+
+ [ Bernhard Schmidt ]
+ * Cherry-Pick upstream commit to prevent dnssec-keymgr from immediately
+ expiring and deleting old DNSSEC keys when being run for the first
+ time (Closes: #923984)
+ * Update AppArmor policy for Samba AD DLZ
+ - Add changed default location for named.conf
+ - Allow read/mmap on some Samba libraries
+ Thanks to Steven Monai (Closes: #920530)
+
+ [ Andreas Beckmann ]
+ * bind9.preinst: cope with ancient conffile named.conf.options
+ (Closes: #905177)
+
+ -- Bernhard Schmidt <berni@debian.org> Tue, 02 Apr 2019 21:12:50 +0200
+
+bind9 (1:9.11.5.P4+dfsg-1) unstable; urgency=high
+
+ [ Bernhard Schmidt ]
+ * New upstream version 9.11.5.P4+dfsg
+ - CVE-2018-5744: A specially crafted packet can cause named to leak memory
+ - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over
+ to an unsupported key algorithm when using managed-keys
+ - CVE-2019-6465: Controls for zone transfers might not be properly applied
+ to Dynamically Loadable Zones (DLZs) if the zones are writable.
+ * d/watch: Do not use beta or RC versions
+ * d/libdns1104.symbols: fix symbols-file-contains-debian-revision for dnstap
+ symbols
+
+ [ Ondřej Surý ]
+ * Add new upstream GPG signing-key
+
+ -- Bernhard Schmidt <berni@debian.org> Fri, 22 Feb 2019 17:54:10 +0100
+
+bind9 (1:9.11.5.P1+dfsg-2) unstable; urgency=medium
+
+ [ Dominik George ]
+ * Support dyndb modules with apparmor. (Closes: #900879)
+
+ [ Bernhard Schmidt ]
+ * apparmor-policy: permit locking of the allow-new-zones database
+ (Closes: #922065)
+ * apparmor-policy: allow access to Samba DLZ files (Closes: #920530)
+
+ -- Bernhard Schmidt <berni@debian.org> Tue, 12 Feb 2019 00:34:21 +0100
+
+bind9 (1:9.11.5.P1+dfsg-1) unstable; urgency=medium
+
+ * New upstream version 9.11.5.P1+dfsg
+
+ -- Ondřej Surý <ondrej@debian.org> Tue, 18 Dec 2018 13:59:25 +0000
+
+bind9 (1:9.11.5+dfsg-1) unstable; urgency=medium
+
+ * Use team+dns@tracker.debian.org as Maintainer address
+ * New upstream version 9.11.5+dfsg
+ * Add EXTENSIONS= to version file programmatically, not with the patch
+ * Rebase patches for BIND 9.11.5
+ * Adjust package names for new SONAMEs
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 22 Oct 2018 10:30:28 +0000
+
+bind9 (1:9.11.4.P2+dfsg-3) unstable; urgency=medium
+
+ * Also avoid OpenSSL 1.1.1 in udebs.
+ Thanks to KiBi for the hint
+ * autopkgtest: Make an external query and check for DNSSEC
+
+ -- Bernhard Schmidt <berni@debian.org> Wed, 26 Sep 2018 11:21:35 +0200
+
+bind9 (1:9.11.4.P2+dfsg-2) unstable; urgency=medium
+
+ * Temporarily disable EDDSA to relax OpenSSL version requirement
+
+ -- Bernhard Schmidt <berni@debian.org> Mon, 24 Sep 2018 11:08:15 +0200
+
+bind9 (1:9.11.4.P2+dfsg-1) unstable; urgency=medium
+
+ [ Bernhard Schmidt ]
+ * Add a very simple autopkgtest (dig @127.0.0.1)
+
+ [ Ondřej Surý ]
+ * New upstream version 9.11.4.P2+dfsg
+ * Rebase patches for BIND 9.11.4-P2
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 10 Sep 2018 08:36:06 +0000
+
+bind9 (1:9.11.4.P1+dfsg-1) unstable; urgency=medium
+
+ [ Timo Aaltonen ]
+ * skip-rtld-deepbind-for-dyndb.diff: Add a patch to fix named-pkcs11
+ crashing on startup. (LP: #1769440)
+
+ [ Bernhard Schmidt ]
+ * Add gbp.conf for pristine-tar usage
+ * d/watch: Properly deal with -P patch releases
+
+ [ Ondřej Surý ]
+ * Don't fail to start if /etc/default/bind9 doesn't exist
+ * New upstream version 9.11.4.P1+dfsg
+ * Rebase patches for BIND 9.11.4-P1
+ * Add new dst__openssleddsa_init optional symbol (it depends on OpenSSL version) (Closes: #897643)
+ * Put aside named.conf.option from stretch when upgrading (Closes: #905177)
+
+ -- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2018 09:53:27 +0000
+
+bind9 (1:9.11.4+dfsg-4) unstable; urgency=medium
+
+ * Brown-paper-bag release :-(
+ * Fix missing colon in AppArmor profile (Closes: #904983)
+
+ -- Bernhard Schmidt <berni@debian.org> Mon, 30 Jul 2018 16:28:21 +0200
+
+bind9 (1:9.11.4+dfsg-3) unstable; urgency=medium
+
+ * Enable IDN support for dig+host using libidn2 (Closes: #459010)
+ * Use root.hints from dns-root-data (Closes: #888491)
+
+ -- Bernhard Schmidt <berni@debian.org> Sun, 29 Jul 2018 23:26:09 +0200
+
+bind9 (1:9.11.4+dfsg-2) unstable; urgency=medium
+
+ * Enable dnstap support (Courtesy of Richard James Salts) (Closes: #890483)
+ * Remove auth-nxdomain no; from named.conf.options (Closes: #896889)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 16 Jul 2018 18:49:50 +0000
+
+bind9 (1:9.11.4+dfsg-1) unstable; urgency=medium
+
+ [ Bernhard Schmidt ]
+ * Use systemd Type=forking to signal daemon init.
+ Thanks to Elie Roudninski (Closes: #900788)
+
+ [ Ondřej Surý ]
+ * New upstream version 9.11.4+dfsg
+ * Rebase patches for 9.11.4+dfsg release
+ * Bump libdns SONAME to libdns.so.1102
+ * Add a SONAME version check early in a build process
+ * Use debian/getapi to dynamically pick soversions for dh_makeshlibs
+ * Update the symbols in libdns and libisccfg packages
+
+ -- Ondřej Surý <ondrej@debian.org> Sat, 14 Jul 2018 12:27:56 +0000
+
+bind9 (1:9.11.3+dfsg-2) unstable; urgency=medium
+
+ * [CVE-2018-5738]: Add upstream fix to close the default open recursion
+ (Closes: #901483)
+ * Change the maintainer address (Closes: #899959)
+
+ -- Ondřej Surý <ondrej@debian.org> Thu, 14 Jun 2018 13:01:47 +0000
+
+bind9 (1:9.11.3+dfsg-1) unstable; urgency=medium
+
+ [ Bernhard Schmidt ]
+ * New upstream version 9.11.3+dfsg
+ (Closes: #867570, #888463)
+ - Refresh patches
+ - Drop stdatomic.h patches applied upstream
+ * Follow SONAME bump of libdns
+ * Follow SONAME bump of libisc
+ * Add missing symbols for libisccfg160
+ * Add python3-distutils Build-Dependency
+ * Drop Priority: standard for library packages
+ * Fix apparmor profile name (Closes: #893005)
+ Thanks to Andreas Hasenack
+ * Update bind9-host description (Closes: #729561)
+ * Add flags=(attach_disconnected) to AppArmor profile to prepare
+ to use more systemd hardening options, see #863841
+ * Add myself to Uploaders
+
+ [ Ondřej Surý ]
+ * Update Vcs-* links to salsa.d.o
+
+ -- Bernhard Schmidt <berni@debian.org> Fri, 23 Mar 2018 00:09:58 +0100
+
+bind9 (1:9.11.2.P1-1) unstable; urgency=medium
+
+ * New upstream version 9.11.2-P1
+ * Refresh patches for new release
+
+ -- Ondřej Surý <ondrej@debian.org> Wed, 17 Jan 2018 06:06:04 +0000
+
+bind9 (1:9.11.2+dfsg-10) unstable; urgency=medium
+
+ * Disable lmdb usage in export version of libraries (Closes: #887407)
+
+ -- Ondřej Surý <ondrej@debian.org> Tue, 16 Jan 2018 05:59:31 +0000
+
+bind9 (1:9.11.2+dfsg-9) unstable; urgency=medium
+
+ * Fix various mistakes in bind9 conffiles (Closes: #887398)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 23:12:43 +0000
+
+bind9 (1:9.11.2+dfsg-8) unstable; urgency=medium
+
+ * Pull more stdatomic patch to fix builds on 32-bit architectures
+ * Remove extra native pkcs11 patch (it has been replaced by sed rules)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 21:02:30 +0000
+
+bind9 (1:9.11.2+dfsg-7) unstable; urgency=medium
+
+ * Pull upstream patch to use C11 stdatomic where available (Closes: #778720)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 15:59:48 +0000
+
+bind9 (1:9.11.2+dfsg-6) unstable; urgency=medium
+
+ * Add named-nzd2nzf to bind9 package
+ * Simplify installation rules
+ * Enable lmdb (to actually build named-nzd2nzf)
+ * Move delv from bind9 to dnsutils package (Closes: #887326)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 14:19:31 +0000
+
+bind9 (1:9.11.2+dfsg-5) unstable; urgency=medium
+
+ * Remove duplicate invoke-rc.d start invocation (Closes: #883575)
+ * Don't fail in postrm when /var/lib/bind cannot be removed (Closes: #882999)
+ * Use dh-apparmor for profile management
+ * apparmor-profile: allow changing thread name (Closes: #883228)
+ * Bump debhelper compat level to 10
+ * Bump Standards-Version to 4.1.2, no changes necessary
+
+ -- Bernhard Schmidt <berni@debian.org> Sun, 10 Dec 2017 20:23:12 +0100
+
+bind9 (1:9.11.2+dfsg-4) unstable; urgency=medium
+
+ * Team upload.
+ * Fix symlinks in libbind-export-dev to point to /lib (Closes: #883536)
+
+ -- Bernhard Schmidt <berni@debian.org> Tue, 05 Dec 2017 00:09:25 +0100
+
+bind9 (1:9.11.2+dfsg-3) unstable; urgency=medium
+
+ * Team upload.
+ * Only install files into bind9:any on arch-any builds (Closes: #883448)
+ * Adjust dependencies for udeb packages (Closes: #883449)
+
+ -- Bernhard Schmidt <berni@debian.org> Mon, 04 Dec 2017 10:56:58 +0100
+
+bind9 (1:9.11.2+dfsg-2) unstable; urgency=medium
+
+ * Team upload.
+ * Workaround for FTBFS on binary-any builds (Closes: #883159)
+
+ -- Bernhard Schmidt <berni@debian.org> Sun, 03 Dec 2017 20:36:32 +0100
+
+bind9 (1:9.11.2+dfsg-1) unstable; urgency=low
+
+ * d/watch: Bump the BIND version to 9.11.x
+ * Remove 'order random_1' patch, it was a horrible deviation from standards
+ * Modernize d/rules using debhelper
+ * New upstream version 9.11.2+dfsg
+ * Delete dyndb patch, as dyndb is now included in upstream sources
+ * Rebase patches for new upstream release.
+ * Add python3-ply to Build-Depends
+ * Restore the native pkcs11 patch
+ * Fix the Debian version parsing
+ * Remove lwresd as it has been deprecated by upstream anyway
+ * Add new tools: mdig to dnsutils and dnssec-keymgr to bind9utils
+ * Update the SONAMEs of BIND libraries
+ * Fix python3 packaging errors
+ * Bump the standards version to 4.1.1.1 (no change)
+ * Add support for dh_missing
+
+ -- Ondřej Surý <ondrej@debian.org> Tue, 28 Nov 2017 22:59:30 +0000
+
+bind9 (1:9.10.6+dfsg-5) unstable; urgency=medium
+
+ [ Chris Lamb ]
+ * Make the build reproducible (Closes: #828012)
+
+ [ Micah Cowan ]
+ * Try not to be fragile to varying value of LIBS make var. (Closes: #833307)
+
+ [ Ondřej Surý ]
+ * Update the softhsm2.so non-MA path (Closes: #860722)
+ * Enable JSON output in the statistics channel (Closes: #860722)
+ * Merge NMUs' changelogs (Closes: #880077)
+ * Use /dev/urandom to avoid blocking in the server process. (Closes: #854243)
+
+ -- Ondřej Surý <ondrej@debian.org> Thu, 02 Nov 2017 10:31:01 +0000
+
+bind9 (1:9.10.6+dfsg-4) unstable; urgency=medium
+
+ [ Michael Biebl ]
+ * Improve bind9-resolvconf.service (Closes: #826353)
+
+ [ Ondřej Surý ]
+ * Add insserv.conf.d configuration (Closes: #650538)
+ * Change bind9-resolvconf.server to Type=oneshot + RemainAfterExit=yes (Closes: #832040)
+ * Only add static and development symlinks for *-export.{a,so} libraries (Closes: #857522)
+ * Update Vcs-* fields to standard variants
+ * Rebuild with newer debhelper (Closes: #879542)
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 23 Oct 2017 07:02:50 +0000
+
+bind9 (1:9.10.6+dfsg-3) unstable; urgency=medium
+
+ * Make lwresd hard depend on bind9 package (Closes: #879127)
+
+ -- Ondřej Surý <ondrej@debian.org> Sun, 22 Oct 2017 11:08:20 +0000
+
+bind9 (1:9.10.6+dfsg-2) unstable; urgency=medium
+
+ [ Timo Aaltonen ]
+ * d/copyright: Add Bv9ARM.pdf to Files-Excluded.
+
+ [ Ondřej Surý ]
+ * Replace lwresd with symlink instead of hard copy (Closes: #868538)
+ * Fix the symbols file to compensate for missing bsdcompat symbol on kFreeBSD (Closes: #879017)
+ * Re-enable threading support on kFreeBSD (Closes: #879018)
+ * Drop Multi-Arch: same header from libbind-dev (Closes: #874232)
+ * Remove transitional host package (Closes: #645437, #878228)
+
+ -- Ondřej Surý <ondrej@debian.org> Thu, 19 Oct 2017 09:35:03 +0000
+
+bind9 (1:9.10.6+dfsg-1) unstable; urgency=medium
+
+ * New upstream version 9.10.6+dfsg
+ * Use OpenSSL 1.1.0 for crypto
+ * Add support for downloading upstream sources using d/watch
+ + Make d/copyright machine readable for Files-Excluded: support
+ + Update Files-Exclude: * to remove obsolete software dropped in
+ contrib/, but not really used
+ * Add initial README.source
+ * Limit the d/watch to 9.10.x (aka stable) for now
+ * Update patches for BIND 9.10.6 release
+ * Update PKCS11 patch
+ * Move under pkg-dns umbrella
+ * Reformat files in debian/ with wrap-and-sort -a for better maintainability
+ * Update the d/export.diff for BIND 9.10.6
+ * Remove FAQ from d/bind9.docs
+ * Bump SONAME versions for BIND libraries
+ * Add symbols files for libraries and enable strict symbol checks
+ * arpaname and named-rrchecker has been moved to /usr/bin
+ * Install required python library into bind9utils to accompany
+ dnssec-checkds and dnssec-coverage
+ * Change Vcs-* to pkg-dns/bind9
+ * Also exclude idnkit from upstream tarball
+ * Finish the debian/copyright update into machine readable format
+ * Enable Multi-Arch on libirs-export189
+ * Cleanup maintainer scripts
+ * Add lintian override for false positive on full-path command
+ * Remove unnecessary complexity when generating ${Description} to d/control
+
+ -- Ondřej Surý <ondrej@debian.org> Fri, 06 Oct 2017 06:18:21 +0000
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u3) stretch; urgency=medium
+
+ [ Bernhard Schmidt ]
+ * Import upcoming DNSSEC KSK-2017 from 9.10.5
+
+ [ Ondřej Surý ]
+ * Non-maintainer upload.
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 28 Aug 2017 09:36:28 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u2) stretch-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * debian/patches:
+ - CVE-2017-3142_regression added, fix a regression introduced in with the
+ correction for CVE-2017-3142.
+
+ -- Yves-Alexis Perez <corsac@debian.org> Sat, 22 Jul 2017 21:24:54 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3+deb9u1) stretch-security; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * debian/patches:
+ - debian/patches/CVE-2017-3142+CVE-2017-3143 added, fix TSIG bypasses
+ CVE-2017-3142: error in TSIG authentication can permit unauthorized zone
+ transfers. An attacker may be able to circumvent TSIG authentication of
+ AXFR and Notify requests.
+ CVE-2017-3143: error in TSIG authentication can permit unauthorized
+ dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0)
+ signature for a dynamic update.
+
+ -- Yves-Alexis Perez <corsac@debian.org> Fri, 30 Jun 2017 16:20:29 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high
+
+ * Non-maintainer upload.
+ * Dns64 with "break-dnssec yes;" can result in a assertion failure
+ (CVE-2017-3136) (Closes: #860224)
+ * Some chaining (CNAME or DNAME) responses to upstream queries could trigger
+ assertion failures (CVE-2017-3137) (Closes: #860225)
+ * 'rndc ""' could trigger a assertion failure in named (CVE-2017-3138)
+ (Closes: #860226)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Sun, 07 May 2017 15:22:46 +0200
+
+bind9 (1:9.10.3.dfsg.P4-12.2) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Replace 32_mips_atomic.diff with a version that uses C11 atomics. Fixes
+ hangs and crashes on MIPS. (Closes: #778720)
+
+ -- James Cowgill <jcowgill@debian.org> Tue, 18 Apr 2017 16:42:50 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Use /dev/urandom to avoid blocking in the server process.
+ (closes: #854243)
+
+ -- Bastian Blank <waldi@debian.org> Fri, 17 Mar 2017 19:07:16 +0100
+
+bind9 (1:9.10.3.dfsg.P4-12) unstable; urgency=high
+
+ * Merge and accept the non-maintainer upload.
+ * Fix regression caused by the fix for CVE-2016-8864 (closes: #855540).
+ * Fix CVE-2017-3135: a malicously crafted query can cause named to crash if
+ both DNS64 and RPZ are being used (closes: #855520).
+
+ -- Michael Gilbert <mgilbert@debian.org> Sun, 19 Feb 2017 22:39:32 +0000
+
+bind9 (1:9.10.3.dfsg.P4-11.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Disable GOST to prevent ENGINE_by_id failed (crypto failure) in chroot.
+ Patch by Marc Haber <mh+debian-bugs@zugschlus.de> (Closes: #820974).
+
+ -- Arturo Borrero Gonzalez <arturo@debian.org> Tue, 07 Feb 2017 10:42:00 +0100
+
+bind9 (1:9.10.3.dfsg.P4-11) unstable; urgency=medium
+
+ * Fix some lintian warnings.
+ * Add lsb-base dependency to lwresd (closes: #848519).
+ * Fix CVE-2016-2775: crash in lwresd due to a long query name
+ (closes: #831796).
+ * Fix CVE-2016-2776: maliciously crafted query can cause named to crash
+ (closes: #839010).
+ * Fix CVE-2016-8864: incorrect handling of a DNAME record can cause
+ named to crash (closes: #842858).
+ * Fix CVE-2016-9131: maliciously crafted response to an ANY query can
+ cause named to crash (closes: #851065).
+ * Fix CVE-2016-9147: query with contradictory DNSSEC information can
+ cause named to crash (closes: #851063).
+ * Fix CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS)
+ record can cause named to crash (closes: #851062).
+ * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now
+ (closes: #828082).
+
+ [ LaMont Jones ]
+ * Update VCS fields in control.
+ * -DDIG_SIGCHASE got dropped by the change in hardening.
+
+ [ Stefan Bader ]
+ * Use the defaults file in systemd.
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Jan 2017 04:03:28 +0000
+
+bind9 (1:9.10.3.dfsg.P4-10.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Add explicit ordering for nss-lookup.target in bind9.service,
+ lwresd.service. Patches by Michael Biebl <biebl@debian.org>.
+ (Closes: #826243, #826245)
+
+ -- Christian Hofstaedtler <zeha@debian.org> Sat, 02 Jul 2016 14:32:50 +0200
+
+bind9 (1:9.10.3.dfsg.P4-10) unstable; urgency=medium
+
+ * Use python3
+
+ -- LaMont Jones <lamont@debian.org> Tue, 03 May 2016 17:39:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-9) unstable; urgency=medium
+
+ * Fix bad patch from when we switched to quilt. Closes: #820847 LP:
+ #1552801, #1549788, #1553460
+ * freshen patch to remove fuzz.
+
+ -- LaMont Jones <lamont@debian.org> Tue, 26 Apr 2016 15:17:58 -0600
+
+bind9 (1:9.10.3.dfsg.P4-8) unstable; urgency=medium
+
+ [Timo Aaltonen]
+
+ * Fix bind9-resolvconf.service installation.
+ * Add support for native pkcs11. LP: #1565392
+
+ [Samuel Thibault]
+
+ * Detect in6_pktinfo on hurd-i386. Closes: #820404
+
+ -- LaMont Jones <lamont@debian.org> Wed, 13 Apr 2016 13:19:37 -0600
+
+bind9 (1:9.10.3.dfsg.P4-7) unstable; urgency=medium
+
+ * Fix libisccc-export dependencies. Closes: #820043
+
+ -- Michael Gilbert <mgilbert@debian.org> Tue, 05 Apr 2016 02:53:22 +0000
+
+bind9 (1:9.10.3.dfsg.P4-6) unstable; urgency=medium
+
+ * Upload 9.10 to unstable. Closes: #781739
+ * Add -DNO_VERSION_DATE to CFLAGS. Closes: #783885
+
+ -- Michael Gilbert <mgilbert@debian.org> Mon, 04 Apr 2016 00:39:57 +0000
+
+bind9 (1:9.10.3.dfsg.P4-5) experimental; urgency=medium
+
+ * Drop dead code in bind9.preinst.
+ * move from /var/run to /run for policy.
+
+ -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2016 19:52:04 -0600
+
+bind9 (1:9.10.3.dfsg.P4-4) experimental; urgency=medium
+
+ * use multiarch path in udebs
+ * Updated root cache file. Closes: #806954
+
+ -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 20:50:49 -0600
+
+bind9 (1:9.10.3.dfsg.P4-3) experimental; urgency=medium
+
+ * Fix vcs links
+ * build in debian/tmp, use bind9.install
+
+ -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 14:46:30 -0600
+
+bind9 (1:9.10.3.dfsg.P4-2) experimental; urgency=medium
+
+ * updated precise_time patch
+ * add RT#s to some patches
+ * Merge ubuntu changes
+ * Fix debian/rules to properly remove files from bind9 that are delivered
+ elsewhere. LP: #1559090
+
+ -- LaMont Jones <lamont@canonical.com> Fri, 18 Mar 2016 10:58:07 -0600
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu2) xenial; urgency=medium
+
+ * Bump debhelper to v9 to use dh-exec.
+ * libbind-export-dev: Fix the libbind.so symlink.
+ * Move static libs to the multiarch libdir again.
+
+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 13:30:03 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1ubuntu1) xenial; urgency=medium
+
+ * Fix udeb dependencies.
+
+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 12:47:02 +0100
+
+bind9 (1:9.10.3.dfsg.P4-1) experimental; urgency=medium
+
+ [ ISC ]
+ * New upstream: 9.10.3-P3
+ - Specific APL data could trigger a INSIST. (CVE-2015-8704) [RT #41396]
+ - render_ecs errors were mishandled when printing out a OPT record
+ resulting in a assertion failure. (CVE-2015-8705) [RT #41397]
+ - Fixed a regression in resolver.c:possibly_mark() which caused
+ known-bogus servers to be queried anyway. [RT #41321]
+ * New upstream: 9.10.3-P4
+ - Malformed control messages can trigger assertions in named and rndc.
+ (CVE-2016-1285) [RT #41666]
+ - Fix resolver assertion failure due to improper DNAME handling when
+ parsing fetch reply messages. (CVE-2016-1286) [RT #41753]
+ - Duplicate EDNS COOKIE options in a response could trigger an
+ assertion failure. (CVE-2016-2088) [RT #41809]
+
+ [LaMont Jones]
+
+ * Do not build -export libs for libbind90 and liblwres. Relates in part
+ to, and is the last fix to LP: #1551351
+ * update patches for 9.10.3.dfsg.P4. Drop 50_CVE_2015-8704.diff
+
+ [ Stefan Bader ]
+
+ * Do not modify signal handlers for external apps. LP: #1556175
+
+ -- LaMont Jones <lamont@debian.org> Thu, 17 Mar 2016 14:53:36 -0600
+
+bind9 (1:9.10.3.dfsg.P2-7) experimental; urgency=medium
+
+ * Fix my bad merge of autoreconf workaround.
+ * Re-implement -export libraries. LP: #1556175
+ * Deliver libisccc-export library.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 16 Mar 2016 15:14:48 -0600
+
+bind9 (1:9.10.3.dfsg.P2-5) experimental; urgency=medium
+
+ [Timo Aaltonen]
+
+ * Sync 30_dynamic_db.diff from Fedora.
+ * rules: Backup some files which dh_autoreconf_clean would remove, restore
+ on clean.
+
+ [Jamie Strandboge]
+
+ * apparmor: use @{PROC} instead of /proc, allow read on
+ sys.net.ipv4.ip_local_port_range. LP: #1552441
+
+ [LaMont Jones]
+
+ * Return nanosecond-precise time for files, so that we more-correctly know
+ when we can skip loading a zonefile. (Bug introduced 9.9.3b2)
+
+ -- LaMont Jones <lamont@debian.org> Thu, 03 Mar 2016 18:17:06 -0700
+
+bind9 (1:9.10.3.dfsg.P2-4) experimental; urgency=medium
+
+ [Matthias Klose]
+
+ * Fix .so symlinks.
+ * libbind-dev: Depend on libirs141.
+ * For the udeb's, use a separate build with a reduced feature set, drop the
+ name difference, and do both builds in a separate directory.
+
+ [Filip Pytloun]
+
+ * Add apparmor rules needed by freeipa-server. Closes: #814314
+
+ [LaMont Jones]
+
+ * Do not deliver libraries (left in /lib) as part of bind9. LP: #1547052
+ * clean up library path for libirs.
+
+ -- LaMont Jones <lamont@debian.org> Fri, 19 Feb 2016 14:26:08 -0700
+
+bind9 (1:9.10.3.dfsg.P2-3ubuntu3) xenial; urgency=medium
+
+ * For the udeb's, use a separate build with a reduced feature set.
+ * Don't call the reduced build "export"; it was used by isc-dhcp as well.
+ * Do both builds in a separate builddir.
+
+ -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu2) xenial; urgency=medium
+
+ * libbind-dev: Depend on libirs141.
+ * Ship libirs.{a,so} in libbind-dev.
+ * Remove obsolete debian/*.dirs files.
+
+ -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3~ubuntu1) xenial; urgency=medium
+
+ * Fix .so symlinks.
+
+ -- Matthias Klose <doko@ubuntu.com> Thu, 18 Feb 2016 13:55:19 +0100
+
+bind9 (1:9.10.3.dfsg.P2-3) experimental; urgency=medium
+
+ [Marc Deslauriers]
+
+ * SECURITY UPDATE: denial of service via string formatting operations.
+ CVE-2015-8704
+
+ [Matthias Klose]
+
+ * Add multiarch support. Closes: #802584.
+ * Standards cleanup.
+
+ [LaMont Jones]
+
+ * Properly finish converting to 3.0 (quilt) format.
+ * Drop geoip_acl patch temporarily while we evaluate the upstream geoip
+ changes.
+ * Prechroot init appears to have been taken upstream.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2016 10:34:24 -0700
+
+bind9 (1:9.10.3.dfsg.P2-1) experimental; urgency=medium
+
+ * New upstream, no need for export packages with 9.10
+ * Fix sonames
+ * Update how we do hardening.
+ * Add Robie Basak as an uploader
+ * Migrate quilt patches from 9.9.5 branch, and incorporate Michael Gilbert's
+ changes.
+
+ -- LaMont Jones <lamont@debian.org> Thu, 31 Dec 2015 18:41:31 -0700
+
+bind9 (1:9.9.5.dfsg-12.1) unstable; urgency=high
+
+ * Non-maintainer upload.
+ * Add patch to fix CVE-2015-8000.
+ CVE-2015-8000: Insufficient testing when parsing a message allowed
+ records with an incorrect class to be accepted, triggering a REQUIRE
+ failure when those records were subsequently cached. (Closes: #808081)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Wed, 16 Dec 2015 15:01:39 +0100
+
+bind9 (1:9.9.5.dfsg-12) unstable; urgency=high
+
+ * Fix CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash.
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 03 Sep 2015 01:16:32 +0000
+
+bind9 (1:9.9.5.dfsg-11) unstable; urgency=high
+
+ * Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit
+ (closes: #793903).
+
+ -- Michael Gilbert <mgilbert@debian.org> Wed, 29 Jul 2015 23:46:48 +0000
+
+bind9 (1:9.9.5.dfsg-10) unstable; urgency=high
+
+ * Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can
+ cause the resolver to crash (closes: #791715).
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 09 Jul 2015 00:43:38 +0000
+
+bind9 (1:9.9.5.dfsg-9) unstable; urgency=high
+
+ * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only
+ affecting setups using DNSSEC (closes: #778733).
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Feb 2015 03:42:21 +0000
+
+bind9 (1:9.9.5.dfsg-8) unstable; urgency=medium
+
+ * Launch rndc command in the background in networking scripts to avoid a
+ hang in named from bringing down the entire network (closes: #760555).
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 01 Jan 2015 17:51:52 +0000
+
+bind9 (1:9.9.5.dfsg-7) unstable; urgency=medium
+
+ * Fix CVE-2014-8500: limit recursion in order to avoid memory consuption
+ issues that can lead to denial-of-service (closes: #772610).
+
+ -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Dec 2014 05:05:48 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+ * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium
+
+ * Include dlz_dlopen.h in libbind-dev (closes: #769117).
+
+ -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000
+
+bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium
+
+ * Avoid libnsl dependency on non-linux architectures. Closes: #766430
+ * Install export libraries to /lib instead of /usr/lib. Closes: #766544
+ * Add myself to the maintainer team with approval from LaMont and Bdale.
+
+ -- Michael Gilbert <mgilbert@debian.org> Thu, 30 Oct 2014 02:42:17 +0000
+
+bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Mark critical section as not parallel in the makefile. Closes: #762766
+
+ -- Michael Gilbert <mgilbert@debian.org> Mon, 13 Oct 2014 04:37:55 +0000
+
+bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Fix intermittent parallel build failure. Closes: #762766
+ * Set -fno-delete-null-pointer-checks. Closes: #750760
+ * Use separate packages for the udebs. Closes: #762762
+ * Don't install configuration files to /usr. Closes: #762948
+
+ -- Michael Gilbert <mgilbert@debian.org> Mon, 06 Oct 2014 01:23:57 +0000
+
+bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Add support for hurd. Closes: #746540
+ * Provide shared libraries for isc-dhcp. Closes: #656150
+
+ -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Sep 2014 00:58:06 +0000
+
+bind9 (1:9.9.5.dfsg-4) unstable; urgency=low
+
+ [Julien Cristau]
+
+ * FTBFS on kfreebsd. Closes: #741285
+
+ [LaMont Jones]
+
+ * revert aclocal.m4 expansion from earlier merge
+
+ -- LaMont Jones <lamont@debian.org> Tue, 29 Apr 2014 14:48:50 -0600
+
+bind9 (1:9.9.5.dfsg-3) unstable; urgency=low
+
+ * Re-enable rrl (now a configure option). Closes: #741059 LP: #1288823
+
+ -- LaMont Jones <lamont@debian.org> Mon, 24 Mar 2014 06:55:55 -0600
+
+bind9 (1:9.9.5.dfsg-2) unstable; urgency=low
+
+ * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3
+ * move dnssec-coverage to bind9utils. Closes: #739994
+ * dnssec-{checkds,verify} manpages in wrong package. Closes: #739995
+
+ -- LaMont Jones <lamont@debian.org> Wed, 26 Feb 2014 09:30:31 -0700
+
+bind9 (1:9.9.5.dfsg-1) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * New upstream version: 9.9.5 Closes: #735190
+
+ [Martin Nagy]
+
+ * dynamic loading of database backends. See:
+ http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch.
+ Closes: #722669
+
+ [LaMont Jones]
+
+ * fix sonames
+ * merge ubuntu changes
+ * Deliver dns/rrl.h. Closes: #724844
+ * rules tweak to make backports to pre-dh-systemd releases easier
+
+ -- LaMont Jones <lamont@debian.org> Tue, 11 Feb 2014 09:16:05 -0700
+
+bind9 (1:9.9.4.dfsg-0.3) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * Upstream version 9.9.4
+
+ [LaMont Jones]
+
+ * fix sonames
+ * merge ubuntu change
+ * Deliver dns/rrl.h. Closes: #724844
+
+ -- LaMont Jones <lamont@debian.org> Wed, 06 Nov 2013 13:27:37 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu3) trusty; urgency=low
+
+ * SECURITY UPDATE: denial of service when processing NSEC3-signed zone
+ queries
+ - debian/patches/CVE-2014-0591.patch: don't call memcpy with
+ overlapping ranges in bin/named/query.c.
+ - patch backported from 9.9.4-P2.
+ - CVE-2014-0591
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 10 Jan 2014 09:36:55 -0500
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu2) trusty; urgency=medium
+
+ * Use dh-autoreconf to update libtool and configure for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com> Wed, 18 Dec 2013 04:42:22 -0700
+
+bind9 (1:9.9.3.dfsg.P2-4ubuntu1) saucy; urgency=low
+
+ * Use dh_autotools-dev to update config.{sub,guess} for new ports.
+
+ -- Adam Conrad <adconrad@ubuntu.com> Mon, 07 Oct 2013 23:09:45 -0600
+
+bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low
+
+ [Peter Marschall]
+
+ * If rndc.conf exists, skip creation of rndc.key. Closes: #620394
+
+ [Al Tarakanoff]
+
+ * properly quote check of pid in bind9 init.d. LP: #1092243
+
+ [LaMont Jones]
+
+ * include distro and package version in version string
+ * apparmor: allow GeoIP data file access. LP: #834901
+ * enable filter-aaaa. Closes: #701704 LP: #1115168
+
+ -- LaMont Jones <lamont@debian.org> Thu, 29 Aug 2013 16:22:29 -0600
+
+bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low
+
+ [Michael Stapelberg]
+
+ * add systemd service file. Closes: #718212
+
+ [LaMont Jones]
+
+ * deliver more dnssec-* tools in bind9utils. Closes: #713026
+ * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025
+ * deliver rrl.h and stat.h Closes: #692483, #720813
+
+ -- LaMont Jones <lamont@debian.org> Tue, 27 Aug 2013 10:06:37 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2build1) saucy; urgency=low
+
+ [Marc Deslauriers]
+
+ * 9.9.2.dfsg.P1-2ubuntu1: fixed in 9.9.3b1
+ * 9.9.2.dfsg.P1-2ubuntu3: fixed in 9.9.3-P2
+
+ [Robie Basak]
+
+ * 9.9.2.dfsg.P1-2ubuntu2: fixed in 9.9.3b1
+
+ [LaMont Jones]
+
+ * Merge ubuntu changes, except: autoconf files are generated as part
+ of the source packagee creation, not on the build host. NAK
+ * deliver more dnssec-* tools in bind9utils. Closes: #713026
+ * support parallel=N DEB_BUILD_OPTIONS, fix -j build
+
+ [Michael Stapelberg]
+
+ * add systemd service file. Closes: #718212
+
+ -- LaMont Jones <lamont@debian.org> Thu, 22 Aug 2013 10:57:17 -0600
+
+bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low
+
+ * ack NMUs of 9.8.4
+ - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689,
+ CVE-2013-2266
+ - deliver rrl.h
+
+ [LaMont Jones]
+
+ * Use ISC's bin/tests
+ * Diff cleanup and rationalization to 9.9.3 upstream
+
+ -- LaMont Jones <lamont@debian.org> Sat, 17 Aug 2013 07:09:54 -0600
+
+bind9 (1:9.9.3.dfsg.P2-1) unstable; urgency=low
+
+
+ [Internet Software Consortium, Inc]
+
+ * 9.9.3-P2
+
+ [Ben Hutchings]
+
+ * Initialise OpenSSL before calling chroot(). Closes: #696661
+
+ [LaMont Jones]
+
+ * soname changes
+
+ [Paul Vixie]
+
+ * Reapply rpz/rrl patches from http://www.redbarn.org/dns/ratelimits
+
+ -- LaMont Jones <lamont@debian.org> Wed, 14 Aug 2013 10:38:59 -0600
+
+bind9 (1:9.9.2.dfsg.P1-3) experimental; urgency=low
+
+ [LaMont Jones]
+
+ * Merge 1:9.8.4.dfsg.P1-6
+
+ [Ben Hutchings]
+
+ * Initialise OpenSSL before calling chroot(). Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org> Mon, 04 Mar 2013 09:30:50 -0700
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu3) saucy; urgency=low
+
+ * SECURITY UPDATE: denial of service via incorrect bounds checking on
+ private type 'keydata'
+ - lib/dns/rdata/generic/keydata_65533.c: check for correct length.
+ - Patch backported from 9.9.3-P2
+ - CVE-2013-4854
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sun, 28 Jul 2013 10:13:06 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu2) raring; urgency=low
+
+ * configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475).
+ * debian/control: add Build-Depends on dh-autoreconf.
+ * debian/rules: use dh_autoreconf and dh_autoreconf_clean.
+
+ -- Robie Basak <robie.basak@canonical.com> Wed, 10 Apr 2013 16:50:28 +0000
+
+bind9 (1:9.9.2.dfsg.P1-2ubuntu1) raring; urgency=low
+
+ * SECURITY UPDATE: denial of service via regex syntax checking
+ - configure,configure.in,config.h.in: remove check for regex.h to
+ disable regex syntax checking.
+ - CVE-2013-2266
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 28 Mar 2013 15:04:57 -0400
+
+bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low
+
+ [Michael Gilbert]
+
+ * Use /var/lib/bind for state file. Closes: #689332
+
+ [LaMont Jones]
+
+ * zone transfers now involve link(), update the apparmor profile
+ * Update db.root with new IP for D.root-servers.net. Closes: #697352
+ * re-drop dlzexternal test
+ * Reduce log level for "sucessfully validated after lower casing" dnssec
+ based on mail from Mark Andrews. Closes: #697681
+ * remove /var/lib/bind/bind9-default.md5sum in postrm
+ * remove /etc/bind/named.conf.options on purge. Closes: #668801
+
+ [Sebastian Wiesinger]
+
+ * Build and deliver dnssec-checkds and dnssec-verify in bind9utils
+
+ -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 10:09:40 -0700
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * CVE-2013-4854: A specially crafted query that includes malformed rdata can
+ cause named to terminate with an assertion failure while rejecting the
+ malformed query. (Closes: #717936).
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Sat, 27 Jul 2013 10:24:07 +0200
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Install /usr/include/dns/rrl.h (closes: #699834).
+
+ -- Michael Gilbert <mgilbert@debian.org> Tue, 16 Apr 2013 01:59:05 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA
+ lookup for a record with an A record overwrite rule in a Response Policy
+ Zone (closes: #699145).
+ * Fix cve-2013-2266: issues in regular expression handling (closes: #704174).
+
+ -- Michael Gilbert <mgilbert@debian.org> Fri, 29 Mar 2013 00:47:25 +0000
+
+bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low
+
+ [Ben Hutchings]
+
+ * Initialise OpenSSL before calling chroot(). Closes: #696661
+
+ -- LaMont Jones <lamont@debian.org> Fri, 01 Mar 2013 08:23:27 -0700
+
+bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern]
+ - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch.
+
+ [Paul Vixie]
+
+ * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits.
+ Closes: #698641
+
+ -- LaMont Jones <lamont@debian.org> Wed, 30 Jan 2013 14:04:35 -0700
+
+bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high
+
+ * The rest of the dnssec validation logspam removal. Closes: #697681
+
+ -- LaMont Jones <lamont@debian.org> Mon, 21 Jan 2013 13:18:53 -0700
+
+bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low
+
+ [Marc Deslauriers]
+
+ * debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+ [LaMont Jones]
+
+ * Reduce log level for "sucessfully validated after lower casing" dnssec
+ based on mail from Mark Andrews. Closes: #697681
+ * remove /var/lib/bind/bind9-default.md5sum in postrm
+ * remove /etc/bind/named.conf.options on purge. Closes: #668801
+
+ -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 09:47:24 -0700
+
+bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low
+
+ * Named could die on specific queries with dns64 enabled.
+ [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+ CVE-2012-5688 Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:27:18 -0700
+
+bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low
+
+ [Michael Gilbert]
+
+ * Use /var/lib/bind for state file. Closes: #689332
+
+ [LaMont Jones]
+
+ * Re-enable dlopen, do not build the test that fails. Closes: #692416
+ * Update db.root with new IP for D.root-servers.net. Closes: #697352
+
+ -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2013 06:50:25 -0700
+
+bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low
+
+ * Named could die on specific queries with dns64 enabled.
+ [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
+ CVE-2012-5688 Closes: #695192
+
+ -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:22:06 -0700
+
+bind9 (1:9.9.2.dfsg-1) experimental; urgency=low
+
+ [Matthew Grant]
+
+ * Turn off dlopen as it was causing test compile failures.
+ * Add missing library .postrm files for debhelper
+
+ [LaMont Jones]
+
+ * New upstream version 9.9.2
+ * soname fixes
+
+ -- LaMont Jones <lamont@debian.org> Thu, 01 Nov 2012 08:59:57 -0600
+
+bind9 (1:9.9.1.dfsg.P1-1) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * New upstream 9.9.1-P1
+
+ -- LaMont Jones <lamont@debian.org> Wed, 13 Jun 2012 08:22:15 -0600
+
+bind9 (1:9.9.0.dfsg-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.9.0 release
+
+ [Christoph Egger]
+
+ * define _GNU_SOURCE on kfreebsd et al. Closes: #658201
+
+ [LaMont Jones]
+
+ * chmod typo in postinst. LP: #980798
+ * Correctly order debhelper bits in postrm. Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org> Mon, 23 Apr 2012 09:52:51 -0600
+
+bind9 (1:9.9.0.dfsg~rc4-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * New upstream release
+
+ [LaMont Jones]
+
+ * soname changes for new release
+
+ -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 17:51:39 -0700
+
+bind9 (1:9.8.4.dfsg-1ubuntu2) raring; urgency=low
+
+ * SECURITY UPDATE: denial of service via DNS64 and crafted query
+ - bin/named/query.c: init rdataset before cleanup.
+ - Patch backported from 9.8.4-P1
+ - CVE-2012-5688
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 05 Dec 2012 15:42:08 -0500
+
+bind9 (1:9.8.4.dfsg-1ubuntu1) raring; urgency=low
+
+ * Merge from Debian unstable. Remaining changes:
+ - debian/bind9.apport: Add AppArmor info and logs to apport hook.
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 23 Nov 2012 08:13:50 -0500
+
+bind9 (1:9.8.4.dfsg-1) unstable; urgency=low
+
+ [Matthew Grant]
+
+ * Turn off dlopen as it was causing test compile failures.
+ * Add missing library .postrm files for debhelper
+
+ [LaMont Jones]
+
+ * New upstream version
+ * soname fixup
+ * Ack NMUs
+
+ -- LaMont Jones <lamont@debian.org> Mon, 29 Oct 2012 08:37:49 -0600
+
+bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low
+
+ * Non-maintainer upload.
+ * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing
+ the patch.
+
+ -- Philipp Kern <pkern@debian.org> Sat, 03 Nov 2012 20:43:43 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium
+
+ [ Philipp Kern ]
+ * Non-maintainer upload.
+
+ [ Marc Deslauriers ]
+ * SECURITY UPDATE: denial of service via specific combinations of RDATA
+ - bin/named/query.c: fix logic
+ - Patch backported from 9.8.3-P4
+ - CVE-2012-5166
+
+ -- Philipp Kern <pkern@debian.org> Sun, 28 Oct 2012 20:28:11 +0100
+
+bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * Fix denial of service vulnerability triggered
+ through an assert because of using bad cache
+ (CVE-2012-3817; Closes: #683259).
+
+ -- Nico Golde <nion@debian.org> Mon, 30 Jul 2012 20:56:10 +0200
+
+bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * SECURITY UPDATE: ghost domain names attack
+ - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
+ of the old NS RRset when replacing it.
+ - Patch backported from 9.8.2.
+ - CVE-2012-1033
+ * SECURITY UPDATE: denial of service via zero length rdata handling
+ - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
+ duplicate rdata.
+ - Patch backported from 9.8.3-P1.
+ - CVE-2012-1667
+
+ -- Luk Claes <luk@debian.org> Wed, 20 Jun 2012 15:26:09 -0400
+
+bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low
+
+ [Christoph Egger]
+
+ * define _GNU_SOURCE on kfreebsd et al. Closes: #658201
+
+ [LaMont Jones]
+
+ * chmod typo in postinst. LP: #980798
+ * Correctly order debhelper bits in postrm. Closes: #661040
+
+ -- LaMont Jones <lamont@debian.org> Fri, 13 Apr 2012 12:09:24 -0600
+
+bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low
+
+ [Zlatan Todoric]
+
+ * fixed Serbian latin translation of debconf template. Closes: #634951
+
+ [Peter Eisentraut]
+
+ * Add support for "status" action to lwresd init script. Closes: #651540
+
+ [Bjørn Steensrud]
+
+ * NB Translations. Closes: #654454
+
+ [LaMont Jones]
+
+ * Default to run_resolvconf=false. LP: #933723
+ * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202
+ * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb.
+ Closes: #620007 LP: #681536
+ * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
+ LP: #929563
+
+ -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 14:40:29 -0800
+
+bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low
+
+ * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202
+
+ -- LaMont Jones <lamont@debian.org> Wed, 25 Jan 2012 03:55:21 -0700
+
+bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.8.1-P1
+ - Cache lookup could return RRSIG data associated with nonexistent
+ records, leading to an assertion failure.
+
+ [LaMont Jones]
+
+ * add a readme entry for DNSSEC-by-default
+ * Failed to install due to chgrp on non-existant directory. Closes: #647598
+ * ack NMU: l10n issues
+
+ -- LaMont Jones <lamont@debian.org> Wed, 18 Jan 2012 10:44:14 -0700
+
+bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Fix pending l10n issues. Debconf translations:
+ - Danish (Joe Hansen). Closes: #619302
+ - Korean (강민지). Closes: #632006, #632016
+ - Serbian (FULL NAME). Closes: #634886
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 03 Dec 2011 17:22:12 +0100
+
+bind9 (1:9.8.1.dfsg-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * New upstream release
+
+ [LaMont Jones]
+
+ * cleanup the messages around killing named
+ * enable dnssec validation: deliver named.conf.options outside of
+ conffiledom, and update if able, complain and do not update if not
+ Closes: #516979
+ * typo in min-ncache-ttl processing
+ * disable dlz until we get a patch to make it build again
+
+ [Jay Ford]
+
+ * Fix "waiting for pid $pid to die" loop to not be infinite. Closes: #570852
+
+ -- LaMont Jones <lamont@debian.org> Tue, 01 Nov 2011 16:39:19 -0600
+
+bind9 (1:9.8.0.dfsg.P1-0) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.8.0-P1
+
+ [LaMont Jones]
+
+ * soname changes
+
+ -- LaMont Jones <lamont@debian.org> Fri, 13 May 2011 03:46:22 -0600
+
+bind9 (1:9.7.4.dfsg-0) unstable; urgency=low
+
+ * New upstream
+
+ -- LaMont Jones <lamont@debian.org> Sun, 21 Aug 2011 04:43:16 -0600
+
+bind9 (1:9.7.3.dfsg-1ubuntu4) oneiric; urgency=low
+
+ * debian/apparmor-profile: Allow /var/run and /run. (LP: #810270)
+
+ -- Martin Pitt <martin.pitt@ubuntu.com> Thu, 14 Jul 2011 15:15:45 +0200
+
+bind9 (1:9.7.3.dfsg-1ubuntu3) oneiric; urgency=low
+
+ * SECURITY UPDATE: denial of service via specially crafted packet
+ - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache,
+ nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute
+ flag to indicate negative-cache records rather than using rrtype 0.
+ - Patch backported from 9.7.3-P3.
+ - CVE-2011-2464
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 05 Jul 2011 08:33:30 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2.1) natty-security; urgency=low
+
+ * SECURITY UPDATE: denial of service via off-by-one
+ - lib/dns/ncache.c: correctly validate length.
+ - Patch backported from 9.7.3-P1.
+ - CVE-2011-1910
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 27 May 2011 12:50:40 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu2) natty; urgency=low
+
+ * debian/rules, configure, contrib/dlz/config.dlz.in: use
+ DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS.
+ (LP: #745642)
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 30 Mar 2011 10:19:37 -0400
+
+bind9 (1:9.7.3.dfsg-1ubuntu1) natty; urgency=low
+
+ * debian/bind9-default.md5sum:
+ - updated to reflect the default md5sum in maverick and natty, this
+ avoids a bogus /etc/default/bind9.dpkg-dist file
+ (LP: #556332)
+
+ -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 29 Mar 2011 10:13:11 +0200
+
+bind9 (1:9.7.3.dfsg-1) unstable; urgency=low
+
+ [Peter Palfrader]
+
+ * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+ db.
+
+ [Internet Systems Consortium, Inc]
+
+ * 9.7.3 - Closes: #612287
+
+ [Mahyuddin Susanto]
+
+ * Updated Indonesian debconf templates. Closes: #608559
+
+ [LaMont Jones]
+
+ * soname changes
+
+ -- LaMont Jones <lamont@debian.org> Wed, 23 Feb 2011 09:14:36 -0700
+
+bind9 (1:9.7.3.dfsg~rc1-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * New upstream
+
+ [Peter Palfrader]
+
+ * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right
+ db.
+
+ [Mahyuddin Susanto]
+
+ * Updated Indonesian debconf templates. Closes: #608559
+
+ [LaMont Jones]
+
+ * soname changes for new upstream
+
+ -- LaMont Jones <lamont@debian.org> Fri, 04 Feb 2011 21:20:05 -0700
+
+bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high
+
+ [ISC]
+ * Fix denial of service via ncache entry and a rrsig for the
+ same type (CVE-2010-3613)
+ * answers were incorrectly marked as insecure during key algorithm
+ rollover (CVE-2010-3614)
+ * Using "allow-query" in the "options" or "view" statements to
+ restrict access to authoritative zones had no effect.
+ (CVE-2010-3615)
+
+ [LaMont Jones]
+
+ * Adjust indentation for dpkg change. Closes: #597171
+
+ -- LaMont Jones <lamont@debian.org> Wed, 01 Dec 2010 16:32:48 -0700
+
+bind9 (1:9.7.2.dfsg.P2-3) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * Adjust indentation for dpkg change. Closes: #597171
+ * acknowledge and incorporate ubuntu change.
+
+ -- LaMont Jones <lamont@debian.org> Fri, 26 Nov 2010 05:18:43 -0700
+
+bind9 (1:9.7.2.dfsg.P2-2ubuntu1) natty; urgency=low
+
+ [ Andres Rodriguez ]
+ * Add apport hook (LP: #533601):
+ - debian/bind9.apport: Added.
+
+ [ Martin Pitt ]
+ * debian/rules: Install Apport hook when building on Ubuntu.
+
+ -- Martin Pitt <martin.pitt@ubuntu.com> Fri, 26 Nov 2010 10:50:17 +0100
+
+bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low
+
+ [Roy Jamison]
+
+ * lib/isc/unix/resource.c was missing inttypes.h include. LP: #674199
+
+ -- LaMont Jones <lamont@debian.org> Fri, 12 Nov 2010 10:52:32 -0700
+
+bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low
+
+ [Joe Dalton]
+
+ * Add Danish translation of debconf templates. Closes: #599431
+
+ [Internet Software Consortium, Inc]
+
+ * v9.7.2-P2
+
+ [José Figueiredo]
+
+ * Add Brazilian Portuguese debconf templates translation. Closes: #597616
+
+ [LaMont Jones]
+
+ * drop this v3 (quilt) source format idea. Closes: #589916
+
+ -- LaMont Jones <lamont@debian.org> Sun, 10 Oct 2010 19:01:57 -0600
+
+bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low
+
+ * Correct conflicts for bind9-host
+
+ -- LaMont Jones <lamont@debian.org> Fri, 16 Jul 2010 05:24:38 -0600
+
+bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * Temporarily and partially disable change 2864 because it would cause
+ inifinite attempts of RRSIG queries. This is an urgent care fix; we'll
+ revisit the issue and complete the fix later. [RT #21710]
+ * Temporarially rollback change 2748. [RT #21594]
+ * Named failed to accept uncachable negative responses from insecure zones.
+ [RT# 21555]
+
+ [LaMont Jones]
+
+ * freshen copyright file
+
+ -- LaMont Jones <lamont@debian.org> Thu, 15 Jul 2010 15:07:54 -0600
+
+bind9 (1:9.7.1.dfsg.0-1) unstable; urgency=low
+
+ * Repack to drop zkt/doc/{draft,rfc}* Closes: #588055
+
+ -- LaMont Jones <lamont@debian.org> Mon, 05 Jul 2010 07:21:34 -0600
+
+bind9 (1:9.7.1.dfsg-2) unstable; urgency=low
+
+ [Regid Ichira]
+
+ * explicitly add nsupdate to dynamic updates in README.Debian.
+ Closes: #577398
+
+ [LaMont Jones]
+
+ * Cleanup bind9-host description. Closes: #579421
+ * switch to 3.0 (quilt) source format, but not to quilt. Closes: #578210
+
+ [Stephen Gran]
+
+ * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley
+ <warthog9@eaglescrag.net>. Closes: #584603
+
+ -- LaMont Jones <lamont@debian.org> Fri, 02 Jul 2010 08:19:29 -0600
+
+bind9 (1:9.7.1.dfsg-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.7.1
+
+ [LaMont Jones]
+
+ * Add freebsd support. Closes: #578447
+ * soname changes
+ * freshen root cache. LP: #596363
+
+ -- LaMont Jones <lamont@debian.org> Mon, 21 Jun 2010 09:53:30 -0600
+
+bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.7.0-P1
+ - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Mar 2010 08:06:42 -0600
+
+bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low
+
+ [Niko Tyni]
+
+ * fix mips/mipsel startup. Closes: #516616
+
+ [LaMont Jones]
+
+ * ignore failures due to a lack of /etc/bind/named.conf*. LP: #422968
+ * ldap API changed regarding % sign. LP: #227344
+ * Drop more rfc and draft files. Closes: #572606
+ * update config.guess, config.sub. Closes: #572528
+
+ -- LaMont Jones <lamont@debian.org> Fri, 12 Mar 2010 14:56:08 -0700
+
+bind9 (1:9.7.0.dfsg-2) unstable; urgency=low
+
+ [Aurelien Jarno]
+
+ * kfreebsd has linux threads. Closes: #470500
+
+ [LaMont Jones]
+
+ * do not error out on initial install. Closes: #572443
+
+ -- LaMont Jones <lamont@debian.org> Thu, 04 Mar 2010 09:32:13 -0700
+
+bind9 (1:9.7.0.dfsg-1) unstable; urgency=low
+
+ * New upstream release
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2010 14:53:36 -0700
+
+bind9 (1:9.7.0.dfsg~rc2-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- LaMont Jones <lamont@debian.org> Thu, 28 Jan 2010 05:46:50 -0700
+
+bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low
+
+ * merge changes from 9.6.1.dfsg.P2-1
+ * meta: drop verisoned depends from library packages, for less upgrade pain
+ * apparmor: allow named to create /var/run/named/session.key
+
+ -- LaMont Jones <lamont@debian.org> Sun, 06 Dec 2009 11:46:17 -0700
+
+bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.7.0b3
+
+ [LaMont Jones]
+
+ * Merge remote branch 'origin/master'
+ * soname changes
+
+ -- LaMont Jones <lamont@debian.org> Mon, 30 Nov 2009 21:07:58 -0700
+
+bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.6.1-P2
+ - When validating, track whether pending data was from the
+ additional section or not and only return it if validates
+ as secure. [RT #20438] CVE-2009-4022
+
+ [LaMont Jones]
+
+ * prerm: do not stop named on upgrade. Closes: #542888
+ * Drop some RFCs that crept into the diff.
+ * meta: add ${misc:Depends}
+ * lintian: update config.guess, config.sub in idnkit-1.0 tree
+ * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+ * meta: soname changes
+ * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org> Fri, 27 Nov 2009 10:07:10 -0700
+
+bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low
+
+ * dnsutils: remove pre-sarge dpkg-divert calls in postinst
+
+ -- LaMont Jones <lamont@debian.org> Tue, 17 Nov 2009 22:42:40 -0600
+
+bind9 (1:9.7.0.dfsg~b2-1) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.7.0b2
+
+ [LaMont Jones]
+
+ * /etc/bind/bind.keys need not be executable.
+ * bind9: drop old stale code from postinst
+ * prerm: do not stop named on upgrade. Closes: #542888
+ * Drop some RFCs that crept into the diff.
+ * meta: add ${misc:Depends}
+ * lintian: update config.guess, config.sub in idnkit-1.0 tree
+ * l10n: missing newline in pofile.
+
+ -- LaMont Jones <lamont@debian.org> Mon, 16 Nov 2009 18:53:24 -0700
+
+bind9 (1:9.7.0~a1.dfsg-0) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.7.0a1
+
+ -- LaMont Jones <lamont@debian.org> Wed, 24 Jun 2009 15:10:08 -0600
+
+bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low
+
+ * Build-Depend on the fixed libgeoip-dev. Closes: #540973
+
+ -- LaMont Jones <lamont@debian.org> Mon, 17 Aug 2009 06:53:11 -0600
+
+bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low
+
+ [Jamie Strandboge]
+
+ * reload individual named profile, not all of apparmor. LP: #412751
+
+ [Guillaume Delacour]
+
+ * bind9 did not purge cleanly. Closes: #497959
+
+ [LaMont Jones]
+
+ * postinst: do not append a blank line to /etc/default/bind9.
+ Closes: #541469
+ * init.d stop needs to not error out. LP: #398033
+ * meta: fix build-depends. Closes: #539230
+
+ -- LaMont Jones <lamont@debian.org> Fri, 14 Aug 2009 17:03:31 -0600
+
+bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * A specially crafted update packet will cause named to exit.
+ CVE-2009-0696, CERT VU#725188. Closes: #538975
+
+ [InterNIC]
+
+ * Update db.root hints file.
+
+ [LaMont Jones]
+
+ * Move default zone definitions from named.conf to named.conf.default-zones.
+ Closes: #492308
+ * use start-stop-daemon if rndc stop fails. Closes: #536487
+ * lwresd: pidfile name was wrong in init script. Closes: #527137
+
+ -- LaMont Jones <lamont@debian.org> Tue, 28 Jul 2009 22:03:14 -0600
+
+bind9 (1:9.6.1.dfsg-2) unstable; urgency=low
+
+ * ia64: fix atomic.h
+
+ -- LaMont Jones <lamont@debian.org> Tue, 23 Jun 2009 01:56:35 -0600
+
+bind9 (1:9.6.1.dfsg-1) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.6.1
+
+ -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 14:33:20 -0600
+
+bind9 (1:9.6.0.dfsg.P1-3) unstable; urgency=low
+
+ [Martin Zobel-Helas]
+
+ * GEO-IP Patch from
+ git://git.kernel.org/pub/scm/network/bind/bind-geodns.git. Closes: #395191
+
+ [LaMont Jones]
+
+ * Remove /var/lib/bind on purge. Closes: #527613
+ * Build-Depend: libdb-dev (>4.6). Closes: #527877, #528772
+ * init.d: detect rndc errors better. LP: #380962
+ * init.d: clean up exit status. Closes: #523454
+ * Enable pkcs11 support, and then Revert - causes assertion failures
+ c.f.: #516552
+
+ -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 13:58:32 -0600
+
+bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low
+
+ * random_1 broke memory usage assertions.
+
+ -- LaMont Jones <lamont@debian.org> Thu, 23 Apr 2009 05:15:45 -0600
+
+bind9 (1:9.6.0.dfsg.P1-1) experimental; urgency=low
+
+ [Michael Milligan]
+
+ * Add min-cache-ttl and min-ncache-ttl keywords
+
+ [LaMont Jones]
+
+ * Fix merge errors from 9.6.0.dfsg.P1-0
+
+ -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 15:50:50 -0600
+
+bind9 (1:9.6.0.dfsg.P1-0) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.6.0-P1
+
+ [LaMont Jones]
+
+ * meta: fix override disparity
+ * meta: soname package fixups for 9.6.0
+ * meta: update Standards-Version: 3.7.3.0
+ * upstream now uses a bind subdir. Closes: #212659
+
+ [Sven Joachim]
+
+ * meta: pass host and build into configure for hybrid build machines.
+ Closes: #515110
+
+ -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 11:54:55 -0600
+
+bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low
+
+ * package -2 for unstable
+
+ -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 09:40:18 -0600
+
+bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low
+
+ [Juhana Helovuo]
+
+ * fix atomic operations on alpha. Closes: #512285
+
+ [Dann Frazier]
+
+ * fix atomic operations on ia64. Closes: #520179
+
+ [LaMont Jones]
+
+ * build-conflict: libdb4.2-dev. Closes: #515074, #507013
+
+ [localization folks]
+
+ * l10n: Basque debconf template. Closes: #516549 (Piarres Beobide)
+
+ -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 05:30:22 -0600
+
+bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low
+
+ * New upstream patch release
+ - supportable version of fix from 9.5.0.dfsg.P2-5.1
+ - CVE-2009-0025: Closes: #511936
+ - 2475: Overly agressive cache entry removal. Closes: #511768
+ - other bug fixes worthy of patch-release inclusion
+
+ -- LaMont Jones <lamont@debian.org> Mon, 26 Jan 2009 10:33:42 -0700
+
+bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided
+ by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot
+ contacted him. Closes: #496954, #501800.
+ * Remove obsolete dh_installmanpages invocation which was adding
+ unwanted manual pages to bind9. Closes: #486196.
+
+ -- Ben Hutchings <ben@decadent.org.uk> Fri, 02 Jan 2009 16:51:42 +0000
+
+bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low
+
+ [ISC]
+
+ * 2463: IPv6 Advanced Socket API broken on linux. LP: #249824
+
+ [Jamie Strandboge]
+
+ * apparmor: add capability sys_resource
+ * apparmor: add krb keytab access. LP: #277370
+
+ [LaMont Jones]
+
+ * apparmor: allow proc/*/net/if_inet6 read access too. LP: #289060
+ * apparmor: add /var/log/named/* entries. LP: #294935
+
+ [Ben Hutchings]
+
+ * meta: Add dependency of bind9 on net-tools (ifconfig used in init script)
+ * meta: Fix bind9utils Depends.
+ * meta: fix typo in package description
+
+ [localization folks]
+
+ * l10n: add polish debconf translations. Closes: #506856 (L)
+
+ -- LaMont Jones <lamont@debian.org> Sun, 07 Dec 2008 21:03:29 -0700
+
+bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low
+
+ * meta: fix typo in Depends: lsb-base. Closes: #501365
+
+ -- LaMont Jones <lamont@debian.org> Tue, 07 Oct 2008 17:20:11 -0600
+
+bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * enable largefile support. Closes: #497040
+
+ [localization folks]
+
+ * l10n: Dutch translation. Closes: #499977 (Paul Gevers)
+ * l10n: simplified chinese debconf template. Closes: #501103 (LI Daobing)
+ * l10n: Update spanish template. Closes: #493775 (Ignacio Mondino)
+
+ -- LaMont Jones <lamont@debian.org> Sun, 05 Oct 2008 20:20:00 -0600
+
+bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low
+
+ [Kees Cook]
+
+ * debian/{control,rules}: enable PIE hardening (from -1ubuntu1)
+
+ [Nicolas Valcárcel]
+
+ * Add ufw integration (from -1ubuntu2)
+
+ [Dustin Kirkland]
+
+ * use pid file in init.d/bind9 status. LP: #247084
+
+ [LaMont Jones]
+
+ * dig: add -DDIG_SIGCHASE to compile options. LP: #257682
+ * apparmor profile: add /var/log/named
+
+ [Nikita Ofitserov]
+
+ * ipv6 support requires _GNU_SOURCE definition. LP: #249824
+
+ -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2008 23:08:36 -0600
+
+bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * default to using resolvconf if it is installed
+ * fix sonames and dependencies. Closes: #149259, #492418
+ * Do not build-depend libcap2-dev on non-linux. Closes: #493392
+ * drop unused query-loc manpage. Closes: #492564
+ * lwresd: Deliver /etc/bind directory. Closes: #490027
+ * fix query-source comment in default install
+
+ [Internet Software Consortium, Inc]
+
+ * 9.5.0-P2. Closes: #492949
+
+ [localization folks]
+
+ * l10n: Spanish debconf translation. Closes: #492425 (Ignacio Mondino)
+ * l10n: Swedish debconf templates. Closes: #491369 (Martin Ågren)
+ * l10n: Japanese debconf translations. Closes: #492048 (Hideki Yamane
+ (Debian-JP))
+ * l10n: Finnish translation. Closes: #490630 (Esko Arajärvi)
+ * l10n: Italian debconf translations. Closes: #492587 (Alessandro Vietta)
+
+ -- LaMont Jones <lamont@debian.org> Sat, 02 Aug 2008 14:20:20 -0600
+
+bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
+
+ * Revert "meta: merge the mess of single-lib packages back into one large
+ one." - That way lies madness and pain.
+ * init.d/bind9: implement status function. LP: #203169
+
+ -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 21:56:58 -0600
+
+bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low
+
+ * Repackage 9.5.0.dfsg-5 with the -P1 tarball.
+
+ -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 15:06:07 -0600
+
+bind9 (1:9.5.0.dfsg-5) unstable; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * Randomize UDP query source ports to improve forgery resilience.
+ (CVE-2008-1447)
+
+ [LaMont Jones]
+
+ * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean
+ * fix sonames
+ * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf
+ * meta: cleanup libbind9-41 Provides/Conflicts
+ * build: fix sonames for new libraries
+ * postinst: really restart bind/lwresd in postinst
+
+ -- LaMont Jones <lamont@debian.org> Sun, 06 Jul 2008 21:34:18 -0600
+
+bind9 (1:9.5.0.dfsg-4) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * control: fix dnsutils description to avoid list reformatting.
+ Closes: #480317
+ * lwresd: restart in postinst. Closes: #486481
+ * meta: merge the mess of single-lib packages back into one large one.
+ * apparmor: allow bind to create files in /var/{lib,cache}/bind
+ * build: drop .la files. Closes: #486969
+ * build: drop the extra lib path from the library-package merge
+ * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0
+
+ [localization folks]
+
+ * l10n: German debconf translation. Closes: #486547 (Helge Kreutzmann)
+ * l10n: Indonesian debconf translations. Closes: #486503 (Arief S Fitrianto)
+ * l10n: Slovak po-debconf translation Closes: #488905 (helix84)
+ * l10n: Turkish debconf template. Closes: #486479 (Mert Dirik)
+
+ -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:22:05 -0600
+
+bind9 (1:9.4.2-12) unstable; urgency=low
+
+ * apparmor: allow bind to create files in /var/{lib,cache}/bind
+
+ -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:17:53 -0600
+
+bind9 (1:9.4.2-11) unstable; urgency=low
+
+ * apparmor: add dnscvsutil package files
+ * lwresd Depends: adduser
+ * control: fix dnsutils description to avoid list reformatting.
+ Closes: #480317
+
+ -- LaMont Jones <lamont@debian.org> Tue, 17 Jun 2008 21:30:12 -0600
+
+bind9 (1:9.5.0.dfsg-3) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * bind9utils Depends: libbind9-40. Closes: #486194
+ * bind9 should not deliver manpages for nonexistant binaries.
+ Closes: #486196
+
+ [localization folks]
+
+ * l10n: Vietnamese debconf templates translation update. Closes: #486185
+ (Clytie Siddall)
+ * l10n: Russian debconf templates translation. Closes: #486191 (Yuri Kozlov)
+ * l10n: Galician debconf template. Closes: #486215 (Jacobo Tarrio)
+ * l10n: French debconf templates. Closes: #486325 (CALARESU Luc)
+ * l10n: Czech debconf translation. Closes: #486337 (Miroslav Kure)
+ * l10n: Updated Portuguese translation. Closes: #486267 (Traduz -
+ Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org> Sun, 15 Jun 2008 18:25:02 -0600
+
+bind9 (1:9.5.0.dfsg-2) unstable; urgency=low
+
+ [Tim Spriggs]
+
+ * init.d: Nexenta has different ifconfig arguments
+
+ [LaMont Jones]
+
+ * templates rework from debian-l10n-english
+ * reload named when an interface goes up or down. LP: #226495
+ * build: need to create the directories for interface restart triggering
+ * Build-Depends: libcap2-dev. Closes: #485747
+ * Leave named running during update. Closes: #453765
+ * Fix path to uname, cleaning up the nexenta checks.
+ * l10n: avoid double-question in templates.
+
+ [localization folks]
+
+ * l10n: Vietnamese debconf translations. Closes: #483911 (Clytie Siddall)
+ * l10n: Portuguese debconf translations. Closes: #483872 (Traduz -
+ Portuguese Translation Team)
+
+ -- LaMont Jones <lamont@debian.org> Fri, 13 Jun 2008 16:54:42 -0600
+
+bind9 (1:9.5.0.dfsg-1) unstable; urgency=low
+
+ [LaMont Jones]
+
+ * manpages: fix references that should say /etc/bind
+ * meta: build-depend libxml2-dev for statistics support
+
+ -- LaMont Jones <lamont@debian.org> Sat, 31 May 2008 12:17:21 -0600
+
+bind9 (1:9.5.0.dfsg-0) experimental; urgency=low
+
+ [Internet Software Consortium, Inc]
+
+ * 9.5.0 release
+
+ [LaMont Jones]
+
+ * Only use capabilities if they are present: reprise. Closes: #360339, #212226
+ * control: fix dnsutils description to avoid list reformatting. Closes: #480317
+ * build: use the correct directories in dh_shlibdeps invocation
+ * build: turn on dlz. No pgsql or mysql support yet. LP: #227344
+
+ -- LaMont Jones <lamont@debian.org> Thu, 29 May 2008 22:05:19 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low
+
+ * build: use the correct directories in dh_shlibdeps invocation
+ * build: turn on dlz. LP: #227344
+
+ -- LaMont Jones <lamont@ubuntu.com> Tue, 27 May 2008 21:43:06 -0600
+
+bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low
+
+ * Upload what will become (maybe an ancestor of) -2 to intrepid.
+ - Only use capabilities if they are present: reprise. Closes: #360339, #212226
+ - control: fix dnsutils description to avoid list reformatting. Closes: #480317
+
+ -- LaMont Jones <lamont@ubuntu.com> Mon, 26 May 2008 11:46:27 -0600
+
+bind9 (1:9.5.0~rc1-1) experimental; urgency=low
+
+ [Patrick Winnertz]
+
+ * postinst: make add debconf support. Closes: #473460
+
+ [Jamie Strandboge]
+
+ * debian/bind9.preinst: Apparmor force-complain on upgrade without
+ existing profile. LP: #204658
+
+ [LaMont Jones]
+
+ * bind9utils: fix typos in .install
+ * host: manpage inaccurately describes default query. LP: #203087
+ * apparmor: add dnscvsutil package files
+ * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1.
+ * soname: libdns41 -> 42
+ * fix typos in debconf patch, #473460
+ * cleanup more files in clean target
+ * lwresd Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org> Thu, 15 May 2008 17:59:54 -0600
+
+bind9 (1:9.5.0~b2-2) experimental; urgency=low
+
+ * meta: add bind9utils binary package, with various useful utilities. Closes: #151957, #130445, #160483
+
+ -- LaMont Jones <lamont@debian.org> Thu, 03 Apr 2008 07:01:42 -0600
+
+bind9 (1:9.4.2-10) unstable; urgency=low
+
+ [Jamie Strandboge]
+
+ * debian/bind9.preinst: AA force-complain on upgrade without existing
+ profile. LP: #204658
+
+ [LaMont Jones]
+
+ * host: manpage inaccurately describes default query. LP: #203087
+
+ -- LaMont Jones <lamont@debian.org> Tue, 08 Apr 2008 22:45:57 -0600
+
+bind9 (1:9.4.2-9) unstable; urgency=low
+
+ * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
+ * apparmor: make profile match README.Debian
+
+ -- LaMont Jones <lamont@debian.org> Tue, 01 Apr 2008 21:13:05 -0600
+
+bind9 (1:9.4.2-8) unstable; urgency=low
+
+ [ISC]
+
+ * CVE-2008-0122: off by one error in (unused) inet_network function.
+ Closes: #462783 LP: #203476
+
+ [Michael Milligan]
+
+ * Fix min-cache-ttl and min-ncache-ttl keywords
+
+ [Jamie Strandboge]
+
+ * apparmor: force complain-mode for apparmor on certain upgrades. LP: #203528
+ * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named
+
+ -- LaMont Jones <lamont@debian.org> Tue, 18 Mar 2008 18:35:15 -0600
+
+bind9 (1:9.4.2-7) unstable; urgency=low
+
+ [Jamie Strandboge]
+
+ * Allow rw access to /var/lib/bind/* in apparmor-profile. LP: #201954
+
+ [LaMont Jones]
+
+ * Drop root-delegation comments from named.conf. Closes: #217829, #297219
+
+ -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2008 09:48:10 -0600
+
+bind9 (1:9.4.2-6) unstable; urgency=low
+
+ * Correct apparmor profile filename. LP: #200739
+
+ -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 14:28:01 -0600
+
+bind9 (1:9.4.2-5) unstable; urgency=low
+
+ * add "order random_1" support (return one random RR)
+ * Fix doc pathnames in README.Debian. Closes: #266891
+ * Add AAAA ::1 entry to db.local. Closes: #230088
+
+ -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 13:51:28 -0600
+
+bind9 (1:9.5.0~b2-1) experimental; urgency=low
+
+ [Thiemo Seufer]
+
+ * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64}
+
+ [LaMont Jones]
+
+ * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750
+ * named.conf.5: correct filename. Closes: #428015
+ * manpages: fix typo errors. Closes: #395834
+ * Makefile.in: be explicit about library paths
+ * build: Turn on GSS-TSIG support. LP: #158197
+ * build: soname changes
+ * db.root: include AAAA RRs. Closes: #464111
+ * soname: lib{dns,isc}40 -> 41
+ * meta: use binary:Version instead of Source-Version
+
+ [Andreas John]
+
+ * Only use capabilities if they are present. Closes: #360339, #212226
+
+ -- LaMont Jones <lamont@debian.org> Sat, 23 Feb 2008 08:06:17 -0700
+
+bind9 (1:9.4.2-4) unstable; urgency=low
+
+ * incorporate ubuntu apparmor change from Jamie Strandboge,
+ with changes:
+ - Add apparmor profile, reload apparmor profile on config
+ - Add a note about apparmor to README.Debian
+ - conflicts/replaces old apparmor versions
+ * db.root: include AAAA RRs. Closes: #464111
+ * Don't die when /var/lib/bind already exists. LP: #191685
+ * build: turn on optimization. Closes: #435194
+
+ -- LaMont Jones <lamont@debian.org> Fri, 22 Feb 2008 22:05:25 -0700
+
+bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low
+
+ * add AppArmor profile
+ + debian/apparmor-profile
+ + debian/bind9.postinst: Reload AA profile on configuration
+ * updated debian/README.Debian for note on AppArmor
+ * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we
+ should now take control
+ * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4
+ to make sure that if earlier version of apparmor-profiles gets installed
+ it won't overwrite our profile
+ * Modify Maintainer value to match the DebianMaintainerField
+ specification.
+
+ -- Jamie Strandboge <jamie@ubuntu.com> Wed, 13 Feb 2008 17:30:45 +0000
+
+bind9 (1:9.4.2-3) unstable; urgency=low
+
+ * don't run rndc-confgen when it's not there. Closes: #459551
+ * control: drop use of ${Source-Version}
+
+ -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2008 10:16:06 -0700
+
+bind9 (1:9.4.2-2) unstable; urgency=low
+
+ * init.d: add --oknodo to start-stop-daemon. Closes: #411881
+ * init: LSB dependency info. Closes: #459421, #448006
+ * meta: bind9 Suggests: resolvconf. Closes: #252285
+ * bind9: deliver /var/lib/bind directory, and document.
+ Closes: #248771, #200253, #202981, #209022
+ * lwresd: create bind user/group and rndc key if needed, at install.
+ Closes: #190742
+ * dnsutils: update long description. Closes: #236901
+
+ -- LaMont Jones <lamont@debian.org> Sun, 06 Jan 2008 12:25:31 -0700
+
+bind9 (1:9.4.2-1) unstable; urgency=low
+
+ [Mike O'Connor]
+
+ * bind9.init: LSB compliance. Closes: #448006
+
+ [Internet Software Consortium, Inc]
+
+ * New release: 9.4.2
+
+ [LaMont Jones]
+
+ * soname shifts for new release
+
+ -- LaMont Jones <lamont@debian.org> Sat, 17 Nov 2007 10:50:07 -0700
+
+bind9 (1:9.4.2~rc2-1) experimental; urgency=low
+
+ * New upstream release
+
+ -- LaMont Jones <lamont@debian.org> Fri, 12 Oct 2007 18:33:57 -0600
+
+bind9 (1:9.4.1-P1-4) unstable; urgency=low
+
+ [Thomas Antepoth]
+
+ * unix/socket.c: don't send to a socket with pending_send. Closes: #430065
+
+ [LaMont Jones]
+
+ * document git repositories
+ * db.root: l.root-servers.net changed IP address. Closes: #449148 LP: #160176
+ * init.d: if there are no networks configured, error out quickly
+
+ -- LaMont Jones <lamont@debian.org> Thu, 08 Nov 2007 21:31:55 -0700
+
+bind9 (1:9.4.1-P1-3) unstable; urgency=low
+
+ * Only deliver upstream changes with bind9-doc
+
+ -- LaMont Jones <lamont@debian.org> Thu, 04 Oct 2007 08:30:55 -0600
+
+bind9 (1:9.4.1-P1-2) unstable; urgency=low
+
+ * manpages: fix typo errors. Closes: #395834
+ * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750
+ * named.conf.5: correct filename. Closes: #428015
+ * bind9.NEWS: update version for ACL change doc. Closes: #435225
+ * build: don't have dnsutils deliver man pages that it shouldn't. LP: #82178
+ * nslookup.1: some of the manpage was not visible. LP: #131415
+ * document git repositories
+ * unix/socket.c: don't send to a socket with pending_send. Closes: #430065
+
+ -- LaMont Jones <lamont@debian.org> Wed, 03 Oct 2007 01:10:59 -0600
+
+bind9 (1:9.4.1-P1-1) unstable; urgency=high
+
+ * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925
+
+ -- Bdale Garbee <bdale@gag.com> Thu, 26 Jul 2007 16:41:50 -0600
+
+bind9 (1:9.4.1-1) unstable; urgency=low
+
+ * New upstream version
+
+ -- LaMont Jones <lamont@debian.org> Mon, 30 Apr 2007 16:59:05 -0600
+
+bind9 (1:9.4.0-2) unstable; urgency=low
+
+ * upload to unstable
+
+ -- LaMont Jones <lamont@debian.org> Tue, 10 Apr 2007 11:12:16 -0600
+
+bind9 (1:9.4.0-1) experimental; urgency=low
+
+ * New upstream version
+ * more mipsel patch. Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org> Sun, 25 Feb 2007 11:44:11 -0700
+
+bind9 (1:9.4.0~rc2-1) experimental; urgency=low
+
+ * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:26:12 -0700
+
+bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low
+
+ * add NEWS file talking about the change in defaults:
+ As of bind 9.4, allow-query-cache and allow-recursion default to the
+ builtin acls 'localnets' and 'localhost'. If you are setting up a
+ name server for a network, you will almost certainly need to change
+ this.
+
+ The change in default has been done to make caching servers less
+ attractive as reflective amplifying targets for spoofed traffic.
+ This still leaves authoritative servers exposed.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 24 Jan 2007 09:35:06 -0700
+
+bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low
+
+ * Fix mips64. Closes: #406409
+
+ -- LaMont Jones <lamont@debian.org> Sun, 21 Jan 2007 15:32:27 -0700
+
+bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low
+
+ * Broken orig.tar.gz.
+
+ -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 23:04:05 -0700
+
+bind9 (1:9.4.0~rc1-1) experimental; urgency=low
+
+ * New upstream
+
+ -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 19:00:37 -0700
+
+bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low
+
+ [Thomas Antepoth]
+
+ * unix/socket.c: don't send to a socket with pending_send. Closes: #430065
+
+ [LaMont Jones]
+
+ * document git repositories
+ * db.root: l.root-servers.net changed IP address. Closes: #449148
+
+ -- LaMont Jones <lamont@debian.org> Mon, 05 Nov 2007 19:48:23 -0700
+
+bind9 (1:9.3.4-2etch1) stable-security; urgency=high
+
+ * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926)
+
+ -- Moritz Muehlenhoff <jmm@debian.org> Tue, 24 Jul 2007 22:09:35 +0000
+
+bind9 (1:9.3.4-2) unstable; urgency=high
+
+ * Actually really do the merge of 9.3.4. Sigh. Closes: #408925
+
+ -- LaMont Jones <lamont@debian.org> Mon, 29 Jan 2007 06:09:03 -0700
+
+bind9 (1:9.3.4-1) unstable; urgency=high
+
+ * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494
+
+ -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:31:09 -0700
+
+bind9 (1:9.3.3-1) unstable; urgency=low
+
+ * New upstream version
+
+ -- LaMont Jones <lamont@debian.org> Tue, 12 Dec 2006 23:31:51 -0700
+
+bind9 (1:9.3.2-P1.0-1) unstable; urgency=low
+
+ * Fix README.Debian to point to the URL. Closes: #387437
+ * Strip rfc's from orig.tar.gz. Closes: #393359
+
+ -- LaMont Jones <lamont@mmjgroup.com> Mon, 16 Oct 2006 06:38:22 -0600
+
+bind9 (1:9.3.2-P1-2) unstable; urgency=low
+
+ * Fix init script output. Closes: #354192
+ Thanks to Joey Hess for the patch.
+ * Default install should listen on ipv6 interfaces. Closes: #382438
+
+ -- LaMont Jones <lamont@debian.org> Sat, 9 Sep 2006 19:01:53 -0600
+
+bind9 (1:9.3.2-P1-1) unstable; urgency=high
+
+ * New upstream, fixes CVE-2006-4095 and CVE-2006-4096.
+ Closes: #386237, #386245
+ * Drop gcc-3.4 [powerpc] dependency. Closes: #342957, #372203
+ * Add -fno-strict-aliasing for type-punned pointer aliasing issues
+ Closes: #386224
+ * Use getent in postinst instead of chown/chgrp. Closes: #386091, #239665
+ * Drop redundant update-rc.d calls. Closes: #356914
+
+ -- LaMont Jones <lamont@debian.org> Wed, 6 Sep 2006 08:07:13 -0600
+
+bind9 (1:9.3.2-2) unstable; urgency=low
+
+ * correct force-reload. Closes: #333841
+ * Fix init.d's usage message. Closes: #331090
+ * resolvconf tweaks. Closes: #252232, #275412
+
+ -- LaMont Jones <lamont@debian.org> Mon, 16 Jan 2006 15:17:04 -0700
+
+bind9 (1:9.3.2-1) unstable; urgency=low
+
+ * New upstream
+ * use lsb-base for start/stop messages in init.d.
+ * switch to debhelper 4
+
+ -- LaMont Jones <lamont@debian.org> Thu, 5 Jan 2006 12:29:28 -0700
+
+bind9 (1:9.3.1-2) unstable; urgency=low
+
+ * Getting good reports from experimental, uploading to sid.
+ Release team, please consider this package for sarge. Thanks.
+ * correct pidfile name in init.d/lwresd. Closes: #298100
+
+ -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 17:46:31 -0700
+
+bind9 (1:9.3.1-1) experimental; urgency=low
+
+ * Build with gcc-3.4 on powerpc, to work around #292958.
+
+ -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 11:40:06 -0700
+
+bind9 (1:9.3.1-0) experimental; urgency=low
+
+ * New upstream version.
+
+ -- LaMont Jones <lamont@debian.org> Sun, 13 Mar 2005 21:44:57 -0700
+
+bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low
+
+ * new upstream version
+
+ -- LaMont Jones <lamont@debian.org> Tue, 25 Jan 2005 14:21:51 -0700
+
+bind9 (1:9.3.0-1) experimental; urgency=low
+
+ * New upstream version
+
+ -- LaMont Jones <lamont@debian.org> Sat, 25 Sep 2004 21:35:46 -0600
+
+bind9 (1:9.2.4-1) unstable; urgency=high
+
+ * New upstream version. Closes: #269157 and others.
+ * Version debhelper build-dep. Closes: #262720
+
+ -- LaMont Jones <lamont@mmjgroup.com> Thu, 23 Sep 2004 09:11:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low
+
+ * New upstream
+
+ -- LaMont Jones <lamont@mmjgroup.com> Wed, 1 Sep 2004 00:04:55 -0600
+
+bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low
+
+ * New upstream.
+ * Comment out delegation-only directives in named.conf
+
+ -- LaMont Jones <lamont@debian.org> Mon, 2 Aug 2004 10:00:38 -0600
+
+bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low
+
+ * New upstream release candidate
+
+ -- LaMont Jones <lamont@debian.org> Thu, 17 Jun 2004 19:50:37 -0600
+
+bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low
+
+ * New upstream release candidate
+ * Remove shared library symlinks in clean. Closes: #243109
+ * Deal with capset being a module. Closes: #245043, #240874, #241605
+ * deliver /var/run/bind/run in lwresd as well. Closes: #186569
+
+ -- LaMont Jones <lamont@debian.org> Thu, 22 Apr 2004 12:20:05 -0600
+
+bind9 (1:9.2.3-3) unstable; urgency=low
+
+ * new IP for b.root-servers.net. Closes: #234278
+ * Fix RC linkages to match bind8. Closes: #218007
+
+ -- LaMont Jones <lamont@debian.org> Mon, 1 Mar 2004 15:00:44 -0700
+
+bind9 (1:9.2.3-2) unstable; urgency=low
+
+ * Rebuild autoconf files for mips. Closes: #221419
+
+ -- LaMont Jones <lamont@debian.org> Tue, 18 Nov 2003 06:33:34 -0700
+
+bind9 (1:9.2.3-1) unstable; urgency=low
+
+ * New upstream.
+ * cleanup zones.rfc1918/db.empty stuff.
+ * Fix Makefiles to work even if the build environment is unclean.
+ Closes: #211503
+ * Add comments about root-delegation-only to named.conf. Closes: #212243
+ * Add resolvconf support. Closes: #199255
+ * more SO_BSDCOMPAT hacks for linux. Closes: #220735, #214460
+
+ -- LaMont Jones <lamont@debian.org> Mon, 17 Nov 2003 21:30:33 -0700
+
+bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low
+
+ * Yet another new upstream release.
+
+ -- LaMont Jones <lamont@debian.org> Mon, 22 Sep 2003 09:39:50 -0600
+
+bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low
+
+ * New upstream. Closes: #211752. #211503. #211496, #211520
+
+ -- LaMont Jones <lamont@debian.org> Sat, 20 Sep 2003 12:22:59 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low
+
+ * Really fix versioned depends. Closes: #211590
+
+ -- LaMont Jones <lamont@debian.org> Thu, 18 Sep 2003 17:29:47 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low
+
+ * Version depends for all the libraries. sigh. Closes: #211412,#210293
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:56:36 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low
+
+ * Need a versioned depend. sigh.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:25:35 -0600
+
+bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low
+
+ * New upstream release. Closes: #211373
+ * Remove RFC's from package, per policy.
+ * Make com and net zones delegation-only by default.
+
+ -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 07:15:37 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low
+
+ * A bit more cleanup of descriptions.
+ * fix package sections
+ * Fix b0rkage with dependencies.
+
+ -- LaMont Jones <lamont@debian.org> Sun, 14 Sep 2003 09:05:10 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low
+
+ * Explicitly link libraries. Closes: #210653
+ * Fix descriptions. Closes: #209563, #209853, #210063
+
+ -- LaMont Jones <lamont@debian.org> Sat, 13 Sep 2003 19:29:05 -0600
+
+bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low
+
+ * New upstream release candidate.
+ * Quit using SO_BSDCOMPAT (why is it still in the header files??) so
+ that the kernel will shut up about it's advertised, obsolete option.
+ Closes: #201293, #204282, #205590
+
+ -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2003 14:44:28 -0600
+
+bind9 (1:9.2.2-2) unstable; urgency=low
+
+ * Fix libtool.m4. Closes: #183791
+ * move lib packages into Section: libs. Closes: #184788
+ * make sure it's libssl0.9.7. Closes: #182363
+ * Add /etc/default/lwresd. Closes: #169727
+ * Add fakeroot dir to dh_shlibdeps. Closes: #169622
+ * Fix rndc manpage. Closes: #179353
+ * Deliver /usr/bin/isc-config.sh (in libbind-dev). Closes: #178186
+
+ -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2003 16:34:15 -0700
+
+bind9 (1:9.2.2-1) unstable; urgency=low
+
+ * New upstream version
+ * Document /etc/default/bind9 in init.d script. Closes: #170267
+
+ -- LaMont Jones <lamont@debian.org> Tue, 4 Mar 2003 22:43:58 -0700
+
+bind9 (1:9.2.1-7) unstable; urgency=low
+
+ * One more overrides disparity.
+ * Fix bashism in postinst. Closes: #169531
+
+ -- LaMont Jones <lamont@debian.org> Sun, 17 Nov 2002 19:22:58 -0700
+
+bind9 (1:9.2.1-6) unstable; urgency=low
+
+ * The "I give up for now" release.
+ * Only convert to running as bind if named.conf hasn't been modified.
+ * Closes: #163552, #164352
+ * Fix overrides
+ * Cleanup README.Debian wrt non-root-by-default.
+ * Make sure that /var/run/bind/run exists in init.d script. Closes: #168912
+ * New IP for j.root-servers.net. Closes: #167818
+ * Check for 2.2.18 kernel in preinst. Closes: #164349
+ * Move local options to /etc/default/bind9. Closes: #169132, #163073
+ * Cleanup old bugs (fixed in -5, really). Closes: #165864
+ * Add /etc/bind/named.conf.local, included from named.conf. Closes: #129576
+ * Do options definitions in /etc/bind/named.conf.options, makes life
+ easier in the face of named.conf changes from upstream.
+ * Add missing Depends: adduser
+
+ -- LaMont Jones <lamont@debian.org> Sat, 16 Nov 2002 17:05:45 -0700
+
+bind9 (1:9.2.1-5) unstable; urgency=low
+
+ * Run named a non-privileged user by default. Closes: #149059
+
+ -- LaMont Jones <lamont@debian.org> Thu, 12 Sep 2002 16:57:37 -0600
+
+bind9 (1:9.2.1-4) unstable; urgency=low
+
+ * swap maintainer/uploader status so LaMont is primary and Bdale is backup
+ * Deal with bind/bind9 collisions better. Closes: #149580
+ * Fix some documentation. Closes: #151579
+
+ -- LaMont Jones <lamont@debian.org> Wed, 4 Sep 2002 23:25:33 -0600
+
+bind9 (1:9.2.1-3) unstable; urgency=high
+
+ * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in
+ resolver library, closes: #151342, #151431
+
+ -- Bdale Garbee <bdale@gag.com> Mon, 1 Jul 2002 00:16:31 -0600
+
+bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high
+
+ * backport to woody (simple rebuild) since 9.2.1 resolves a security issue
+
+ -- Bdale Garbee <bdale@gag.com> Tue, 4 Jun 2002 10:30:57 -0600
+
+bind9 (1:9.2.1-2) unstable; urgency=low
+
+ * don't include nslint man page, closes: #148695
+ * fix typo in rndc.8, closes: #139602
+ * add a section to README.Debian explaining the rndc key mode that has been
+ our default since 9.2.0-2, closes: #129849
+ * fix paths for named.conf in named.8 to reflect our default, closes: #143443
+ * upstream fixed the nsupdate man page at some point, closes: #121108
+
+ -- Bdale Garbee <bdale@gag.com> Mon, 3 Jun 2002 15:44:37 -0600
+
+bind9 (1:9.2.1-1) unstable; urgency=medium
+
+ * new upstream version
+ * have bind9-host provide host, closes: #140174
+ * move bind9-host to priority standard since dnsutils depends on it or host,
+ and we prefer bind9-host over host.
+ * move libdns5 and libisc4 to priority standard since dnsutils depends on
+ them and is priority standard
+
+ -- Bdale Garbee <bdale@gag.com> Thu, 30 May 2002 10:38:39 -0600
+
+bind9 (1:9.2.0-6) unstable; urgency=low
+
+ * move to US main! Yippee! Closes: #123969
+ * add info to README.Debian about 2.5 kernels vs --disable-linux-caps
+
+ -- Bdale Garbee <bdale@gag.com> Sat, 23 Mar 2002 00:18:05 -0700
+
+bind9 (1:9.2.0-5) unstable; urgency=medium
+
+ * clean up various issues in the rules file
+ * make bind9-host conflict/replace old dnsutils as host does, otherwise we
+ can have problems upgrading from potato to woody, closes: #136686
+ * use /dev/urandom for rndc-confgen in postinst, it should be good enough for
+ this purpose, and will keep the postinst from blocking arbitrarily.
+ closes: #130372
+ * add fresh pointers to chroot howto to README.Debian, closes: #135774
+
+ -- Bdale Garbee <bdale@gag.com> Sun, 3 Mar 2002 16:47:12 -0700
+
+bind9 (1:9.2.0-4) unstable; urgency=low
+
+ * bind9-host needs to conflict with host, closes: #127395
+
+ -- Bdale Garbee <bdale@gag.com> Tue, 1 Jan 2002 20:12:14 -0700
+
+bind9 (1:9.2.0-3) unstable; urgency=low
+
+ * force removal of old diverted files, closes: #126236
+ * change priority of liblwres1 from optional to standard per ftp admins
+ * add a bind9-host package so that the 'host' provided with the BIND 9.X
+ source tree can be an alternative to the aging NIKHEF version packaged
+ separately. Update dnsutils dependencies to depend on one of the two,
+ with preference to this one since it has fewer bugs (but fewer features,
+ too).
+
+ -- Bdale Garbee <bdale@gag.com> Sun, 23 Dec 2001 00:59:15 -0700
+
+bind9 (1:9.2.0-2) unstable; urgency=medium
+
+ * change rc.d links to ensure daemon starts before and stops after other
+ daemons that may fail if name service is not working (bug was filed
+ against 8.X bind packages, but is just as relevant here!)
+ * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935
+ * add a postinst to dnsutils to remove any lingering diversions from old
+ dnsutils packages, closes: #122227
+ * not much point in delivering zone2ldap.1 since we aren't delivering
+ zone2ldap right now (though we might someday?), closes: #124058
+ * be more verbose with shared library descriptions, closes: #123426, #123428
+ * 9.2.0 added a new rndc.key file that both named and rndc will read to
+ obtain a shared key, and rndc-confgen will easily create this file with
+ a unique-per-system key. Modify named.conf and remove rndc.conf
+ to take advantage of this mechanism and stop delivering a pre-determined
+ static key to all Debian systems (which has been a mild security risk).
+ Create the key in postinst if the key file doesn't already exist, and
+ remove the file in postrm if purging.
+ Closes: #86718, #87208
+
+ -- Bdale Garbee <bdale@gag.com> Fri, 21 Dec 2001 04:04:30 -0700
+
+bind9 (1:9.2.0-1) unstable; urgency=low
+
+ * new upstream version, closes: #108243, #112266, #114250, #119506, #120657
+ * /etc/bind/rndc.conf is now a conffile
+ * minor hacks to the README.Debian since the chroot instructions it points
+ to are 8.X specific, part of addressing bug 111868.
+ * libomapi is gone, replaced by libisccc and libisccfg
+ * a few lintian-motivated cosmetic cleanups
+ * lose task-dns-server meta package, since tasksel doesn't need it now
+ * dig problem not reproducible in this version, closes: #89526
+ * named-checkconf now uses $sysconfdir, closes: #107835
+ * no longer deliver man pages for contributed binaries we're not including
+ in dnsutils, closes: #108220
+ * fix section in nslookup man page, though that's the least of the man
+ page's problems... glitch reported is unreproducible
+ closes: #103630, #120946
+ * update libbind-dev README.Debian, closes: #121050
+
+ -- Bdale Garbee <bdale@gag.com> Tue, 27 Nov 2001 01:41:00 -0700
+
+bind9 (1:9.1.3-1) unstable; urgency=low
+
+ * new upstream version, closes: #96483, #99824, #100647, #101568, #103429
+ * update config.sub/guess for hppa/ia64 support
+ * small init.d patch from Marco d'Itri to ease adding options on invocation
+ * stop having bind9-doc conflict/replace bind-doc since they don't really
+ conflict and there's no reason to prevent having both installed at the
+ same time, closes: #90994
+ * the CHANGES file documents fixes since 9.1.1 that probably cured the
+ reported assertion failure. If it turns out that I'm wrong, the bug can
+ be re-opened or a new one filed. I can't see any way to reproduce the bug
+ in a test case here. Closes: #99352
+ * have libbind-dev depend on the runtime library packages it delivers
+ compile-time symlinks for, closes: #100898, #103855
+ * fix lwres man pages to source man3/* instead of * so all the page content
+ can actually be found, closes: #85450, #103865
+
+ -- Bdale Garbee <bdale@gag.com> Mon, 9 Jul 2001 11:30:39 -0600
+
+bind9 (1:9.1.1-1) unstable; urgency=low
+
+ * new upstream release
+ * update build-depends for libssl-dev
+ * add build-depends on bison, closes: #90150, #90752, #90159
+ * split up libbind0 since libdns is changing so numbers
+ * downgrade rblcheck from a depends to a suggests, closes: #90783
+ * bind9 mkdep creates files in the current working directory, closes: #58353
+
+ -- Bdale Garbee <bdale@gag.com> Wed, 25 Apr 2001 22:53:21 -0600
+
+bind9 (1:9.1.0-3) unstable; urgency=low
+
+ * merge patch from Zack Weinberg that solves compilation problem, and
+ reduces the memory footprint of applications by making configure.in
+ smarter. Closes: #86776, #86910
+ * the bind-doc package includes all relevant documentation from the bind9
+ source tree, including HTML content in /usr/share/doc/bind9-doc/arm,
+ closes: #85718
+ * default named.conf and rndc.conf to not world-readable. This is an
+ interim step towards addressing the concerns about security raised by
+ bugs 86718 and closes: #86836 A better long-term solution would be for
+ rndc.conf to allow includes, so that both named.conf and rndc.conf could
+ include a key file built on the fly during installation while themselves
+ retaining conffile status. The required functionality has been requested
+ of the bind9 upstream, this will limit vulnerability in the meantime.
+ * add replaces logic to the dnsutils package to avoid complaints about the
+ delivery of nsupdate.8.gz, closes: #86759
+ * move a couple of man pages back from dnsutils to bind9 that really belong
+ there. sigh.
+
+ -- Bdale Garbee <bdale@gag.com> Thu, 22 Feb 2001 16:39:02 -0700
+
+bind9 (1:9.1.0-2) unstable; urgency=low
+
+ * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks!
+ + bind9: ships with a working rndc.conf file, closes: #84572
+ + bind9: init.d calls rndc rather than ndc on reload, closes: #85481
+ + bind9: named.conf ships with 'key' and 'control' sections
+ + bind9: correctly creates /var/cache/bind, closes: #85457
+ + lwresd: lwresd is split off into its own package, closes: #85627
+ * nsupdate is delivered by the dnsutils package, but the (wrong) man page
+ was accidentally also included in the bind9 package, closes: #85717
+ * freshen config.sub and config.guess for ia64 and hppa support
+
+ -- Bdale Garbee <bdale@gag.com> Mon, 12 Feb 2001 23:43:55 -0700
+
+bind9 (1:9.1.0-1) unstable; urgency=low
+
+ * Initial packaging of BIND 9.1.0. Must use epoch so that meta packages
+ retain their sequencing from the bind 8 package version stream.
+ * snarf a couple of man pages from the 8.X tree for now
+
+ -- Bdale Garbee <bdale@gag.com> Thu, 1 Feb 2001 16:30:35 -0700
+
diff --git a/debian/checkapi b/debian/checkapi
new file mode 100755
index 0000000..52eec8e
--- /dev/null
+++ b/debian/checkapi
@@ -0,0 +1,11 @@
+#!/bin/sh
+ret=0
+for LIB in bind9 dns irs isc lwres isccc isccfg; do
+ OLD_SOVERSION=$(sed -ne "s/Package: lib$LIB[-]*\([0-9]*\)$/\1/p" debian/control)
+ NEW_SOVERSION=$(debian/getapi "${LIB}")
+ if [ "$OLD_SOVERSION" -ne "$NEW_SOVERSION" ]; then
+ echo "ERROR: SONAME of lib$LIB has changed from lib$LIB.so.$OLD_SOVERSION to lib$1.so.$NEW_SOVERSION"
+ ret=1
+ fi
+done
+exit $ret
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..f599e28
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+10
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..73c2a17
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,394 @@
+Source: bind9
+Section: net
+Priority: optional
+Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
+Uploaders: LaMont Jones <lamont@debian.org>,
+ Michael Gilbert <mgilbert@debian.org>,
+ Robie Basak <robie.basak@canonical.com>,
+ Ondřej Surý <ondrej@debian.org>,
+ Bernhard Schmidt <berni@debian.org>
+Build-Depends: bison,
+ debhelper (>= 10),
+ dh-apparmor,
+ dh-exec,
+ dh-python,
+ dpkg-dev (>= 1.16.1~),
+ libcap2-dev [!kfreebsd-i386 !kfreebsd-amd64 !hurd-i386],
+ libdb-dev (>>4.6),
+ libfstrm-dev,
+ libgeoip-dev (>= 1.4.6.dfsg-5),
+ libidn2-dev,
+ libjson-c-dev,
+ libkrb5-dev,
+ libldap2-dev,
+ liblmdb-dev,
+ libprotobuf-c-dev,
+ libssl-dev,
+ libtool,
+ libxml2-dev,
+ protobuf-c-compiler,
+ python3,
+ python3-distutils,
+ python3-ply
+Standards-Version: 4.1.2
+Vcs-Browser: https://salsa.debian.org/dns-team/bind9
+Vcs-Git: https://salsa.debian.org/dns-team/bind9.git
+Homepage: https://www.isc.org/downloads/bind/
+
+Package: bind9
+Architecture: any
+Depends: adduser,
+ bind9utils (= ${binary:Version}),
+ debconf | debconf-2.0,
+ dns-root-data,
+ libbind9-161 (= ${binary:Version}),
+ libdns1104 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccc161 (= ${binary:Version}),
+ libisccfg163 (= ${binary:Version}),
+ liblwres161 (= ${binary:Version}),
+ lsb-base (>= 3.2-14),
+ net-tools,
+ netbase,
+ ${misc:Depends},
+ ${shlibs:Depends}
+Suggests: bind9-doc,
+ dnsutils,
+ resolvconf,
+ ufw
+Description: Internet Domain Name Server
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package provides the server and related configuration files.
+
+Package: bind9utils
+Architecture: any
+Depends: python3,
+ ${misc:Depends},
+ ${python3:Depends},
+ ${shlibs:Depends}
+Description: Utilities for BIND
+ This package provides various utilities that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-doc
+Architecture: all
+Section: doc
+Depends: ${misc:Depends}
+Description: Documentation for BIND
+ This package provides various documents that are useful for maintaining a
+ working BIND installation.
+
+Package: bind9-host
+Priority: standard
+Architecture: any
+Depends: libbind9-161 (= ${binary:Version}),
+ libdns1104 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccfg163 (= ${binary:Version}),
+ liblwres161 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Provides: host
+Description: DNS lookup utility (deprecated)
+ This package provides /usr/bin/host, a simple utility (bundled with the
+ BIND 9.X sources) which can be used for converting domain names to IP
+ addresses and the reverse.
+ .
+ This utility is deprecated, use dig or delv from the dnsutils package.
+
+Package: libbind-dev
+Section: libdevel
+Architecture: any
+Replaces: bind9 (<< 1:9.10.3.dfsg.P2-4)
+Depends: libbind9-161 (= ${binary:Version}),
+ libdns1104 (= ${binary:Version}),
+ libirs161 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccc161 (= ${binary:Version}),
+ libisccfg163 (= ${binary:Version}),
+ liblwres161 (= ${binary:Version}),
+ ${misc:Depends}
+Description: Static Libraries and Headers used by BIND
+ This package delivers archive-style libraries, header files, and API man
+ pages for libbind, libdns, libisc, and liblwres. These are only needed
+ if you want to compile other packages that need more nameserver API than the
+ resolver code provided in libc.
+
+Package: libbind9-161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libdns1104 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccfg163 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: BIND9 Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libbind9 shared library used by BIND's daemons and
+ clients.
+
+Package: libdns1104
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: DNS Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libdns shared library used by BIND's daemons and
+ clients.
+
+Package: libirs161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: DNS Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libirs shared library used by BIND's daemons and
+ clients.
+
+Package: libisc1100
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: ISC Shared Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisc shared library used by BIND's daemons and
+ clients.
+
+Package: liblwres161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: Lightweight Resolver Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the liblwres shared library used by BIND's daemons
+ and clients.
+
+Package: libisccc161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc1100 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccfg163
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libdns1104 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccc161 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: Config File Handling Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccfg shared library used by BIND's daemons
+ and clients to read and write ISC-style configuration files like named.conf
+ and rndc.conf.
+
+Package: dnsutils
+Priority: standard
+Architecture: any
+Depends: bind9-host | host,
+ libbind9-161 (= ${binary:Version}),
+ libdns1104 (= ${binary:Version}),
+ libisc1100 (= ${binary:Version}),
+ libisccfg163 (= ${binary:Version}),
+ liblwres161 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends}
+Suggests: rblcheck
+Breaks: bind9 (<< 1:9.11.2+dfsg-6~)
+Replaces: bind9 (<< 1:9.11.2+dfsg-6)
+Description: Clients provided with BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers various client programs related to DNS that are
+ derived from the BIND source tree.
+ .
+ - dig - query the DNS in various ways
+ - nslookup - the older way to do it
+ - nsupdate - perform dynamic updates (See RFC2136)
+
+Package: libbind-export-dev
+Section: libdevel
+Architecture: any
+Conflicts: libbind-dev
+Depends: libdns-export1104 (= ${binary:Version}),
+ libirs-export161 (= ${binary:Version}),
+ libisc-export1100 (= ${binary:Version}),
+ libisccc-export161 (= ${binary:Version}),
+ libisccfg-export163 (= ${binary:Version}),
+ ${misc:Depends}
+Description: Development files for the exported BIND libraries
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers development files for the exported BIND libraries.
+
+Package: libdns-export1104
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: Exported DNS Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libdns shared library.
+
+Package: libdns-export1104-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported DNS library for debian-installer
+
+Package: libirs-export161
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: Exported IRS Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libirs shared library.
+
+Package: libirs-export161-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported IRS library for debian-installer
+
+Package: libisc-export1100
+Section: libs
+Architecture: any
+Multi-Arch: same
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: Exported ISC Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisc shared library.
+
+Package: libisc-export1100-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported ISC library for debian-installer
+
+Package: libisccc-export161
+Section: libs
+Architecture: any
+Multi-Arch: same
+Depends: libisc-export1100,
+ ${misc:Depends},
+ ${shlibs:Depends}
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccc-export161-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: libisc-export1100-udeb,
+ ${misc:Depends},
+ ${shlibs:Depends}
+Package-Type: udeb
+Description: Command Channel Library used by BIND
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the libisccc shared library used by BIND's daemons
+ and clients, particularly rndc.
+
+Package: libisccfg-export163
+Section: libs
+Architecture: any
+Pre-Depends: ${misc:Pre-Depends}
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Description: Exported ISC CFG Shared Library
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisccfg shared library.
+
+Package: libisccfg-export163-udeb
+Section: debian-installer
+Architecture: any
+Multi-Arch: same
+Depends: ${misc:Depends},
+ ${shlibs:Depends}
+Package-Type: udeb
+Description: Exported ISC CFG library for debian-installer
+ The Berkeley Internet Name Domain (BIND) implements an Internet domain
+ name server. BIND is the most widely-used name server software on the
+ Internet, and is supported by the Internet Software Consortium, www.isc.org.
+ .
+ This package delivers the exported libisccfg shared library.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..3b0579c
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,159 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: BIND
+Upstream-Contact: Internet Systems Consortium <info@isc.org>
+Source: https://ftp.isc.org/isc/bind9/
+Files-Excluded: contrib/idn
+ contrib/dnsperf-2.1.0.0-1
+ contrib/nslint-3.0a2
+ contrib/query-loc-0.4.0
+ contrib/queryperf
+ contrib/zkt-1.1.3
+ doc/arm/Bv9ARM.pdf
+
+Files: *
+Copyright: 2004-2017, Internet Systems Consortium, Inc. ("ISC")
+ 1996-2003, Internet Software Consortium
+ 2012, Vadim Goncharov
+ 2009-2012, John Eaglesham
+ 2008, Damien Miller
+ 2004, 2008, Nominet, Ltd.
+ 2004, Masarykova universita
+ 1997-2003, Kungliga Tekniska Högskolan
+ 2002, Nuno M. Rodrigues.
+ 2002, Stichting NLnet, Netherlands
+ 2000-2002, Japan Network Information Center.
+ 2001, Jake Burkholder
+ 1996-2001, Nominum, Inc.
+ 1995-2000, Network Associates, Inc.
+ 2000, Aaron D. Gifford
+ 1999-2000, Nortel Networks Corporation
+ 1996, David Mazieres
+ 1993, Digital Equipment Corporation.
+ 1990, 1993, The Regents of the University of California.
+License: ISC and BSD-2-clause and BSD-3-clause and BSD-4-clause
+
+Files: bin/tests/system/chain/
+ doc/misc/docbook-options.pl
+Copyright: 2016-2017, Internet Systems Consortium, Inc. ("ISC")
+License: MPL-2.0 or ISC
+
+Files: unit/atf-src/
+Copyright: 2007-2012, The NetBSD Foundation, Inc.
+License: BSD-2-clause
+
+Files: contrib/idn/
+Copyright: 2000-2002, Japan Network Information Center
+License: BSD-4-clause
+
+Files: debian/
+Copyright: 2007-2017 LaMont Jones
+ 2013-2017 Michael Gilbert
+ 2017 Ondřej Surý
+ 2008-2016 Jamie Strandboge
+License: ISC or MPL-2.0
+
+License: ISC
+ Permission to use, copy, modify, and/or distribute this software for any
+ purpose with or without fee is hereby granted, provided that the above
+ copyright notice and this permission notice appear in all copies.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
+ REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+ AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
+ INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+ LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
+ OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+ PERFORMANCE OF THIS SOFTWARE.
+
+License: BSD-2-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-3-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ 3. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+ "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+ LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+ A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+ HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
+ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+ WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ POSSIBILITY OF SUCH DAMAGE.
+
+License: BSD-4-clause
+ Redistribution and use in source and binary forms, with or without
+ modification, are permitted provided that the following conditions
+ are met:
+ .
+ 1. Redistributions of source code must retain the above copyright
+ notice, this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright
+ notice, this list of conditions and the following disclaimer in the
+ documentation and/or other materials provided with the distribution.
+ .
+ 3. All advertising materials mentioning features or use of this
+ software must display the following acknowledgement: This product
+ includes software developed by the the organization .
+ .
+ 4. Neither the name of the copyright holder nor the names of its
+ contributors may be used to endorse or promote products derived from
+ this software without specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY COPYRIGHT HOLDER "AS IS" AND ANY EXPRESS
+ OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ ARE DISCLAIMED. IN NO EVENT SHALL COPYRIGHT HOLDER BE LIABLE FOR ANY
+ DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
+ GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
+ IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
+ OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+ IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License: MPL-2.0
+ This Source Code Form is subject to the terms of the Mozilla Public
+ License, v. 2.0.
+ .
+ On Debian systems, the full copy of MPL-2.0 can be found at
+ /usr/share/common-licenses/MPL-2.0
diff --git a/debian/dnsutils.install b/debian/dnsutils.install
new file mode 100644
index 0000000..90e4fba
--- /dev/null
+++ b/debian/dnsutils.install
@@ -0,0 +1,12 @@
+usr/bin/delv
+usr/bin/dig
+usr/bin/dnstap-read
+usr/bin/mdig
+usr/bin/nslookup
+usr/bin/nsupdate
+usr/share/man/man1/delv.1
+usr/share/man/man1/dig.1
+usr/share/man/man1/dnstap-read.1
+usr/share/man/man1/mdig.1
+usr/share/man/man1/nslookup.1
+usr/share/man/man1/nsupdate.1
diff --git a/debian/export.diff b/debian/export.diff
new file mode 100644
index 0000000..14f5320
--- /dev/null
+++ b/debian/export.diff
@@ -0,0 +1,11 @@
+diff -urNap lib/isccfg/Makefile lib/isccfg/Makefile
+--- lib/isccfg/Makefile 2017-10-04 21:26:10.589804751 +0000
++++ lib/isccfg/Makefile 2017-10-04 21:26:55.969698162 +0000
+@@ -506,6 +506,7 @@ libisccfg-export.la: ${OBJS}
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} ${DNSLIBS} ${ISCLIBS} \
+ ${LIBS}
++ ln -sf .libs/libisccfg-export.so .
+
+ timestamp: libisccfg-export.la
+ touch timestamp
diff --git a/debian/extras/apparmor.d/usr.sbin.named b/debian/extras/apparmor.d/usr.sbin.named
new file mode 100644
index 0000000..a4622da
--- /dev/null
+++ b/debian/extras/apparmor.d/usr.sbin.named
@@ -0,0 +1,94 @@
+# vim:syntax=apparmor
+# Last Modified: Fri Jun 1 16:43:22 2007
+#include <tunables/global>
+
+/usr/sbin/named flags=(attach_disconnected) {
+ #include <abstractions/base>
+ #include <abstractions/nameservice>
+
+ capability net_bind_service,
+ capability setgid,
+ capability setuid,
+ capability sys_chroot,
+ capability sys_resource,
+
+ # /etc/bind should be read-only for bind
+ # /var/lib/bind is for dynamically updated zone (and journal) files.
+ # /var/cache/bind is for slave/stub data, since we're not the origin of it.
+ # See /usr/share/doc/bind9/README.Debian.gz
+ /etc/bind/** r,
+ /var/lib/bind/** rw,
+ /var/lib/bind/ rw,
+ /var/cache/bind/** lrw,
+ /var/cache/bind/ rw,
+
+ # Database file used by allow-new-zones
+ /var/cache/bind/_default.nzd-lock rwk,
+
+ # gssapi
+ /etc/krb5.keytab kr,
+ /etc/bind/krb5.keytab kr,
+
+ # ssl
+ /etc/ssl/openssl.cnf r,
+
+ # root hints from dns-data-root
+ /usr/share/dns/root.* r,
+
+ # GeoIP data files for GeoIP ACLs
+ /usr/share/GeoIP/** r,
+
+ # dnscvsutil package
+ /var/lib/dnscvsutil/compiled/** rw,
+
+ # Allow changing worker thread names
+ owner @{PROC}/@{pid}/task/@{tid}/comm rw,
+
+ @{PROC}/net/if_inet6 r,
+ @{PROC}/*/net/if_inet6 r,
+ @{PROC}/sys/net/ipv4/ip_local_port_range r,
+ /usr/sbin/named mr,
+ /{,var/}run/named/named.pid w,
+ /{,var/}run/named/session.key w,
+ # support for resolvconf
+ /{,var/}run/named/named.options r,
+
+ # some people like to put logs in /var/log/named/ instead of having
+ # syslog do the heavy lifting.
+ /var/log/named/** rw,
+ /var/log/named/ rw,
+
+ # gssapi
+ /var/lib/sss/pubconf/krb5.include.d/** r,
+ /var/lib/sss/pubconf/krb5.include.d/ r,
+ /var/lib/sss/mc/initgroups r,
+ /etc/gss/mech.d/ r,
+
+ # ldap
+ /etc/ldap/ldap.conf r,
+ /{,var/}run/slapd-*.socket rw,
+
+ # dynamic updates
+ /var/tmp/DNS_* rw,
+
+ # dyndb backends
+ /usr/lib/bind/*.so rm,
+
+ # Samba DLZ
+ /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm,
+ /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm,
+ /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm,
+ /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm,
+ /var/lib/samba/bind-dns/dns.keytab rk,
+ /var/lib/samba/bind-dns/named.conf r,
+ /var/lib/samba/bind-dns/dns/** rwk,
+ /var/lib/samba/private/dns.keytab rk,
+ /var/lib/samba/private/named.conf r,
+ /var/lib/samba/private/dns/** rwk,
+ /etc/samba/smb.conf r,
+ /dev/urandom rwmk,
+ owner /var/tmp/krb5_* rwk,
+
+ # Site-specific additions and overrides. See local/README for details.
+ #include <local/usr.sbin.named>
+}
diff --git a/debian/extras/etc/db.0 b/debian/extras/etc/db.0
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.0
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL 604800
+@ IN SOA localhost. root.localhost. (
+ 1 ; Serial
+ 604800 ; Refresh
+ 86400 ; Retry
+ 2419200 ; Expire
+ 604800 ) ; Negative Cache TTL
+;
+@ IN NS localhost.
diff --git a/debian/extras/etc/db.127 b/debian/extras/etc/db.127
new file mode 100644
index 0000000..cd05bef
--- /dev/null
+++ b/debian/extras/etc/db.127
@@ -0,0 +1,13 @@
+;
+; BIND reverse data file for local loopback interface
+;
+$TTL 604800
+@ IN SOA localhost. root.localhost. (
+ 1 ; Serial
+ 604800 ; Refresh
+ 86400 ; Retry
+ 2419200 ; Expire
+ 604800 ) ; Negative Cache TTL
+;
+@ IN NS localhost.
+1.0.0 IN PTR localhost.
diff --git a/debian/extras/etc/db.255 b/debian/extras/etc/db.255
new file mode 100644
index 0000000..e3aabdb
--- /dev/null
+++ b/debian/extras/etc/db.255
@@ -0,0 +1,12 @@
+;
+; BIND reverse data file for broadcast zone
+;
+$TTL 604800
+@ IN SOA localhost. root.localhost. (
+ 1 ; Serial
+ 604800 ; Refresh
+ 86400 ; Retry
+ 2419200 ; Expire
+ 604800 ) ; Negative Cache TTL
+;
+@ IN NS localhost.
diff --git a/debian/extras/etc/db.empty b/debian/extras/etc/db.empty
new file mode 100644
index 0000000..8a12858
--- /dev/null
+++ b/debian/extras/etc/db.empty
@@ -0,0 +1,14 @@
+; BIND reverse data file for empty rfc1918 zone
+;
+; DO NOT EDIT THIS FILE - it is used for multiple zones.
+; Instead, copy it, edit named.conf, and use that copy.
+;
+$TTL 86400
+@ IN SOA localhost. root.localhost. (
+ 1 ; Serial
+ 604800 ; Refresh
+ 86400 ; Retry
+ 2419200 ; Expire
+ 86400 ) ; Negative Cache TTL
+;
+@ IN NS localhost.
diff --git a/debian/extras/etc/db.local b/debian/extras/etc/db.local
new file mode 100644
index 0000000..2f272d4
--- /dev/null
+++ b/debian/extras/etc/db.local
@@ -0,0 +1,14 @@
+;
+; BIND data file for local loopback interface
+;
+$TTL 604800
+@ IN SOA localhost. root.localhost. (
+ 2 ; Serial
+ 604800 ; Refresh
+ 86400 ; Retry
+ 2419200 ; Expire
+ 604800 ) ; Negative Cache TTL
+;
+@ IN NS localhost.
+@ IN A 127.0.0.1
+@ IN AAAA ::1
diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf
new file mode 100644
index 0000000..880786a
--- /dev/null
+++ b/debian/extras/etc/named.conf
@@ -0,0 +1,11 @@
+// This is the primary configuration file for the BIND DNS server named.
+//
+// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
+// structure of BIND configuration files in Debian, *BEFORE* you customize
+// this configuration file.
+//
+// If you are just adding zones, please do that in /etc/bind/named.conf.local
+
+include "/etc/bind/named.conf.options";
+include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.default-zones";
diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.default-zones
new file mode 100644
index 0000000..1a85ad3
--- /dev/null
+++ b/debian/extras/etc/named.conf.default-zones
@@ -0,0 +1,30 @@
+// prime the server with knowledge of the root servers
+zone "." {
+ type hint;
+ file "/usr/share/dns/root.hints";
+};
+
+// be authoritative for the localhost forward and reverse zones, and for
+// broadcast zones as per RFC 1912
+
+zone "localhost" {
+ type master;
+ file "/etc/bind/db.local";
+};
+
+zone "127.in-addr.arpa" {
+ type master;
+ file "/etc/bind/db.127";
+};
+
+zone "0.in-addr.arpa" {
+ type master;
+ file "/etc/bind/db.0";
+};
+
+zone "255.in-addr.arpa" {
+ type master;
+ file "/etc/bind/db.255";
+};
+
+
diff --git a/debian/extras/etc/named.conf.local b/debian/extras/etc/named.conf.local
new file mode 100644
index 0000000..7a57b10
--- /dev/null
+++ b/debian/extras/etc/named.conf.local
@@ -0,0 +1,8 @@
+//
+// Do any local configuration here
+//
+
+// Consider adding the 1918 zones here, if they are not used in your
+// organization
+//include "/etc/bind/zones.rfc1918";
+
diff --git a/debian/extras/etc/named.conf.options b/debian/extras/etc/named.conf.options
new file mode 100644
index 0000000..4778d18
--- /dev/null
+++ b/debian/extras/etc/named.conf.options
@@ -0,0 +1,24 @@
+options {
+ directory "/var/cache/bind";
+
+ // If there is a firewall between you and nameservers you want
+ // to talk to, you may need to fix the firewall to allow multiple
+ // ports to talk. See http://www.kb.cert.org/vuls/id/800113
+
+ // If your ISP provided one or more IP addresses for stable
+ // nameservers, you probably want to use them as forwarders.
+ // Uncomment the following block, and insert the addresses replacing
+ // the all-0's placeholder.
+
+ // forwarders {
+ // 0.0.0.0;
+ // };
+
+ //========================================================================
+ // If BIND logs error messages about the root key being expired,
+ // you will need to update your keys. See https://www.isc.org/bind-keys
+ //========================================================================
+ dnssec-validation auto;
+
+ listen-on-v6 { any; };
+};
diff --git a/debian/extras/etc/zones.rfc1918 b/debian/extras/etc/zones.rfc1918
new file mode 100644
index 0000000..03b5546
--- /dev/null
+++ b/debian/extras/etc/zones.rfc1918
@@ -0,0 +1,20 @@
+zone "10.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+
+zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
+
+zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; };
diff --git a/debian/extras/if-reconfig.d/bind9 b/debian/extras/if-reconfig.d/bind9
new file mode 100755
index 0000000..d06965f
--- /dev/null
+++ b/debian/extras/if-reconfig.d/bind9
@@ -0,0 +1,15 @@
+#!/bin/sh -e
+# Called when an interfaces comes up or down
+# Written by LaMont Jones <lamont@debian.org>
+
+# kick named as needed
+
+# If /usr isn't mounted yet, silently bail.
+if [ ! -d /usr/sbin ]; then
+ exit 0
+fi
+
+# if named is running, reconfig it.
+rndc reconfig >/dev/null 2>&1 &
+
+exit 0
diff --git a/debian/extras/insserv.conf.d/bind9 b/debian/extras/insserv.conf.d/bind9
new file mode 100644
index 0000000..1861a99
--- /dev/null
+++ b/debian/extras/insserv.conf.d/bind9
@@ -0,0 +1 @@
+$named bind9
diff --git a/debian/extras/ufw/bind9 b/debian/extras/ufw/bind9
new file mode 100644
index 0000000..6cd6fca
--- /dev/null
+++ b/debian/extras/ufw/bind9
@@ -0,0 +1,5 @@
+[Bind9]
+title=Internet Domain Name Server
+description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server.
+ports=53
+
diff --git a/debian/gbp.conf b/debian/gbp.conf
new file mode 100644
index 0000000..bddd585
--- /dev/null
+++ b/debian/gbp.conf
@@ -0,0 +1,4 @@
+[DEFAULT]
+debian-branch = debian/buster
+pristine-tar = True
+upstream-branch = upstream/buster
diff --git a/debian/getapi b/debian/getapi
new file mode 100755
index 0000000..3c1456a
--- /dev/null
+++ b/debian/getapi
@@ -0,0 +1,8 @@
+#!/bin/sh
+CURRENT=$(sed -ne "s/^LIBINTERFACE = //p" lib/$1/api)
+REVISION=$(sed -ne "s/^LIBREVISION = //p" lib/$1/api)
+AGE=$(sed -ne "s/^LIBAGE = //p" lib/$1/api)
+
+echo $((${CURRENT}-${AGE}))
+
+exit 0
diff --git a/debian/libbind-dev.README.Debian b/debian/libbind-dev.README.Debian
new file mode 100644
index 0000000..ff47ab5
--- /dev/null
+++ b/debian/libbind-dev.README.Debian
@@ -0,0 +1,9 @@
+The include files for BIND are in /usr/include/{isc,dns,dst,lwres}. If
+you're compiling something that uses them, use something like
+
+ '-I/usr/include/isc'
+
+and so on in the call to the compiler to pick up the BIND versions before
+the normal system versions for files that have conflicting filenames.
+
+
diff --git a/debian/libbind-dev.install b/debian/libbind-dev.install
new file mode 100644
index 0000000..0b706db
--- /dev/null
+++ b/debian/libbind-dev.install
@@ -0,0 +1,21 @@
+usr/bin/isc-config.sh
+usr/include
+usr/lib/*/libbind9.a
+usr/lib/*/libbind9.so
+usr/lib/*/libdns-pkcs11.a
+usr/lib/*/libdns-pkcs11.so
+usr/lib/*/libdns.a
+usr/lib/*/libdns.so
+usr/lib/*/libirs.a
+usr/lib/*/libirs.so
+usr/lib/*/libisc-pkcs11.a
+usr/lib/*/libisc-pkcs11.so
+usr/lib/*/libisc.a
+usr/lib/*/libisc.so
+usr/lib/*/libisccc.a
+usr/lib/*/libisccc.so
+usr/lib/*/libisccfg.a
+usr/lib/*/libisccfg.so
+usr/lib/*/liblwres.a
+usr/lib/*/liblwres.so
+usr/share/man/man3
diff --git a/debian/libbind-export-dev.install b/debian/libbind-export-dev.install
new file mode 100755
index 0000000..90b2efb
--- /dev/null
+++ b/debian/libbind-export-dev.install
@@ -0,0 +1,4 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/*-export.a usr/lib/${DEB_HOST_MULTIARCH}
+../tmp-udeb/lib/*/*-export.so usr/lib/${DEB_HOST_MULTIARCH}
+../tmp-udeb/usr/include/bind-export usr/include
diff --git a/debian/libbind9-161.install b/debian/libbind9-161.install
new file mode 100644
index 0000000..f6fa55a
--- /dev/null
+++ b/debian/libbind9-161.install
@@ -0,0 +1 @@
+usr/lib/*/libbind9.so.*
diff --git a/debian/libbind9-161.symbols b/debian/libbind9-161.symbols
new file mode 100644
index 0000000..fd6ae78
--- /dev/null
+++ b/debian/libbind9-161.symbols
@@ -0,0 +1,8 @@
+libbind9.so.161 libbind9-161 #MINVER#
+ bind9_check_key@Base 1:9.10.6+dfsg
+ bind9_check_namedconf@Base 1:9.10.6+dfsg
+ bind9_getaddresses@Base 1:9.10.6+dfsg
+ bind9_libage@Base 1:9.10.6+dfsg
+ bind9_libinterface@Base 1:9.10.6+dfsg
+ bind9_librevision@Base 1:9.10.6+dfsg
+ bind9_version@Base 1:9.10.6+dfsg
diff --git a/debian/libdns-export1104-udeb.install b/debian/libdns-export1104-udeb.install
new file mode 100755
index 0000000..d29ae61
--- /dev/null
+++ b/debian/libdns-export1104-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libdns-export1104.install b/debian/libdns-export1104.install
new file mode 100755
index 0000000..d29ae61
--- /dev/null
+++ b/debian/libdns-export1104.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libdns-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libdns1104.install b/debian/libdns1104.install
new file mode 100644
index 0000000..ea2d435
--- /dev/null
+++ b/debian/libdns1104.install
@@ -0,0 +1,2 @@
+usr/lib/*/libdns-pkcs11.so.*
+usr/lib/*/libdns.so.*
diff --git a/debian/libdns1104.symbols b/debian/libdns1104.symbols
new file mode 100644
index 0000000..d630917
--- /dev/null
+++ b/debian/libdns1104.symbols
@@ -0,0 +1,3173 @@
+libdns-pkcs11.so.1104 libdns1104 #MINVER#
+ dns__rbt_checkproperties@Base 1:9.11.3+dfsg
+ dns__rbt_getheight@Base 1:9.11.3+dfsg
+ dns__rbtnode_getdistance@Base 1:9.11.3+dfsg
+ dns__zone_findkeys@Base 1:9.11.4+dfsg
+ dns__zone_loadpending@Base 1:9.11.3+dfsg
+ dns__zone_updatesigs@Base 1:9.11.4+dfsg
+ dns_acache_attach@Base 1:9.11.3+dfsg
+ dns_acache_attachentry@Base 1:9.11.3+dfsg
+ dns_acache_cancelentry@Base 1:9.11.3+dfsg
+ dns_acache_countquerymiss@Base 1:9.11.3+dfsg
+ dns_acache_create@Base 1:9.11.3+dfsg
+ dns_acache_createentry@Base 1:9.11.3+dfsg
+ dns_acache_detach@Base 1:9.11.3+dfsg
+ dns_acache_detachentry@Base 1:9.11.3+dfsg
+ dns_acache_getentry@Base 1:9.11.3+dfsg
+ dns_acache_putdb@Base 1:9.11.3+dfsg
+ dns_acache_setcachesize@Base 1:9.11.3+dfsg
+ dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_acache_setdb@Base 1:9.11.3+dfsg
+ dns_acache_setentry@Base 1:9.11.3+dfsg
+ dns_acache_shutdown@Base 1:9.11.3+dfsg
+ dns_acl_any@Base 1:9.11.3+dfsg
+ dns_acl_attach@Base 1:9.11.3+dfsg
+ dns_acl_create@Base 1:9.11.3+dfsg
+ dns_acl_detach@Base 1:9.11.3+dfsg
+ dns_acl_isany@Base 1:9.11.3+dfsg
+ dns_acl_isinsecure@Base 1:9.11.3+dfsg
+ dns_acl_isnone@Base 1:9.11.3+dfsg
+ dns_acl_match2@Base 1:9.11.3+dfsg
+ dns_acl_match@Base 1:9.11.3+dfsg
+ dns_acl_merge@Base 1:9.11.3+dfsg
+ dns_acl_none@Base 1:9.11.3+dfsg
+ dns_aclelement_match2@Base 1:9.11.3+dfsg
+ dns_aclelement_match@Base 1:9.11.3+dfsg
+ dns_aclenv_copy@Base 1:9.11.3+dfsg
+ dns_aclenv_destroy@Base 1:9.11.3+dfsg
+ dns_aclenv_init@Base 1:9.11.3+dfsg
+ dns_adb_adjustsrtt@Base 1:9.11.3+dfsg
+ dns_adb_agesrtt@Base 1:9.11.3+dfsg
+ dns_adb_attach@Base 1:9.11.3+dfsg
+ dns_adb_beginudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_cancelfind@Base 1:9.11.3+dfsg
+ dns_adb_changeflags@Base 1:9.11.3+dfsg
+ dns_adb_create@Base 1:9.11.3+dfsg
+ dns_adb_createfind2@Base 1:9.11.3+dfsg
+ dns_adb_createfind@Base 1:9.11.3+dfsg
+ dns_adb_destroyfind@Base 1:9.11.3+dfsg
+ dns_adb_detach@Base 1:9.11.3+dfsg
+ dns_adb_dump@Base 1:9.11.3+dfsg
+ dns_adb_dumpfind@Base 1:9.11.3+dfsg
+ dns_adb_ednsto@Base 1:9.11.3+dfsg
+ dns_adb_endudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_findaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_flush@Base 1:9.11.3+dfsg
+ dns_adb_flushname@Base 1:9.11.3+dfsg
+ dns_adb_flushnames@Base 1:9.11.3+dfsg
+ dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_getcookie@Base 1:9.11.3+dfsg
+ dns_adb_getudpsize@Base 1:9.11.3+dfsg
+ dns_adb_marklame@Base 1:9.11.3+dfsg
+ dns_adb_noedns@Base 1:9.11.3+dfsg
+ dns_adb_plainresponse@Base 1:9.11.3+dfsg
+ dns_adb_probesize2@Base 1:9.11.3+dfsg
+ dns_adb_probesize@Base 1:9.11.3+dfsg
+ dns_adb_setadbsize@Base 1:9.11.3+dfsg
+ dns_adb_setcookie@Base 1:9.11.3+dfsg
+ dns_adb_setquota@Base 1:9.11.3+dfsg
+ dns_adb_setudpsize@Base 1:9.11.3+dfsg
+ dns_adb_shutdown@Base 1:9.11.3+dfsg
+ dns_adb_timeout@Base 1:9.11.3+dfsg
+ dns_adb_whenshutdown@Base 1:9.11.3+dfsg
+ dns_adbentry_overquota@Base 1:9.11.3+dfsg
+ dns_badcache_add@Base 1:9.11.3+dfsg
+ dns_badcache_destroy@Base 1:9.11.3+dfsg
+ dns_badcache_find@Base 1:9.11.3+dfsg
+ dns_badcache_flush@Base 1:9.11.3+dfsg
+ dns_badcache_flushname@Base 1:9.11.3+dfsg
+ dns_badcache_flushtree@Base 1:9.11.3+dfsg
+ dns_badcache_init@Base 1:9.11.3+dfsg
+ dns_badcache_print@Base 1:9.11.3+dfsg
+ dns_byaddr_cancel@Base 1:9.11.3+dfsg
+ dns_byaddr_create@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname2@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname@Base 1:9.11.3+dfsg
+ dns_byaddr_destroy@Base 1:9.11.3+dfsg
+ dns_cache_attach@Base 1:9.11.3+dfsg
+ dns_cache_attachdb@Base 1:9.11.3+dfsg
+ dns_cache_clean@Base 1:9.11.3+dfsg
+ dns_cache_create2@Base 1:9.11.3+dfsg
+ dns_cache_create3@Base 1:9.11.3+dfsg
+ dns_cache_create@Base 1:9.11.3+dfsg
+ dns_cache_detach@Base 1:9.11.3+dfsg
+ dns_cache_dump@Base 1:9.11.3+dfsg
+ dns_cache_dumpstats@Base 1:9.11.3+dfsg
+ dns_cache_flush@Base 1:9.11.3+dfsg
+ dns_cache_flushname@Base 1:9.11.3+dfsg
+ dns_cache_flushnode@Base 1:9.11.3+dfsg
+ dns_cache_getcachesize@Base 1:9.11.3+dfsg
+ dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_getname@Base 1:9.11.3+dfsg
+ dns_cache_getstats@Base 1:9.11.3+dfsg
+ dns_cache_load@Base 1:9.11.3+dfsg
+ dns_cache_renderjson@Base 1:9.11.3+dfsg
+ dns_cache_renderxml@Base 1:9.11.3+dfsg
+ dns_cache_setcachesize@Base 1:9.11.3+dfsg
+ dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_setfilename@Base 1:9.11.3+dfsg
+ dns_cache_updatestats@Base 1:9.11.3+dfsg
+ dns_categories@Base 1:9.11.3+dfsg
+ dns_catz_add_zone@Base 1:9.11.3+dfsg
+ dns_catz_catzs_attach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_detach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_set_view@Base 1:9.11.3+dfsg
+ dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg
+ dns_catz_entry_attach@Base 1:9.11.3+dfsg
+ dns_catz_entry_cmp@Base 1:9.11.3+dfsg
+ dns_catz_entry_copy@Base 1:9.11.3+dfsg
+ dns_catz_entry_detach@Base 1:9.11.3+dfsg
+ dns_catz_entry_getname@Base 1:9.11.3+dfsg
+ dns_catz_entry_new@Base 1:9.11.3+dfsg
+ dns_catz_entry_validate@Base 1:9.11.3+dfsg
+ dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg
+ dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg
+ dns_catz_get_iterator@Base 1:9.11.3+dfsg
+ dns_catz_get_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zones@Base 1:9.11.3+dfsg
+ dns_catz_options_copy@Base 1:9.11.3+dfsg
+ dns_catz_options_free@Base 1:9.11.3+dfsg
+ dns_catz_options_init@Base 1:9.11.3+dfsg
+ dns_catz_options_setdefault@Base 1:9.11.3+dfsg
+ dns_catz_postreconfig@Base 1:9.11.3+dfsg
+ dns_catz_prereconfig@Base 1:9.11.3+dfsg
+ dns_catz_update_from_db@Base 1:9.11.3+dfsg
+ dns_catz_update_process@Base 1:9.11.3+dfsg
+ dns_catz_update_taskaction@Base 1:9.11.3+dfsg
+ dns_catz_zone_attach@Base 1:9.11.3+dfsg
+ dns_catz_zone_detach@Base 1:9.11.3+dfsg
+ dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zone_getname@Base 1:9.11.3+dfsg
+ dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zones_merge@Base 1:9.11.3+dfsg
+ dns_cert_fromtext@Base 1:9.11.3+dfsg
+ dns_cert_totext@Base 1:9.11.3+dfsg
+ dns_client_addtrustedkey@Base 1:9.11.3+dfsg
+ dns_client_cancelrequest@Base 1:9.11.3+dfsg
+ dns_client_cancelresolve@Base 1:9.11.3+dfsg
+ dns_client_cancelupdate@Base 1:9.11.3+dfsg
+ dns_client_clearservers@Base 1:9.11.3+dfsg
+ dns_client_create@Base 1:9.11.3+dfsg
+ dns_client_createx2@Base 1:9.11.3+dfsg
+ dns_client_createx@Base 1:9.11.3+dfsg
+ dns_client_destroy@Base 1:9.11.3+dfsg
+ dns_client_destroyreqtrans@Base 1:9.11.3+dfsg
+ dns_client_destroyrestrans@Base 1:9.11.3+dfsg
+ dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg
+ dns_client_freeresanswer@Base 1:9.11.3+dfsg
+ dns_client_freeupdate@Base 1:9.11.3+dfsg
+ dns_client_mctx@Base 1:9.11.3+dfsg
+ dns_client_request@Base 1:9.11.3+dfsg
+ dns_client_resolve@Base 1:9.11.3+dfsg
+ dns_client_setdlv@Base 1:9.11.3+dfsg
+ dns_client_setservers@Base 1:9.11.3+dfsg
+ dns_client_startrequest@Base 1:9.11.3+dfsg
+ dns_client_startresolve@Base 1:9.11.3+dfsg
+ dns_client_startupdate@Base 1:9.11.3+dfsg
+ dns_client_update@Base 1:9.11.3+dfsg
+ dns_client_updaterec@Base 1:9.11.3+dfsg
+ dns_clientinfo_init@Base 1:9.11.3+dfsg
+ dns_clientinfomethods_init@Base 1:9.11.3+dfsg
+ dns_compress_add@Base 1:9.11.3+dfsg
+ dns_compress_disable@Base 1:9.11.3+dfsg
+ dns_compress_findglobal@Base 1:9.11.3+dfsg
+ dns_compress_getedns@Base 1:9.11.3+dfsg
+ dns_compress_getmethods@Base 1:9.11.3+dfsg
+ dns_compress_getsensitive@Base 1:9.11.3+dfsg
+ dns_compress_init@Base 1:9.11.3+dfsg
+ dns_compress_invalidate@Base 1:9.11.3+dfsg
+ dns_compress_rollback@Base 1:9.11.3+dfsg
+ dns_compress_setmethods@Base 1:9.11.3+dfsg
+ dns_compress_setsensitive@Base 1:9.11.3+dfsg
+ dns_counter_fromtext@Base 1:9.11.3+dfsg
+ dns_db_addrdataset@Base 1:9.11.3+dfsg
+ dns_db_allrdatasets@Base 1:9.11.3+dfsg
+ dns_db_attach@Base 1:9.11.3+dfsg
+ dns_db_attachnode@Base 1:9.11.3+dfsg
+ dns_db_attachversion@Base 1:9.11.3+dfsg
+ dns_db_beginload@Base 1:9.11.3+dfsg
+ dns_db_class@Base 1:9.11.3+dfsg
+ dns_db_closeversion@Base 1:9.11.3+dfsg
+ dns_db_create@Base 1:9.11.3+dfsg
+ dns_db_createiterator@Base 1:9.11.3+dfsg
+ dns_db_createsoatuple@Base 1:9.11.3+dfsg
+ dns_db_currentversion@Base 1:9.11.3+dfsg
+ dns_db_deleterdataset@Base 1:9.11.3+dfsg
+ dns_db_detach@Base 1:9.11.3+dfsg
+ dns_db_detachnode@Base 1:9.11.3+dfsg
+ dns_db_diff@Base 1:9.11.3+dfsg
+ dns_db_diffx@Base 1:9.11.3+dfsg
+ dns_db_dump2@Base 1:9.11.3+dfsg
+ dns_db_dump@Base 1:9.11.3+dfsg
+ dns_db_endload@Base 1:9.11.3+dfsg
+ dns_db_expirenode@Base 1:9.11.3+dfsg
+ dns_db_find@Base 1:9.11.3+dfsg
+ dns_db_findext@Base 1:9.11.3+dfsg
+ dns_db_findnode@Base 1:9.11.3+dfsg
+ dns_db_findnodeext@Base 1:9.11.3+dfsg
+ dns_db_findnsec3node@Base 1:9.11.3+dfsg
+ dns_db_findrdataset@Base 1:9.11.3+dfsg
+ dns_db_findzonecut@Base 1:9.11.3+dfsg
+ dns_db_getnsec3parameters@Base 1:9.11.3+dfsg
+ dns_db_getoriginnode@Base 1:9.11.3+dfsg
+ dns_db_getrrsetstats@Base 1:9.11.3+dfsg
+ dns_db_getsigningtime@Base 1:9.11.3+dfsg
+ dns_db_getsize@Base 1:9.11.3+dfsg
+ dns_db_getsoaserial@Base 1:9.11.3+dfsg
+ dns_db_hashsize@Base 1:9.11.3+dfsg
+ dns_db_iscache@Base 1:9.11.3+dfsg
+ dns_db_isdnssec@Base 1:9.11.3+dfsg
+ dns_db_ispersistent@Base 1:9.11.3+dfsg
+ dns_db_issecure@Base 1:9.11.3+dfsg
+ dns_db_isstub@Base 1:9.11.3+dfsg
+ dns_db_iszone@Base 1:9.11.3+dfsg
+ dns_db_load2@Base 1:9.11.3+dfsg
+ dns_db_load3@Base 1:9.11.3+dfsg
+ dns_db_load@Base 1:9.11.3+dfsg
+ dns_db_newversion@Base 1:9.11.3+dfsg
+ dns_db_nodecount@Base 1:9.11.3+dfsg
+ dns_db_nodefullname@Base 1:9.11.3+dfsg
+ dns_db_ondestroy@Base 1:9.11.3+dfsg
+ dns_db_origin@Base 1:9.11.3+dfsg
+ dns_db_overmem@Base 1:9.11.3+dfsg
+ dns_db_printnode@Base 1:9.11.3+dfsg
+ dns_db_register@Base 1:9.11.3+dfsg
+ dns_db_resigned@Base 1:9.11.3+dfsg
+ dns_db_rpz_attach@Base 1:9.11.3+dfsg
+ dns_db_rpz_ready@Base 1:9.11.3+dfsg
+ dns_db_serialize@Base 1:9.11.3+dfsg
+ dns_db_setcachestats@Base 1:9.11.3+dfsg
+ dns_db_setsigningtime@Base 1:9.11.3+dfsg
+ dns_db_settask@Base 1:9.11.3+dfsg
+ dns_db_subtractrdataset@Base 1:9.11.3+dfsg
+ dns_db_transfernode@Base 1:9.11.3+dfsg
+ dns_db_unregister@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_register@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg
+ dns_dbiterator_current@Base 1:9.11.3+dfsg
+ dns_dbiterator_destroy@Base 1:9.11.3+dfsg
+ dns_dbiterator_first@Base 1:9.11.3+dfsg
+ dns_dbiterator_last@Base 1:9.11.3+dfsg
+ dns_dbiterator_next@Base 1:9.11.3+dfsg
+ dns_dbiterator_origin@Base 1:9.11.3+dfsg
+ dns_dbiterator_pause@Base 1:9.11.3+dfsg
+ dns_dbiterator_prev@Base 1:9.11.3+dfsg
+ dns_dbiterator_seek@Base 1:9.11.3+dfsg
+ dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg
+ dns_dbtable_add@Base 1:9.11.3+dfsg
+ dns_dbtable_adddefault@Base 1:9.11.3+dfsg
+ dns_dbtable_attach@Base 1:9.11.3+dfsg
+ dns_dbtable_create@Base 1:9.11.3+dfsg
+ dns_dbtable_detach@Base 1:9.11.3+dfsg
+ dns_dbtable_find@Base 1:9.11.3+dfsg
+ dns_dbtable_getdefault@Base 1:9.11.3+dfsg
+ dns_dbtable_remove@Base 1:9.11.3+dfsg
+ dns_dbtable_removedefault@Base 1:9.11.3+dfsg
+ dns_decompress_edns@Base 1:9.11.3+dfsg
+ dns_decompress_getmethods@Base 1:9.11.3+dfsg
+ dns_decompress_init@Base 1:9.11.3+dfsg
+ dns_decompress_invalidate@Base 1:9.11.3+dfsg
+ dns_decompress_setmethods@Base 1:9.11.3+dfsg
+ dns_decompress_type@Base 1:9.11.3+dfsg
+ dns_diff_append@Base 1:9.11.3+dfsg
+ dns_diff_appendminimal@Base 1:9.11.3+dfsg
+ dns_diff_apply@Base 1:9.11.3+dfsg
+ dns_diff_applysilently@Base 1:9.11.3+dfsg
+ dns_diff_clear@Base 1:9.11.3+dfsg
+ dns_diff_init@Base 1:9.11.3+dfsg
+ dns_diff_load@Base 1:9.11.3+dfsg
+ dns_diff_print@Base 1:9.11.3+dfsg
+ dns_diff_sort@Base 1:9.11.3+dfsg
+ dns_difftuple_copy@Base 1:9.11.3+dfsg
+ dns_difftuple_create@Base 1:9.11.3+dfsg
+ dns_difftuple_free@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse2@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse3@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_attach@Base 1:9.11.3+dfsg
+ dns_dispatch_cancel@Base 1:9.11.3+dfsg
+ dns_dispatch_changeattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp@Base 1:9.11.3+dfsg
+ dns_dispatch_detach@Base 1:9.11.3+dfsg
+ dns_dispatch_getattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_getdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg
+ dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg
+ dns_dispatch_getnext@Base 1:9.11.3+dfsg
+ dns_dispatch_getsocket@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg
+ dns_dispatch_importrecv@Base 1:9.11.3+dfsg
+ dns_dispatch_removeresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_setdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_starttcp@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_create@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg
+ dns_dispatchset_cancelall@Base 1:9.11.3+dfsg
+ dns_dispatchset_create@Base 1:9.11.3+dfsg
+ dns_dispatchset_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchset_get@Base 1:9.11.3+dfsg
+ dns_dlz_ssumatch@Base 1:9.11.3+dfsg
+ dns_dlz_writeablezone@Base 1:9.11.3+dfsg
+ dns_dlzallowzonexfr@Base 1:9.11.3+dfsg
+ dns_dlzconfigure@Base 1:9.11.3+dfsg
+ dns_dlzcreate@Base 1:9.11.3+dfsg
+ dns_dlzdestroy@Base 1:9.11.3+dfsg
+ dns_dlzregister@Base 1:9.11.3+dfsg
+ dns_dlzstrtoargv@Base 1:9.11.3+dfsg
+ dns_dlzunregister@Base 1:9.11.3+dfsg
+ dns_dns64_aaaafroma@Base 1:9.11.3+dfsg
+ dns_dns64_aaaaok@Base 1:9.11.3+dfsg
+ dns_dns64_append@Base 1:9.11.3+dfsg
+ dns_dns64_create@Base 1:9.11.3+dfsg
+ dns_dns64_destroy@Base 1:9.11.3+dfsg
+ dns_dns64_next@Base 1:9.11.3+dfsg
+ dns_dns64_unlink@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_keyactive@Base 1:9.11.3+dfsg
+ dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg
+ dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg
+ dns_dnssec_selfsigns@Base 1:9.11.3+dfsg
+ dns_dnssec_sign@Base 1:9.11.3+dfsg
+ dns_dnssec_signmessage@Base 1:9.11.3+dfsg
+ dns_dnssec_signs@Base 1:9.11.3+dfsg
+ dns_dnssec_stats@Base 1:9.11.3+dfsg
+ dns_dnssec_syncupdate@Base 1:9.11.3+dfsg
+ dns_dnssec_updatekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_verify2@Base 1:9.11.3+dfsg
+ dns_dnssec_verify3@Base 1:9.11.3+dfsg
+ dns_dnssec_verify@Base 1:9.11.3+dfsg
+ dns_dnssec_verifymessage@Base 1:9.11.3+dfsg
+ dns_dnsseckey_create@Base 1:9.11.3+dfsg
+ dns_dnsseckey_destroy@Base 1:9.11.3+dfsg
+ dns_ds_buildrdata@Base 1:9.11.3+dfsg
+ dns_dsdigest_format@Base 1:9.11.3+dfsg
+ dns_dsdigest_fromtext@Base 1:9.11.3+dfsg
+ dns_dsdigest_totext@Base 1:9.11.3+dfsg
+ dns_dt_attach@Base 1:9.11.4.P1
+ dns_dt_close@Base 1:9.11.4.P1
+ dns_dt_create@Base 1:9.11.4.P1
+ dns_dt_datatotext@Base 1:9.11.4.P1
+ dns_dt_detach@Base 1:9.11.4.P1
+ dns_dt_getframe@Base 1:9.11.4.P1
+ dns_dt_getstats@Base 1:9.11.4.P1
+ dns_dt_open@Base 1:9.11.4.P1
+ dns_dt_parse@Base 1:9.11.4.P1
+ dns_dt_reopen@Base 1:9.11.4.P1
+ dns_dt_send@Base 1:9.11.4.P1
+ dns_dt_setidentity@Base 1:9.11.4.P1
+ dns_dt_setversion@Base 1:9.11.4.P1
+ dns_dt_shutdown@Base 1:9.11.4.P1
+ dns_dtdata_free@Base 1:9.11.4.P1
+ dns_dumpctx_attach@Base 1:9.11.3+dfsg
+ dns_dumpctx_cancel@Base 1:9.11.3+dfsg
+ dns_dumpctx_db@Base 1:9.11.3+dfsg
+ dns_dumpctx_detach@Base 1:9.11.3+dfsg
+ dns_dumpctx_version@Base 1:9.11.3+dfsg
+ dns_dyndb_cleanup@Base 1:9.11.3+dfsg
+ dns_dyndb_createctx@Base 1:9.11.3+dfsg
+ dns_dyndb_destroyctx@Base 1:9.11.3+dfsg
+ dns_dyndb_load@Base 1:9.11.3+dfsg
+ dns_ecdb_register@Base 1:9.11.3+dfsg
+ dns_ecdb_unregister@Base 1:9.11.3+dfsg
+ dns_fixedname_init@Base 1:9.11.4+dfsg
+ dns_fixedname_initname@Base 1:9.11.4+dfsg
+ dns_fixedname_invalidate@Base 1:9.11.4+dfsg
+ dns_fixedname_name@Base 1:9.11.4+dfsg
+ dns_fullname_hash@Base 1:9.11.3+dfsg
+ dns_fwdtable_add@Base 1:9.11.3+dfsg
+ dns_fwdtable_addfwd@Base 1:9.11.3+dfsg
+ dns_fwdtable_create@Base 1:9.11.3+dfsg
+ dns_fwdtable_delete@Base 1:9.11.3+dfsg
+ dns_fwdtable_destroy@Base 1:9.11.3+dfsg
+ dns_fwdtable_find2@Base 1:9.11.3+dfsg
+ dns_fwdtable_find@Base 1:9.11.3+dfsg
+ dns_generalstats_create@Base 1:9.11.3+dfsg
+ dns_generalstats_dump@Base 1:9.11.3+dfsg
+ dns_generalstats_increment@Base 1:9.11.3+dfsg
+ dns_geoip_match@Base 1:9.11.3+dfsg
+ dns_geoip_shutdown@Base 1:9.11.3+dfsg
+ dns_hashalg_fromtext@Base 1:9.11.3+dfsg
+ dns_ipkeylist_clear@Base 1:9.11.3+dfsg
+ dns_ipkeylist_copy@Base 1:9.11.3+dfsg
+ dns_ipkeylist_init@Base 1:9.11.3+dfsg
+ dns_ipkeylist_resize@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix2@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix@Base 1:9.11.3+dfsg
+ dns_iptable_attach@Base 1:9.11.3+dfsg
+ dns_iptable_create@Base 1:9.11.3+dfsg
+ dns_iptable_detach@Base 1:9.11.3+dfsg
+ dns_iptable_merge@Base 1:9.11.3+dfsg
+ dns_journal_begin_transaction@Base 1:9.11.3+dfsg
+ dns_journal_commit@Base 1:9.11.3+dfsg
+ dns_journal_compact@Base 1:9.11.3+dfsg
+ dns_journal_current_rr@Base 1:9.11.3+dfsg
+ dns_journal_destroy@Base 1:9.11.3+dfsg
+ dns_journal_first_rr@Base 1:9.11.3+dfsg
+ dns_journal_first_serial@Base 1:9.11.3+dfsg
+ dns_journal_get_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_iter_init@Base 1:9.11.3+dfsg
+ dns_journal_last_serial@Base 1:9.11.3+dfsg
+ dns_journal_next_rr@Base 1:9.11.3+dfsg
+ dns_journal_open@Base 1:9.11.3+dfsg
+ dns_journal_print@Base 1:9.11.3+dfsg
+ dns_journal_rollforward@Base 1:9.11.3+dfsg
+ dns_journal_set_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_write_transaction@Base 1:9.11.3+dfsg
+ dns_journal_writediff@Base 1:9.11.3+dfsg
+ dns_keydata_fromdnskey@Base 1:9.11.3+dfsg
+ dns_keydata_todnskey@Base 1:9.11.3+dfsg
+ dns_keyflags_fromtext@Base 1:9.11.3+dfsg
+ dns_keynode_attach@Base 1:9.11.3+dfsg
+ dns_keynode_create@Base 1:9.11.3+dfsg
+ dns_keynode_detach@Base 1:9.11.3+dfsg
+ dns_keynode_detachall@Base 1:9.11.3+dfsg
+ dns_keynode_key@Base 1:9.11.3+dfsg
+ dns_keynode_managed@Base 1:9.11.3+dfsg
+ dns_keyring_restore@Base 1:9.11.3+dfsg
+ dns_keytable_add@Base 1:9.11.3+dfsg
+ dns_keytable_attach@Base 1:9.11.3+dfsg
+ dns_keytable_attachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_create@Base 1:9.11.3+dfsg
+ dns_keytable_delete@Base 1:9.11.3+dfsg
+ dns_keytable_deletekeynode@Base 1:9.11.3+dfsg
+ dns_keytable_detach@Base 1:9.11.3+dfsg
+ dns_keytable_detachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_dump@Base 1:9.11.3+dfsg
+ dns_keytable_find@Base 1:9.11.3+dfsg
+ dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg
+ dns_keytable_findkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_forall@Base 1:9.11.3+dfsg
+ dns_keytable_issecuredomain@Base 1:9.11.3+dfsg
+ dns_keytable_marksecure@Base 1:9.11.3+dfsg
+ dns_keytable_nextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_totext@Base 1:9.11.3+dfsg
+ dns_lctx@Base 1:9.11.3+dfsg
+ dns_lib_init@Base 1:9.11.3+dfsg
+ dns_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dns_lib_shutdown@Base 1:9.11.3+dfsg
+ dns_libage@Base 1:9.11.3+dfsg
+ dns_libinterface@Base 1:9.11.3+dfsg
+ dns_librevision@Base 1:9.11.3+dfsg
+ dns_loadctx_attach@Base 1:9.11.3+dfsg
+ dns_loadctx_cancel@Base 1:9.11.3+dfsg
+ dns_loadctx_detach@Base 1:9.11.3+dfsg
+ dns_log_init@Base 1:9.11.3+dfsg
+ dns_log_setcontext@Base 1:9.11.3+dfsg
+ dns_lookup_cancel@Base 1:9.11.3+dfsg
+ dns_lookup_create@Base 1:9.11.3+dfsg
+ dns_lookup_destroy@Base 1:9.11.3+dfsg
+ dns_major@Base 1:9.11.3+dfsg
+ dns_mapapi@Base 1:9.11.3+dfsg
+ dns_master_dump2@Base 1:9.11.3+dfsg
+ dns_master_dump3@Base 1:9.11.3+dfsg
+ dns_master_dump@Base 1:9.11.3+dfsg
+ dns_master_dumpinc2@Base 1:9.11.3+dfsg
+ dns_master_dumpinc3@Base 1:9.11.3+dfsg
+ dns_master_dumpinc@Base 1:9.11.3+dfsg
+ dns_master_dumpnode@Base 1:9.11.3+dfsg
+ dns_master_dumpnodetostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostream2@Base 1:9.11.3+dfsg
+ dns_master_dumptostream3@Base 1:9.11.3+dfsg
+ dns_master_dumptostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostreaminc@Base 1:9.11.3+dfsg
+ dns_master_indent@Base 1:9.11.3+dfsg
+ dns_master_indentstr@Base 1:9.11.3+dfsg
+ dns_master_initrawheader@Base 1:9.11.3+dfsg
+ dns_master_loadbuffer@Base 1:9.11.3+dfsg
+ dns_master_loadbufferinc@Base 1:9.11.3+dfsg
+ dns_master_loadfile2@Base 1:9.11.3+dfsg
+ dns_master_loadfile3@Base 1:9.11.3+dfsg
+ dns_master_loadfile4@Base 1:9.11.3+dfsg
+ dns_master_loadfile5@Base 1:9.11.3+dfsg
+ dns_master_loadfile@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc2@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc3@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc4@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc5@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc@Base 1:9.11.3+dfsg
+ dns_master_loadlexer@Base 1:9.11.3+dfsg
+ dns_master_loadlexerinc@Base 1:9.11.3+dfsg
+ dns_master_loadstream@Base 1:9.11.3+dfsg
+ dns_master_loadstreaminc@Base 1:9.11.3+dfsg
+ dns_master_questiontotext@Base 1:9.11.3+dfsg
+ dns_master_rdatasettotext@Base 1:9.11.3+dfsg
+ dns_master_style_cache@Base 1:9.11.3+dfsg
+ dns_master_style_comment@Base 1:9.11.3+dfsg
+ dns_master_style_debug@Base 1:9.11.3+dfsg
+ dns_master_style_default@Base 1:9.11.3+dfsg
+ dns_master_style_explicitttl@Base 1:9.11.3+dfsg
+ dns_master_style_full@Base 1:9.11.3+dfsg
+ dns_master_style_indent@Base 1:9.11.3+dfsg
+ dns_master_style_keyzone@Base 1:9.11.3+dfsg
+ dns_master_style_simple@Base 1:9.11.3+dfsg
+ dns_master_style_yaml@Base 1:9.11.3+dfsg
+ dns_master_stylecreate2@Base 1:9.11.3+dfsg
+ dns_master_stylecreate@Base 1:9.11.3+dfsg
+ dns_master_styledestroy@Base 1:9.11.3+dfsg
+ dns_master_styleflags@Base 1:9.11.3+dfsg
+ dns_message_addname@Base 1:9.11.3+dfsg
+ dns_message_buildopt@Base 1:9.11.3+dfsg
+ dns_message_checksig@Base 1:9.11.3+dfsg
+ dns_message_create@Base 1:9.11.3+dfsg
+ dns_message_currentname@Base 1:9.11.3+dfsg
+ dns_message_destroy@Base 1:9.11.3+dfsg
+ dns_message_find@Base 1:9.11.3+dfsg
+ dns_message_findname@Base 1:9.11.3+dfsg
+ dns_message_findtype@Base 1:9.11.3+dfsg
+ dns_message_firstname@Base 1:9.11.3+dfsg
+ dns_message_getopt@Base 1:9.11.3+dfsg
+ dns_message_getquerytsig@Base 1:9.11.3+dfsg
+ dns_message_getrawmessage@Base 1:9.11.3+dfsg
+ dns_message_getsig0@Base 1:9.11.3+dfsg
+ dns_message_getsig0key@Base 1:9.11.3+dfsg
+ dns_message_gettempname@Base 1:9.11.3+dfsg
+ dns_message_gettempoffsets@Base 1:9.11.3+dfsg
+ dns_message_gettemprdata@Base 1:9.11.3+dfsg
+ dns_message_gettemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_gettemprdataset@Base 1:9.11.3+dfsg
+ dns_message_gettimeadjust@Base 1:9.11.3+dfsg
+ dns_message_gettsig@Base 1:9.11.3+dfsg
+ dns_message_gettsigkey@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket2@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket@Base 1:9.11.3+dfsg
+ dns_message_logpacket2@Base 1:9.11.3+dfsg
+ dns_message_logpacket@Base 1:9.11.3+dfsg
+ dns_message_movename@Base 1:9.11.3+dfsg
+ dns_message_nextname@Base 1:9.11.3+dfsg
+ dns_message_parse@Base 1:9.11.3+dfsg
+ dns_message_peekheader@Base 1:9.11.3+dfsg
+ dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg
+ dns_message_puttempname@Base 1:9.11.3+dfsg
+ dns_message_puttemprdata@Base 1:9.11.3+dfsg
+ dns_message_puttemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_puttemprdataset@Base 1:9.11.3+dfsg
+ dns_message_rechecksig@Base 1:9.11.3+dfsg
+ dns_message_removename@Base 1:9.11.3+dfsg
+ dns_message_renderbegin@Base 1:9.11.3+dfsg
+ dns_message_renderchangebuffer@Base 1:9.11.3+dfsg
+ dns_message_renderend@Base 1:9.11.3+dfsg
+ dns_message_renderheader@Base 1:9.11.3+dfsg
+ dns_message_renderrelease@Base 1:9.11.3+dfsg
+ dns_message_renderreserve@Base 1:9.11.3+dfsg
+ dns_message_renderreset@Base 1:9.11.3+dfsg
+ dns_message_rendersection@Base 1:9.11.3+dfsg
+ dns_message_reply@Base 1:9.11.3+dfsg
+ dns_message_reset@Base 1:9.11.3+dfsg
+ dns_message_resetsig@Base 1:9.11.3+dfsg
+ dns_message_sectiontotext@Base 1:9.11.3+dfsg
+ dns_message_setclass@Base 1:9.11.3+dfsg
+ dns_message_setopt@Base 1:9.11.3+dfsg
+ dns_message_setquerytsig@Base 1:9.11.3+dfsg
+ dns_message_setsig0key@Base 1:9.11.3+dfsg
+ dns_message_setsortorder@Base 1:9.11.3+dfsg
+ dns_message_settimeadjust@Base 1:9.11.3+dfsg
+ dns_message_settsigkey@Base 1:9.11.3+dfsg
+ dns_message_signer@Base 1:9.11.3+dfsg
+ dns_message_takebuffer@Base 1:9.11.3+dfsg
+ dns_message_totext@Base 1:9.11.3+dfsg
+ dns_modules@Base 1:9.11.3+dfsg
+ dns_msgcat@Base 1:9.11.3+dfsg
+ dns_name_caseequal@Base 1:9.11.3+dfsg
+ dns_name_clone@Base 1:9.11.3+dfsg
+ dns_name_compare@Base 1:9.11.3+dfsg
+ dns_name_concatenate@Base 1:9.11.3+dfsg
+ dns_name_copy@Base 1:9.11.3+dfsg
+ dns_name_countlabels@Base 1:9.11.3+dfsg
+ dns_name_destroy@Base 1:9.11.3+dfsg
+ dns_name_digest@Base 1:9.11.3+dfsg
+ dns_name_downcase@Base 1:9.11.3+dfsg
+ dns_name_dup@Base 1:9.11.3+dfsg
+ dns_name_dupwithoffsets@Base 1:9.11.3+dfsg
+ dns_name_dynamic@Base 1:9.11.3+dfsg
+ dns_name_equal@Base 1:9.11.3+dfsg
+ dns_name_format@Base 1:9.11.3+dfsg
+ dns_name_free@Base 1:9.11.3+dfsg
+ dns_name_fromregion@Base 1:9.11.3+dfsg
+ dns_name_fromstring2@Base 1:9.11.3+dfsg
+ dns_name_fromstring@Base 1:9.11.3+dfsg
+ dns_name_fromtext@Base 1:9.11.3+dfsg
+ dns_name_fromwire@Base 1:9.11.3+dfsg
+ dns_name_fullcompare@Base 1:9.11.3+dfsg
+ dns_name_fullhash@Base 1:9.11.3+dfsg
+ dns_name_getlabel@Base 1:9.11.3+dfsg
+ dns_name_getlabelsequence@Base 1:9.11.3+dfsg
+ dns_name_hasbuffer@Base 1:9.11.3+dfsg
+ dns_name_hash@Base 1:9.11.3+dfsg
+ dns_name_hashbylabel@Base 1:9.11.3+dfsg
+ dns_name_init@Base 1:9.11.3+dfsg
+ dns_name_internalwildcard@Base 1:9.11.3+dfsg
+ dns_name_invalidate@Base 1:9.11.3+dfsg
+ dns_name_isabsolute@Base 1:9.11.3+dfsg
+ dns_name_isdnssd@Base 1:9.11.3+dfsg
+ dns_name_ishostname@Base 1:9.11.3+dfsg
+ dns_name_ismailbox@Base 1:9.11.3+dfsg
+ dns_name_isrfc1918@Base 1:9.11.3+dfsg
+ dns_name_issubdomain@Base 1:9.11.3+dfsg
+ dns_name_istat@Base 1:9.11.3+dfsg
+ dns_name_isula@Base 1:9.11.3+dfsg
+ dns_name_isvalid@Base 1:9.11.3+dfsg
+ dns_name_iswildcard@Base 1:9.11.3+dfsg
+ dns_name_matcheswildcard@Base 1:9.11.3+dfsg
+ dns_name_print@Base 1:9.11.3+dfsg
+ dns_name_rdatacompare@Base 1:9.11.3+dfsg
+ dns_name_reset@Base 1:9.11.3+dfsg
+ dns_name_setbuffer@Base 1:9.11.3+dfsg
+ dns_name_settotextfilter@Base 1:9.11.3+dfsg
+ dns_name_split@Base 1:9.11.3+dfsg
+ dns_name_tofilenametext@Base 1:9.11.3+dfsg
+ dns_name_toprincipal@Base 1:9.11.3+dfsg
+ dns_name_toregion@Base 1:9.11.3+dfsg
+ dns_name_tostring@Base 1:9.11.3+dfsg
+ dns_name_totext2@Base 1:9.11.3+dfsg
+ dns_name_totext@Base 1:9.11.3+dfsg
+ dns_name_towire@Base 1:9.11.3+dfsg
+ dns_ncache_add@Base 1:9.11.3+dfsg
+ dns_ncache_addoptout@Base 1:9.11.3+dfsg
+ dns_ncache_current@Base 1:9.11.3+dfsg
+ dns_ncache_getrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_towire@Base 1:9.11.3+dfsg
+ dns_nsec3_active@Base 1:9.11.3+dfsg
+ dns_nsec3_activex@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_hashlength@Base 1:9.11.3+dfsg
+ dns_nsec3_hashname@Base 1:9.11.3+dfsg
+ dns_nsec3_maxiterations@Base 1:9.11.3+dfsg
+ dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec3_supportedhash@Base 1:9.11.3+dfsg
+ dns_nsec3_typepresent@Base 1:9.11.3+dfsg
+ dns_nsec3param_deletechains@Base 1:9.11.3+dfsg
+ dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg
+ dns_nsec3param_salttotext@Base 1:9.11.3+dfsg
+ dns_nsec3param_toprivate@Base 1:9.11.3+dfsg
+ dns_nsec_build@Base 1:9.11.3+dfsg
+ dns_nsec_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec_compressbitmap@Base 1:9.11.3+dfsg
+ dns_nsec_isset@Base 1:9.11.3+dfsg
+ dns_nsec_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec_nseconly@Base 1:9.11.3+dfsg
+ dns_nsec_setbit@Base 1:9.11.3+dfsg
+ dns_nsec_typepresent@Base 1:9.11.3+dfsg
+ dns_ntatable_add@Base 1:9.11.3+dfsg
+ dns_ntatable_attach@Base 1:9.11.3+dfsg
+ dns_ntatable_covered@Base 1:9.11.3+dfsg
+ dns_ntatable_create@Base 1:9.11.3+dfsg
+ dns_ntatable_delete@Base 1:9.11.3+dfsg
+ dns_ntatable_detach@Base 1:9.11.3+dfsg
+ dns_ntatable_dump@Base 1:9.11.3+dfsg
+ dns_ntatable_save@Base 1:9.11.3+dfsg
+ dns_ntatable_totext@Base 1:9.11.3+dfsg
+ dns_opcode_totext@Base 1:9.11.3+dfsg
+ dns_opcodestats_create@Base 1:9.11.3+dfsg
+ dns_opcodestats_dump@Base 1:9.11.3+dfsg
+ dns_opcodestats_increment@Base 1:9.11.3+dfsg
+ dns_order_add@Base 1:9.11.3+dfsg
+ dns_order_attach@Base 1:9.11.3+dfsg
+ dns_order_create@Base 1:9.11.3+dfsg
+ dns_order_detach@Base 1:9.11.3+dfsg
+ dns_order_find@Base 1:9.11.3+dfsg
+ dns_peer_attach@Base 1:9.11.3+dfsg
+ dns_peer_detach@Base 1:9.11.3+dfsg
+ dns_peer_getbogus@Base 1:9.11.3+dfsg
+ dns_peer_getednsversion@Base 1:9.11.3+dfsg
+ dns_peer_getforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_getkey@Base 1:9.11.3+dfsg
+ dns_peer_getmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_getprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_getquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_getquerysource@Base 1:9.11.3+dfsg
+ dns_peer_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_getrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_getsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_getsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_gettransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_gettransferformat@Base 1:9.11.3+dfsg
+ dns_peer_gettransfers@Base 1:9.11.3+dfsg
+ dns_peer_gettransfersource@Base 1:9.11.3+dfsg
+ dns_peer_getudpsize@Base 1:9.11.3+dfsg
+ dns_peer_new@Base 1:9.11.3+dfsg
+ dns_peer_newprefix@Base 1:9.11.3+dfsg
+ dns_peer_setbogus@Base 1:9.11.3+dfsg
+ dns_peer_setednsversion@Base 1:9.11.3+dfsg
+ dns_peer_setforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_setkey@Base 1:9.11.3+dfsg
+ dns_peer_setkeybycharp@Base 1:9.11.3+dfsg
+ dns_peer_setmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_setprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_setquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_setquerysource@Base 1:9.11.3+dfsg
+ dns_peer_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_setrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_setsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_setsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_settransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_settransferformat@Base 1:9.11.3+dfsg
+ dns_peer_settransfers@Base 1:9.11.3+dfsg
+ dns_peer_settransfersource@Base 1:9.11.3+dfsg
+ dns_peer_setudpsize@Base 1:9.11.3+dfsg
+ dns_peerlist_addpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_attach@Base 1:9.11.3+dfsg
+ dns_peerlist_currpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_detach@Base 1:9.11.3+dfsg
+ dns_peerlist_new@Base 1:9.11.3+dfsg
+ dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg
+ dns_portlist_add@Base 1:9.11.3+dfsg
+ dns_portlist_attach@Base 1:9.11.3+dfsg
+ dns_portlist_create@Base 1:9.11.3+dfsg
+ dns_portlist_detach@Base 1:9.11.3+dfsg
+ dns_portlist_match@Base 1:9.11.3+dfsg
+ dns_portlist_remove@Base 1:9.11.3+dfsg
+ dns_pps@Base 1:9.11.3+dfsg
+ dns_private_chains@Base 1:9.11.3+dfsg
+ dns_private_totext@Base 1:9.11.3+dfsg
+ dns_rbt_addname@Base 1:9.11.3+dfsg
+ dns_rbt_addnode@Base 1:9.11.3+dfsg
+ dns_rbt_create@Base 1:9.11.3+dfsg
+ dns_rbt_deletename@Base 1:9.11.3+dfsg
+ dns_rbt_deletenode@Base 1:9.11.3+dfsg
+ dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg
+ dns_rbt_destroy2@Base 1:9.11.3+dfsg
+ dns_rbt_destroy@Base 1:9.11.3+dfsg
+ dns_rbt_findname@Base 1:9.11.3+dfsg
+ dns_rbt_findnode@Base 1:9.11.3+dfsg
+ dns_rbt_formatnodename@Base 1:9.11.3+dfsg
+ dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_hashsize@Base 1:9.11.3+dfsg
+ dns_rbt_namefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_nodecount@Base 1:9.11.3+dfsg
+ dns_rbt_printdot@Base 1:9.11.3+dfsg
+ dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg
+ dns_rbt_printtext@Base 1:9.11.3+dfsg
+ dns_rbt_root@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_align@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_tree@Base 1:9.11.3+dfsg
+ dns_rbtdb64_create@Base 1:9.11.3+dfsg
+ dns_rbtdb_create@Base 1:9.11.3+dfsg
+ dns_rbtnode_nodename@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_current@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_down@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_first@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_init@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_last@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_next@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_prev@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_reset@Base 1:9.11.3+dfsg
+ dns_rcode_fromtext@Base 1:9.11.3+dfsg
+ dns_rcode_totext@Base 1:9.11.3+dfsg
+ dns_rcodestats_create@Base 1:9.11.3+dfsg
+ dns_rcodestats_dump@Base 1:9.11.3+dfsg
+ dns_rcodestats_increment@Base 1:9.11.3+dfsg
+ dns_rdata_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdata_apl_count@Base 1:9.11.3+dfsg
+ dns_rdata_apl_current@Base 1:9.11.3+dfsg
+ dns_rdata_apl_first@Base 1:9.11.3+dfsg
+ dns_rdata_apl_next@Base 1:9.11.3+dfsg
+ dns_rdata_casecompare@Base 1:9.11.3+dfsg
+ dns_rdata_checknames@Base 1:9.11.3+dfsg
+ dns_rdata_checkowner@Base 1:9.11.3+dfsg
+ dns_rdata_clone@Base 1:9.11.3+dfsg
+ dns_rdata_compare@Base 1:9.11.3+dfsg
+ dns_rdata_covers@Base 1:9.11.3+dfsg
+ dns_rdata_deleterrset@Base 1:9.11.3+dfsg
+ dns_rdata_digest@Base 1:9.11.3+dfsg
+ dns_rdata_exists@Base 1:9.11.3+dfsg
+ dns_rdata_freestruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromregion@Base 1:9.11.3+dfsg
+ dns_rdata_fromstruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromtext@Base 1:9.11.3+dfsg
+ dns_rdata_fromwire@Base 1:9.11.3+dfsg
+ dns_rdata_hip_current@Base 1:9.11.3+dfsg
+ dns_rdata_hip_first@Base 1:9.11.3+dfsg
+ dns_rdata_hip_next@Base 1:9.11.3+dfsg
+ dns_rdata_init@Base 1:9.11.3+dfsg
+ dns_rdata_makedelete@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_current@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_first@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_next@Base 1:9.11.3+dfsg
+ dns_rdata_notexist@Base 1:9.11.3+dfsg
+ dns_rdata_opt_current@Base 1:9.11.3+dfsg
+ dns_rdata_opt_first@Base 1:9.11.3+dfsg
+ dns_rdata_opt_next@Base 1:9.11.3+dfsg
+ dns_rdata_reset@Base 1:9.11.3+dfsg
+ dns_rdata_tofmttext@Base 1:9.11.3+dfsg
+ dns_rdata_toregion@Base 1:9.11.3+dfsg
+ dns_rdata_tostruct@Base 1:9.11.3+dfsg
+ dns_rdata_totext@Base 1:9.11.3+dfsg
+ dns_rdata_towire@Base 1:9.11.3+dfsg
+ dns_rdata_txt_current@Base 1:9.11.3+dfsg
+ dns_rdata_txt_first@Base 1:9.11.3+dfsg
+ dns_rdata_txt_next@Base 1:9.11.3+dfsg
+ dns_rdata_updateop@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg
+ dns_rdataclass_format@Base 1:9.11.3+dfsg
+ dns_rdataclass_fromtext@Base 1:9.11.3+dfsg
+ dns_rdataclass_ismeta@Base 1:9.11.3+dfsg
+ dns_rdataclass_totext@Base 1:9.11.3+dfsg
+ dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdatalist_init@Base 1:9.11.3+dfsg
+ dns_rdatalist_tordataset@Base 1:9.11.3+dfsg
+ dns_rdataset_addclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdataset_addnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg
+ dns_rdataset_clone@Base 1:9.11.3+dfsg
+ dns_rdataset_count@Base 1:9.11.3+dfsg
+ dns_rdataset_current@Base 1:9.11.3+dfsg
+ dns_rdataset_disassociate@Base 1:9.11.3+dfsg
+ dns_rdataset_expire@Base 1:9.11.3+dfsg
+ dns_rdataset_first@Base 1:9.11.3+dfsg
+ dns_rdataset_getadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_getclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_getnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_getownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_init@Base 1:9.11.3+dfsg
+ dns_rdataset_invalidate@Base 1:9.11.3+dfsg
+ dns_rdataset_isassociated@Base 1:9.11.3+dfsg
+ dns_rdataset_makequestion@Base 1:9.11.3+dfsg
+ dns_rdataset_next@Base 1:9.11.3+dfsg
+ dns_rdataset_putadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_settrust@Base 1:9.11.3+dfsg
+ dns_rdataset_totext@Base 1:9.11.3+dfsg
+ dns_rdataset_towire@Base 1:9.11.3+dfsg
+ dns_rdataset_towirepartial@Base 1:9.11.3+dfsg
+ dns_rdataset_towiresorted@Base 1:9.11.3+dfsg
+ dns_rdataset_trimttl@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_current@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_first@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_next@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_create@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_dump@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_increment@Base 1:9.11.3+dfsg
+ dns_rdataslab_count@Base 1:9.11.3+dfsg
+ dns_rdataslab_equal@Base 1:9.11.3+dfsg
+ dns_rdataslab_equalx@Base 1:9.11.3+dfsg
+ dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdataslab_merge@Base 1:9.11.3+dfsg
+ dns_rdataslab_size@Base 1:9.11.3+dfsg
+ dns_rdataslab_subtract@Base 1:9.11.3+dfsg
+ dns_rdataslab_tordataset@Base 1:9.11.3+dfsg
+ dns_rdatatype_atparent@Base 1:9.11.3+dfsg
+ dns_rdatatype_attributes@Base 1:9.11.3+dfsg
+ dns_rdatatype_format@Base 1:9.11.3+dfsg
+ dns_rdatatype_fromtext@Base 1:9.11.3+dfsg
+ dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg
+ dns_rdatatype_isknown@Base 1:9.11.3+dfsg
+ dns_rdatatype_ismeta@Base 1:9.11.3+dfsg
+ dns_rdatatype_issingleton@Base 1:9.11.3+dfsg
+ dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg
+ dns_rdatatype_notquestion@Base 1:9.11.3+dfsg
+ dns_rdatatype_questiononly@Base 1:9.11.3+dfsg
+ dns_rdatatype_totext@Base 1:9.11.3+dfsg
+ dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_create@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_dump@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_increment@Base 1:9.11.3+dfsg
+ dns_request_cancel@Base 1:9.11.3+dfsg
+ dns_request_create@Base 1:9.11.3+dfsg
+ dns_request_createraw2@Base 1:9.11.3+dfsg
+ dns_request_createraw3@Base 1:9.11.3+dfsg
+ dns_request_createraw4@Base 1:9.11.3+dfsg
+ dns_request_createraw@Base 1:9.11.3+dfsg
+ dns_request_createvia2@Base 1:9.11.3+dfsg
+ dns_request_createvia3@Base 1:9.11.3+dfsg
+ dns_request_createvia4@Base 1:9.11.3+dfsg
+ dns_request_createvia@Base 1:9.11.3+dfsg
+ dns_request_destroy@Base 1:9.11.3+dfsg
+ dns_request_getresponse@Base 1:9.11.3+dfsg
+ dns_request_usedtcp@Base 1:9.11.3+dfsg
+ dns_requestmgr_attach@Base 1:9.11.3+dfsg
+ dns_requestmgr_create@Base 1:9.11.3+dfsg
+ dns_requestmgr_detach@Base 1:9.11.3+dfsg
+ dns_requestmgr_shutdown@Base 1:9.11.3+dfsg
+ dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg
+ dns_resolver_addalternate@Base 1:9.11.3+dfsg
+ dns_resolver_addbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg
+ dns_resolver_attach@Base 1:9.11.3+dfsg
+ dns_resolver_cancelfetch@Base 1:9.11.3+dfsg
+ dns_resolver_create@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch2@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch3@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch@Base 1:9.11.3+dfsg
+ dns_resolver_destroyfetch@Base 1:9.11.3+dfsg
+ dns_resolver_detach@Base 1:9.11.3+dfsg
+ dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg
+ dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv4@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv6@Base 1:9.11.3+dfsg
+ dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg
+ dns_resolver_dumpfetches@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadnames@Base 1:9.11.3+dfsg
+ dns_resolver_freeze@Base 1:9.11.3+dfsg
+ dns_resolver_getbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_getlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_getoptions@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_gettimeout@Base 1:9.11.3+dfsg
+ dns_resolver_getudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_logfetch@Base 1:9.11.3+dfsg
+ dns_resolver_nrunning@Base 1:9.11.3+dfsg
+ dns_resolver_prime@Base 1:9.11.3+dfsg
+ dns_resolver_printbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg
+ dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg
+ dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg
+ dns_resolver_setlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_settimeout@Base 1:9.11.3+dfsg
+ dns_resolver_setudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_shutdown@Base 1:9.11.3+dfsg
+ dns_resolver_socketmgr@Base 1:9.11.3+dfsg
+ dns_resolver_taskmgr@Base 1:9.11.3+dfsg
+ dns_resolver_whenshutdown@Base 1:9.11.3+dfsg
+ dns_result_register@Base 1:9.11.3+dfsg
+ dns_result_torcode@Base 1:9.11.3+dfsg
+ dns_result_totext@Base 1:9.11.3+dfsg
+ dns_root_checkhints@Base 1:9.11.3+dfsg
+ dns_rootname@Base 1:9.11.3+dfsg
+ dns_rootns_create@Base 1:9.11.3+dfsg
+ dns_rpz_add@Base 1:9.11.3+dfsg
+ dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_beginload@Base 1:9.11.3+dfsg
+ dns_rpz_decode_cname@Base 1:9.11.3+dfsg
+ dns_rpz_delete@Base 1:9.11.3+dfsg
+ dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_find_ip@Base 1:9.11.3+dfsg
+ dns_rpz_find_name@Base 1:9.11.3+dfsg
+ dns_rpz_new_zones@Base 1:9.11.3+dfsg
+ dns_rpz_policy2str@Base 1:9.11.3+dfsg
+ dns_rpz_ready@Base 1:9.11.3+dfsg
+ dns_rpz_str2policy@Base 1:9.11.3+dfsg
+ dns_rpz_type2str@Base 1:9.11.3+dfsg
+ dns_rriterator_current@Base 1:9.11.3+dfsg
+ dns_rriterator_destroy@Base 1:9.11.3+dfsg
+ dns_rriterator_first@Base 1:9.11.3+dfsg
+ dns_rriterator_init@Base 1:9.11.3+dfsg
+ dns_rriterator_next@Base 1:9.11.3+dfsg
+ dns_rriterator_nextrrset@Base 1:9.11.3+dfsg
+ dns_rriterator_pause@Base 1:9.11.3+dfsg
+ dns_rrl@Base 1:9.11.3+dfsg
+ dns_rrl_init@Base 1:9.11.3+dfsg
+ dns_rrl_view_destroy@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdb_putrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putrr@Base 1:9.11.3+dfsg
+ dns_sdb_putsoa@Base 1:9.11.3+dfsg
+ dns_sdb_register@Base 1:9.11.3+dfsg
+ dns_sdb_unregister@Base 1:9.11.3+dfsg
+ dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putsoa@Base 1:9.11.3+dfsg
+ dns_sdlz_setdb@Base 1:9.11.3+dfsg
+ dns_sdlzregister@Base 1:9.11.3+dfsg
+ dns_sdlzunregister@Base 1:9.11.3+dfsg
+ dns_secalg_format@Base 1:9.11.3+dfsg
+ dns_secalg_fromtext@Base 1:9.11.3+dfsg
+ dns_secalg_totext@Base 1:9.11.3+dfsg
+ dns_secproto_fromtext@Base 1:9.11.3+dfsg
+ dns_secproto_totext@Base 1:9.11.3+dfsg
+ dns_soa_buildrdata@Base 1:9.11.3+dfsg
+ dns_soa_getexpire@Base 1:9.11.3+dfsg
+ dns_soa_getminimum@Base 1:9.11.3+dfsg
+ dns_soa_getrefresh@Base 1:9.11.3+dfsg
+ dns_soa_getretry@Base 1:9.11.3+dfsg
+ dns_soa_getserial@Base 1:9.11.3+dfsg
+ dns_soa_setexpire@Base 1:9.11.3+dfsg
+ dns_soa_setminimum@Base 1:9.11.3+dfsg
+ dns_soa_setrefresh@Base 1:9.11.3+dfsg
+ dns_soa_setretry@Base 1:9.11.3+dfsg
+ dns_soa_setserial@Base 1:9.11.3+dfsg
+ dns_ssu_external_match@Base 1:9.11.3+dfsg
+ dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg
+ dns_ssurule_identity@Base 1:9.11.3+dfsg
+ dns_ssurule_isgrant@Base 1:9.11.3+dfsg
+ dns_ssurule_matchtype@Base 1:9.11.3+dfsg
+ dns_ssurule_name@Base 1:9.11.3+dfsg
+ dns_ssurule_types@Base 1:9.11.3+dfsg
+ dns_ssutable_addrule@Base 1:9.11.3+dfsg
+ dns_ssutable_attach@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules2@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules@Base 1:9.11.3+dfsg
+ dns_ssutable_create@Base 1:9.11.3+dfsg
+ dns_ssutable_createdlz@Base 1:9.11.3+dfsg
+ dns_ssutable_detach@Base 1:9.11.3+dfsg
+ dns_ssutable_firstrule@Base 1:9.11.3+dfsg
+ dns_ssutable_nextrule@Base 1:9.11.3+dfsg
+ dns_stats_alloccounters@Base 1:9.11.3+dfsg
+ dns_stats_attach@Base 1:9.11.3+dfsg
+ dns_stats_detach@Base 1:9.11.3+dfsg
+ dns_stats_freecounters@Base 1:9.11.3+dfsg
+ dns_statscounter_names@Base 1:9.11.3+dfsg
+ dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg
+ dns_tcpmsg_init@Base 1:9.11.3+dfsg
+ dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg
+ dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg
+ dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg
+ dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg
+ dns_time32_fromtext@Base 1:9.11.3+dfsg
+ dns_time32_totext@Base 1:9.11.3+dfsg
+ dns_time64_from32@Base 1:9.11.3+dfsg
+ dns_time64_fromtext@Base 1:9.11.3+dfsg
+ dns_time64_totext@Base 1:9.11.3+dfsg
+ dns_timer_setidle@Base 1:9.11.3+dfsg
+ dns_tkey_builddeletequery@Base 1:9.11.3+dfsg
+ dns_tkey_builddhquery@Base 1:9.11.3+dfsg
+ dns_tkey_buildgssquery@Base 1:9.11.3+dfsg
+ dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg
+ dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processdhresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processgssresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processquery@Base 1:9.11.3+dfsg
+ dns_tkeyctx_create@Base 1:9.11.3+dfsg
+ dns_tkeyctx_destroy@Base 1:9.11.3+dfsg
+ dns_trust_totext@Base 1:9.11.3+dfsg
+ dns_tsec_create@Base 1:9.11.3+dfsg
+ dns_tsec_destroy@Base 1:9.11.3+dfsg
+ dns_tsec_getkey@Base 1:9.11.3+dfsg
+ dns_tsec_gettype@Base 1:9.11.3+dfsg
+ dns_tsig_gssapi_name@Base 1:9.11.3+dfsg
+ dns_tsig_gssapims_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg
+ dns_tsig_sign@Base 1:9.11.3+dfsg
+ dns_tsig_verify@Base 1:9.11.3+dfsg
+ dns_tsigkey_attach@Base 1:9.11.3+dfsg
+ dns_tsigkey_create@Base 1:9.11.3+dfsg
+ dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg
+ dns_tsigkey_detach@Base 1:9.11.3+dfsg
+ dns_tsigkey_find@Base 1:9.11.3+dfsg
+ dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_add@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_attach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_create@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_detach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg
+ dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg
+ dns_tsigrcode_totext@Base 1:9.11.3+dfsg
+ dns_ttl_fromtext@Base 1:9.11.3+dfsg
+ dns_ttl_totext2@Base 1:9.11.3+dfsg
+ dns_ttl_totext@Base 1:9.11.3+dfsg
+ dns_update_signatures@Base 1:9.11.3+dfsg
+ dns_update_signaturesinc@Base 1:9.11.3+dfsg
+ dns_update_soaserial@Base 1:9.11.3+dfsg
+ dns_validator_cancel@Base 1:9.11.3+dfsg
+ dns_validator_create@Base 1:9.11.3+dfsg
+ dns_validator_destroy@Base 1:9.11.3+dfsg
+ dns_validator_send@Base 1:9.11.3+dfsg
+ dns_version@Base 1:9.11.3+dfsg
+ dns_view_adddelegationonly@Base 1:9.11.3+dfsg
+ dns_view_addzone@Base 1:9.11.3+dfsg
+ dns_view_asyncload2@Base 1:9.11.5+dfsg
+ dns_view_asyncload@Base 1:9.11.3+dfsg
+ dns_view_attach@Base 1:9.11.3+dfsg
+ dns_view_checksig@Base 1:9.11.3+dfsg
+ dns_view_create@Base 1:9.11.3+dfsg
+ dns_view_createresolver@Base 1:9.11.3+dfsg
+ dns_view_createzonetable@Base 1:9.11.3+dfsg
+ dns_view_detach@Base 1:9.11.3+dfsg
+ dns_view_dialup@Base 1:9.11.3+dfsg
+ dns_view_dumpdbtostream@Base 1:9.11.3+dfsg
+ dns_view_excludedelegationonly@Base 1:9.11.3+dfsg
+ dns_view_find2@Base 1:9.11.3+dfsg
+ dns_view_find@Base 1:9.11.3+dfsg
+ dns_view_findzone@Base 1:9.11.3+dfsg
+ dns_view_findzonecut2@Base 1:9.11.3+dfsg
+ dns_view_findzonecut@Base 1:9.11.3+dfsg
+ dns_view_flushanddetach@Base 1:9.11.3+dfsg
+ dns_view_flushcache2@Base 1:9.11.3+dfsg
+ dns_view_flushcache@Base 1:9.11.3+dfsg
+ dns_view_flushname@Base 1:9.11.3+dfsg
+ dns_view_flushnode@Base 1:9.11.3+dfsg
+ dns_view_freeze@Base 1:9.11.3+dfsg
+ dns_view_freezezones@Base 1:9.11.3+dfsg
+ dns_view_getadbstats@Base 1:9.11.3+dfsg
+ dns_view_getdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_getfailttl@Base 1:9.11.3+dfsg
+ dns_view_getntatable@Base 1:9.11.3+dfsg
+ dns_view_getpeertsig@Base 1:9.11.3+dfsg
+ dns_view_getresquerystats@Base 1:9.11.3+dfsg
+ dns_view_getresstats@Base 1:9.11.3+dfsg
+ dns_view_getrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_getsecroots@Base 1:9.11.3+dfsg
+ dns_view_gettsig@Base 1:9.11.3+dfsg
+ dns_view_initntatable@Base 1:9.11.3+dfsg
+ dns_view_initsecroots@Base 1:9.11.3+dfsg
+ dns_view_iscacheshared@Base 1:9.11.3+dfsg
+ dns_view_isdelegationonly@Base 1:9.11.3+dfsg
+ dns_view_issecuredomain@Base 1:9.11.3+dfsg
+ dns_view_load@Base 1:9.11.3+dfsg
+ dns_view_loadnew@Base 1:9.11.3+dfsg
+ dns_view_loadnta@Base 1:9.11.3+dfsg
+ dns_view_ntacovers@Base 1:9.11.3+dfsg
+ dns_view_restorekeyring@Base 1:9.11.3+dfsg
+ dns_view_saventa@Base 1:9.11.3+dfsg
+ dns_view_searchdlz@Base 1:9.11.3+dfsg
+ dns_view_setadbstats@Base 1:9.11.3+dfsg
+ dns_view_setcache2@Base 1:9.11.3+dfsg
+ dns_view_setcache@Base 1:9.11.3+dfsg
+ dns_view_setdstport@Base 1:9.11.3+dfsg
+ dns_view_setdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_setfailttl@Base 1:9.11.3+dfsg
+ dns_view_sethints@Base 1:9.11.3+dfsg
+ dns_view_setkeyring@Base 1:9.11.3+dfsg
+ dns_view_setnewzones@Base 1:9.11.3+dfsg
+ dns_view_setresquerystats@Base 1:9.11.3+dfsg
+ dns_view_setresstats@Base 1:9.11.3+dfsg
+ dns_view_setrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_simplefind@Base 1:9.11.3+dfsg
+ dns_view_thaw@Base 1:9.11.3+dfsg
+ dns_view_untrust@Base 1:9.11.3+dfsg
+ dns_view_weakattach@Base 1:9.11.3+dfsg
+ dns_view_weakdetach@Base 1:9.11.3+dfsg
+ dns_viewlist_find@Base 1:9.11.3+dfsg
+ dns_viewlist_findzone@Base 1:9.11.3+dfsg
+ dns_wildcardname@Base 1:9.11.3+dfsg
+ dns_xfrin_attach@Base 1:9.11.3+dfsg
+ dns_xfrin_create2@Base 1:9.11.3+dfsg
+ dns_xfrin_create3@Base 1:9.11.3+dfsg
+ dns_xfrin_create@Base 1:9.11.3+dfsg
+ dns_xfrin_detach@Base 1:9.11.3+dfsg
+ dns_xfrin_shutdown@Base 1:9.11.3+dfsg
+ dns_zone_addnsec3chain@Base 1:9.11.3+dfsg
+ dns_zone_asyncload2@Base 1:9.11.5+dfsg
+ dns_zone_asyncload@Base 1:9.11.3+dfsg
+ dns_zone_attach@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_cdscheck@Base 1:9.11.3+dfsg
+ dns_zone_checknames@Base 1:9.11.3+dfsg
+ dns_zone_clearforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_clearupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_clearxfracl@Base 1:9.11.3+dfsg
+ dns_zone_create@Base 1:9.11.3+dfsg
+ dns_zone_detach@Base 1:9.11.3+dfsg
+ dns_zone_dialup@Base 1:9.11.3+dfsg
+ dns_zone_dlzpostload@Base 1:9.11.3+dfsg
+ dns_zone_dump@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream2@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream3@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream@Base 1:9.11.3+dfsg
+ dns_zone_expire@Base 1:9.11.3+dfsg
+ dns_zone_first@Base 1:9.11.3+dfsg
+ dns_zone_flush@Base 1:9.11.3+dfsg
+ dns_zone_forcereload@Base 1:9.11.3+dfsg
+ dns_zone_forwardupdate@Base 1:9.11.3+dfsg
+ dns_zone_fulldumptostream@Base 1:9.11.3+dfsg
+ dns_zone_get_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_get_rpz_num@Base 1:9.11.3+dfsg
+ dns_zone_getadded@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getautomatic@Base 1:9.11.3+dfsg
+ dns_zone_getchecknames@Base 1:9.11.3+dfsg
+ dns_zone_getclass@Base 1:9.11.3+dfsg
+ dns_zone_getdb@Base 1:9.11.3+dfsg
+ dns_zone_getdbtype@Base 1:9.11.3+dfsg
+ dns_zone_getexpiretime@Base 1:9.11.3+dfsg
+ dns_zone_getfile@Base 1:9.11.3+dfsg
+ dns_zone_getforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_getidlein@Base 1:9.11.3+dfsg
+ dns_zone_getidleout@Base 1:9.11.3+dfsg
+ dns_zone_getincludes@Base 1:9.11.3+dfsg
+ dns_zone_getjournal@Base 1:9.11.3+dfsg
+ dns_zone_getjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_getkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_getkeyopts@Base 1:9.11.3+dfsg
+ dns_zone_getloadtime@Base 1:9.11.3+dfsg
+ dns_zone_getmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_getmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_getmctx@Base 1:9.11.3+dfsg
+ dns_zone_getmgr@Base 1:9.11.3+dfsg
+ dns_zone_getnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_getnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getoptions2@Base 1:9.11.3+dfsg
+ dns_zone_getoptions@Base 1:9.11.3+dfsg
+ dns_zone_getorigin@Base 1:9.11.3+dfsg
+ dns_zone_getprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_getqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_getqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_getraw@Base 1:9.11.3+dfsg
+ dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_getrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_getserial2@Base 1:9.11.3+dfsg
+ dns_zone_getserial@Base 1:9.11.3+dfsg
+ dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_getsignatures@Base 1:9.11.3+dfsg
+ dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_getssutable@Base 1:9.11.3+dfsg
+ dns_zone_getstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_getstatscounters@Base 1:9.11.3+dfsg
+ dns_zone_gettask@Base 1:9.11.3+dfsg
+ dns_zone_gettype@Base 1:9.11.3+dfsg
+ dns_zone_getupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_getview@Base 1:9.11.3+dfsg
+ dns_zone_getxfracl@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_iattach@Base 1:9.11.3+dfsg
+ dns_zone_idetach@Base 1:9.11.3+dfsg
+ dns_zone_isdynamic@Base 1:9.11.3+dfsg
+ dns_zone_isforced@Base 1:9.11.3+dfsg
+ dns_zone_keydone@Base 1:9.11.3+dfsg
+ dns_zone_link@Base 1:9.11.3+dfsg
+ dns_zone_load@Base 1:9.11.3+dfsg
+ dns_zone_loadandthaw@Base 1:9.11.3+dfsg
+ dns_zone_loadnew@Base 1:9.11.3+dfsg
+ dns_zone_log@Base 1:9.11.3+dfsg
+ dns_zone_logc@Base 1:9.11.3+dfsg
+ dns_zone_logv@Base 1:9.11.4+dfsg
+ dns_zone_maintenance@Base 1:9.11.3+dfsg
+ dns_zone_markdirty@Base 1:9.11.3+dfsg
+ dns_zone_mkey_day@Base 1:9.11.3+dfsg
+ dns_zone_mkey_hour@Base 1:9.11.3+dfsg
+ dns_zone_mkey_month@Base 1:9.11.3+dfsg
+ dns_zone_name@Base 1:9.11.3+dfsg
+ dns_zone_nameonly@Base 1:9.11.3+dfsg
+ dns_zone_next@Base 1:9.11.3+dfsg
+ dns_zone_notify@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive@Base 1:9.11.3+dfsg
+ dns_zone_nscheck@Base 1:9.11.3+dfsg
+ dns_zone_refresh@Base 1:9.11.3+dfsg
+ dns_zone_rekey@Base 1:9.11.3+dfsg
+ dns_zone_replacedb@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_set_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_setacache@Base 1:9.11.3+dfsg
+ dns_zone_setadded@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotify@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setautomatic@Base 1:9.11.3+dfsg
+ dns_zone_setcheckmx@Base 1:9.11.3+dfsg
+ dns_zone_setchecknames@Base 1:9.11.3+dfsg
+ dns_zone_setcheckns@Base 1:9.11.3+dfsg
+ dns_zone_setchecksrv@Base 1:9.11.3+dfsg
+ dns_zone_setclass@Base 1:9.11.3+dfsg
+ dns_zone_setdb@Base 1:9.11.3+dfsg
+ dns_zone_setdbtype@Base 1:9.11.3+dfsg
+ dns_zone_setdialup@Base 1:9.11.3+dfsg
+ dns_zone_setfile2@Base 1:9.11.3+dfsg
+ dns_zone_setfile3@Base 1:9.11.3+dfsg
+ dns_zone_setfile@Base 1:9.11.3+dfsg
+ dns_zone_setflag@Base 1:9.11.3+dfsg
+ dns_zone_setforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_setidlein@Base 1:9.11.3+dfsg
+ dns_zone_setidleout@Base 1:9.11.3+dfsg
+ dns_zone_setisself@Base 1:9.11.3+dfsg
+ dns_zone_setjournal@Base 1:9.11.3+dfsg
+ dns_zone_setjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_setkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_setkeyopt@Base 1:9.11.3+dfsg
+ dns_zone_setmasters@Base 1:9.11.3+dfsg
+ dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setminretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setnodes@Base 1:9.11.3+dfsg
+ dns_zone_setnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_setnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifytype@Base 1:9.11.3+dfsg
+ dns_zone_setnsec3param@Base 1:9.11.3+dfsg
+ dns_zone_setoption2@Base 1:9.11.3+dfsg
+ dns_zone_setoption@Base 1:9.11.3+dfsg
+ dns_zone_setorigin@Base 1:9.11.3+dfsg
+ dns_zone_setprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_setqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_setqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_setrawdata@Base 1:9.11.3+dfsg
+ dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg
+ dns_zone_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_setrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_setserial@Base 1:9.11.3+dfsg
+ dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_setsignatures@Base 1:9.11.3+dfsg
+ dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_setssutable@Base 1:9.11.3+dfsg
+ dns_zone_setstatistics@Base 1:9.11.3+dfsg
+ dns_zone_setstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_setstats@Base 1:9.11.3+dfsg
+ dns_zone_settask@Base 1:9.11.3+dfsg
+ dns_zone_settype@Base 1:9.11.3+dfsg
+ dns_zone_setupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_setview@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setxfracl@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_signwithkey@Base 1:9.11.3+dfsg
+ dns_zone_synckeyzone@Base 1:9.11.3+dfsg
+ dns_zone_unload@Base 1:9.11.3+dfsg
+ dns_zonekey_iszonekey@Base 1:9.11.3+dfsg
+ dns_zonemgr_attach@Base 1:9.11.3+dfsg
+ dns_zonemgr_create@Base 1:9.11.3+dfsg
+ dns_zonemgr_createzone@Base 1:9.11.3+dfsg
+ dns_zonemgr_detach@Base 1:9.11.3+dfsg
+ dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg
+ dns_zonemgr_getcount@Base 1:9.11.3+dfsg
+ dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_managezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_releasezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg
+ dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setsize@Base 1:9.11.3+dfsg
+ dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_shutdown@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachable@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg
+ dns_zt_apply2@Base 1:9.11.3+dfsg
+ dns_zt_apply@Base 1:9.11.3+dfsg
+ dns_zt_asyncload2@Base 1:9.11.5+dfsg
+ dns_zt_asyncload@Base 1:9.11.3+dfsg
+ dns_zt_attach@Base 1:9.11.3+dfsg
+ dns_zt_create@Base 1:9.11.3+dfsg
+ dns_zt_detach@Base 1:9.11.3+dfsg
+ dns_zt_find@Base 1:9.11.3+dfsg
+ dns_zt_flushanddetach@Base 1:9.11.3+dfsg
+ dns_zt_freezezones@Base 1:9.11.3+dfsg
+ dns_zt_load@Base 1:9.11.3+dfsg
+ dns_zt_loadnew@Base 1:9.11.3+dfsg
+ dns_zt_mount@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_unmount@Base 1:9.11.3+dfsg
+ dnstap__dnstap__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1
+ dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1
+ dnstap__dnstap__init@Base 1:9.11.4.P1
+ dnstap__dnstap__pack@Base 1:9.11.4.P1
+ dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__unpack@Base 1:9.11.4.P1
+ dnstap__message__descriptor@Base 1:9.11.4.P1
+ dnstap__message__free_unpacked@Base 1:9.11.4.P1
+ dnstap__message__get_packed_size@Base 1:9.11.4.P1
+ dnstap__message__init@Base 1:9.11.4.P1
+ dnstap__message__pack@Base 1:9.11.4.P1
+ dnstap__message__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__message__type__descriptor@Base 1:9.11.4.P1
+ dnstap__message__unpack@Base 1:9.11.4.P1
+ dnstap__socket_family__descriptor@Base 1:9.11.4.P1
+ dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1
+ dst__entropy_getdata@Base 1:9.11.3+dfsg
+ dst__entropy_status@Base 1:9.11.3+dfsg
+ dst__gssapi_init@Base 1:9.11.3+dfsg
+ dst__hmacmd5_init@Base 1:9.11.3+dfsg
+ dst__hmacsha1_init@Base 1:9.11.3+dfsg
+ dst__hmacsha224_init@Base 1:9.11.3+dfsg
+ dst__hmacsha256_init@Base 1:9.11.3+dfsg
+ dst__hmacsha384_init@Base 1:9.11.3+dfsg
+ dst__hmacsha512_init@Base 1:9.11.3+dfsg
+ dst__memory_pool@Base 1:9.11.3+dfsg
+ dst__pkcs11_toresult@Base 1:9.11.3+dfsg
+ dst__pkcs11dh_init@Base 1:9.11.3+dfsg
+ dst__pkcs11dsa_init@Base 1:9.11.3+dfsg
+ dst__pkcs11ecdsa_init@Base 1:9.11.3+dfsg
+ dst__pkcs11rsa_init@Base 1:9.11.3+dfsg
+ dst__privstruct_free@Base 1:9.11.3+dfsg
+ dst__privstruct_parse@Base 1:9.11.3+dfsg
+ dst__privstruct_writefile@Base 1:9.11.3+dfsg
+ dst_algorithm_supported@Base 1:9.11.3+dfsg
+ dst_context_adddata@Base 1:9.11.3+dfsg
+ dst_context_create2@Base 1:9.11.3+dfsg
+ dst_context_create3@Base 1:9.11.3+dfsg
+ dst_context_create4@Base 1:9.11.3+dfsg
+ dst_context_create@Base 1:9.11.3+dfsg
+ dst_context_destroy@Base 1:9.11.3+dfsg
+ dst_context_sign@Base 1:9.11.3+dfsg
+ dst_context_verify2@Base 1:9.11.3+dfsg
+ dst_context_verify@Base 1:9.11.3+dfsg
+ dst_ds_digest_supported@Base 1:9.11.3+dfsg
+ dst_gssapi_acceptctx@Base 1:9.11.3+dfsg
+ dst_gssapi_acquirecred@Base 1:9.11.3+dfsg
+ dst_gssapi_deletectx@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg
+ dst_gssapi_initctx@Base 1:9.11.3+dfsg
+ dst_gssapi_releasecred@Base 1:9.11.3+dfsg
+ dst_key_alg@Base 1:9.11.3+dfsg
+ dst_key_attach@Base 1:9.11.3+dfsg
+ dst_key_buildfilename@Base 1:9.11.3+dfsg
+ dst_key_buildinternal@Base 1:9.11.3+dfsg
+ dst_key_class@Base 1:9.11.3+dfsg
+ dst_key_compare@Base 1:9.11.3+dfsg
+ dst_key_computesecret@Base 1:9.11.3+dfsg
+ dst_key_dump@Base 1:9.11.3+dfsg
+ dst_key_flags@Base 1:9.11.3+dfsg
+ dst_key_format@Base 1:9.11.3+dfsg
+ dst_key_free@Base 1:9.11.3+dfsg
+ dst_key_frombuffer@Base 1:9.11.3+dfsg
+ dst_key_fromdns@Base 1:9.11.3+dfsg
+ dst_key_fromfile@Base 1:9.11.3+dfsg
+ dst_key_fromgssapi@Base 1:9.11.3+dfsg
+ dst_key_fromlabel@Base 1:9.11.3+dfsg
+ dst_key_fromnamedfile@Base 1:9.11.3+dfsg
+ dst_key_generate2@Base 1:9.11.3+dfsg
+ dst_key_generate@Base 1:9.11.3+dfsg
+ dst_key_getbits@Base 1:9.11.3+dfsg
+ dst_key_getfilename@Base 1:9.11.3+dfsg
+ dst_key_getgssctx@Base 1:9.11.3+dfsg
+ dst_key_getnum@Base 1:9.11.3+dfsg
+ dst_key_getprivateformat@Base 1:9.11.3+dfsg
+ dst_key_gettime@Base 1:9.11.3+dfsg
+ dst_key_getttl@Base 1:9.11.3+dfsg
+ dst_key_id@Base 1:9.11.3+dfsg
+ dst_key_inactive@Base 1:9.11.3+dfsg
+ dst_key_isexternal@Base 1:9.11.3+dfsg
+ dst_key_isnullkey@Base 1:9.11.3+dfsg
+ dst_key_isprivate@Base 1:9.11.3+dfsg
+ dst_key_iszonekey@Base 1:9.11.3+dfsg
+ dst_key_name@Base 1:9.11.3+dfsg
+ dst_key_paramcompare@Base 1:9.11.3+dfsg
+ dst_key_privatefrombuffer@Base 1:9.11.3+dfsg
+ dst_key_proto@Base 1:9.11.3+dfsg
+ dst_key_pubcompare@Base 1:9.11.3+dfsg
+ dst_key_read_public@Base 1:9.11.3+dfsg
+ dst_key_restore@Base 1:9.11.3+dfsg
+ dst_key_rid@Base 1:9.11.3+dfsg
+ dst_key_secretsize@Base 1:9.11.3+dfsg
+ dst_key_setbits@Base 1:9.11.3+dfsg
+ dst_key_setexternal@Base 1:9.11.3+dfsg
+ dst_key_setflags@Base 1:9.11.3+dfsg
+ dst_key_setinactive@Base 1:9.11.3+dfsg
+ dst_key_setnum@Base 1:9.11.3+dfsg
+ dst_key_setprivateformat@Base 1:9.11.3+dfsg
+ dst_key_settime@Base 1:9.11.3+dfsg
+ dst_key_setttl@Base 1:9.11.3+dfsg
+ dst_key_sigsize@Base 1:9.11.3+dfsg
+ dst_key_size@Base 1:9.11.3+dfsg
+ dst_key_tkeytoken@Base 1:9.11.3+dfsg
+ dst_key_tobuffer@Base 1:9.11.3+dfsg
+ dst_key_todns@Base 1:9.11.3+dfsg
+ dst_key_tofile@Base 1:9.11.3+dfsg
+ dst_key_unsetnum@Base 1:9.11.3+dfsg
+ dst_key_unsettime@Base 1:9.11.3+dfsg
+ dst_lib_destroy@Base 1:9.11.3+dfsg
+ dst_lib_init2@Base 1:9.11.3+dfsg
+ dst_lib_init@Base 1:9.11.3+dfsg
+ dst_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dst_msgcat@Base 1:9.11.3+dfsg
+ dst_region_computeid@Base 1:9.11.3+dfsg
+ dst_region_computerid@Base 1:9.11.3+dfsg
+ dst_result_register@Base 1:9.11.3+dfsg
+ dst_result_totext@Base 1:9.11.3+dfsg
+ gss_error_tostring@Base 1:9.11.3+dfsg
+ gss_log@Base 1:9.11.3+dfsg
+ isc__rdatalist_addclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_clone@Base 1:9.11.3+dfsg
+ isc__rdatalist_count@Base 1:9.11.3+dfsg
+ isc__rdatalist_current@Base 1:9.11.3+dfsg
+ isc__rdatalist_disassociate@Base 1:9.11.3+dfsg
+ isc__rdatalist_first@Base 1:9.11.3+dfsg
+ isc__rdatalist_getclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_getownercase@Base 1:9.11.3+dfsg
+ isc__rdatalist_next@Base 1:9.11.3+dfsg
+ isc__rdatalist_setownercase@Base 1:9.11.3+dfsg
+ ishex@Base 1:9.11.3+dfsg
+libdns.so.1104 libdns1104 #MINVER#
+ dns__rbt_checkproperties@Base 1:9.11.3+dfsg
+ dns__rbt_getheight@Base 1:9.11.3+dfsg
+ dns__rbtnode_getdistance@Base 1:9.11.3+dfsg
+ dns__zone_findkeys@Base 1:9.11.4+dfsg
+ dns__zone_loadpending@Base 1:9.11.3+dfsg
+ dns__zone_updatesigs@Base 1:9.11.4+dfsg
+ dns_acache_attach@Base 1:9.11.3+dfsg
+ dns_acache_attachentry@Base 1:9.11.3+dfsg
+ dns_acache_cancelentry@Base 1:9.11.3+dfsg
+ dns_acache_countquerymiss@Base 1:9.11.3+dfsg
+ dns_acache_create@Base 1:9.11.3+dfsg
+ dns_acache_createentry@Base 1:9.11.3+dfsg
+ dns_acache_detach@Base 1:9.11.3+dfsg
+ dns_acache_detachentry@Base 1:9.11.3+dfsg
+ dns_acache_getentry@Base 1:9.11.3+dfsg
+ dns_acache_putdb@Base 1:9.11.3+dfsg
+ dns_acache_setcachesize@Base 1:9.11.3+dfsg
+ dns_acache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_acache_setdb@Base 1:9.11.3+dfsg
+ dns_acache_setentry@Base 1:9.11.3+dfsg
+ dns_acache_shutdown@Base 1:9.11.3+dfsg
+ dns_acl_any@Base 1:9.11.3+dfsg
+ dns_acl_attach@Base 1:9.11.3+dfsg
+ dns_acl_create@Base 1:9.11.3+dfsg
+ dns_acl_detach@Base 1:9.11.3+dfsg
+ dns_acl_isany@Base 1:9.11.3+dfsg
+ dns_acl_isinsecure@Base 1:9.11.3+dfsg
+ dns_acl_isnone@Base 1:9.11.3+dfsg
+ dns_acl_match2@Base 1:9.11.3+dfsg
+ dns_acl_match@Base 1:9.11.3+dfsg
+ dns_acl_merge@Base 1:9.11.3+dfsg
+ dns_acl_none@Base 1:9.11.3+dfsg
+ dns_aclelement_match2@Base 1:9.11.3+dfsg
+ dns_aclelement_match@Base 1:9.11.3+dfsg
+ dns_aclenv_copy@Base 1:9.11.3+dfsg
+ dns_aclenv_destroy@Base 1:9.11.3+dfsg
+ dns_aclenv_init@Base 1:9.11.3+dfsg
+ dns_adb_adjustsrtt@Base 1:9.11.3+dfsg
+ dns_adb_agesrtt@Base 1:9.11.3+dfsg
+ dns_adb_attach@Base 1:9.11.3+dfsg
+ dns_adb_beginudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_cancelfind@Base 1:9.11.3+dfsg
+ dns_adb_changeflags@Base 1:9.11.3+dfsg
+ dns_adb_create@Base 1:9.11.3+dfsg
+ dns_adb_createfind2@Base 1:9.11.3+dfsg
+ dns_adb_createfind@Base 1:9.11.3+dfsg
+ dns_adb_destroyfind@Base 1:9.11.3+dfsg
+ dns_adb_detach@Base 1:9.11.3+dfsg
+ dns_adb_dump@Base 1:9.11.3+dfsg
+ dns_adb_dumpfind@Base 1:9.11.3+dfsg
+ dns_adb_ednsto@Base 1:9.11.3+dfsg
+ dns_adb_endudpfetch@Base 1:9.11.3+dfsg
+ dns_adb_findaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_flush@Base 1:9.11.3+dfsg
+ dns_adb_flushname@Base 1:9.11.3+dfsg
+ dns_adb_flushnames@Base 1:9.11.3+dfsg
+ dns_adb_freeaddrinfo@Base 1:9.11.3+dfsg
+ dns_adb_getcookie@Base 1:9.11.3+dfsg
+ dns_adb_getudpsize@Base 1:9.11.3+dfsg
+ dns_adb_marklame@Base 1:9.11.3+dfsg
+ dns_adb_noedns@Base 1:9.11.3+dfsg
+ dns_adb_plainresponse@Base 1:9.11.3+dfsg
+ dns_adb_probesize2@Base 1:9.11.3+dfsg
+ dns_adb_probesize@Base 1:9.11.3+dfsg
+ dns_adb_setadbsize@Base 1:9.11.3+dfsg
+ dns_adb_setcookie@Base 1:9.11.3+dfsg
+ dns_adb_setquota@Base 1:9.11.3+dfsg
+ dns_adb_setudpsize@Base 1:9.11.3+dfsg
+ dns_adb_shutdown@Base 1:9.11.3+dfsg
+ dns_adb_timeout@Base 1:9.11.3+dfsg
+ dns_adb_whenshutdown@Base 1:9.11.3+dfsg
+ dns_adbentry_overquota@Base 1:9.11.3+dfsg
+ dns_badcache_add@Base 1:9.11.3+dfsg
+ dns_badcache_destroy@Base 1:9.11.3+dfsg
+ dns_badcache_find@Base 1:9.11.3+dfsg
+ dns_badcache_flush@Base 1:9.11.3+dfsg
+ dns_badcache_flushname@Base 1:9.11.3+dfsg
+ dns_badcache_flushtree@Base 1:9.11.3+dfsg
+ dns_badcache_init@Base 1:9.11.3+dfsg
+ dns_badcache_print@Base 1:9.11.3+dfsg
+ dns_byaddr_cancel@Base 1:9.11.3+dfsg
+ dns_byaddr_create@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname2@Base 1:9.11.3+dfsg
+ dns_byaddr_createptrname@Base 1:9.11.3+dfsg
+ dns_byaddr_destroy@Base 1:9.11.3+dfsg
+ dns_cache_attach@Base 1:9.11.3+dfsg
+ dns_cache_attachdb@Base 1:9.11.3+dfsg
+ dns_cache_clean@Base 1:9.11.3+dfsg
+ dns_cache_create2@Base 1:9.11.3+dfsg
+ dns_cache_create3@Base 1:9.11.3+dfsg
+ dns_cache_create@Base 1:9.11.3+dfsg
+ dns_cache_detach@Base 1:9.11.3+dfsg
+ dns_cache_dump@Base 1:9.11.3+dfsg
+ dns_cache_dumpstats@Base 1:9.11.3+dfsg
+ dns_cache_flush@Base 1:9.11.3+dfsg
+ dns_cache_flushname@Base 1:9.11.3+dfsg
+ dns_cache_flushnode@Base 1:9.11.3+dfsg
+ dns_cache_getcachesize@Base 1:9.11.3+dfsg
+ dns_cache_getcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_getname@Base 1:9.11.3+dfsg
+ dns_cache_getstats@Base 1:9.11.3+dfsg
+ dns_cache_load@Base 1:9.11.3+dfsg
+ dns_cache_renderjson@Base 1:9.11.3+dfsg
+ dns_cache_renderxml@Base 1:9.11.3+dfsg
+ dns_cache_setcachesize@Base 1:9.11.3+dfsg
+ dns_cache_setcleaninginterval@Base 1:9.11.3+dfsg
+ dns_cache_setfilename@Base 1:9.11.3+dfsg
+ dns_cache_updatestats@Base 1:9.11.3+dfsg
+ dns_categories@Base 1:9.11.3+dfsg
+ dns_catz_add_zone@Base 1:9.11.3+dfsg
+ dns_catz_catzs_attach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_detach@Base 1:9.11.3+dfsg
+ dns_catz_catzs_set_view@Base 1:9.11.3+dfsg
+ dns_catz_dbupdate_callback@Base 1:9.11.3+dfsg
+ dns_catz_entry_attach@Base 1:9.11.3+dfsg
+ dns_catz_entry_cmp@Base 1:9.11.3+dfsg
+ dns_catz_entry_copy@Base 1:9.11.3+dfsg
+ dns_catz_entry_detach@Base 1:9.11.3+dfsg
+ dns_catz_entry_getname@Base 1:9.11.3+dfsg
+ dns_catz_entry_new@Base 1:9.11.3+dfsg
+ dns_catz_entry_validate@Base 1:9.11.3+dfsg
+ dns_catz_generate_masterfilename@Base 1:9.11.3+dfsg
+ dns_catz_generate_zonecfg@Base 1:9.11.3+dfsg
+ dns_catz_get_iterator@Base 1:9.11.3+dfsg
+ dns_catz_get_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zone@Base 1:9.11.3+dfsg
+ dns_catz_new_zones@Base 1:9.11.3+dfsg
+ dns_catz_options_copy@Base 1:9.11.3+dfsg
+ dns_catz_options_free@Base 1:9.11.3+dfsg
+ dns_catz_options_init@Base 1:9.11.3+dfsg
+ dns_catz_options_setdefault@Base 1:9.11.3+dfsg
+ dns_catz_postreconfig@Base 1:9.11.3+dfsg
+ dns_catz_prereconfig@Base 1:9.11.3+dfsg
+ dns_catz_update_from_db@Base 1:9.11.3+dfsg
+ dns_catz_update_process@Base 1:9.11.3+dfsg
+ dns_catz_update_taskaction@Base 1:9.11.3+dfsg
+ dns_catz_zone_attach@Base 1:9.11.3+dfsg
+ dns_catz_zone_detach@Base 1:9.11.3+dfsg
+ dns_catz_zone_getdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zone_getname@Base 1:9.11.3+dfsg
+ dns_catz_zone_resetdefoptions@Base 1:9.11.3+dfsg
+ dns_catz_zones_merge@Base 1:9.11.3+dfsg
+ dns_cert_fromtext@Base 1:9.11.3+dfsg
+ dns_cert_totext@Base 1:9.11.3+dfsg
+ dns_client_addtrustedkey@Base 1:9.11.3+dfsg
+ dns_client_cancelrequest@Base 1:9.11.3+dfsg
+ dns_client_cancelresolve@Base 1:9.11.3+dfsg
+ dns_client_cancelupdate@Base 1:9.11.3+dfsg
+ dns_client_clearservers@Base 1:9.11.3+dfsg
+ dns_client_create@Base 1:9.11.3+dfsg
+ dns_client_createx2@Base 1:9.11.3+dfsg
+ dns_client_createx@Base 1:9.11.3+dfsg
+ dns_client_destroy@Base 1:9.11.3+dfsg
+ dns_client_destroyreqtrans@Base 1:9.11.3+dfsg
+ dns_client_destroyrestrans@Base 1:9.11.3+dfsg
+ dns_client_destroyupdatetrans@Base 1:9.11.3+dfsg
+ dns_client_freeresanswer@Base 1:9.11.3+dfsg
+ dns_client_freeupdate@Base 1:9.11.3+dfsg
+ dns_client_mctx@Base 1:9.11.3+dfsg
+ dns_client_request@Base 1:9.11.3+dfsg
+ dns_client_resolve@Base 1:9.11.3+dfsg
+ dns_client_setdlv@Base 1:9.11.3+dfsg
+ dns_client_setservers@Base 1:9.11.3+dfsg
+ dns_client_startrequest@Base 1:9.11.3+dfsg
+ dns_client_startresolve@Base 1:9.11.3+dfsg
+ dns_client_startupdate@Base 1:9.11.3+dfsg
+ dns_client_update@Base 1:9.11.3+dfsg
+ dns_client_updaterec@Base 1:9.11.3+dfsg
+ dns_clientinfo_init@Base 1:9.11.3+dfsg
+ dns_clientinfomethods_init@Base 1:9.11.3+dfsg
+ dns_compress_add@Base 1:9.11.3+dfsg
+ dns_compress_disable@Base 1:9.11.3+dfsg
+ dns_compress_findglobal@Base 1:9.11.3+dfsg
+ dns_compress_getedns@Base 1:9.11.3+dfsg
+ dns_compress_getmethods@Base 1:9.11.3+dfsg
+ dns_compress_getsensitive@Base 1:9.11.3+dfsg
+ dns_compress_init@Base 1:9.11.3+dfsg
+ dns_compress_invalidate@Base 1:9.11.3+dfsg
+ dns_compress_rollback@Base 1:9.11.3+dfsg
+ dns_compress_setmethods@Base 1:9.11.3+dfsg
+ dns_compress_setsensitive@Base 1:9.11.3+dfsg
+ dns_counter_fromtext@Base 1:9.11.3+dfsg
+ dns_db_addrdataset@Base 1:9.11.3+dfsg
+ dns_db_allrdatasets@Base 1:9.11.3+dfsg
+ dns_db_attach@Base 1:9.11.3+dfsg
+ dns_db_attachnode@Base 1:9.11.3+dfsg
+ dns_db_attachversion@Base 1:9.11.3+dfsg
+ dns_db_beginload@Base 1:9.11.3+dfsg
+ dns_db_class@Base 1:9.11.3+dfsg
+ dns_db_closeversion@Base 1:9.11.3+dfsg
+ dns_db_create@Base 1:9.11.3+dfsg
+ dns_db_createiterator@Base 1:9.11.3+dfsg
+ dns_db_createsoatuple@Base 1:9.11.3+dfsg
+ dns_db_currentversion@Base 1:9.11.3+dfsg
+ dns_db_deleterdataset@Base 1:9.11.3+dfsg
+ dns_db_detach@Base 1:9.11.3+dfsg
+ dns_db_detachnode@Base 1:9.11.3+dfsg
+ dns_db_diff@Base 1:9.11.3+dfsg
+ dns_db_diffx@Base 1:9.11.3+dfsg
+ dns_db_dump2@Base 1:9.11.3+dfsg
+ dns_db_dump@Base 1:9.11.3+dfsg
+ dns_db_endload@Base 1:9.11.3+dfsg
+ dns_db_expirenode@Base 1:9.11.3+dfsg
+ dns_db_find@Base 1:9.11.3+dfsg
+ dns_db_findext@Base 1:9.11.3+dfsg
+ dns_db_findnode@Base 1:9.11.3+dfsg
+ dns_db_findnodeext@Base 1:9.11.3+dfsg
+ dns_db_findnsec3node@Base 1:9.11.3+dfsg
+ dns_db_findrdataset@Base 1:9.11.3+dfsg
+ dns_db_findzonecut@Base 1:9.11.3+dfsg
+ dns_db_getnsec3parameters@Base 1:9.11.3+dfsg
+ dns_db_getoriginnode@Base 1:9.11.3+dfsg
+ dns_db_getrrsetstats@Base 1:9.11.3+dfsg
+ dns_db_getsigningtime@Base 1:9.11.3+dfsg
+ dns_db_getsize@Base 1:9.11.3+dfsg
+ dns_db_getsoaserial@Base 1:9.11.3+dfsg
+ dns_db_hashsize@Base 1:9.11.3+dfsg
+ dns_db_iscache@Base 1:9.11.3+dfsg
+ dns_db_isdnssec@Base 1:9.11.3+dfsg
+ dns_db_ispersistent@Base 1:9.11.3+dfsg
+ dns_db_issecure@Base 1:9.11.3+dfsg
+ dns_db_isstub@Base 1:9.11.3+dfsg
+ dns_db_iszone@Base 1:9.11.3+dfsg
+ dns_db_load2@Base 1:9.11.3+dfsg
+ dns_db_load3@Base 1:9.11.3+dfsg
+ dns_db_load@Base 1:9.11.3+dfsg
+ dns_db_newversion@Base 1:9.11.3+dfsg
+ dns_db_nodecount@Base 1:9.11.3+dfsg
+ dns_db_nodefullname@Base 1:9.11.3+dfsg
+ dns_db_ondestroy@Base 1:9.11.3+dfsg
+ dns_db_origin@Base 1:9.11.3+dfsg
+ dns_db_overmem@Base 1:9.11.3+dfsg
+ dns_db_printnode@Base 1:9.11.3+dfsg
+ dns_db_register@Base 1:9.11.3+dfsg
+ dns_db_resigned@Base 1:9.11.3+dfsg
+ dns_db_rpz_attach@Base 1:9.11.3+dfsg
+ dns_db_rpz_ready@Base 1:9.11.3+dfsg
+ dns_db_serialize@Base 1:9.11.3+dfsg
+ dns_db_setcachestats@Base 1:9.11.3+dfsg
+ dns_db_setsigningtime@Base 1:9.11.3+dfsg
+ dns_db_settask@Base 1:9.11.3+dfsg
+ dns_db_subtractrdataset@Base 1:9.11.3+dfsg
+ dns_db_transfernode@Base 1:9.11.3+dfsg
+ dns_db_unregister@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_register@Base 1:9.11.3+dfsg
+ dns_db_updatenotify_unregister@Base 1:9.11.3+dfsg
+ dns_dbiterator_current@Base 1:9.11.3+dfsg
+ dns_dbiterator_destroy@Base 1:9.11.3+dfsg
+ dns_dbiterator_first@Base 1:9.11.3+dfsg
+ dns_dbiterator_last@Base 1:9.11.3+dfsg
+ dns_dbiterator_next@Base 1:9.11.3+dfsg
+ dns_dbiterator_origin@Base 1:9.11.3+dfsg
+ dns_dbiterator_pause@Base 1:9.11.3+dfsg
+ dns_dbiterator_prev@Base 1:9.11.3+dfsg
+ dns_dbiterator_seek@Base 1:9.11.3+dfsg
+ dns_dbiterator_setcleanmode@Base 1:9.11.3+dfsg
+ dns_dbtable_add@Base 1:9.11.3+dfsg
+ dns_dbtable_adddefault@Base 1:9.11.3+dfsg
+ dns_dbtable_attach@Base 1:9.11.3+dfsg
+ dns_dbtable_create@Base 1:9.11.3+dfsg
+ dns_dbtable_detach@Base 1:9.11.3+dfsg
+ dns_dbtable_find@Base 1:9.11.3+dfsg
+ dns_dbtable_getdefault@Base 1:9.11.3+dfsg
+ dns_dbtable_remove@Base 1:9.11.3+dfsg
+ dns_dbtable_removedefault@Base 1:9.11.3+dfsg
+ dns_decompress_edns@Base 1:9.11.3+dfsg
+ dns_decompress_getmethods@Base 1:9.11.3+dfsg
+ dns_decompress_init@Base 1:9.11.3+dfsg
+ dns_decompress_invalidate@Base 1:9.11.3+dfsg
+ dns_decompress_setmethods@Base 1:9.11.3+dfsg
+ dns_decompress_type@Base 1:9.11.3+dfsg
+ dns_diff_append@Base 1:9.11.3+dfsg
+ dns_diff_appendminimal@Base 1:9.11.3+dfsg
+ dns_diff_apply@Base 1:9.11.3+dfsg
+ dns_diff_applysilently@Base 1:9.11.3+dfsg
+ dns_diff_clear@Base 1:9.11.3+dfsg
+ dns_diff_init@Base 1:9.11.3+dfsg
+ dns_diff_load@Base 1:9.11.3+dfsg
+ dns_diff_print@Base 1:9.11.3+dfsg
+ dns_diff_sort@Base 1:9.11.3+dfsg
+ dns_difftuple_copy@Base 1:9.11.3+dfsg
+ dns_difftuple_create@Base 1:9.11.3+dfsg
+ dns_difftuple_free@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse2@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse3@Base 1:9.11.3+dfsg
+ dns_dispatch_addresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_attach@Base 1:9.11.3+dfsg
+ dns_dispatch_cancel@Base 1:9.11.3+dfsg
+ dns_dispatch_changeattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_createtcp@Base 1:9.11.3+dfsg
+ dns_dispatch_detach@Base 1:9.11.3+dfsg
+ dns_dispatch_getattributes@Base 1:9.11.3+dfsg
+ dns_dispatch_getdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_getentrysocket@Base 1:9.11.3+dfsg
+ dns_dispatch_getlocaladdress@Base 1:9.11.3+dfsg
+ dns_dispatch_getnext@Base 1:9.11.3+dfsg
+ dns_dispatch_getsocket@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp2@Base 1:9.11.3+dfsg
+ dns_dispatch_gettcp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp@Base 1:9.11.3+dfsg
+ dns_dispatch_getudp_dup@Base 1:9.11.3+dfsg
+ dns_dispatch_importrecv@Base 1:9.11.3+dfsg
+ dns_dispatch_removeresponse@Base 1:9.11.3+dfsg
+ dns_dispatch_setdscp@Base 1:9.11.3+dfsg
+ dns_dispatch_starttcp@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_create@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_getblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setavailports@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackhole@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setblackportlist@Base 1:9.11.3+dfsg
+ dns_dispatchmgr_setstats@Base 1:9.11.3+dfsg
+ dns_dispatchset_cancelall@Base 1:9.11.3+dfsg
+ dns_dispatchset_create@Base 1:9.11.3+dfsg
+ dns_dispatchset_destroy@Base 1:9.11.3+dfsg
+ dns_dispatchset_get@Base 1:9.11.3+dfsg
+ dns_dlz_ssumatch@Base 1:9.11.3+dfsg
+ dns_dlz_writeablezone@Base 1:9.11.3+dfsg
+ dns_dlzallowzonexfr@Base 1:9.11.3+dfsg
+ dns_dlzconfigure@Base 1:9.11.3+dfsg
+ dns_dlzcreate@Base 1:9.11.3+dfsg
+ dns_dlzdestroy@Base 1:9.11.3+dfsg
+ dns_dlzregister@Base 1:9.11.3+dfsg
+ dns_dlzstrtoargv@Base 1:9.11.3+dfsg
+ dns_dlzunregister@Base 1:9.11.3+dfsg
+ dns_dns64_aaaafroma@Base 1:9.11.3+dfsg
+ dns_dns64_aaaaok@Base 1:9.11.3+dfsg
+ dns_dns64_append@Base 1:9.11.3+dfsg
+ dns_dns64_create@Base 1:9.11.3+dfsg
+ dns_dns64_destroy@Base 1:9.11.3+dfsg
+ dns_dns64_next@Base 1:9.11.3+dfsg
+ dns_dns64_unlink@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findmatchingkeys@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys2@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys3@Base 1:9.11.3+dfsg
+ dns_dnssec_findzonekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_keyactive@Base 1:9.11.3+dfsg
+ dns_dnssec_keyfromrdata@Base 1:9.11.3+dfsg
+ dns_dnssec_keylistfromrdataset@Base 1:9.11.3+dfsg
+ dns_dnssec_selfsigns@Base 1:9.11.3+dfsg
+ dns_dnssec_sign@Base 1:9.11.3+dfsg
+ dns_dnssec_signmessage@Base 1:9.11.3+dfsg
+ dns_dnssec_signs@Base 1:9.11.3+dfsg
+ dns_dnssec_stats@Base 1:9.11.3+dfsg
+ dns_dnssec_syncupdate@Base 1:9.11.3+dfsg
+ dns_dnssec_updatekeys@Base 1:9.11.3+dfsg
+ dns_dnssec_verify2@Base 1:9.11.3+dfsg
+ dns_dnssec_verify3@Base 1:9.11.3+dfsg
+ dns_dnssec_verify@Base 1:9.11.3+dfsg
+ dns_dnssec_verifymessage@Base 1:9.11.3+dfsg
+ dns_dnsseckey_create@Base 1:9.11.3+dfsg
+ dns_dnsseckey_destroy@Base 1:9.11.3+dfsg
+ dns_ds_buildrdata@Base 1:9.11.3+dfsg
+ dns_dsdigest_format@Base 1:9.11.3+dfsg
+ dns_dsdigest_fromtext@Base 1:9.11.3+dfsg
+ dns_dsdigest_totext@Base 1:9.11.3+dfsg
+ dns_dt_attach@Base 1:9.11.4.P1
+ dns_dt_close@Base 1:9.11.4.P1
+ dns_dt_create@Base 1:9.11.4.P1
+ dns_dt_datatotext@Base 1:9.11.4.P1
+ dns_dt_detach@Base 1:9.11.4.P1
+ dns_dt_getframe@Base 1:9.11.4.P1
+ dns_dt_getstats@Base 1:9.11.4.P1
+ dns_dt_open@Base 1:9.11.4.P1
+ dns_dt_parse@Base 1:9.11.4.P1
+ dns_dt_reopen@Base 1:9.11.4.P1
+ dns_dt_send@Base 1:9.11.4.P1
+ dns_dt_setidentity@Base 1:9.11.4.P1
+ dns_dt_setversion@Base 1:9.11.4.P1
+ dns_dt_shutdown@Base 1:9.11.4.P1
+ dns_dtdata_free@Base 1:9.11.4.P1
+ dns_dumpctx_attach@Base 1:9.11.3+dfsg
+ dns_dumpctx_cancel@Base 1:9.11.3+dfsg
+ dns_dumpctx_db@Base 1:9.11.3+dfsg
+ dns_dumpctx_detach@Base 1:9.11.3+dfsg
+ dns_dumpctx_version@Base 1:9.11.3+dfsg
+ dns_dyndb_cleanup@Base 1:9.11.3+dfsg
+ dns_dyndb_createctx@Base 1:9.11.3+dfsg
+ dns_dyndb_destroyctx@Base 1:9.11.3+dfsg
+ dns_dyndb_load@Base 1:9.11.3+dfsg
+ dns_ecdb_register@Base 1:9.11.3+dfsg
+ dns_ecdb_unregister@Base 1:9.11.3+dfsg
+ dns_fixedname_init@Base 1:9.11.4+dfsg
+ dns_fixedname_initname@Base 1:9.11.4+dfsg
+ dns_fixedname_invalidate@Base 1:9.11.4+dfsg
+ dns_fixedname_name@Base 1:9.11.4+dfsg
+ dns_fullname_hash@Base 1:9.11.3+dfsg
+ dns_fwdtable_add@Base 1:9.11.3+dfsg
+ dns_fwdtable_addfwd@Base 1:9.11.3+dfsg
+ dns_fwdtable_create@Base 1:9.11.3+dfsg
+ dns_fwdtable_delete@Base 1:9.11.3+dfsg
+ dns_fwdtable_destroy@Base 1:9.11.3+dfsg
+ dns_fwdtable_find2@Base 1:9.11.3+dfsg
+ dns_fwdtable_find@Base 1:9.11.3+dfsg
+ dns_generalstats_create@Base 1:9.11.3+dfsg
+ dns_generalstats_dump@Base 1:9.11.3+dfsg
+ dns_generalstats_increment@Base 1:9.11.3+dfsg
+ dns_geoip_match@Base 1:9.11.3+dfsg
+ dns_geoip_shutdown@Base 1:9.11.3+dfsg
+ dns_hashalg_fromtext@Base 1:9.11.3+dfsg
+ dns_ipkeylist_clear@Base 1:9.11.3+dfsg
+ dns_ipkeylist_copy@Base 1:9.11.3+dfsg
+ dns_ipkeylist_init@Base 1:9.11.3+dfsg
+ dns_ipkeylist_resize@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix2@Base 1:9.11.3+dfsg
+ dns_iptable_addprefix@Base 1:9.11.3+dfsg
+ dns_iptable_attach@Base 1:9.11.3+dfsg
+ dns_iptable_create@Base 1:9.11.3+dfsg
+ dns_iptable_detach@Base 1:9.11.3+dfsg
+ dns_iptable_merge@Base 1:9.11.3+dfsg
+ dns_journal_begin_transaction@Base 1:9.11.3+dfsg
+ dns_journal_commit@Base 1:9.11.3+dfsg
+ dns_journal_compact@Base 1:9.11.3+dfsg
+ dns_journal_current_rr@Base 1:9.11.3+dfsg
+ dns_journal_destroy@Base 1:9.11.3+dfsg
+ dns_journal_first_rr@Base 1:9.11.3+dfsg
+ dns_journal_first_serial@Base 1:9.11.3+dfsg
+ dns_journal_get_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_iter_init@Base 1:9.11.3+dfsg
+ dns_journal_last_serial@Base 1:9.11.3+dfsg
+ dns_journal_next_rr@Base 1:9.11.3+dfsg
+ dns_journal_open@Base 1:9.11.3+dfsg
+ dns_journal_print@Base 1:9.11.3+dfsg
+ dns_journal_rollforward@Base 1:9.11.3+dfsg
+ dns_journal_set_sourceserial@Base 1:9.11.3+dfsg
+ dns_journal_write_transaction@Base 1:9.11.3+dfsg
+ dns_journal_writediff@Base 1:9.11.3+dfsg
+ dns_keydata_fromdnskey@Base 1:9.11.3+dfsg
+ dns_keydata_todnskey@Base 1:9.11.3+dfsg
+ dns_keyflags_fromtext@Base 1:9.11.3+dfsg
+ dns_keynode_attach@Base 1:9.11.3+dfsg
+ dns_keynode_create@Base 1:9.11.3+dfsg
+ dns_keynode_detach@Base 1:9.11.3+dfsg
+ dns_keynode_detachall@Base 1:9.11.3+dfsg
+ dns_keynode_key@Base 1:9.11.3+dfsg
+ dns_keynode_managed@Base 1:9.11.3+dfsg
+ dns_keyring_restore@Base 1:9.11.3+dfsg
+ dns_keytable_add@Base 1:9.11.3+dfsg
+ dns_keytable_attach@Base 1:9.11.3+dfsg
+ dns_keytable_attachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_create@Base 1:9.11.3+dfsg
+ dns_keytable_delete@Base 1:9.11.3+dfsg
+ dns_keytable_deletekeynode@Base 1:9.11.3+dfsg
+ dns_keytable_detach@Base 1:9.11.3+dfsg
+ dns_keytable_detachkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_dump@Base 1:9.11.3+dfsg
+ dns_keytable_find@Base 1:9.11.3+dfsg
+ dns_keytable_finddeepestmatch@Base 1:9.11.3+dfsg
+ dns_keytable_findkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_findnextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_forall@Base 1:9.11.3+dfsg
+ dns_keytable_issecuredomain@Base 1:9.11.3+dfsg
+ dns_keytable_marksecure@Base 1:9.11.3+dfsg
+ dns_keytable_nextkeynode@Base 1:9.11.3+dfsg
+ dns_keytable_totext@Base 1:9.11.3+dfsg
+ dns_lctx@Base 1:9.11.3+dfsg
+ dns_lib_init@Base 1:9.11.3+dfsg
+ dns_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dns_lib_shutdown@Base 1:9.11.3+dfsg
+ dns_libage@Base 1:9.11.3+dfsg
+ dns_libinterface@Base 1:9.11.3+dfsg
+ dns_librevision@Base 1:9.11.3+dfsg
+ dns_loadctx_attach@Base 1:9.11.3+dfsg
+ dns_loadctx_cancel@Base 1:9.11.3+dfsg
+ dns_loadctx_detach@Base 1:9.11.3+dfsg
+ dns_log_init@Base 1:9.11.3+dfsg
+ dns_log_setcontext@Base 1:9.11.3+dfsg
+ dns_lookup_cancel@Base 1:9.11.3+dfsg
+ dns_lookup_create@Base 1:9.11.3+dfsg
+ dns_lookup_destroy@Base 1:9.11.3+dfsg
+ dns_major@Base 1:9.11.3+dfsg
+ dns_mapapi@Base 1:9.11.3+dfsg
+ dns_master_dump2@Base 1:9.11.3+dfsg
+ dns_master_dump3@Base 1:9.11.3+dfsg
+ dns_master_dump@Base 1:9.11.3+dfsg
+ dns_master_dumpinc2@Base 1:9.11.3+dfsg
+ dns_master_dumpinc3@Base 1:9.11.3+dfsg
+ dns_master_dumpinc@Base 1:9.11.3+dfsg
+ dns_master_dumpnode@Base 1:9.11.3+dfsg
+ dns_master_dumpnodetostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostream2@Base 1:9.11.3+dfsg
+ dns_master_dumptostream3@Base 1:9.11.3+dfsg
+ dns_master_dumptostream@Base 1:9.11.3+dfsg
+ dns_master_dumptostreaminc@Base 1:9.11.3+dfsg
+ dns_master_indent@Base 1:9.11.3+dfsg
+ dns_master_indentstr@Base 1:9.11.3+dfsg
+ dns_master_initrawheader@Base 1:9.11.3+dfsg
+ dns_master_loadbuffer@Base 1:9.11.3+dfsg
+ dns_master_loadbufferinc@Base 1:9.11.3+dfsg
+ dns_master_loadfile2@Base 1:9.11.3+dfsg
+ dns_master_loadfile3@Base 1:9.11.3+dfsg
+ dns_master_loadfile4@Base 1:9.11.3+dfsg
+ dns_master_loadfile5@Base 1:9.11.3+dfsg
+ dns_master_loadfile@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc2@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc3@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc4@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc5@Base 1:9.11.3+dfsg
+ dns_master_loadfileinc@Base 1:9.11.3+dfsg
+ dns_master_loadlexer@Base 1:9.11.3+dfsg
+ dns_master_loadlexerinc@Base 1:9.11.3+dfsg
+ dns_master_loadstream@Base 1:9.11.3+dfsg
+ dns_master_loadstreaminc@Base 1:9.11.3+dfsg
+ dns_master_questiontotext@Base 1:9.11.3+dfsg
+ dns_master_rdatasettotext@Base 1:9.11.3+dfsg
+ dns_master_style_cache@Base 1:9.11.3+dfsg
+ dns_master_style_comment@Base 1:9.11.3+dfsg
+ dns_master_style_debug@Base 1:9.11.3+dfsg
+ dns_master_style_default@Base 1:9.11.3+dfsg
+ dns_master_style_explicitttl@Base 1:9.11.3+dfsg
+ dns_master_style_full@Base 1:9.11.3+dfsg
+ dns_master_style_indent@Base 1:9.11.3+dfsg
+ dns_master_style_keyzone@Base 1:9.11.3+dfsg
+ dns_master_style_simple@Base 1:9.11.3+dfsg
+ dns_master_style_yaml@Base 1:9.11.3+dfsg
+ dns_master_stylecreate2@Base 1:9.11.3+dfsg
+ dns_master_stylecreate@Base 1:9.11.3+dfsg
+ dns_master_styledestroy@Base 1:9.11.3+dfsg
+ dns_master_styleflags@Base 1:9.11.3+dfsg
+ dns_message_addname@Base 1:9.11.3+dfsg
+ dns_message_buildopt@Base 1:9.11.3+dfsg
+ dns_message_checksig@Base 1:9.11.3+dfsg
+ dns_message_create@Base 1:9.11.3+dfsg
+ dns_message_currentname@Base 1:9.11.3+dfsg
+ dns_message_destroy@Base 1:9.11.3+dfsg
+ dns_message_find@Base 1:9.11.3+dfsg
+ dns_message_findname@Base 1:9.11.3+dfsg
+ dns_message_findtype@Base 1:9.11.3+dfsg
+ dns_message_firstname@Base 1:9.11.3+dfsg
+ dns_message_getopt@Base 1:9.11.3+dfsg
+ dns_message_getquerytsig@Base 1:9.11.3+dfsg
+ dns_message_getrawmessage@Base 1:9.11.3+dfsg
+ dns_message_getsig0@Base 1:9.11.3+dfsg
+ dns_message_getsig0key@Base 1:9.11.3+dfsg
+ dns_message_gettempname@Base 1:9.11.3+dfsg
+ dns_message_gettempoffsets@Base 1:9.11.3+dfsg
+ dns_message_gettemprdata@Base 1:9.11.3+dfsg
+ dns_message_gettemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_gettemprdataset@Base 1:9.11.3+dfsg
+ dns_message_gettimeadjust@Base 1:9.11.3+dfsg
+ dns_message_gettsig@Base 1:9.11.3+dfsg
+ dns_message_gettsigkey@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket2@Base 1:9.11.3+dfsg
+ dns_message_logfmtpacket@Base 1:9.11.3+dfsg
+ dns_message_logpacket2@Base 1:9.11.3+dfsg
+ dns_message_logpacket@Base 1:9.11.3+dfsg
+ dns_message_movename@Base 1:9.11.3+dfsg
+ dns_message_nextname@Base 1:9.11.3+dfsg
+ dns_message_parse@Base 1:9.11.3+dfsg
+ dns_message_peekheader@Base 1:9.11.3+dfsg
+ dns_message_pseudosectiontotext@Base 1:9.11.3+dfsg
+ dns_message_puttempname@Base 1:9.11.3+dfsg
+ dns_message_puttemprdata@Base 1:9.11.3+dfsg
+ dns_message_puttemprdatalist@Base 1:9.11.3+dfsg
+ dns_message_puttemprdataset@Base 1:9.11.3+dfsg
+ dns_message_rechecksig@Base 1:9.11.3+dfsg
+ dns_message_removename@Base 1:9.11.3+dfsg
+ dns_message_renderbegin@Base 1:9.11.3+dfsg
+ dns_message_renderchangebuffer@Base 1:9.11.3+dfsg
+ dns_message_renderend@Base 1:9.11.3+dfsg
+ dns_message_renderheader@Base 1:9.11.3+dfsg
+ dns_message_renderrelease@Base 1:9.11.3+dfsg
+ dns_message_renderreserve@Base 1:9.11.3+dfsg
+ dns_message_renderreset@Base 1:9.11.3+dfsg
+ dns_message_rendersection@Base 1:9.11.3+dfsg
+ dns_message_reply@Base 1:9.11.3+dfsg
+ dns_message_reset@Base 1:9.11.3+dfsg
+ dns_message_resetsig@Base 1:9.11.3+dfsg
+ dns_message_sectiontotext@Base 1:9.11.3+dfsg
+ dns_message_setclass@Base 1:9.11.3+dfsg
+ dns_message_setopt@Base 1:9.11.3+dfsg
+ dns_message_setquerytsig@Base 1:9.11.3+dfsg
+ dns_message_setsig0key@Base 1:9.11.3+dfsg
+ dns_message_setsortorder@Base 1:9.11.3+dfsg
+ dns_message_settimeadjust@Base 1:9.11.3+dfsg
+ dns_message_settsigkey@Base 1:9.11.3+dfsg
+ dns_message_signer@Base 1:9.11.3+dfsg
+ dns_message_takebuffer@Base 1:9.11.3+dfsg
+ dns_message_totext@Base 1:9.11.3+dfsg
+ dns_modules@Base 1:9.11.3+dfsg
+ dns_msgcat@Base 1:9.11.3+dfsg
+ dns_name_caseequal@Base 1:9.11.3+dfsg
+ dns_name_clone@Base 1:9.11.3+dfsg
+ dns_name_compare@Base 1:9.11.3+dfsg
+ dns_name_concatenate@Base 1:9.11.3+dfsg
+ dns_name_copy@Base 1:9.11.3+dfsg
+ dns_name_countlabels@Base 1:9.11.3+dfsg
+ dns_name_destroy@Base 1:9.11.3+dfsg
+ dns_name_digest@Base 1:9.11.3+dfsg
+ dns_name_downcase@Base 1:9.11.3+dfsg
+ dns_name_dup@Base 1:9.11.3+dfsg
+ dns_name_dupwithoffsets@Base 1:9.11.3+dfsg
+ dns_name_dynamic@Base 1:9.11.3+dfsg
+ dns_name_equal@Base 1:9.11.3+dfsg
+ dns_name_format@Base 1:9.11.3+dfsg
+ dns_name_free@Base 1:9.11.3+dfsg
+ dns_name_fromregion@Base 1:9.11.3+dfsg
+ dns_name_fromstring2@Base 1:9.11.3+dfsg
+ dns_name_fromstring@Base 1:9.11.3+dfsg
+ dns_name_fromtext@Base 1:9.11.3+dfsg
+ dns_name_fromwire@Base 1:9.11.3+dfsg
+ dns_name_fullcompare@Base 1:9.11.3+dfsg
+ dns_name_fullhash@Base 1:9.11.3+dfsg
+ dns_name_getlabel@Base 1:9.11.3+dfsg
+ dns_name_getlabelsequence@Base 1:9.11.3+dfsg
+ dns_name_hasbuffer@Base 1:9.11.3+dfsg
+ dns_name_hash@Base 1:9.11.3+dfsg
+ dns_name_hashbylabel@Base 1:9.11.3+dfsg
+ dns_name_init@Base 1:9.11.3+dfsg
+ dns_name_internalwildcard@Base 1:9.11.3+dfsg
+ dns_name_invalidate@Base 1:9.11.3+dfsg
+ dns_name_isabsolute@Base 1:9.11.3+dfsg
+ dns_name_isdnssd@Base 1:9.11.3+dfsg
+ dns_name_ishostname@Base 1:9.11.3+dfsg
+ dns_name_ismailbox@Base 1:9.11.3+dfsg
+ dns_name_isrfc1918@Base 1:9.11.3+dfsg
+ dns_name_issubdomain@Base 1:9.11.3+dfsg
+ dns_name_istat@Base 1:9.11.3+dfsg
+ dns_name_isula@Base 1:9.11.3+dfsg
+ dns_name_isvalid@Base 1:9.11.3+dfsg
+ dns_name_iswildcard@Base 1:9.11.3+dfsg
+ dns_name_matcheswildcard@Base 1:9.11.3+dfsg
+ dns_name_print@Base 1:9.11.3+dfsg
+ dns_name_rdatacompare@Base 1:9.11.3+dfsg
+ dns_name_reset@Base 1:9.11.3+dfsg
+ dns_name_setbuffer@Base 1:9.11.3+dfsg
+ dns_name_settotextfilter@Base 1:9.11.3+dfsg
+ dns_name_split@Base 1:9.11.3+dfsg
+ dns_name_tofilenametext@Base 1:9.11.3+dfsg
+ dns_name_toprincipal@Base 1:9.11.3+dfsg
+ dns_name_toregion@Base 1:9.11.3+dfsg
+ dns_name_tostring@Base 1:9.11.3+dfsg
+ dns_name_totext2@Base 1:9.11.3+dfsg
+ dns_name_totext@Base 1:9.11.3+dfsg
+ dns_name_towire@Base 1:9.11.3+dfsg
+ dns_ncache_add@Base 1:9.11.3+dfsg
+ dns_ncache_addoptout@Base 1:9.11.3+dfsg
+ dns_ncache_current@Base 1:9.11.3+dfsg
+ dns_ncache_getrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_getsigrdataset@Base 1:9.11.3+dfsg
+ dns_ncache_towire@Base 1:9.11.3+dfsg
+ dns_nsec3_active@Base 1:9.11.3+dfsg
+ dns_nsec3_activex@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_addnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3s@Base 1:9.11.3+dfsg
+ dns_nsec3_delnsec3sx@Base 1:9.11.3+dfsg
+ dns_nsec3_hashlength@Base 1:9.11.3+dfsg
+ dns_nsec3_hashname@Base 1:9.11.3+dfsg
+ dns_nsec3_maxiterations@Base 1:9.11.3+dfsg
+ dns_nsec3_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec3_supportedhash@Base 1:9.11.3+dfsg
+ dns_nsec3_typepresent@Base 1:9.11.3+dfsg
+ dns_nsec3param_deletechains@Base 1:9.11.3+dfsg
+ dns_nsec3param_fromprivate@Base 1:9.11.3+dfsg
+ dns_nsec3param_salttotext@Base 1:9.11.3+dfsg
+ dns_nsec3param_toprivate@Base 1:9.11.3+dfsg
+ dns_nsec_build@Base 1:9.11.3+dfsg
+ dns_nsec_buildrdata@Base 1:9.11.3+dfsg
+ dns_nsec_compressbitmap@Base 1:9.11.3+dfsg
+ dns_nsec_isset@Base 1:9.11.3+dfsg
+ dns_nsec_noexistnodata@Base 1:9.11.3+dfsg
+ dns_nsec_nseconly@Base 1:9.11.3+dfsg
+ dns_nsec_setbit@Base 1:9.11.3+dfsg
+ dns_nsec_typepresent@Base 1:9.11.3+dfsg
+ dns_ntatable_add@Base 1:9.11.3+dfsg
+ dns_ntatable_attach@Base 1:9.11.3+dfsg
+ dns_ntatable_covered@Base 1:9.11.3+dfsg
+ dns_ntatable_create@Base 1:9.11.3+dfsg
+ dns_ntatable_delete@Base 1:9.11.3+dfsg
+ dns_ntatable_detach@Base 1:9.11.3+dfsg
+ dns_ntatable_dump@Base 1:9.11.3+dfsg
+ dns_ntatable_save@Base 1:9.11.3+dfsg
+ dns_ntatable_totext@Base 1:9.11.3+dfsg
+ dns_opcode_totext@Base 1:9.11.3+dfsg
+ dns_opcodestats_create@Base 1:9.11.3+dfsg
+ dns_opcodestats_dump@Base 1:9.11.3+dfsg
+ dns_opcodestats_increment@Base 1:9.11.3+dfsg
+ dns_order_add@Base 1:9.11.3+dfsg
+ dns_order_attach@Base 1:9.11.3+dfsg
+ dns_order_create@Base 1:9.11.3+dfsg
+ dns_order_detach@Base 1:9.11.3+dfsg
+ dns_order_find@Base 1:9.11.3+dfsg
+ dns_peer_attach@Base 1:9.11.3+dfsg
+ dns_peer_detach@Base 1:9.11.3+dfsg
+ dns_peer_getbogus@Base 1:9.11.3+dfsg
+ dns_peer_getednsversion@Base 1:9.11.3+dfsg
+ dns_peer_getforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_getkey@Base 1:9.11.3+dfsg
+ dns_peer_getmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_getnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_getprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_getquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_getquerysource@Base 1:9.11.3+dfsg
+ dns_peer_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_getrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_getsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_getsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_gettransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_gettransferformat@Base 1:9.11.3+dfsg
+ dns_peer_gettransfers@Base 1:9.11.3+dfsg
+ dns_peer_gettransfersource@Base 1:9.11.3+dfsg
+ dns_peer_getudpsize@Base 1:9.11.3+dfsg
+ dns_peer_new@Base 1:9.11.3+dfsg
+ dns_peer_newprefix@Base 1:9.11.3+dfsg
+ dns_peer_setbogus@Base 1:9.11.3+dfsg
+ dns_peer_setednsversion@Base 1:9.11.3+dfsg
+ dns_peer_setforcetcp@Base 1:9.11.3+dfsg
+ dns_peer_setkey@Base 1:9.11.3+dfsg
+ dns_peer_setkeybycharp@Base 1:9.11.3+dfsg
+ dns_peer_setmaxudp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifydscp@Base 1:9.11.3+dfsg
+ dns_peer_setnotifysource@Base 1:9.11.3+dfsg
+ dns_peer_setprovideixfr@Base 1:9.11.3+dfsg
+ dns_peer_setquerydscp@Base 1:9.11.3+dfsg
+ dns_peer_setquerysource@Base 1:9.11.3+dfsg
+ dns_peer_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_peer_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_peer_setrequestnsid@Base 1:9.11.3+dfsg
+ dns_peer_setsendcookie@Base 1:9.11.3+dfsg
+ dns_peer_setsupportedns@Base 1:9.11.3+dfsg
+ dns_peer_settransferdscp@Base 1:9.11.3+dfsg
+ dns_peer_settransferformat@Base 1:9.11.3+dfsg
+ dns_peer_settransfers@Base 1:9.11.3+dfsg
+ dns_peer_settransfersource@Base 1:9.11.3+dfsg
+ dns_peer_setudpsize@Base 1:9.11.3+dfsg
+ dns_peerlist_addpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_attach@Base 1:9.11.3+dfsg
+ dns_peerlist_currpeer@Base 1:9.11.3+dfsg
+ dns_peerlist_detach@Base 1:9.11.3+dfsg
+ dns_peerlist_new@Base 1:9.11.3+dfsg
+ dns_peerlist_peerbyaddr@Base 1:9.11.3+dfsg
+ dns_portlist_add@Base 1:9.11.3+dfsg
+ dns_portlist_attach@Base 1:9.11.3+dfsg
+ dns_portlist_create@Base 1:9.11.3+dfsg
+ dns_portlist_detach@Base 1:9.11.3+dfsg
+ dns_portlist_match@Base 1:9.11.3+dfsg
+ dns_portlist_remove@Base 1:9.11.3+dfsg
+ dns_pps@Base 1:9.11.3+dfsg
+ dns_private_chains@Base 1:9.11.3+dfsg
+ dns_private_totext@Base 1:9.11.3+dfsg
+ dns_rbt_addname@Base 1:9.11.3+dfsg
+ dns_rbt_addnode@Base 1:9.11.3+dfsg
+ dns_rbt_create@Base 1:9.11.3+dfsg
+ dns_rbt_deletename@Base 1:9.11.3+dfsg
+ dns_rbt_deletenode@Base 1:9.11.3+dfsg
+ dns_rbt_deserialize_tree@Base 1:9.11.3+dfsg
+ dns_rbt_destroy2@Base 1:9.11.3+dfsg
+ dns_rbt_destroy@Base 1:9.11.3+dfsg
+ dns_rbt_findname@Base 1:9.11.3+dfsg
+ dns_rbt_findnode@Base 1:9.11.3+dfsg
+ dns_rbt_formatnodename@Base 1:9.11.3+dfsg
+ dns_rbt_fullnamefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_hashsize@Base 1:9.11.3+dfsg
+ dns_rbt_namefromnode@Base 1:9.11.3+dfsg
+ dns_rbt_nodecount@Base 1:9.11.3+dfsg
+ dns_rbt_printdot@Base 1:9.11.3+dfsg
+ dns_rbt_printnodeinfo@Base 1:9.11.3+dfsg
+ dns_rbt_printtext@Base 1:9.11.3+dfsg
+ dns_rbt_root@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_align@Base 1:9.11.3+dfsg
+ dns_rbt_serialize_tree@Base 1:9.11.3+dfsg
+ dns_rbtdb64_create@Base 1:9.11.3+dfsg
+ dns_rbtdb_create@Base 1:9.11.3+dfsg
+ dns_rbtnode_nodename@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_current@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_down@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_first@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_init@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_invalidate@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_last@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_next@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_nextflat@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_prev@Base 1:9.11.3+dfsg
+ dns_rbtnodechain_reset@Base 1:9.11.3+dfsg
+ dns_rcode_fromtext@Base 1:9.11.3+dfsg
+ dns_rcode_totext@Base 1:9.11.3+dfsg
+ dns_rcodestats_create@Base 1:9.11.3+dfsg
+ dns_rcodestats_dump@Base 1:9.11.3+dfsg
+ dns_rcodestats_increment@Base 1:9.11.3+dfsg
+ dns_rdata_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdata_apl_count@Base 1:9.11.3+dfsg
+ dns_rdata_apl_current@Base 1:9.11.3+dfsg
+ dns_rdata_apl_first@Base 1:9.11.3+dfsg
+ dns_rdata_apl_next@Base 1:9.11.3+dfsg
+ dns_rdata_casecompare@Base 1:9.11.3+dfsg
+ dns_rdata_checknames@Base 1:9.11.3+dfsg
+ dns_rdata_checkowner@Base 1:9.11.3+dfsg
+ dns_rdata_clone@Base 1:9.11.3+dfsg
+ dns_rdata_compare@Base 1:9.11.3+dfsg
+ dns_rdata_covers@Base 1:9.11.3+dfsg
+ dns_rdata_deleterrset@Base 1:9.11.3+dfsg
+ dns_rdata_digest@Base 1:9.11.3+dfsg
+ dns_rdata_exists@Base 1:9.11.3+dfsg
+ dns_rdata_freestruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromregion@Base 1:9.11.3+dfsg
+ dns_rdata_fromstruct@Base 1:9.11.3+dfsg
+ dns_rdata_fromtext@Base 1:9.11.3+dfsg
+ dns_rdata_fromwire@Base 1:9.11.3+dfsg
+ dns_rdata_hip_current@Base 1:9.11.3+dfsg
+ dns_rdata_hip_first@Base 1:9.11.3+dfsg
+ dns_rdata_hip_next@Base 1:9.11.3+dfsg
+ dns_rdata_init@Base 1:9.11.3+dfsg
+ dns_rdata_makedelete@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_current@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_first@Base 1:9.11.3+dfsg
+ dns_rdata_ninfo_next@Base 1:9.11.3+dfsg
+ dns_rdata_notexist@Base 1:9.11.3+dfsg
+ dns_rdata_opt_current@Base 1:9.11.3+dfsg
+ dns_rdata_opt_first@Base 1:9.11.3+dfsg
+ dns_rdata_opt_next@Base 1:9.11.3+dfsg
+ dns_rdata_reset@Base 1:9.11.3+dfsg
+ dns_rdata_tofmttext@Base 1:9.11.3+dfsg
+ dns_rdata_toregion@Base 1:9.11.3+dfsg
+ dns_rdata_tostruct@Base 1:9.11.3+dfsg
+ dns_rdata_totext@Base 1:9.11.3+dfsg
+ dns_rdata_towire@Base 1:9.11.3+dfsg
+ dns_rdata_txt_current@Base 1:9.11.3+dfsg
+ dns_rdata_txt_first@Base 1:9.11.3+dfsg
+ dns_rdata_txt_next@Base 1:9.11.3+dfsg
+ dns_rdata_updateop@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init@Base 1:9.11.3+dfsg
+ dns_rdatacallbacks_init_stdio@Base 1:9.11.3+dfsg
+ dns_rdataclass_format@Base 1:9.11.3+dfsg
+ dns_rdataclass_fromtext@Base 1:9.11.3+dfsg
+ dns_rdataclass_ismeta@Base 1:9.11.3+dfsg
+ dns_rdataclass_totext@Base 1:9.11.3+dfsg
+ dns_rdataclass_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatalist_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdatalist_init@Base 1:9.11.3+dfsg
+ dns_rdatalist_tordataset@Base 1:9.11.3+dfsg
+ dns_rdataset_addclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_additionaldata@Base 1:9.11.3+dfsg
+ dns_rdataset_addnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_clearprefetch@Base 1:9.11.3+dfsg
+ dns_rdataset_clone@Base 1:9.11.3+dfsg
+ dns_rdataset_count@Base 1:9.11.3+dfsg
+ dns_rdataset_current@Base 1:9.11.3+dfsg
+ dns_rdataset_disassociate@Base 1:9.11.3+dfsg
+ dns_rdataset_expire@Base 1:9.11.3+dfsg
+ dns_rdataset_first@Base 1:9.11.3+dfsg
+ dns_rdataset_getadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_getclosest@Base 1:9.11.3+dfsg
+ dns_rdataset_getnoqname@Base 1:9.11.3+dfsg
+ dns_rdataset_getownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_init@Base 1:9.11.3+dfsg
+ dns_rdataset_invalidate@Base 1:9.11.3+dfsg
+ dns_rdataset_isassociated@Base 1:9.11.3+dfsg
+ dns_rdataset_makequestion@Base 1:9.11.3+dfsg
+ dns_rdataset_next@Base 1:9.11.3+dfsg
+ dns_rdataset_putadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setadditional@Base 1:9.11.3+dfsg
+ dns_rdataset_setownercase@Base 1:9.11.3+dfsg
+ dns_rdataset_settrust@Base 1:9.11.3+dfsg
+ dns_rdataset_totext@Base 1:9.11.3+dfsg
+ dns_rdataset_towire@Base 1:9.11.3+dfsg
+ dns_rdataset_towirepartial@Base 1:9.11.3+dfsg
+ dns_rdataset_towiresorted@Base 1:9.11.3+dfsg
+ dns_rdataset_trimttl@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_current@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_destroy@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_first@Base 1:9.11.3+dfsg
+ dns_rdatasetiter_next@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_create@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_decrement@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_dump@Base 1:9.11.3+dfsg
+ dns_rdatasetstats_increment@Base 1:9.11.3+dfsg
+ dns_rdataslab_count@Base 1:9.11.3+dfsg
+ dns_rdataslab_equal@Base 1:9.11.3+dfsg
+ dns_rdataslab_equalx@Base 1:9.11.3+dfsg
+ dns_rdataslab_fromrdataset@Base 1:9.11.3+dfsg
+ dns_rdataslab_merge@Base 1:9.11.3+dfsg
+ dns_rdataslab_size@Base 1:9.11.3+dfsg
+ dns_rdataslab_subtract@Base 1:9.11.3+dfsg
+ dns_rdataslab_tordataset@Base 1:9.11.3+dfsg
+ dns_rdatatype_atparent@Base 1:9.11.3+dfsg
+ dns_rdatatype_attributes@Base 1:9.11.3+dfsg
+ dns_rdatatype_format@Base 1:9.11.3+dfsg
+ dns_rdatatype_fromtext@Base 1:9.11.3+dfsg
+ dns_rdatatype_isdnssec@Base 1:9.11.3+dfsg
+ dns_rdatatype_isknown@Base 1:9.11.3+dfsg
+ dns_rdatatype_ismeta@Base 1:9.11.3+dfsg
+ dns_rdatatype_issingleton@Base 1:9.11.3+dfsg
+ dns_rdatatype_iszonecutauth@Base 1:9.11.3+dfsg
+ dns_rdatatype_notquestion@Base 1:9.11.3+dfsg
+ dns_rdatatype_questiononly@Base 1:9.11.3+dfsg
+ dns_rdatatype_totext@Base 1:9.11.3+dfsg
+ dns_rdatatype_tounknowntext@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_create@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_dump@Base 1:9.11.3+dfsg
+ dns_rdatatypestats_increment@Base 1:9.11.3+dfsg
+ dns_request_cancel@Base 1:9.11.3+dfsg
+ dns_request_create@Base 1:9.11.3+dfsg
+ dns_request_createraw2@Base 1:9.11.3+dfsg
+ dns_request_createraw3@Base 1:9.11.3+dfsg
+ dns_request_createraw4@Base 1:9.11.3+dfsg
+ dns_request_createraw@Base 1:9.11.3+dfsg
+ dns_request_createvia2@Base 1:9.11.3+dfsg
+ dns_request_createvia3@Base 1:9.11.3+dfsg
+ dns_request_createvia4@Base 1:9.11.3+dfsg
+ dns_request_createvia@Base 1:9.11.3+dfsg
+ dns_request_destroy@Base 1:9.11.3+dfsg
+ dns_request_getresponse@Base 1:9.11.3+dfsg
+ dns_request_usedtcp@Base 1:9.11.3+dfsg
+ dns_requestmgr_attach@Base 1:9.11.3+dfsg
+ dns_requestmgr_create@Base 1:9.11.3+dfsg
+ dns_requestmgr_detach@Base 1:9.11.3+dfsg
+ dns_requestmgr_shutdown@Base 1:9.11.3+dfsg
+ dns_requestmgr_whenshutdown@Base 1:9.11.3+dfsg
+ dns_resolver_addalternate@Base 1:9.11.3+dfsg
+ dns_resolver_addbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_algorithm_supported@Base 1:9.11.3+dfsg
+ dns_resolver_attach@Base 1:9.11.3+dfsg
+ dns_resolver_cancelfetch@Base 1:9.11.3+dfsg
+ dns_resolver_create@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch2@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch3@Base 1:9.11.3+dfsg
+ dns_resolver_createfetch@Base 1:9.11.3+dfsg
+ dns_resolver_destroyfetch@Base 1:9.11.3+dfsg
+ dns_resolver_detach@Base 1:9.11.3+dfsg
+ dns_resolver_disable_algorithm@Base 1:9.11.3+dfsg
+ dns_resolver_disable_ds_digest@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchmgr@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv4@Base 1:9.11.3+dfsg
+ dns_resolver_dispatchv6@Base 1:9.11.3+dfsg
+ dns_resolver_ds_digest_supported@Base 1:9.11.3+dfsg
+ dns_resolver_dumpfetches@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_flushbadnames@Base 1:9.11.3+dfsg
+ dns_resolver_freeze@Base 1:9.11.3+dfsg
+ dns_resolver_getbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_getclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_getlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_getmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_getmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_getoptions@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_getquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_getquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_gettimeout@Base 1:9.11.3+dfsg
+ dns_resolver_getudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_logfetch@Base 1:9.11.3+dfsg
+ dns_resolver_nrunning@Base 1:9.11.3+dfsg
+ dns_resolver_prime@Base 1:9.11.3+dfsg
+ dns_resolver_printbadcache@Base 1:9.11.3+dfsg
+ dns_resolver_reset_algorithms@Base 1:9.11.3+dfsg
+ dns_resolver_reset_ds_digests@Base 1:9.11.3+dfsg
+ dns_resolver_resetmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setclientsperquery@Base 1:9.11.3+dfsg
+ dns_resolver_setfetchesperzone@Base 1:9.11.3+dfsg
+ dns_resolver_setlamettl@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxdepth@Base 1:9.11.3+dfsg
+ dns_resolver_setmaxqueries@Base 1:9.11.3+dfsg
+ dns_resolver_setmustbesecure@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp4@Base 1:9.11.3+dfsg
+ dns_resolver_setquerydscp6@Base 1:9.11.3+dfsg
+ dns_resolver_setquotaresponse@Base 1:9.11.3+dfsg
+ dns_resolver_settimeout@Base 1:9.11.3+dfsg
+ dns_resolver_setudpsize@Base 1:9.11.3+dfsg
+ dns_resolver_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_resolver_shutdown@Base 1:9.11.3+dfsg
+ dns_resolver_socketmgr@Base 1:9.11.3+dfsg
+ dns_resolver_taskmgr@Base 1:9.11.3+dfsg
+ dns_resolver_whenshutdown@Base 1:9.11.3+dfsg
+ dns_result_register@Base 1:9.11.3+dfsg
+ dns_result_torcode@Base 1:9.11.3+dfsg
+ dns_result_totext@Base 1:9.11.3+dfsg
+ dns_root_checkhints@Base 1:9.11.3+dfsg
+ dns_rootname@Base 1:9.11.3+dfsg
+ dns_rootns_create@Base 1:9.11.3+dfsg
+ dns_rpz_add@Base 1:9.11.3+dfsg
+ dns_rpz_attach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_beginload@Base 1:9.11.3+dfsg
+ dns_rpz_decode_cname@Base 1:9.11.3+dfsg
+ dns_rpz_delete@Base 1:9.11.3+dfsg
+ dns_rpz_detach_rpzs@Base 1:9.11.3+dfsg
+ dns_rpz_find_ip@Base 1:9.11.3+dfsg
+ dns_rpz_find_name@Base 1:9.11.3+dfsg
+ dns_rpz_new_zones@Base 1:9.11.3+dfsg
+ dns_rpz_policy2str@Base 1:9.11.3+dfsg
+ dns_rpz_ready@Base 1:9.11.3+dfsg
+ dns_rpz_str2policy@Base 1:9.11.3+dfsg
+ dns_rpz_type2str@Base 1:9.11.3+dfsg
+ dns_rriterator_current@Base 1:9.11.3+dfsg
+ dns_rriterator_destroy@Base 1:9.11.3+dfsg
+ dns_rriterator_first@Base 1:9.11.3+dfsg
+ dns_rriterator_init@Base 1:9.11.3+dfsg
+ dns_rriterator_next@Base 1:9.11.3+dfsg
+ dns_rriterator_nextrrset@Base 1:9.11.3+dfsg
+ dns_rriterator_pause@Base 1:9.11.3+dfsg
+ dns_rrl@Base 1:9.11.3+dfsg
+ dns_rrl_init@Base 1:9.11.3+dfsg
+ dns_rrl_view_destroy@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdb_putrdata@Base 1:9.11.3+dfsg
+ dns_sdb_putrr@Base 1:9.11.3+dfsg
+ dns_sdb_putsoa@Base 1:9.11.3+dfsg
+ dns_sdb_register@Base 1:9.11.3+dfsg
+ dns_sdb_unregister@Base 1:9.11.3+dfsg
+ dns_sdlz_putnamedrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putrr@Base 1:9.11.3+dfsg
+ dns_sdlz_putsoa@Base 1:9.11.3+dfsg
+ dns_sdlz_setdb@Base 1:9.11.3+dfsg
+ dns_sdlzregister@Base 1:9.11.3+dfsg
+ dns_sdlzunregister@Base 1:9.11.3+dfsg
+ dns_secalg_format@Base 1:9.11.3+dfsg
+ dns_secalg_fromtext@Base 1:9.11.3+dfsg
+ dns_secalg_totext@Base 1:9.11.3+dfsg
+ dns_secproto_fromtext@Base 1:9.11.3+dfsg
+ dns_secproto_totext@Base 1:9.11.3+dfsg
+ dns_soa_buildrdata@Base 1:9.11.3+dfsg
+ dns_soa_getexpire@Base 1:9.11.3+dfsg
+ dns_soa_getminimum@Base 1:9.11.3+dfsg
+ dns_soa_getrefresh@Base 1:9.11.3+dfsg
+ dns_soa_getretry@Base 1:9.11.3+dfsg
+ dns_soa_getserial@Base 1:9.11.3+dfsg
+ dns_soa_setexpire@Base 1:9.11.3+dfsg
+ dns_soa_setminimum@Base 1:9.11.3+dfsg
+ dns_soa_setrefresh@Base 1:9.11.3+dfsg
+ dns_soa_setretry@Base 1:9.11.3+dfsg
+ dns_soa_setserial@Base 1:9.11.3+dfsg
+ dns_ssu_external_match@Base 1:9.11.3+dfsg
+ dns_ssu_mtypefromstring@Base 1:9.11.3+dfsg
+ dns_ssurule_identity@Base 1:9.11.3+dfsg
+ dns_ssurule_isgrant@Base 1:9.11.3+dfsg
+ dns_ssurule_matchtype@Base 1:9.11.3+dfsg
+ dns_ssurule_name@Base 1:9.11.3+dfsg
+ dns_ssurule_types@Base 1:9.11.3+dfsg
+ dns_ssutable_addrule@Base 1:9.11.3+dfsg
+ dns_ssutable_attach@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules2@Base 1:9.11.3+dfsg
+ dns_ssutable_checkrules@Base 1:9.11.3+dfsg
+ dns_ssutable_create@Base 1:9.11.3+dfsg
+ dns_ssutable_createdlz@Base 1:9.11.3+dfsg
+ dns_ssutable_detach@Base 1:9.11.3+dfsg
+ dns_ssutable_firstrule@Base 1:9.11.3+dfsg
+ dns_ssutable_nextrule@Base 1:9.11.3+dfsg
+ dns_stats_alloccounters@Base 1:9.11.3+dfsg
+ dns_stats_attach@Base 1:9.11.3+dfsg
+ dns_stats_detach@Base 1:9.11.3+dfsg
+ dns_stats_freecounters@Base 1:9.11.3+dfsg
+ dns_statscounter_names@Base 1:9.11.3+dfsg
+ dns_tcpmsg_cancelread@Base 1:9.11.3+dfsg
+ dns_tcpmsg_init@Base 1:9.11.3+dfsg
+ dns_tcpmsg_invalidate@Base 1:9.11.3+dfsg
+ dns_tcpmsg_keepbuffer@Base 1:9.11.3+dfsg
+ dns_tcpmsg_readmessage@Base 1:9.11.3+dfsg
+ dns_tcpmsg_setmaxsize@Base 1:9.11.3+dfsg
+ dns_time32_fromtext@Base 1:9.11.3+dfsg
+ dns_time32_totext@Base 1:9.11.3+dfsg
+ dns_time64_from32@Base 1:9.11.3+dfsg
+ dns_time64_fromtext@Base 1:9.11.3+dfsg
+ dns_time64_totext@Base 1:9.11.3+dfsg
+ dns_timer_setidle@Base 1:9.11.3+dfsg
+ dns_tkey_builddeletequery@Base 1:9.11.3+dfsg
+ dns_tkey_builddhquery@Base 1:9.11.3+dfsg
+ dns_tkey_buildgssquery@Base 1:9.11.3+dfsg
+ dns_tkey_gssnegotiate@Base 1:9.11.3+dfsg
+ dns_tkey_processdeleteresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processdhresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processgssresponse@Base 1:9.11.3+dfsg
+ dns_tkey_processquery@Base 1:9.11.3+dfsg
+ dns_tkeyctx_create@Base 1:9.11.3+dfsg
+ dns_tkeyctx_destroy@Base 1:9.11.3+dfsg
+ dns_trust_totext@Base 1:9.11.3+dfsg
+ dns_tsec_create@Base 1:9.11.3+dfsg
+ dns_tsec_destroy@Base 1:9.11.3+dfsg
+ dns_tsec_getkey@Base 1:9.11.3+dfsg
+ dns_tsec_gettype@Base 1:9.11.3+dfsg
+ dns_tsig_gssapi_name@Base 1:9.11.3+dfsg
+ dns_tsig_gssapims_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacmd5_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha1_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha224_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha256_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha384_name@Base 1:9.11.3+dfsg
+ dns_tsig_hmacsha512_name@Base 1:9.11.3+dfsg
+ dns_tsig_sign@Base 1:9.11.3+dfsg
+ dns_tsig_verify@Base 1:9.11.3+dfsg
+ dns_tsigkey_attach@Base 1:9.11.3+dfsg
+ dns_tsigkey_create@Base 1:9.11.3+dfsg
+ dns_tsigkey_createfromkey@Base 1:9.11.3+dfsg
+ dns_tsigkey_detach@Base 1:9.11.3+dfsg
+ dns_tsigkey_find@Base 1:9.11.3+dfsg
+ dns_tsigkey_setdeleted@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_add@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_attach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_create@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_detach@Base 1:9.11.3+dfsg
+ dns_tsigkeyring_dumpanddetach@Base 1:9.11.3+dfsg
+ dns_tsigrcode_fromtext@Base 1:9.11.3+dfsg
+ dns_tsigrcode_totext@Base 1:9.11.3+dfsg
+ dns_ttl_fromtext@Base 1:9.11.3+dfsg
+ dns_ttl_totext2@Base 1:9.11.3+dfsg
+ dns_ttl_totext@Base 1:9.11.3+dfsg
+ dns_update_signatures@Base 1:9.11.3+dfsg
+ dns_update_signaturesinc@Base 1:9.11.3+dfsg
+ dns_update_soaserial@Base 1:9.11.3+dfsg
+ dns_validator_cancel@Base 1:9.11.3+dfsg
+ dns_validator_create@Base 1:9.11.3+dfsg
+ dns_validator_destroy@Base 1:9.11.3+dfsg
+ dns_validator_send@Base 1:9.11.3+dfsg
+ dns_version@Base 1:9.11.3+dfsg
+ dns_view_adddelegationonly@Base 1:9.11.3+dfsg
+ dns_view_addzone@Base 1:9.11.3+dfsg
+ dns_view_asyncload2@Base 1:9.11.5+dfsg
+ dns_view_asyncload@Base 1:9.11.3+dfsg
+ dns_view_attach@Base 1:9.11.3+dfsg
+ dns_view_checksig@Base 1:9.11.3+dfsg
+ dns_view_create@Base 1:9.11.3+dfsg
+ dns_view_createresolver@Base 1:9.11.3+dfsg
+ dns_view_createzonetable@Base 1:9.11.3+dfsg
+ dns_view_detach@Base 1:9.11.3+dfsg
+ dns_view_dialup@Base 1:9.11.3+dfsg
+ dns_view_dumpdbtostream@Base 1:9.11.3+dfsg
+ dns_view_excludedelegationonly@Base 1:9.11.3+dfsg
+ dns_view_find2@Base 1:9.11.3+dfsg
+ dns_view_find@Base 1:9.11.3+dfsg
+ dns_view_findzone@Base 1:9.11.3+dfsg
+ dns_view_findzonecut2@Base 1:9.11.3+dfsg
+ dns_view_findzonecut@Base 1:9.11.3+dfsg
+ dns_view_flushanddetach@Base 1:9.11.3+dfsg
+ dns_view_flushcache2@Base 1:9.11.3+dfsg
+ dns_view_flushcache@Base 1:9.11.3+dfsg
+ dns_view_flushname@Base 1:9.11.3+dfsg
+ dns_view_flushnode@Base 1:9.11.3+dfsg
+ dns_view_freeze@Base 1:9.11.3+dfsg
+ dns_view_freezezones@Base 1:9.11.3+dfsg
+ dns_view_getadbstats@Base 1:9.11.3+dfsg
+ dns_view_getdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_getfailttl@Base 1:9.11.3+dfsg
+ dns_view_getntatable@Base 1:9.11.3+dfsg
+ dns_view_getpeertsig@Base 1:9.11.3+dfsg
+ dns_view_getresquerystats@Base 1:9.11.3+dfsg
+ dns_view_getresstats@Base 1:9.11.3+dfsg
+ dns_view_getrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_getsecroots@Base 1:9.11.3+dfsg
+ dns_view_gettsig@Base 1:9.11.3+dfsg
+ dns_view_initntatable@Base 1:9.11.3+dfsg
+ dns_view_initsecroots@Base 1:9.11.3+dfsg
+ dns_view_iscacheshared@Base 1:9.11.3+dfsg
+ dns_view_isdelegationonly@Base 1:9.11.3+dfsg
+ dns_view_issecuredomain@Base 1:9.11.3+dfsg
+ dns_view_load@Base 1:9.11.3+dfsg
+ dns_view_loadnew@Base 1:9.11.3+dfsg
+ dns_view_loadnta@Base 1:9.11.3+dfsg
+ dns_view_ntacovers@Base 1:9.11.3+dfsg
+ dns_view_restorekeyring@Base 1:9.11.3+dfsg
+ dns_view_saventa@Base 1:9.11.3+dfsg
+ dns_view_searchdlz@Base 1:9.11.3+dfsg
+ dns_view_setadbstats@Base 1:9.11.3+dfsg
+ dns_view_setcache2@Base 1:9.11.3+dfsg
+ dns_view_setcache@Base 1:9.11.3+dfsg
+ dns_view_setdstport@Base 1:9.11.3+dfsg
+ dns_view_setdynamickeyring@Base 1:9.11.3+dfsg
+ dns_view_setfailttl@Base 1:9.11.3+dfsg
+ dns_view_sethints@Base 1:9.11.3+dfsg
+ dns_view_setkeyring@Base 1:9.11.3+dfsg
+ dns_view_setnewzones@Base 1:9.11.3+dfsg
+ dns_view_setresquerystats@Base 1:9.11.3+dfsg
+ dns_view_setresstats@Base 1:9.11.3+dfsg
+ dns_view_setrootdelonly@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_setviewcommit@Base 1:9.11.3+dfsg
+ dns_view_setviewrevert@Base 1:9.11.3+dfsg
+ dns_view_simplefind@Base 1:9.11.3+dfsg
+ dns_view_thaw@Base 1:9.11.3+dfsg
+ dns_view_untrust@Base 1:9.11.3+dfsg
+ dns_view_weakattach@Base 1:9.11.3+dfsg
+ dns_view_weakdetach@Base 1:9.11.3+dfsg
+ dns_viewlist_find@Base 1:9.11.3+dfsg
+ dns_viewlist_findzone@Base 1:9.11.3+dfsg
+ dns_wildcardname@Base 1:9.11.3+dfsg
+ dns_xfrin_attach@Base 1:9.11.3+dfsg
+ dns_xfrin_create2@Base 1:9.11.3+dfsg
+ dns_xfrin_create3@Base 1:9.11.3+dfsg
+ dns_xfrin_create@Base 1:9.11.3+dfsg
+ dns_xfrin_detach@Base 1:9.11.3+dfsg
+ dns_xfrin_shutdown@Base 1:9.11.3+dfsg
+ dns_zone_addnsec3chain@Base 1:9.11.3+dfsg
+ dns_zone_asyncload2@Base 1:9.11.5+dfsg
+ dns_zone_asyncload@Base 1:9.11.3+dfsg
+ dns_zone_attach@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable@Base 1:9.11.3+dfsg
+ dns_zone_catz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_cdscheck@Base 1:9.11.3+dfsg
+ dns_zone_checknames@Base 1:9.11.3+dfsg
+ dns_zone_clearforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_clearnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_clearqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_clearupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_clearxfracl@Base 1:9.11.3+dfsg
+ dns_zone_create@Base 1:9.11.3+dfsg
+ dns_zone_detach@Base 1:9.11.3+dfsg
+ dns_zone_dialup@Base 1:9.11.3+dfsg
+ dns_zone_dlzpostload@Base 1:9.11.3+dfsg
+ dns_zone_dump@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream2@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream3@Base 1:9.11.3+dfsg
+ dns_zone_dumptostream@Base 1:9.11.3+dfsg
+ dns_zone_expire@Base 1:9.11.3+dfsg
+ dns_zone_first@Base 1:9.11.3+dfsg
+ dns_zone_flush@Base 1:9.11.3+dfsg
+ dns_zone_forcereload@Base 1:9.11.3+dfsg
+ dns_zone_forwardupdate@Base 1:9.11.3+dfsg
+ dns_zone_fulldumptostream@Base 1:9.11.3+dfsg
+ dns_zone_get_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_get_rpz_num@Base 1:9.11.3+dfsg
+ dns_zone_getadded@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getautomatic@Base 1:9.11.3+dfsg
+ dns_zone_getchecknames@Base 1:9.11.3+dfsg
+ dns_zone_getclass@Base 1:9.11.3+dfsg
+ dns_zone_getdb@Base 1:9.11.3+dfsg
+ dns_zone_getdbtype@Base 1:9.11.3+dfsg
+ dns_zone_getexpiretime@Base 1:9.11.3+dfsg
+ dns_zone_getfile@Base 1:9.11.3+dfsg
+ dns_zone_getforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_getidlein@Base 1:9.11.3+dfsg
+ dns_zone_getidleout@Base 1:9.11.3+dfsg
+ dns_zone_getincludes@Base 1:9.11.3+dfsg
+ dns_zone_getjournal@Base 1:9.11.3+dfsg
+ dns_zone_getjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_getkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_getkeyopts@Base 1:9.11.3+dfsg
+ dns_zone_getloadtime@Base 1:9.11.3+dfsg
+ dns_zone_getmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_getmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_getmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_getmctx@Base 1:9.11.3+dfsg
+ dns_zone_getmgr@Base 1:9.11.3+dfsg
+ dns_zone_getnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_getnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_getnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getoptions2@Base 1:9.11.3+dfsg
+ dns_zone_getoptions@Base 1:9.11.3+dfsg
+ dns_zone_getorigin@Base 1:9.11.3+dfsg
+ dns_zone_getprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_getqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_getqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_getraw@Base 1:9.11.3+dfsg
+ dns_zone_getrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshkeytime@Base 1:9.11.3+dfsg
+ dns_zone_getrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_getrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_getrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_getrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_getserial2@Base 1:9.11.3+dfsg
+ dns_zone_getserial@Base 1:9.11.3+dfsg
+ dns_zone_getserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_getsignatures@Base 1:9.11.3+dfsg
+ dns_zone_getsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_getsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_getssutable@Base 1:9.11.3+dfsg
+ dns_zone_getstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_getstatscounters@Base 1:9.11.3+dfsg
+ dns_zone_gettask@Base 1:9.11.3+dfsg
+ dns_zone_gettype@Base 1:9.11.3+dfsg
+ dns_zone_getupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_getupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_getview@Base 1:9.11.3+dfsg
+ dns_zone_getxfracl@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_getxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_getzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_iattach@Base 1:9.11.3+dfsg
+ dns_zone_idetach@Base 1:9.11.3+dfsg
+ dns_zone_isdynamic@Base 1:9.11.3+dfsg
+ dns_zone_isforced@Base 1:9.11.3+dfsg
+ dns_zone_keydone@Base 1:9.11.3+dfsg
+ dns_zone_link@Base 1:9.11.3+dfsg
+ dns_zone_load@Base 1:9.11.3+dfsg
+ dns_zone_loadandthaw@Base 1:9.11.3+dfsg
+ dns_zone_loadnew@Base 1:9.11.3+dfsg
+ dns_zone_log@Base 1:9.11.3+dfsg
+ dns_zone_logc@Base 1:9.11.3+dfsg
+ dns_zone_logv@Base 1:9.11.4+dfsg
+ dns_zone_maintenance@Base 1:9.11.3+dfsg
+ dns_zone_markdirty@Base 1:9.11.3+dfsg
+ dns_zone_mkey_day@Base 1:9.11.3+dfsg
+ dns_zone_mkey_hour@Base 1:9.11.3+dfsg
+ dns_zone_mkey_month@Base 1:9.11.3+dfsg
+ dns_zone_name@Base 1:9.11.3+dfsg
+ dns_zone_nameonly@Base 1:9.11.3+dfsg
+ dns_zone_next@Base 1:9.11.3+dfsg
+ dns_zone_notify@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive2@Base 1:9.11.3+dfsg
+ dns_zone_notifyreceive@Base 1:9.11.3+dfsg
+ dns_zone_nscheck@Base 1:9.11.3+dfsg
+ dns_zone_refresh@Base 1:9.11.3+dfsg
+ dns_zone_rekey@Base 1:9.11.3+dfsg
+ dns_zone_replacedb@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable@Base 1:9.11.3+dfsg
+ dns_zone_rpz_enable_db@Base 1:9.11.3+dfsg
+ dns_zone_set_parentcatz@Base 1:9.11.3+dfsg
+ dns_zone_setacache@Base 1:9.11.3+dfsg
+ dns_zone_setadded@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotify@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifydscpkeys@Base 1:9.11.3+dfsg
+ dns_zone_setalsonotifywithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setaltxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setautomatic@Base 1:9.11.3+dfsg
+ dns_zone_setcheckmx@Base 1:9.11.3+dfsg
+ dns_zone_setchecknames@Base 1:9.11.3+dfsg
+ dns_zone_setcheckns@Base 1:9.11.3+dfsg
+ dns_zone_setchecksrv@Base 1:9.11.3+dfsg
+ dns_zone_setclass@Base 1:9.11.3+dfsg
+ dns_zone_setdb@Base 1:9.11.3+dfsg
+ dns_zone_setdbtype@Base 1:9.11.3+dfsg
+ dns_zone_setdialup@Base 1:9.11.3+dfsg
+ dns_zone_setfile2@Base 1:9.11.3+dfsg
+ dns_zone_setfile3@Base 1:9.11.3+dfsg
+ dns_zone_setfile@Base 1:9.11.3+dfsg
+ dns_zone_setflag@Base 1:9.11.3+dfsg
+ dns_zone_setforwardacl@Base 1:9.11.3+dfsg
+ dns_zone_setidlein@Base 1:9.11.3+dfsg
+ dns_zone_setidleout@Base 1:9.11.3+dfsg
+ dns_zone_setisself@Base 1:9.11.3+dfsg
+ dns_zone_setjournal@Base 1:9.11.3+dfsg
+ dns_zone_setjournalsize@Base 1:9.11.3+dfsg
+ dns_zone_setkeydirectory@Base 1:9.11.3+dfsg
+ dns_zone_setkeyopt@Base 1:9.11.3+dfsg
+ dns_zone_setmasters@Base 1:9.11.3+dfsg
+ dns_zone_setmasterswithkeys@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrecords@Base 1:9.11.3+dfsg
+ dns_zone_setmaxrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setmaxttl@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrin@Base 1:9.11.3+dfsg
+ dns_zone_setmaxxfrout@Base 1:9.11.3+dfsg
+ dns_zone_setminrefreshtime@Base 1:9.11.3+dfsg
+ dns_zone_setminretrytime@Base 1:9.11.3+dfsg
+ dns_zone_setnodes@Base 1:9.11.3+dfsg
+ dns_zone_setnotifyacl@Base 1:9.11.3+dfsg
+ dns_zone_setnotifydelay@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6@Base 1:9.11.3+dfsg
+ dns_zone_setnotifysrc6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setnotifytype@Base 1:9.11.3+dfsg
+ dns_zone_setnsec3param@Base 1:9.11.3+dfsg
+ dns_zone_setoption2@Base 1:9.11.3+dfsg
+ dns_zone_setoption@Base 1:9.11.3+dfsg
+ dns_zone_setorigin@Base 1:9.11.3+dfsg
+ dns_zone_setprivatetype@Base 1:9.11.3+dfsg
+ dns_zone_setqueryacl@Base 1:9.11.3+dfsg
+ dns_zone_setqueryonacl@Base 1:9.11.3+dfsg
+ dns_zone_setrawdata@Base 1:9.11.3+dfsg
+ dns_zone_setrcvquerystats@Base 1:9.11.3+dfsg
+ dns_zone_setrefreshkeyinterval@Base 1:9.11.3+dfsg
+ dns_zone_setrequestexpire@Base 1:9.11.3+dfsg
+ dns_zone_setrequestixfr@Base 1:9.11.3+dfsg
+ dns_zone_setrequeststats@Base 1:9.11.3+dfsg
+ dns_zone_setserial@Base 1:9.11.3+dfsg
+ dns_zone_setserialupdatemethod@Base 1:9.11.3+dfsg
+ dns_zone_setsignatures@Base 1:9.11.3+dfsg
+ dns_zone_setsigresigninginterval@Base 1:9.11.3+dfsg
+ dns_zone_setsigvalidityinterval@Base 1:9.11.3+dfsg
+ dns_zone_setssutable@Base 1:9.11.3+dfsg
+ dns_zone_setstatistics@Base 1:9.11.3+dfsg
+ dns_zone_setstatlevel@Base 1:9.11.3+dfsg
+ dns_zone_setstats@Base 1:9.11.3+dfsg
+ dns_zone_settask@Base 1:9.11.3+dfsg
+ dns_zone_settype@Base 1:9.11.3+dfsg
+ dns_zone_setupdateacl@Base 1:9.11.3+dfsg
+ dns_zone_setupdatedisabled@Base 1:9.11.3+dfsg
+ dns_zone_setview@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zone_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zone_setxfracl@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource4dscp@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6@Base 1:9.11.3+dfsg
+ dns_zone_setxfrsource6dscp@Base 1:9.11.3+dfsg
+ dns_zone_setzeronosoattl@Base 1:9.11.3+dfsg
+ dns_zone_signwithkey@Base 1:9.11.3+dfsg
+ dns_zone_synckeyzone@Base 1:9.11.3+dfsg
+ dns_zone_unload@Base 1:9.11.3+dfsg
+ dns_zonekey_iszonekey@Base 1:9.11.3+dfsg
+ dns_zonemgr_attach@Base 1:9.11.3+dfsg
+ dns_zonemgr_create@Base 1:9.11.3+dfsg
+ dns_zonemgr_createzone@Base 1:9.11.3+dfsg
+ dns_zonemgr_detach@Base 1:9.11.3+dfsg
+ dns_zonemgr_forcemaint@Base 1:9.11.3+dfsg
+ dns_zonemgr_getcount@Base 1:9.11.3+dfsg
+ dns_zonemgr_getiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_getnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_getttransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_managezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_releasezone@Base 1:9.11.3+dfsg
+ dns_zonemgr_resumexfrs@Base 1:9.11.3+dfsg
+ dns_zonemgr_setiolimit@Base 1:9.11.3+dfsg
+ dns_zonemgr_setnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setserialqueryrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_setsize@Base 1:9.11.3+dfsg
+ dns_zonemgr_setstartupnotifyrate@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersin@Base 1:9.11.3+dfsg
+ dns_zonemgr_settransfersperns@Base 1:9.11.3+dfsg
+ dns_zonemgr_shutdown@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachable@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachableadd@Base 1:9.11.3+dfsg
+ dns_zonemgr_unreachabledel@Base 1:9.11.3+dfsg
+ dns_zt_apply2@Base 1:9.11.3+dfsg
+ dns_zt_apply@Base 1:9.11.3+dfsg
+ dns_zt_asyncload2@Base 1:9.11.5+dfsg
+ dns_zt_asyncload@Base 1:9.11.3+dfsg
+ dns_zt_attach@Base 1:9.11.3+dfsg
+ dns_zt_create@Base 1:9.11.3+dfsg
+ dns_zt_detach@Base 1:9.11.3+dfsg
+ dns_zt_find@Base 1:9.11.3+dfsg
+ dns_zt_flushanddetach@Base 1:9.11.3+dfsg
+ dns_zt_freezezones@Base 1:9.11.3+dfsg
+ dns_zt_load@Base 1:9.11.3+dfsg
+ dns_zt_loadnew@Base 1:9.11.3+dfsg
+ dns_zt_mount@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_setviewcommit@Base 1:9.11.3+dfsg
+ dns_zt_setviewrevert@Base 1:9.11.3+dfsg
+ dns_zt_unmount@Base 1:9.11.3+dfsg
+ dnstap__dnstap__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__free_unpacked@Base 1:9.11.4.P1
+ dnstap__dnstap__get_packed_size@Base 1:9.11.4.P1
+ dnstap__dnstap__init@Base 1:9.11.4.P1
+ dnstap__dnstap__pack@Base 1:9.11.4.P1
+ dnstap__dnstap__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__dnstap__type__descriptor@Base 1:9.11.4.P1
+ dnstap__dnstap__unpack@Base 1:9.11.4.P1
+ dnstap__message__descriptor@Base 1:9.11.4.P1
+ dnstap__message__free_unpacked@Base 1:9.11.4.P1
+ dnstap__message__get_packed_size@Base 1:9.11.4.P1
+ dnstap__message__init@Base 1:9.11.4.P1
+ dnstap__message__pack@Base 1:9.11.4.P1
+ dnstap__message__pack_to_buffer@Base 1:9.11.4.P1
+ dnstap__message__type__descriptor@Base 1:9.11.4.P1
+ dnstap__message__unpack@Base 1:9.11.4.P1
+ dnstap__socket_family__descriptor@Base 1:9.11.4.P1
+ dnstap__socket_protocol__descriptor@Base 1:9.11.4.P1
+ dst__entropy_getdata@Base 1:9.11.3+dfsg
+ dst__entropy_status@Base 1:9.11.3+dfsg
+ dst__gssapi_init@Base 1:9.11.3+dfsg
+ dst__hmacmd5_init@Base 1:9.11.3+dfsg
+ dst__hmacsha1_init@Base 1:9.11.3+dfsg
+ dst__hmacsha224_init@Base 1:9.11.3+dfsg
+ dst__hmacsha256_init@Base 1:9.11.3+dfsg
+ dst__hmacsha384_init@Base 1:9.11.3+dfsg
+ dst__hmacsha512_init@Base 1:9.11.3+dfsg
+ dst__memory_pool@Base 1:9.11.3+dfsg
+ dst__openssl_destroy@Base 1:9.11.3+dfsg
+ dst__openssl_getengine@Base 1:9.11.3+dfsg
+ dst__openssl_init@Base 1:9.11.3+dfsg
+ dst__openssl_toresult2@Base 1:9.11.3+dfsg
+ dst__openssl_toresult3@Base 1:9.11.3+dfsg
+ dst__openssl_toresult@Base 1:9.11.3+dfsg
+ dst__openssldh_init@Base 1:9.11.3+dfsg
+ dst__openssldsa_init@Base 1:9.11.3+dfsg
+ dst__opensslecdsa_init@Base 1:9.11.3+dfsg
+ (optional)dst__openssleddsa_init@Base 1:9.11.4.P1+dfsg
+ dst__opensslrsa_init@Base 1:9.11.3+dfsg
+ dst__privstruct_free@Base 1:9.11.3+dfsg
+ dst__privstruct_parse@Base 1:9.11.3+dfsg
+ dst__privstruct_writefile@Base 1:9.11.3+dfsg
+ dst_algorithm_supported@Base 1:9.11.3+dfsg
+ dst_context_adddata@Base 1:9.11.3+dfsg
+ dst_context_create2@Base 1:9.11.3+dfsg
+ dst_context_create3@Base 1:9.11.3+dfsg
+ dst_context_create4@Base 1:9.11.3+dfsg
+ dst_context_create@Base 1:9.11.3+dfsg
+ dst_context_destroy@Base 1:9.11.3+dfsg
+ dst_context_sign@Base 1:9.11.3+dfsg
+ dst_context_verify2@Base 1:9.11.3+dfsg
+ dst_context_verify@Base 1:9.11.3+dfsg
+ dst_ds_digest_supported@Base 1:9.11.3+dfsg
+ dst_gssapi_acceptctx@Base 1:9.11.3+dfsg
+ dst_gssapi_acquirecred@Base 1:9.11.3+dfsg
+ dst_gssapi_deletectx@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmkrb5@Base 1:9.11.3+dfsg
+ dst_gssapi_identitymatchesrealmms@Base 1:9.11.3+dfsg
+ dst_gssapi_initctx@Base 1:9.11.3+dfsg
+ dst_gssapi_releasecred@Base 1:9.11.3+dfsg
+ dst_key_alg@Base 1:9.11.3+dfsg
+ dst_key_attach@Base 1:9.11.3+dfsg
+ dst_key_buildfilename@Base 1:9.11.3+dfsg
+ dst_key_buildinternal@Base 1:9.11.3+dfsg
+ dst_key_class@Base 1:9.11.3+dfsg
+ dst_key_compare@Base 1:9.11.3+dfsg
+ dst_key_computesecret@Base 1:9.11.3+dfsg
+ dst_key_dump@Base 1:9.11.3+dfsg
+ dst_key_flags@Base 1:9.11.3+dfsg
+ dst_key_format@Base 1:9.11.3+dfsg
+ dst_key_free@Base 1:9.11.3+dfsg
+ dst_key_frombuffer@Base 1:9.11.3+dfsg
+ dst_key_fromdns@Base 1:9.11.3+dfsg
+ dst_key_fromfile@Base 1:9.11.3+dfsg
+ dst_key_fromgssapi@Base 1:9.11.3+dfsg
+ dst_key_fromlabel@Base 1:9.11.3+dfsg
+ dst_key_fromnamedfile@Base 1:9.11.3+dfsg
+ dst_key_generate2@Base 1:9.11.3+dfsg
+ dst_key_generate@Base 1:9.11.3+dfsg
+ dst_key_getbits@Base 1:9.11.3+dfsg
+ dst_key_getfilename@Base 1:9.11.3+dfsg
+ dst_key_getgssctx@Base 1:9.11.3+dfsg
+ dst_key_getnum@Base 1:9.11.3+dfsg
+ dst_key_getprivateformat@Base 1:9.11.3+dfsg
+ dst_key_gettime@Base 1:9.11.3+dfsg
+ dst_key_getttl@Base 1:9.11.3+dfsg
+ dst_key_id@Base 1:9.11.3+dfsg
+ dst_key_inactive@Base 1:9.11.3+dfsg
+ dst_key_isexternal@Base 1:9.11.3+dfsg
+ dst_key_isnullkey@Base 1:9.11.3+dfsg
+ dst_key_isprivate@Base 1:9.11.3+dfsg
+ dst_key_iszonekey@Base 1:9.11.3+dfsg
+ dst_key_name@Base 1:9.11.3+dfsg
+ dst_key_paramcompare@Base 1:9.11.3+dfsg
+ dst_key_privatefrombuffer@Base 1:9.11.3+dfsg
+ dst_key_proto@Base 1:9.11.3+dfsg
+ dst_key_pubcompare@Base 1:9.11.3+dfsg
+ dst_key_read_public@Base 1:9.11.3+dfsg
+ dst_key_restore@Base 1:9.11.3+dfsg
+ dst_key_rid@Base 1:9.11.3+dfsg
+ dst_key_secretsize@Base 1:9.11.3+dfsg
+ dst_key_setbits@Base 1:9.11.3+dfsg
+ dst_key_setexternal@Base 1:9.11.3+dfsg
+ dst_key_setflags@Base 1:9.11.3+dfsg
+ dst_key_setinactive@Base 1:9.11.3+dfsg
+ dst_key_setnum@Base 1:9.11.3+dfsg
+ dst_key_setprivateformat@Base 1:9.11.3+dfsg
+ dst_key_settime@Base 1:9.11.3+dfsg
+ dst_key_setttl@Base 1:9.11.3+dfsg
+ dst_key_sigsize@Base 1:9.11.3+dfsg
+ dst_key_size@Base 1:9.11.3+dfsg
+ dst_key_tkeytoken@Base 1:9.11.3+dfsg
+ dst_key_tobuffer@Base 1:9.11.3+dfsg
+ dst_key_todns@Base 1:9.11.3+dfsg
+ dst_key_tofile@Base 1:9.11.3+dfsg
+ dst_key_unsetnum@Base 1:9.11.3+dfsg
+ dst_key_unsettime@Base 1:9.11.3+dfsg
+ dst_lib_destroy@Base 1:9.11.3+dfsg
+ dst_lib_init2@Base 1:9.11.3+dfsg
+ dst_lib_init@Base 1:9.11.3+dfsg
+ dst_lib_initmsgcat@Base 1:9.11.3+dfsg
+ dst_msgcat@Base 1:9.11.3+dfsg
+ dst_region_computeid@Base 1:9.11.3+dfsg
+ dst_region_computerid@Base 1:9.11.3+dfsg
+ dst_result_register@Base 1:9.11.3+dfsg
+ dst_result_totext@Base 1:9.11.3+dfsg
+ gss_error_tostring@Base 1:9.11.3+dfsg
+ gss_log@Base 1:9.11.3+dfsg
+ isc__rdatalist_addclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_addnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_clone@Base 1:9.11.3+dfsg
+ isc__rdatalist_count@Base 1:9.11.3+dfsg
+ isc__rdatalist_current@Base 1:9.11.3+dfsg
+ isc__rdatalist_disassociate@Base 1:9.11.3+dfsg
+ isc__rdatalist_first@Base 1:9.11.3+dfsg
+ isc__rdatalist_getclosest@Base 1:9.11.3+dfsg
+ isc__rdatalist_getnoqname@Base 1:9.11.3+dfsg
+ isc__rdatalist_getownercase@Base 1:9.11.3+dfsg
+ isc__rdatalist_next@Base 1:9.11.3+dfsg
+ isc__rdatalist_setownercase@Base 1:9.11.3+dfsg
+ ishex@Base 1:9.11.3+dfsg
diff --git a/debian/libirs-export161-udeb.install b/debian/libirs-export161-udeb.install
new file mode 100755
index 0000000..921782a
--- /dev/null
+++ b/debian/libirs-export161-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libirs-export161.install b/debian/libirs-export161.install
new file mode 100755
index 0000000..921782a
--- /dev/null
+++ b/debian/libirs-export161.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libirs-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libirs161.install b/debian/libirs161.install
new file mode 100644
index 0000000..e4e9fdc
--- /dev/null
+++ b/debian/libirs161.install
@@ -0,0 +1 @@
+usr/lib/*/libirs.so.*
diff --git a/debian/libirs161.symbols b/debian/libirs161.symbols
new file mode 100644
index 0000000..3f26f57
--- /dev/null
+++ b/debian/libirs161.symbols
@@ -0,0 +1,28 @@
+libirs.so.161 libirs161 #MINVER#
+ freeaddrinfo@Base 1:9.10.6+dfsg
+ gai_strerror@Base 1:9.10.6+dfsg
+ getaddrinfo@Base 1:9.10.6+dfsg
+ getnameinfo@Base 1:9.10.6+dfsg
+ irs_context_create@Base 1:9.10.6+dfsg
+ irs_context_destroy@Base 1:9.10.6+dfsg
+ irs_context_get@Base 1:9.10.6+dfsg
+ irs_context_getappctx@Base 1:9.10.6+dfsg
+ irs_context_getdnsclient@Base 1:9.10.6+dfsg
+ irs_context_getdnsconf@Base 1:9.10.6+dfsg
+ irs_context_getmctx@Base 1:9.10.6+dfsg
+ irs_context_getresconf@Base 1:9.10.6+dfsg
+ irs_context_gettask@Base 1:9.10.6+dfsg
+ irs_context_gettaskmgr@Base 1:9.10.6+dfsg
+ irs_context_gettimermgr@Base 1:9.10.6+dfsg
+ irs_dnsconf_destroy@Base 1:9.10.6+dfsg
+ irs_dnsconf_gettrustedkeys@Base 1:9.10.6+dfsg
+ irs_dnsconf_load@Base 1:9.10.6+dfsg
+ irs_libage@Base 1:9.10.6+dfsg
+ irs_libinterface@Base 1:9.10.6+dfsg
+ irs_librevision@Base 1:9.10.6+dfsg
+ irs_resconf_destroy@Base 1:9.10.6+dfsg
+ irs_resconf_getnameservers@Base 1:9.10.6+dfsg
+ irs_resconf_getndots@Base 1:9.10.6+dfsg
+ irs_resconf_getsearchlist@Base 1:9.10.6+dfsg
+ irs_resconf_load@Base 1:9.10.6+dfsg
+ irs_version@Base 1:9.10.6+dfsg
diff --git a/debian/libisc-export1100-udeb.install b/debian/libisc-export1100-udeb.install
new file mode 100755
index 0000000..f89acd6
--- /dev/null
+++ b/debian/libisc-export1100-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisc-export1100.install b/debian/libisc-export1100.install
new file mode 100755
index 0000000..f89acd6
--- /dev/null
+++ b/debian/libisc-export1100.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisc1100.install b/debian/libisc1100.install
new file mode 100644
index 0000000..5d4c76a
--- /dev/null
+++ b/debian/libisc1100.install
@@ -0,0 +1,2 @@
+usr/lib/*/libisc-pkcs11.so.*
+usr/lib/*/libisc.so.*
diff --git a/debian/libisc1100.symbols b/debian/libisc1100.symbols
new file mode 100644
index 0000000..3197dcb
--- /dev/null
+++ b/debian/libisc1100.symbols
@@ -0,0 +1,1803 @@
+libisc.so.1100 libisc1100 #MINVER#
+ (optional)bsdcompat@Base 1:9.11.3+dfsg
+ isc___errno2result@Base 1:9.11.3+dfsg
+ isc___mem_allocate@Base 1:9.11.3+dfsg
+ isc___mem_free@Base 1:9.11.3+dfsg
+ isc___mem_get@Base 1:9.11.3+dfsg
+ isc___mem_put@Base 1:9.11.3+dfsg
+ isc___mem_putanddetach@Base 1:9.11.3+dfsg
+ isc___mem_reallocate@Base 1:9.11.3+dfsg
+ isc___mem_strdup@Base 1:9.11.3+dfsg
+ isc___mempool_get@Base 1:9.11.3+dfsg
+ isc___mempool_put@Base 1:9.11.3+dfsg
+ isc__app_block@Base 1:9.11.3+dfsg
+ isc__app_ctxfinish@Base 1:9.11.3+dfsg
+ isc__app_ctxonrun@Base 1:9.11.3+dfsg
+ isc__app_ctxrun@Base 1:9.11.3+dfsg
+ isc__app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc__app_ctxstart@Base 1:9.11.3+dfsg
+ isc__app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc__app_finish@Base 1:9.11.3+dfsg
+ isc__app_onrun@Base 1:9.11.3+dfsg
+ isc__app_register@Base 1:9.11.3+dfsg
+ isc__app_reload@Base 1:9.11.3+dfsg
+ isc__app_run@Base 1:9.11.3+dfsg
+ isc__app_shutdown@Base 1:9.11.3+dfsg
+ isc__app_start@Base 1:9.11.3+dfsg
+ isc__app_unblock@Base 1:9.11.3+dfsg
+ isc__appctx_create@Base 1:9.11.3+dfsg
+ isc__appctx_destroy@Base 1:9.11.3+dfsg
+ isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc__backtrace_nsymbols@Base 1:9.11.3+dfsg
+ isc__backtrace_symtable@Base 1:9.11.3+dfsg
+ isc__buffer_activeregion@Base 1:9.11.3+dfsg
+ isc__buffer_add@Base 1:9.11.3+dfsg
+ isc__buffer_availableregion@Base 1:9.11.3+dfsg
+ isc__buffer_back@Base 1:9.11.3+dfsg
+ isc__buffer_clear@Base 1:9.11.3+dfsg
+ isc__buffer_consumedregion@Base 1:9.11.3+dfsg
+ isc__buffer_first@Base 1:9.11.3+dfsg
+ isc__buffer_forward@Base 1:9.11.3+dfsg
+ isc__buffer_init@Base 1:9.11.3+dfsg
+ isc__buffer_initnull@Base 1:9.11.3+dfsg
+ isc__buffer_invalidate@Base 1:9.11.3+dfsg
+ isc__buffer_putmem@Base 1:9.11.3+dfsg
+ isc__buffer_putstr@Base 1:9.11.3+dfsg
+ isc__buffer_putuint16@Base 1:9.11.3+dfsg
+ isc__buffer_putuint24@Base 1:9.11.3+dfsg
+ isc__buffer_putuint32@Base 1:9.11.3+dfsg
+ isc__buffer_putuint48@Base 1:9.11.3+dfsg
+ isc__buffer_putuint8@Base 1:9.11.3+dfsg
+ isc__buffer_region@Base 1:9.11.3+dfsg
+ isc__buffer_remainingregion@Base 1:9.11.3+dfsg
+ isc__buffer_setactive@Base 1:9.11.3+dfsg
+ isc__buffer_subtract@Base 1:9.11.3+dfsg
+ isc__buffer_usedregion@Base 1:9.11.3+dfsg
+ isc__hash_setvec@Base 1:9.11.3+dfsg
+ isc__mem_allocate@Base 1:9.11.3+dfsg
+ isc__mem_attach@Base 1:9.11.3+dfsg
+ isc__mem_create2@Base 1:9.11.3+dfsg
+ isc__mem_destroy@Base 1:9.11.3+dfsg
+ isc__mem_detach@Base 1:9.11.3+dfsg
+ isc__mem_free@Base 1:9.11.3+dfsg
+ isc__mem_get@Base 1:9.11.3+dfsg
+ isc__mem_inuse@Base 1:9.11.3+dfsg
+ isc__mem_isovermem@Base 1:9.11.3+dfsg
+ isc__mem_maxinuse@Base 1:9.11.3+dfsg
+ isc__mem_printactive@Base 1:9.11.3+dfsg
+ isc__mem_put@Base 1:9.11.3+dfsg
+ isc__mem_putanddetach@Base 1:9.11.3+dfsg
+ isc__mem_reallocate@Base 1:9.11.3+dfsg
+ isc__mem_register@Base 1:9.11.3+dfsg
+ isc__mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc__mem_setwater@Base 1:9.11.3+dfsg
+ isc__mem_strdup@Base 1:9.11.3+dfsg
+ isc__mem_total@Base 1:9.11.3+dfsg
+ isc__mem_waterack@Base 1:9.11.3+dfsg
+ isc__mempool_associatelock@Base 1:9.11.3+dfsg
+ isc__mempool_create@Base 1:9.11.3+dfsg
+ isc__mempool_destroy@Base 1:9.11.3+dfsg
+ isc__mempool_get@Base 1:9.11.3+dfsg
+ isc__mempool_getallocated@Base 1:9.11.3+dfsg
+ isc__mempool_put@Base 1:9.11.3+dfsg
+ isc__mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc__mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc__mempool_setname@Base 1:9.11.3+dfsg
+ isc__mutex_init@Base 1:9.11.3+dfsg
+ isc__socket_accept@Base 1:9.11.3+dfsg
+ isc__socket_attach@Base 1:9.11.3+dfsg
+ isc__socket_bind@Base 1:9.11.3+dfsg
+ isc__socket_cancel@Base 1:9.11.3+dfsg
+ isc__socket_cleanunix@Base 1:9.11.3+dfsg
+ isc__socket_close@Base 1:9.11.3+dfsg
+ isc__socket_connect@Base 1:9.11.3+dfsg
+ isc__socket_create@Base 1:9.11.3+dfsg
+ isc__socket_detach@Base 1:9.11.3+dfsg
+ isc__socket_dscp@Base 1:9.11.3+dfsg
+ isc__socket_dup@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc__socket_filter@Base 1:9.11.3+dfsg
+ isc__socket_getfd@Base 1:9.11.3+dfsg
+ isc__socket_getname@Base 1:9.11.3+dfsg
+ isc__socket_getpeername@Base 1:9.11.3+dfsg
+ isc__socket_getsockname@Base 1:9.11.3+dfsg
+ isc__socket_gettag@Base 1:9.11.3+dfsg
+ isc__socket_gettype@Base 1:9.11.3+dfsg
+ isc__socket_ipv6only@Base 1:9.11.3+dfsg
+ isc__socket_isbound@Base 1:9.11.3+dfsg
+ isc__socket_listen@Base 1:9.11.3+dfsg
+ isc__socket_open@Base 1:9.11.3+dfsg
+ isc__socket_permunix@Base 1:9.11.3+dfsg
+ isc__socket_recv2@Base 1:9.11.3+dfsg
+ isc__socket_recv@Base 1:9.11.3+dfsg
+ isc__socket_recvv@Base 1:9.11.3+dfsg
+ isc__socket_register@Base 1:9.11.3+dfsg
+ isc__socket_send@Base 1:9.11.3+dfsg
+ isc__socket_sendto2@Base 1:9.11.3+dfsg
+ isc__socket_sendto@Base 1:9.11.3+dfsg
+ isc__socket_sendtov2@Base 1:9.11.3+dfsg
+ isc__socket_sendtov@Base 1:9.11.3+dfsg
+ isc__socket_sendv@Base 1:9.11.3+dfsg
+ isc__socket_setname@Base 1:9.11.3+dfsg
+ isc__socketmgr_create2@Base 1:9.11.3+dfsg
+ isc__socketmgr_create@Base 1:9.11.3+dfsg
+ isc__socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc__socketmgr_maxudp@Base 1:9.11.3+dfsg
+ isc__socketmgr_setreserved@Base 1:9.11.3+dfsg
+ isc__strerror@Base 1:9.11.3+dfsg
+ isc__task_attach@Base 1:9.11.3+dfsg
+ isc__task_beginexclusive@Base 1:9.11.3+dfsg
+ isc__task_create@Base 1:9.11.3+dfsg
+ isc__task_destroy@Base 1:9.11.3+dfsg
+ isc__task_detach@Base 1:9.11.3+dfsg
+ isc__task_endexclusive@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc__task_getname@Base 1:9.11.3+dfsg
+ isc__task_gettag@Base 1:9.11.3+dfsg
+ isc__task_onshutdown@Base 1:9.11.3+dfsg
+ isc__task_privilege@Base 1:9.11.3+dfsg
+ isc__task_purge@Base 1:9.11.3+dfsg
+ isc__task_purgerange@Base 1:9.11.3+dfsg
+ isc__task_register@Base 1:9.11.3+dfsg
+ isc__task_send@Base 1:9.11.3+dfsg
+ isc__task_sendanddetach@Base 1:9.11.3+dfsg
+ isc__task_setname@Base 1:9.11.3+dfsg
+ isc__task_setprivilege@Base 1:9.11.3+dfsg
+ isc__task_shutdown@Base 1:9.11.3+dfsg
+ isc__task_unsend@Base 1:9.11.3+dfsg
+ isc__task_unsendrange@Base 1:9.11.3+dfsg
+ isc__taskmgr_create@Base 1:9.11.3+dfsg
+ isc__taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc__taskmgr_mode@Base 1:9.11.3+dfsg
+ isc__taskmgr_pause@Base 1:9.11.3+dfsg
+ isc__taskmgr_resume@Base 1:9.11.3+dfsg
+ isc__taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc__timer_attach@Base 1:9.11.3+dfsg
+ isc__timer_create@Base 1:9.11.3+dfsg
+ isc__timer_detach@Base 1:9.11.3+dfsg
+ isc__timer_register@Base 1:9.11.3+dfsg
+ isc__timer_reset@Base 1:9.11.3+dfsg
+ isc__timer_touch@Base 1:9.11.3+dfsg
+ isc__timermgr_create@Base 1:9.11.3+dfsg
+ isc__timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_aes128_crypt@Base 1:9.11.3+dfsg
+ isc_aes192_crypt@Base 1:9.11.3+dfsg
+ isc_aes256_crypt@Base 1:9.11.3+dfsg
+ isc_app_block@Base 1:9.11.3+dfsg
+ isc_app_ctxfinish@Base 1:9.11.3+dfsg
+ isc_app_ctxonrun@Base 1:9.11.3+dfsg
+ isc_app_ctxrun@Base 1:9.11.3+dfsg
+ isc_app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc_app_ctxstart@Base 1:9.11.3+dfsg
+ isc_app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc_app_finish@Base 1:9.11.3+dfsg
+ isc_app_isrunning@Base 1:9.11.3+dfsg
+ isc_app_onrun@Base 1:9.11.3+dfsg
+ isc_app_register@Base 1:9.11.3+dfsg
+ isc_app_reload@Base 1:9.11.3+dfsg
+ isc_app_run@Base 1:9.11.3+dfsg
+ isc_app_shutdown@Base 1:9.11.3+dfsg
+ isc_app_start@Base 1:9.11.3+dfsg
+ isc_app_unblock@Base 1:9.11.3+dfsg
+ isc_appctx_create@Base 1:9.11.3+dfsg
+ isc_appctx_destroy@Base 1:9.11.3+dfsg
+ isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc_assertion_failed@Base 1:9.11.3+dfsg
+ isc_assertion_setcallback@Base 1:9.11.3+dfsg
+ isc_assertion_typetotext@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbol@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg
+ isc_backtrace_gettrace@Base 1:9.11.3+dfsg
+ isc_base32_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32_decodestring@Base 1:9.11.3+dfsg
+ isc_base32_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32_totext@Base 1:9.11.3+dfsg
+ isc_base32hex_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hex_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hex_totext@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hexnp_totext@Base 1:9.11.3+dfsg
+ isc_base64_decodestring@Base 1:9.11.3+dfsg
+ isc_base64_tobuffer@Base 1:9.11.3+dfsg
+ isc_base64_totext@Base 1:9.11.3+dfsg
+ isc_bind9@Base 1:9.11.3+dfsg
+ isc_buffer_allocate@Base 1:9.11.3+dfsg
+ isc_buffer_compact@Base 1:9.11.3+dfsg
+ isc_buffer_copyregion@Base 1:9.11.3+dfsg
+ isc_buffer_dup@Base 1:9.11.3+dfsg
+ isc_buffer_free@Base 1:9.11.3+dfsg
+ isc_buffer_getuint16@Base 1:9.11.3+dfsg
+ isc_buffer_getuint32@Base 1:9.11.3+dfsg
+ isc_buffer_getuint48@Base 1:9.11.3+dfsg
+ isc_buffer_getuint8@Base 1:9.11.3+dfsg
+ isc_buffer_putdecint@Base 1:9.11.3+dfsg
+ isc_buffer_reallocate@Base 1:9.11.3+dfsg
+ isc_buffer_reinit@Base 1:9.11.3+dfsg
+ isc_buffer_reserve@Base 1:9.11.3+dfsg
+ isc_buffer_setautorealloc@Base 1:9.11.3+dfsg
+ isc_bufferlist_availablecount@Base 1:9.11.3+dfsg
+ isc_bufferlist_usedcount@Base 1:9.11.3+dfsg
+ isc_categories@Base 1:9.11.3+dfsg
+ isc_commandline_argument@Base 1:9.11.3+dfsg
+ isc_commandline_errprint@Base 1:9.11.3+dfsg
+ isc_commandline_index@Base 1:9.11.3+dfsg
+ isc_commandline_option@Base 1:9.11.3+dfsg
+ isc_commandline_parse@Base 1:9.11.3+dfsg
+ isc_commandline_progname@Base 1:9.11.3+dfsg
+ isc_commandline_reset@Base 1:9.11.3+dfsg
+ isc_commandline_strtoargv@Base 1:9.11.3+dfsg
+ isc_condition_waituntil@Base 1:9.11.3+dfsg
+ isc_counter_attach@Base 1:9.11.3+dfsg
+ isc_counter_create@Base 1:9.11.3+dfsg
+ isc_counter_detach@Base 1:9.11.3+dfsg
+ isc_counter_increment@Base 1:9.11.3+dfsg
+ isc_counter_setlimit@Base 1:9.11.3+dfsg
+ isc_counter_used@Base 1:9.11.3+dfsg
+ isc_crc64_final@Base 1:9.11.3+dfsg
+ isc_crc64_init@Base 1:9.11.3+dfsg
+ isc_crc64_update@Base 1:9.11.3+dfsg
+ isc_dir_chdir@Base 1:9.11.3+dfsg
+ isc_dir_chroot@Base 1:9.11.3+dfsg
+ isc_dir_close@Base 1:9.11.3+dfsg
+ isc_dir_createunique@Base 1:9.11.3+dfsg
+ isc_dir_init@Base 1:9.11.3+dfsg
+ isc_dir_open@Base 1:9.11.3+dfsg
+ isc_dir_read@Base 1:9.11.3+dfsg
+ isc_dir_reset@Base 1:9.11.3+dfsg
+ isc_dscp_check_value@Base 1:9.11.3+dfsg
+ isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg
+ isc_entropy_addsample@Base 1:9.11.3+dfsg
+ isc_entropy_attach@Base 1:9.11.3+dfsg
+ isc_entropy_create@Base 1:9.11.3+dfsg
+ isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg
+ isc_entropy_createfilesource@Base 1:9.11.3+dfsg
+ isc_entropy_createsamplesource@Base 1:9.11.3+dfsg
+ isc_entropy_destroysource@Base 1:9.11.3+dfsg
+ isc_entropy_detach@Base 1:9.11.3+dfsg
+ isc_entropy_getdata@Base 1:9.11.3+dfsg
+ isc_entropy_putdata@Base 1:9.11.3+dfsg
+ isc_entropy_stats@Base 1:9.11.3+dfsg
+ isc_entropy_status@Base 1:9.11.3+dfsg
+ isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg
+ isc_entropy_usebestsource@Base 1:9.11.3+dfsg
+ isc_errno_toresult@Base 1:9.11.3+dfsg
+ isc_error_fatal@Base 1:9.11.3+dfsg
+ isc_error_runtimecheck@Base 1:9.11.3+dfsg
+ isc_error_setfatal@Base 1:9.11.3+dfsg
+ isc_error_setunexpected@Base 1:9.11.3+dfsg
+ isc_error_unexpected@Base 1:9.11.3+dfsg
+ isc_event_allocate@Base 1:9.11.3+dfsg
+ isc_event_constallocate@Base 1:9.11.3+dfsg
+ isc_event_free@Base 1:9.11.3+dfsg
+ isc_file_absolutepath@Base 1:9.11.3+dfsg
+ isc_file_basename@Base 1:9.11.3+dfsg
+ isc_file_bopenunique@Base 1:9.11.3+dfsg
+ isc_file_bopenuniquemode@Base 1:9.11.3+dfsg
+ isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_exists@Base 1:9.11.3+dfsg
+ isc_file_getmodtime@Base 1:9.11.3+dfsg
+ isc_file_getsize@Base 1:9.11.3+dfsg
+ isc_file_getsizefd@Base 1:9.11.3+dfsg
+ isc_file_isabsolute@Base 1:9.11.3+dfsg
+ isc_file_ischdiridempotent@Base 1:9.11.3+dfsg
+ isc_file_iscurrentdir@Base 1:9.11.3+dfsg
+ isc_file_isdirectory@Base 1:9.11.3+dfsg
+ isc_file_isdirwritable@Base 1:9.11.3+dfsg
+ isc_file_isplainfile@Base 1:9.11.3+dfsg
+ isc_file_isplainfilefd@Base 1:9.11.3+dfsg
+ isc_file_mktemplate@Base 1:9.11.3+dfsg
+ isc_file_mmap@Base 1:9.11.3+dfsg
+ isc_file_mode@Base 1:9.11.3+dfsg
+ isc_file_munmap@Base 1:9.11.3+dfsg
+ isc_file_openunique@Base 1:9.11.3+dfsg
+ isc_file_openuniquemode@Base 1:9.11.3+dfsg
+ isc_file_openuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_progname@Base 1:9.11.3+dfsg
+ isc_file_remove@Base 1:9.11.3+dfsg
+ isc_file_rename@Base 1:9.11.3+dfsg
+ isc_file_renameunique@Base 1:9.11.3+dfsg
+ isc_file_safecreate@Base 1:9.11.3+dfsg
+ isc_file_sanitize@Base 1:9.11.3+dfsg
+ isc_file_settime@Base 1:9.11.3+dfsg
+ isc_file_splitpath@Base 1:9.11.3+dfsg
+ isc_file_template@Base 1:9.11.3+dfsg
+ isc_file_truncate@Base 1:9.11.3+dfsg
+ isc_fsaccess_add@Base 1:9.11.3+dfsg
+ isc_fsaccess_remove@Base 1:9.11.3+dfsg
+ isc_fsaccess_set@Base 1:9.11.3+dfsg
+ isc_hash_calc@Base 1:9.11.3+dfsg
+ isc_hash_create@Base 1:9.11.3+dfsg
+ isc_hash_ctxattach@Base 1:9.11.3+dfsg
+ isc_hash_ctxcalc@Base 1:9.11.3+dfsg
+ isc_hash_ctxcreate@Base 1:9.11.3+dfsg
+ isc_hash_ctxdetach@Base 1:9.11.3+dfsg
+ isc_hash_ctxinit@Base 1:9.11.3+dfsg
+ isc_hash_destroy@Base 1:9.11.3+dfsg
+ isc_hash_function@Base 1:9.11.3+dfsg
+ isc_hash_function_reverse@Base 1:9.11.3+dfsg
+ isc_hash_get_initializer@Base 1:9.11.3+dfsg
+ isc_hash_init@Base 1:9.11.3+dfsg
+ isc_hash_set_initializer@Base 1:9.11.3+dfsg
+ isc_hashctx@Base 1:9.11.3+dfsg
+ isc_heap_create@Base 1:9.11.3+dfsg
+ isc_heap_decreased@Base 1:9.11.3+dfsg
+ isc_heap_delete@Base 1:9.11.3+dfsg
+ isc_heap_destroy@Base 1:9.11.3+dfsg
+ isc_heap_element@Base 1:9.11.3+dfsg
+ isc_heap_foreach@Base 1:9.11.3+dfsg
+ isc_heap_increased@Base 1:9.11.3+dfsg
+ isc_heap_insert@Base 1:9.11.3+dfsg
+ isc_hex_decodestring@Base 1:9.11.3+dfsg
+ isc_hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_hex_totext@Base 1:9.11.3+dfsg
+ isc_hmacmd5_check@Base 1:9.11.3+dfsg
+ isc_hmacmd5_init@Base 1:9.11.3+dfsg
+ isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacmd5_sign@Base 1:9.11.3+dfsg
+ isc_hmacmd5_update@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify2@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha1_check@Base 1:9.11.3+dfsg
+ isc_hmacsha1_init@Base 1:9.11.3+dfsg
+ isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha1_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha1_update@Base 1:9.11.3+dfsg
+ isc_hmacsha1_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha224_init@Base 1:9.11.3+dfsg
+ isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha224_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha224_update@Base 1:9.11.3+dfsg
+ isc_hmacsha224_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha256_init@Base 1:9.11.3+dfsg
+ isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha256_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha256_update@Base 1:9.11.3+dfsg
+ isc_hmacsha256_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha384_init@Base 1:9.11.3+dfsg
+ isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha384_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha384_update@Base 1:9.11.3+dfsg
+ isc_hmacsha384_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha512_init@Base 1:9.11.3+dfsg
+ isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha512_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha512_update@Base 1:9.11.3+dfsg
+ isc_hmacsha512_verify@Base 1:9.11.3+dfsg
+ isc_ht_add@Base 1:9.11.3+dfsg
+ isc_ht_count@Base 1:9.11.3+dfsg
+ isc_ht_delete@Base 1:9.11.3+dfsg
+ isc_ht_destroy@Base 1:9.11.3+dfsg
+ isc_ht_find@Base 1:9.11.3+dfsg
+ isc_ht_init@Base 1:9.11.3+dfsg
+ isc_ht_iter_create@Base 1:9.11.3+dfsg
+ isc_ht_iter_current@Base 1:9.11.3+dfsg
+ isc_ht_iter_currentkey@Base 1:9.11.3+dfsg
+ isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg
+ isc_ht_iter_destroy@Base 1:9.11.3+dfsg
+ isc_ht_iter_first@Base 1:9.11.3+dfsg
+ isc_ht_iter_next@Base 1:9.11.3+dfsg
+ isc_httpd_addheader@Base 1:9.11.3+dfsg
+ isc_httpd_addheaderuint@Base 1:9.11.3+dfsg
+ isc_httpd_endheaders@Base 1:9.11.3+dfsg
+ isc_httpd_response@Base 1:9.11.3+dfsg
+ isc_httpd_setfinishhook@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl@Base 1:9.11.3+dfsg
+ isc_httpdmgr_create@Base 1:9.11.3+dfsg
+ isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg
+ isc_interfaceiter_create@Base 1:9.11.3+dfsg
+ isc_interfaceiter_current@Base 1:9.11.3+dfsg
+ isc_interfaceiter_destroy@Base 1:9.11.3+dfsg
+ isc_interfaceiter_first@Base 1:9.11.3+dfsg
+ isc_interfaceiter_next@Base 1:9.11.3+dfsg
+ isc_interval_iszero@Base 1:9.11.3+dfsg
+ isc_interval_set@Base 1:9.11.3+dfsg
+ isc_interval_zero@Base 1:9.11.3+dfsg
+ isc_iterated_hash@Base 1:9.11.3+dfsg
+ isc_keyboard_canceled@Base 1:9.11.3+dfsg
+ isc_keyboard_close@Base 1:9.11.3+dfsg
+ isc_keyboard_getchar@Base 1:9.11.3+dfsg
+ isc_keyboard_open@Base 1:9.11.3+dfsg
+ isc_lctx@Base 1:9.11.3+dfsg
+ isc_lex_close@Base 1:9.11.3+dfsg
+ isc_lex_create@Base 1:9.11.3+dfsg
+ isc_lex_destroy@Base 1:9.11.3+dfsg
+ isc_lex_getcomments@Base 1:9.11.3+dfsg
+ isc_lex_getlasttokentext@Base 1:9.11.3+dfsg
+ isc_lex_getmastertoken@Base 1:9.11.3+dfsg
+ isc_lex_getoctaltoken@Base 1:9.11.3+dfsg
+ isc_lex_getsourceline@Base 1:9.11.3+dfsg
+ isc_lex_getsourcename@Base 1:9.11.3+dfsg
+ isc_lex_getspecials@Base 1:9.11.3+dfsg
+ isc_lex_gettoken@Base 1:9.11.3+dfsg
+ isc_lex_isfile@Base 1:9.11.3+dfsg
+ isc_lex_openbuffer@Base 1:9.11.3+dfsg
+ isc_lex_openfile@Base 1:9.11.3+dfsg
+ isc_lex_openstream@Base 1:9.11.3+dfsg
+ isc_lex_setcomments@Base 1:9.11.3+dfsg
+ isc_lex_setsourceline@Base 1:9.11.3+dfsg
+ isc_lex_setsourcename@Base 1:9.11.3+dfsg
+ isc_lex_setspecials@Base 1:9.11.3+dfsg
+ isc_lex_ungettoken@Base 1:9.11.3+dfsg
+ isc_lfsr_generate32@Base 1:9.11.3+dfsg
+ isc_lfsr_generate@Base 1:9.11.3+dfsg
+ isc_lfsr_init@Base 1:9.11.3+dfsg
+ isc_lfsr_skip@Base 1:9.11.3+dfsg
+ isc_lib_initmsgcat@Base 1:9.11.3+dfsg
+ isc_lib_register@Base 1:9.11.3+dfsg
+ isc_libage@Base 1:9.11.3+dfsg
+ isc_libinterface@Base 1:9.11.3+dfsg
+ isc_librevision@Base 1:9.11.3+dfsg
+ isc_log_categorybyname@Base 1:9.11.3+dfsg
+ isc_log_closefilelogs@Base 1:9.11.3+dfsg
+ isc_log_create@Base 1:9.11.3+dfsg
+ isc_log_createchannel@Base 1:9.11.3+dfsg
+ isc_log_destroy@Base 1:9.11.3+dfsg
+ isc_log_getdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_getduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_gettag@Base 1:9.11.3+dfsg
+ isc_log_ivwrite1@Base 1:9.11.3+dfsg
+ isc_log_ivwrite@Base 1:9.11.3+dfsg
+ isc_log_iwrite1@Base 1:9.11.3+dfsg
+ isc_log_iwrite@Base 1:9.11.3+dfsg
+ isc_log_modulebyname@Base 1:9.11.3+dfsg
+ isc_log_opensyslog@Base 1:9.11.3+dfsg
+ isc_log_registercategories@Base 1:9.11.3+dfsg
+ isc_log_registermodules@Base 1:9.11.3+dfsg
+ isc_log_setcontext@Base 1:9.11.3+dfsg
+ isc_log_setdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_setduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_settag@Base 1:9.11.3+dfsg
+ isc_log_usechannel@Base 1:9.11.3+dfsg
+ isc_log_vwrite1@Base 1:9.11.3+dfsg
+ isc_log_vwrite@Base 1:9.11.3+dfsg
+ isc_log_wouldlog@Base 1:9.11.3+dfsg
+ isc_log_write1@Base 1:9.11.3+dfsg
+ isc_log_write@Base 1:9.11.3+dfsg
+ isc_logconfig_create@Base 1:9.11.3+dfsg
+ isc_logconfig_destroy@Base 1:9.11.3+dfsg
+ isc_logconfig_get@Base 1:9.11.3+dfsg
+ isc_logconfig_use@Base 1:9.11.3+dfsg
+ isc_logfile_roll@Base 1:9.11.3+dfsg
+ isc_md5_check@Base 1:9.11.3+dfsg
+ isc_md5_final@Base 1:9.11.3+dfsg
+ isc_md5_init@Base 1:9.11.3+dfsg
+ isc_md5_invalidate@Base 1:9.11.3+dfsg
+ isc_md5_update@Base 1:9.11.3+dfsg
+ isc_mem_attach@Base 1:9.11.3+dfsg
+ isc_mem_checkdestroyed@Base 1:9.11.3+dfsg
+ isc_mem_create2@Base 1:9.11.3+dfsg
+ isc_mem_create@Base 1:9.11.3+dfsg
+ isc_mem_createx2@Base 1:9.11.3+dfsg
+ isc_mem_createx@Base 1:9.11.3+dfsg
+ isc_mem_debugging@Base 1:9.11.3+dfsg
+ isc_mem_defaultflags@Base 1:9.11.3+dfsg
+ isc_mem_destroy@Base 1:9.11.3+dfsg
+ isc_mem_detach@Base 1:9.11.3+dfsg
+ isc_mem_getname@Base 1:9.11.3+dfsg
+ isc_mem_getquota@Base 1:9.11.3+dfsg
+ isc_mem_gettag@Base 1:9.11.3+dfsg
+ isc_mem_inuse@Base 1:9.11.3+dfsg
+ isc_mem_isovermem@Base 1:9.11.3+dfsg
+ isc_mem_maxinuse@Base 1:9.11.3+dfsg
+ isc_mem_ondestroy@Base 1:9.11.3+dfsg
+ isc_mem_printallactive@Base 1:9.11.3+dfsg
+ isc_mem_references@Base 1:9.11.3+dfsg
+ isc_mem_register@Base 1:9.11.3+dfsg
+ isc_mem_renderjson@Base 1:9.11.3+dfsg
+ isc_mem_renderxml@Base 1:9.11.3+dfsg
+ isc_mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc_mem_setname@Base 1:9.11.3+dfsg
+ isc_mem_setquota@Base 1:9.11.3+dfsg
+ isc_mem_setwater@Base 1:9.11.3+dfsg
+ isc_mem_stats@Base 1:9.11.3+dfsg
+ isc_mem_total@Base 1:9.11.3+dfsg
+ isc_mem_waterack@Base 1:9.11.3+dfsg
+ isc_meminfo_totalphys@Base 1:9.11.3+dfsg
+ isc_mempool_associatelock@Base 1:9.11.3+dfsg
+ isc_mempool_create@Base 1:9.11.3+dfsg
+ isc_mempool_destroy@Base 1:9.11.3+dfsg
+ isc_mempool_getallocated@Base 1:9.11.3+dfsg
+ isc_mempool_getfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreecount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setname@Base 1:9.11.3+dfsg
+ isc_modules@Base 1:9.11.3+dfsg
+ isc_msgcat@Base 1:9.11.3+dfsg
+ isc_msgcat_close@Base 1:9.11.3+dfsg
+ isc_msgcat_get@Base 1:9.11.3+dfsg
+ isc_msgcat_open@Base 1:9.11.3+dfsg
+ isc_mutexblock_destroy@Base 1:9.11.3+dfsg
+ isc_mutexblock_init@Base 1:9.11.3+dfsg
+ isc_net_aton@Base 1:9.11.3+dfsg
+ isc_net_disableipv4@Base 1:9.11.3+dfsg
+ isc_net_disableipv6@Base 1:9.11.3+dfsg
+ isc_net_enableipv4@Base 1:9.11.3+dfsg
+ isc_net_enableipv6@Base 1:9.11.3+dfsg
+ isc_net_getudpportrange@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6only@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg
+ isc_net_probedscp@Base 1:9.11.3+dfsg
+ isc_net_probeipv4@Base 1:9.11.3+dfsg
+ isc_net_probeipv6@Base 1:9.11.3+dfsg
+ isc_net_probeunix@Base 1:9.11.3+dfsg
+ isc_netaddr_any6@Base 1:9.11.3+dfsg
+ isc_netaddr_any@Base 1:9.11.3+dfsg
+ isc_netaddr_eqprefix@Base 1:9.11.3+dfsg
+ isc_netaddr_equal@Base 1:9.11.3+dfsg
+ isc_netaddr_format@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin@Base 1:9.11.3+dfsg
+ isc_netaddr_frompath@Base 1:9.11.3+dfsg
+ isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg
+ isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg
+ isc_netaddr_getzone@Base 1:9.11.3+dfsg
+ isc_netaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_netaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_netaddr_isloopback@Base 1:9.11.3+dfsg
+ isc_netaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_netaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_netaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg
+ isc_netaddr_prefixok@Base 1:9.11.3+dfsg
+ isc_netaddr_setzone@Base 1:9.11.3+dfsg
+ isc_netaddr_totext@Base 1:9.11.3+dfsg
+ isc_netscope_pton@Base 1:9.11.3+dfsg
+ isc_ondestroy_init@Base 1:9.11.3+dfsg
+ isc_ondestroy_notify@Base 1:9.11.3+dfsg
+ isc_ondestroy_register@Base 1:9.11.3+dfsg
+ isc_os_ncpus@Base 1:9.11.3+dfsg
+ isc_parse_uint16@Base 1:9.11.3+dfsg
+ isc_parse_uint32@Base 1:9.11.3+dfsg
+ isc_parse_uint8@Base 1:9.11.3+dfsg
+ isc_pool_count@Base 1:9.11.3+dfsg
+ isc_pool_create@Base 1:9.11.3+dfsg
+ isc_pool_destroy@Base 1:9.11.3+dfsg
+ isc_pool_expand@Base 1:9.11.3+dfsg
+ isc_pool_get@Base 1:9.11.3+dfsg
+ isc_portset_add@Base 1:9.11.3+dfsg
+ isc_portset_addrange@Base 1:9.11.3+dfsg
+ isc_portset_create@Base 1:9.11.3+dfsg
+ isc_portset_destroy@Base 1:9.11.3+dfsg
+ isc_portset_isset@Base 1:9.11.3+dfsg
+ isc_portset_nports@Base 1:9.11.3+dfsg
+ isc_portset_remove@Base 1:9.11.3+dfsg
+ isc_portset_removerange@Base 1:9.11.3+dfsg
+ isc_quota_attach@Base 1:9.11.3+dfsg
+ isc_quota_destroy@Base 1:9.11.3+dfsg
+ isc_quota_detach@Base 1:9.11.3+dfsg
+ isc_quota_force@Base 1:9.11.5.P4+dfsg
+ isc_quota_init@Base 1:9.11.3+dfsg
+ isc_quota_max@Base 1:9.11.3+dfsg
+ isc_quota_release@Base 1:9.11.3+dfsg
+ isc_quota_reserve@Base 1:9.11.3+dfsg
+ isc_quota_soft@Base 1:9.11.3+dfsg
+ isc_radix_create@Base 1:9.11.3+dfsg
+ isc_radix_destroy@Base 1:9.11.3+dfsg
+ isc_radix_insert@Base 1:9.11.3+dfsg
+ isc_radix_process@Base 1:9.11.3+dfsg
+ isc_radix_remove@Base 1:9.11.3+dfsg
+ isc_radix_search@Base 1:9.11.3+dfsg
+ isc_random_get@Base 1:9.11.3+dfsg
+ isc_random_jitter@Base 1:9.11.3+dfsg
+ isc_random_seed@Base 1:9.11.3+dfsg
+ isc_ratelimiter_attach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_create@Base 1:9.11.3+dfsg
+ isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_detach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_release@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg
+ isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg
+ isc_ratelimiter_stall@Base 1:9.11.3+dfsg
+ isc_refcount_init@Base 1:9.11.3+dfsg
+ isc_regex_validate@Base 1:9.11.3+dfsg
+ isc_region_compare@Base 1:9.11.3+dfsg
+ isc_resource_getcurlimit@Base 1:9.11.3+dfsg
+ isc_resource_getlimit@Base 1:9.11.3+dfsg
+ isc_resource_setlimit@Base 1:9.11.3+dfsg
+ isc_result_register@Base 1:9.11.3+dfsg
+ isc_result_registerids@Base 1:9.11.3+dfsg
+ isc_result_toid@Base 1:9.11.3+dfsg
+ isc_result_totext@Base 1:9.11.3+dfsg
+ isc_rng_attach@Base 1:9.11.3+dfsg
+ isc_rng_create@Base 1:9.11.3+dfsg
+ isc_rng_detach@Base 1:9.11.3+dfsg
+ isc_rng_random@Base 1:9.11.3+dfsg
+ isc_rng_uniformrandom@Base 1:9.11.3+dfsg
+ isc_rwlock_destroy@Base 1:9.11.3+dfsg
+ isc_rwlock_downgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_init@Base 1:9.11.3+dfsg
+ isc_rwlock_lock@Base 1:9.11.3+dfsg
+ isc_rwlock_trylock@Base 1:9.11.3+dfsg
+ isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_unlock@Base 1:9.11.3+dfsg
+ isc_safe_memcompare@Base 1:9.11.3+dfsg
+ isc_safe_memequal@Base 1:9.11.3+dfsg
+ isc_safe_memwipe@Base 1:9.11.3+dfsg
+ isc_serial_eq@Base 1:9.11.3+dfsg
+ isc_serial_ge@Base 1:9.11.3+dfsg
+ isc_serial_gt@Base 1:9.11.3+dfsg
+ isc_serial_le@Base 1:9.11.3+dfsg
+ isc_serial_lt@Base 1:9.11.3+dfsg
+ isc_serial_ne@Base 1:9.11.3+dfsg
+ isc_sha1_check@Base 1:9.11.3+dfsg
+ isc_sha1_final@Base 1:9.11.3+dfsg
+ isc_sha1_init@Base 1:9.11.3+dfsg
+ isc_sha1_invalidate@Base 1:9.11.3+dfsg
+ isc_sha1_update@Base 1:9.11.3+dfsg
+ isc_sha224_data@Base 1:9.11.3+dfsg
+ isc_sha224_end@Base 1:9.11.3+dfsg
+ isc_sha224_final@Base 1:9.11.3+dfsg
+ isc_sha224_init@Base 1:9.11.3+dfsg
+ isc_sha224_invalidate@Base 1:9.11.3+dfsg
+ isc_sha224_update@Base 1:9.11.3+dfsg
+ isc_sha256_data@Base 1:9.11.3+dfsg
+ isc_sha256_end@Base 1:9.11.3+dfsg
+ isc_sha256_final@Base 1:9.11.3+dfsg
+ isc_sha256_init@Base 1:9.11.3+dfsg
+ isc_sha256_invalidate@Base 1:9.11.3+dfsg
+ isc_sha256_transform@Base 1:9.11.3+dfsg
+ isc_sha256_update@Base 1:9.11.3+dfsg
+ isc_sha384_data@Base 1:9.11.3+dfsg
+ isc_sha384_end@Base 1:9.11.3+dfsg
+ isc_sha384_final@Base 1:9.11.3+dfsg
+ isc_sha384_init@Base 1:9.11.3+dfsg
+ isc_sha384_invalidate@Base 1:9.11.3+dfsg
+ isc_sha384_update@Base 1:9.11.3+dfsg
+ isc_sha512_data@Base 1:9.11.3+dfsg
+ isc_sha512_end@Base 1:9.11.3+dfsg
+ isc_sha512_final@Base 1:9.11.3+dfsg
+ isc_sha512_init@Base 1:9.11.3+dfsg
+ isc_sha512_invalidate@Base 1:9.11.3+dfsg
+ isc_sha512_last@Base 1:9.11.3+dfsg
+ isc_sha512_transform@Base 1:9.11.3+dfsg
+ isc_sha512_update@Base 1:9.11.3+dfsg
+ isc_sockaddr_any6@Base 1:9.11.3+dfsg
+ isc_sockaddr_any@Base 1:9.11.3+dfsg
+ isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg
+ isc_sockaddr_compare@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg
+ isc_sockaddr_equal@Base 1:9.11.3+dfsg
+ isc_sockaddr_format@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_frompath@Base 1:9.11.3+dfsg
+ isc_sockaddr_getport@Base 1:9.11.3+dfsg
+ isc_sockaddr_hash@Base 1:9.11.3+dfsg
+ isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_pf@Base 1:9.11.3+dfsg
+ isc_sockaddr_setport@Base 1:9.11.3+dfsg
+ isc_sockaddr_totext@Base 1:9.11.3+dfsg
+ isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg
+ isc_socket_accept@Base 1:9.11.3+dfsg
+ isc_socket_attach@Base 1:9.11.3+dfsg
+ isc_socket_bind@Base 1:9.11.3+dfsg
+ isc_socket_cancel@Base 1:9.11.3+dfsg
+ isc_socket_cleanunix@Base 1:9.11.3+dfsg
+ isc_socket_close@Base 1:9.11.3+dfsg
+ isc_socket_connect@Base 1:9.11.3+dfsg
+ isc_socket_create@Base 1:9.11.3+dfsg
+ isc_socket_detach@Base 1:9.11.3+dfsg
+ isc_socket_dscp@Base 1:9.11.3+dfsg
+ isc_socket_dup@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc_socket_filter@Base 1:9.11.3+dfsg
+ isc_socket_getfd@Base 1:9.11.3+dfsg
+ isc_socket_getpeername@Base 1:9.11.3+dfsg
+ isc_socket_getsockname@Base 1:9.11.3+dfsg
+ isc_socket_gettype@Base 1:9.11.3+dfsg
+ isc_socket_ipv6only@Base 1:9.11.3+dfsg
+ isc_socket_listen@Base 1:9.11.3+dfsg
+ isc_socket_open@Base 1:9.11.3+dfsg
+ isc_socket_permunix@Base 1:9.11.3+dfsg
+ isc_socket_recv2@Base 1:9.11.3+dfsg
+ isc_socket_recv@Base 1:9.11.3+dfsg
+ isc_socket_recvv@Base 1:9.11.3+dfsg
+ isc_socket_register@Base 1:9.11.3+dfsg
+ isc_socket_send@Base 1:9.11.3+dfsg
+ isc_socket_sendto2@Base 1:9.11.3+dfsg
+ isc_socket_sendto@Base 1:9.11.3+dfsg
+ isc_socket_sendtov2@Base 1:9.11.3+dfsg
+ isc_socket_sendtov@Base 1:9.11.3+dfsg
+ isc_socket_sendv@Base 1:9.11.3+dfsg
+ isc_socket_setname@Base 1:9.11.3+dfsg
+ isc_socket_socketevent@Base 1:9.11.3+dfsg
+ isc_socketmgr_create2@Base 1:9.11.3+dfsg
+ isc_socketmgr_create@Base 1:9.11.3+dfsg
+ isc_socketmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_socketmgr_setstats@Base 1:9.11.3+dfsg
+ isc_stats_attach@Base 1:9.11.3+dfsg
+ isc_stats_create@Base 1:9.11.3+dfsg
+ isc_stats_decrement@Base 1:9.11.3+dfsg
+ isc_stats_detach@Base 1:9.11.3+dfsg
+ isc_stats_dump@Base 1:9.11.3+dfsg
+ isc_stats_increment@Base 1:9.11.3+dfsg
+ isc_stats_ncounters@Base 1:9.11.3+dfsg
+ isc_stats_set@Base 1:9.11.3+dfsg
+ isc_stdio_close@Base 1:9.11.3+dfsg
+ isc_stdio_flush@Base 1:9.11.3+dfsg
+ isc_stdio_open@Base 1:9.11.3+dfsg
+ isc_stdio_read@Base 1:9.11.3+dfsg
+ isc_stdio_seek@Base 1:9.11.3+dfsg
+ isc_stdio_sync@Base 1:9.11.3+dfsg
+ isc_stdio_tell@Base 1:9.11.3+dfsg
+ isc_stdio_write@Base 1:9.11.3+dfsg
+ isc_stdtime_get@Base 1:9.11.3+dfsg
+ isc_string_append@Base 1:9.11.3+dfsg
+ isc_string_append_truncate@Base 1:9.11.3+dfsg
+ isc_string_copy@Base 1:9.11.3+dfsg
+ isc_string_copy_truncate@Base 1:9.11.3+dfsg
+ isc_string_printf@Base 1:9.11.3+dfsg
+ isc_string_printf_truncate@Base 1:9.11.3+dfsg
+ isc_string_regiondup@Base 1:9.11.3+dfsg
+ isc_string_separate@Base 1:9.11.3+dfsg
+ isc_string_strcasestr@Base 1:9.11.3+dfsg
+ isc_string_strlcat@Base 1:9.11.3+dfsg
+ isc_string_strlcpy@Base 1:9.11.3+dfsg
+ isc_string_touint64@Base 1:9.11.3+dfsg
+ isc_strtoul@Base 1:9.11.3+dfsg
+ isc_symtab_count@Base 1:9.11.3+dfsg
+ isc_symtab_create@Base 1:9.11.3+dfsg
+ isc_symtab_define@Base 1:9.11.3+dfsg
+ isc_symtab_destroy@Base 1:9.11.3+dfsg
+ isc_symtab_lookup@Base 1:9.11.3+dfsg
+ isc_symtab_undefine@Base 1:9.11.3+dfsg
+ isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg
+ isc_task_attach@Base 1:9.11.3+dfsg
+ isc_task_beginexclusive@Base 1:9.11.3+dfsg
+ isc_task_create@Base 1:9.11.3+dfsg
+ isc_task_destroy@Base 1:9.11.3+dfsg
+ isc_task_detach@Base 1:9.11.3+dfsg
+ isc_task_endexclusive@Base 1:9.11.3+dfsg
+ isc_task_exiting@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc_task_onshutdown@Base 1:9.11.3+dfsg
+ isc_task_privilege@Base 1:9.11.3+dfsg
+ isc_task_purge@Base 1:9.11.3+dfsg
+ isc_task_purgeevent@Base 1:9.11.3+dfsg
+ isc_task_purgerange@Base 1:9.11.3+dfsg
+ isc_task_register@Base 1:9.11.3+dfsg
+ isc_task_send@Base 1:9.11.3+dfsg
+ isc_task_sendanddetach@Base 1:9.11.3+dfsg
+ isc_task_setname@Base 1:9.11.3+dfsg
+ isc_task_setprivilege@Base 1:9.11.3+dfsg
+ isc_task_shutdown@Base 1:9.11.3+dfsg
+ isc_task_unsend@Base 1:9.11.3+dfsg
+ isc_taskmgr_create@Base 1:9.11.3+dfsg
+ isc_taskmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc_taskmgr_excltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_mode@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc_taskpool_create@Base 1:9.11.3+dfsg
+ isc_taskpool_destroy@Base 1:9.11.3+dfsg
+ isc_taskpool_expand@Base 1:9.11.3+dfsg
+ isc_taskpool_gettask@Base 1:9.11.3+dfsg
+ isc_taskpool_setprivilege@Base 1:9.11.3+dfsg
+ isc_taskpool_size@Base 1:9.11.3+dfsg
+ isc_thread_create@Base 1:9.11.3+dfsg
+ isc_thread_setconcurrency@Base 1:9.11.3+dfsg
+ isc_thread_setname@Base 1:9.11.3+dfsg
+ isc_thread_yield@Base 1:9.11.3+dfsg
+ isc_time_add@Base 1:9.11.3+dfsg
+ isc_time_compare@Base 1:9.11.3+dfsg
+ isc_time_epoch@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601ms@Base 1:9.11.3+dfsg
+ isc_time_formathttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_formattimestamp@Base 1:9.11.3+dfsg
+ isc_time_isepoch@Base 1:9.11.3+dfsg
+ isc_time_microdiff@Base 1:9.11.3+dfsg
+ isc_time_nanoseconds@Base 1:9.11.3+dfsg
+ isc_time_now@Base 1:9.11.3+dfsg
+ isc_time_nowplusinterval@Base 1:9.11.3+dfsg
+ isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_seconds@Base 1:9.11.3+dfsg
+ isc_time_secondsastimet@Base 1:9.11.3+dfsg
+ isc_time_set@Base 1:9.11.3+dfsg
+ isc_time_settoepoch@Base 1:9.11.3+dfsg
+ isc_time_subtract@Base 1:9.11.3+dfsg
+ isc_timer_attach@Base 1:9.11.3+dfsg
+ isc_timer_create@Base 1:9.11.3+dfsg
+ isc_timer_detach@Base 1:9.11.3+dfsg
+ isc_timer_gettype@Base 1:9.11.3+dfsg
+ isc_timer_register@Base 1:9.11.3+dfsg
+ isc_timer_reset@Base 1:9.11.3+dfsg
+ isc_timer_touch@Base 1:9.11.3+dfsg
+ isc_timermgr_create@Base 1:9.11.3+dfsg
+ isc_timermgr_createinctx@Base 1:9.11.3+dfsg
+ isc_timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_timermgr_poke@Base 1:9.11.3+dfsg
+ isc_tm_strptime@Base 1:9.11.3+dfsg
+ isc_tm_timegm@Base 1:9.11.3+dfsg
+ isc_version@Base 1:9.11.3+dfsg
+ pk11_attribute_bytype@Base 1:9.11.3+dfsg
+ pk11_attribute_first@Base 1:9.11.3+dfsg
+ pk11_attribute_next@Base 1:9.11.3+dfsg
+ pk11_dump_tokens@Base 1:9.11.3+dfsg
+ pk11_error_fatalcheck@Base 1:9.11.3+dfsg
+ pk11_finalize@Base 1:9.11.3+dfsg
+ pk11_get_best_token@Base 1:9.11.3+dfsg
+ pk11_get_lib_name@Base 1:9.11.3+dfsg
+ pk11_get_load_error_message@Base 1:9.11.3+dfsg
+ pk11_get_session@Base 1:9.11.3+dfsg
+ pk11_initialize@Base 1:9.11.3+dfsg
+ pk11_initmsgcat@Base 1:9.11.3+dfsg
+ pk11_mem_get@Base 1:9.11.3+dfsg
+ pk11_mem_put@Base 1:9.11.3+dfsg
+ pk11_msgcat@Base 1:9.11.3+dfsg
+ pk11_numbits@Base 1:9.11.3+dfsg
+ pk11_parse_uri@Base 1:9.11.3+dfsg
+ pk11_rand_bytes@Base 1:9.11.3+dfsg
+ pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg
+ pk11_result_register@Base 1:9.11.3+dfsg
+ pk11_result_totext@Base 1:9.11.3+dfsg
+ pk11_return_session@Base 1:9.11.3+dfsg
+ pk11_set_lib_name@Base 1:9.11.3+dfsg
+ pk11_verbose_init@Base 1:9.11.3+dfsg
+ pkcs_C_CloseSession@Base 1:9.11.3+dfsg
+ pkcs_C_CreateObject@Base 1:9.11.3+dfsg
+ pkcs_C_DeriveKey@Base 1:9.11.3+dfsg
+ pkcs_C_DestroyObject@Base 1:9.11.3+dfsg
+ pkcs_C_DigestFinal@Base 1:9.11.3+dfsg
+ pkcs_C_DigestInit@Base 1:9.11.3+dfsg
+ pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Encrypt@Base 1:9.11.3+dfsg
+ pkcs_C_EncryptInit@Base 1:9.11.3+dfsg
+ pkcs_C_Finalize@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjects@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKey@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg
+ pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg
+ pkcs_C_GetSlotList@Base 1:9.11.3+dfsg
+ pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg
+ pkcs_C_Initialize@Base 1:9.11.3+dfsg
+ pkcs_C_Login@Base 1:9.11.3+dfsg
+ pkcs_C_Logout@Base 1:9.11.3+dfsg
+ pkcs_C_OpenSession@Base 1:9.11.3+dfsg
+ pkcs_C_SeedRandom@Base 1:9.11.3+dfsg
+ pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_Sign@Base 1:9.11.3+dfsg
+ pkcs_C_SignFinal@Base 1:9.11.3+dfsg
+ pkcs_C_SignInit@Base 1:9.11.3+dfsg
+ pkcs_C_SignUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Verify@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyInit@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg
+libisc-pkcs11.so.1100 libisc1100 #MINVER#
+ (optional)bsdcompat@Base 1:9.11.3+dfsg
+ isc___errno2result@Base 1:9.11.3+dfsg
+ isc___mem_allocate@Base 1:9.11.3+dfsg
+ isc___mem_free@Base 1:9.11.3+dfsg
+ isc___mem_get@Base 1:9.11.3+dfsg
+ isc___mem_put@Base 1:9.11.3+dfsg
+ isc___mem_putanddetach@Base 1:9.11.3+dfsg
+ isc___mem_reallocate@Base 1:9.11.3+dfsg
+ isc___mem_strdup@Base 1:9.11.3+dfsg
+ isc___mempool_get@Base 1:9.11.3+dfsg
+ isc___mempool_put@Base 1:9.11.3+dfsg
+ isc__app_block@Base 1:9.11.3+dfsg
+ isc__app_ctxfinish@Base 1:9.11.3+dfsg
+ isc__app_ctxonrun@Base 1:9.11.3+dfsg
+ isc__app_ctxrun@Base 1:9.11.3+dfsg
+ isc__app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc__app_ctxstart@Base 1:9.11.3+dfsg
+ isc__app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc__app_finish@Base 1:9.11.3+dfsg
+ isc__app_onrun@Base 1:9.11.3+dfsg
+ isc__app_register@Base 1:9.11.3+dfsg
+ isc__app_reload@Base 1:9.11.3+dfsg
+ isc__app_run@Base 1:9.11.3+dfsg
+ isc__app_shutdown@Base 1:9.11.3+dfsg
+ isc__app_start@Base 1:9.11.3+dfsg
+ isc__app_unblock@Base 1:9.11.3+dfsg
+ isc__appctx_create@Base 1:9.11.3+dfsg
+ isc__appctx_destroy@Base 1:9.11.3+dfsg
+ isc__appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc__appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc__backtrace_nsymbols@Base 1:9.11.3+dfsg
+ isc__backtrace_symtable@Base 1:9.11.3+dfsg
+ isc__buffer_activeregion@Base 1:9.11.3+dfsg
+ isc__buffer_add@Base 1:9.11.3+dfsg
+ isc__buffer_availableregion@Base 1:9.11.3+dfsg
+ isc__buffer_back@Base 1:9.11.3+dfsg
+ isc__buffer_clear@Base 1:9.11.3+dfsg
+ isc__buffer_consumedregion@Base 1:9.11.3+dfsg
+ isc__buffer_first@Base 1:9.11.3+dfsg
+ isc__buffer_forward@Base 1:9.11.3+dfsg
+ isc__buffer_init@Base 1:9.11.3+dfsg
+ isc__buffer_initnull@Base 1:9.11.3+dfsg
+ isc__buffer_invalidate@Base 1:9.11.3+dfsg
+ isc__buffer_putmem@Base 1:9.11.3+dfsg
+ isc__buffer_putstr@Base 1:9.11.3+dfsg
+ isc__buffer_putuint16@Base 1:9.11.3+dfsg
+ isc__buffer_putuint24@Base 1:9.11.3+dfsg
+ isc__buffer_putuint32@Base 1:9.11.3+dfsg
+ isc__buffer_putuint48@Base 1:9.11.3+dfsg
+ isc__buffer_putuint8@Base 1:9.11.3+dfsg
+ isc__buffer_region@Base 1:9.11.3+dfsg
+ isc__buffer_remainingregion@Base 1:9.11.3+dfsg
+ isc__buffer_setactive@Base 1:9.11.3+dfsg
+ isc__buffer_subtract@Base 1:9.11.3+dfsg
+ isc__buffer_usedregion@Base 1:9.11.3+dfsg
+ isc__hash_setvec@Base 1:9.11.3+dfsg
+ isc__mem_allocate@Base 1:9.11.3+dfsg
+ isc__mem_attach@Base 1:9.11.3+dfsg
+ isc__mem_create2@Base 1:9.11.3+dfsg
+ isc__mem_destroy@Base 1:9.11.3+dfsg
+ isc__mem_detach@Base 1:9.11.3+dfsg
+ isc__mem_free@Base 1:9.11.3+dfsg
+ isc__mem_get@Base 1:9.11.3+dfsg
+ isc__mem_inuse@Base 1:9.11.3+dfsg
+ isc__mem_isovermem@Base 1:9.11.3+dfsg
+ isc__mem_maxinuse@Base 1:9.11.3+dfsg
+ isc__mem_printactive@Base 1:9.11.3+dfsg
+ isc__mem_put@Base 1:9.11.3+dfsg
+ isc__mem_putanddetach@Base 1:9.11.3+dfsg
+ isc__mem_reallocate@Base 1:9.11.3+dfsg
+ isc__mem_register@Base 1:9.11.3+dfsg
+ isc__mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc__mem_setwater@Base 1:9.11.3+dfsg
+ isc__mem_strdup@Base 1:9.11.3+dfsg
+ isc__mem_total@Base 1:9.11.3+dfsg
+ isc__mem_waterack@Base 1:9.11.3+dfsg
+ isc__mempool_associatelock@Base 1:9.11.3+dfsg
+ isc__mempool_create@Base 1:9.11.3+dfsg
+ isc__mempool_destroy@Base 1:9.11.3+dfsg
+ isc__mempool_get@Base 1:9.11.3+dfsg
+ isc__mempool_getallocated@Base 1:9.11.3+dfsg
+ isc__mempool_put@Base 1:9.11.3+dfsg
+ isc__mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc__mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc__mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc__mempool_setname@Base 1:9.11.3+dfsg
+ isc__mutex_init@Base 1:9.11.3+dfsg
+ isc__socket_accept@Base 1:9.11.3+dfsg
+ isc__socket_attach@Base 1:9.11.3+dfsg
+ isc__socket_bind@Base 1:9.11.3+dfsg
+ isc__socket_cancel@Base 1:9.11.3+dfsg
+ isc__socket_cleanunix@Base 1:9.11.3+dfsg
+ isc__socket_close@Base 1:9.11.3+dfsg
+ isc__socket_connect@Base 1:9.11.3+dfsg
+ isc__socket_create@Base 1:9.11.3+dfsg
+ isc__socket_detach@Base 1:9.11.3+dfsg
+ isc__socket_dscp@Base 1:9.11.3+dfsg
+ isc__socket_dup@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc__socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc__socket_filter@Base 1:9.11.3+dfsg
+ isc__socket_getfd@Base 1:9.11.3+dfsg
+ isc__socket_getname@Base 1:9.11.3+dfsg
+ isc__socket_getpeername@Base 1:9.11.3+dfsg
+ isc__socket_getsockname@Base 1:9.11.3+dfsg
+ isc__socket_gettag@Base 1:9.11.3+dfsg
+ isc__socket_gettype@Base 1:9.11.3+dfsg
+ isc__socket_ipv6only@Base 1:9.11.3+dfsg
+ isc__socket_isbound@Base 1:9.11.3+dfsg
+ isc__socket_listen@Base 1:9.11.3+dfsg
+ isc__socket_open@Base 1:9.11.3+dfsg
+ isc__socket_permunix@Base 1:9.11.3+dfsg
+ isc__socket_recv2@Base 1:9.11.3+dfsg
+ isc__socket_recv@Base 1:9.11.3+dfsg
+ isc__socket_recvv@Base 1:9.11.3+dfsg
+ isc__socket_register@Base 1:9.11.3+dfsg
+ isc__socket_send@Base 1:9.11.3+dfsg
+ isc__socket_sendto2@Base 1:9.11.3+dfsg
+ isc__socket_sendto@Base 1:9.11.3+dfsg
+ isc__socket_sendtov2@Base 1:9.11.3+dfsg
+ isc__socket_sendtov@Base 1:9.11.3+dfsg
+ isc__socket_sendv@Base 1:9.11.3+dfsg
+ isc__socket_setname@Base 1:9.11.3+dfsg
+ isc__socketmgr_create2@Base 1:9.11.3+dfsg
+ isc__socketmgr_create@Base 1:9.11.3+dfsg
+ isc__socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc__socketmgr_maxudp@Base 1:9.11.3+dfsg
+ isc__socketmgr_setreserved@Base 1:9.11.3+dfsg
+ isc__strerror@Base 1:9.11.3+dfsg
+ isc__task_attach@Base 1:9.11.3+dfsg
+ isc__task_beginexclusive@Base 1:9.11.3+dfsg
+ isc__task_create@Base 1:9.11.3+dfsg
+ isc__task_destroy@Base 1:9.11.3+dfsg
+ isc__task_detach@Base 1:9.11.3+dfsg
+ isc__task_endexclusive@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc__task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc__task_getname@Base 1:9.11.3+dfsg
+ isc__task_gettag@Base 1:9.11.3+dfsg
+ isc__task_onshutdown@Base 1:9.11.3+dfsg
+ isc__task_privilege@Base 1:9.11.3+dfsg
+ isc__task_purge@Base 1:9.11.3+dfsg
+ isc__task_purgerange@Base 1:9.11.3+dfsg
+ isc__task_register@Base 1:9.11.3+dfsg
+ isc__task_send@Base 1:9.11.3+dfsg
+ isc__task_sendanddetach@Base 1:9.11.3+dfsg
+ isc__task_setname@Base 1:9.11.3+dfsg
+ isc__task_setprivilege@Base 1:9.11.3+dfsg
+ isc__task_shutdown@Base 1:9.11.3+dfsg
+ isc__task_unsend@Base 1:9.11.3+dfsg
+ isc__task_unsendrange@Base 1:9.11.3+dfsg
+ isc__taskmgr_create@Base 1:9.11.3+dfsg
+ isc__taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc__taskmgr_mode@Base 1:9.11.3+dfsg
+ isc__taskmgr_pause@Base 1:9.11.3+dfsg
+ isc__taskmgr_resume@Base 1:9.11.3+dfsg
+ isc__taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc__timer_attach@Base 1:9.11.3+dfsg
+ isc__timer_create@Base 1:9.11.3+dfsg
+ isc__timer_detach@Base 1:9.11.3+dfsg
+ isc__timer_register@Base 1:9.11.3+dfsg
+ isc__timer_reset@Base 1:9.11.3+dfsg
+ isc__timer_touch@Base 1:9.11.3+dfsg
+ isc__timermgr_create@Base 1:9.11.3+dfsg
+ isc__timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_aes128_crypt@Base 1:9.11.3+dfsg
+ isc_aes192_crypt@Base 1:9.11.3+dfsg
+ isc_aes256_crypt@Base 1:9.11.3+dfsg
+ isc_app_block@Base 1:9.11.3+dfsg
+ isc_app_ctxfinish@Base 1:9.11.3+dfsg
+ isc_app_ctxonrun@Base 1:9.11.3+dfsg
+ isc_app_ctxrun@Base 1:9.11.3+dfsg
+ isc_app_ctxshutdown@Base 1:9.11.3+dfsg
+ isc_app_ctxstart@Base 1:9.11.3+dfsg
+ isc_app_ctxsuspend@Base 1:9.11.3+dfsg
+ isc_app_finish@Base 1:9.11.3+dfsg
+ isc_app_isrunning@Base 1:9.11.3+dfsg
+ isc_app_onrun@Base 1:9.11.3+dfsg
+ isc_app_register@Base 1:9.11.3+dfsg
+ isc_app_reload@Base 1:9.11.3+dfsg
+ isc_app_run@Base 1:9.11.3+dfsg
+ isc_app_shutdown@Base 1:9.11.3+dfsg
+ isc_app_start@Base 1:9.11.3+dfsg
+ isc_app_unblock@Base 1:9.11.3+dfsg
+ isc_appctx_create@Base 1:9.11.3+dfsg
+ isc_appctx_destroy@Base 1:9.11.3+dfsg
+ isc_appctx_setsocketmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settaskmgr@Base 1:9.11.3+dfsg
+ isc_appctx_settimermgr@Base 1:9.11.3+dfsg
+ isc_assertion_failed@Base 1:9.11.3+dfsg
+ isc_assertion_setcallback@Base 1:9.11.3+dfsg
+ isc_assertion_typetotext@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbol@Base 1:9.11.3+dfsg
+ isc_backtrace_getsymbolfromindex@Base 1:9.11.3+dfsg
+ isc_backtrace_gettrace@Base 1:9.11.3+dfsg
+ isc_base32_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32_decodestring@Base 1:9.11.3+dfsg
+ isc_base32_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32_totext@Base 1:9.11.3+dfsg
+ isc_base32hex_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hex_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hex_totext@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decoderegion@Base 1:9.11.3+dfsg
+ isc_base32hexnp_decodestring@Base 1:9.11.3+dfsg
+ isc_base32hexnp_tobuffer@Base 1:9.11.3+dfsg
+ isc_base32hexnp_totext@Base 1:9.11.3+dfsg
+ isc_base64_decodestring@Base 1:9.11.3+dfsg
+ isc_base64_tobuffer@Base 1:9.11.3+dfsg
+ isc_base64_totext@Base 1:9.11.3+dfsg
+ isc_bind9@Base 1:9.11.3+dfsg
+ isc_buffer_allocate@Base 1:9.11.3+dfsg
+ isc_buffer_compact@Base 1:9.11.3+dfsg
+ isc_buffer_copyregion@Base 1:9.11.3+dfsg
+ isc_buffer_dup@Base 1:9.11.3+dfsg
+ isc_buffer_free@Base 1:9.11.3+dfsg
+ isc_buffer_getuint16@Base 1:9.11.3+dfsg
+ isc_buffer_getuint32@Base 1:9.11.3+dfsg
+ isc_buffer_getuint48@Base 1:9.11.3+dfsg
+ isc_buffer_getuint8@Base 1:9.11.3+dfsg
+ isc_buffer_putdecint@Base 1:9.11.3+dfsg
+ isc_buffer_reallocate@Base 1:9.11.3+dfsg
+ isc_buffer_reinit@Base 1:9.11.3+dfsg
+ isc_buffer_reserve@Base 1:9.11.3+dfsg
+ isc_buffer_setautorealloc@Base 1:9.11.3+dfsg
+ isc_bufferlist_availablecount@Base 1:9.11.3+dfsg
+ isc_bufferlist_usedcount@Base 1:9.11.3+dfsg
+ isc_categories@Base 1:9.11.3+dfsg
+ isc_commandline_argument@Base 1:9.11.3+dfsg
+ isc_commandline_errprint@Base 1:9.11.3+dfsg
+ isc_commandline_index@Base 1:9.11.3+dfsg
+ isc_commandline_option@Base 1:9.11.3+dfsg
+ isc_commandline_parse@Base 1:9.11.3+dfsg
+ isc_commandline_progname@Base 1:9.11.3+dfsg
+ isc_commandline_reset@Base 1:9.11.3+dfsg
+ isc_commandline_strtoargv@Base 1:9.11.3+dfsg
+ isc_condition_waituntil@Base 1:9.11.3+dfsg
+ isc_counter_attach@Base 1:9.11.3+dfsg
+ isc_counter_create@Base 1:9.11.3+dfsg
+ isc_counter_detach@Base 1:9.11.3+dfsg
+ isc_counter_increment@Base 1:9.11.3+dfsg
+ isc_counter_setlimit@Base 1:9.11.3+dfsg
+ isc_counter_used@Base 1:9.11.3+dfsg
+ isc_crc64_final@Base 1:9.11.3+dfsg
+ isc_crc64_init@Base 1:9.11.3+dfsg
+ isc_crc64_update@Base 1:9.11.3+dfsg
+ isc_dir_chdir@Base 1:9.11.3+dfsg
+ isc_dir_chroot@Base 1:9.11.3+dfsg
+ isc_dir_close@Base 1:9.11.3+dfsg
+ isc_dir_createunique@Base 1:9.11.3+dfsg
+ isc_dir_init@Base 1:9.11.3+dfsg
+ isc_dir_open@Base 1:9.11.3+dfsg
+ isc_dir_read@Base 1:9.11.3+dfsg
+ isc_dir_reset@Base 1:9.11.3+dfsg
+ isc_dscp_check_value@Base 1:9.11.3+dfsg
+ isc_entropy_addcallbacksample@Base 1:9.11.3+dfsg
+ isc_entropy_addsample@Base 1:9.11.3+dfsg
+ isc_entropy_attach@Base 1:9.11.3+dfsg
+ isc_entropy_create@Base 1:9.11.3+dfsg
+ isc_entropy_createcallbacksource@Base 1:9.11.3+dfsg
+ isc_entropy_createfilesource@Base 1:9.11.3+dfsg
+ isc_entropy_createsamplesource@Base 1:9.11.3+dfsg
+ isc_entropy_destroysource@Base 1:9.11.3+dfsg
+ isc_entropy_detach@Base 1:9.11.3+dfsg
+ isc_entropy_getdata@Base 1:9.11.3+dfsg
+ isc_entropy_putdata@Base 1:9.11.3+dfsg
+ isc_entropy_stats@Base 1:9.11.3+dfsg
+ isc_entropy_status@Base 1:9.11.3+dfsg
+ isc_entropy_stopcallbacksources@Base 1:9.11.3+dfsg
+ isc_entropy_usebestsource@Base 1:9.11.3+dfsg
+ isc_errno_toresult@Base 1:9.11.3+dfsg
+ isc_error_fatal@Base 1:9.11.3+dfsg
+ isc_error_runtimecheck@Base 1:9.11.3+dfsg
+ isc_error_setfatal@Base 1:9.11.3+dfsg
+ isc_error_setunexpected@Base 1:9.11.3+dfsg
+ isc_error_unexpected@Base 1:9.11.3+dfsg
+ isc_event_allocate@Base 1:9.11.3+dfsg
+ isc_event_constallocate@Base 1:9.11.3+dfsg
+ isc_event_free@Base 1:9.11.3+dfsg
+ isc_file_absolutepath@Base 1:9.11.3+dfsg
+ isc_file_basename@Base 1:9.11.3+dfsg
+ isc_file_bopenunique@Base 1:9.11.3+dfsg
+ isc_file_bopenuniquemode@Base 1:9.11.3+dfsg
+ isc_file_bopenuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_exists@Base 1:9.11.3+dfsg
+ isc_file_getmodtime@Base 1:9.11.3+dfsg
+ isc_file_getsize@Base 1:9.11.3+dfsg
+ isc_file_getsizefd@Base 1:9.11.3+dfsg
+ isc_file_isabsolute@Base 1:9.11.3+dfsg
+ isc_file_ischdiridempotent@Base 1:9.11.3+dfsg
+ isc_file_iscurrentdir@Base 1:9.11.3+dfsg
+ isc_file_isdirectory@Base 1:9.11.3+dfsg
+ isc_file_isdirwritable@Base 1:9.11.3+dfsg
+ isc_file_isplainfile@Base 1:9.11.3+dfsg
+ isc_file_isplainfilefd@Base 1:9.11.3+dfsg
+ isc_file_mktemplate@Base 1:9.11.3+dfsg
+ isc_file_mmap@Base 1:9.11.3+dfsg
+ isc_file_mode@Base 1:9.11.3+dfsg
+ isc_file_munmap@Base 1:9.11.3+dfsg
+ isc_file_openunique@Base 1:9.11.3+dfsg
+ isc_file_openuniquemode@Base 1:9.11.3+dfsg
+ isc_file_openuniqueprivate@Base 1:9.11.3+dfsg
+ isc_file_progname@Base 1:9.11.3+dfsg
+ isc_file_remove@Base 1:9.11.3+dfsg
+ isc_file_rename@Base 1:9.11.3+dfsg
+ isc_file_renameunique@Base 1:9.11.3+dfsg
+ isc_file_safecreate@Base 1:9.11.3+dfsg
+ isc_file_sanitize@Base 1:9.11.3+dfsg
+ isc_file_settime@Base 1:9.11.3+dfsg
+ isc_file_splitpath@Base 1:9.11.3+dfsg
+ isc_file_template@Base 1:9.11.3+dfsg
+ isc_file_truncate@Base 1:9.11.3+dfsg
+ isc_fsaccess_add@Base 1:9.11.3+dfsg
+ isc_fsaccess_remove@Base 1:9.11.3+dfsg
+ isc_fsaccess_set@Base 1:9.11.3+dfsg
+ isc_hash_calc@Base 1:9.11.3+dfsg
+ isc_hash_create@Base 1:9.11.3+dfsg
+ isc_hash_ctxattach@Base 1:9.11.3+dfsg
+ isc_hash_ctxcalc@Base 1:9.11.3+dfsg
+ isc_hash_ctxcreate@Base 1:9.11.3+dfsg
+ isc_hash_ctxdetach@Base 1:9.11.3+dfsg
+ isc_hash_ctxinit@Base 1:9.11.3+dfsg
+ isc_hash_destroy@Base 1:9.11.3+dfsg
+ isc_hash_function@Base 1:9.11.3+dfsg
+ isc_hash_function_reverse@Base 1:9.11.3+dfsg
+ isc_hash_get_initializer@Base 1:9.11.3+dfsg
+ isc_hash_init@Base 1:9.11.3+dfsg
+ isc_hash_set_initializer@Base 1:9.11.3+dfsg
+ isc_hashctx@Base 1:9.11.3+dfsg
+ isc_heap_create@Base 1:9.11.3+dfsg
+ isc_heap_decreased@Base 1:9.11.3+dfsg
+ isc_heap_delete@Base 1:9.11.3+dfsg
+ isc_heap_destroy@Base 1:9.11.3+dfsg
+ isc_heap_element@Base 1:9.11.3+dfsg
+ isc_heap_foreach@Base 1:9.11.3+dfsg
+ isc_heap_increased@Base 1:9.11.3+dfsg
+ isc_heap_insert@Base 1:9.11.3+dfsg
+ isc_hex_decodestring@Base 1:9.11.3+dfsg
+ isc_hex_tobuffer@Base 1:9.11.3+dfsg
+ isc_hex_totext@Base 1:9.11.3+dfsg
+ isc_hmacmd5_check@Base 1:9.11.3+dfsg
+ isc_hmacmd5_init@Base 1:9.11.3+dfsg
+ isc_hmacmd5_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacmd5_sign@Base 1:9.11.3+dfsg
+ isc_hmacmd5_update@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify2@Base 1:9.11.3+dfsg
+ isc_hmacmd5_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha1_check@Base 1:9.11.3+dfsg
+ isc_hmacsha1_init@Base 1:9.11.3+dfsg
+ isc_hmacsha1_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha1_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha1_update@Base 1:9.11.3+dfsg
+ isc_hmacsha1_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha224_init@Base 1:9.11.3+dfsg
+ isc_hmacsha224_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha224_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha224_update@Base 1:9.11.3+dfsg
+ isc_hmacsha224_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha256_init@Base 1:9.11.3+dfsg
+ isc_hmacsha256_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha256_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha256_update@Base 1:9.11.3+dfsg
+ isc_hmacsha256_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha384_init@Base 1:9.11.3+dfsg
+ isc_hmacsha384_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha384_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha384_update@Base 1:9.11.3+dfsg
+ isc_hmacsha384_verify@Base 1:9.11.3+dfsg
+ isc_hmacsha512_init@Base 1:9.11.3+dfsg
+ isc_hmacsha512_invalidate@Base 1:9.11.3+dfsg
+ isc_hmacsha512_sign@Base 1:9.11.3+dfsg
+ isc_hmacsha512_update@Base 1:9.11.3+dfsg
+ isc_hmacsha512_verify@Base 1:9.11.3+dfsg
+ isc_ht_add@Base 1:9.11.3+dfsg
+ isc_ht_count@Base 1:9.11.3+dfsg
+ isc_ht_delete@Base 1:9.11.3+dfsg
+ isc_ht_destroy@Base 1:9.11.3+dfsg
+ isc_ht_find@Base 1:9.11.3+dfsg
+ isc_ht_init@Base 1:9.11.3+dfsg
+ isc_ht_iter_create@Base 1:9.11.3+dfsg
+ isc_ht_iter_current@Base 1:9.11.3+dfsg
+ isc_ht_iter_currentkey@Base 1:9.11.3+dfsg
+ isc_ht_iter_delcurrent_next@Base 1:9.11.3+dfsg
+ isc_ht_iter_destroy@Base 1:9.11.3+dfsg
+ isc_ht_iter_first@Base 1:9.11.3+dfsg
+ isc_ht_iter_next@Base 1:9.11.3+dfsg
+ isc_httpd_addheader@Base 1:9.11.3+dfsg
+ isc_httpd_addheaderuint@Base 1:9.11.3+dfsg
+ isc_httpd_endheaders@Base 1:9.11.3+dfsg
+ isc_httpd_response@Base 1:9.11.3+dfsg
+ isc_httpd_setfinishhook@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl2@Base 1:9.11.3+dfsg
+ isc_httpdmgr_addurl@Base 1:9.11.3+dfsg
+ isc_httpdmgr_create@Base 1:9.11.3+dfsg
+ isc_httpdmgr_shutdown@Base 1:9.11.3+dfsg
+ isc_interfaceiter_create@Base 1:9.11.3+dfsg
+ isc_interfaceiter_current@Base 1:9.11.3+dfsg
+ isc_interfaceiter_destroy@Base 1:9.11.3+dfsg
+ isc_interfaceiter_first@Base 1:9.11.3+dfsg
+ isc_interfaceiter_next@Base 1:9.11.3+dfsg
+ isc_interval_iszero@Base 1:9.11.3+dfsg
+ isc_interval_set@Base 1:9.11.3+dfsg
+ isc_interval_zero@Base 1:9.11.3+dfsg
+ isc_iterated_hash@Base 1:9.11.3+dfsg
+ isc_keyboard_canceled@Base 1:9.11.3+dfsg
+ isc_keyboard_close@Base 1:9.11.3+dfsg
+ isc_keyboard_getchar@Base 1:9.11.3+dfsg
+ isc_keyboard_open@Base 1:9.11.3+dfsg
+ isc_lctx@Base 1:9.11.3+dfsg
+ isc_lex_close@Base 1:9.11.3+dfsg
+ isc_lex_create@Base 1:9.11.3+dfsg
+ isc_lex_destroy@Base 1:9.11.3+dfsg
+ isc_lex_getcomments@Base 1:9.11.3+dfsg
+ isc_lex_getlasttokentext@Base 1:9.11.3+dfsg
+ isc_lex_getmastertoken@Base 1:9.11.3+dfsg
+ isc_lex_getoctaltoken@Base 1:9.11.3+dfsg
+ isc_lex_getsourceline@Base 1:9.11.3+dfsg
+ isc_lex_getsourcename@Base 1:9.11.3+dfsg
+ isc_lex_getspecials@Base 1:9.11.3+dfsg
+ isc_lex_gettoken@Base 1:9.11.3+dfsg
+ isc_lex_isfile@Base 1:9.11.3+dfsg
+ isc_lex_openbuffer@Base 1:9.11.3+dfsg
+ isc_lex_openfile@Base 1:9.11.3+dfsg
+ isc_lex_openstream@Base 1:9.11.3+dfsg
+ isc_lex_setcomments@Base 1:9.11.3+dfsg
+ isc_lex_setsourceline@Base 1:9.11.3+dfsg
+ isc_lex_setsourcename@Base 1:9.11.3+dfsg
+ isc_lex_setspecials@Base 1:9.11.3+dfsg
+ isc_lex_ungettoken@Base 1:9.11.3+dfsg
+ isc_lfsr_generate32@Base 1:9.11.3+dfsg
+ isc_lfsr_generate@Base 1:9.11.3+dfsg
+ isc_lfsr_init@Base 1:9.11.3+dfsg
+ isc_lfsr_skip@Base 1:9.11.3+dfsg
+ isc_lib_initmsgcat@Base 1:9.11.3+dfsg
+ isc_lib_register@Base 1:9.11.3+dfsg
+ isc_libage@Base 1:9.11.3+dfsg
+ isc_libinterface@Base 1:9.11.3+dfsg
+ isc_librevision@Base 1:9.11.3+dfsg
+ isc_log_categorybyname@Base 1:9.11.3+dfsg
+ isc_log_closefilelogs@Base 1:9.11.3+dfsg
+ isc_log_create@Base 1:9.11.3+dfsg
+ isc_log_createchannel@Base 1:9.11.3+dfsg
+ isc_log_destroy@Base 1:9.11.3+dfsg
+ isc_log_getdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_getduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_gettag@Base 1:9.11.3+dfsg
+ isc_log_ivwrite1@Base 1:9.11.3+dfsg
+ isc_log_ivwrite@Base 1:9.11.3+dfsg
+ isc_log_iwrite1@Base 1:9.11.3+dfsg
+ isc_log_iwrite@Base 1:9.11.3+dfsg
+ isc_log_modulebyname@Base 1:9.11.3+dfsg
+ isc_log_opensyslog@Base 1:9.11.3+dfsg
+ isc_log_registercategories@Base 1:9.11.3+dfsg
+ isc_log_registermodules@Base 1:9.11.3+dfsg
+ isc_log_setcontext@Base 1:9.11.3+dfsg
+ isc_log_setdebuglevel@Base 1:9.11.3+dfsg
+ isc_log_setduplicateinterval@Base 1:9.11.3+dfsg
+ isc_log_settag@Base 1:9.11.3+dfsg
+ isc_log_usechannel@Base 1:9.11.3+dfsg
+ isc_log_vwrite1@Base 1:9.11.3+dfsg
+ isc_log_vwrite@Base 1:9.11.3+dfsg
+ isc_log_wouldlog@Base 1:9.11.3+dfsg
+ isc_log_write1@Base 1:9.11.3+dfsg
+ isc_log_write@Base 1:9.11.3+dfsg
+ isc_logconfig_create@Base 1:9.11.3+dfsg
+ isc_logconfig_destroy@Base 1:9.11.3+dfsg
+ isc_logconfig_get@Base 1:9.11.3+dfsg
+ isc_logconfig_use@Base 1:9.11.3+dfsg
+ isc_logfile_roll@Base 1:9.11.3+dfsg
+ isc_md5_check@Base 1:9.11.3+dfsg
+ isc_md5_final@Base 1:9.11.3+dfsg
+ isc_md5_init@Base 1:9.11.3+dfsg
+ isc_md5_invalidate@Base 1:9.11.3+dfsg
+ isc_md5_update@Base 1:9.11.3+dfsg
+ isc_mem_attach@Base 1:9.11.3+dfsg
+ isc_mem_checkdestroyed@Base 1:9.11.3+dfsg
+ isc_mem_create2@Base 1:9.11.3+dfsg
+ isc_mem_create@Base 1:9.11.3+dfsg
+ isc_mem_createx2@Base 1:9.11.3+dfsg
+ isc_mem_createx@Base 1:9.11.3+dfsg
+ isc_mem_debugging@Base 1:9.11.3+dfsg
+ isc_mem_defaultflags@Base 1:9.11.3+dfsg
+ isc_mem_destroy@Base 1:9.11.3+dfsg
+ isc_mem_detach@Base 1:9.11.3+dfsg
+ isc_mem_getname@Base 1:9.11.3+dfsg
+ isc_mem_getquota@Base 1:9.11.3+dfsg
+ isc_mem_gettag@Base 1:9.11.3+dfsg
+ isc_mem_inuse@Base 1:9.11.3+dfsg
+ isc_mem_isovermem@Base 1:9.11.3+dfsg
+ isc_mem_maxinuse@Base 1:9.11.3+dfsg
+ isc_mem_ondestroy@Base 1:9.11.3+dfsg
+ isc_mem_printallactive@Base 1:9.11.3+dfsg
+ isc_mem_references@Base 1:9.11.3+dfsg
+ isc_mem_register@Base 1:9.11.3+dfsg
+ isc_mem_renderjson@Base 1:9.11.3+dfsg
+ isc_mem_renderxml@Base 1:9.11.3+dfsg
+ isc_mem_setdestroycheck@Base 1:9.11.3+dfsg
+ isc_mem_setname@Base 1:9.11.3+dfsg
+ isc_mem_setquota@Base 1:9.11.3+dfsg
+ isc_mem_setwater@Base 1:9.11.3+dfsg
+ isc_mem_stats@Base 1:9.11.3+dfsg
+ isc_mem_total@Base 1:9.11.3+dfsg
+ isc_mem_waterack@Base 1:9.11.3+dfsg
+ isc_meminfo_totalphys@Base 1:9.11.3+dfsg
+ isc_mempool_associatelock@Base 1:9.11.3+dfsg
+ isc_mempool_create@Base 1:9.11.3+dfsg
+ isc_mempool_destroy@Base 1:9.11.3+dfsg
+ isc_mempool_getallocated@Base 1:9.11.3+dfsg
+ isc_mempool_getfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreecount@Base 1:9.11.3+dfsg
+ isc_mempool_getfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_getmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setfillcount@Base 1:9.11.3+dfsg
+ isc_mempool_setfreemax@Base 1:9.11.3+dfsg
+ isc_mempool_setmaxalloc@Base 1:9.11.3+dfsg
+ isc_mempool_setname@Base 1:9.11.3+dfsg
+ isc_modules@Base 1:9.11.3+dfsg
+ isc_msgcat@Base 1:9.11.3+dfsg
+ isc_msgcat_close@Base 1:9.11.3+dfsg
+ isc_msgcat_get@Base 1:9.11.3+dfsg
+ isc_msgcat_open@Base 1:9.11.3+dfsg
+ isc_mutexblock_destroy@Base 1:9.11.3+dfsg
+ isc_mutexblock_init@Base 1:9.11.3+dfsg
+ isc_net_aton@Base 1:9.11.3+dfsg
+ isc_net_disableipv4@Base 1:9.11.3+dfsg
+ isc_net_disableipv6@Base 1:9.11.3+dfsg
+ isc_net_enableipv4@Base 1:9.11.3+dfsg
+ isc_net_enableipv6@Base 1:9.11.3+dfsg
+ isc_net_getudpportrange@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6only@Base 1:9.11.3+dfsg
+ isc_net_probe_ipv6pktinfo@Base 1:9.11.3+dfsg
+ isc_net_probedscp@Base 1:9.11.3+dfsg
+ isc_net_probeipv4@Base 1:9.11.3+dfsg
+ isc_net_probeipv6@Base 1:9.11.3+dfsg
+ isc_net_probeunix@Base 1:9.11.3+dfsg
+ isc_netaddr_any6@Base 1:9.11.3+dfsg
+ isc_netaddr_any@Base 1:9.11.3+dfsg
+ isc_netaddr_eqprefix@Base 1:9.11.3+dfsg
+ isc_netaddr_equal@Base 1:9.11.3+dfsg
+ isc_netaddr_format@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_netaddr_fromin@Base 1:9.11.3+dfsg
+ isc_netaddr_frompath@Base 1:9.11.3+dfsg
+ isc_netaddr_fromsockaddr@Base 1:9.11.3+dfsg
+ isc_netaddr_fromv4mapped@Base 1:9.11.3+dfsg
+ isc_netaddr_getzone@Base 1:9.11.3+dfsg
+ isc_netaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_netaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_netaddr_isloopback@Base 1:9.11.3+dfsg
+ isc_netaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_netaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_netaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_netaddr_masktoprefixlen@Base 1:9.11.3+dfsg
+ isc_netaddr_prefixok@Base 1:9.11.3+dfsg
+ isc_netaddr_setzone@Base 1:9.11.3+dfsg
+ isc_netaddr_totext@Base 1:9.11.3+dfsg
+ isc_netscope_pton@Base 1:9.11.3+dfsg
+ isc_ondestroy_init@Base 1:9.11.3+dfsg
+ isc_ondestroy_notify@Base 1:9.11.3+dfsg
+ isc_ondestroy_register@Base 1:9.11.3+dfsg
+ isc_os_ncpus@Base 1:9.11.3+dfsg
+ isc_parse_uint16@Base 1:9.11.3+dfsg
+ isc_parse_uint32@Base 1:9.11.3+dfsg
+ isc_parse_uint8@Base 1:9.11.3+dfsg
+ isc_pool_count@Base 1:9.11.3+dfsg
+ isc_pool_create@Base 1:9.11.3+dfsg
+ isc_pool_destroy@Base 1:9.11.3+dfsg
+ isc_pool_expand@Base 1:9.11.3+dfsg
+ isc_pool_get@Base 1:9.11.3+dfsg
+ isc_portset_add@Base 1:9.11.3+dfsg
+ isc_portset_addrange@Base 1:9.11.3+dfsg
+ isc_portset_create@Base 1:9.11.3+dfsg
+ isc_portset_destroy@Base 1:9.11.3+dfsg
+ isc_portset_isset@Base 1:9.11.3+dfsg
+ isc_portset_nports@Base 1:9.11.3+dfsg
+ isc_portset_remove@Base 1:9.11.3+dfsg
+ isc_portset_removerange@Base 1:9.11.3+dfsg
+ isc_quota_attach@Base 1:9.11.3+dfsg
+ isc_quota_destroy@Base 1:9.11.3+dfsg
+ isc_quota_detach@Base 1:9.11.3+dfsg
+ isc_quota_force@Base 1:9.11.5.P4+dfsg
+ isc_quota_init@Base 1:9.11.3+dfsg
+ isc_quota_max@Base 1:9.11.3+dfsg
+ isc_quota_release@Base 1:9.11.3+dfsg
+ isc_quota_reserve@Base 1:9.11.3+dfsg
+ isc_quota_soft@Base 1:9.11.3+dfsg
+ isc_radix_create@Base 1:9.11.3+dfsg
+ isc_radix_destroy@Base 1:9.11.3+dfsg
+ isc_radix_insert@Base 1:9.11.3+dfsg
+ isc_radix_process@Base 1:9.11.3+dfsg
+ isc_radix_remove@Base 1:9.11.3+dfsg
+ isc_radix_search@Base 1:9.11.3+dfsg
+ isc_random_get@Base 1:9.11.3+dfsg
+ isc_random_jitter@Base 1:9.11.3+dfsg
+ isc_random_seed@Base 1:9.11.3+dfsg
+ isc_ratelimiter_attach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_create@Base 1:9.11.3+dfsg
+ isc_ratelimiter_dequeue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_detach@Base 1:9.11.3+dfsg
+ isc_ratelimiter_enqueue@Base 1:9.11.3+dfsg
+ isc_ratelimiter_release@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setinterval@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpertic@Base 1:9.11.3+dfsg
+ isc_ratelimiter_setpushpop@Base 1:9.11.3+dfsg
+ isc_ratelimiter_shutdown@Base 1:9.11.3+dfsg
+ isc_ratelimiter_stall@Base 1:9.11.3+dfsg
+ isc_refcount_init@Base 1:9.11.3+dfsg
+ isc_regex_validate@Base 1:9.11.3+dfsg
+ isc_region_compare@Base 1:9.11.3+dfsg
+ isc_resource_getcurlimit@Base 1:9.11.3+dfsg
+ isc_resource_getlimit@Base 1:9.11.3+dfsg
+ isc_resource_setlimit@Base 1:9.11.3+dfsg
+ isc_result_register@Base 1:9.11.3+dfsg
+ isc_result_registerids@Base 1:9.11.3+dfsg
+ isc_result_toid@Base 1:9.11.3+dfsg
+ isc_result_totext@Base 1:9.11.3+dfsg
+ isc_rng_attach@Base 1:9.11.3+dfsg
+ isc_rng_create@Base 1:9.11.3+dfsg
+ isc_rng_detach@Base 1:9.11.3+dfsg
+ isc_rng_random@Base 1:9.11.3+dfsg
+ isc_rng_uniformrandom@Base 1:9.11.3+dfsg
+ isc_rwlock_destroy@Base 1:9.11.3+dfsg
+ isc_rwlock_downgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_init@Base 1:9.11.3+dfsg
+ isc_rwlock_lock@Base 1:9.11.3+dfsg
+ isc_rwlock_trylock@Base 1:9.11.3+dfsg
+ isc_rwlock_tryupgrade@Base 1:9.11.3+dfsg
+ isc_rwlock_unlock@Base 1:9.11.3+dfsg
+ isc_safe_memcompare@Base 1:9.11.3+dfsg
+ isc_safe_memequal@Base 1:9.11.3+dfsg
+ isc_safe_memwipe@Base 1:9.11.3+dfsg
+ isc_serial_eq@Base 1:9.11.3+dfsg
+ isc_serial_ge@Base 1:9.11.3+dfsg
+ isc_serial_gt@Base 1:9.11.3+dfsg
+ isc_serial_le@Base 1:9.11.3+dfsg
+ isc_serial_lt@Base 1:9.11.3+dfsg
+ isc_serial_ne@Base 1:9.11.3+dfsg
+ isc_sha1_check@Base 1:9.11.3+dfsg
+ isc_sha1_final@Base 1:9.11.3+dfsg
+ isc_sha1_init@Base 1:9.11.3+dfsg
+ isc_sha1_invalidate@Base 1:9.11.3+dfsg
+ isc_sha1_update@Base 1:9.11.3+dfsg
+ isc_sha224_data@Base 1:9.11.3+dfsg
+ isc_sha224_end@Base 1:9.11.3+dfsg
+ isc_sha224_final@Base 1:9.11.3+dfsg
+ isc_sha224_init@Base 1:9.11.3+dfsg
+ isc_sha224_invalidate@Base 1:9.11.3+dfsg
+ isc_sha224_update@Base 1:9.11.3+dfsg
+ isc_sha256_data@Base 1:9.11.3+dfsg
+ isc_sha256_end@Base 1:9.11.3+dfsg
+ isc_sha256_final@Base 1:9.11.3+dfsg
+ isc_sha256_init@Base 1:9.11.3+dfsg
+ isc_sha256_invalidate@Base 1:9.11.3+dfsg
+ isc_sha256_update@Base 1:9.11.3+dfsg
+ isc_sha384_data@Base 1:9.11.3+dfsg
+ isc_sha384_end@Base 1:9.11.3+dfsg
+ isc_sha384_final@Base 1:9.11.3+dfsg
+ isc_sha384_init@Base 1:9.11.3+dfsg
+ isc_sha384_invalidate@Base 1:9.11.3+dfsg
+ isc_sha384_update@Base 1:9.11.3+dfsg
+ isc_sha512_data@Base 1:9.11.3+dfsg
+ isc_sha512_end@Base 1:9.11.3+dfsg
+ isc_sha512_final@Base 1:9.11.3+dfsg
+ isc_sha512_init@Base 1:9.11.3+dfsg
+ isc_sha512_invalidate@Base 1:9.11.3+dfsg
+ isc_sha512_update@Base 1:9.11.3+dfsg
+ isc_sockaddr_any6@Base 1:9.11.3+dfsg
+ isc_sockaddr_any@Base 1:9.11.3+dfsg
+ isc_sockaddr_anyofpf@Base 1:9.11.3+dfsg
+ isc_sockaddr_compare@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_eqaddrprefix@Base 1:9.11.3+dfsg
+ isc_sockaddr_equal@Base 1:9.11.3+dfsg
+ isc_sockaddr_format@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin6@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromin@Base 1:9.11.3+dfsg
+ isc_sockaddr_fromnetaddr@Base 1:9.11.3+dfsg
+ isc_sockaddr_frompath@Base 1:9.11.3+dfsg
+ isc_sockaddr_getport@Base 1:9.11.3+dfsg
+ isc_sockaddr_hash@Base 1:9.11.3+dfsg
+ isc_sockaddr_isexperimental@Base 1:9.11.3+dfsg
+ isc_sockaddr_islinklocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_ismulticast@Base 1:9.11.3+dfsg
+ isc_sockaddr_isnetzero@Base 1:9.11.3+dfsg
+ isc_sockaddr_issitelocal@Base 1:9.11.3+dfsg
+ isc_sockaddr_pf@Base 1:9.11.3+dfsg
+ isc_sockaddr_setport@Base 1:9.11.3+dfsg
+ isc_sockaddr_totext@Base 1:9.11.3+dfsg
+ isc_sockaddr_v6fromin@Base 1:9.11.3+dfsg
+ isc_socket_accept@Base 1:9.11.3+dfsg
+ isc_socket_attach@Base 1:9.11.3+dfsg
+ isc_socket_bind@Base 1:9.11.3+dfsg
+ isc_socket_cancel@Base 1:9.11.3+dfsg
+ isc_socket_cleanunix@Base 1:9.11.3+dfsg
+ isc_socket_close@Base 1:9.11.3+dfsg
+ isc_socket_connect@Base 1:9.11.3+dfsg
+ isc_socket_create@Base 1:9.11.3+dfsg
+ isc_socket_detach@Base 1:9.11.3+dfsg
+ isc_socket_dscp@Base 1:9.11.3+dfsg
+ isc_socket_dup@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchcreate@Base 1:9.11.3+dfsg
+ isc_socket_fdwatchpoke@Base 1:9.11.3+dfsg
+ isc_socket_filter@Base 1:9.11.3+dfsg
+ isc_socket_getfd@Base 1:9.11.3+dfsg
+ isc_socket_getpeername@Base 1:9.11.3+dfsg
+ isc_socket_getsockname@Base 1:9.11.3+dfsg
+ isc_socket_gettype@Base 1:9.11.3+dfsg
+ isc_socket_ipv6only@Base 1:9.11.3+dfsg
+ isc_socket_listen@Base 1:9.11.3+dfsg
+ isc_socket_open@Base 1:9.11.3+dfsg
+ isc_socket_permunix@Base 1:9.11.3+dfsg
+ isc_socket_recv2@Base 1:9.11.3+dfsg
+ isc_socket_recv@Base 1:9.11.3+dfsg
+ isc_socket_recvv@Base 1:9.11.3+dfsg
+ isc_socket_register@Base 1:9.11.3+dfsg
+ isc_socket_send@Base 1:9.11.3+dfsg
+ isc_socket_sendto2@Base 1:9.11.3+dfsg
+ isc_socket_sendto@Base 1:9.11.3+dfsg
+ isc_socket_sendtov2@Base 1:9.11.3+dfsg
+ isc_socket_sendtov@Base 1:9.11.3+dfsg
+ isc_socket_sendv@Base 1:9.11.3+dfsg
+ isc_socket_setname@Base 1:9.11.3+dfsg
+ isc_socket_socketevent@Base 1:9.11.3+dfsg
+ isc_socketmgr_create2@Base 1:9.11.3+dfsg
+ isc_socketmgr_create@Base 1:9.11.3+dfsg
+ isc_socketmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_socketmgr_destroy@Base 1:9.11.3+dfsg
+ isc_socketmgr_getmaxsockets@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_socketmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_socketmgr_setstats@Base 1:9.11.3+dfsg
+ isc_stats_attach@Base 1:9.11.3+dfsg
+ isc_stats_create@Base 1:9.11.3+dfsg
+ isc_stats_decrement@Base 1:9.11.3+dfsg
+ isc_stats_detach@Base 1:9.11.3+dfsg
+ isc_stats_dump@Base 1:9.11.3+dfsg
+ isc_stats_increment@Base 1:9.11.3+dfsg
+ isc_stats_ncounters@Base 1:9.11.3+dfsg
+ isc_stats_set@Base 1:9.11.3+dfsg
+ isc_stdio_close@Base 1:9.11.3+dfsg
+ isc_stdio_flush@Base 1:9.11.3+dfsg
+ isc_stdio_open@Base 1:9.11.3+dfsg
+ isc_stdio_read@Base 1:9.11.3+dfsg
+ isc_stdio_seek@Base 1:9.11.3+dfsg
+ isc_stdio_sync@Base 1:9.11.3+dfsg
+ isc_stdio_tell@Base 1:9.11.3+dfsg
+ isc_stdio_write@Base 1:9.11.3+dfsg
+ isc_stdtime_get@Base 1:9.11.3+dfsg
+ isc_string_append@Base 1:9.11.3+dfsg
+ isc_string_append_truncate@Base 1:9.11.3+dfsg
+ isc_string_copy@Base 1:9.11.3+dfsg
+ isc_string_copy_truncate@Base 1:9.11.3+dfsg
+ isc_string_printf@Base 1:9.11.3+dfsg
+ isc_string_printf_truncate@Base 1:9.11.3+dfsg
+ isc_string_regiondup@Base 1:9.11.3+dfsg
+ isc_string_separate@Base 1:9.11.3+dfsg
+ isc_string_strcasestr@Base 1:9.11.3+dfsg
+ isc_string_strlcat@Base 1:9.11.3+dfsg
+ isc_string_strlcpy@Base 1:9.11.3+dfsg
+ isc_string_touint64@Base 1:9.11.3+dfsg
+ isc_strtoul@Base 1:9.11.3+dfsg
+ isc_symtab_count@Base 1:9.11.3+dfsg
+ isc_symtab_create@Base 1:9.11.3+dfsg
+ isc_symtab_define@Base 1:9.11.3+dfsg
+ isc_symtab_destroy@Base 1:9.11.3+dfsg
+ isc_symtab_lookup@Base 1:9.11.3+dfsg
+ isc_symtab_undefine@Base 1:9.11.3+dfsg
+ isc_syslog_facilityfromstring@Base 1:9.11.3+dfsg
+ isc_task_attach@Base 1:9.11.3+dfsg
+ isc_task_beginexclusive@Base 1:9.11.3+dfsg
+ isc_task_create@Base 1:9.11.3+dfsg
+ isc_task_destroy@Base 1:9.11.3+dfsg
+ isc_task_detach@Base 1:9.11.3+dfsg
+ isc_task_endexclusive@Base 1:9.11.3+dfsg
+ isc_task_exiting@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttime@Base 1:9.11.3+dfsg
+ isc_task_getcurrenttimex@Base 1:9.11.3+dfsg
+ isc_task_onshutdown@Base 1:9.11.3+dfsg
+ isc_task_privilege@Base 1:9.11.3+dfsg
+ isc_task_purge@Base 1:9.11.3+dfsg
+ isc_task_purgeevent@Base 1:9.11.3+dfsg
+ isc_task_purgerange@Base 1:9.11.3+dfsg
+ isc_task_register@Base 1:9.11.3+dfsg
+ isc_task_send@Base 1:9.11.3+dfsg
+ isc_task_sendanddetach@Base 1:9.11.3+dfsg
+ isc_task_setname@Base 1:9.11.3+dfsg
+ isc_task_setprivilege@Base 1:9.11.3+dfsg
+ isc_task_shutdown@Base 1:9.11.3+dfsg
+ isc_task_unsend@Base 1:9.11.3+dfsg
+ isc_taskmgr_create@Base 1:9.11.3+dfsg
+ isc_taskmgr_createinctx@Base 1:9.11.3+dfsg
+ isc_taskmgr_destroy@Base 1:9.11.3+dfsg
+ isc_taskmgr_excltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_mode@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderjson@Base 1:9.11.3+dfsg
+ isc_taskmgr_renderxml@Base 1:9.11.3+dfsg
+ isc_taskmgr_setexcltask@Base 1:9.11.3+dfsg
+ isc_taskmgr_setmode@Base 1:9.11.3+dfsg
+ isc_taskpool_create@Base 1:9.11.3+dfsg
+ isc_taskpool_destroy@Base 1:9.11.3+dfsg
+ isc_taskpool_expand@Base 1:9.11.3+dfsg
+ isc_taskpool_gettask@Base 1:9.11.3+dfsg
+ isc_taskpool_setprivilege@Base 1:9.11.3+dfsg
+ isc_taskpool_size@Base 1:9.11.3+dfsg
+ isc_thread_create@Base 1:9.11.3+dfsg
+ isc_thread_setconcurrency@Base 1:9.11.3+dfsg
+ isc_thread_setname@Base 1:9.11.3+dfsg
+ isc_thread_yield@Base 1:9.11.3+dfsg
+ isc_time_add@Base 1:9.11.3+dfsg
+ isc_time_compare@Base 1:9.11.3+dfsg
+ isc_time_epoch@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601@Base 1:9.11.3+dfsg
+ isc_time_formatISO8601ms@Base 1:9.11.3+dfsg
+ isc_time_formathttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_formattimestamp@Base 1:9.11.3+dfsg
+ isc_time_isepoch@Base 1:9.11.3+dfsg
+ isc_time_microdiff@Base 1:9.11.3+dfsg
+ isc_time_nanoseconds@Base 1:9.11.3+dfsg
+ isc_time_now@Base 1:9.11.3+dfsg
+ isc_time_nowplusinterval@Base 1:9.11.3+dfsg
+ isc_time_parsehttptimestamp@Base 1:9.11.3+dfsg
+ isc_time_seconds@Base 1:9.11.3+dfsg
+ isc_time_secondsastimet@Base 1:9.11.3+dfsg
+ isc_time_set@Base 1:9.11.3+dfsg
+ isc_time_settoepoch@Base 1:9.11.3+dfsg
+ isc_time_subtract@Base 1:9.11.3+dfsg
+ isc_timer_attach@Base 1:9.11.3+dfsg
+ isc_timer_create@Base 1:9.11.3+dfsg
+ isc_timer_detach@Base 1:9.11.3+dfsg
+ isc_timer_gettype@Base 1:9.11.3+dfsg
+ isc_timer_register@Base 1:9.11.3+dfsg
+ isc_timer_reset@Base 1:9.11.3+dfsg
+ isc_timer_touch@Base 1:9.11.3+dfsg
+ isc_timermgr_create@Base 1:9.11.3+dfsg
+ isc_timermgr_createinctx@Base 1:9.11.3+dfsg
+ isc_timermgr_destroy@Base 1:9.11.3+dfsg
+ isc_timermgr_poke@Base 1:9.11.3+dfsg
+ isc_tm_strptime@Base 1:9.11.3+dfsg
+ isc_tm_timegm@Base 1:9.11.3+dfsg
+ isc_version@Base 1:9.11.3+dfsg
+ pk11_attribute_bytype@Base 1:9.11.3+dfsg
+ pk11_attribute_first@Base 1:9.11.3+dfsg
+ pk11_attribute_next@Base 1:9.11.3+dfsg
+ pk11_dump_tokens@Base 1:9.11.3+dfsg
+ pk11_error_fatalcheck@Base 1:9.11.3+dfsg
+ pk11_finalize@Base 1:9.11.3+dfsg
+ pk11_get_best_token@Base 1:9.11.3+dfsg
+ pk11_get_lib_name@Base 1:9.11.3+dfsg
+ pk11_get_load_error_message@Base 1:9.11.3+dfsg
+ pk11_get_session@Base 1:9.11.3+dfsg
+ pk11_initialize@Base 1:9.11.3+dfsg
+ pk11_initmsgcat@Base 1:9.11.3+dfsg
+ pk11_mem_get@Base 1:9.11.3+dfsg
+ pk11_mem_put@Base 1:9.11.3+dfsg
+ pk11_msgcat@Base 1:9.11.3+dfsg
+ pk11_numbits@Base 1:9.11.3+dfsg
+ pk11_parse_uri@Base 1:9.11.3+dfsg
+ pk11_rand_bytes@Base 1:9.11.3+dfsg
+ pk11_rand_seed_fromfile@Base 1:9.11.3+dfsg
+ pk11_result_register@Base 1:9.11.3+dfsg
+ pk11_result_totext@Base 1:9.11.3+dfsg
+ pk11_return_session@Base 1:9.11.3+dfsg
+ pk11_set_lib_name@Base 1:9.11.3+dfsg
+ pk11_verbose_init@Base 1:9.11.3+dfsg
+ pkcs_C_CloseSession@Base 1:9.11.3+dfsg
+ pkcs_C_CreateObject@Base 1:9.11.3+dfsg
+ pkcs_C_DeriveKey@Base 1:9.11.3+dfsg
+ pkcs_C_DestroyObject@Base 1:9.11.3+dfsg
+ pkcs_C_DigestFinal@Base 1:9.11.3+dfsg
+ pkcs_C_DigestInit@Base 1:9.11.3+dfsg
+ pkcs_C_DigestUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Encrypt@Base 1:9.11.3+dfsg
+ pkcs_C_EncryptInit@Base 1:9.11.3+dfsg
+ pkcs_C_Finalize@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjects@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsFinal@Base 1:9.11.3+dfsg
+ pkcs_C_FindObjectsInit@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKey@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateKeyPair@Base 1:9.11.3+dfsg
+ pkcs_C_GenerateRandom@Base 1:9.11.3+dfsg
+ pkcs_C_GetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_GetMechanismInfo@Base 1:9.11.3+dfsg
+ pkcs_C_GetSlotList@Base 1:9.11.3+dfsg
+ pkcs_C_GetTokenInfo@Base 1:9.11.3+dfsg
+ pkcs_C_Initialize@Base 1:9.11.3+dfsg
+ pkcs_C_Login@Base 1:9.11.3+dfsg
+ pkcs_C_Logout@Base 1:9.11.3+dfsg
+ pkcs_C_OpenSession@Base 1:9.11.3+dfsg
+ pkcs_C_SeedRandom@Base 1:9.11.3+dfsg
+ pkcs_C_SetAttributeValue@Base 1:9.11.3+dfsg
+ pkcs_C_Sign@Base 1:9.11.3+dfsg
+ pkcs_C_SignFinal@Base 1:9.11.3+dfsg
+ pkcs_C_SignInit@Base 1:9.11.3+dfsg
+ pkcs_C_SignUpdate@Base 1:9.11.3+dfsg
+ pkcs_C_Verify@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyFinal@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyInit@Base 1:9.11.3+dfsg
+ pkcs_C_VerifyUpdate@Base 1:9.11.3+dfsg
diff --git a/debian/libisccc-export161-udeb.install b/debian/libisccc-export161-udeb.install
new file mode 100755
index 0000000..f75e75f
--- /dev/null
+++ b/debian/libisccc-export161-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccc-export161.install b/debian/libisccc-export161.install
new file mode 100755
index 0000000..f75e75f
--- /dev/null
+++ b/debian/libisccc-export161.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccc-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccc161.install b/debian/libisccc161.install
new file mode 100644
index 0000000..25c2515
--- /dev/null
+++ b/debian/libisccc161.install
@@ -0,0 +1 @@
+usr/lib/*/libisccc.so.*
diff --git a/debian/libisccc161.symbols b/debian/libisccc161.symbols
new file mode 100644
index 0000000..b119c27
--- /dev/null
+++ b/debian/libisccc161.symbols
@@ -0,0 +1,66 @@
+libisccc.so.161 libisccc161 #MINVER#
+ isccc_alist_alistp@Base 1:9.10.6+dfsg
+ isccc_alist_assq@Base 1:9.10.6+dfsg
+ isccc_alist_create@Base 1:9.10.6+dfsg
+ isccc_alist_define@Base 1:9.10.6+dfsg
+ isccc_alist_definebinary@Base 1:9.10.6+dfsg
+ isccc_alist_definestring@Base 1:9.10.6+dfsg
+ isccc_alist_delete@Base 1:9.10.6+dfsg
+ isccc_alist_emptyp@Base 1:9.10.6+dfsg
+ isccc_alist_first@Base 1:9.10.6+dfsg
+ isccc_alist_lookup@Base 1:9.10.6+dfsg
+ isccc_alist_lookupbinary@Base 1:9.10.6+dfsg
+ isccc_alist_lookupstring@Base 1:9.10.6+dfsg
+ isccc_alist_prettyprint@Base 1:9.10.6+dfsg
+ isccc_base64_decode@Base 1:9.10.6+dfsg
+ isccc_base64_encode@Base 1:9.10.6+dfsg
+ isccc_cc_checkdup@Base 1:9.10.6+dfsg
+ isccc_cc_cleansymtab@Base 1:9.10.6+dfsg
+ isccc_cc_createack@Base 1:9.10.6+dfsg
+ isccc_cc_createmessage@Base 1:9.10.6+dfsg
+ isccc_cc_createresponse@Base 1:9.10.6+dfsg
+ isccc_cc_createsymtab@Base 1:9.10.6+dfsg
+ isccc_cc_definestring@Base 1:9.10.6+dfsg
+ isccc_cc_defineuint32@Base 1:9.10.6+dfsg
+ isccc_cc_fromwire@Base 1:9.10.6+dfsg
+ isccc_cc_isack@Base 1:9.10.6+dfsg
+ isccc_cc_isreply@Base 1:9.10.6+dfsg
+ isccc_cc_lookupstring@Base 1:9.10.6+dfsg
+ isccc_cc_lookupuint32@Base 1:9.10.6+dfsg
+ isccc_cc_towire@Base 1:9.10.6+dfsg
+ isccc_ccmsg_cancelread@Base 1:9.10.6+dfsg
+ isccc_ccmsg_init@Base 1:9.10.6+dfsg
+ isccc_ccmsg_invalidate@Base 1:9.10.6+dfsg
+ isccc_ccmsg_readmessage@Base 1:9.10.6+dfsg
+ isccc_ccmsg_setmaxsize@Base 1:9.10.6+dfsg
+ isccc_lib_initmsgcat@Base 1:9.10.6+dfsg
+ isccc_libage@Base 1:9.10.6+dfsg
+ isccc_libinterface@Base 1:9.10.6+dfsg
+ isccc_librevision@Base 1:9.10.6+dfsg
+ isccc_msgcat@Base 1:9.10.6+dfsg
+ isccc_result_register@Base 1:9.10.6+dfsg
+ isccc_result_totext@Base 1:9.10.6+dfsg
+ isccc_sexpr_addtolist@Base 1:9.10.6+dfsg
+ isccc_sexpr_binaryp@Base 1:9.10.6+dfsg
+ isccc_sexpr_car@Base 1:9.10.6+dfsg
+ isccc_sexpr_cdr@Base 1:9.10.6+dfsg
+ isccc_sexpr_cons@Base 1:9.10.6+dfsg
+ isccc_sexpr_emptyp@Base 1:9.10.6+dfsg
+ isccc_sexpr_free@Base 1:9.10.6+dfsg
+ isccc_sexpr_frombinary@Base 1:9.10.6+dfsg
+ isccc_sexpr_fromstring@Base 1:9.10.6+dfsg
+ isccc_sexpr_listp@Base 1:9.10.6+dfsg
+ isccc_sexpr_print@Base 1:9.10.6+dfsg
+ isccc_sexpr_setcar@Base 1:9.10.6+dfsg
+ isccc_sexpr_setcdr@Base 1:9.10.6+dfsg
+ isccc_sexpr_stringp@Base 1:9.10.6+dfsg
+ isccc_sexpr_tconst@Base 1:9.10.6+dfsg
+ isccc_sexpr_tobinary@Base 1:9.10.6+dfsg
+ isccc_sexpr_tostring@Base 1:9.10.6+dfsg
+ isccc_symtab_create@Base 1:9.10.6+dfsg
+ isccc_symtab_define@Base 1:9.10.6+dfsg
+ isccc_symtab_destroy@Base 1:9.10.6+dfsg
+ isccc_symtab_foreach@Base 1:9.10.6+dfsg
+ isccc_symtab_lookup@Base 1:9.10.6+dfsg
+ isccc_symtab_undefine@Base 1:9.10.6+dfsg
+ isccc_version@Base 1:9.10.6+dfsg
diff --git a/debian/libisccfg-export163-udeb.install b/debian/libisccfg-export163-udeb.install
new file mode 100755
index 0000000..dc18cc6
--- /dev/null
+++ b/debian/libisccfg-export163-udeb.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccfg-export163.install b/debian/libisccfg-export163.install
new file mode 100755
index 0000000..dc18cc6
--- /dev/null
+++ b/debian/libisccfg-export163.install
@@ -0,0 +1,2 @@
+#! /usr/bin/dh-exec
+../tmp-udeb/lib/*/libisccfg-export.so.* lib/${DEB_HOST_MULTIARCH}
diff --git a/debian/libisccfg163.install b/debian/libisccfg163.install
new file mode 100644
index 0000000..7127996
--- /dev/null
+++ b/debian/libisccfg163.install
@@ -0,0 +1 @@
+usr/lib/*/libisccfg.so.*
diff --git a/debian/libisccfg163.symbols b/debian/libisccfg163.symbols
new file mode 100644
index 0000000..dbc7e0e
--- /dev/null
+++ b/debian/libisccfg163.symbols
@@ -0,0 +1,173 @@
+libisccfg.so.163 libisccfg163 #MINVER#
+ cfg_acl_fromconfig2@Base 1:9.10.6+dfsg
+ cfg_acl_fromconfig@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_attach@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_create@Base 1:9.10.6+dfsg
+ cfg_aclconfctx_detach@Base 1:9.10.6+dfsg
+ cfg_categories@Base 1:9.10.6+dfsg
+ cfg_clause_validforzone@Base 1:9.11.3+dfsg
+ cfg_create_list@Base 1:9.10.6+dfsg
+ cfg_create_obj@Base 1:9.10.6+dfsg
+ cfg_create_tuple@Base 1:9.10.6+dfsg
+ cfg_doc_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_doc_enum@Base 1:9.10.6+dfsg
+ cfg_doc_map@Base 1:9.10.6+dfsg
+ cfg_doc_mapbody@Base 1:9.10.6+dfsg
+ cfg_doc_obj@Base 1:9.10.6+dfsg
+ cfg_doc_sockaddr@Base 1:9.10.6+dfsg
+ cfg_doc_terminal@Base 1:9.10.6+dfsg
+ cfg_doc_tuple@Base 1:9.10.6+dfsg
+ cfg_doc_void@Base 1:9.10.6+dfsg
+ cfg_gettoken@Base 1:9.10.6+dfsg
+ cfg_is_enum@Base 1:9.10.6+dfsg
+ cfg_libage@Base 1:9.10.6+dfsg
+ cfg_libinterface@Base 1:9.10.6+dfsg
+ cfg_librevision@Base 1:9.10.6+dfsg
+ cfg_list_first@Base 1:9.10.6+dfsg
+ cfg_list_length@Base 1:9.10.6+dfsg
+ cfg_list_next@Base 1:9.10.6+dfsg
+ cfg_listelt_value@Base 1:9.10.6+dfsg
+ cfg_log_init@Base 1:9.10.6+dfsg
+ cfg_lookingat_netaddr@Base 1:9.10.6+dfsg
+ cfg_map_count@Base 1:9.10.6+dfsg
+ cfg_map_firstclause@Base 1:9.11.3+dfsg
+ cfg_map_get@Base 1:9.10.6+dfsg
+ cfg_map_getname@Base 1:9.10.6+dfsg
+ cfg_map_nextclause@Base 1:9.11.3+dfsg
+ cfg_modules@Base 1:9.10.6+dfsg
+ cfg_obj_asboolean@Base 1:9.10.6+dfsg
+ cfg_obj_asfixedpoint@Base 1:9.10.6+dfsg
+ cfg_obj_asnetprefix@Base 1:9.10.6+dfsg
+ cfg_obj_aspercentage@Base 1:9.11.2+dfsg
+ cfg_obj_assockaddr@Base 1:9.10.6+dfsg
+ cfg_obj_asstring@Base 1:9.10.6+dfsg
+ cfg_obj_asuint32@Base 1:9.10.6+dfsg
+ cfg_obj_asuint64@Base 1:9.10.6+dfsg
+ cfg_obj_attach@Base 1:9.10.6+dfsg
+ cfg_obj_destroy@Base 1:9.10.6+dfsg
+ cfg_obj_file@Base 1:9.10.6+dfsg
+ cfg_obj_getdscp@Base 1:9.10.6+dfsg
+ cfg_obj_isboolean@Base 1:9.10.6+dfsg
+ cfg_obj_isfixedpoint@Base 1:9.11.2+dfsg
+ cfg_obj_islist@Base 1:9.10.6+dfsg
+ cfg_obj_ismap@Base 1:9.10.6+dfsg
+ cfg_obj_isnetprefix@Base 1:9.10.6+dfsg
+ cfg_obj_ispercentage@Base 1:9.11.2+dfsg
+ cfg_obj_issockaddr@Base 1:9.10.6+dfsg
+ cfg_obj_isstring@Base 1:9.10.6+dfsg
+ cfg_obj_istuple@Base 1:9.10.6+dfsg
+ cfg_obj_istype@Base 1:9.10.6+dfsg
+ cfg_obj_isuint32@Base 1:9.10.6+dfsg
+ cfg_obj_isuint64@Base 1:9.10.6+dfsg
+ cfg_obj_isvoid@Base 1:9.10.6+dfsg
+ cfg_obj_line@Base 1:9.10.6+dfsg
+ cfg_obj_log@Base 1:9.10.6+dfsg
+ cfg_parse_addressed_map@Base 1:9.10.6+dfsg
+ cfg_parse_astring@Base 1:9.10.6+dfsg
+ cfg_parse_boolean@Base 1:9.10.6+dfsg
+ cfg_parse_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_parse_buffer2@Base 1:9.11.2+dfsg
+ cfg_parse_buffer3@Base 1:9.11.2+dfsg
+ cfg_parse_buffer4@Base 1:9.11.4+dfsg
+ cfg_parse_buffer@Base 1:9.10.6+dfsg
+ cfg_parse_dscp@Base 1:9.10.6+dfsg
+ cfg_parse_enum@Base 1:9.10.6+dfsg
+ cfg_parse_file@Base 1:9.10.6+dfsg
+ cfg_parse_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_parse_listelt@Base 1:9.10.6+dfsg
+ cfg_parse_map@Base 1:9.10.6+dfsg
+ cfg_parse_mapbody@Base 1:9.10.6+dfsg
+ cfg_parse_named_map@Base 1:9.10.6+dfsg
+ cfg_parse_netprefix@Base 1:9.10.6+dfsg
+ cfg_parse_netprefix_map@Base 1:9.10.6+dfsg
+ cfg_parse_obj@Base 1:9.10.6+dfsg
+ cfg_parse_percentage@Base 1:9.11.2+dfsg
+ cfg_parse_qstring@Base 1:9.10.6+dfsg
+ cfg_parse_rawaddr@Base 1:9.10.6+dfsg
+ cfg_parse_rawport@Base 1:9.10.6+dfsg
+ cfg_parse_sockaddr@Base 1:9.10.6+dfsg
+ cfg_parse_spacelist@Base 1:9.10.6+dfsg
+ cfg_parse_special@Base 1:9.10.6+dfsg
+ cfg_parse_sstring@Base 1:9.10.6+dfsg
+ cfg_parse_tuple@Base 1:9.10.6+dfsg
+ cfg_parse_uint32@Base 1:9.10.6+dfsg
+ cfg_parse_void@Base 1:9.10.6+dfsg
+ cfg_parser_attach@Base 1:9.10.6+dfsg
+ cfg_parser_create@Base 1:9.10.6+dfsg
+ cfg_parser_destroy@Base 1:9.10.6+dfsg
+ cfg_parser_error@Base 1:9.10.6+dfsg
+ cfg_parser_mapadd@Base 1:9.11.2+dfsg
+ cfg_parser_reset@Base 1:9.11.2+dfsg
+ cfg_parser_setcallback@Base 1:9.10.6+dfsg
+ cfg_parser_warning@Base 1:9.10.6+dfsg
+ cfg_peektoken@Base 1:9.10.6+dfsg
+ cfg_print@Base 1:9.10.6+dfsg
+ cfg_print_boolean@Base 1:9.10.6+dfsg
+ cfg_print_bracketed_list@Base 1:9.10.6+dfsg
+ cfg_print_chars@Base 1:9.10.6+dfsg
+ cfg_print_clauseflags@Base 1:9.11.3+dfsg
+ cfg_print_cstr@Base 1:9.10.6+dfsg
+ cfg_print_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_print_grammar@Base 1:9.10.6+dfsg
+ cfg_print_indent@Base 1:9.11.3+dfsg
+ cfg_print_map@Base 1:9.10.6+dfsg
+ cfg_print_mapbody@Base 1:9.10.6+dfsg
+ cfg_print_obj@Base 1:9.10.6+dfsg
+ cfg_print_percentage@Base 1:9.11.2+dfsg
+ cfg_print_rawaddr@Base 1:9.10.6+dfsg
+ cfg_print_rawuint@Base 1:9.10.6+dfsg
+ cfg_print_sockaddr@Base 1:9.10.6+dfsg
+ cfg_print_spacelist@Base 1:9.10.6+dfsg
+ cfg_print_tuple@Base 1:9.10.6+dfsg
+ cfg_print_uint32@Base 1:9.10.6+dfsg
+ cfg_print_uint64@Base 1:9.10.6+dfsg
+ cfg_print_ustring@Base 1:9.10.6+dfsg
+ cfg_print_void@Base 1:9.10.6+dfsg
+ cfg_print_zonegrammar@Base 1:9.11.3+dfsg
+ cfg_printx@Base 1:9.10.6+dfsg
+ cfg_rep_boolean@Base 1:9.10.6+dfsg
+ cfg_rep_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_rep_list@Base 1:9.10.6+dfsg
+ cfg_rep_map@Base 1:9.10.6+dfsg
+ cfg_rep_netprefix@Base 1:9.10.6+dfsg
+ cfg_rep_percentage@Base 1:9.11.2+dfsg
+ cfg_rep_sockaddr@Base 1:9.10.6+dfsg
+ cfg_rep_string@Base 1:9.10.6+dfsg
+ cfg_rep_tuple@Base 1:9.10.6+dfsg
+ cfg_rep_uint32@Base 1:9.10.6+dfsg
+ cfg_rep_uint64@Base 1:9.10.6+dfsg
+ cfg_rep_void@Base 1:9.10.6+dfsg
+ cfg_tuple_get@Base 1:9.10.6+dfsg
+ cfg_type_addzoneconf@Base 1:9.10.6+dfsg
+ cfg_type_astring@Base 1:9.10.6+dfsg
+ cfg_type_bindkeys@Base 1:9.10.6+dfsg
+ cfg_type_boolean@Base 1:9.10.6+dfsg
+ cfg_type_bracketed_text@Base 1:9.11.2+dfsg
+ cfg_type_dnsconf@Base 1:9.10.6+dfsg
+ cfg_type_ecsprefix@Base 1:9.11.2+dfsg
+ cfg_type_fixedpoint@Base 1:9.10.6+dfsg
+ cfg_type_keyref@Base 1:9.10.6+dfsg
+ cfg_type_namedconf@Base 1:9.10.6+dfsg
+ cfg_type_netaddr4@Base 1:9.10.6+dfsg
+ cfg_type_netaddr4wild@Base 1:9.10.6+dfsg
+ cfg_type_netaddr6@Base 1:9.10.6+dfsg
+ cfg_type_netaddr6wild@Base 1:9.10.6+dfsg
+ cfg_type_netaddr@Base 1:9.10.6+dfsg
+ cfg_type_netprefix@Base 1:9.10.6+dfsg
+ cfg_type_percentage@Base 1:9.11.2+dfsg
+ cfg_type_qstring@Base 1:9.10.6+dfsg
+ cfg_type_rndcconf@Base 1:9.10.6+dfsg
+ cfg_type_rndckey@Base 1:9.10.6+dfsg
+ cfg_type_sessionkey@Base 1:9.10.6+dfsg
+ cfg_type_sockaddr@Base 1:9.10.6+dfsg
+ cfg_type_sockaddrdscp@Base 1:9.10.6+dfsg
+ cfg_type_sstring@Base 1:9.10.6+dfsg
+ cfg_type_token@Base 1:9.10.6+dfsg
+ cfg_type_uint32@Base 1:9.10.6+dfsg
+ cfg_type_uint64@Base 1:9.10.6+dfsg
+ cfg_type_unsupported@Base 1:9.10.6+dfsg
+ cfg_type_ustring@Base 1:9.10.6+dfsg
+ cfg_type_void@Base 1:9.10.6+dfsg
+ cfg_type_zoneopts@Base 1:9.11.3+dfsg
+ cfg_ungettoken@Base 1:9.10.6+dfsg
+ cfg_version@Base 1:9.10.6+dfsg
diff --git a/debian/liblwres161.install b/debian/liblwres161.install
new file mode 100644
index 0000000..791183e
--- /dev/null
+++ b/debian/liblwres161.install
@@ -0,0 +1 @@
+usr/lib/*/liblwres.so.*
diff --git a/debian/liblwres161.symbols b/debian/liblwres161.symbols
new file mode 100644
index 0000000..553ad4e
--- /dev/null
+++ b/debian/liblwres161.symbols
@@ -0,0 +1,101 @@
+liblwres.so.161 liblwres161 #MINVER#
+ lwres__print_snprintf@Base 1:9.10.6+dfsg
+ lwres__print_sprintf@Base 1:9.10.6+dfsg
+ lwres__print_vsnprintf@Base 1:9.10.6+dfsg
+ lwres_addr_parse@Base 1:9.10.6+dfsg
+ lwres_buffer_add@Base 1:9.10.6+dfsg
+ lwres_buffer_back@Base 1:9.10.6+dfsg
+ lwres_buffer_clear@Base 1:9.10.6+dfsg
+ lwres_buffer_first@Base 1:9.10.6+dfsg
+ lwres_buffer_forward@Base 1:9.10.6+dfsg
+ lwres_buffer_getmem@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint16@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint32@Base 1:9.10.6+dfsg
+ lwres_buffer_getuint8@Base 1:9.10.6+dfsg
+ lwres_buffer_init@Base 1:9.10.6+dfsg
+ lwres_buffer_invalidate@Base 1:9.10.6+dfsg
+ lwres_buffer_putmem@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint16@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint32@Base 1:9.10.6+dfsg
+ lwres_buffer_putuint8@Base 1:9.10.6+dfsg
+ lwres_buffer_subtract@Base 1:9.10.6+dfsg
+ lwres_conf_clear@Base 1:9.10.6+dfsg
+ lwres_conf_get@Base 1:9.10.6+dfsg
+ lwres_conf_init@Base 1:9.10.6+dfsg
+ lwres_conf_parse@Base 1:9.10.6+dfsg
+ lwres_conf_print@Base 1:9.10.6+dfsg
+ lwres_context_allocmem@Base 1:9.10.6+dfsg
+ lwres_context_create@Base 1:9.10.6+dfsg
+ lwres_context_destroy@Base 1:9.10.6+dfsg
+ lwres_context_freemem@Base 1:9.10.6+dfsg
+ lwres_context_getsocket@Base 1:9.10.6+dfsg
+ lwres_context_initserial@Base 1:9.10.6+dfsg
+ lwres_context_nextserial@Base 1:9.10.6+dfsg
+ lwres_context_recv@Base 1:9.10.6+dfsg
+ lwres_context_send@Base 1:9.10.6+dfsg
+ lwres_context_sendrecv@Base 1:9.10.6+dfsg
+ lwres_data_parse@Base 1:9.10.6+dfsg
+ lwres_endhostent@Base 1:9.10.6+dfsg
+ lwres_endhostent_r@Base 1:9.10.6+dfsg
+ lwres_freeaddrinfo@Base 1:9.10.6+dfsg
+ lwres_freehostent@Base 1:9.10.6+dfsg
+ lwres_freerrset@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_free@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_parse@Base 1:9.10.6+dfsg
+ lwres_gabnrequest_render@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_free@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_parse@Base 1:9.10.6+dfsg
+ lwres_gabnresponse_render@Base 1:9.10.6+dfsg
+ lwres_gai_strerror@Base 1:9.10.6+dfsg
+ lwres_getaddrinfo@Base 1:9.10.6+dfsg
+ lwres_getaddrsbyname@Base 1:9.10.6+dfsg
+ lwres_gethostbyaddr@Base 1:9.10.6+dfsg
+ lwres_gethostbyaddr_r@Base 1:9.10.6+dfsg
+ lwres_gethostbyname2@Base 1:9.10.6+dfsg
+ lwres_gethostbyname@Base 1:9.10.6+dfsg
+ lwres_gethostbyname_r@Base 1:9.10.6+dfsg
+ lwres_gethostent@Base 1:9.10.6+dfsg
+ lwres_gethostent_r@Base 1:9.10.6+dfsg
+ lwres_getipnodebyaddr@Base 1:9.10.6+dfsg
+ lwres_getipnodebyname@Base 1:9.10.6+dfsg
+ lwres_getnamebyaddr@Base 1:9.10.6+dfsg
+ lwres_getnameinfo@Base 1:9.10.6+dfsg
+ lwres_getrdatabyname@Base 1:9.10.6+dfsg
+ lwres_getrrsetbyname@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_free@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_parse@Base 1:9.10.6+dfsg
+ lwres_gnbarequest_render@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_free@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_parse@Base 1:9.10.6+dfsg
+ lwres_gnbaresponse_render@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_free@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_parse@Base 1:9.10.6+dfsg
+ lwres_grbnrequest_render@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_free@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_parse@Base 1:9.10.6+dfsg
+ lwres_grbnresponse_render@Base 1:9.10.6+dfsg
+ lwres_h_errno@Base 1:9.10.6+dfsg
+ lwres_herror@Base 1:9.10.6+dfsg
+ lwres_hstrerror@Base 1:9.10.6+dfsg
+ lwres_libage@Base 1:9.10.6+dfsg
+ lwres_libinterface@Base 1:9.10.6+dfsg
+ lwres_librevision@Base 1:9.10.6+dfsg
+ lwres_lwpacket_parseheader@Base 1:9.10.6+dfsg
+ lwres_lwpacket_renderheader@Base 1:9.10.6+dfsg
+ lwres_net_aton@Base 1:9.10.6+dfsg
+ lwres_net_ntop@Base 1:9.10.6+dfsg
+ lwres_net_pton@Base 1:9.10.6+dfsg
+ lwres_nooprequest_free@Base 1:9.10.6+dfsg
+ lwres_nooprequest_parse@Base 1:9.10.6+dfsg
+ lwres_nooprequest_render@Base 1:9.10.6+dfsg
+ lwres_noopresponse_free@Base 1:9.10.6+dfsg
+ lwres_noopresponse_parse@Base 1:9.10.6+dfsg
+ lwres_noopresponse_render@Base 1:9.10.6+dfsg
+ lwres_resolv_conf@Base 1:9.10.6+dfsg
+ lwres_sethostent@Base 1:9.10.6+dfsg
+ lwres_sethostent_r@Base 1:9.10.6+dfsg
+ lwres_string_parse@Base 1:9.10.6+dfsg
+ lwres_strlcpy@Base 1:9.10.6+dfsg
+ lwres_strtoul@Base 1:9.10.6+dfsg
+ lwres_udp_port@Base 1:9.10.6+dfsg
+ lwres_version@Base 1:9.10.6+dfsg
diff --git a/debian/nslookup.1 b/debian/nslookup.1
new file mode 100644
index 0000000..1c68dbe
--- /dev/null
+++ b/debian/nslookup.1
@@ -0,0 +1,536 @@
+.\"
+.\" ++Copyright++ 1985, 1989
+.\" -
+.\" Copyright (c) 1985, 1989
+.\" The Regents of the University of California. All rights reserved.
+.\"
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\" notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\" notice, this list of conditions and the following disclaimer in the
+.\" documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\" must display the following acknowledgement:
+.\" This product includes software developed by the University of
+.\" California, Berkeley and its contributors.
+.\" 4. Neither the name of the University nor the names of its contributors
+.\" may be used to endorse or promote products derived from this software
+.\" without specific prior written permission.
+.\"
+.\" THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+.\" ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+.\" SUCH DAMAGE.
+.\" -
+.\" Portions Copyright (c) 1993 by Digital Equipment Corporation.
+.\"
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies, and that
+.\" the name of Digital Equipment Corporation not be used in advertising or
+.\" publicity pertaining to distribution of the document or software without
+.\" specific, written prior permission.
+.\"
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND DIGITAL EQUIPMENT CORP. DISCLAIMS ALL
+.\" WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES
+.\" OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL DIGITAL EQUIPMENT
+.\" CORPORATION BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
+.\" DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
+.\" PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
+.\" ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
+.\" SOFTWARE.
+.\" -
+.\" --Copyright--
+.\"
+.\" @(#)nslookup.8 5.3 (Berkeley) 6/24/90
+.\"
+.Dd June 24, 1990
+.Dt NSLOOKUP 1
+.Os BSD 4
+.Sh NAME
+.Nm nslookup
+.Nd query Internet name servers interactively
+.Sh SYNOPSIS
+.Nm nslookup
+.Op Fl option Ar ...
+.Op Ar host-to-find | Fl Op Ar server
+.Sh DESCRIPTION
+.Ic Nslookup
+is a program to query Internet domain name servers.
+.Ic Nslookup
+has two modes: interactive and non-interactive.
+Interactive mode allows the user to query name servers for
+information about various hosts and domains or to print a list of hosts
+in a domain.
+Non-interactive mode is used to print just the name and requested information
+for a host or domain.
+.Sh ARGUMENTS
+Interactive mode is entered in the following cases:
+.Bl -tag -width "a) "
+.It a)
+when no arguments are given (the default name server will be used),
+.It b)
+when the first argument is a hyphen (-) and the second argument
+is the host name or Internet address of a name server.
+.El
+.Pp
+Non-interactive mode is used when the name or Internet address
+of the host to be looked up
+is given as the first argument. The optional second argument specifies
+the host name or address of a name server.
+.Pp
+The options listed under the
+.Dq Li set
+command below can be specified in
+the
+.Pa .nslookuprc
+file in the user's home directory if they are listed
+one per line. Options can also be specified
+on the command line if they precede the arguments and are prefixed with
+a hyphen. For example, to change the default query type to host information,
+and the initial timeout to 10 seconds, type:
+.Bd -literal -offset indent
+ nslookup -query=hinfo -timeout=10
+.Ed
+.Sh INTERACTIVE COMMANDS
+Commands may be interrupted at any time by typing a control-C.
+To exit, type a control-D
+.Pq Dv EOF
+or type
+.Li exit .
+The command line length must be less than 256 characters.
+To treat a built-in command as a host name,
+precede it with an escape character
+.Pq .&\\ .
+.Sy N.B.: An unrecognized command will be interpreted as a host name.
+.Bl -tag -width "lserver"
+.It Ar host Op Ar server
+Look up information for
+.Ar host
+using the current default server or using
+.Ar server ,
+if specified.
+If
+.Ar host
+is an Internet address and the query type is
+.Dv A
+or
+.Dv PTR ,
+the name of the host is returned.
+If
+.Ar host
+is a name and does not have a trailing period, the default
+domain name is appended to the name. (This behavior depends on the state of the
+.Ic set
+options
+.Ic domain , srchlist , defname ,
+and
+.Ic search . )
+.Pp
+To look up a host not in the current domain, append a period to
+the name.
+.It Ic server Ar domain
+.It Ic lserver Ar domain
+Change the default server to
+.Ar domain ;
+.Ic lserver
+uses the initial server to look up information about
+.Ar domain ,
+while
+.Ic server
+uses the current default server.
+If an authoritative answer can't be found, the names of servers
+that might have the answer are returned.
+.It Ic root
+Changes the default server to the server for the root of the domain name space.
+Currently, the host
+.Li ns.internic.net
+is used.
+(This command is a synonym for
+.Dq Ic lserver ns.internic.net . )
+The name of the root server can be changed with the
+.Dq Ic set root
+command.
+.It Xo Ic finger Op Ar name
+.Op Ic > Ar filename
+.Xc
+.It Xo Ic finger Op Ar name
+.Op Ic >> Ar filename
+.Xc
+Connects with the finger server on the current host.
+The current host is defined when a previous lookup for a host
+was successful and returned address information (see the
+.Dq Ic set querytype=A
+command).
+The
+.Ar name
+is optional.
+.Ic >
+and
+.Ic >>
+can be used to redirect output in the usual manner.
+.It Xo Ic ls Op Ar option
+.Ar domain Op Ic > Ar filename
+.Xc
+.It Xo Ic ls Op Ar option
+.Ar domain Op Ic >> Ar filename
+.Xc
+List the information available for
+.Ar domain ,
+optionally creating or appending to
+.Ar filename .
+The default output contains host names and their Internet addresses.
+.Ar Option
+can be one of the following:
+.Bl -tag -width "-a "
+.It Fl t Ar querytype
+lists all records of the specified type (see
+.Ar querytype
+below).
+.It Fl a
+lists aliases of hosts in the domain;
+synonym for
+.Dq Fl t Dv CNAME .
+.It Fl d
+lists all records for the domain;
+synonym for
+.Dq Fl t Dv ANY .
+.It Fl h
+lists CPU and operating system information for the domain;
+synonym for
+.Dq Fl t Dv HINFO .
+.It Fl s
+lists well-known services of hosts in the domain;
+synonym for
+.Dq Fl t Dv WKS .
+.El
+.Pp
+When output is directed to a file, hash marks are printed for every
+50 records received from the server.
+.It Ic view Ar filename
+Sorts and lists the output of previous
+.Ic ls
+command(s) with
+.Xr more @CMD_EXT@ .
+.It Ic help
+.It Ic ?
+Prints a brief summary of commands.
+.It Ic exit
+Exits the program.
+.It Xo Ic set Ar keyword
+.Ns Op = Ns Ar value
+.Xc
+This command is used to change state information that affects the lookups.
+Valid keywords are:
+.Bl -tag -width "class=v"
+.It Ic all
+Prints the current values of the frequently-used options to
+.Ic set .
+Information about the current default server and host is also printed.
+.It Ic class= Ns Ar value
+Change the query class to one of:
+.Bl -tag -width "HESIOD "
+.It Dv IN
+the Internet class
+.It Dv CHAOS
+the Chaos class
+.It Dv HESIOD
+the MIT Athena Hesiod class
+.It Dv ANY
+wildcard (any of the above)
+.El
+.Pp
+The class specifies the protocol group of the information.
+.Pp
+(Default =
+.Dv IN ;
+abbreviation =
+.Ic cl )
+.It Xo Op Ic no
+.Ns Ic debug
+.Xc
+Turn debugging mode on. A lot more information is printed about the
+packet sent to the server and the resulting answer.
+.Pp
+(Default =
+.Ic nodebug ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic deb )
+.Xc
+.It Xo Op Ic no
+.Ns Ic d2
+.Xc
+Turn exhaustive debugging mode on.
+Essentially all fields of every packet are printed.
+.Pp
+(Default =
+.Ic nod2 )
+.It Ic domain= Ns Ar name
+Change the default domain name to
+.Ar name .
+The default domain name is appended to a lookup request depending on the
+state of the
+.Ic defname
+and
+.Ic search
+options.
+The domain search list contains the parents of the default domain if it has
+at least two components in its name.
+For example, if the default domain
+is CC.Berkeley.EDU, the search list is CC.Berkeley.EDU and Berkeley.EDU.
+Use the
+.Dq Ic set srchlist
+command to specify a different list.
+Use the
+.Dq Ic set all
+command to display the list.
+.Pp
+(Default = value from
+.Xr hostname @CMD_EXT@ ,
+.Pa /etc/resolv.conf ,
+or
+.Ev LOCALDOMAIN;
+abbreviation =
+.Ic do )
+.It Ic srchlist= Ns Ar name1/name2/...
+Change the default domain name to
+.Ar name1
+and the domain search list
+to
+.Ar name1 , name2 ,
+etc. A maximum of 6 names separated by slashes (/)
+can be specified.
+For example,
+.Bd -literal -offset indent
+set srchlist=lcs.MIT.EDU/ai.MIT.EDU/MIT.EDU
+.Ed
+.Pp
+sets the domain to lcs.MIT.EDU and the search list to the three names.
+This command overrides the
+default domain name and search list of the
+.Dq Ic set domain
+command.
+Use the
+.Dq Ic set all
+command to display the list.
+.Pp
+(Default = value based on
+.Xr hostname @CMD_EXT@ ,
+.Pa /etc/resolv.conf ,
+or
+.Ev LOCALDOMAIN;
+abbreviation =
+.Ic srchl )
+.It Xo Op Ic no
+.Ns Ic defname
+.Xc
+If set, append the default domain name to a single-component lookup request
+(i.e., one that does not contain a period).
+.Pp
+(Default =
+.Ic defname ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic defname )
+.Xc
+.It Xo Op Ic no
+.Ns Ic search
+.Xc
+If the lookup request contains at least one period but
+.Em doesn't
+end with a trailing period, append the domain names in the domain search list
+to the request until an answer is received.
+.Pp
+(Default =
+.Ic search ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic sea )
+.Xc
+.It Ic port= Ns Ar value
+Change the default TCP/UDP name server port to
+.Ar value .
+.Pp
+(Default = 53;
+abbreviation =
+.Ic \&po )
+.It Ic querytype= Ns Ar value
+.It Ic type= Ns Ar value
+Change the type of information query to one of:
+.Bl -tag -width "HINFO "
+.It Dv A
+the host's Internet address.
+.It Dv CNAME
+the canonical name for an alias.
+.It Dv HINFO
+the host CPU and operating system type.
+.It Dv MINFO
+the mailbox or mail list information.
+.It Dv MX
+the mail exchanger.
+.It Dv NS
+the name server for the named zone.
+.It Dv PTR
+the host name if the query is an Internet address;
+otherwise, the pointer to other information.
+.It Dv SOA
+the domain's
+.Dq start-of-authority
+information.
+.It Dv TXT
+the text information.
+.It Dv UINFO
+the user information.
+.It Dv WKS
+the supported well-known services.
+.El
+.Pp
+Other types
+.Pq Dv ANY, AXFR, MB, MD, MF, NULL
+are described in the RFC-1035 document.
+.Pp
+(Default =
+.Dv A ;
+abbreviations =
+.Ic q , ty )
+.It Xo Op Ic no
+.Ns Ic recurse
+.Xc
+Tell the name server to query other servers if it does not have the
+information.
+.Pp
+(Default =
+.Ic recurse ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic rec )
+.Xc
+.It Ic retry= Ns Ar number
+Set the number of retries to
+.Ar number .
+When a reply to a request is not received within a certain
+amount of time (changed with
+.Dq Ic set timeout ) ,
+the timeout period is doubled and the request is resent.
+The retry value controls how many times a request is resent before giving up.
+.Pp
+(Default = 4, abbreviation =
+.Ic ret )
+.It Ic root= Ns Ar host
+Change the name of the root server to
+.Ar host .
+This affects the
+.Dq Ic root
+command.
+.Pp
+(Default =
+.Ic ns.internic.net. ;
+abbreviation =
+.Ic ro )
+.It Ic timeout= Ns Ar number
+Change the initial timeout interval for waiting for a reply to
+.Ar number
+seconds. Each retry doubles the timeout period.
+.Pp
+(Default = 5 seconds; abbreviation =
+.Ic ti )
+.It Xo Op Ic no
+.Ns Ic vc
+.Xc
+Always use a virtual circuit when sending requests to the server.
+.Pp
+(Default =
+.Ic novc ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic v )
+.Xc
+.It Xo Op Ic no
+.Ns Ic ignoretc
+.Xc
+Ignore packet truncation errors.
+.Pp
+(Default =
+.Ic noignoretc ;
+abbreviation =
+.Xo Op Ic no
+.Ns Ic ig )
+.Xc
+.El
+.El
+.Sh DIAGNOSTICS
+If the lookup request was not successful, an error message is printed.
+Possible errors are:
+.Bl -tag -width "Timed"
+.It Li Timed out
+The server did not respond to a request after a certain amount of
+time (changed with
+.Dq Ic set timeout= Ns Ar value )
+and a certain number of retries (changed with
+.Dq Ic set retry= Ns Ar value ) .
+.It Li \&No response from server
+No name server is running on the server machine.
+.It Li \&No records
+The server does not have resource records of the current query type for the
+host, although the host name is valid.
+The query type is specified with the
+.Dq Ic set querytype
+command.
+.It Li Non-existent domain
+The host or domain name does not exist.
+.It Li Connection refused
+.It Li Network is unreachable
+The connection to the name or finger server could not be made
+at the current time.
+This error commonly occurs with
+.Ic ls
+and
+.Ic finger
+requests.
+.It Li Server failure
+The name server found an internal inconsistency in its database
+and could not return a valid answer.
+.It Li Refused
+The name server refused to service the request.
+.It Li Format error
+The name server found that the request packet was not in the proper format.
+It may indicate an error in
+.Nm nslookup .
+.El
+.Sh FILES
+.Bl -tag -width "/usr/share/misc/nslookup.helpXXX" -compact
+.It Pa /etc/resolv.conf
+initial domain name and name server addresses
+.It Pa $HOME/.nslookuprc
+user's initial options
+.It Pa /usr/share/misc/nslookup.help
+summary of commands
+.El
+.Sh ENVIRONMENT
+.Bl -tag -width "HOSTALIASESXXXX" -compact
+.It Ev HOSTALIASES
+file containing host aliases
+.It Ev LOCALDOMAIN
+overrides default domain
+.El
+.Sh SEE ALSO
+.Xr @INDOT@named @SYS_OPS_EXT@ ,
+.Xr resolver @LIB_NETWORK_EXT@ ,
+.Xr resolver @FORMAT_EXT@ ;
+RFC-1034,
+.Dq Domain Names - Concepts and Facilities ;
+RFC-1035,
+.Dq Domain Names - Implementation and Specification .
+.Sh AUTHOR
+Andrew Cherenson
diff --git a/debian/patches/0001-non-linux.diff b/debian/patches/0001-non-linux.diff
new file mode 100644
index 0000000..9a5c95f
--- /dev/null
+++ b/debian/patches/0001-non-linux.diff
@@ -0,0 +1,42 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:53 +0000
+Subject: _non-linux
+
+ FTBFS on kfreebsd, hurd
+
+ Addresses-Debian-Bug: 741285, 746540
+ Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ configure.in | 5 ++---
+ 1 file changed, 2 insertions(+), 3 deletions(-)
+
+diff --git a/configure.in b/configure.in
+index 9aa7e2d..bf028fe 100644
+--- a/configure.in
++++ b/configure.in
+@@ -462,7 +462,7 @@ case "$host" in
+ # as it breaks how the two halves (Basic and Advanced) of the IPv6
+ # Socket API were designed to be used but we have to live with it.
+ # Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API.
+- *-linux* | *-kfreebsd*-gnu*)
++ *-linux* | *-kfreebsd*-gnu* | *-gnu*)
+ STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE"
+ CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+ ;;
+@@ -1327,7 +1327,7 @@ then
+ # LinuxThreads requires some changes to the way we
+ # deal with signals.
+ #
+- *-linux*)
++ *-linux*|*-kfreebsd*-gnu)
+ AC_DEFINE(HAVE_LINUXTHREADS)
+ ;;
+ #
+@@ -2780,7 +2780,6 @@ case "$host" in
+ ;;
+ *)
+ AC_CHECK_LIB(socket, socket)
+- AC_CHECK_LIB(nsl, inet_addr)
+ ;;
+ esac
+
diff --git a/debian/patches/0002-multiarch.diff b/debian/patches/0002-multiarch.diff
new file mode 100644
index 0000000..3ba24f4
--- /dev/null
+++ b/debian/patches/0002-multiarch.diff
@@ -0,0 +1,29 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:53 +0000
+Subject: _multiarch
+
+---
+ isc-config.sh.in | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+diff --git a/isc-config.sh.in b/isc-config.sh.in
+index a8a0a89..1e7903e 100644
+--- a/isc-config.sh.in
++++ b/isc-config.sh.in
+@@ -13,7 +13,6 @@ prefix=@prefix@
+ exec_prefix=@exec_prefix@
+ exec_prefix_set=
+ includedir=@includedir@
+-libdir=@libdir@
+
+ usage()
+ {
+@@ -132,7 +131,7 @@ if test x"$echo_libs" = x"true"; then
+ if test x"${exec_prefix_set}" = x"true"; then
+ libs="-L${exec_prefix}/lib"
+ else
+- libs="-L${libdir}"
++ libs=
+ fi
+ if test x"$libirs" = x"true" ; then
+ libs="$libs -lirs"
diff --git a/debian/patches/0003-min-cache-ttl.diff b/debian/patches/0003-min-cache-ttl.diff
new file mode 100644
index 0000000..13453fd
--- /dev/null
+++ b/debian/patches/0003-min-cache-ttl.diff
@@ -0,0 +1,254 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _min-cache-ttl
+
+ Add min-cache-ttl and min-ncache-ttl keywords
+
+ Sometimes it is useful to set a 'floor' on the TTL for records
+ to be cached. Some sites like to use ridiculously low TTLs for
+ some reason, and that often is not compatible with slow links.
+
+ Signed-off-by: Michael Milligan <milli@acmeps.com>
+ Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ bin/named/config.c | 2 ++
+ bin/named/server.c | 12 ++++++++++++
+ bin/tests/named.conf | 2 ++
+ lib/dns/include/dns/ncache.h | 6 ++++--
+ lib/dns/include/dns/view.h | 2 ++
+ lib/dns/ncache.c | 18 ++++++++++++------
+ lib/dns/resolver.c | 22 ++++++++++++++++------
+ lib/isccfg/namedconf.c | 2 ++
+ 8 files changed, 52 insertions(+), 14 deletions(-)
+
+diff --git a/bin/named/config.c b/bin/named/config.c
+index 2732a8f..d22ee4b 100644
+--- a/bin/named/config.c
++++ b/bin/named/config.c
+@@ -182,6 +182,8 @@ options {\n\
+ max-recursion-depth 7;\n\
+ max-recursion-queries 75;\n\
+ message-compression yes;\n\
++ min-ncache-ttl 0; /* 0 hours */\n\
++ min-cache-ttl 0; /* 0 seconds */\n\
+ # min-roots <obsolete>;\n\
+ minimal-any false;\n\
+ minimal-responses false;\n\
+diff --git a/bin/named/server.c b/bin/named/server.c
+index 7f87ccf..149458e 100644
+--- a/bin/named/server.c
++++ b/bin/named/server.c
+@@ -3706,6 +3706,18 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
+ if (view->maxncachettl > 7 * 24 * 3600)
+ view->maxncachettl = 7 * 24 * 3600;
+
++ obj = NULL;
++ result = ns_config_get(maps, "min-cache-ttl", &obj);
++ INSIST(result == ISC_R_SUCCESS);
++ view->mincachettl = cfg_obj_asuint32(obj);
++
++ obj = NULL;
++ result = ns_config_get(maps, "min-ncache-ttl", &obj);
++ INSIST(result == ISC_R_SUCCESS);
++ view->minncachettl = cfg_obj_asuint32(obj);
++ if (view->minncachettl > 7 * 24 * 3600)
++ view->minncachettl = 7 * 24 * 3600;
++
+ /*
+ * Configure the view's cache.
+ *
+diff --git a/bin/tests/named.conf b/bin/tests/named.conf
+index 5673e98..34435b6 100644
+--- a/bin/tests/named.conf
++++ b/bin/tests/named.conf
+@@ -46,6 +46,7 @@ options {
+ memstatistics-file "named.memstats"; // _PATH_MEMSTATS
+
+ max-cache-ttl 999;
++ min-cache-ttl 666;
+ auth-nxdomain yes; // always set AA on NXDOMAIN.
+ // don't set this to 'no' unless
+ // you know what you're doing -- older
+@@ -148,6 +149,7 @@ options {
+ min-refresh-time 777;
+
+ max-ncache-ttl 333;
++ min-ncache-ttl 222;
+ min-roots 15;
+ serial-queries 34;
+
+diff --git a/lib/dns/include/dns/ncache.h b/lib/dns/include/dns/ncache.h
+index 2942c26..c2e1e7b 100644
+--- a/lib/dns/include/dns/ncache.h
++++ b/lib/dns/include/dns/ncache.h
+@@ -56,12 +56,14 @@ ISC_LANG_BEGINDECLS
+
+ isc_result_t
+ dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++ dns_rdatatype_t covers, isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ dns_rdataset_t *addedrdataset);
+ isc_result_t
+ dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
+ dns_dbnode_t *node, dns_rdatatype_t covers,
+- isc_stdtime_t now, dns_ttl_t maxttl,
++ isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ bool optout, dns_rdataset_t *addedrdataset);
+ /*%<
+ * Convert the authority data from 'message' into a negative cache
+diff --git a/lib/dns/include/dns/view.h b/lib/dns/include/dns/view.h
+index 8e21298..3b3ecc9 100644
+--- a/lib/dns/include/dns/view.h
++++ b/lib/dns/include/dns/view.h
+@@ -153,6 +153,8 @@ struct dns_view {
+ bool sendcookie;
+ dns_ttl_t maxcachettl;
+ dns_ttl_t maxncachettl;
++ dns_ttl_t mincachettl;
++ dns_ttl_t minncachettl;
+ uint32_t nta_lifetime;
+ uint32_t nta_recheck;
+ char *nta_file;
+diff --git a/lib/dns/ncache.c b/lib/dns/ncache.c
+index c5078de..9cde098 100644
+--- a/lib/dns/ncache.c
++++ b/lib/dns/ncache.c
+@@ -45,7 +45,8 @@
+
+ static isc_result_t
+ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++ dns_rdatatype_t covers, isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ bool optout, bool secure,
+ dns_rdataset_t *addedrdataset);
+
+@@ -95,26 +96,29 @@ copy_rdataset(dns_rdataset_t *rdataset, isc_buffer_t *buffer) {
+
+ isc_result_t
+ dns_ncache_add(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++ dns_rdatatype_t covers, isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ dns_rdataset_t *addedrdataset)
+ {
+- return (addoptout(message, cache, node, covers, now, maxttl,
++ return (addoptout(message, cache, node, covers, now, minttl, maxttl,
+ false, false, addedrdataset));
+ }
+
+ isc_result_t
+ dns_ncache_addoptout(dns_message_t *message, dns_db_t *cache,
+ dns_dbnode_t *node, dns_rdatatype_t covers,
+- isc_stdtime_t now, dns_ttl_t maxttl,
++ isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ bool optout, dns_rdataset_t *addedrdataset)
+ {
+- return (addoptout(message, cache, node, covers, now, maxttl,
++ return (addoptout(message, cache, node, covers, now, minttl, maxttl,
+ optout, true, addedrdataset));
+ }
+
+ static isc_result_t
+ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++ dns_rdatatype_t covers, isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ bool optout, bool secure,
+ dns_rdataset_t *addedrdataset)
+ {
+@@ -181,6 +185,8 @@ addoptout(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+ type == dns_rdatatype_nsec3) {
+ if (ttl > rdataset->ttl)
+ ttl = rdataset->ttl;
++ if (ttl < minttl)
++ ttl = minttl;
+ if (trust > rdataset->trust)
+ trust = rdataset->trust;
+ /*
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 0abf4de..1d76504 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -564,7 +564,9 @@ static bool fctx_unlink(fetchctx_t *fctx);
+ static isc_result_t ncache_adderesult(dns_message_t *message,
+ dns_db_t *cache, dns_dbnode_t *node,
+ dns_rdatatype_t covers,
+- isc_stdtime_t now, dns_ttl_t maxttl,
++ isc_stdtime_t now,
++ dns_ttl_t minttl,
++ dns_ttl_t maxttl,
+ bool optout,
+ bool secure,
+ dns_rdataset_t *ardataset,
+@@ -5015,7 +5017,7 @@ validated(isc_task_t *task, isc_event_t *event) {
+ ttl = 0;
+
+ result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
+- covers, now, ttl, vevent->optout,
++ covers, now, fctx->res->view->minncachettl, ttl, vevent->optout,
+ vevent->secure, ardataset, &eresult);
+ if (result != ISC_R_SUCCESS)
+ goto noanswer_response;
+@@ -5480,6 +5482,12 @@ cache_name(fetchctx_t *fctx, dns_name_t *name, dns_adbaddrinfo_t *addrinfo,
+ rdataset->ttl = res->view->maxcachettl;
+ }
+
++ /*
++ * Enforce configured minimum cache TTL.
++ */
++ if (rdataset->ttl < res->view->mincachettl)
++ rdataset->ttl = res->view->mincachettl;
++
+ /*
+ * Mark the rdataset as being prefetch eligible.
+ */
+@@ -5868,7 +5876,8 @@ cache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo, isc_stdtime_t now)
+ */
+ static isc_result_t
+ ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+- dns_rdatatype_t covers, isc_stdtime_t now, dns_ttl_t maxttl,
++ dns_rdatatype_t covers, isc_stdtime_t now,
++ dns_ttl_t minttl, dns_ttl_t maxttl,
+ bool optout, bool secure,
+ dns_rdataset_t *ardataset, isc_result_t *eresultp)
+ {
+@@ -5881,10 +5890,10 @@ ncache_adderesult(dns_message_t *message, dns_db_t *cache, dns_dbnode_t *node,
+ }
+ if (secure)
+ result = dns_ncache_addoptout(message, cache, node, covers,
+- now, maxttl, optout, ardataset);
++ now, minttl, maxttl, optout, ardataset);
+ else
+ result = dns_ncache_add(message, cache, node, covers, now,
+- maxttl, ardataset);
++ minttl, maxttl, ardataset);
+ if (result == DNS_R_UNCHANGED || result == ISC_R_SUCCESS) {
+ /*
+ * If the cache now contains a negative entry and we
+@@ -6059,7 +6068,8 @@ ncache_message(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo,
+ ttl = 0;
+
+ result = ncache_adderesult(fctx->rmessage, fctx->cache, node,
+- covers, now, ttl, false,
++ covers, now, ttl,
++ fctx->res->view->minncachettl, false,
+ false, ardataset, &eresult);
+ if (result != ISC_R_SUCCESS)
+ goto unlock;
+diff --git a/lib/isccfg/namedconf.c b/lib/isccfg/namedconf.c
+index cd797a6..fdaf8ff 100644
+--- a/lib/isccfg/namedconf.c
++++ b/lib/isccfg/namedconf.c
+@@ -1780,6 +1780,8 @@ view_clauses[] = {
+ { "max-recursion-queries", &cfg_type_uint32, 0 },
+ { "max-udp-size", &cfg_type_uint32, 0 },
+ { "message-compression", &cfg_type_boolean, 0 },
++ { "min-cache-ttl", &cfg_type_uint32, 0 },
++ { "min-ncache-ttl", &cfg_type_uint32, 0 },
+ { "min-roots", &cfg_type_uint32, CFG_CLAUSEFLAG_NOTIMP },
+ { "minimal-any", &cfg_type_boolean, 0 },
+ { "minimal-responses", &cfg_type_minimal, 0 },
diff --git a/debian/patches/0004-library_paths.diff b/debian/patches/0004-library_paths.diff
new file mode 100644
index 0000000..abc8d66
--- /dev/null
+++ b/debian/patches/0004-library_paths.diff
@@ -0,0 +1,136 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _library_paths
+
+ Makefile.in: be explicit about library paths
+
+ Debian policy requires that all dependent libs be in the .so, not just the
+ immediately depended ones.
+
+ Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ lib/dns/Makefile.in | 4 +++-
+ lib/irs/Makefile.in | 4 +++-
+ lib/isc/Makefile.in | 3 +++
+ lib/isccc/Makefile.in | 4 +++-
+ lib/isccfg/Makefile.in | 2 +-
+ 5 files changed, 13 insertions(+), 4 deletions(-)
+
+diff --git a/lib/dns/Makefile.in b/lib/dns/Makefile.in
+index 4a8549e..e0fcca4 100644
+--- a/lib/dns/Makefile.in
++++ b/lib/dns/Makefile.in
+@@ -37,7 +37,7 @@ ISCLIBS = ../../lib/isc/libisc.@A@
+
+ ISCDEPLIBS = ../../lib/isc/libisc.@A@
+
+-LIBS = @LIBS@
++LIBS = @LIBS@ -L../../lib/isc -lcrypto
+
+ # Alphabetically
+
+@@ -155,6 +155,7 @@ libdns.la: ${OBJS}
+ ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libdns.la -rpath ${libdir} \
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} ${ISCLIBS} @DNS_CRYPTO_LIBS@ ${LIBS}
++ ln -sf .libs/libdns.so .
+
+ include: gen
+ ${MAKE} include/dns/enumtype.h
+@@ -206,6 +207,7 @@ clean distclean::
+ newrr::
+ rm -f code.h include/dns/enumtype.h include/dns/enumclass.h
+ rm -f include/dns/rdatastruct.h
++ rm -f libdns.so
+
+ rdata.@O@: include
+
+diff --git a/lib/irs/Makefile.in b/lib/irs/Makefile.in
+index fc11447..4bb85b1 100644
+--- a/lib/irs/Makefile.in
++++ b/lib/irs/Makefile.in
+@@ -36,7 +36,7 @@ SRCS = context.c \
+ gai_strerror.c getaddrinfo.c getnameinfo.c \
+ resconf.c
+
+-LIBS = @LIBS@
++LIBS = @LIBS@ -L../../lib/isc -L../../lib/dns -L../../lib/isccfg -lcrypto -lisc -ldns -lisccfg
+
+ SUBDIRS = include
+ TESTDIRS = @UNITTESTS@
+@@ -61,6 +61,7 @@ libirs.la: ${OBJS} version.@O@
+ ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libirs.la -rpath ${libdir} \
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} version.@O@ ${LIBS}
++ ln -sf .libs/libirs.so .
+
+ timestamp: libirs.@A@
+ touch timestamp
+@@ -78,3 +79,4 @@ uninstall::
+
+ clean distclean::
+ rm -f libirs.@A@ libirs.la timestamp
++ rm -f libdns.so
+diff --git a/lib/isc/Makefile.in b/lib/isc/Makefile.in
+index ba53ef1..ba3f013 100644
+--- a/lib/isc/Makefile.in
++++ b/lib/isc/Makefile.in
+@@ -120,12 +120,14 @@ libisc.la: ${OBJS} ${SYMTBLOBJS}
+ ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc.la -rpath ${libdir} \
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} ${SYMTBLOBJS} ${LIBS}
++ ln -sf .libs/libisc.so .
+
+ libisc-nosymtbl.la: ${OBJS}
+ ${LIBTOOL_MODE_LINK} \
+ ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisc-nosymtbl.la -rpath ${libdir} \
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} ${LIBS}
++ ln -sf .libs/libisc-nosymtbl.so .
+
+ timestamp: libisc.@A@ libisc-nosymtbl.@A@
+ touch timestamp
+@@ -144,3 +146,4 @@ uninstall::
+ clean distclean::
+ rm -f libisc.@A@ libisc-nosymtbl.@A@ libisc.la \
+ libisc-nosymtbl.la timestamp
++ rm -f libisc.so libisc-nosymtbl.so
+diff --git a/lib/isccc/Makefile.in b/lib/isccc/Makefile.in
+index ca88e98..8d875bc 100644
+--- a/lib/isccc/Makefile.in
++++ b/lib/isccc/Makefile.in
+@@ -31,7 +31,7 @@ ISCCCLIBS = ../../lib/isccc/libisccc.@A@
+ ISCDEPLIBS = ../../lib/isc/libisc.@A@
+ ISCCCDEPLIBS = libisccc.@A@
+
+-LIBS = @LIBS@
++LIBS = @LIBS@ -L../../lib/isc
+
+ SUBDIRS = include
+
+@@ -67,6 +67,7 @@ libisccc.la: ${OBJS}
+ ${CC} ${ALL_CFLAGS} ${LDFLAGS} -o libisccc.la -rpath ${libdir} \
+ -version-info ${LIBINTERFACE}:${LIBREVISION}:${LIBAGE} \
+ ${OBJS} ${ISCLIBS} ${LIBS}
++ ln -sf .libs/libisccc.so .
+
+ timestamp: libisccc.@A@
+ touch timestamp
+@@ -82,3 +83,4 @@ uninstall::
+
+ clean distclean::
+ rm -f libisccc.@A@ timestamp
++ rm -f libisccc.so
+diff --git a/lib/isccfg/Makefile.in b/lib/isccfg/Makefile.in
+index f459bd5..0c42b2a 100644
+--- a/lib/isccfg/Makefile.in
++++ b/lib/isccfg/Makefile.in
+@@ -29,7 +29,7 @@ ISCCFGLIBS = ../../lib/cfg/libisccfg.@A@
+ ISCDEPLIBS = ../../lib/isc/libisc.@A@
+ ISCCFGDEPLIBS = libisccfg.@A@
+
+-LIBS = @LIBS@
++LIBS = @LIBS@ -L../dns -L../isc -L../isccc
+
+ SUBDIRS = include
+ TESTDIRS = @UNITTESTS@
diff --git a/debian/patches/0005-resource_missing_include.diff b/debian/patches/0005-resource_missing_include.diff
new file mode 100644
index 0000000..cc1fe91
--- /dev/null
+++ b/debian/patches/0005-resource_missing_include.diff
@@ -0,0 +1,24 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _resource_missing_include
+
+ lib/isc/unix/resource.c was missing inttypes.h include.
+
+ Addresses-Ubuntu-Bug: 674199
+ Signed-off-by: LaMont Jones <lamont@debian.org>
+---
+ lib/isc/unix/resource.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/lib/isc/unix/resource.c b/lib/isc/unix/resource.c
+index 6d5c5aa..a4302c6 100644
+--- a/lib/isc/unix/resource.c
++++ b/lib/isc/unix/resource.c
+@@ -25,6 +25,7 @@
+ #include <isc/util.h>
+
+ #ifdef __linux__
++#include <inttypes.h>
+ #include <linux/fs.h> /* To get the large NR_OPEN. */
+ #endif
+
diff --git a/debian/patches/0006-prepare_native_pkcs11.diff b/debian/patches/0006-prepare_native_pkcs11.diff
new file mode 100644
index 0000000..9cd63b6
--- /dev/null
+++ b/debian/patches/0006-prepare_native_pkcs11.diff
@@ -0,0 +1,246 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _prepare_native_pkcs11
+
+---
+ bin/Makefile.in | 2 +-
+ bin/dnssec/Makefile.in | 2 +-
+ bin/named/Makefile.in | 2 +-
+ bin/pkcs11/Makefile.in | 6 +++---
+ configure.in | 51 +++++++++++++++++++++++++++++++++++---------------
+ lib/Makefile.in | 2 +-
+ make/includes.in | 10 ++++++++++
+ 7 files changed, 53 insertions(+), 22 deletions(-)
+
+diff --git a/bin/Makefile.in b/bin/Makefile.in
+index f0c504a..ef6bf5f 100644
+--- a/bin/Makefile.in
++++ b/bin/Makefile.in
+@@ -11,7 +11,7 @@ srcdir = @srcdir@
+ VPATH = @srcdir@
+ top_srcdir = @top_srcdir@
+
+-SUBDIRS = named rndc dig delv dnssec tools nsupdate check confgen \
++SUBDIRS = named named-pkcs11 rndc dig delv dnssec dnssec-pkcs11 tools nsupdate check confgen \
+ @NZD_TOOLS@ @PYTHON_TOOLS@ @PKCS11_TOOLS@ tests
+ TARGETS =
+
+diff --git a/bin/dnssec/Makefile.in b/bin/dnssec/Makefile.in
+index 2239ad1..1ded1fa 100644
+--- a/bin/dnssec/Makefile.in
++++ b/bin/dnssec/Makefile.in
+@@ -19,7 +19,7 @@ VERSION=@BIND9_VERSION@
+
+ CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} @DST_OPENSSL_INC@
+
+-CDEFINES = -DVERSION=\"${VERSION}\" @USE_PKCS11@ @PKCS11_ENGINE@ \
++CDEFINES = -DVERSION=\"${VERSION}\" \
+ @CRYPTO@ -DPK11_LIB_LOCATION=\"@PKCS11_PROVIDER@\"
+ CWARNINGS =
+
+diff --git a/bin/named/Makefile.in b/bin/named/Makefile.in
+index 1c41397..5e6e84c 100644
+--- a/bin/named/Makefile.in
++++ b/bin/named/Makefile.in
+@@ -47,7 +47,7 @@ CINCLUDES = -I${srcdir}/include -I${srcdir}/unix/include -I. \
+ ${ISCCFG_INCLUDES} ${ISCCC_INCLUDES} ${ISC_INCLUDES} \
+ ${DLZDRIVER_INCLUDES} ${DBDRIVER_INCLUDES} @DST_OPENSSL_INC@
+
+-CDEFINES = @CONTRIB_DLZ@ @USE_PKCS11@ @PKCS11_ENGINE@ @CRYPTO@
++CDEFINES = @CONTRIB_DLZ@ @CRYPTO@
+
+ CWARNINGS =
+
+diff --git a/bin/pkcs11/Makefile.in b/bin/pkcs11/Makefile.in
+index ae90616..4bc1256 100644
+--- a/bin/pkcs11/Makefile.in
++++ b/bin/pkcs11/Makefile.in
+@@ -15,13 +15,13 @@ top_srcdir = @top_srcdir@
+
+ @BIND9_MAKE_INCLUDES@
+
+-CINCLUDES = ${ISC_INCLUDES}
++CINCLUDES = ${ISC_PKCS11_INCLUDES}
+
+ CDEFINES =
+
+-ISCLIBS = ../../lib/isc/libisc.@A@ @ISC_OPENSSL_LIBS@
++ISCLIBS = ../../lib/isc-pkcs11/libisc-pkcs11.@A@ @ISC_OPENSSL_LIBS@
+
+-ISCDEPLIBS = ../../lib/isc/libisc.@A@
++ISCDEPLIBS = ../../lib/isc-pkcs11/libisc-pkcs11.@A@
+
+ DEPLIBS = ${ISCDEPLIBS}
+
+diff --git a/configure.in b/configure.in
+index bf028fe..f8603b8 100644
+--- a/configure.in
++++ b/configure.in
+@@ -1109,12 +1109,14 @@ AC_SUBST(USE_GSSAPI)
+ AC_SUBST(DST_GSSAPI_INC)
+ AC_SUBST(DNS_GSSAPI_LIBS)
+ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS"
+
+ #
+ # Applications linking with libdns also need to link with these libraries.
+ #
+
+ AC_SUBST(DNS_CRYPTO_LIBS)
++AC_SUBST(DNS_CRYPTO_PK11_LIBS)
+
+ #
+ # was --with-randomdev specified?
+@@ -1499,11 +1501,6 @@ fi
+ AC_MSG_CHECKING(for OpenSSL library)
+ OPENSSL_WARNING=
+ openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw"
+-if test "yes" = "$want_native_pkcs11"
+-then
+- use_openssl="native_pkcs11"
+- AC_MSG_RESULT(use of native PKCS11 instead)
+-fi
+
+ if test "auto" = "$use_openssl"
+ then
+@@ -1516,6 +1513,7 @@ then
+ fi
+ done
+ fi
++CRYPTO_PK11=""
+ OPENSSL_ECDSA=""
+ OPENSSL_GOST=""
+ OPENSSL_ED25519=""
+@@ -1537,11 +1535,10 @@ case "$with_gost" in
+ ;;
+ esac
+
+-case "$use_openssl" in
+- native_pkcs11)
+- AC_MSG_RESULT(disabled because of native PKCS11)
++if test "$want_native_pkcs11" = "yes"
++then
+ DST_OPENSSL_INC=""
+- CRYPTO="-DPKCS11CRYPTO"
++ CRYPTO_PK11="-DPKCS11CRYPTO"
+ OPENSSLECDSALINKOBJS=""
+ OPENSSLECDSALINKSRCS=""
+ OPENSSLEDDSALINKOBJS=""
+@@ -1550,7 +1547,9 @@ case "$use_openssl" in
+ OPENSSLGOSTLINKSRCS=""
+ OPENSSLLINKOBJS=""
+ OPENSSLLINKSRCS=""
+- ;;
++fi
++
++case "$use_openssl" in
+ no)
+ AC_MSG_RESULT(no)
+ DST_OPENSSL_INC=""
+@@ -1580,11 +1579,6 @@ case "$use_openssl" in
+ If you don't want OpenSSL, use --without-openssl])
+ ;;
+ *)
+- if test "yes" = "$want_native_pkcs11"
+- then
+- AC_MSG_RESULT()
+- AC_MSG_ERROR([OpenSSL and native PKCS11 cannot be used together.])
+- fi
+ if test "yes" = "$use_openssl"
+ then
+ # User did not specify a path - guess it
+@@ -2007,6 +2001,7 @@ AC_SUBST(OPENSSL_ED25519)
+ AC_SUBST(OPENSSL_GOST)
+
+ DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS"
+
+ ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES"
+ if test "yes" = "$with_aes"
+@@ -2326,6 +2321,7 @@ esac
+ AC_SUBST(PKCS11LINKOBJS)
+ AC_SUBST(PKCS11LINKSRCS)
+ AC_SUBST(CRYPTO)
++AC_SUBST(CRYPTO_PK11)
+ AC_SUBST(PKCS11_ECDSA)
+ AC_SUBST(PKCS11_GOST)
+ AC_SUBST(PKCS11_ED25519)
+@@ -5331,8 +5327,11 @@ AC_CONFIG_FILES([
+ bin/delv/Makefile
+ bin/dig/Makefile
+ bin/dnssec/Makefile
++ bin/dnssec-pkcs11/Makefile
+ bin/named/Makefile
+ bin/named/unix/Makefile
++ bin/named-pkcs11/Makefile
++ bin/named-pkcs11/unix/Makefile
+ bin/nsupdate/Makefile
+ bin/pkcs11/Makefile
+ bin/python/Makefile
+@@ -5406,6 +5405,10 @@ AC_CONFIG_FILES([
+ lib/dns/include/dns/Makefile
+ lib/dns/include/dst/Makefile
+ lib/dns/tests/Makefile
++ lib/dns-pkcs11/Makefile
++ lib/dns-pkcs11/include/Makefile
++ lib/dns-pkcs11/include/dns/Makefile
++ lib/dns-pkcs11/include/dst/Makefile
+ lib/irs/Makefile
+ lib/irs/include/Makefile
+ lib/irs/include/irs/Makefile
+@@ -5430,6 +5433,24 @@ AC_CONFIG_FILES([
+ lib/isc/unix/include/Makefile
+ lib/isc/unix/include/isc/Makefile
+ lib/isc/unix/include/pkcs11/Makefile
++ lib/isc-pkcs11/$arch/Makefile
++ lib/isc-pkcs11/$arch/include/Makefile
++ lib/isc-pkcs11/$arch/include/isc/Makefile
++ lib/isc-pkcs11/$thread_dir/Makefile
++ lib/isc-pkcs11/$thread_dir/include/Makefile
++ lib/isc-pkcs11/$thread_dir/include/isc/Makefile
++ lib/isc-pkcs11/Makefile
++ lib/isc-pkcs11/include/Makefile
++ lib/isc-pkcs11/include/isc/Makefile
++ lib/isc-pkcs11/include/isc/platform.h
++ lib/isc-pkcs11/include/pk11/Makefile
++ lib/isc-pkcs11/include/pkcs11/Makefile
++ lib/isc-pkcs11/tests/Makefile
++ lib/isc-pkcs11/nls/Makefile
++ lib/isc-pkcs11/unix/Makefile
++ lib/isc-pkcs11/unix/include/Makefile
++ lib/isc-pkcs11/unix/include/isc/Makefile
++ lib/isc-pkcs11/unix/include/pkcs11/Makefile
+ lib/isccc/Makefile
+ lib/isccc/include/Makefile
+ lib/isccc/include/isccc/Makefile
+diff --git a/lib/Makefile.in b/lib/Makefile.in
+index 81270a0..bcb5312 100644
+--- a/lib/Makefile.in
++++ b/lib/Makefile.in
+@@ -15,7 +15,7 @@ top_srcdir = @top_srcdir@
+ # Attempt to disable parallel processing.
+ .NOTPARALLEL:
+ .NO_PARALLEL:
+-SUBDIRS = isc isccc dns isccfg bind9 lwres irs samples
++SUBDIRS = isc isc-pkcs11 isccc dns dns-pkcs11 isccfg bind9 lwres irs samples
+ TARGETS =
+
+ @BIND9_MAKE_RULES@
+diff --git a/make/includes.in b/make/includes.in
+index fa86ad1..3cfbe9f 100644
+--- a/make/includes.in
++++ b/make/includes.in
+@@ -43,3 +43,13 @@ BIND9_INCLUDES = @BIND9_BIND9_BUILDINCLUDE@ \
+
+ TEST_INCLUDES = \
+ -I${top_srcdir}/lib/tests/include
++
++ISC_PKCS11_INCLUDES = @BIND9_ISC_BUILDINCLUDE@ \
++ -I${top_srcdir}/lib/isc-pkcs11 \
++ -I${top_srcdir}/lib/isc-pkcs11/include \
++ -I${top_srcdir}/lib/isc-pkcs11/unix/include \
++ -I${top_srcdir}/lib/isc-pkcs11/@ISC_THREAD_DIR@/include \
++ -I${top_srcdir}/lib/isc-pkcs11/@ISC_ARCH_DIR@/include
++
++DNS_PKCS11_INCLUDES = @BIND9_DNS_BUILDINCLUDE@ \
++ -I${top_srcdir}/lib/dns-pkcs11/include
diff --git a/debian/patches/0007-ctxstart_no_sighandling.diff b/debian/patches/0007-ctxstart_no_sighandling.diff
new file mode 100644
index 0000000..9304fea
--- /dev/null
+++ b/debian/patches/0007-ctxstart_no_sighandling.diff
@@ -0,0 +1,22 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _ctxstart_no_sighandling
+
+---
+ lib/isc/unix/app.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/lib/isc/unix/app.c b/lib/isc/unix/app.c
+index 7e5a0ee..8574141 100644
+--- a/lib/isc/unix/app.c
++++ b/lib/isc/unix/app.c
+@@ -262,6 +262,9 @@ isc__app_ctxstart(isc_appctx_t *ctx0) {
+ ctx->want_reload = false;
+ ctx->blocked = false;
+
++ if (!isc_bind9)
++ return (ISC_R_SUCCESS);
++
+ #ifndef HAVE_SIGWAIT
+ /*
+ * Install do-nothing handlers for SIGINT and SIGTERM.
diff --git a/debian/patches/0008-reproducible_build.diff b/debian/patches/0008-reproducible_build.diff
new file mode 100644
index 0000000..94d8b58
--- /dev/null
+++ b/debian/patches/0008-reproducible_build.diff
@@ -0,0 +1,68 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:54 +0000
+Subject: _reproducible_build
+
+---
+ lib/dns/gen.c | 35 +++++++++++++++++++++++++++++++++--
+ 1 file changed, 33 insertions(+), 2 deletions(-)
+
+diff --git a/lib/dns/gen.c b/lib/dns/gen.c
+index 2a3b94b..b26a509 100644
+--- a/lib/dns/gen.c
++++ b/lib/dns/gen.c
+@@ -32,6 +32,8 @@
+ #include <stdlib.h>
+ #include <string.h>
+ #include <time.h>
++#include <errno.h>
++#include <limits.h>
+
+ #ifdef WIN32
+ #include "gen-win32.h"
+@@ -528,6 +530,9 @@ main(int argc, char **argv) {
+ char *prefix = NULL;
+ char *suffix = NULL;
+ char *file = NULL;
++ char *source_date_epoch;
++ unsigned long long epoch;
++ char *endptr;
+ isc_dir_t dir;
+
+ for (i = 0; i < TYPENAMES; i++)
+@@ -618,8 +623,34 @@ main(int argc, char **argv) {
+ INSIST(n > 0 && (unsigned)n < sizeof(srcdir));
+ sd(0, "", buf, filetype);
+
+- if (time(&now) != -1) {
+- if ((tm = localtime(&now)) != NULL && tm->tm_year > 104) {
++ source_date_epoch = getenv("SOURCE_DATE_EPOCH");
++ if (source_date_epoch) {
++ errno = 0;
++ epoch = strtoull(source_date_epoch, &endptr, 10);
++ if ((errno == ERANGE && (epoch == ULLONG_MAX || epoch == 0))
++ || (errno != 0 && epoch == 0)) {
++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: strtoull: %s\n", strerror(errno));
++ exit(EXIT_FAILURE);
++ }
++ if (endptr == source_date_epoch) {
++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: No digits were found: %s\n", endptr);
++ exit(EXIT_FAILURE);
++ }
++ if (*endptr != '\0') {
++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: Trailing garbage: %s\n", endptr);
++ exit(EXIT_FAILURE);
++ }
++ if (epoch > ULONG_MAX) {
++ fprintf(stderr, "Environment variable $SOURCE_DATE_EPOCH: value must be smaller than or equal to: %lu but was found to be: %llu \n", ULONG_MAX, epoch);
++ exit(EXIT_FAILURE);
++ }
++ now = epoch;
++ } else {
++ time(&now);
++ }
++
++ if (now != -1) {
++ if ((tm = gmtime(&now)) != NULL && tm->tm_year > 104) {
+ n = snprintf(year, sizeof(year), "-%d",
+ tm->tm_year + 1900);
+ INSIST(n > 0 && (unsigned)n < sizeof(year));
diff --git a/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch
new file mode 100644
index 0000000..d64e51d
--- /dev/null
+++ b/debian/patches/0009-Add_--install-layout=deb_to_setup.py_call.patch
@@ -0,0 +1,24 @@
+From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org>
+Date: Fri, 24 Nov 2017 16:26:55 +0000
+Subject: Add_--install-layout=deb_to_setup.py_call
+
+---
+ bin/python/Makefile.in | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in
+index aa678d4..a58d72f 100644
+--- a/bin/python/Makefile.in
++++ b/bin/python/Makefile.in
+@@ -56,9 +56,9 @@ install:: ${TARGETS} installdirs
+ ${INSTALL_DATA} ${srcdir}/dnssec-keymgr.8 ${DESTDIR}${mandir}/man8
+ if test -n "${PYTHON}" ; then \
+ if test -n "${DESTDIR}" ; then \
+- ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++ ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \
+ else \
+- ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \
++ ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} --install-layout=deb @PYTHON_INSTALL_LIB@ ; \
+ fi ; \
+ rm -rf build ; \
+ fi
diff --git a/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff
new file mode 100644
index 0000000..4455d46
--- /dev/null
+++ b/debian/patches/0010-skip-rtld-deepbind-for-dyndb.diff
@@ -0,0 +1,24 @@
+From: BIND 9 Package <bind9@package.debian.org>
+Date: Fri, 31 Aug 2018 08:42:51 +0000
+Subject: skip-rtld-deepbind-for-dyndb
+
+https://bugzilla.redhat.com/show_bug.cgi?id=1410433
+https://bugs.launchpad.net/bugs/1769440
+---
+ lib/dns/dyndb.c | 3 ---
+ 1 file changed, 3 deletions(-)
+
+diff --git a/lib/dns/dyndb.c b/lib/dns/dyndb.c
+index 93ad795..11ba0f5 100644
+--- a/lib/dns/dyndb.c
++++ b/lib/dns/dyndb.c
+@@ -133,9 +133,6 @@ load_library(isc_mem_t *mctx, const char *filename, const char *instname,
+ instname, filename);
+
+ flags = RTLD_NOW|RTLD_LOCAL;
+-#ifdef RTLD_DEEPBIND
+- flags |= RTLD_DEEPBIND;
+-#endif
+
+ handle = dlopen(filename, flags);
+ if (handle == NULL)
diff --git a/debian/patches/0011-keymgr-dont-immediately-delete.diff b/debian/patches/0011-keymgr-dont-immediately-delete.diff
new file mode 100644
index 0000000..e0a9cb8
--- /dev/null
+++ b/debian/patches/0011-keymgr-dont-immediately-delete.diff
@@ -0,0 +1,236 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Wed, 20 Nov 2019 22:17:10 +0100
+Subject: keymgr-dont-immediately-delete
+
+---
+ bin/python/isc/keyseries.py.in | 28 ++++++++++++++++++--
+ bin/tests/system/keymgr/19-old-keys/README | 7 +++++
+ bin/tests/system/keymgr/19-old-keys/expect | 12 +++++++++
+ bin/tests/system/keymgr/19-old-keys/extra.sh | 19 ++++++++++++++
+ bin/tests/system/keymgr/19-old-keys/policy.conf | 18 +++++++++++++
+ bin/tests/system/keymgr/clean.sh | 2 ++
+ bin/tests/system/keymgr/setup.sh | 10 ++++++++
+ bin/tests/system/keymgr/tests.sh | 34 +++++++++++++++----------
+ 8 files changed, 114 insertions(+), 16 deletions(-)
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/README
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/expect
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/extra.sh
+ create mode 100644 bin/tests/system/keymgr/19-old-keys/policy.conf
+
+diff --git a/bin/python/isc/keyseries.py.in b/bin/python/isc/keyseries.py.in
+index e1241f0..74ccc64 100644
+--- a/bin/python/isc/keyseries.py.in
++++ b/bin/python/isc/keyseries.py.in
+@@ -77,15 +77,39 @@ class keyseries:
+ a = key.activate()
+ if not p or p > now:
+ key.setpublish(now)
++ p = now
+ if not a or a > now:
+ key.setactivate(now)
++ a = now
+
++ i = key.inactive()
+ if not rp:
+ key.setinactive(None, **kwargs)
+ key.setdelete(None, **kwargs)
++ elif not i or a + rp != i:
++ if not i and a + rp > now + prepub:
++ key.setinactive(a + rp, **kwargs)
++ key.setdelete(a + rp + postpub, **kwargs)
++ elif not i:
++ key.setinactive(now + prepub, **kwargs)
++ key.setdelete(now + prepub + postpub, **kwargs)
++ elif a + rp > i:
++ key.setinactive(a + rp, **kwargs)
++ key.setdelete(a + rp + postpub, **kwargs)
++ elif a + rp > now + prepub:
++ key.setinactive(a + rp, **kwargs)
++ key.setdelete(a + rp + postpub, **kwargs)
++ else:
++ key.setinactive(now + prepub, **kwargs)
++ key.setdelete(now + prepub + postpub, **kwargs)
+ else:
+- key.setinactive(a + rp, **kwargs)
+- key.setdelete(a + rp + postpub, **kwargs)
++ d = key.delete()
++ if not d or i + postpub > now:
++ key.setdelete(i + postpub, **kwargs)
++ elif not d:
++ key.setdelete(now + postpub, **kwargs)
++ elif d < i + postpub:
++ key.setdelete(i + postpub, **kwargs)
+
+ if policy.keyttl != key.ttl:
+ key.setttl(policy.keyttl)
+diff --git a/bin/tests/system/keymgr/19-old-keys/README b/bin/tests/system/keymgr/19-old-keys/README
+new file mode 100644
+index 0000000..424b70c
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/README
+@@ -0,0 +1,7 @@
++Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++
++See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.
++
++This directory has a key set which is valid, but which was published
++and activated more than one rollover period ago. dnssec-keymgr should
++not mark the keys as already being inactive and deleted.
+diff --git a/bin/tests/system/keymgr/19-old-keys/expect b/bin/tests/system/keymgr/19-old-keys/expect
+new file mode 100644
+index 0000000..f3e49b3
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/expect
+@@ -0,0 +1,12 @@
++kargs="-c policy.conf example.com"
++kmatch=""
++kret=0
++cargs="-d 1w -m 2w example.com"
++cmatch="4,Publish
++4,Activate
++2,Inactive
++2,Delete"
++cret=0
++warn=0
++error=0
++ok=2
+diff --git a/bin/tests/system/keymgr/19-old-keys/extra.sh b/bin/tests/system/keymgr/19-old-keys/extra.sh
+new file mode 100644
+index 0000000..8da6aa1
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/extra.sh
+@@ -0,0 +1,19 @@
++# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++#
++# This Source Code Form is subject to the terms of the Mozilla Public
++# License, v. 2.0. If a copy of the MPL was not distributed with this
++# file, You can obtain one at http://mozilla.org/MPL/2.0/.
++#
++# See the COPYRIGHT file distributed with this work for additional
++# information regarding copyright ownership.
++
++now=`$PERL -e 'print time()."\n";'`
++for keyfile in K*.key; do
++ inactive=`$SETTIME -upI $keyfile | awk '{print $2}'`
++ if [ "$inactive" = UNSET ]; then
++ continue
++ elif [ "$inactive" -lt "$now" ]; then
++ echo_d "inactive date is in the past"
++ ret=1
++ fi
++done
+diff --git a/bin/tests/system/keymgr/19-old-keys/policy.conf b/bin/tests/system/keymgr/19-old-keys/policy.conf
+new file mode 100644
+index 0000000..91817ff
+--- /dev/null
++++ b/bin/tests/system/keymgr/19-old-keys/policy.conf
+@@ -0,0 +1,18 @@
++/*
++ * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
++ *
++ * This Source Code Form is subject to the terms of the Mozilla Public
++ * License, v. 2.0. If a copy of the MPL was not distributed with this
++ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
++ *
++ * See the COPYRIGHT file distributed with this work for additional
++ * information regarding copyright ownership.
++ */
++
++policy default {
++ policy global;
++ algorithm nsec3rsasha1;
++ pre-publish zsk 2w;
++ roll-period zsk 6mo;
++ coverage 364d;
++};
+diff --git a/bin/tests/system/keymgr/clean.sh b/bin/tests/system/keymgr/clean.sh
+index dc9f0a0..3b9b1a2 100644
+--- a/bin/tests/system/keymgr/clean.sh
++++ b/bin/tests/system/keymgr/clean.sh
+@@ -11,5 +11,7 @@
+
+ rm -f */K*.key
+ rm -f */K*.private
++rm -f Kexample.com.*.key
++rm -f Kexample.com.*.private
+ rm -f coverage.* keymgr.*
+ rm -f policy.out
+diff --git a/bin/tests/system/keymgr/setup.sh b/bin/tests/system/keymgr/setup.sh
+index 24e6c7c..ea6e566 100644
+--- a/bin/tests/system/keymgr/setup.sh
++++ b/bin/tests/system/keymgr/setup.sh
+@@ -214,3 +214,13 @@ rm -f $dir/K*.private
+ ksk1=`$KEYGEN -K $dir -3fk example.com`
+ zsk1=`$KEYGEN -K $dir -3 example.com`
+ $SETTIME -K $dir -I now+2mo -D now+3mo $zsk1 > /dev/null
++
++# Test 19: Key has been published/active a long time
++dir=19-old-keys
++echo_i "set up $dir"
++rm -f $dir/K*.key
++rm -f $dir/K*.private
++ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
++zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
++$SETTIME -K $dir -P now-2y -A now-2y $ksk1 > /dev/null
++$SETTIME -K $dir -P now-2y -A now-2y $zsk1 > /dev/null
+diff --git a/bin/tests/system/keymgr/tests.sh b/bin/tests/system/keymgr/tests.sh
+index 88b43d9..89fedd3 100644
+--- a/bin/tests/system/keymgr/tests.sh
++++ b/bin/tests/system/keymgr/tests.sh
+@@ -16,13 +16,19 @@ status=0
+ n=1
+
+ matchall () {
++ match_result=ok
+ file=$1
+- echo "$2" | while read matchline; do
+- grep "$matchline" $file > /dev/null 2>&1 || {
+- echo "FAIL"
+- return
++ while IFS="," read expect matchline; do
++ [ -z "$matchline" ] && continue
++ matches=`grep "$matchline" $file | wc -l`
++ [ "$matches" -ne "$expect" ] && {
++ echo "'$matchline': expected $expect found $matches"
++ return 1
+ }
+- done
++ done << EOF
++ $2
++EOF
++ return 0
+ }
+
+ echo_i "checking for DNSSEC key coverage issues"
+@@ -51,11 +57,8 @@ for dir in [0-9][0-9]-*; do
+ ret=1
+ fi
+
+- found=`matchall keymgr.$n "$kmatch"`
+- if [ "$found" = "FAIL" ]; then
+- echo "no match on '$kmatch'"
+- ret=1
+- fi
++ # check for matches in keymgr output
++ matchall keymgr.$n "$kmatch" || ret=1
+
+ # now check coverage
+ $COVERAGE -K $dir $cargs > coverage.$n 2>&1
+@@ -87,10 +90,13 @@ for dir in [0-9][0-9]-*; do
+ ret=1
+ fi
+
+- found=`matchall coverage.$n "$cmatch"`
+- if [ "$found" = "FAIL" ]; then
+- echo "no match on '$cmatch'"
+- ret=1
++ # check for matches in coverage output
++ matchall coverage.$n "$cmatch" || ret=1
++
++ if [ -f $dir/extra.sh ]; then
++ cd $dir
++ . ./extra.sh
++ cd ..
+ fi
+
+ n=`expr $n + 1`
diff --git a/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
new file mode 100644
index 0000000..b451238
--- /dev/null
+++ b/debian/patches/0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
@@ -0,0 +1,912 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Thu, 3 Jan 2019 14:17:43 +0100
+Subject: [CVE-2018-5743]: Limiting simultaneous TCP clients is ineffective
+
+---
+ bin/named/client.c | 427 ++++++++++++++++++++++++++-------
+ bin/named/include/named/client.h | 23 +-
+ bin/named/include/named/interfacemgr.h | 13 +-
+ bin/named/interfacemgr.c | 9 +-
+ doc/arm/Bv9ARM-book.xml | 3 +-
+ lib/isc/include/isc/quota.h | 7 +
+ lib/isc/quota.c | 33 ++-
+ lib/isc/win32/libisc.def.in | 1 +
+ 8 files changed, 396 insertions(+), 120 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 4d26eff..020603d 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -246,10 +246,11 @@ static void ns_client_dumpmessage(ns_client_t *client, const char *reason);
+ static isc_result_t get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ dns_dispatch_t *disp, bool tcp);
+ static isc_result_t get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp,
+- isc_socket_t *sock);
++ isc_socket_t *sock, ns_client_t *oldclient);
+ static inline bool
+-allowed(isc_netaddr_t *addr, dns_name_t *signer, isc_netaddr_t *ecs_addr,
+- uint8_t ecs_addrlen, uint8_t *ecs_scope, dns_acl_t *acl);
++allowed(isc_netaddr_t *addr, dns_name_t *signer,
++ isc_netaddr_t *ecs_addr, uint8_t ecs_addrlen,
++ uint8_t *ecs_scope, dns_acl_t *acl);
+ static void compute_cookie(ns_client_t *client, uint32_t when,
+ uint32_t nonce, const unsigned char *secret,
+ isc_buffer_t *buf);
+@@ -298,6 +299,119 @@ ns_client_settimeout(ns_client_t *client, unsigned int seconds) {
+ }
+ }
+
++/*%
++ * Allocate a reference-counted object that will maintain a single pointer to
++ * the (also reference-counted) TCP client quota, shared between all the
++ * clients processing queries on a single TCP connection, so that all
++ * clients sharing the one socket will together consume only one slot in
++ * the 'tcp-clients' quota.
++ */
++static isc_result_t
++tcpconn_init(ns_client_t *client, bool force) {
++ isc_result_t result;
++ isc_quota_t *quota = NULL;
++ ns_tcpconn_t *tconn = NULL;
++
++ REQUIRE(client->tcpconn == NULL);
++
++ /*
++ * Try to attach to the quota first, so we won't pointlessly
++ * allocate memory for a tcpconn object if we can't get one.
++ */
++ if (force) {
++ result = isc_quota_force(&ns_g_server->tcpquota, &quota);
++ } else {
++ result = isc_quota_attach(&ns_g_server->tcpquota, &quota);
++ }
++ if (result != ISC_R_SUCCESS) {
++ return (result);
++ }
++
++ /*
++ * A global memory context is used for the allocation as different
++ * client structures may have different memory contexts assigned and a
++ * reference counter allocated here might need to be freed by a
++ * different client. The performance impact caused by memory context
++ * contention here is expected to be negligible, given that this code
++ * is only executed for TCP connections.
++ */
++ tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
++
++ isc_refcount_init(&tconn->refs, 1);
++ tconn->tcpquota = quota;
++ quota = NULL;
++ tconn->pipelined = false;
++
++ client->tcpconn = tconn;
++
++ return (ISC_R_SUCCESS);
++}
++
++/*%
++ * Increase the count of client structures sharing the TCP connection
++ * that 'source' is associated with; add a pointer to the same tcpconn
++ * to 'target', thus associating it with the same TCP connection.
++ */
++static void
++tcpconn_attach(ns_client_t *source, ns_client_t *target) {
++ int refs;
++
++ REQUIRE(source->tcpconn != NULL);
++ REQUIRE(target->tcpconn == NULL);
++ REQUIRE(source->tcpconn->pipelined);
++
++ isc_refcount_increment(&source->tcpconn->refs, &refs);
++ INSIST(refs > 1);
++ target->tcpconn = source->tcpconn;
++}
++
++/*%
++ * Decrease the count of client structures sharing the TCP connection that
++ * 'client' is associated with. If this is the last client using this TCP
++ * connection, we detach from the TCP quota and free the tcpconn
++ * object. Either way, client->tcpconn is set to NULL.
++ */
++static void
++tcpconn_detach(ns_client_t *client) {
++ ns_tcpconn_t *tconn = NULL;
++ int refs;
++
++ REQUIRE(client->tcpconn != NULL);
++
++ tconn = client->tcpconn;
++ client->tcpconn = NULL;
++
++ isc_refcount_decrement(&tconn->refs, &refs);
++ if (refs == 0) {
++ isc_quota_detach(&tconn->tcpquota);
++ isc_mem_free(ns_g_mctx, tconn);
++ }
++}
++
++/*%
++ * Mark a client as active and increment the interface's 'ntcpactive'
++ * counter, as a signal that there is at least one client servicing
++ * TCP queries for the interface. If we reach the TCP client quota at
++ * some point, this will be used to determine whether a quota overrun
++ * should be permitted.
++ *
++ * Marking the client active with the 'tcpactive' flag ensures proper
++ * accounting, by preventing us from incrementing or decrementing
++ * 'ntcpactive' more than once per client.
++ */
++static void
++mark_tcp_active(ns_client_t *client, bool active) {
++ if (active && !client->tcpactive) {
++ isc_atomic_xadd(&client->interface->ntcpactive, 1);
++ client->tcpactive = active;
++ } else if (!active && client->tcpactive) {
++ uint32_t old =
++ isc_atomic_xadd(&client->interface->ntcpactive, -1);
++ INSIST(old > 0);
++ client->tcpactive = active;
++ }
++}
++
+ /*%
+ * Check for a deactivation or shutdown request and take appropriate
+ * action. Returns true if either is in progress; in this case
+@@ -387,7 +501,8 @@ exit_check(ns_client_t *client) {
+ INSIST(client->recursionquota == NULL);
+
+ if (NS_CLIENTSTATE_READING == client->newstate) {
+- if (!client->pipelined) {
++ INSIST(client->tcpconn != NULL);
++ if (!client->tcpconn->pipelined) {
+ client_read(client);
+ client->newstate = NS_CLIENTSTATE_MAX;
+ return (true); /* We're done. */
+@@ -405,10 +520,13 @@ exit_check(ns_client_t *client) {
+ */
+ INSIST(client->recursionquota == NULL);
+ INSIST(client->newstate <= NS_CLIENTSTATE_READY);
+- if (client->nreads > 0)
++
++ if (client->nreads > 0) {
+ dns_tcpmsg_cancelread(&client->tcpmsg);
+- if (client->nreads != 0) {
+- /* Still waiting for read cancel completion. */
++ }
++
++ /* Still waiting for read cancel completion. */
++ if (client->nreads > 0) {
+ return (true);
+ }
+
+@@ -416,14 +534,49 @@ exit_check(ns_client_t *client) {
+ dns_tcpmsg_invalidate(&client->tcpmsg);
+ client->tcpmsg_valid = false;
+ }
++
++ /*
++ * Soon the client will be ready to accept a new TCP
++ * connection or UDP request, but we may have enough
++ * clients doing that already. Check whether this client
++ * needs to remain active and allow it go inactive if
++ * not.
++ *
++ * UDP clients always go inactive at this point, but a TCP
++ * client may need to stay active and return to READY
++ * state if no other clients are available to listen
++ * for TCP requests on this interface.
++ *
++ * Regardless, if we're going to FREED state, that means
++ * the system is shutting down and we don't need to
++ * retain clients.
++ */
++ if (client->mortal && TCP_CLIENT(client) &&
++ client->newstate != NS_CLIENTSTATE_FREED &&
++ !ns_g_clienttest &&
++ isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0)
++ {
++ /* Nobody else is accepting */
++ client->mortal = false;
++ client->newstate = NS_CLIENTSTATE_READY;
++ }
++
++ /*
++ * Detach from TCP connection and TCP client quota,
++ * if appropriate. If this is the last reference to
++ * the TCP connection in our pipeline group, the
++ * TCP quota slot will be released.
++ */
++ if (client->tcpconn) {
++ tcpconn_detach(client);
++ }
++
+ if (client->tcpsocket != NULL) {
+ CTRACE("closetcp");
+ isc_socket_detach(&client->tcpsocket);
++ mark_tcp_active(client, false);
+ }
+
+- if (client->tcpquota != NULL)
+- isc_quota_detach(&client->tcpquota);
+-
+ if (client->timerset) {
+ (void)isc_timer_reset(client->timer,
+ isc_timertype_inactive,
+@@ -431,45 +584,26 @@ exit_check(ns_client_t *client) {
+ client->timerset = false;
+ }
+
+- client->pipelined = false;
+-
+ client->peeraddr_valid = false;
+
+ client->state = NS_CLIENTSTATE_READY;
+- INSIST(client->recursionquota == NULL);
+-
+- /*
+- * Now the client is ready to accept a new TCP connection
+- * or UDP request, but we may have enough clients doing
+- * that already. Check whether this client needs to remain
+- * active and force it to go inactive if not.
+- *
+- * UDP clients go inactive at this point, but TCP clients
+- * may remain active if we have fewer active TCP client
+- * objects than desired due to an earlier quota exhaustion.
+- */
+- if (client->mortal && TCP_CLIENT(client) && !ns_g_clienttest) {
+- LOCK(&client->interface->lock);
+- if (client->interface->ntcpcurrent <
+- client->interface->ntcptarget)
+- client->mortal = false;
+- UNLOCK(&client->interface->lock);
+- }
+
+ /*
+ * We don't need the client; send it to the inactive
+ * queue for recycling.
+ */
+ if (client->mortal) {
+- if (client->newstate > NS_CLIENTSTATE_INACTIVE)
++ if (client->newstate > NS_CLIENTSTATE_INACTIVE) {
+ client->newstate = NS_CLIENTSTATE_INACTIVE;
++ }
+ }
+
+ if (NS_CLIENTSTATE_READY == client->newstate) {
+ if (TCP_CLIENT(client)) {
+ client_accept(client);
+- } else
++ } else {
+ client_udprecv(client);
++ }
+ client->newstate = NS_CLIENTSTATE_MAX;
+ return (true);
+ }
+@@ -481,41 +615,50 @@ exit_check(ns_client_t *client) {
+ /*
+ * We are trying to enter the inactive state.
+ */
+- if (client->naccepts > 0)
++ if (client->naccepts > 0) {
+ isc_socket_cancel(client->tcplistener, client->task,
+ ISC_SOCKCANCEL_ACCEPT);
++ }
+
+ /* Still waiting for accept cancel completion. */
+- if (! (client->naccepts == 0))
++ if (client->naccepts > 0) {
+ return (true);
++ }
+
+ /* Accept cancel is complete. */
+- if (client->nrecvs > 0)
++ if (client->nrecvs > 0) {
+ isc_socket_cancel(client->udpsocket, client->task,
+ ISC_SOCKCANCEL_RECV);
++ }
+
+ /* Still waiting for recv cancel completion. */
+- if (! (client->nrecvs == 0))
++ if (client->nrecvs > 0) {
+ return (true);
++ }
+
+ /* Still waiting for control event to be delivered */
+- if (client->nctls > 0)
++ if (client->nctls > 0) {
+ return (true);
+-
+- /* Deactivate the client. */
+- if (client->interface)
+- ns_interface_detach(&client->interface);
++ }
+
+ INSIST(client->naccepts == 0);
+ INSIST(client->recursionquota == NULL);
+- if (client->tcplistener != NULL)
++ if (client->tcplistener != NULL) {
+ isc_socket_detach(&client->tcplistener);
+-
+- if (client->udpsocket != NULL)
++ mark_tcp_active(client, false);
++ }
++ if (client->udpsocket != NULL) {
+ isc_socket_detach(&client->udpsocket);
++ }
++
++ /* Deactivate the client. */
++ if (client->interface != NULL) {
++ ns_interface_detach(&client->interface);
++ }
+
+- if (client->dispatch != NULL)
++ if (client->dispatch != NULL) {
+ dns_dispatch_detach(&client->dispatch);
++ }
+
+ client->attributes = 0;
+ client->mortal = false;
+@@ -540,10 +683,13 @@ exit_check(ns_client_t *client) {
+ client->newstate = NS_CLIENTSTATE_MAX;
+ if (!ns_g_clienttest && manager != NULL &&
+ !manager->exiting)
++ {
+ ISC_QUEUE_PUSH(manager->inactive, client,
+ ilink);
+- if (client->needshutdown)
++ }
++ if (client->needshutdown) {
+ isc_task_shutdown(client->task);
++ }
+ return (true);
+ }
+ }
+@@ -653,7 +799,7 @@ client_start(isc_task_t *task, isc_event_t *event) {
+ return;
+
+ if (TCP_CLIENT(client)) {
+- if (client->pipelined) {
++ if (client->tcpconn != NULL) {
+ client_read(client);
+ } else {
+ client_accept(client);
+@@ -663,7 +809,6 @@ client_start(isc_task_t *task, isc_event_t *event) {
+ }
+ }
+
+-
+ /*%
+ * The client's task has received a shutdown event.
+ */
+@@ -2304,6 +2449,7 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ client->nrecvs--;
+ } else {
+ INSIST(TCP_CLIENT(client));
++ INSIST(client->tcpconn != NULL);
+ REQUIRE(event->ev_type == DNS_EVENT_TCPMSG);
+ REQUIRE(event->ev_sender == &client->tcpmsg);
+ buffer = &client->tcpmsg.buffer;
+@@ -2487,18 +2633,27 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ /*
+ * Pipeline TCP query processing.
+ */
+- if (client->message->opcode != dns_opcode_query)
+- client->pipelined = false;
+- if (TCP_CLIENT(client) && client->pipelined) {
+- result = isc_quota_reserve(&ns_g_server->tcpquota);
+- if (result == ISC_R_SUCCESS)
+- result = ns_client_replace(client);
++ if (TCP_CLIENT(client) &&
++ client->message->opcode != dns_opcode_query)
++ {
++ client->tcpconn->pipelined = false;
++ }
++ if (TCP_CLIENT(client) && client->tcpconn->pipelined) {
++ /*
++ * We're pipelining. Replace the client; the
++ * replacement can read the TCP socket looking
++ * for new messages and this one can process the
++ * current message asynchronously.
++ *
++ * There will now be at least three clients using this
++ * TCP socket - one accepting new connections,
++ * one reading an existing connection to get new
++ * messages, and one answering the message already
++ * received.
++ */
++ result = ns_client_replace(client);
+ if (result != ISC_R_SUCCESS) {
+- ns_client_log(client, NS_LOGCATEGORY_CLIENT,
+- NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
+- "no more TCP clients(read): %s",
+- isc_result_totext(result));
+- client->pipelined = false;
++ client->tcpconn->pipelined = false;
+ }
+ }
+
+@@ -3054,8 +3209,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) {
+ client->signer = NULL;
+ dns_name_init(&client->signername, NULL);
+ client->mortal = false;
+- client->pipelined = false;
+- client->tcpquota = NULL;
++ client->tcpconn = NULL;
+ client->recursionquota = NULL;
+ client->interface = NULL;
+ client->peeraddr_valid = false;
+@@ -3065,6 +3219,7 @@ client_create(ns_clientmgr_t *manager, ns_client_t **clientp) {
+ client->filter_aaaa = dns_aaaa_ok;
+ #endif
+ client->needshutdown = ns_g_clienttest;
++ client->tcpactive = false;
+
+ ISC_EVENT_INIT(&client->ctlevent, sizeof(client->ctlevent), 0, NULL,
+ NS_EVENT_CLIENTCONTROL, client_start, client, client,
+@@ -3159,9 +3314,10 @@ client_read(ns_client_t *client) {
+
+ static void
+ client_newconn(isc_task_t *task, isc_event_t *event) {
++ isc_result_t result;
+ ns_client_t *client = event->ev_arg;
+ isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event;
+- isc_result_t result;
++ uint32_t old;
+
+ REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN);
+ REQUIRE(NS_CLIENT_VALID(client));
+@@ -3171,13 +3327,18 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+
+ INSIST(client->state == NS_CLIENTSTATE_READY);
+
++ /*
++ * The accept() was successful and we're now establishing a new
++ * connection. We need to make note of it in the client and
++ * interface objects so client objects can do the right thing
++ * when going inactive in exit_check() (see comments in
++ * client_accept() for details).
++ */
+ INSIST(client->naccepts == 1);
+ client->naccepts--;
+
+- LOCK(&client->interface->lock);
+- INSIST(client->interface->ntcpcurrent > 0);
+- client->interface->ntcpcurrent--;
+- UNLOCK(&client->interface->lock);
++ old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1);
++ INSIST(old > 0);
+
+ /*
+ * We must take ownership of the new socket before the exit
+@@ -3210,6 +3371,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ NS_LOGMODULE_CLIENT, ISC_LOG_DEBUG(3),
+ "accept failed: %s",
+ isc_result_totext(nevent->result));
++ tcpconn_detach(client);
+ }
+
+ if (exit_check(client))
+@@ -3247,20 +3409,13 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ * telnetting to port 53 (once per CPU) will
+ * deny service to legitimate TCP clients.
+ */
+- client->pipelined = false;
+- result = isc_quota_attach(&ns_g_server->tcpquota,
+- &client->tcpquota);
+- if (result == ISC_R_SUCCESS)
+- result = ns_client_replace(client);
+- if (result != ISC_R_SUCCESS) {
+- ns_client_log(client, NS_LOGCATEGORY_CLIENT,
+- NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
+- "no more TCP clients(accept): %s",
+- isc_result_totext(result));
+- } else if (ns_g_server->keepresporder == NULL ||
+- !allowed(&netaddr, NULL, NULL, 0, NULL,
+- ns_g_server->keepresporder)) {
+- client->pipelined = true;
++ result = ns_client_replace(client);
++ if (result == ISC_R_SUCCESS &&
++ (ns_g_server->keepresporder == NULL ||
++ !allowed(&netaddr, NULL, NULL, 0, NULL,
++ ns_g_server->keepresporder)))
++ {
++ client->tcpconn->pipelined = true;
+ }
+
+ client_read(client);
+@@ -3276,12 +3431,66 @@ client_accept(ns_client_t *client) {
+
+ CTRACE("accept");
+
++ /*
++ * Set up a new TCP connection. This means try to attach to the
++ * TCP client quota (tcp-clients), but fail if we're over quota.
++ */
++ result = tcpconn_init(client, false);
++ if (result != ISC_R_SUCCESS) {
++ bool exit;
++
++ ns_client_log(client, NS_LOGCATEGORY_CLIENT,
++ NS_LOGMODULE_CLIENT, ISC_LOG_WARNING,
++ "TCP client quota reached: %s",
++ isc_result_totext(result));
++
++ /*
++ * We have exceeded the system-wide TCP client quota. But,
++ * we can't just block this accept in all cases, because if
++ * we did, a heavy TCP load on other interfaces might cause
++ * this interface to be starved, with no clients able to
++ * accept new connections.
++ *
++ * So, we check here to see if any other clients are
++ * already servicing TCP queries on this interface (whether
++ * accepting, reading, or processing). If we find that at
++ * least one client other than this one is active, then
++ * it's okay *not* to call accept - we can let this
++ * client go inactive and another will take over when it's
++ * done.
++ *
++ * If there aren't enough active clients on the interface,
++ * then we can be a little bit flexible about the quota.
++ * We'll allow *one* extra client through to ensure we're
++ * listening on every interface; we do this by setting the
++ * 'force' option to tcpconn_init().
++ *
++ * (Note: In practice this means that the real TCP client
++ * quota is tcp-clients plus the number of listening
++ * interfaces plus 1.)
++ */
++ exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) >
++ (client->tcpactive ? 1 : 0));
++ if (exit) {
++ client->newstate = NS_CLIENTSTATE_INACTIVE;
++ (void)exit_check(client);
++ return;
++ }
++
++ result = tcpconn_init(client, true);
++ RUNTIME_CHECK(result == ISC_R_SUCCESS);
++ }
++
++ /*
++ * If this client was set up using get_client() or get_worker(),
++ * then TCP is already marked active. However, if it was restarted
++ * from exit_check(), it might not be, so we take care of it now.
++ */
++ mark_tcp_active(client, true);
++
+ result = isc_socket_accept(client->tcplistener, client->task,
+ client_newconn, client);
+ if (result != ISC_R_SUCCESS) {
+- UNEXPECTED_ERROR(__FILE__, __LINE__,
+- "isc_socket_accept() failed: %s",
+- isc_result_totext(result));
+ /*
+ * XXXRTH What should we do? We're trying to accept but
+ * it didn't work. If we just give up, then TCP
+@@ -3289,13 +3498,37 @@ client_accept(ns_client_t *client) {
+ *
+ * For now, we just go idle.
+ */
++ UNEXPECTED_ERROR(__FILE__, __LINE__,
++ "isc_socket_accept() failed: %s",
++ isc_result_totext(result));
++
++ tcpconn_detach(client);
++ mark_tcp_active(client, false);
+ return;
+ }
++
++ /*
++ * The client's 'naccepts' counter indicates that this client has
++ * called accept() and is waiting for a new connection. It should
++ * never exceed 1.
++ */
+ INSIST(client->naccepts == 0);
+ client->naccepts++;
+- LOCK(&client->interface->lock);
+- client->interface->ntcpcurrent++;
+- UNLOCK(&client->interface->lock);
++
++ /*
++ * The interface's 'ntcpaccepting' counter is incremented when
++ * any client calls accept(), and decremented in client_newconn()
++ * once the connection is established.
++ *
++ * When the client object is shutting down after handling a TCP
++ * request (see exit_check()), if this value is at least one, that
++ * means another client has called accept() and is waiting to
++ * establish the next connection. That means the client may be
++ * be free to become inactive; otherwise it may need to start
++ * listening for connections itself to prevent the interface
++ * going dead.
++ */
++ isc_atomic_xadd(&client->interface->ntcpaccepting, 1);
+ }
+
+ static void
+@@ -3366,15 +3599,17 @@ ns_client_replace(ns_client_t *client) {
+ REQUIRE(client->manager != NULL);
+
+ tcp = TCP_CLIENT(client);
+- if (tcp && client->pipelined) {
++ if (tcp && client->tcpconn != NULL && client->tcpconn->pipelined) {
+ result = get_worker(client->manager, client->interface,
+- client->tcpsocket);
++ client->tcpsocket, client);
+ } else {
+ result = get_client(client->manager, client->interface,
+ client->dispatch, tcp);
++
+ }
+- if (result != ISC_R_SUCCESS)
++ if (result != ISC_R_SUCCESS) {
+ return (result);
++ }
+
+ /*
+ * The responsibility for listening for new requests is hereby
+@@ -3560,9 +3795,12 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ client->dscp = ifp->dscp;
+
+ if (tcp) {
++ mark_tcp_active(client, true);
++
+ client->attributes |= NS_CLIENTATTR_TCP;
+ isc_socket_attach(ifp->tcpsocket,
+ &client->tcplistener);
++
+ } else {
+ isc_socket_t *sock;
+
+@@ -3580,7 +3818,8 @@ get_client(ns_clientmgr_t *manager, ns_interface_t *ifp,
+ }
+
+ static isc_result_t
+-get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
++get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock,
++ ns_client_t *oldclient)
+ {
+ isc_result_t result = ISC_R_SUCCESS;
+ isc_event_t *ev;
+@@ -3588,6 +3827,7 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
+ MTRACE("get worker");
+
+ REQUIRE(manager != NULL);
++ REQUIRE(oldclient != NULL);
+
+ if (manager->exiting)
+ return (ISC_R_SHUTTINGDOWN);
+@@ -3620,14 +3860,15 @@ get_worker(ns_clientmgr_t *manager, ns_interface_t *ifp, isc_socket_t *sock)
+ ns_interface_attach(ifp, &client->interface);
+ client->newstate = client->state = NS_CLIENTSTATE_WORKING;
+ INSIST(client->recursionquota == NULL);
+- client->tcpquota = &ns_g_server->tcpquota;
+
+ client->dscp = ifp->dscp;
+
+ client->attributes |= NS_CLIENTATTR_TCP;
+- client->pipelined = true;
+ client->mortal = true;
+
++ tcpconn_attach(oldclient, client);
++ mark_tcp_active(client, true);
++
+ isc_socket_attach(ifp->tcpsocket, &client->tcplistener);
+ isc_socket_attach(sock, &client->tcpsocket);
+ isc_socket_setname(client->tcpsocket, "worker-tcp", NULL);
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index b23a7b1..969ee4c 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -9,8 +9,6 @@
+ * information regarding copyright ownership.
+ */
+
+-/* $Id: client.h,v 1.96 2012/01/31 23:47:31 tbox Exp $ */
+-
+ #ifndef NAMED_CLIENT_H
+ #define NAMED_CLIENT_H 1
+
+@@ -80,6 +78,13 @@
+ *** Types
+ ***/
+
++/*% reference-counted TCP connection object */
++typedef struct ns_tcpconn {
++ isc_refcount_t refs;
++ isc_quota_t *tcpquota;
++ bool pipelined;
++} ns_tcpconn_t;
++
+ /*% nameserver client structure */
+ struct ns_client {
+ unsigned int magic;
+@@ -94,7 +99,8 @@ struct ns_client {
+ int nupdates;
+ int nctls;
+ int references;
+- bool needshutdown; /*
++ bool tcpactive;
++ bool needshutdown; /*
+ * Used by clienttest to get
+ * the client to go from
+ * inactive to free state
+@@ -130,10 +136,9 @@ struct ns_client {
+ isc_stdtime_t now;
+ isc_time_t tnow;
+ dns_name_t signername; /*%< [T]SIG key name */
+- dns_name_t * signer; /*%< NULL if not valid sig */
+- bool mortal; /*%< Die after handling request */
+- bool pipelined; /*%< TCP queries not in sequence */
+- isc_quota_t *tcpquota;
++ dns_name_t *signer; /*%< NULL if not valid sig */
++ bool mortal; /*%< Die after handling request */
++ ns_tcpconn_t *tcpconn;
+ isc_quota_t *recursionquota;
+ ns_interface_t *interface;
+
+@@ -143,8 +148,8 @@ struct ns_client {
+ isc_sockaddr_t destsockaddr;
+
+ isc_netaddr_t ecs_addr; /*%< EDNS client subnet */
+- uint8_t ecs_addrlen;
+- uint8_t ecs_scope;
++ uint8_t ecs_addrlen;
++ uint8_t ecs_scope;
+
+ struct in6_pktinfo pktinfo;
+ isc_dscp_t dscp;
+diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h
+index 7d1883e..3535ef2 100644
+--- a/bin/named/include/named/interfacemgr.h
++++ b/bin/named/include/named/interfacemgr.h
+@@ -9,8 +9,6 @@
+ * information regarding copyright ownership.
+ */
+
+-/* $Id: interfacemgr.h,v 1.35 2011/07/28 23:47:58 tbox Exp $ */
+-
+ #ifndef NAMED_INTERFACEMGR_H
+ #define NAMED_INTERFACEMGR_H 1
+
+@@ -77,9 +75,14 @@ struct ns_interface {
+ /*%< UDP dispatchers. */
+ isc_socket_t * tcpsocket; /*%< TCP socket. */
+ isc_dscp_t dscp; /*%< "listen-on" DSCP value */
+- int ntcptarget; /*%< Desired number of concurrent
+- TCP accepts */
+- int ntcpcurrent; /*%< Current ditto, locked */
++ int32_t ntcpaccepting; /*%< Number of clients
++ ready to accept new
++ TCP connections on this
++ interface */
++ int32_t ntcpactive; /*%< Number of clients
++ servicing TCP queries
++ (whether accepting or
++ connected) */
+ int nudpdispatch; /*%< Number of UDP dispatches */
+ ns_clientmgr_t * clientmgr; /*%< Client manager. */
+ ISC_LINK(ns_interface_t) link;
+diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c
+index 419927b..d9f6df5 100644
+--- a/bin/named/interfacemgr.c
++++ b/bin/named/interfacemgr.c
+@@ -386,8 +386,9 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr,
+ * connections will be handled in parallel even though there is
+ * only one client initially.
+ */
+- ifp->ntcptarget = 1;
+- ifp->ntcpcurrent = 0;
++ ifp->ntcpaccepting = 0;
++ ifp->ntcpactive = 0;
++
+ ifp->nudpdispatch = 0;
+
+ ifp->dscp = -1;
+@@ -522,9 +523,7 @@ ns_interface_accepttcp(ns_interface_t *ifp) {
+ */
+ (void)isc_socket_filter(ifp->tcpsocket, "dataready");
+
+- result = ns_clientmgr_createclients(ifp->clientmgr,
+- ifp->ntcptarget, ifp,
+- true);
++ result = ns_clientmgr_createclients(ifp->clientmgr, 1, ifp, true);
+ if (result != ISC_R_SUCCESS) {
+ UNEXPECTED_ERROR(__FILE__, __LINE__,
+ "TCP ns_clientmgr_createclients(): %s",
+diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
+index 719b074..4b36bd0 100644
+--- a/doc/arm/Bv9ARM-book.xml
++++ b/doc/arm/Bv9ARM-book.xml
+@@ -8487,7 +8487,8 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
+ <para>
+ The number of file descriptors reserved for TCP, stdio,
+ etc. This needs to be big enough to cover the number of
+- interfaces <command>named</command> listens on, <command>tcp-clients</command> as well as
++ interfaces <command>named</command> listens on plus
++ <command>tcp-clients</command>, as well as
+ to provide room for outgoing TCP queries and incoming zone
+ transfers. The default is <literal>512</literal>.
+ The minimum value is <literal>128</literal> and the
+diff --git a/lib/isc/include/isc/quota.h b/lib/isc/include/isc/quota.h
+index b9bf598..36c5830 100644
+--- a/lib/isc/include/isc/quota.h
++++ b/lib/isc/include/isc/quota.h
+@@ -100,6 +100,13 @@ isc_quota_attach(isc_quota_t *quota, isc_quota_t **p);
+ * quota if successful (ISC_R_SUCCESS or ISC_R_SOFTQUOTA).
+ */
+
++isc_result_t
++isc_quota_force(isc_quota_t *quota, isc_quota_t **p);
++/*%<
++ * Like isc_quota_attach, but will attach '*p' to the quota
++ * even if the hard quota has been exceeded.
++ */
++
+ void
+ isc_quota_detach(isc_quota_t **p);
+ /*%<
+diff --git a/lib/isc/quota.c b/lib/isc/quota.c
+index 3ddff0d..556a61f 100644
+--- a/lib/isc/quota.c
++++ b/lib/isc/quota.c
+@@ -74,20 +74,39 @@ isc_quota_release(isc_quota_t *quota) {
+ UNLOCK(&quota->lock);
+ }
+
+-isc_result_t
+-isc_quota_attach(isc_quota_t *quota, isc_quota_t **p)
+-{
++static isc_result_t
++doattach(isc_quota_t *quota, isc_quota_t **p, bool force) {
+ isc_result_t result;
+- INSIST(p != NULL && *p == NULL);
++ REQUIRE(p != NULL && *p == NULL);
++
+ result = isc_quota_reserve(quota);
+- if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA)
++ if (result == ISC_R_SUCCESS || result == ISC_R_SOFTQUOTA) {
++ *p = quota;
++ } else if (result == ISC_R_QUOTA && force) {
++ /* attach anyway */
++ LOCK(&quota->lock);
++ quota->used++;
++ UNLOCK(&quota->lock);
++
+ *p = quota;
++ result = ISC_R_SUCCESS;
++ }
++
+ return (result);
+ }
+
++isc_result_t
++isc_quota_attach(isc_quota_t *quota, isc_quota_t **p) {
++ return (doattach(quota, p, false));
++}
++
++isc_result_t
++isc_quota_force(isc_quota_t *quota, isc_quota_t **p) {
++ return (doattach(quota, p, true));
++}
++
+ void
+-isc_quota_detach(isc_quota_t **p)
+-{
++isc_quota_detach(isc_quota_t **p) {
+ INSIST(p != NULL && *p != NULL);
+ isc_quota_release(*p);
+ *p = NULL;
+diff --git a/lib/isc/win32/libisc.def.in b/lib/isc/win32/libisc.def.in
+index a82face..7b9f23d 100644
+--- a/lib/isc/win32/libisc.def.in
++++ b/lib/isc/win32/libisc.def.in
+@@ -519,6 +519,7 @@ isc_portset_removerange
+ isc_quota_attach
+ isc_quota_destroy
+ isc_quota_detach
++isc_quota_force
+ isc_quota_init
+ isc_quota_max
+ isc_quota_release
diff --git a/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
new file mode 100644
index 0000000..4ce3abe
--- /dev/null
+++ b/debian/patches/0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
@@ -0,0 +1,128 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Wed, 17 Apr 2019 15:22:27 +0200
+Subject: Replace atomic operations in bin/named/client.c with isc_refcount
+ reference counting
+
+---
+ bin/named/client.c | 18 +++++++-----------
+ bin/named/include/named/interfacemgr.h | 5 +++--
+ bin/named/interfacemgr.c | 7 +++++--
+ 3 files changed, 15 insertions(+), 15 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 020603d..8155c6b 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -402,12 +402,10 @@ tcpconn_detach(ns_client_t *client) {
+ static void
+ mark_tcp_active(ns_client_t *client, bool active) {
+ if (active && !client->tcpactive) {
+- isc_atomic_xadd(&client->interface->ntcpactive, 1);
++ isc_refcount_increment0(&client->interface->ntcpactive, NULL);
+ client->tcpactive = active;
+ } else if (!active && client->tcpactive) {
+- uint32_t old =
+- isc_atomic_xadd(&client->interface->ntcpactive, -1);
+- INSIST(old > 0);
++ isc_refcount_decrement(&client->interface->ntcpactive, NULL);
+ client->tcpactive = active;
+ }
+ }
+@@ -554,7 +552,7 @@ exit_check(ns_client_t *client) {
+ if (client->mortal && TCP_CLIENT(client) &&
+ client->newstate != NS_CLIENTSTATE_FREED &&
+ !ns_g_clienttest &&
+- isc_atomic_xadd(&client->interface->ntcpaccepting, 0) == 0)
++ isc_refcount_current(&client->interface->ntcpaccepting) == 0)
+ {
+ /* Nobody else is accepting */
+ client->mortal = false;
+@@ -3317,7 +3315,6 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ isc_result_t result;
+ ns_client_t *client = event->ev_arg;
+ isc_socket_newconnev_t *nevent = (isc_socket_newconnev_t *)event;
+- uint32_t old;
+
+ REQUIRE(event->ev_type == ISC_SOCKEVENT_NEWCONN);
+ REQUIRE(NS_CLIENT_VALID(client));
+@@ -3337,8 +3334,7 @@ client_newconn(isc_task_t *task, isc_event_t *event) {
+ INSIST(client->naccepts == 1);
+ client->naccepts--;
+
+- old = isc_atomic_xadd(&client->interface->ntcpaccepting, -1);
+- INSIST(old > 0);
++ isc_refcount_decrement(&client->interface->ntcpaccepting, NULL);
+
+ /*
+ * We must take ownership of the new socket before the exit
+@@ -3469,8 +3465,8 @@ client_accept(ns_client_t *client) {
+ * quota is tcp-clients plus the number of listening
+ * interfaces plus 1.)
+ */
+- exit = (isc_atomic_xadd(&client->interface->ntcpactive, 0) >
+- (client->tcpactive ? 1 : 0));
++ exit = (isc_refcount_current(&client->interface->ntcpactive) >
++ (client->tcpactive ? 1U : 0U));
+ if (exit) {
+ client->newstate = NS_CLIENTSTATE_INACTIVE;
+ (void)exit_check(client);
+@@ -3528,7 +3524,7 @@ client_accept(ns_client_t *client) {
+ * listening for connections itself to prevent the interface
+ * going dead.
+ */
+- isc_atomic_xadd(&client->interface->ntcpaccepting, 1);
++ isc_refcount_increment0(&client->interface->ntcpaccepting, NULL);
+ }
+
+ static void
+diff --git a/bin/named/include/named/interfacemgr.h b/bin/named/include/named/interfacemgr.h
+index 3535ef2..6e10f21 100644
+--- a/bin/named/include/named/interfacemgr.h
++++ b/bin/named/include/named/interfacemgr.h
+@@ -45,6 +45,7 @@
+ #include <isc/magic.h>
+ #include <isc/mem.h>
+ #include <isc/socket.h>
++#include <isc/refcount.h>
+
+ #include <dns/result.h>
+
+@@ -75,11 +76,11 @@ struct ns_interface {
+ /*%< UDP dispatchers. */
+ isc_socket_t * tcpsocket; /*%< TCP socket. */
+ isc_dscp_t dscp; /*%< "listen-on" DSCP value */
+- int32_t ntcpaccepting; /*%< Number of clients
++ isc_refcount_t ntcpaccepting; /*%< Number of clients
+ ready to accept new
+ TCP connections on this
+ interface */
+- int32_t ntcpactive; /*%< Number of clients
++ isc_refcount_t ntcpactive; /*%< Number of clients
+ servicing TCP queries
+ (whether accepting or
+ connected) */
+diff --git a/bin/named/interfacemgr.c b/bin/named/interfacemgr.c
+index d9f6df5..135533b 100644
+--- a/bin/named/interfacemgr.c
++++ b/bin/named/interfacemgr.c
+@@ -386,8 +386,8 @@ ns_interface_create(ns_interfacemgr_t *mgr, isc_sockaddr_t *addr,
+ * connections will be handled in parallel even though there is
+ * only one client initially.
+ */
+- ifp->ntcpaccepting = 0;
+- ifp->ntcpactive = 0;
++ isc_refcount_init(&ifp->ntcpaccepting, 0);
++ isc_refcount_init(&ifp->ntcpactive, 0);
+
+ ifp->nudpdispatch = 0;
+
+@@ -618,6 +618,9 @@ ns_interface_destroy(ns_interface_t *ifp) {
+
+ ns_interfacemgr_detach(&ifp->mgr);
+
++ isc_refcount_destroy(&ifp->ntcpactive);
++ isc_refcount_destroy(&ifp->ntcpaccepting);
++
+ ifp->magic = 0;
+ isc_mem_put(mctx, ifp, sizeof(*ifp));
+ }
diff --git a/debian/patches/0014-Disable-broken-Ed448-support.patch b/debian/patches/0014-Disable-broken-Ed448-support.patch
new file mode 100644
index 0000000..29c8289
--- /dev/null
+++ b/debian/patches/0014-Disable-broken-Ed448-support.patch
@@ -0,0 +1,508 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Fri, 26 Apr 2019 07:58:26 +0000
+Subject: Disable broken Ed448 support
+
+---
+ config.h.in | 3 -
+ configure | 201 ++++++++++++++++++++++-------------------------------------
+ configure.in | 33 ----------
+ 3 files changed, 75 insertions(+), 162 deletions(-)
+
+diff --git a/config.h.in b/config.h.in
+index b6f1a28..8268259 100644
+--- a/config.h.in
++++ b/config.h.in
+@@ -387,9 +387,6 @@ int sigwait(const unsigned int *set, int *sig);
+ /* Define if your OpenSSL version supports Ed25519. */
+ #undef HAVE_OPENSSL_ED25519
+
+-/* Define if your OpenSSL version supports Ed448. */
+-#undef HAVE_OPENSSL_ED448
+-
+ /* Define if your OpenSSL version supports EVP AES */
+ #undef HAVE_OPENSSL_EVP_AES
+
+diff --git a/configure b/configure
+index 80b8eca..160e996 100755
+--- a/configure
++++ b/configure
+@@ -827,6 +827,7 @@ PKCS11_TEST
+ PKCS11_ED25519
+ PKCS11_GOST
+ PKCS11_ECDSA
++CRYPTO_PK11
+ CRYPTO
+ PKCS11LINKSRCS
+ PKCS11LINKOBJS
+@@ -865,6 +866,7 @@ THREADOPTOBJS
+ ISC_PLATFORM_USETHREADS
+ ALWAYS_DEFINES
+ CHECK_DSA
++DNS_CRYPTO_PK11_LIBS
+ DNS_CRYPTO_LIBS
+ DNS_GSSAPI_LIBS
+ DST_GSSAPI_INC
+@@ -968,6 +970,7 @@ infodir
+ docdir
+ oldincludedir
+ includedir
++runstatedir
+ localstatedir
+ sharedstatedir
+ sysconfdir
+@@ -1129,6 +1132,7 @@ datadir='${datarootdir}'
+ sysconfdir='${prefix}/etc'
+ sharedstatedir='${prefix}/com'
+ localstatedir='${prefix}/var'
++runstatedir='${localstatedir}/run'
+ includedir='${prefix}/include'
+ oldincludedir='/usr/include'
+ docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
+@@ -1381,6 +1385,15 @@ do
+ | -silent | --silent | --silen | --sile | --sil)
+ silent=yes ;;
+
++ -runstatedir | --runstatedir | --runstatedi | --runstated \
++ | --runstate | --runstat | --runsta | --runst | --runs \
++ | --run | --ru | --r)
++ ac_prev=runstatedir ;;
++ -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
++ | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
++ | --run=* | --ru=* | --r=*)
++ runstatedir=$ac_optarg ;;
++
+ -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
+ ac_prev=sbindir ;;
+ -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
+@@ -1518,7 +1531,7 @@ fi
+ for ac_var in exec_prefix prefix bindir sbindir libexecdir datarootdir \
+ datadir sysconfdir sharedstatedir localstatedir includedir \
+ oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
+- libdir localedir mandir
++ libdir localedir mandir runstatedir
+ do
+ eval ac_val=\$$ac_var
+ # Remove trailing slashes.
+@@ -1671,6 +1684,7 @@ Fine tuning of the installation directories:
+ --sysconfdir=DIR read-only single-machine data [PREFIX/etc]
+ --sharedstatedir=DIR modifiable architecture-independent data [PREFIX/com]
+ --localstatedir=DIR modifiable single-machine data [PREFIX/var]
++ --runstatedir=DIR modifiable per-process data [LOCALSTATEDIR/run]
+ --libdir=DIR object code libraries [EPREFIX/lib]
+ --includedir=DIR C header files [PREFIX/include]
+ --oldincludedir=DIR C header files for non-gcc [/usr/include]
+@@ -5037,7 +5051,7 @@ linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
+ lt_cv_deplibs_check_method=pass_all
+ ;;
+
+-netbsd*)
++netbsd* | netbsdelf*-gnu)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
+ lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
+ else
+@@ -5943,11 +5957,8 @@ _LT_EOF
+ test $ac_status = 0; }; then
+ # Now try to grab the symbols.
+ nlist=conftest.nm
+- if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist\""; } >&5
+- (eval $NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) 2>&5
+- ac_status=$?
+- $as_echo "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
+- test $ac_status = 0; } && test -s "$nlist"; then
++ $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
++ if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
+ # Try sorting and uniquifying the output.
+ if sort "$nlist" | uniq > "$nlist"T; then
+ mv -f "$nlist"T "$nlist"
+@@ -8772,6 +8783,9 @@ $as_echo_n "checking whether the $compiler linker ($LD) supports shared librarie
+ openbsd* | bitrig*)
+ with_gnu_ld=no
+ ;;
++ linux* | k*bsd*-gnu | gnu*)
++ link_all_deplibs=no
++ ;;
+ esac
+
+ ld_shlibs=yes
+@@ -9026,7 +9040,7 @@ _LT_EOF
+ fi
+ ;;
+
+- netbsd*)
++ netbsd* | netbsdelf*-gnu)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
+ wlarc=
+@@ -9696,6 +9710,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; }
+ if test yes = "$lt_cv_irix_exported_symbol"; then
+ archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
+ fi
++ link_all_deplibs=no
+ else
+ archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
+ archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
+@@ -9717,7 +9732,7 @@ $as_echo "$lt_cv_irix_exported_symbol" >&6; }
+ esac
+ ;;
+
+- netbsd*)
++ netbsd* | netbsdelf*-gnu)
+ if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
+ archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags' # a.out
+ else
+@@ -10832,6 +10847,18 @@ fi
+ dynamic_linker='GNU/Linux ld.so'
+ ;;
+
++netbsdelf*-gnu)
++ version_type=linux
++ need_lib_prefix=no
++ need_version=no
++ library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}'
++ soname_spec='${libname}${release}${shared_ext}$major'
++ shlibpath_var=LD_LIBRARY_PATH
++ shlibpath_overrides_runpath=no
++ hardcode_into_libs=yes
++ dynamic_linker='NetBSD ld.elf_so'
++ ;;
++
+ netbsd*)
+ version_type=sunos
+ need_lib_prefix=no
+@@ -13427,7 +13454,7 @@ case "$host" in
+ # as it breaks how the two halves (Basic and Advanced) of the IPv6
+ # Socket API were designed to be used but we have to live with it.
+ # Define _GNU_SOURCE to pull in the IPv6 Advanced Socket API.
+- *-linux* | *-kfreebsd*-gnu*)
++ *-linux* | *-kfreebsd*-gnu* | *-gnu*)
+ STD_CDEFINES="$STD_CDEFINES -D_GNU_SOURCE"
+ CPPFLAGS="$CPPFLAGS -D_GNU_SOURCE"
+ ;;
+@@ -15227,6 +15254,7 @@ esac
+
+
+ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_PK11_LIBS"
+
+ #
+ # Applications linking with libdns also need to link with these libraries.
+@@ -15234,6 +15262,7 @@ DNS_CRYPTO_LIBS="$DNS_GSSAPI_LIBS $DNS_CRYPTO_LIBS"
+
+
+
++
+ #
+ # was --with-randomdev specified?
+ #
+@@ -16330,7 +16359,7 @@ fi
+ # LinuxThreads requires some changes to the way we
+ # deal with signals.
+ #
+- *-linux*)
++ *-linux*|*-kfreebsd*-gnu)
+ $as_echo "#define HAVE_LINUXTHREADS 1" >>confdefs.h
+
+ ;;
+@@ -16585,12 +16614,6 @@ fi
+ $as_echo_n "checking for OpenSSL library... " >&6; }
+ OPENSSL_WARNING=
+ openssldirs="/usr /usr/local /usr/local/ssl /usr/pkg /usr/sfw"
+-if test "yes" = "$want_native_pkcs11"
+-then
+- use_openssl="native_pkcs11"
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: use of native PKCS11 instead" >&5
+-$as_echo "use of native PKCS11 instead" >&6; }
+-fi
+
+ if test "auto" = "$use_openssl"
+ then
+@@ -16603,6 +16626,7 @@ then
+ fi
+ done
+ fi
++CRYPTO_PK11=""
+ OPENSSL_ECDSA=""
+ OPENSSL_GOST=""
+ OPENSSL_ED25519=""
+@@ -16625,12 +16649,10 @@ $as_echo "#define PREFER_GOSTASN1 1" >>confdefs.h
+ ;;
+ esac
+
+-case "$use_openssl" in
+- native_pkcs11)
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: disabled because of native PKCS11" >&5
+-$as_echo "disabled because of native PKCS11" >&6; }
++if test "$want_native_pkcs11" = "yes"
++then
+ DST_OPENSSL_INC=""
+- CRYPTO="-DPKCS11CRYPTO"
++ CRYPTO_PK11="-DPKCS11CRYPTO"
+ OPENSSLECDSALINKOBJS=""
+ OPENSSLECDSALINKSRCS=""
+ OPENSSLEDDSALINKOBJS=""
+@@ -16639,7 +16661,9 @@ $as_echo "disabled because of native PKCS11" >&6; }
+ OPENSSLGOSTLINKSRCS=""
+ OPENSSLLINKOBJS=""
+ OPENSSLLINKSRCS=""
+- ;;
++fi
++
++case "$use_openssl" in
+ no)
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+ $as_echo "no" >&6; }
+@@ -16669,12 +16693,6 @@ $as_echo "no" >&6; }
+ If you don't want OpenSSL, use --without-openssl" "$LINENO" 5
+ ;;
+ *)
+- if test "yes" = "$want_native_pkcs11"
+- then
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: " >&5
+-$as_echo "" >&6; }
+- as_fn_error $? "OpenSSL and native PKCS11 cannot be used together." "$LINENO" 5
+- fi
+ if test "yes" = "$use_openssl"
+ then
+ # User did not specify a path - guess it
+@@ -17126,60 +17144,10 @@ fi
+
+ $as_echo "#define HAVE_OPENSSL_ED25519 1" >>confdefs.h
+
+- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL Ed448 support" >&5
+-$as_echo_n "checking for OpenSSL Ed448 support... " >&6; }
+- if test "$cross_compiling" = yes; then :
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: using --with-eddsa" >&5
+-$as_echo "using --with-eddsa" >&6; }
+-else
+- cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+-/* end confdefs.h. */
+-
+-#include <openssl/evp.h>
+-#include <openssl/objects.h>
+-int main() {
+- EVP_PKEY_CTX *ctx;
+-
+- ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL);
+- if (ctx == NULL)
+- return (2);
+- return (0);
+-}
+-
+-_ACEOF
+-if ac_fn_c_try_run "$LINENO"; then :
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+-$as_echo "yes" >&6; }
+- have_ed448="yes"
+-else
+- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+-$as_echo "no" >&6; }
+- have_ed448="no"
+-fi
+-rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
+- conftest.$ac_objext conftest.beam conftest.$ac_ext
+-fi
+-
+- case $with_eddsa in
+- all)
+- have_ed448=yes ;;
+- *)
+- ;;
+- esac
+- case $have_ed448 in
+- yes)
+-
+-$as_echo "#define HAVE_OPENSSL_ED448 1" >>confdefs.h
+-
+- ;;
+- *)
+- ;;
+- esac
+ ;;
+ *)
+ ;;
+ esac
+-
+ have_aes="no"
+ { $as_echo "$as_me:${as_lineno-$LINENO}: checking for OpenSSL AES support" >&5
+ $as_echo_n "checking for OpenSSL AES support... " >&6; }
+@@ -17278,6 +17246,7 @@ esac
+
+
+ DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DST_OPENSSL_LIBS"
++DNS_CRYPTO_PK11_LIBS="$DNS_CRYPTO_LIBS"
+
+ ISC_PLATFORM_WANTAES="#undef ISC_PLATFORM_WANTAES"
+ if test "yes" = "$with_aes"
+@@ -17667,6 +17636,7 @@ esac
+
+
+
++
+ # for PKCS11 benchmarks
+
+ have_clock_gt=no
+@@ -18526,51 +18496,6 @@ _ACEOF
+
+ LIBS="-lsocket $LIBS"
+
+-fi
+-
+- { $as_echo "$as_me:${as_lineno-$LINENO}: checking for inet_addr in -lnsl" >&5
+-$as_echo_n "checking for inet_addr in -lnsl... " >&6; }
+-if ${ac_cv_lib_nsl_inet_addr+:} false; then :
+- $as_echo_n "(cached) " >&6
+-else
+- ac_check_lib_save_LIBS=$LIBS
+-LIBS="-lnsl $LIBS"
+-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
+-/* end confdefs.h. */
+-
+-/* Override any GCC internal prototype to avoid an error.
+- Use char because int might match the return type of a GCC
+- builtin and then its argument prototype would still apply. */
+-#ifdef __cplusplus
+-extern "C"
+-#endif
+-char inet_addr ();
+-int
+-main ()
+-{
+-return inet_addr ();
+- ;
+- return 0;
+-}
+-_ACEOF
+-if ac_fn_c_try_link "$LINENO"; then :
+- ac_cv_lib_nsl_inet_addr=yes
+-else
+- ac_cv_lib_nsl_inet_addr=no
+-fi
+-rm -f core conftest.err conftest.$ac_objext \
+- conftest$ac_exeext conftest.$ac_ext
+-LIBS=$ac_check_lib_save_LIBS
+-fi
+-{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_nsl_inet_addr" >&5
+-$as_echo "$ac_cv_lib_nsl_inet_addr" >&6; }
+-if test "x$ac_cv_lib_nsl_inet_addr" = xyes; then :
+- cat >>confdefs.h <<_ACEOF
+-#define HAVE_LIBNSL 1
+-_ACEOF
+-
+- LIBS="-lnsl $LIBS"
+-
+ fi
+
+ ;;
+@@ -24555,7 +24480,7 @@ ac_config_commands="$ac_config_commands chmod"
+ # elsewhere if there's a good reason for doing so.
+ #
+
+-ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/named/Makefile bin/named/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh"
++ac_config_files="$ac_config_files make/Makefile make/mkdep Makefile bin/Makefile bin/check/Makefile bin/confgen/Makefile bin/confgen/unix/Makefile bin/delv/Makefile bin/dig/Makefile bin/dnssec/Makefile bin/dnssec-pkcs11/Makefile bin/named/Makefile bin/named/unix/Makefile bin/named-pkcs11/Makefile bin/named-pkcs11/unix/Makefile bin/nsupdate/Makefile bin/pkcs11/Makefile bin/python/Makefile bin/python/isc/Makefile bin/python/isc/utils.py bin/python/isc/tests/Makefile bin/python/dnssec-checkds.py bin/python/dnssec-coverage.py bin/python/dnssec-keymgr.py bin/python/isc/__init__.py bin/python/isc/checkds.py bin/python/isc/coverage.py bin/python/isc/dnskey.py bin/python/isc/eventlist.py bin/python/isc/keydict.py bin/python/isc/keyevent.py bin/python/isc/keymgr.py bin/python/isc/keyseries.py bin/python/isc/keyzone.py bin/python/isc/policy.py bin/python/isc/rndc.py bin/python/isc/tests/dnskey_test.py bin/python/isc/tests/policy_test.py bin/rndc/Makefile bin/tests/Makefile bin/tests/headerdep_test.sh bin/tests/optional/Makefile bin/tests/pkcs11/Makefile bin/tests/pkcs11/benchmarks/Makefile bin/tests/system/Makefile bin/tests/system/conf.sh bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/dlzs.conf bin/tests/system/dyndb/Makefile bin/tests/system/dyndb/driver/Makefile bin/tests/system/inline/checkdsa.sh bin/tests/system/lwresd/Makefile bin/tests/system/pipelined/Makefile bin/tests/system/rndc/Makefile bin/tests/system/rsabigexponent/Makefile bin/tests/system/tkey/Makefile bin/tests/virtual-time/Makefile bin/tests/virtual-time/conf.sh bin/tools/Makefile contrib/scripts/check-secure-delegation.pl contrib/scripts/zone-edit.sh doc/Makefile doc/arm/Makefile doc/arm/noteversion.xml doc/arm/pkgversion.xml doc/arm/releaseinfo.xml doc/doxygen/Doxyfile doc/doxygen/Makefile doc/doxygen/doxygen-input-filter doc/misc/Makefile doc/tex/Makefile doc/tex/armstyle.sty doc/xsl/Makefile doc/xsl/isc-docbook-chunk.xsl doc/xsl/isc-docbook-html.xsl doc/xsl/isc-manpage.xsl doc/xsl/isc-notes-html.xsl isc-config.sh lib/Makefile lib/bind9/Makefile lib/bind9/include/Makefile lib/bind9/include/bind9/Makefile lib/dns/Makefile lib/dns/include/Makefile lib/dns/include/dns/Makefile lib/dns/include/dst/Makefile lib/dns/tests/Makefile lib/dns-pkcs11/Makefile lib/dns-pkcs11/include/Makefile lib/dns-pkcs11/include/dns/Makefile lib/dns-pkcs11/include/dst/Makefile lib/irs/Makefile lib/irs/include/Makefile lib/irs/include/irs/Makefile lib/irs/include/irs/netdb.h lib/irs/include/irs/platform.h lib/irs/tests/Makefile lib/isc/$arch/Makefile lib/isc/$arch/include/Makefile lib/isc/$arch/include/isc/Makefile lib/isc/$thread_dir/Makefile lib/isc/$thread_dir/include/Makefile lib/isc/$thread_dir/include/isc/Makefile lib/isc/Makefile lib/isc/include/Makefile lib/isc/include/isc/Makefile lib/isc/include/isc/platform.h lib/isc/include/pk11/Makefile lib/isc/include/pkcs11/Makefile lib/isc/tests/Makefile lib/isc/nls/Makefile lib/isc/unix/Makefile lib/isc/unix/include/Makefile lib/isc/unix/include/isc/Makefile lib/isc/unix/include/pkcs11/Makefile lib/isc-pkcs11/$arch/Makefile lib/isc-pkcs11/$arch/include/Makefile lib/isc-pkcs11/$arch/include/isc/Makefile lib/isc-pkcs11/$thread_dir/Makefile lib/isc-pkcs11/$thread_dir/include/Makefile lib/isc-pkcs11/$thread_dir/include/isc/Makefile lib/isc-pkcs11/Makefile lib/isc-pkcs11/include/Makefile lib/isc-pkcs11/include/isc/Makefile lib/isc-pkcs11/include/isc/platform.h lib/isc-pkcs11/include/pk11/Makefile lib/isc-pkcs11/include/pkcs11/Makefile lib/isc-pkcs11/tests/Makefile lib/isc-pkcs11/nls/Makefile lib/isc-pkcs11/unix/Makefile lib/isc-pkcs11/unix/include/Makefile lib/isc-pkcs11/unix/include/isc/Makefile lib/isc-pkcs11/unix/include/pkcs11/Makefile lib/isccc/Makefile lib/isccc/include/Makefile lib/isccc/include/isccc/Makefile lib/isccfg/Makefile lib/isccfg/include/Makefile lib/isccfg/include/isccfg/Makefile lib/isccfg/tests/Makefile lib/lwres/Makefile lib/lwres/include/Makefile lib/lwres/include/lwres/Makefile lib/lwres/include/lwres/netdb.h lib/lwres/include/lwres/platform.h lib/lwres/man/Makefile lib/lwres/tests/Makefile lib/lwres/unix/Makefile lib/lwres/unix/include/Makefile lib/lwres/unix/include/lwres/Makefile lib/samples/Makefile lib/samples/Makefile-postinstall unit/Makefile unit/unittest.sh"
+
+
+ #
+@@ -25567,8 +25492,11 @@ do
+ "bin/delv/Makefile") CONFIG_FILES="$CONFIG_FILES bin/delv/Makefile" ;;
+ "bin/dig/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dig/Makefile" ;;
+ "bin/dnssec/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec/Makefile" ;;
++ "bin/dnssec-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/dnssec-pkcs11/Makefile" ;;
+ "bin/named/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/Makefile" ;;
+ "bin/named/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named/unix/Makefile" ;;
++ "bin/named-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/Makefile" ;;
++ "bin/named-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES bin/named-pkcs11/unix/Makefile" ;;
+ "bin/nsupdate/Makefile") CONFIG_FILES="$CONFIG_FILES bin/nsupdate/Makefile" ;;
+ "bin/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES bin/pkcs11/Makefile" ;;
+ "bin/python/Makefile") CONFIG_FILES="$CONFIG_FILES bin/python/Makefile" ;;
+@@ -25642,6 +25570,10 @@ do
+ "lib/dns/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dns/Makefile" ;;
+ "lib/dns/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/include/dst/Makefile" ;;
+ "lib/dns/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns/tests/Makefile" ;;
++ "lib/dns-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/Makefile" ;;
++ "lib/dns-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/Makefile" ;;
++ "lib/dns-pkcs11/include/dns/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dns/Makefile" ;;
++ "lib/dns-pkcs11/include/dst/Makefile") CONFIG_FILES="$CONFIG_FILES lib/dns-pkcs11/include/dst/Makefile" ;;
+ "lib/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/Makefile" ;;
+ "lib/irs/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/Makefile" ;;
+ "lib/irs/include/irs/Makefile") CONFIG_FILES="$CONFIG_FILES lib/irs/include/irs/Makefile" ;;
+@@ -25666,6 +25598,24 @@ do
+ "lib/isc/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/Makefile" ;;
+ "lib/isc/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/isc/Makefile" ;;
+ "lib/isc/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc/unix/include/pkcs11/Makefile" ;;
++ "lib/isc-pkcs11/$arch/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/Makefile" ;;
++ "lib/isc-pkcs11/$arch/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/Makefile" ;;
++ "lib/isc-pkcs11/$arch/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$arch/include/isc/Makefile" ;;
++ "lib/isc-pkcs11/$thread_dir/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/Makefile" ;;
++ "lib/isc-pkcs11/$thread_dir/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/Makefile" ;;
++ "lib/isc-pkcs11/$thread_dir/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/$thread_dir/include/isc/Makefile" ;;
++ "lib/isc-pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/Makefile" ;;
++ "lib/isc-pkcs11/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/Makefile" ;;
++ "lib/isc-pkcs11/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/Makefile" ;;
++ "lib/isc-pkcs11/include/isc/platform.h") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/isc/platform.h" ;;
++ "lib/isc-pkcs11/include/pk11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pk11/Makefile" ;;
++ "lib/isc-pkcs11/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/include/pkcs11/Makefile" ;;
++ "lib/isc-pkcs11/tests/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/tests/Makefile" ;;
++ "lib/isc-pkcs11/nls/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/nls/Makefile" ;;
++ "lib/isc-pkcs11/unix/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/Makefile" ;;
++ "lib/isc-pkcs11/unix/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/Makefile" ;;
++ "lib/isc-pkcs11/unix/include/isc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/isc/Makefile" ;;
++ "lib/isc-pkcs11/unix/include/pkcs11/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isc-pkcs11/unix/include/pkcs11/Makefile" ;;
+ "lib/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/Makefile" ;;
+ "lib/isccc/include/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/Makefile" ;;
+ "lib/isccc/include/isccc/Makefile") CONFIG_FILES="$CONFIG_FILES lib/isccc/include/isccc/Makefile" ;;
+@@ -26296,7 +26246,6 @@ $as_echo "$as_me: executing $ac_file commands" >&6;}
+ cat <<_LT_EOF >> "$cfgfile"
+ #! $SHELL
+ # Generated automatically by $as_me ($PACKAGE) $VERSION
+-# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`:
+ # NOTE: Changes made to this file will be lost: look at ltmain.sh.
+
+ # Provide generalized library-building support services.
+diff --git a/configure.in b/configure.in
+index f8603b8..324ac97 100644
+--- a/configure.in
++++ b/configure.in
+@@ -1889,43 +1889,10 @@ int main() {
+ OPENSSLEDDSALINKSRCS='${OPENSSLEDDSALINKSRCS}'
+ AC_DEFINE(HAVE_OPENSSL_ED25519, 1,
+ [Define if your OpenSSL version supports Ed25519.])
+- AC_MSG_CHECKING(for OpenSSL Ed448 support)
+- AC_TRY_RUN([
+-#include <openssl/evp.h>
+-#include <openssl/objects.h>
+-int main() {
+- EVP_PKEY_CTX *ctx;
+-
+- ctx = EVP_PKEY_CTX_new_id(NID_ED448, NULL);
+- if (ctx == NULL)
+- return (2);
+- return (0);
+-}
+-],
+- [AC_MSG_RESULT(yes)
+- have_ed448="yes"],
+- [AC_MSG_RESULT(no)
+- have_ed448="no"],
+- [AC_MSG_RESULT(using --with-eddsa)])
+- case $with_eddsa in
+- all)
+- have_ed448=yes ;;
+- *)
+- ;;
+- esac
+- case $have_ed448 in
+- yes)
+- AC_DEFINE(HAVE_OPENSSL_ED448, 1,
+- [Define if your OpenSSL version supports Ed448.])
+- ;;
+- *)
+- ;;
+- esac
+ ;;
+ *)
+ ;;
+ esac
+-
+ have_aes="no"
+ AC_MSG_CHECKING(for OpenSSL AES support)
+ AC_TRY_RUN([
diff --git a/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
new file mode 100644
index 0000000..5b665a9
--- /dev/null
+++ b/debian/patches/0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
@@ -0,0 +1,54 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 19 Mar 2019 14:14:21 +1100
+Subject: move item_out test inside lock in dns_dispatch_getnext()
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/3a9c7bb80d4a609b86427406d9dd783199920b5b
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2019-6471
+Bug-Debian: https://bugs.debian.org/930746
+
+(cherry picked from commit 60c42f849d520564ed42e5ed0ba46b4b69c07712)
+---
+ lib/dns/dispatch.c | 12 ++++++++----
+ 1 file changed, 8 insertions(+), 4 deletions(-)
+
+diff --git a/lib/dns/dispatch.c b/lib/dns/dispatch.c
+index d1e4c16..b5a8f74 100644
+--- a/lib/dns/dispatch.c
++++ b/lib/dns/dispatch.c
+@@ -134,7 +134,7 @@ struct dns_dispentry {
+ isc_task_t *task;
+ isc_taskaction_t action;
+ void *arg;
+- bool item_out;
++ bool item_out;
+ dispsocket_t *dispsocket;
+ ISC_LIST(dns_dispatchevent_t) items;
+ ISC_LINK(dns_dispentry_t) link;
+@@ -3422,13 +3422,14 @@ dns_dispatch_getnext(dns_dispentry_t *resp, dns_dispatchevent_t **sockevent) {
+ disp = resp->disp;
+ REQUIRE(VALID_DISPATCH(disp));
+
+- REQUIRE(resp->item_out == true);
+- resp->item_out = false;
+-
+ ev = *sockevent;
+ *sockevent = NULL;
+
+ LOCK(&disp->lock);
++
++ REQUIRE(resp->item_out == true);
++ resp->item_out = false;
++
+ if (ev->buffer.base != NULL)
+ free_buffer(disp, ev->buffer.base, ev->buffer.length);
+ free_devent(disp, ev);
+@@ -3573,6 +3574,9 @@ dns_dispatch_removeresponse(dns_dispentry_t **resp,
+ isc_task_send(disp->task[0], &disp->ctlevent);
+ }
+
++/*
++ * disp must be locked.
++ */
+ static void
+ do_cancel(dns_dispatch_t *disp) {
+ dns_dispatchevent_t *ev;
diff --git a/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
new file mode 100644
index 0000000..a57296a
--- /dev/null
+++ b/debian/patches/0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
@@ -0,0 +1,117 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Wed, 16 Oct 2019 13:18:48 +0200
+Subject: Set a limit on number of simultaneous pipelined TCP queries
+
+There was no limit on concurrently served queries served over one pipelined TCP
+connection, thus it was possible to send thousands queries over a single TCP
+connection, possibly exhausting the server resources.
+
+(cherry picked from commit efaa67749de825073cd7f19778386d0815c4ce29)
+---
+ bin/named/client.c | 57 ++++++++++++++++++++++++++--------------
+ bin/named/include/named/client.h | 5 +++-
+ 2 files changed, 42 insertions(+), 20 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 8155c6b..30877c5 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -101,7 +101,15 @@
+ #define SEND_BUFFER_SIZE 4096
+ #define RECV_BUFFER_SIZE 4096
+
++#define TCP_CLIENTS_PER_CONN 23
++/*%<
++ * Number of simultaneous ns_clients_t (queries in flight) for one
++ * TCP connection. The number was arbitrarily picked and might be
++ * changed in the future.
++ */
++
+ #ifdef ISC_PLATFORM_USETHREADS
++
+ #define NMCTXS 100
+ /*%<
+ * Number of 'mctx pools' for clients. (Should this be configurable?)
+@@ -337,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) {
+ */
+ tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
+
+- isc_refcount_init(&tconn->refs, 1);
++ isc_refcount_init(&tconn->refs, 1); /* Current client */
+ tconn->tcpquota = quota;
+ quota = NULL;
+ tconn->pipelined = false;
+@@ -2631,28 +2639,39 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ /*
+ * Pipeline TCP query processing.
+ */
+- if (TCP_CLIENT(client) &&
+- client->message->opcode != dns_opcode_query)
+- {
+- client->tcpconn->pipelined = false;
+- }
+- if (TCP_CLIENT(client) && client->tcpconn->pipelined) {
++ if (TCP_CLIENT(client)) {
++ if (client->message->opcode != dns_opcode_query) {
++ client->tcpconn->pipelined = false;
++ }
++
+ /*
+- * We're pipelining. Replace the client; the
+- * replacement can read the TCP socket looking
+- * for new messages and this one can process the
+- * current message asynchronously.
+- *
+- * There will now be at least three clients using this
+- * TCP socket - one accepting new connections,
+- * one reading an existing connection to get new
+- * messages, and one answering the message already
+- * received.
++ * Limit the maximum number of simultaenous pipelined
++ * queries on TCP connection to TCP_CLIENTS_PER_CONN.
+ */
+- result = ns_client_replace(client);
+- if (result != ISC_R_SUCCESS) {
++ if ((isc_refcount_current(&client->tcpconn->refs)
++ > TCP_CLIENTS_PER_CONN))
++ {
+ client->tcpconn->pipelined = false;
+ }
++
++ if (client->tcpconn->pipelined) {
++ /*
++ * We're pipelining. Replace the client; the
++ * replacement can read the TCP socket looking
++ * for new messages and this one can process the
++ * current message asynchronously.
++ *
++ * There will now be at least three clients using this
++ * TCP socket - one accepting new connections,
++ * one reading an existing connection to get new
++ * messages, and one answering the message already
++ * received.
++ */
++ result = ns_client_replace(client);
++ if (result != ISC_R_SUCCESS) {
++ client->tcpconn->pipelined = false;
++ }
++ }
+ }
+
+ dns_opcodestats_increment(ns_g_server->opcodestats,
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index 969ee4c..5ae10ae 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -80,7 +80,10 @@
+
+ /*% reference-counted TCP connection object */
+ typedef struct ns_tcpconn {
+- isc_refcount_t refs;
++ isc_refcount_t refs; /* Number of clients using
++ * this connection. Conn can
++ * be freed if goes to 0
++ */
+ isc_quota_t *tcpquota;
+ bool pipelined;
+ } ns_tcpconn_t;
diff --git a/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
new file mode 100644
index 0000000..4045792
--- /dev/null
+++ b/debian/patches/0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
@@ -0,0 +1,82 @@
+From: =?utf-8?q?Witold_Kr=C4=99cicki?= <wpk@isc.org>
+Date: Wed, 16 Oct 2019 13:18:48 +0200
+Subject: libns: Rename ns_tcpconn refs member to clients
+
+(cherry picked from commit b6d6b50c997b3a00fdde9e0d32c4594ffe94f369)
+---
+ bin/named/client.c | 16 ++++++++--------
+ bin/named/include/named/client.h | 2 +-
+ 2 files changed, 9 insertions(+), 9 deletions(-)
+
+diff --git a/bin/named/client.c b/bin/named/client.c
+index 30877c5..5dc309a 100644
+--- a/bin/named/client.c
++++ b/bin/named/client.c
+@@ -345,7 +345,7 @@ tcpconn_init(ns_client_t *client, bool force) {
+ */
+ tconn = isc_mem_allocate(ns_g_mctx, sizeof(*tconn));
+
+- isc_refcount_init(&tconn->refs, 1); /* Current client */
++ isc_refcount_init(&tconn->clients, 1); /* Current client */
+ tconn->tcpquota = quota;
+ quota = NULL;
+ tconn->pipelined = false;
+@@ -362,14 +362,14 @@ tcpconn_init(ns_client_t *client, bool force) {
+ */
+ static void
+ tcpconn_attach(ns_client_t *source, ns_client_t *target) {
+- int refs;
++ int old_clients;
+
+ REQUIRE(source->tcpconn != NULL);
+ REQUIRE(target->tcpconn == NULL);
+ REQUIRE(source->tcpconn->pipelined);
+
+- isc_refcount_increment(&source->tcpconn->refs, &refs);
+- INSIST(refs > 1);
++ isc_refcount_increment(&source->tcpconn->clients, &old_clients);
++ INSIST(old_clients > 1);
+ target->tcpconn = source->tcpconn;
+ }
+
+@@ -382,15 +382,15 @@ tcpconn_attach(ns_client_t *source, ns_client_t *target) {
+ static void
+ tcpconn_detach(ns_client_t *client) {
+ ns_tcpconn_t *tconn = NULL;
+- int refs;
++ int old_clients;
+
+ REQUIRE(client->tcpconn != NULL);
+
+ tconn = client->tcpconn;
+ client->tcpconn = NULL;
+
+- isc_refcount_decrement(&tconn->refs, &refs);
+- if (refs == 0) {
++ isc_refcount_decrement(&tconn->clients, &old_clients);
++ if (old_clients == 0) {
+ isc_quota_detach(&tconn->tcpquota);
+ isc_mem_free(ns_g_mctx, tconn);
+ }
+@@ -2648,7 +2648,7 @@ client_request(isc_task_t *task, isc_event_t *event) {
+ * Limit the maximum number of simultaenous pipelined
+ * queries on TCP connection to TCP_CLIENTS_PER_CONN.
+ */
+- if ((isc_refcount_current(&client->tcpconn->refs)
++ if ((isc_refcount_current(&client->tcpconn->clients)
+ > TCP_CLIENTS_PER_CONN))
+ {
+ client->tcpconn->pipelined = false;
+diff --git a/bin/named/include/named/client.h b/bin/named/include/named/client.h
+index 5ae10ae..01b6141 100644
+--- a/bin/named/include/named/client.h
++++ b/bin/named/include/named/client.h
+@@ -80,7 +80,7 @@
+
+ /*% reference-counted TCP connection object */
+ typedef struct ns_tcpconn {
+- isc_refcount_t refs; /* Number of clients using
++ isc_refcount_t clients; /* Number of clients using
+ * this connection. Conn can
+ * be freed if goes to 0
+ */
diff --git a/debian/patches/0018-CVE-2020-8616.patch b/debian/patches/0018-CVE-2020-8616.patch
new file mode 100644
index 0000000..1342140
--- /dev/null
+++ b/debian/patches/0018-CVE-2020-8616.patch
@@ -0,0 +1,212 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Thu, 14 May 2020 12:24:03 +0200
+Subject: CVE-2020-8616
+
+---
+ lib/dns/adb.c | 33 ++++++++++++++++------------
+ lib/dns/include/dns/adb.h | 4 ++++
+ lib/dns/resolver.c | 55 +++++++++++++++++++++++++++++++----------------
+ 3 files changed, 60 insertions(+), 32 deletions(-)
+
+diff --git a/lib/dns/adb.c b/lib/dns/adb.c
+index 956f368..55fa416 100644
+--- a/lib/dns/adb.c
++++ b/lib/dns/adb.c
+@@ -404,14 +404,13 @@ static void log_quota(dns_adbentry_t *entry, const char *fmt, ...)
+ */
+ #define FIND_WANTEVENT(fn) (((fn)->options & DNS_ADBFIND_WANTEVENT) != 0)
+ #define FIND_WANTEMPTYEVENT(fn) (((fn)->options & DNS_ADBFIND_EMPTYEVENT) != 0)
+-#define FIND_AVOIDFETCHES(fn) (((fn)->options & DNS_ADBFIND_AVOIDFETCHES) \
+- != 0)
+-#define FIND_STARTATZONE(fn) (((fn)->options & DNS_ADBFIND_STARTATZONE) \
+- != 0)
+-#define FIND_HINTOK(fn) (((fn)->options & DNS_ADBFIND_HINTOK) != 0)
+-#define FIND_GLUEOK(fn) (((fn)->options & DNS_ADBFIND_GLUEOK) != 0)
+-#define FIND_HAS_ADDRS(fn) (!ISC_LIST_EMPTY((fn)->list))
+-#define FIND_RETURNLAME(fn) (((fn)->options & DNS_ADBFIND_RETURNLAME) != 0)
++#define FIND_AVOIDFETCHES(fn) (((fn)->options & DNS_ADBFIND_AVOIDFETCHES) != 0)
++#define FIND_STARTATZONE(fn) (((fn)->options & DNS_ADBFIND_STARTATZONE) != 0)
++#define FIND_HINTOK(fn) (((fn)->options & DNS_ADBFIND_HINTOK) != 0)
++#define FIND_GLUEOK(fn) (((fn)->options & DNS_ADBFIND_GLUEOK) != 0)
++#define FIND_HAS_ADDRS(fn) (!ISC_LIST_EMPTY((fn)->list))
++#define FIND_RETURNLAME(fn) (((fn)->options & DNS_ADBFIND_RETURNLAME) != 0)
++#define FIND_NOFETCH(fn) (((fn)->options & DNS_ADBFIND_NOFETCH) != 0)
+
+ /*
+ * These are currently used on simple unsigned ints, so they are
+@@ -3155,21 +3154,26 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ * Listen to negative cache hints, and don't start
+ * another query.
+ */
+- if (NCACHE_RESULT(result) || AUTH_NX(result))
++ if (NCACHE_RESULT(result) || AUTH_NX(result)) {
+ goto fetch;
++ }
+
+- if (!NAME_FETCH_V6(adbname))
++ if (!NAME_FETCH_V6(adbname)) {
+ wanted_fetches |= DNS_ADBFIND_INET6;
++ }
+ }
+
+ fetch:
+ if ((WANT_INET(wanted_addresses) && NAME_HAS_V4(adbname)) ||
+ (WANT_INET6(wanted_addresses) && NAME_HAS_V6(adbname)))
++ {
+ have_address = true;
+- else
++ } else {
+ have_address = false;
+- if (wanted_fetches != 0 &&
+- ! (FIND_AVOIDFETCHES(find) && have_address)) {
++ }
++ if (wanted_fetches != 0 && !(FIND_AVOIDFETCHES(find) && have_address) &&
++ !FIND_NOFETCH(find))
++ {
+ /*
+ * We're missing at least one address family. Either the
+ * caller hasn't instructed us to avoid fetches, or we don't
+@@ -3177,8 +3181,9 @@ dns_adb_createfind2(dns_adb_t *adb, isc_task_t *task, isc_taskaction_t action,
+ * be acceptable so we have to launch fetches.
+ */
+
+- if (FIND_STARTATZONE(find))
++ if (FIND_STARTATZONE(find)) {
+ start_at_zone = true;
++ }
+
+ /*
+ * Start V4.
+diff --git a/lib/dns/include/dns/adb.h b/lib/dns/include/dns/adb.h
+index ca35bac..3e27c9e 100644
+--- a/lib/dns/include/dns/adb.h
++++ b/lib/dns/include/dns/adb.h
+@@ -207,6 +207,10 @@ struct dns_adbfind {
+ * lame for this query.
+ */
+ #define DNS_ADBFIND_OVERQUOTA 0x00000400
++/*%
++ * Don't perform a fetch even if there are no address records available.
++ */
++#define DNS_ADBFIND_NOFETCH 0x00000800
+
+ /*%
+ * The answers to queries come back as a list of these.
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 1d76504..1e4fcab 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -177,6 +177,14 @@
+ #define DEFAULT_MAX_QUERIES 75
+ #endif
+
++/*
++ * After NS_FAIL_LIMIT attempts to fetch a name server address,
++ * if the number of addresses in the NS RRset exceeds NS_RR_LIMIT,
++ * stop trying to fetch, in order to avoid wasting resources.
++ */
++#define NS_FAIL_LIMIT 4
++#define NS_RR_LIMIT 5
++
+ /* Number of hash buckets for zone counters */
+ #ifndef RES_DOMAIN_BUCKETS
+ #define RES_DOMAIN_BUCKETS 523
+@@ -3089,8 +3097,7 @@ sort_finds(dns_adbfindlist_t *findlist, unsigned int bias) {
+ static void
+ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port,
+ unsigned int options, unsigned int flags, isc_stdtime_t now,
+- bool *overquota, bool *need_alternate)
+-{
++ bool *overquota, bool *need_alternate, unsigned int *no_addresses) {
+ dns_adbaddrinfo_t *ai;
+ dns_adbfind_t *find;
+ dns_resolver_t *res;
+@@ -3178,7 +3185,12 @@ findname(fetchctx_t *fctx, dns_name_t *name, in_port_t port,
+ find->result_v6 != DNS_R_NXDOMAIN) ||
+ (res->dispatches6 == NULL &&
+ find->result_v4 != DNS_R_NXDOMAIN)))
++ {
+ *need_alternate = true;
++ }
++ if (no_addresses != NULL) {
++ (*no_addresses)++;
++ }
+ } else {
+ if ((find->options & DNS_ADBFIND_OVERQUOTA) != 0) {
+ if (overquota != NULL)
+@@ -3229,6 +3241,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ dns_rdata_ns_t ns;
+ bool need_alternate = false;
+ bool all_spilled = true;
++ unsigned int no_addresses = 0;
+
+ FCTXTRACE5("getaddresses", "fctx->depth=", fctx->depth);
+
+@@ -3384,20 +3397,28 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ * Extract the name from the NS record.
+ */
+ result = dns_rdata_tostruct(&rdata, &ns, NULL);
+- if (result != ISC_R_SUCCESS)
++ if (result != ISC_R_SUCCESS) {
+ continue;
++ }
+
+- findname(fctx, &ns.name, 0, stdoptions, 0, now,
+- &overquota, &need_alternate);
++ if (no_addresses > NS_FAIL_LIMIT &&
++ dns_rdataset_count(&fctx->nameservers) > NS_RR_LIMIT)
++ {
++ stdoptions |= DNS_ADBFIND_NOFETCH;
++ }
++ findname(fctx, &ns.name, 0, stdoptions, 0, now, &overquota,
++ &need_alternate, &no_addresses);
+
+- if (!overquota)
++ if (!overquota) {
+ all_spilled = false;
++ }
+
+ dns_rdata_reset(&rdata);
+ dns_rdata_freestruct(&ns);
+ }
+- if (result != ISC_R_NOMORE)
++ if (result != ISC_R_NOMORE) {
+ return (result);
++ }
+
+ /*
+ * Do we need to use 6 to 4?
+@@ -3412,7 +3433,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ if (!a->isaddress) {
+ findname(fctx, &a->_u._n.name, a->_u._n.port,
+ stdoptions, FCTX_ADDRINFO_FORWARDER,
+- now, NULL, NULL);
++ now, NULL, NULL, NULL);
+ continue;
+ }
+ if (isc_sockaddr_pf(&a->_u.addr) != family)
+@@ -3774,16 +3795,14 @@ fctx_try(fetchctx_t *fctx, bool retrying, bool badcache) {
+ }
+ }
+
+- if (dns_name_countlabels(&fctx->domain) > 2) {
+- result = isc_counter_increment(fctx->qc);
+- if (result != ISC_R_SUCCESS) {
+- isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+- DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
+- "exceeded max queries resolving '%s'",
+- fctx->info);
+- fctx_done(fctx, DNS_R_SERVFAIL, __LINE__);
+- return;
+- }
++ result = isc_counter_increment(fctx->qc);
++ if (result != ISC_R_SUCCESS) {
++ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
++ DNS_LOGMODULE_RESOLVER, ISC_LOG_DEBUG(3),
++ "exceeded max queries resolving '%s'",
++ fctx->info);
++ fctx_done(fctx, DNS_R_SERVFAIL, __LINE__);
++ return;
+ }
+
+ bucketnum = fctx->bucketnum;
diff --git a/debian/patches/0019-CVE-2020-8617.patch b/debian/patches/0019-CVE-2020-8617.patch
new file mode 100644
index 0000000..63e84d3
--- /dev/null
+++ b/debian/patches/0019-CVE-2020-8617.patch
@@ -0,0 +1,33 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org>
+Date: Thu, 14 May 2020 12:24:23 +0200
+Subject: CVE-2020-8617
+
+---
+ lib/dns/tsig.c | 7 ++++---
+ 1 file changed, 4 insertions(+), 3 deletions(-)
+
+diff --git a/lib/dns/tsig.c b/lib/dns/tsig.c
+index a94ec69..ff40b99 100644
+--- a/lib/dns/tsig.c
++++ b/lib/dns/tsig.c
+@@ -1422,8 +1422,9 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
+ goto cleanup_context;
+ }
+ msg->verified_sig = 1;
+- } else if (tsig.error != dns_tsigerror_badsig &&
+- tsig.error != dns_tsigerror_badkey) {
++ } else if (!response || (tsig.error != dns_tsigerror_badsig &&
++ tsig.error != dns_tsigerror_badkey))
++ {
+ tsig_log(msg->tsigkey, 2, "signature was empty");
+ return (DNS_R_TSIGVERIFYFAILURE);
+ }
+@@ -1489,7 +1490,7 @@ dns_tsig_verify(isc_buffer_t *source, dns_message_t *msg,
+ }
+ }
+
+- if (tsig.error != dns_rcode_noerror) {
++ if (response && tsig.error != dns_rcode_noerror) {
+ msg->tsigstatus = tsig.error;
+ if (tsig.error == dns_tsigerror_badtime)
+ ret = DNS_R_CLOCKSKEW;
diff --git a/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch
new file mode 100644
index 0000000..5880fd5
--- /dev/null
+++ b/debian/patches/0020-Remove-INSIST-from-from-new_reference.patch
@@ -0,0 +1,568 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 2 Jun 2020 12:38:40 +1000
+Subject: Remove INSIST from from new_reference
+
+RBTDB node can now appear on the deadnodes lists following the changes
+to decrement_reference in 176b23b6cd98e5b58f832902fdbe964ee5f762d0 to
+defer checking of node->down when the tree write lock is not held. The
+node should be unlinked instead.
+
+(cherry picked from commit b8c4efb10fc8ef1489120a8169fea42adf97025e)
+---
+ lib/dns/rbtdb.c | 238 +++++++++++++++++++++++++++++++++-----------------------
+ 1 file changed, 142 insertions(+), 96 deletions(-)
+
+diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
+index 0861139..792c443 100644
+--- a/lib/dns/rbtdb.c
++++ b/lib/dns/rbtdb.c
+@@ -2069,11 +2069,16 @@ delete_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) {
+ * Caller must be holding the node lock.
+ */
+ static inline void
+-new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node) {
++new_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
++ isc_rwlocktype_t locktype) {
+ unsigned int lockrefs, noderefs;
+ isc_refcount_t *lockref;
+
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
++ if (locktype == isc_rwlocktype_write && ISC_LINK_LINKED(node, deadlink))
++ {
++ ISC_LIST_UNLINK(rbtdb->deadnodes[node->locknum], node,
++ deadlink);
++ }
+ dns_rbtnode_refincrement0(node, &noderefs);
+ if (noderefs == 1) { /* this is the first reference to the node */
+ lockref = &rbtdb->node_locks[node->locknum].references;
+@@ -2119,7 +2124,7 @@ cleanup_dead_nodes(dns_rbtdb_t *rbtdb, int bucketnum) {
+ prune_tree, node,
+ sizeof(isc_event_t));
+ if (ev != NULL) {
+- new_reference(rbtdb, node);
++ new_reference(rbtdb, node, isc_rwlocktype_write);
+ db = NULL;
+ attach((dns_db_t *)rbtdb, &db);
+ ev->ev_sender = db;
+@@ -2183,7 +2188,7 @@ reactivate_node(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ cleanup_dead_nodes(rbtdb, node->locknum);
+ }
+
+- new_reference(rbtdb, node);
++ new_reference(rbtdb, node, locktype);
+
+ NODE_WEAKUNLOCK(nodelock, locktype);
+ NODE_STRONGUNLOCK(nodelock);
+@@ -2329,7 +2334,7 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ prune_tree, node,
+ sizeof(isc_event_t));
+ if (ev != NULL) {
+- new_reference(rbtdb, node);
++ new_reference(rbtdb, node, isc_rwlocktype_write);
+ db = NULL;
+ attach((dns_db_t *)rbtdb, &db);
+ ev->ev_sender = db;
+@@ -2361,8 +2366,10 @@ decrement_reference(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ }
+ } else {
+ INSIST(node->data == NULL);
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
+- ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node, deadlink);
++ if (!ISC_LINK_LINKED(node, deadlink)) {
++ ISC_LIST_APPEND(rbtdb->deadnodes[bucket], node,
++ deadlink);
++ }
+ }
+
+ restore_locks:
+@@ -2427,17 +2434,16 @@ prune_tree(isc_task_t *task, isc_event_t *event) {
+
+ /*
+ * We need to gain a reference to the node before
+- * decrementing it in the next iteration. In addition,
+- * if the node is in the dead-nodes list, extract it
+- * from the list beforehand as we do in
+- * reactivate_node().
++ * decrementing it in the next iteration.
+ */
+- if (ISC_LINK_LINKED(parent, deadlink))
++ if (ISC_LINK_LINKED(parent, deadlink)) {
+ ISC_LIST_UNLINK(rbtdb->deadnodes[locknum],
+ parent, deadlink);
+- new_reference(rbtdb, parent);
+- } else
++ }
++ new_reference(rbtdb, parent, isc_rwlocktype_write);
++ } else {
+ parent = NULL;
++ }
+
+ node = parent;
+ } while (node != NULL);
+@@ -3219,7 +3225,7 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ * We increment the reference count on node to ensure that
+ * search->zonecut_rdataset will still be valid later.
+ */
+- new_reference(search->rbtdb, node);
++ new_reference(search->rbtdb, node, isc_rwlocktype_read);
+ search->zonecut = node;
+ search->zonecut_rdataset = found;
+ search->need_cleanup = true;
+@@ -3270,11 +3276,10 @@ zone_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ }
+
+ static inline void
+-bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+- rdatasetheader_t *header, isc_stdtime_t now,
+- dns_rdataset_t *rdataset)
+-{
+- unsigned char *raw; /* RDATASLAB */
++bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node, rdatasetheader_t *header,
++ isc_stdtime_t now, isc_rwlocktype_t locktype,
++ dns_rdataset_t *rdataset) {
++ unsigned char *raw; /* RDATASLAB */
+
+ /*
+ * Caller must be holding the node reader lock.
+@@ -3287,7 +3292,7 @@ bind_rdataset(dns_rbtdb_t *rbtdb, dns_rbtnode_t *node,
+ if (rdataset == NULL)
+ return;
+
+- new_reference(rbtdb, node);
++ new_reference(rbtdb, node, locktype);
+
+ INSIST(rdataset->methods == NULL); /* We must be disassociated. */
+
+@@ -3382,11 +3387,13 @@ setup_delegation(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ NODE_LOCK(&(search->rbtdb->node_locks[node->locknum].lock),
+ isc_rwlocktype_read);
+ bind_rdataset(search->rbtdb, node, search->zonecut_rdataset,
+- search->now, rdataset);
++ search->now, isc_rwlocktype_read, rdataset);
+ if (sigrdataset != NULL && search->zonecut_sigrdataset != NULL)
++ {
+ bind_rdataset(search->rbtdb, node,
+- search->zonecut_sigrdataset,
+- search->now, sigrdataset);
++ search->zonecut_sigrdataset, search->now,
++ isc_rwlocktype_read, sigrdataset);
++ }
+ NODE_UNLOCK(&(search->rbtdb->node_locks[node->locknum].lock),
+ isc_rwlocktype_read);
+ }
+@@ -4045,19 +4052,22 @@ find_closest_nsec(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ foundname, NULL);
+ if (result == ISC_R_SUCCESS) {
+ if (nodep != NULL) {
+- new_reference(search->rbtdb,
+- node);
++ new_reference(
++ search->rbtdb, node,
++ isc_rwlocktype_read);
+ *nodep = node;
+ }
+ bind_rdataset(search->rbtdb, node,
+ found, search->now,
++ isc_rwlocktype_read,
+ rdataset);
+- if (foundsig != NULL)
+- bind_rdataset(search->rbtdb,
+- node,
+- foundsig,
+- search->now,
+- sigrdataset);
++ if (foundsig != NULL) {
++ bind_rdataset(
++ search->rbtdb, node,
++ foundsig, search->now,
++ isc_rwlocktype_read,
++ sigrdataset);
++ }
+ }
+ } else if (found == NULL && foundsig == NULL) {
+ /*
+@@ -4331,7 +4341,8 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ * ensure that search->zonecut_rdataset will
+ * still be valid later.
+ */
+- new_reference(search.rbtdb, node);
++ new_reference(search.rbtdb, node,
++ isc_rwlocktype_read);
+ search.zonecut = node;
+ search.zonecut_rdataset = header;
+ search.zonecut_sigrdataset = NULL;
+@@ -4504,18 +4515,19 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ goto node_exit;
+ }
+ if (nodep != NULL) {
+- new_reference(search.rbtdb, node);
++ new_reference(search.rbtdb, node, isc_rwlocktype_read);
+ *nodep = node;
+ }
+ if ((search.rbtversion->secure == dns_db_secure &&
+ !search.rbtversion->havensec3) ||
+ (search.options & DNS_DBFIND_FORCENSEC) != 0)
+ {
+- bind_rdataset(search.rbtdb, node, nsecheader,
+- 0, rdataset);
+- if (nsecsig != NULL)
+- bind_rdataset(search.rbtdb, node,
+- nsecsig, 0, sigrdataset);
++ bind_rdataset(search.rbtdb, node, nsecheader, 0,
++ isc_rwlocktype_read, rdataset);
++ if (nsecsig != NULL) {
++ bind_rdataset(search.rbtdb, node, nsecsig, 0,
++ isc_rwlocktype_read, sigrdataset);
++ }
+ }
+ if (wild)
+ foundname->attributes |= DNS_NAMEATTR_WILDCARD;
+@@ -4581,18 +4593,21 @@ zone_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ }
+
+ if (nodep != NULL) {
+- if (!at_zonecut)
+- new_reference(search.rbtdb, node);
+- else
++ if (!at_zonecut) {
++ new_reference(search.rbtdb, node, isc_rwlocktype_read);
++ } else {
+ search.need_cleanup = false;
++ }
+ *nodep = node;
+ }
+
+ if (type != dns_rdatatype_any) {
+- bind_rdataset(search.rbtdb, node, found, 0, rdataset);
+- if (foundsig != NULL)
++ bind_rdataset(search.rbtdb, node, found, 0, isc_rwlocktype_read,
++ rdataset);
++ if (foundsig != NULL) {
+ bind_rdataset(search.rbtdb, node, foundsig, 0,
+- sigrdataset);
++ isc_rwlocktype_read, sigrdataset);
++ }
+ }
+
+ if (wild)
+@@ -4762,8 +4777,7 @@ cache_zonecut_callback(dns_rbtnode_t *node, dns_name_t *name, void *arg) {
+ * We increment the reference count on node to ensure that
+ * search->zonecut_rdataset will still be valid later.
+ */
+- new_reference(search->rbtdb, node);
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
++ new_reference(search->rbtdb, node, locktype);
+ search->zonecut = node;
+ search->zonecut_rdataset = dname_header;
+ search->zonecut_sigrdataset = sigdname_header;
+@@ -4869,14 +4883,16 @@ find_deepest_zonecut(rbtdb_search_t *search, dns_rbtnode_t *node,
+ }
+ result = DNS_R_DELEGATION;
+ if (nodep != NULL) {
+- new_reference(search->rbtdb, node);
++ new_reference(search->rbtdb, node, locktype);
+ *nodep = node;
+ }
+ bind_rdataset(search->rbtdb, node, found, search->now,
+- rdataset);
+- if (foundsig != NULL)
++ locktype, rdataset);
++ if (foundsig != NULL) {
+ bind_rdataset(search->rbtdb, node, foundsig,
+- search->now, sigrdataset);
++ search->now, locktype,
++ sigrdataset);
++ }
+ if (need_headerupdate(found, search->now) ||
+ (foundsig != NULL &&
+ need_headerupdate(foundsig, search->now))) {
+@@ -4968,14 +4984,16 @@ find_coveringnsec(rbtdb_search_t *search, dns_dbnode_t **nodep,
+ if (found != NULL) {
+ result = dns_name_concatenate(name, origin,
+ foundname, NULL);
+- if (result != ISC_R_SUCCESS)
++ if (result != ISC_R_SUCCESS) {
+ goto unlock_node;
+- bind_rdataset(search->rbtdb, node, found,
+- now, rdataset);
+- if (foundsig != NULL)
++ }
++ bind_rdataset(search->rbtdb, node, found, now, locktype,
++ rdataset);
++ if (foundsig != NULL) {
+ bind_rdataset(search->rbtdb, node, foundsig,
+- now, sigrdataset);
+- new_reference(search->rbtdb, node);
++ now, locktype, sigrdataset);
++ }
++ new_reference(search->rbtdb, node, locktype);
+ *nodep = node;
+ result = DNS_R_COVERINGNSEC;
+ } else if (!empty_node) {
+@@ -5230,19 +5248,21 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ */
+ if (nsheader != NULL) {
+ if (nodep != NULL) {
+- new_reference(search.rbtdb, node);
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
++ new_reference(search.rbtdb, node, locktype);
+ *nodep = node;
+ }
+ bind_rdataset(search.rbtdb, node, nsheader, search.now,
+- rdataset);
+- if (need_headerupdate(nsheader, search.now))
++ locktype, rdataset);
++ if (need_headerupdate(nsheader, search.now)) {
+ update = nsheader;
++ }
+ if (nssig != NULL) {
+ bind_rdataset(search.rbtdb, node, nssig,
+- search.now, sigrdataset);
+- if (need_headerupdate(nssig, search.now))
++ search.now, locktype,
++ sigrdataset);
++ if (need_headerupdate(nssig, search.now)) {
+ updatesig = nssig;
++ }
+ }
+ result = DNS_R_DELEGATION;
+ goto node_exit;
+@@ -5260,8 +5280,7 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ */
+
+ if (nodep != NULL) {
+- new_reference(search.rbtdb, node);
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
++ new_reference(search.rbtdb, node, locktype);
+ *nodep = node;
+ }
+
+@@ -5290,16 +5309,19 @@ cache_find(dns_db_t *db, dns_name_t *name, dns_dbversion_t *version,
+ }
+
+ if (type != dns_rdatatype_any || result == DNS_R_NCACHENXDOMAIN ||
+- result == DNS_R_NCACHENXRRSET) {
+- bind_rdataset(search.rbtdb, node, found, search.now,
++ result == DNS_R_NCACHENXRRSET)
++ {
++ bind_rdataset(search.rbtdb, node, found, search.now, locktype,
+ rdataset);
+- if (need_headerupdate(found, search.now))
++ if (need_headerupdate(found, search.now)) {
+ update = found;
++ }
+ if (!NEGATIVE(found) && foundsig != NULL) {
+ bind_rdataset(search.rbtdb, node, foundsig, search.now,
+- sigrdataset);
+- if (need_headerupdate(foundsig, search.now))
++ locktype, sigrdataset);
++ if (need_headerupdate(foundsig, search.now)) {
+ updatesig = foundsig;
++ }
+ }
+ }
+
+@@ -5445,15 +5467,16 @@ cache_findzonecut(dns_db_t *db, dns_name_t *name, unsigned int options,
+ }
+
+ if (nodep != NULL) {
+- new_reference(search.rbtdb, node);
+- INSIST(!ISC_LINK_LINKED(node, deadlink));
++ new_reference(search.rbtdb, node, locktype);
+ *nodep = node;
+ }
+
+- bind_rdataset(search.rbtdb, node, found, search.now, rdataset);
+- if (foundsig != NULL)
++ bind_rdataset(search.rbtdb, node, found, search.now, locktype,
++ rdataset);
++ if (foundsig != NULL) {
+ bind_rdataset(search.rbtdb, node, foundsig, search.now,
+- sigrdataset);
++ locktype, sigrdataset);
++ }
+
+ if (need_headerupdate(found, search.now) ||
+ (foundsig != NULL && need_headerupdate(foundsig, search.now))) {
+@@ -5804,10 +5827,12 @@ zone_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ }
+ }
+ if (found != NULL) {
+- bind_rdataset(rbtdb, rbtnode, found, now, rdataset);
+- if (foundsig != NULL)
++ bind_rdataset(rbtdb, rbtnode, found, now, isc_rwlocktype_read,
++ rdataset);
++ if (foundsig != NULL) {
+ bind_rdataset(rbtdb, rbtnode, foundsig, now,
+- sigrdataset);
++ isc_rwlocktype_read, sigrdataset);
++ }
+ }
+
+ NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+@@ -5892,10 +5917,11 @@ cache_findrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ }
+ }
+ if (found != NULL) {
+- bind_rdataset(rbtdb, rbtnode, found, now, rdataset);
+- if (!NEGATIVE(found) && foundsig != NULL)
+- bind_rdataset(rbtdb, rbtnode, foundsig, now,
++ bind_rdataset(rbtdb, rbtnode, found, now, locktype, rdataset);
++ if (!NEGATIVE(found) && foundsig != NULL) {
++ bind_rdataset(rbtdb, rbtnode, foundsig, now, locktype,
+ sigrdataset);
++ }
+ }
+
+ NODE_UNLOCK(lock, locktype);
+@@ -6061,6 +6087,9 @@ resign_insert(dns_rbtdb_t *rbtdb, int idx, rdatasetheader_t *newheader) {
+ return (result);
+ }
+
++/*
++ * node write lock must be held.
++ */
+ static void
+ resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ rdatasetheader_t *header)
+@@ -6073,7 +6102,8 @@ resign_delete(dns_rbtdb_t *rbtdb, rbtdb_version_t *version,
+ header->heap_index);
+ header->heap_index = 0;
+ if (version != NULL) {
+- new_reference(rbtdb, header->node);
++ new_reference(rbtdb, header->node,
++ isc_rwlocktype_write);
+ ISC_LIST_APPEND(version->resigned_list, header, link);
+ }
+ }
+@@ -6095,6 +6125,9 @@ update_recordsandbytes(bool add, rbtdb_version_t *rbtversion,
+ }
+ }
+
++/*
++ * write lock on rbtnode must be held.
++ */
+ static isc_result_t
+ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ rdatasetheader_t *newheader, unsigned int options, bool loading,
+@@ -6218,10 +6251,13 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ free_rdataset(rbtdb,
+ rbtdb->common.mctx,
+ newheader);
+- if (addedrdataset != NULL)
+- bind_rdataset(rbtdb, rbtnode,
+- topheader, now,
+- addedrdataset);
++ if (addedrdataset != NULL) {
++ bind_rdataset(
++ rbtdb, rbtnode,
++ topheader, now,
++ isc_rwlocktype_write,
++ addedrdataset);
++ }
+ return (DNS_R_UNCHANGED);
+ }
+ /*
+@@ -6275,6 +6311,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ if (addedrdataset != NULL)
+ bind_rdataset(rbtdb, rbtnode, header, now,
++ isc_rwlocktype_write,
+ addedrdataset);
+ return (DNS_R_UNCHANGED);
+ }
+@@ -6374,6 +6411,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ if (addedrdataset != NULL)
+ bind_rdataset(rbtdb, rbtnode, header, now,
++ isc_rwlocktype_write,
+ addedrdataset);
+ return (ISC_R_SUCCESS);
+ }
+@@ -6420,6 +6458,7 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ free_rdataset(rbtdb, rbtdb->common.mctx, newheader);
+ if (addedrdataset != NULL)
+ bind_rdataset(rbtdb, rbtnode, header, now,
++ isc_rwlocktype_write,
+ addedrdataset);
+ return (ISC_R_SUCCESS);
+ }
+@@ -6617,8 +6656,10 @@ add32(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion,
+ cname_and_other_data(rbtnode, rbtversion->serial))
+ return (DNS_R_CNAMEANDOTHER);
+
+- if (addedrdataset != NULL)
+- bind_rdataset(rbtdb, rbtnode, newheader, now, addedrdataset);
++ if (addedrdataset != NULL) {
++ bind_rdataset(rbtdb, rbtnode, newheader, now,
++ isc_rwlocktype_write, addedrdataset);
++ }
+
+ return (ISC_R_SUCCESS);
+ }
+@@ -7141,12 +7182,17 @@ subtractrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ result = DNS_R_UNCHANGED;
+ }
+
+- if (result == ISC_R_SUCCESS && newrdataset != NULL)
+- bind_rdataset(rbtdb, rbtnode, newheader, 0, newrdataset);
++ if (result == ISC_R_SUCCESS && newrdataset != NULL) {
++ bind_rdataset(rbtdb, rbtnode, newheader, 0,
++ isc_rwlocktype_write, newrdataset);
++ }
+
+ if (result == DNS_R_NXRRSET && newrdataset != NULL &&
+ (options & DNS_DBSUB_WANTOLD) != 0)
+- bind_rdataset(rbtdb, rbtnode, header, 0, newrdataset);
++ {
++ bind_rdataset(rbtdb, rbtnode, header, 0, isc_rwlocktype_write,
++ newrdataset);
++ }
+
+ unlock:
+ NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+@@ -8057,7 +8103,7 @@ getoriginnode(dns_db_t *db, dns_dbnode_t **nodep) {
+ onode = (dns_rbtnode_t *)rbtdb->origin_node;
+ if (onode != NULL) {
+ NODE_STRONGLOCK(&rbtdb->node_locks[onode->locknum].lock);
+- new_reference(rbtdb, onode);
++ new_reference(rbtdb, onode, isc_rwlocktype_none);
+ NODE_STRONGUNLOCK(&rbtdb->node_locks[onode->locknum].lock);
+
+ *nodep = rbtdb->origin_node;
+@@ -8222,7 +8268,7 @@ getsigningtime(dns_db_t *db, dns_rdataset_t *rdataset,
+ if (header == NULL)
+ goto unlock;
+
+- bind_rdataset(rbtdb, header->node, header, 0, rdataset);
++ bind_rdataset(rbtdb, header->node, header, 0, isc_rwlocktype_read, rdataset);
+
+ if (foundname != NULL)
+ dns_rbt_fullnamefromnode(header->node, foundname);
+@@ -9214,7 +9260,7 @@ rdatasetiter_current(dns_rdatasetiter_t *iterator, dns_rdataset_t *rdataset) {
+ isc_rwlocktype_read);
+
+ bind_rdataset(rbtdb, rbtnode, header, rbtiterator->common.now,
+- rdataset);
++ isc_rwlocktype_read, rdataset);
+
+ NODE_UNLOCK(&rbtdb->node_locks[rbtnode->locknum].lock,
+ isc_rwlocktype_read);
+@@ -9650,7 +9696,7 @@ dbiterator_current(dns_dbiterator_t *iterator, dns_dbnode_t **nodep,
+ result = ISC_R_SUCCESS;
+
+ NODE_STRONGLOCK(&rbtdb->node_locks[node->locknum].lock);
+- new_reference(rbtdb, node);
++ new_reference(rbtdb, node, isc_rwlocktype_none);
+ NODE_STRONGUNLOCK(&rbtdb->node_locks[node->locknum].lock);
+
+ *nodep = rbtdbiter->node;
+@@ -10405,7 +10451,7 @@ expire_header(dns_rbtdb_t *rbtdb, rdatasetheader_t *header,
+ * We first need to gain a new reference to the node to meet a
+ * requirement of decrement_reference().
+ */
+- new_reference(rbtdb, header->node);
++ new_reference(rbtdb, header->node, isc_rwlocktype_write);
+ decrement_reference(rbtdb, header->node, 0,
+ isc_rwlocktype_write,
+ tree_locked ? isc_rwlocktype_write :
diff --git a/debian/patches/0021-Always-keep-a-copy-of-the-message.patch b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch
new file mode 100644
index 0000000..4edc752
--- /dev/null
+++ b/debian/patches/0021-Always-keep-a-copy-of-the-message.patch
@@ -0,0 +1,55 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 15 Jul 2020 16:07:51 +1000
+Subject: Always keep a copy of the message
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/6ed167ad0a647dff20c8cb08c944a7967df2d415
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8622
+
+this allows it to be available even when dns_message_parse()
+returns a error.
+---
+ lib/dns/message.c | 24 +++++++++++++-----------
+ 1 file changed, 13 insertions(+), 11 deletions(-)
+
+diff --git a/lib/dns/message.c b/lib/dns/message.c
+index ac637a2..39ed80f 100644
+--- a/lib/dns/message.c
++++ b/lib/dns/message.c
+@@ -1679,6 +1679,19 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
+ msg->header_ok = 0;
+ msg->question_ok = 0;
+
++ if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0) {
++ isc_buffer_usedregion(&origsource, &msg->saved);
++ } else {
++ msg->saved.length = isc_buffer_usedlength(&origsource);
++ msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
++ if (msg->saved.base == NULL) {
++ return (ISC_R_NOMEMORY);
++ }
++ memmove(msg->saved.base, isc_buffer_base(&origsource),
++ msg->saved.length);
++ msg->free_saved = 1;
++ }
++
+ isc_buffer_remainingregion(source, &r);
+ if (r.length < DNS_MESSAGE_HEADERLEN)
+ return (ISC_R_UNEXPECTEDEND);
+@@ -1754,17 +1767,6 @@ dns_message_parse(dns_message_t *msg, isc_buffer_t *source,
+ }
+
+ truncated:
+- if ((options & DNS_MESSAGEPARSE_CLONEBUFFER) == 0)
+- isc_buffer_usedregion(&origsource, &msg->saved);
+- else {
+- msg->saved.length = isc_buffer_usedlength(&origsource);
+- msg->saved.base = isc_mem_get(msg->mctx, msg->saved.length);
+- if (msg->saved.base == NULL)
+- return (ISC_R_NOMEMORY);
+- memmove(msg->saved.base, isc_buffer_base(&origsource),
+- msg->saved.length);
+- msg->free_saved = 1;
+- }
+
+ if (ret == ISC_R_UNEXPECTEDEND && ignore_tc)
+ return (DNS_R_RECOVERABLE);
diff --git a/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
new file mode 100644
index 0000000..b321616
--- /dev/null
+++ b/debian/patches/0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
@@ -0,0 +1,400 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@isc.org>
+Date: Tue, 21 Jul 2020 14:42:47 +0200
+Subject: Fix crash in pk11_numbits() when native-pkcs11 is used
+
+origin: https://gitlab.isc.org/isc-projects/bind9/commit/8d807cc21655eaa6e6a08afafeec3682c0f3f2ab
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8623
+
+When pk11_numbits() is passed a user provided input that contains all
+zeroes (via crafted DNS message), it would crash with assertion
+failure. Fix that by properly handling such input.
+
+[Salvatore Bonaccorso: Backport to 99.11.5.P4 which does not contain
+9d15323e2484 ("Add small tweaks to the code to fix compilation when ISC
+assertions are disabled")]
+---
+ lib/dns/pkcs11dh_link.c | 15 ++++++--
+ lib/dns/pkcs11dsa_link.c | 8 ++++-
+ lib/dns/pkcs11rsa_link.c | 79 +++++++++++++++++++++++++++++++----------
+ lib/isc/include/pk11/internal.h | 3 +-
+ lib/isc/pk11.c | 60 ++++++++++++++++++++-----------
+ 5 files changed, 121 insertions(+), 44 deletions(-)
+
+diff --git a/lib/dns/pkcs11dh_link.c b/lib/dns/pkcs11dh_link.c
+index e2b60ea..4cd8e32 100644
+--- a/lib/dns/pkcs11dh_link.c
++++ b/lib/dns/pkcs11dh_link.c
+@@ -748,6 +748,7 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ CK_BYTE *prime = NULL, *base = NULL, *pub = NULL;
+ CK_ATTRIBUTE *attr;
+ int special = 0;
++ unsigned int bits;
+ isc_result_t result;
+
+ isc_buffer_remainingregion(data, &r);
+@@ -852,7 +853,11 @@ pkcs11dh_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ pub = r.base;
+ isc_region_consume(&r, publen);
+
+- key->key_size = pk11_numbits(prime, plen_);
++ result = pk11_numbits(prime, plen_, &bits);
++ if (result != ISC_R_SUCCESS) {
++ goto cleanup;
++ }
++ key->key_size = bits;
+
+ dh->repr = (CK_ATTRIBUTE *) isc_mem_get(key->mctx, sizeof(*attr) * 3);
+ if (dh->repr == NULL)
+@@ -1012,6 +1017,7 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ dst_private_t priv;
+ isc_result_t ret;
+ int i;
++ unsigned int bits;
+ pk11_object_t *dh = NULL;
+ CK_ATTRIBUTE *attr;
+ isc_mem_t *mctx;
+@@ -1082,7 +1088,12 @@ pkcs11dh_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+
+ attr = pk11_attribute_bytype(dh, CKA_PRIME);
+ INSIST(attr != NULL);
+- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ return (ISC_R_SUCCESS);
+
+diff --git a/lib/dns/pkcs11dsa_link.c b/lib/dns/pkcs11dsa_link.c
+index 12d707a..24d4c14 100644
+--- a/lib/dns/pkcs11dsa_link.c
++++ b/lib/dns/pkcs11dsa_link.c
+@@ -983,6 +983,7 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ dst_private_t priv;
+ isc_result_t ret;
+ int i;
++ unsigned int bits;
+ pk11_object_t *dsa = NULL;
+ CK_ATTRIBUTE *attr;
+ isc_mem_t *mctx = key->mctx;
+@@ -1072,7 +1073,12 @@ pkcs11dsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+
+ attr = pk11_attribute_bytype(dsa, CKA_PRIME);
+ INSIST(attr != NULL);
+- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ return (ISC_R_SUCCESS);
+
+diff --git a/lib/dns/pkcs11rsa_link.c b/lib/dns/pkcs11rsa_link.c
+index eb782c8..57ee41d 100644
+--- a/lib/dns/pkcs11rsa_link.c
++++ b/lib/dns/pkcs11rsa_link.c
+@@ -330,6 +330,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ key->key_alg == DST_ALG_RSASHA256 ||
+ key->key_alg == DST_ALG_RSASHA512);
+ #endif
++ REQUIRE(maxbits <= RSA_MAX_PUBEXP_BITS);
+
+ /*
+ * Reject incorrect RSA key lengths.
+@@ -373,6 +374,7 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ for (attr = pk11_attribute_first(rsa);
+ attr != NULL;
+ attr = pk11_attribute_next(rsa, attr))
++ {
+ switch (attr->type) {
+ case CKA_MODULUS:
+ INSIST(keyTemplate[5].type == attr->type);
+@@ -393,12 +395,16 @@ pkcs11rsa_createctx_verify(dst_key_t *key, unsigned int maxbits,
+ memmove(keyTemplate[6].pValue, attr->pValue,
+ attr->ulValueLen);
+ keyTemplate[6].ulValueLen = attr->ulValueLen;
+- if (pk11_numbits(attr->pValue,
+- attr->ulValueLen) > maxbits &&
+- maxbits != 0)
++ unsigned int bits;
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen,
++ &bits);
++ if (ret != ISC_R_SUCCESS ||
++ (bits > maxbits && maxbits != 0)) {
+ DST_RET(DST_R_VERIFYFAILURE);
++ }
+ break;
+ }
++ }
+ pk11_ctx->object = CK_INVALID_HANDLE;
+ pk11_ctx->ontoken = false;
+ PK11_RET(pkcs_C_CreateObject,
+@@ -1063,6 +1069,7 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
+ keyTemplate[5].ulValueLen = attr->ulValueLen;
+ break;
+ case CKA_PUBLIC_EXPONENT:
++ unsigned int bits;
+ INSIST(keyTemplate[6].type == attr->type);
+ keyTemplate[6].pValue = isc_mem_get(dctx->mctx,
+ attr->ulValueLen);
+@@ -1071,10 +1078,12 @@ pkcs11rsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
+ memmove(keyTemplate[6].pValue, attr->pValue,
+ attr->ulValueLen);
+ keyTemplate[6].ulValueLen = attr->ulValueLen;
+- if (pk11_numbits(attr->pValue,
+- attr->ulValueLen)
+- > RSA_MAX_PUBEXP_BITS)
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen,
++ &bits);
++ if (ret != ISC_R_SUCCESS || bits > RSA_MAX_PUBEXP_BITS)
++ {
+ DST_RET(DST_R_VERIFYFAILURE);
++ }
+ break;
+ }
+ pk11_ctx->object = CK_INVALID_HANDLE;
+@@ -1451,6 +1460,8 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ CK_BYTE *exponent = NULL, *modulus = NULL;
+ CK_ATTRIBUTE *attr;
+ unsigned int length;
++ unsigned int bits;
++ isc_result_t ret = ISC_R_SUCCESS;
+
+ isc_buffer_remainingregion(data, &r);
+ if (r.length == 0)
+@@ -1468,9 +1479,7 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+
+ if (e_bytes == 0) {
+ if (r.length < 2) {
+- isc_safe_memwipe(rsa, sizeof(*rsa));
+- isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+- return (DST_R_INVALIDPUBLICKEY);
++ DST_RET(DST_R_INVALIDPUBLICKEY);
+ }
+ e_bytes = (*r.base) << 8;
+ isc_region_consume(&r, 1);
+@@ -1479,16 +1488,18 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ }
+
+ if (r.length < e_bytes) {
+- isc_safe_memwipe(rsa, sizeof(*rsa));
+- isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+- return (DST_R_INVALIDPUBLICKEY);
++ DST_RET(DST_R_INVALIDPUBLICKEY);
+ }
+ exponent = r.base;
+ isc_region_consume(&r, e_bytes);
+ modulus = r.base;
+ mod_bytes = r.length;
+
+- key->key_size = pk11_numbits(modulus, mod_bytes);
++ ret = pk11_numbits(modulus, mod_bytes, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ isc_buffer_forward(data, length);
+
+@@ -1538,9 +1549,12 @@ pkcs11rsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
+ rsa->repr,
+ rsa->attrcnt * sizeof(*attr));
+ }
++ ret = ISC_R_NOMEMORY;
++
++ err:
+ isc_safe_memwipe(rsa, sizeof(*rsa));
+ isc_mem_put(key->mctx, rsa, sizeof(*rsa));
+- return (ISC_R_NOMEMORY);
++ return (ret);
+ }
+
+ static isc_result_t
+@@ -1719,6 +1733,7 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
+ pk11_object_t *pubrsa;
+ pk11_context_t *pk11_ctx = NULL;
+ isc_result_t ret;
++ unsigned int bits;
+
+ if (label == NULL)
+ return (DST_R_NOENGINE);
+@@ -1803,7 +1818,11 @@ pkcs11rsa_fetch(dst_key_t *key, const char *engine, const char *label,
+
+ attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ INSIST(attr != NULL);
+- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ return (ISC_R_SUCCESS);
+
+@@ -1889,6 +1908,7 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+ CK_ATTRIBUTE *attr;
+ isc_mem_t *mctx = key->mctx;
+ const char *engine = NULL, *label = NULL;
++ unsigned int bits;
+
+ /* read private key file */
+ ret = dst__privstruct_parse(key, DST_ALG_RSA, lexer, mctx, &priv);
+@@ -2032,12 +2052,22 @@ pkcs11rsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) {
+
+ attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ INSIST(attr != NULL);
+- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
+ INSIST(attr != NULL);
+- if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
++
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ if (bits > RSA_MAX_PUBEXP_BITS) {
+ DST_RET(ISC_R_RANGE);
++ }
+
+ dst__privstruct_free(&priv, mctx);
+ isc_safe_memwipe(&priv, sizeof(priv));
+@@ -2072,6 +2102,7 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
+ pk11_context_t *pk11_ctx = NULL;
+ isc_result_t ret;
+ unsigned int i;
++ unsigned int bits;
+
+ UNUSED(pin);
+
+@@ -2166,12 +2197,22 @@ pkcs11rsa_fromlabel(dst_key_t *key, const char *engine, const char *label,
+
+ attr = pk11_attribute_bytype(rsa, CKA_PUBLIC_EXPONENT);
+ INSIST(attr != NULL);
+- if (pk11_numbits(attr->pValue, attr->ulValueLen) > RSA_MAX_PUBEXP_BITS)
++
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ if (bits > RSA_MAX_PUBEXP_BITS) {
+ DST_RET(ISC_R_RANGE);
++ }
+
+ attr = pk11_attribute_bytype(rsa, CKA_MODULUS);
+ INSIST(attr != NULL);
+- key->key_size = pk11_numbits(attr->pValue, attr->ulValueLen);
++ ret = pk11_numbits(attr->pValue, attr->ulValueLen, &bits);
++ if (ret != ISC_R_SUCCESS) {
++ goto err;
++ }
++ key->key_size = bits;
+
+ pk11_return_session(pk11_ctx);
+ isc_safe_memwipe(pk11_ctx, sizeof(*pk11_ctx));
+diff --git a/lib/isc/include/pk11/internal.h b/lib/isc/include/pk11/internal.h
+index aa8907a..7cc8ec8 100644
+--- a/lib/isc/include/pk11/internal.h
++++ b/lib/isc/include/pk11/internal.h
+@@ -25,7 +25,8 @@ void pk11_mem_put(void *ptr, size_t size);
+
+ CK_SLOT_ID pk11_get_best_token(pk11_optype_t optype);
+
+-unsigned int pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt);
++isc_result_t
++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits);
+
+ CK_ATTRIBUTE *pk11_attribute_first(const pk11_object_t *obj);
+
+diff --git a/lib/isc/pk11.c b/lib/isc/pk11.c
+index c5d2310..b2ab6be 100644
+--- a/lib/isc/pk11.c
++++ b/lib/isc/pk11.c
+@@ -962,13 +962,15 @@ pk11_get_best_token(pk11_optype_t optype) {
+ return (token->slotid);
+ }
+
+-unsigned int
+-pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
++isc_result_t
++pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt, unsigned int *bits) {
+ unsigned int bitcnt, i;
+ CK_BYTE top;
+
+- if (bytecnt == 0)
+- return (0);
++ if (bytecnt == 0) {
++ *bits = 0;
++ return (ISC_R_SUCCESS);
++ }
+ bitcnt = bytecnt * 8;
+ for (i = 0; i < bytecnt; i++) {
+ top = data[i];
+@@ -976,25 +978,41 @@ pk11_numbits(CK_BYTE_PTR data, unsigned int bytecnt) {
+ bitcnt -= 8;
+ continue;
+ }
+- if (top & 0x80)
+- return (bitcnt);
+- if (top & 0x40)
+- return (bitcnt - 1);
+- if (top & 0x20)
+- return (bitcnt - 2);
+- if (top & 0x10)
+- return (bitcnt - 3);
+- if (top & 0x08)
+- return (bitcnt - 4);
+- if (top & 0x04)
+- return (bitcnt - 5);
+- if (top & 0x02)
+- return (bitcnt - 6);
+- if (top & 0x01)
+- return (bitcnt - 7);
++ if (top & 0x80) {
++ *bits = bitcnt;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x40) {
++ *bits = bitcnt - 1;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x20) {
++ *bits = bitcnt - 2;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x10) {
++ *bits = bitcnt - 3;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x08) {
++ *bits = bitcnt - 4;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x04) {
++ *bits = bitcnt - 5;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x02) {
++ *bits = bitcnt - 6;
++ return (ISC_R_SUCCESS);
++ }
++ if (top & 0x01) {
++ *bits = bitcnt - 7;
++ return (ISC_R_SUCCESS);
++ }
+ break;
+ }
+- INSIST(0);
++ return (ISC_R_RANGE);
+ }
+
+ CK_ATTRIBUTE *
diff --git a/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
new file mode 100644
index 0000000..6f2593c
--- /dev/null
+++ b/debian/patches/0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
@@ -0,0 +1,71 @@
+From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org>
+Date: Tue, 23 Apr 2019 14:59:05 +0200
+Subject: Wait more than 1 second for NSEC3 chain changes
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/4e2cc911d2ceb90ec04605451fb1bb518ef75cd0
+
+One second may not be enough for an NSEC3 chain change triggered by an
+UPDATE message to complete. Wait up to 10 seconds when checking whether
+a given NSEC3 chain change is complete in the "nsupdate" system test.
+
+(cherry picked from commit f8746cddbce838fec2a28f00617df6af1319fbc8)
+---
+ bin/tests/system/nsupdate/tests.sh | 30 +++++++++++++++++++++---------
+ 1 file changed, 21 insertions(+), 9 deletions(-)
+
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index 9f26572..c72753b 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -454,18 +454,24 @@ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+
+ n=`expr $n + 1`
+ ret=0
+-echo_i "add a new the NSEC3PARAM via update ($n)"
++echo_i "add a new NSEC3PARAM via update ($n)"
+ $NSUPDATE << EOF
+ server 10.53.0.3 ${PORT}
+ update add nsec3param.test 3600 NSEC3PARAM 1 0 4 -
+ send
+ EOF
+
+-sleep 1
++_ret=1
++for i in 0 1 2 3 4 5 6 7 8 9; do
++ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
++ if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then
++ _ret=0
++ break
++ fi
++ sleep 1
++done
+
+-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+- @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 2" dig.out.ns3.$n > /dev/null || ret=1
++if [ $_ret -ne 0 ]; then ret=1; fi
+ grep "NSEC3PARAM 1 0 4 -" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ if [ $ret != 0 ] ; then echo_i "failed"; status=`expr $ret + $status`; fi
+@@ -480,11 +486,17 @@ update add nsec3param.test 7200 NSEC3PARAM 1 0 5 -
+ send
+ EOF
+
+-sleep 1
++_ret=1
++for i in 0 1 2 3 4 5 6 7 8 9; do
++ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
++ if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then
++ _ret=0
++ break
++ fi
++ sleep 1
++done
+
+-$DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+- @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1
++if [ $_ret -ne 0 ]; then ret=1; fi
+ grep "7200.*NSEC3PARAM 1 0 5 -" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ $JOURNALPRINT ns3/nsec3param.test.db.signed.jnl > jp.out.ns3.$n
diff --git a/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
new file mode 100644
index 0000000..b2e6ac9
--- /dev/null
+++ b/debian/patches/0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
@@ -0,0 +1,27 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 29 Jul 2020 23:36:03 +1000
+Subject: [1/3] Update-policy 'subdomain' was incorrectly treated as 'zonesub'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/e4cccf9668c7adee4724a7649ec64685f82c8677
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+resulting in names outside the specified subdomain having the wrong
+restrictions for the given key.
+---
+ bin/named/zoneconf.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/bin/named/zoneconf.c b/bin/named/zoneconf.c
+index e237bdb..4898447 100644
+--- a/bin/named/zoneconf.c
++++ b/bin/named/zoneconf.c
+@@ -237,7 +237,8 @@ configure_zone_ssutable(const cfg_obj_t *zconfig, dns_zone_t *zone,
+
+ str = cfg_obj_asstring(matchtype);
+ CHECK(dns_ssu_mtypefromstring(str, &mtype));
+- if (mtype == dns_ssumatchtype_subdomain) {
++ if (mtype == dns_ssumatchtype_subdomain &&
++ strcasecmp(str, "zonesub") == 0) {
+ usezone = true;
+ }
+
diff --git a/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch
new file mode 100644
index 0000000..adcc70d
--- /dev/null
+++ b/debian/patches/0025-Add-a-test-for-update-policy-subdomain.patch
@@ -0,0 +1,73 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 29 Jul 2020 23:36:03 +1000
+Subject: [2/3] Add a test for update-policy 'subdomain'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/393e8f643c02215fa4e6d4edf67be7d77085da0e
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+The new test checks that 'update-policy subdomain' is properly enforced.
+---
+ bin/tests/system/nsupdate/ns1/named.conf.in | 6 ++++++
+ bin/tests/system/nsupdate/tests.sh | 25 +++++++++++++++++++++++++
+ 2 files changed, 31 insertions(+)
+
+diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in
+index 1d999ad..87904f4 100644
+--- a/bin/tests/system/nsupdate/ns1/named.conf.in
++++ b/bin/tests/system/nsupdate/ns1/named.conf.in
+@@ -36,6 +36,11 @@ key altkey {
+ secret "1234abcd8765";
+ };
+
++key restricted.example.nil {
++ algorithm hmac-md5;
++ secret "1234abcd8765";
++};
++
+ include "ddns.key";
+
+ zone "example.nil" {
+@@ -45,6 +50,7 @@ zone "example.nil" {
+ check-mx ignore;
+ update-policy {
+ grant ddns-key.example.nil subdomain example.nil ANY;
++ grant restricted.example.nil subdomain restricted.example.nil ANY;
+ };
+ allow-transfer { any; };
+ };
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index c72753b..432240e 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -635,6 +635,31 @@ then
+ echo_i "failed"; status=1
+ fi
+
++n=`expr $n + 1`
++ret=0
++echo_i "check that 'update-policy subdomain' is properly enforced ($n)"
++# "restricted.example.nil" matches "grant ... subdomain restricted.example.nil"
++# and thus this UPDATE should succeed.
++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 || ret=1
++server 10.53.0.1 ${PORT}
++key restricted.example.nil 1234abcd8765
++update add restricted.example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 restricted.example.nil TXT > dig.out.1.test$n || ret=1
++grep "TXT.*everywhere" dig.out.1.test$n > /dev/null || ret=1
++# "example.nil" does not match "grant ... subdomain restricted.example.nil" and
++# thus this UPDATE should fail.
++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 && ret=1
++server 10.53.0.1 ${PORT}
++key restricted.example.nil 1234abcd8765
++update add example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1
++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1
++[ $ret = 0 ] || { echo_i "failed"; status=1; }
++
+ n=`expr $n + 1`
+ ret=0
+ echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)"
diff --git a/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch
new file mode 100644
index 0000000..771c46c
--- /dev/null
+++ b/debian/patches/0026-Add-a-test-for-update-policy-zonesub.patch
@@ -0,0 +1,111 @@
+From: Mark Andrews <marka@isc.org>
+Date: Tue, 4 Aug 2020 11:41:33 +1000
+Subject: [3/3] Add a test for update-policy 'zonesub'
+
+Origin: https://gitlab.isc.org/isc-projects/bind9/commit/58e560beb50873c699f3431cf57e215dc645d7aa
+Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2020-8624
+
+The new test checks that 'update-policy zonesub' is properly enforced.
+---
+ bin/tests/system/nsupdate/ns1/named.conf.in | 6 +++++
+ bin/tests/system/nsupdate/tests.sh | 35 +++++++++++++++++++++++++----
+ 2 files changed, 37 insertions(+), 4 deletions(-)
+
+diff --git a/bin/tests/system/nsupdate/ns1/named.conf.in b/bin/tests/system/nsupdate/ns1/named.conf.in
+index 87904f4..e90907a 100644
+--- a/bin/tests/system/nsupdate/ns1/named.conf.in
++++ b/bin/tests/system/nsupdate/ns1/named.conf.in
+@@ -41,6 +41,11 @@ key restricted.example.nil {
+ secret "1234abcd8765";
+ };
+
++key zonesub-key.example.nil {
++ algorithm hmac-md5;
++ secret "1234subk8765";
++};
++
+ include "ddns.key";
+
+ zone "example.nil" {
+@@ -49,6 +54,7 @@ zone "example.nil" {
+ check-integrity no;
+ check-mx ignore;
+ update-policy {
++ grant zonesub-key.example.nil zonesub TXT;
+ grant ddns-key.example.nil subdomain example.nil ANY;
+ grant restricted.example.nil subdomain restricted.example.nil ANY;
+ };
+diff --git a/bin/tests/system/nsupdate/tests.sh b/bin/tests/system/nsupdate/tests.sh
+index 432240e..f2f26ab 100755
+--- a/bin/tests/system/nsupdate/tests.sh
++++ b/bin/tests/system/nsupdate/tests.sh
+@@ -430,7 +430,7 @@ sleep 1
+ # this also proves that the server is still running.
+ $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec example.\
+ @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 0" dig.out.ns3.$n > /dev/null || ret=1
++grep "ANSWER: 0," dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+
+@@ -447,7 +447,7 @@ sleep 1
+
+ $DIG $DIGOPTS +tcp +noadd +nosea +nostat +noquest +nocmd +norec nsec3param.test.\
+ @10.53.0.3 nsec3param > dig.out.ns3.$n || ret=1
+-grep "ANSWER: 1" dig.out.ns3.$n > /dev/null || ret=1
++grep "ANSWER: 1," dig.out.ns3.$n > /dev/null || ret=1
+ grep "3600.*NSEC3PARAM" dig.out.ns3.$n > /dev/null || ret=1
+ grep "flags:[^;]* aa[ ;]" dig.out.ns3.$n > /dev/null || ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+@@ -464,7 +464,7 @@ EOF
+ _ret=1
+ for i in 0 1 2 3 4 5 6 7 8 9; do
+ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
+- if grep "ANSWER: 2" dig.out.ns3.$n > /dev/null; then
++ if grep "ANSWER: 2," dig.out.ns3.$n > /dev/null; then
+ _ret=0
+ break
+ fi
+@@ -489,7 +489,7 @@ EOF
+ _ret=1
+ for i in 0 1 2 3 4 5 6 7 8 9; do
+ $DIG $DIGOPTS +tcp +norec +time=1 +tries=1 @10.53.0.3 nsec3param.test. NSEC3PARAM > dig.out.ns3.$n || _ret=1
+- if grep "ANSWER: 1" dig.out.ns3.$n > /dev/null; then
++ if grep "ANSWER: 1," dig.out.ns3.$n > /dev/null; then
+ _ret=0
+ break
+ fi
+@@ -660,6 +660,33 @@ $DIG $DIGOPTS +tcp @10.53.0.1 example.nil TXT > dig.out.2.test$n || ret=1
+ grep "TXT.*everywhere" dig.out.2.test$n > /dev/null && ret=1
+ [ $ret = 0 ] || { echo_i "failed"; status=1; }
+
++n=`expr $n + 1`
++ret=0
++echo_i "check that 'update-policy zonesub' is properly enforced ($n)"
++# grant zonesub-key.example.nil zonesub TXT;
++# the A record update should be rejected as it is not in the type list
++$NSUPDATE -d <<END > nsupdate.out1-$n 2>&1 && ret=1
++server 10.53.0.1 ${PORT}
++key zonesub-key.example.nil 1234subk8765
++update add zonesub.example.nil 0 IN A 1.2.3.4
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil A > dig.out.1.test$n || ret=1
++grep "status: REFUSED" nsupdate.out1-$n > /dev/null || ret=1
++grep "ANSWER: 0," dig.out.1.test$n > /dev/null || ret=1
++# the TXT record update should be accepted as it is in the type list
++$NSUPDATE -d <<END > nsupdate.out2-$n 2>&1 || ret=1
++server 10.53.0.1 ${PORT}
++key zonesub-key.example.nil 1234subk8765
++update add zonesub.example.nil 0 IN TXT everywhere.
++send
++END
++$DIG $DIGOPTS +tcp @10.53.0.1 zonesub.example.nil TXT > dig.out.2.test$n || ret=1
++grep "status: REFUSED" nsupdate.out2-$n > /dev/null && ret=1
++grep "ANSWER: 1," dig.out.2.test$n > /dev/null || ret=1
++grep "TXT.*everywhere" dig.out.2.test$n > /dev/null || ret=1
++[ $ret = 0 ] || { echo_i "failed"; status=1; }
++
+ n=`expr $n + 1`
+ ret=0
+ echo_i "check that changes to the DNSKEY RRset TTL do not have side effects ($n)"
diff --git a/debian/patches/0027-CVE-2020-8625.patch b/debian/patches/0027-CVE-2020-8625.patch
new file mode 100644
index 0000000..1e036c8
--- /dev/null
+++ b/debian/patches/0027-CVE-2020-8625.patch
@@ -0,0 +1,25 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Thu, 29 Apr 2021 13:06:03 +0200
+Subject: Buffer overflow in GSSAPI security policy negotiation
+ (CVE-2020-8625)
+
+Origin: vendor
+Forwarded: not-needed
+Last-Update: 2021-02-09
+---
+ lib/dns/spnego.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/dns/spnego.c b/lib/dns/spnego.c
+index ad77f24..28ead69 100644
+--- a/lib/dns/spnego.c
++++ b/lib/dns/spnego.c
+@@ -877,7 +877,7 @@ der_get_oid(const unsigned char *p, size_t len, oid *data, size_t *size) {
+ return (ASN1_OVERRUN);
+ }
+
+- data->components = malloc(len * sizeof(*data->components));
++ data->components = malloc((len + 1) * sizeof(*data->components));
+ if (data->components == NULL) {
+ return (ENOMEM);
+ }
diff --git a/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch
new file mode 100644
index 0000000..b8ed135
--- /dev/null
+++ b/debian/patches/0028-Free-resources-when-gss_accept_sec_context-fails.patch
@@ -0,0 +1,28 @@
+From: =?utf-8?b?TWljaGHFgiBLxJlwaWXFhA==?= <michal@isc.org>
+Date: Thu, 8 Apr 2021 10:33:44 +0200
+Subject: Free resources when gss_accept_sec_context() fails
+
+Even if a call to gss_accept_sec_context() fails, it might still cause a
+GSS-API response token to be allocated and left for the caller to
+release. Make sure the token is released before an early return from
+dst_gssapi_acceptctx().
+
+(cherry picked from commit d954e152d9f2901118b1fe36d3931ec244317fab)
+---
+ lib/dns/gssapictx.c | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/lib/dns/gssapictx.c b/lib/dns/gssapictx.c
+index 8bd99af..6d787d3 100644
+--- a/lib/dns/gssapictx.c
++++ b/lib/dns/gssapictx.c
+@@ -746,6 +746,9 @@ dst_gssapi_acceptctx(gss_cred_id_t cred,
+ default:
+ gss_log(3, "failed gss_accept_sec_context: %s",
+ gss_error_tostring(gret, minor, buf, sizeof(buf)));
++ if (gouttoken.length > 0U) {
++ (void)gss_release_buffer(&minor, &gouttoken);
++ }
+ return (result);
+ }
+
diff --git a/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch
new file mode 100644
index 0000000..5af5d36
--- /dev/null
+++ b/debian/patches/0029-Check-SOA-owner-names-in-zone-transfers.patch
@@ -0,0 +1,40 @@
+From: Mark Andrews <marka@isc.org>
+Date: Wed, 3 Feb 2021 11:10:20 +1100
+Subject: Check SOA owner names in zone transfers
+
+An IXFR containing SOA records with owner names different than the
+transferred zone's origin can result in named serving a version of that
+zone without an SOA record at the apex. This causes a RUNTIME_CHECK
+assertion failure the next time such a zone is refreshed. Fix by
+immediately rejecting a zone transfer (either an incremental or
+non-incremental one) upon detecting an SOA record not placed at the apex
+of the transferred zone.
+---
+ lib/dns/xfrin.c | 14 ++++++++++++++
+ 1 file changed, 14 insertions(+)
+
+diff --git a/lib/dns/xfrin.c b/lib/dns/xfrin.c
+index d39ca26..0baf170 100644
+--- a/lib/dns/xfrin.c
++++ b/lib/dns/xfrin.c
+@@ -477,6 +477,20 @@ xfr_rr(dns_xfrin_ctx_t *xfr, dns_name_t *name, uint32_t ttl,
+ dns_rdatatype_ismeta(rdata->type))
+ FAIL(DNS_R_FORMERR);
+
++ /*
++ * Immediately reject the entire transfer if the RR that is currently
++ * being processed is an SOA record that is not placed at the zone
++ * apex.
++ */
++ if (rdata->type == dns_rdatatype_soa &&
++ !dns_name_equal(&xfr->name, name)) {
++ char namebuf[DNS_NAME_FORMATSIZE];
++ dns_name_format(name, namebuf, sizeof(namebuf));
++ xfrin_log(xfr, ISC_LOG_DEBUG(3), "SOA name mismatch: '%s'",
++ namebuf);
++ FAIL(DNS_R_NOTZONETOP);
++ }
++
+ redo:
+ switch (xfr->state) {
+ case XFRST_SOAQUERY:
diff --git a/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch
new file mode 100644
index 0000000..23a1b29
--- /dev/null
+++ b/debian/patches/0030-Address-inconsistencies-in-checking-added-RRsets.patch
@@ -0,0 +1,46 @@
+From: Mark Andrews <marka@isc.org>
+Date: Fri, 12 Feb 2021 14:51:28 +1100
+Subject: Address inconsistencies in checking added RRsets
+
+loading_addrdataset() rejects SOA RRsets which are not at top of zone.
+addrdataset() should similarly reject such RRsets.
+---
+ lib/dns/rbtdb.c | 12 ++++++++++--
+ 1 file changed, 10 insertions(+), 2 deletions(-)
+
+diff --git a/lib/dns/rbtdb.c b/lib/dns/rbtdb.c
+index 792c443..b1b928c 100644
+--- a/lib/dns/rbtdb.c
++++ b/lib/dns/rbtdb.c
+@@ -117,7 +117,7 @@ struct rbtdb_file_header {
+ /*%
+ * Note that "impmagic" is not the first four bytes of the struct, so
+ * ISC_MAGIC_VALID cannot be used.
+- */
++a */
+ #define VALID_RBTDB(rbtdb) ((rbtdb) != NULL && \
+ (rbtdb)->common.impmagic == RBTDB_MAGIC)
+
+@@ -6806,13 +6806,21 @@ addrdataset(dns_db_t *db, dns_dbnode_t *node, dns_dbversion_t *version,
+ REQUIRE(VALID_RBTDB(rbtdb));
+ INSIST(rbtversion == NULL || rbtversion->rbtdb == rbtdb);
+
+- if (rbtdb->common.methods == &zone_methods)
++ if (rbtdb->common.methods == &zone_methods) {
++ /*
++ * SOA records are only allowed at top of zone.
++ */
++ if (rdataset->type == dns_rdatatype_soa &&
++ node != rbtdb->origin_node) {
++ return (DNS_R_NOTZONETOP);
++ }
+ REQUIRE(((rbtnode->nsec == DNS_RBT_NSEC_NSEC3 &&
+ (rdataset->type == dns_rdatatype_nsec3 ||
+ rdataset->covers == dns_rdatatype_nsec3)) ||
+ (rbtnode->nsec != DNS_RBT_NSEC_NSEC3 &&
+ rdataset->type != dns_rdatatype_nsec3 &&
+ rdataset->covers != dns_rdatatype_nsec3)));
++ }
+
+ if (rbtversion == NULL) {
+ if (now == 0)
diff --git a/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
new file mode 100644
index 0000000..93c75ec
--- /dev/null
+++ b/debian/patches/0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
@@ -0,0 +1,40 @@
+From: Mark Andrews <marka@isc.org>
+Date: Thu, 25 Feb 2021 14:11:05 +1100
+Subject: Unload a zone if a transfer breaks its SOA record
+
+If a zone transfer results in a zone not having any NS records, named
+stops serving it because such a zone is broken. Do the same if an
+incoming zone transfer results in a zone lacking an SOA record at the
+apex or containing more than one SOA record.
+---
+ lib/dns/zone.c | 15 ++++++++++++---
+ 1 file changed, 12 insertions(+), 3 deletions(-)
+
+diff --git a/lib/dns/zone.c b/lib/dns/zone.c
+index 6d4426a..c3c8f94 100644
+--- a/lib/dns/zone.c
++++ b/lib/dns/zone.c
+@@ -15352,11 +15352,20 @@ zone_xfrdone(dns_zone_t *zone, isc_result_t result) {
+ &retry, &expire, &minimum, NULL);
+ ZONEDB_UNLOCK(&zone->dblock, isc_rwlocktype_read);
+ if (result == ISC_R_SUCCESS) {
+- if (soacount != 1)
++ if (soacount != 1) {
+ dns_zone_log(zone, ISC_LOG_ERROR,
+ "transferred zone "
+- "has %d SOA record%s", soacount,
+- (soacount != 0) ? "s" : "");
++ "has %d SOA records",
++ soacount);
++ if (DNS_ZONE_FLAG(zone,
++ DNS_ZONEFLG_HAVETIMERS)) {
++ zone->refresh = DNS_ZONE_DEFAULTREFRESH;
++ zone->retry = DNS_ZONE_DEFAULTRETRY;
++ }
++ DNS_ZONE_CLRFLAG(zone, DNS_ZONEFLG_HAVETIMERS);
++ zone_unload(zone);
++ goto next_master;
++ }
+ if (nscount == 0) {
+ dns_zone_log(zone, ISC_LOG_ERROR,
+ "transferred zone "
diff --git a/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch
new file mode 100644
index 0000000..1b73aad
--- /dev/null
+++ b/debian/patches/0032-Handle-DNAME-lookup-via-itself.patch
@@ -0,0 +1,41 @@
+From: Mark Andrews <marka@isc.org>
+Date: Mon, 1 Mar 2021 16:46:07 +1100
+Subject: Handle DNAME lookup via itself
+
+When answering a query, named should never attempt to add the same RRset
+to the ANSWER section more than once. However, such a situation may
+arise when chasing DNAME records: one of the DNAME records placed in the
+ANSWER section may turn out to be the final answer to a client query,
+but there is no way to know that in advance. Tweak the relevant INSIST
+assertion in query_find() so that it handles this case properly. The
+rdataset is freed later anyway, so there is no need to clean it up
+immediately.
+---
+ bin/named/query.c | 13 ++++++++++---
+ 1 file changed, 10 insertions(+), 3 deletions(-)
+
+diff --git a/bin/named/query.c b/bin/named/query.c
+index f8dbef2..b674b67 100644
+--- a/bin/named/query.c
++++ b/bin/named/query.c
+@@ -9087,10 +9087,17 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype)
+ if (noqname != NULL)
+ query_addnoqnameproof(client, noqname);
+ /*
+- * We shouldn't ever fail to add 'rdataset'
+- * because it's already in the answer.
++ * 'rdataset' will only be non-NULL here if the ANSWER section
++ * of the message to be sent to the client already contains an
++ * RRset with the same owner name and the same type as
++ * 'rdataset'. This should never happen, with one exception:
++ * when chasing DNAME records, one of the DNAME records placed
++ * in the ANSWER section may turn out to be the final answer to
++ * the client's query, but we have no way of knowing that until
++ * now. In such a case, 'rdataset' will be freed later, so we
++ * do not need to free it here.
+ */
+- INSIST(rdataset == NULL);
++ INSIST(rdataset == NULL || qtype == dns_rdatatype_dname);
+ }
+
+ addauth:
diff --git a/debian/patches/0033-Disable-lame-ttl-cache.patch b/debian/patches/0033-Disable-lame-ttl-cache.patch
new file mode 100644
index 0000000..efd2132
--- /dev/null
+++ b/debian/patches/0033-Disable-lame-ttl-cache.patch
@@ -0,0 +1,70 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Fri, 24 Sep 2021 09:35:11 +0200
+Subject: Disable lame-ttl cache
+
+The lame-ttl cache is implemented in ADB as per-server locked
+linked-list "indexed" with <qname,qtype>. This list has to be walked
+every time there's a new query or new record added into the lame cache.
+Determined attacker can use this to degrade performance of the resolver.
+
+Resolver testing has shown that disabling the lame cache has little
+impact on the resolver performance and it's a minimal viable defense
+against this kind of attack.
+---
+ bin/named/config.c | 2 +-
+ bin/named/server.c | 8 ++++++--
+ doc/arm/Bv9ARM-book.xml | 9 +++------
+ 3 files changed, 10 insertions(+), 9 deletions(-)
+
+diff --git a/bin/named/config.c b/bin/named/config.c
+index d22ee4b..ba5fa8a 100644
+--- a/bin/named/config.c
++++ b/bin/named/config.c
+@@ -170,7 +170,7 @@ options {\n\
+ #ifdef HAVE_GEOIP
+ " geoip-use-ecs yes;\n"
+ #endif
+-" lame-ttl 600;\n"
++" lame-ttl 0;\n"
+ #ifdef HAVE_LMDB
+ " lmdb-mapsize 32M;\n"
+ #endif
+diff --git a/bin/named/server.c b/bin/named/server.c
+index 149458e..748a150 100644
+--- a/bin/named/server.c
++++ b/bin/named/server.c
+@@ -3971,8 +3971,12 @@ configure_view(dns_view_t *view, dns_viewlist_t *viewlist,
+ result = ns_config_get(maps, "lame-ttl", &obj);
+ INSIST(result == ISC_R_SUCCESS);
+ lame_ttl = cfg_obj_asuint32(obj);
+- if (lame_ttl > 1800)
+- lame_ttl = 1800;
++ if (lame_ttl > 0) {
++ cfg_obj_log(obj, ns_g_lctx, ISC_LOG_WARNING,
++ "disabling lame cache despite lame-ttl > 0 as it "
++ "may cause performance issues");
++ lame_ttl = 0;
++ }
+ dns_resolver_setlamettl(view->resolver, lame_ttl);
+
+ /*
+diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml
+index 4b36bd0..7852b5a 100644
+--- a/doc/arm/Bv9ARM-book.xml
++++ b/doc/arm/Bv9ARM-book.xml
+@@ -8855,12 +8855,9 @@ avoid-v6-udp-ports { 40000; range 50000 60000; };
+ <term><command>lame-ttl</command></term>
+ <listitem>
+ <para>
+- Sets the number of seconds to cache a
+- lame server indication. 0 disables caching. (This is
+- <emphasis role="bold">NOT</emphasis> recommended.)
+- The default is <literal>600</literal> (10 minutes) and the
+- maximum value is
+- <literal>1800</literal> (30 minutes).
++ This is always set to 0. More information is available
++ in the <link xmlns:xlink="http://www.w3.org/1999/xlink"
++ xlink:href="https://kb.isc.org/docs/cve-2021-25219">security advisory for CVE-2021-25219</link>.
+ </para>
+
+ </listitem>
diff --git a/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch
new file mode 100644
index 0000000..790b7c1
--- /dev/null
+++ b/debian/patches/0034-Enable-lame-response-detection-even-with-disabled-la.patch
@@ -0,0 +1,48 @@
+From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@sury.org>
+Date: Fri, 24 Sep 2021 09:48:50 +0200
+Subject: Enable lame response detection even with disabled lame cache
+
+Previously, when lame cache would be disabled by setting lame-ttl to 0,
+it would also disable lame answer detection. In this commit, we enable
+the lame response detection even when the lame cache is disabled. This
+enables stopping answer processing early rather than going through the
+whole answer processing flow.
+---
+ lib/dns/resolver.c | 22 ++++++++++++----------
+ 1 file changed, 12 insertions(+), 10 deletions(-)
+
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index 1e4fcab..bfc1ae2 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -8323,18 +8323,20 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
+ /*
+ * Is the server lame?
+ */
+- if (res->lame_ttl != 0 && !ISFORWARDER(query->addrinfo) &&
+- is_lame(fctx)) {
++ if (!ISFORWARDER(query->addrinfo) && is_lame(fctx)) {
+ inc_stats(res, dns_resstatscounter_lame);
+ log_lame(fctx, query->addrinfo);
+- result = dns_adb_marklame(fctx->adb, query->addrinfo,
+- &fctx->name, fctx->type,
+- now + res->lame_ttl);
+- if (result != ISC_R_SUCCESS)
+- isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
+- DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR,
+- "could not mark server as lame: %s",
+- isc_result_totext(result));
++ if (res->lame_ttl != 0) {
++ result = dns_adb_marklame(fctx->adb, query->addrinfo,
++ &fctx->name, fctx->type,
++ now + res->lame_ttl);
++ if (result != ISC_R_SUCCESS) {
++ isc_log_write(dns_lctx, DNS_LOGCATEGORY_RESOLVER,
++ DNS_LOGMODULE_RESOLVER, ISC_LOG_ERROR,
++ "could not mark server as lame: %s",
++ isc_result_totext(result));
++ }
++ }
+ broken_server = DNS_R_LAME;
+ keep_trying = true;
+ FCTXTRACE("lame server");
diff --git a/debian/patches/0035-CVE-2021-25220.patch b/debian/patches/0035-CVE-2021-25220.patch
new file mode 100644
index 0000000..48652e1
--- /dev/null
+++ b/debian/patches/0035-CVE-2021-25220.patch
@@ -0,0 +1,203 @@
+From: Debian DNS Team <team+dns@tracker.debian.org>
+Date: Mon, 14 Mar 2022 15:31:10 +0100
+Subject: CVE-2021-25220
+
+---
+ lib/dns/resolver.c | 125 ++++++++++++++++++++++++++++++++++++++++++++++++++---
+ 1 file changed, 120 insertions(+), 5 deletions(-)
+
+diff --git a/lib/dns/resolver.c b/lib/dns/resolver.c
+index bfc1ae2..cabcbdc 100644
+--- a/lib/dns/resolver.c
++++ b/lib/dns/resolver.c
+@@ -68,6 +68,7 @@
+ #include <dns/stats.h>
+ #include <dns/tsig.h>
+ #include <dns/validator.h>
++#include <dns/zone.h>
+
+ #ifdef WANT_QUERYTRACE
+ #define RTRACE(m) isc_log_write(dns_lctx, \
+@@ -314,6 +315,8 @@ struct fetchctx {
+ bool ns_ttl_ok;
+ uint32_t ns_ttl;
+ isc_counter_t * qc;
++ dns_fixedname_t fwdfname;
++ dns_name_t *fwdname;
+
+ /*%
+ * The number of events we're waiting for.
+@@ -3304,6 +3307,7 @@ fctx_getaddresses(fetchctx_t *fctx, bool badcache) {
+ if (result == ISC_R_SUCCESS) {
+ fwd = ISC_LIST_HEAD(forwarders->fwdrs);
+ fctx->fwdpolicy = forwarders->fwdpolicy;
++ dns_name_copy(domain, fctx->fwdname, NULL);
+ if (fctx->fwdpolicy == dns_fwdpolicy_only &&
+ isstrictsubdomain(domain, &fctx->domain)) {
+ fcount_decr(fctx);
+@@ -4334,6 +4338,9 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
+ fctx->restarts = 0;
+ fctx->querysent = 0;
+ fctx->referrals = 0;
++
++ fctx->fwdname = dns_fixedname_initname(&fctx->fwdfname);
++
+ TIME_NOW(&fctx->start);
+ fctx->timeouts = 0;
+ fctx->lamecount = 0;
+@@ -4386,8 +4393,10 @@ fctx_create(dns_resolver_t *res, dns_name_t *name, dns_rdatatype_t type,
+ domain = dns_fixedname_initname(&fixed);
+ result = dns_fwdtable_find2(fctx->res->view->fwdtable, fwdname,
+ domain, &forwarders);
+- if (result == ISC_R_SUCCESS)
++ if (result == ISC_R_SUCCESS) {
+ fctx->fwdpolicy = forwarders->fwdpolicy;
++ dns_name_copy(domain, fctx->fwdname, NULL);
++ }
+
+ if (fctx->fwdpolicy != dns_fwdpolicy_only) {
+ /*
+@@ -6144,6 +6153,107 @@ mark_related(dns_name_t *name, dns_rdataset_t *rdataset,
+ rdataset->attributes |= DNS_RDATASETATTR_EXTERNAL;
+ }
+
++/*
++ * Returns true if 'name' is external to the namespace for which
++ * the server being queried can answer, either because it's not a
++ * subdomain or because it's below a forward declaration or a
++ * locally served zone.
++ */
++static inline bool
++name_external(dns_name_t *name, dns_rdatatype_t type, fetchctx_t *fctx) {
++ isc_result_t result;
++ dns_forwarders_t *forwarders = NULL;
++ dns_fixedname_t fixed, zfixed;
++ dns_name_t *fname = dns_fixedname_initname(&fixed);
++ dns_name_t *zfname = dns_fixedname_initname(&zfixed);
++ dns_name_t *apex = NULL;
++ dns_name_t suffix;
++ dns_zone_t *zone = NULL;
++ unsigned int labels;
++ dns_namereln_t rel;
++
++ apex = ISFORWARDER(fctx->addrinfo) ? fctx->fwdname : &fctx->domain;
++
++ /*
++ * The name is outside the queried namespace.
++ */
++ rel = dns_name_fullcompare(name, apex, &(int){ 0 },
++ &(unsigned int){ 0U });
++ if (rel != dns_namereln_subdomain && rel != dns_namereln_equal) {
++ return (true);
++ }
++
++ /*
++ * If the record lives in the parent zone, adjust the name so we
++ * look for the correct zone or forward clause.
++ */
++ labels = dns_name_countlabels(name);
++ if (dns_rdatatype_atparent(type) && labels > 1U) {
++ dns_name_init(&suffix, NULL);
++ dns_name_getlabelsequence(name, 1, labels - 1, &suffix);
++ name = &suffix;
++ } else if (rel == dns_namereln_equal) {
++ /* If 'name' is 'apex', no further checking is needed. */
++ return (false);
++ }
++
++ /*
++ * If there is a locally served zone between 'apex' and 'name'
++ * then don't cache.
++ */
++ LOCK(&fctx->res->view->lock);
++ if (fctx->res->view->zonetable != NULL) {
++ unsigned int options = DNS_ZTFIND_NOEXACT;
++ result = dns_zt_find(fctx->res->view->zonetable, name, options,
++ zfname, &zone);
++ if (zone != NULL) {
++ dns_zone_detach(&zone);
++ }
++ if (result == ISC_R_SUCCESS || result == DNS_R_PARTIALMATCH) {
++ if (dns_name_fullcompare(zfname, apex, &(int){ 0 },
++ &(unsigned int){ 0U }) ==
++ dns_namereln_subdomain)
++ {
++ UNLOCK(&fctx->res->view->lock);
++ return (true);
++ }
++ }
++ }
++ UNLOCK(&fctx->res->view->lock);
++
++ /*
++ * Look for a forward declaration below 'name'.
++ */
++ result = dns_fwdtable_find2(fctx->res->view->fwdtable, name, fname,
++ &forwarders);
++
++ if (ISFORWARDER(fctx->addrinfo)) {
++ /*
++ * See if the forwarder declaration is better.
++ */
++ if (result == ISC_R_SUCCESS) {
++ return (!dns_name_equal(fname, fctx->fwdname));
++ }
++
++ /*
++ * If the lookup failed, the configuration must have
++ * changed: play it safe and don't cache.
++ */
++ return (true);
++ } else if (result == ISC_R_SUCCESS &&
++ forwarders->fwdpolicy == dns_fwdpolicy_only &&
++ !ISC_LIST_EMPTY(forwarders->fwdrs))
++ {
++ /*
++ * If 'name' is covered by a 'forward only' clause then we
++ * can't cache this repsonse.
++ */
++ return (true);
++ }
++
++ return (false);
++}
++
+ static isc_result_t
+ check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type,
+ dns_section_t section)
+@@ -6170,7 +6280,7 @@ check_section(void *arg, dns_name_t *addname, dns_rdatatype_t type,
+ result = dns_message_findname(fctx->rmessage, section, addname,
+ dns_rdatatype_any, 0, &name, NULL);
+ if (result == ISC_R_SUCCESS) {
+- external = !dns_name_issubdomain(name, &fctx->domain);
++ external = name_external(name, type, fctx);
+ if (type == dns_rdatatype_a) {
+ for (rdataset = ISC_LIST_HEAD(name->list);
+ rdataset != NULL;
+@@ -7018,6 +7128,13 @@ answer_response(fetchctx_t *fctx) {
+ break;
+
+ case dns_namereln_subdomain:
++ /*
++ * Don't accept DNAME from parent namespace.
++ */
++ if (name_external(name, dns_rdatatype_dname, fctx)) {
++ continue;
++ }
++
+ /*
+ * In-scope DNAME records must have at least
+ * as many labels as the domain being queried.
+@@ -7246,11 +7363,9 @@ answer_response(fetchctx_t *fctx) {
+ */
+ result = dns_message_firstname(message, DNS_SECTION_AUTHORITY);
+ while (!done && result == ISC_R_SUCCESS) {
+- bool external;
+ name = NULL;
+ dns_message_currentname(message, DNS_SECTION_AUTHORITY, &name);
+- external = !dns_name_issubdomain(name, &fctx->domain);
+- if (!external) {
++ if (!name_external(name, dns_rdatatype_ns, fctx)) {
+ /*
+ * We expect to find NS or SIG NS rdatasets, and
+ * nothing else.
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..bce493a
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,35 @@
+0001-non-linux.diff
+0002-multiarch.diff
+0003-min-cache-ttl.diff
+0004-library_paths.diff
+0005-resource_missing_include.diff
+0006-prepare_native_pkcs11.diff
+0007-ctxstart_no_sighandling.diff
+0008-reproducible_build.diff
+0009-Add_--install-layout=deb_to_setup.py_call.patch
+0010-skip-rtld-deepbind-for-dyndb.diff
+0011-keymgr-dont-immediately-delete.diff
+0012-CVE-2018-5743-Limiting-simultaneous-TCP-clients-is-i.patch
+0013-Replace-atomic-operations-in-bin-named-client.c-with.patch
+0014-Disable-broken-Ed448-support.patch
+0015-move-item_out-test-inside-lock-in-dns_dispatch_getne.patch
+0016-Set-a-limit-on-number-of-simultaneous-pipelined-TCP-.patch
+0017-libns-Rename-ns_tcpconn-refs-member-to-clients.patch
+0018-CVE-2020-8616.patch
+0019-CVE-2020-8617.patch
+0020-Remove-INSIST-from-from-new_reference.patch
+0021-Always-keep-a-copy-of-the-message.patch
+0022-Fix-crash-in-pk11_numbits-when-native-pkcs11-is-used.patch
+0023-Wait-more-than-1-second-for-NSEC3-chain-changes.patch
+0024-Update-policy-subdomain-was-incorrectly-treated-as-z.patch
+0025-Add-a-test-for-update-policy-subdomain.patch
+0026-Add-a-test-for-update-policy-zonesub.patch
+0027-CVE-2020-8625.patch
+0028-Free-resources-when-gss_accept_sec_context-fails.patch
+0029-Check-SOA-owner-names-in-zone-transfers.patch
+0030-Address-inconsistencies-in-checking-added-RRsets.patch
+0031-Unload-a-zone-if-a-transfer-breaks-its-SOA-record.patch
+0032-Handle-DNAME-lookup-via-itself.patch
+0033-Disable-lame-ttl-cache.patch
+0034-Enable-lame-response-detection-even-with-disabled-la.patch
+0035-CVE-2021-25220.patch
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 0000000..cef83a3
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] templates
diff --git a/debian/po/cs.po b/debian/po/cs.po
new file mode 100644
index 0000000..0f916c8
--- /dev/null
+++ b/debian/po/cs.po
@@ -0,0 +1,67 @@
+# Czech translation of bind9 debconf messages.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Miroslav Kure <kurem@debian.cz>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 14:38+0200\n"
+"Last-Translator: Miroslav Kure <kurem@debian.cz>\n"
+"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Uživatelský účet pro běh daemona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele "
+"„bind“. Pro použití jiného účtu zadejte jeho jméno."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Další spouštěcí parametry pro named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se "
+"mají předat daemonu BINDu9 (named) při každém spuštění."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má se přepsat nastavení v resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal "
+"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální "
+"připojení."
diff --git a/debian/po/da.po b/debian/po/da.po
new file mode 100644
index 0000000..e9a2df1
--- /dev/null
+++ b/debian/po/da.po
@@ -0,0 +1,67 @@
+# Danish translation bind9.
+# Copyright (C) 2010 bind9 & Joe Hansen.
+# This file is distributed under the same license as the bind9 package.
+# Joe Hansen <joedalton2@yahoo.dk>, 2010.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-10-07 17:30+01:00\n"
+"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n"
+"Language-Team: Danish <debian-l10n-danish@lists.debian.org> \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brugerkonto til kørsel af BIND9-dæmonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standarden er at køre BIND9-dæmonen (navngivet) under brugerkontoen »bind«. "
+"For at bruge en anden konto, så indtast venligst et passende brugernavn."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre opstartsindstillinger for navngivet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Angiv venligst eventuelle yderligere indstillinger (udover brugernavnet) som "
+"skal videresendes til BIND9-dæmonen (navngivet) ved opstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal opsætningen af resolv.conf overskrives?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Vælg venligst hvorvidt opløseren skal tvinges til at bruge den lokale BIND9-"
+"dæmon (navngivet), frem for hvad den aktuelle forbindelse anbefaler, når "
+"denne maskine flytter rundt."
diff --git a/debian/po/de.po b/debian/po/de.po
new file mode 100644
index 0000000..b2a18df
--- /dev/null
+++ b/debian/po/de.po
@@ -0,0 +1,84 @@
+# Translation of bind9 debconf templates to German
+# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008.
+# This file is distributed under the same license as the bind9 package.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-16 20:22+0200\n"
+"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n"
+"Language-Team: de <debian-l10n-german@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=iso-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardmig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers "
+"bind betrieben. Um ein anderes Benutzerkonto auszuwhlen, geben Sie bitte "
+"den entsprechenden Benutzernamen ein."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Weitere Optionen fr den Start des Named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Bitte geben Sie hier die zustzlichen Optionen (auer dem Benutzernamen) "
+"ein, die dem Bind9-Daemon (Named) beim Starten bergeben werden sollen."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Bitte whlen Sie aus, ob der Namensauflser (Resolver) dazu gezwungen werden "
+"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen "
+"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird."
+
+#~ msgid "Options that should be passed at startup to bind9"
+#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen"
+
+#~ msgid "which user should bind9 run as?"
+#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?"
+
+#~ msgid ""
+#~ "The default is to start bind9 as bind user, if you would like to change "
+#~ "that, please give here the username as which bind9 should start as."
+#~ msgstr ""
+#~ "Standardmig startet Bind9 unter der Benutzerkennung bind. Falls Sie "
+#~ "dies ndern mchten geben Sie hier bitte den Benutzernamen ein, unter "
+#~ "dessen Kennung Bind9 starten soll."
+
+#~ msgid "Should resolvconf run when bind9 starts up?"
+#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?"
diff --git a/debian/po/es.po b/debian/po/es.po
new file mode 100644
index 0000000..c909428
--- /dev/null
+++ b/debian/po/es.po
@@ -0,0 +1,86 @@
+# bind9 translation to spanish
+# Copyright (C) 2008 Software in the Public Interest
+# This file is distributed under the same license as the bind9 package.
+# Changes:
+# - Initial translation
+# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008
+# Traductores, si no conoce el formato PO, merece la pena leer la
+# documentación de gettext, especialmente las secciones dedicadas a este
+# formato, por ejemplo ejecutando:
+# info -n '(gettext)PO Files'
+# info -n '(gettext)Header Entry'
+# Equipo de traducción al español, por favor lean antes de traducir
+# los siguientes documentos:
+# - El proyecto de traducción de Debian al español
+# http://www.debian.org/intl/spanish
+# especialmente las notas de traducción en
+# http://www.debian.org/intl/spanish/notas
+# - La guía de traducción de po's de debconf:
+# /usr/share/doc/po-debconf/README-trans
+# o http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-08 20:18-0300\n"
+"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n"
+"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Cuenta de usuario que ejecuta el demonio BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es "
+"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de "
+"usuario apropiado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Otras opciones de inicio para «named»:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Ingrese cualquier opción adicional (además del nombre de usuario) que "
+"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del "
+"sistema."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique si se debería forzar al cliente a utilizar el demonio BIND9 "
+"(«named») local en lugar de lo que la conexión actual recomiende, cuando "
+"este equipo este en movimiento."
diff --git a/debian/po/eu.po b/debian/po/eu.po
new file mode 100644
index 0000000..d0d0acf
--- /dev/null
+++ b/debian/po/eu.po
@@ -0,0 +1,68 @@
+# translation of eu.po to Euskara
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Piarres Beobide <pi@beobide.net>, 2009.
+msgid ""
+msgstr ""
+"Project-Id-Version: eu\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2009-02-22 10:36+0100\n"
+"Last-Translator: Piarres Beobide <pi@beobide.net>\n"
+"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 exekutatuko duen erabiltzaile kontua:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin exekutatzea "
+"da. Beste kontu bat erabiltzeko, idatzi dagokion erabiltzaile-izena"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Beste abio aukera batzuek named-rentzat:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera "
+"gehigarriak (erabiltzaile-izenaz beste)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf ezarpenak gainidatzi behar al dira?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala "
+"erabiltzeko ekipo hau mugitzen ari denean konexioak gomendatzen dionaren "
+"ordez."
diff --git a/debian/po/fi.po b/debian/po/fi.po
new file mode 100644
index 0000000..ef9aae0
--- /dev/null
+++ b/debian/po/fi.po
@@ -0,0 +1,64 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-13 08:08-0000\n"
+"Last-Translator: Esko Arajärvi <edu@iki.fi>\n"
+"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n"
+"Language: fi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Finnish\n"
+"X-Poedit-Country: FINLAND\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. "
+"Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ohjelman named muut käynnistysvalitsimet:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-"
+"taustaohjelmalle (named) tulisi antaa käynnistyksessä."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-"
+"taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun "
+"konetta siirrellään eri paikkoihin."
diff --git a/debian/po/fr.po b/debian/po/fr.po
new file mode 100644
index 0000000..757f05d
--- /dev/null
+++ b/debian/po/fr.po
@@ -0,0 +1,69 @@
+# Translation of bind9 debconf templates to French
+# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com>
+# This file is distributed under the same license as the bind9 package.
+# CALARESU Luc <luc.calaresu@gmail.com>, 2008.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 14:26+0200\n"
+"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n"
+"Language-Team: French <debian-l10n-french@lists.debian.org>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Identifiant pour l'exécution du démon de BIND9 :"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant "
+"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez "
+"l'indiquer ici."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Autres options à transmettre pour « named » :"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui "
+"doit être transmise au démarrage du démon de BIND9 (« named »)."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Faut-il écraser les paramètres de resolv.conf ?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local "
+"(« named ») plutôt que les paramètres recommandés pour la connexion "
+"actuelle, lorsque cette machine est déplacée."
diff --git a/debian/po/gl.po b/debian/po/gl.po
new file mode 100644
index 0000000..f299cb3
--- /dev/null
+++ b/debian/po/gl.po
@@ -0,0 +1,66 @@
+# Galician translation of bind9's debconf templates
+# This file is distributed under the same license as the bind9 package.
+# Jacobo Tarrio <jtarrio@debian.org>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:36+0100\n"
+"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n"
+"Language-Team: Galician <proxecto@trasno.net>\n"
+"Language: gl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuario que executa o servizo de BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta "
+"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opcións de inicio para named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban "
+"pasar ao servizo de BIND9 (named) no inicio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "¿Quere substituír a configuración de resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local "
+"(named) no canto do que recomenda a conexión actual, cando esta máquina "
+"estea en movemento."
diff --git a/debian/po/id.po b/debian/po/id.po
new file mode 100644
index 0000000..e389970
--- /dev/null
+++ b/debian/po/id.po
@@ -0,0 +1,51 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Mahyuddin Susanto <udienz@gmail.com>\n"
+"Language-Team: Debian Indonesia Translator <debian-l10n-indonesian@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Indonesian\n"
+"X-Poedit-Country: INDONESIA\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Akun pengguna untuk menjalankan daemon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username."
+msgstr "Bawaan dari daemon BIND9 adalah menjalankan dengan user akun 'bind'. Untuk menggunakan akun berbeda, silakan masukkan nama pengguna yang sesuai."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Opsi lain startup untuk named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup."
+msgstr "Harap menyediakan opsi tambahan (selain nama pengguna) yang digunakan daemon BIND9 untuk startup"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "haruskah resolv.conf ditimpa?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around."
+msgstr "Silakan tentukan resolver mana yang akan digunakan untuk daemon lokal BIND9 (named) dari koneksi sekarang yang digunakan, ketika mesin ini berjalan"
+
diff --git a/debian/po/it.po b/debian/po/it.po
new file mode 100644
index 0000000..2e3ef2e
--- /dev/null
+++ b/debian/po/it.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Alex <animainvendita@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-27 16:10+0200\n"
+"Last-Translator: Alex <animainvendita@gmail.com>\n"
+"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Account utente con cui eseguire il demone BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) "
+"utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account "
+"utente, inserire il nome corrispondente."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Altre opzioni di avvio per named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Inserire qualsiasi opzione addizionale (differente dal nome utente) che "
+"dovrebbe essere inviata al demone BIND9 (named) durante l'avvio."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il "
+"demone BIND9 locale (named) non utilizzando i server raccomandati dalla "
+"connessione attiva."
diff --git a/debian/po/ja.po b/debian/po/ja.po
new file mode 100644
index 0000000..c931748
--- /dev/null
+++ b/debian/po/ja.po
@@ -0,0 +1,66 @@
+# Copyright (C) 2008 LaMont Jones <lamont@debian.org>
+# This file is distributed under the same license as the bind9 package.
+# Hideki Yamane <henrich@debian.or.jp>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-22 00:03+0900\n"
+"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n"
+"Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 デーモンの動作に使うユーザアカウント:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作しま"
+"す。異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "起動時に named に指定するオプション:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを"
+"入力してください。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf の設定を上書きしますか?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うよ"
+"うにするか、現在の接続先で推奨されるネームサーバを使うようにするかを選んでく"
+"ださい。"
diff --git a/debian/po/ko.po b/debian/po/ko.po
new file mode 100644
index 0000000..9da0f6f
--- /dev/null
+++ b/debian/po/ko.po
@@ -0,0 +1,69 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: debconf template\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2011-06-24 18:37+0900\n"
+"Last-Translator: 강민지 <justminji@gmail.com>\n"
+"Language-Team: opensource <justminji@gmail.com>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Poedit-Language: Korean\n"
+"X-Poedit-Country: KOREA, REPUBLIC OF\n"
+"X-Poedit-SourceCharset: utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 데몬을 실행하기 위한 사용자 계정:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"기본값은 '바인드' 사용자 계정에서 BIND9 데몬(지정된 이름)을 실행합니다. 다른 "
+"계정을 사용하려면 해당 사용자 이름을 입력하세요."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "지명된 다른 시작 옵션:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"BIND9 데몬(지정된 이름)이 실행으로 전달되기 위해서 추가옵션(사용자 이름 이외)"
+"을 입력하세요."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "resolv.conf 설정은 재정의 되어야하는가?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"이 기계가 근처로 이동될 때 해결자는 현재의 연결을 권장하는 것보다 로컬 BIND9 "
+"데몬(지정된 이름)을 사용하도록 강요해야하는지 여부를 선택하세요."
diff --git a/debian/po/nb.po b/debian/po/nb.po
new file mode 100644
index 0000000..2d42047
--- /dev/null
+++ b/debian/po/nb.po
@@ -0,0 +1,69 @@
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Bjørn Steensrud <bjornst@skogkatt.homelinux.org>, 2012.
+msgid ""
+msgstr ""
+"Project-Id-Version: \n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2012-01-03 21:33+0100\n"
+"Last-Translator: Bjørn Steensrud <bjornst@skogkatt.homelinux.org>\n"
+"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Language: nb\n"
+"X-Generator: Lokalize 1.2\n"
+"Plural-Forms: nplurals=2; plural=n != 1;\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Brukerkonto for å kjøre BIND9-daemonen:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standard er å kjøre BIND8-daemonen (named) under brukerkontoen «bind». Skriv "
+"inn et passende navn for å bruke en annen konto."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andre oppstartsvalg for named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Skriv inn flere valg (annet enn brukernavn) som skal sendes over til "
+"BIND9-daemonen (named) ved oppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Skal innstillingene i resolv.conf oveerstyres?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Velg om adresseløseren skal tvinges til å bruke den lokale BIND9-daemonen "
+"(named) i stedet for det den gjeldende tilkoblingen anbefaler, når denne "
+"maskinen flyttes omkring."
+
diff --git a/debian/po/nl.po b/debian/po/nl.po
new file mode 100644
index 0000000..b710b34
--- /dev/null
+++ b/debian/po/nl.po
@@ -0,0 +1,72 @@
+# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch
+# translation of bind9 debconf template to Dutch
+# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+#
+# Paul Gevers <paul@climbing.nl>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-09-17 21:15-0500\n"
+"Last-Translator: Paul Gevers <paul@climbing.nl>\n"
+"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n"
+"Language: nl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+"Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de "
+"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier "
+"de geschikte gebruikersnaam invullen."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Andere opstartopties voor 'named':"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het "
+"opstarten meegeven aan 'named', de BIND9 achtergronddienst?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 "
+"achtergronddienst (named), in plaats van de aanbevelingen van de huidige "
+"connectie. Bijvoorbeeld, wanneer deze computer veel verplaatst wordt."
diff --git a/debian/po/pl.po b/debian/po/pl.po
new file mode 100644
index 0000000..9cc79bd
--- /dev/null
+++ b/debian/po/pl.po
@@ -0,0 +1,68 @@
+# debconf templates for bind9 package
+# Polish translation
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+# Łukasz Paździora <lukpaz@gmail.com>, 2008
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-11-24 18:30+0100\n"
+"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n"
+"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n"
+"Language: pl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Konto użytkownika, jako który powinien działać BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. Aby użyć innego "
+"konta podaj inną nazwę użytkownika."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Inne opcje startowe dla named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny "
+"zostać podane demonowi BIND9 (named) przy starcie."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna usługa "
+"BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien korzystać z "
+"zalecanych ustawień aktualnego połączenia."
diff --git a/debian/po/pt.po b/debian/po/pt.po
new file mode 100644
index 0000000..2d3347f
--- /dev/null
+++ b/debian/po/pt.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese
+# Copyright (C) 2008 Américo Monteiro
+# This file is distributed under the same license as the bind9 package.
+#
+# Américo Monteiro <a_monteiro@netcabo.pt>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:55+0100\n"
+"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n"
+"Language-Team: Portuguese <traduz@debianpt.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de utilizador para correr o deamon BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador "
+"'bind'. Para usar uma conta diferente, por favor indique o nome de "
+"utilizador apropriado."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de arranque para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) "
+"que deverão ser enviadas ao deamon BIND9 (named) durante o arranque. "
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Devem as configurações de resolv.conf ser substituidas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon "
+"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta "
+"máquina está ligada."
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
new file mode 100644
index 0000000..f10725d
--- /dev/null
+++ b/debian/po/pt_BR.po
@@ -0,0 +1,71 @@
+# bind9 Brazilian Portuguese translation
+# Copyright (C) 2009 bind9's COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Luís Gustavo Pessoa Sales <vatsu@gmx.net>, 2009.
+# José Figueiredo <deb.gnulinux@gmail.com>, 2010.
+#
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2010-09-10 22:37-0300\n"
+"Last-Translator: José de Figueiredo <deb.gnulinux@gmail.com>\n"
+"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian."
+"org>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"pt_BR utf-8\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Conta de usuário para execução do daemon do BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"O padrão é executar o daemon do BIND9 (named) com a conta de usuário 'bind'. "
+"Para usar uma conta diferente, por favor informe o nome do usuário."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Outras opções de inicialização para o named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Por favor, forneça outras opções adicionais (além de nome de usuário), que "
+"devam ser passadas ao daemon do BIND9 (named) na inicialização."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "As configurações do resolv.conf devem ser sobrescritas?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Por favor, escolha se o resolvedor de nomes deve ser forçado a usar o daemon "
+"do BIND9 local (named) em vez daquele que a conexão atual recomendar, quando "
+"esta máquina for movida."
diff --git a/debian/po/ru.po b/debian/po/ru.po
new file mode 100644
index 0000000..b182747
--- /dev/null
+++ b/debian/po/ru.po
@@ -0,0 +1,70 @@
+# translation of ru.po to Russian
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+#
+# Yuri Kozlov <kozlov.y@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 11:08+0400\n"
+"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n"
+"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
+"Language: ru\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
+"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Учётная запись для запуска службы BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"По умолчанию, служба BIND9 (файл named) запускается с правами учётной записи "
+"'bind'. Если вы хотите использовать другую учётную запись, то введите это "
+"имя здесь."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Другие параметры запуска named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Укажите любые дополнительные параметры (кроме имени учётной записи), которые "
+"нужно передать службе BIND9 (файлу named) при запуске."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Переписать настройки resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Укажите, хотите ли вы, чтобы определитель имён машины использовал локальную "
+"службу BIND9 (named), а не настройки имеющегося подключения."
diff --git a/debian/po/sk.po b/debian/po/sk.po
new file mode 100644
index 0000000..4ea69c6
--- /dev/null
+++ b/debian/po/sk.po
@@ -0,0 +1,67 @@
+# Slovak translation of bind9
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind9 package.
+# Ivan Masár <helix84@centrum.sk>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: \n"
+"Last-Translator: Ivan Masár <helix84@centrum.sk>\n"
+"Language-Team: \n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Používateľský účet démona BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak "
+"chcete použiť iný účet, prosím zadajte príslušný názov účtu."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Ďalšie spúšťacie voľby pre named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať "
+"démonovi BIND9 (named) pri spustení."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Má sa nastaviť priorita pred resolv.conf?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona "
+"BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa "
+"umiestnenie tohto počítača mení."
diff --git a/debian/po/sr.po b/debian/po/sr.po
new file mode 100644
index 0000000..98b67be
--- /dev/null
+++ b/debian/po/sr.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todoric <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Кориснички налог за покретање BIND9 процеса у позадини:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Подразумијевано је да се BIND9 процес у позадини (Named) покреће под 'bind'"
+"корисничким налогом. Да бисте користили другачији налог, унесите адекватно корисничко име."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Друге опције приликом покретања за (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Молимо вас обезбједите додатне опције (осим корисничког имена) који би требали"
+"бити прослијеђени BIND9 процесу у позадини (Named) приликом покретања."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Желите ли поништити постојећа resolv.conf подешавања?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Одаберите желите ли да аутоматски помагач (Resolver) буде присиљен користити "
+"локални BIND9 процес у позадини (Named) умјесто препорука тренутне мреже, када "
+"ова машина буде помјерана."
diff --git a/debian/po/sr@latin.po b/debian/po/sr@latin.po
new file mode 100644
index 0000000..5456ba6
--- /dev/null
+++ b/debian/po/sr@latin.po
@@ -0,0 +1,66 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) 2011
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <zlatan.todoric@gmail.com>, 2011.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: Zlatan Todorić <zlatan.todoric@gmail.com>\n"
+"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Korisnički nalog za pokretanje BIND9 procesa u pozadini:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Podrazumijevano je da se BIND9 proces u pozadini (Named) pokreće pod 'bind'"
+"korisničkim nalogom. Da biste koristili drugačiji nalog, unesite adekvatno korisničko ime."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Druge opcije prilikom pokretanja za (Named):"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Molimo vas obezbjedite dodatne opcije (osim korisničkog imena) koji bi trebali"
+"biti proslijeđeni BIND9 procesu u pozadini (Named) prilikom pokretanja."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Želite li poništiti postojeća resolv.conf podešavanja?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Odaberite želite li da automatski pomagač (Resolver) bude prisiljen koristiti"
+"lokalni BIND9 proces u pozadini umjesto preporuka trenutne mreže, kada ova"
+"mašina bude pomjerana."
diff --git a/debian/po/sv.po b/debian/po/sv.po
new file mode 100644
index 0000000..4dbd1e2
--- /dev/null
+++ b/debian/po/sv.po
@@ -0,0 +1,69 @@
+# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish
+# Copyright (C) 2008
+# This file is distributed under the same license as the bind9 package.
+#
+# Martin Ågren <martin.agren@gmail.com>, 2008.
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-07-18 19:24+0200\n"
+"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n"
+"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: KBabel 1.11.4\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Användarkonto att köra BIND9-demonen under:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. "
+"För att använda ett annat konto, var vänlig ange användarnamnet."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Övriga uppstartsval för named:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska "
+"skickas till BIND9-demonen (named) vid uppstart."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Ska resolv.conf-inställningar hoppas över?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-"
+"demonen (named) snarare än vad den aktuella uppkopplingen rekommenderar när "
+"den här maskinen flyttar runt."
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 0000000..6001e43
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,60 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr ""
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
diff --git a/debian/po/tr.po b/debian/po/tr.po
new file mode 100644
index 0000000..3d44ff8
--- /dev/null
+++ b/debian/po/tr.po
@@ -0,0 +1,70 @@
+# turkish translation of bind9 debconf template
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the PACKAGE package.
+# Mert Dirik <mertdirik@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-15 23:31+0200\n"
+"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n"
+"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=utf-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Poedit-Language: Turkish\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı "
+"hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz "
+"hesabın adını girin."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "'named'in kullanacağı diğer başlatma seçenekleri:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı "
+"adı dışındaki ek seçenekleri yazın."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "'resolv.conf' ayarları ezilmeli mi (override)?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının "
+"önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya "
+"zorlanması gerekip gerekmediğini seçin."
diff --git a/debian/po/vi.po b/debian/po/vi.po
new file mode 100644
index 0000000..99865f7
--- /dev/null
+++ b/debian/po/vi.po
@@ -0,0 +1,67 @@
+# Vietnamese translation for Bind 9.
+# Copyright © 2008 Free Software Foundation, Inc.
+# Clytie Siddall <clytie@riverland.net.au>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-06-14 15:35+0930\n"
+"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n"
+"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n"
+"Language: vi\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: LocFactoryEditor 1.7b3\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "Tài khoản người dùng để chạy trình nền BIND9:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind "
+"». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp."
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "Tùy chọn khởi chạy khác cần đặt tên:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr ""
+"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi "
+"cho trình nền BIND9 vào lúc khởi chạy."
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt "
+"tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác."
diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po
new file mode 100644
index 0000000..9296c1a
--- /dev/null
+++ b/debian/po/zh_CN.po
@@ -0,0 +1,64 @@
+# Chinese translations for bind package.
+# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the bind package.
+# LI Daobing <lidaobing@gmail.com>, 2008.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n"
+"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n"
+"POT-Creation-Date: 2008-06-13 16:56-0600\n"
+"PO-Revision-Date: 2008-10-04 14:36+0800\n"
+"Last-Translator: LI Daobing <lidaobing@gmail.com>\n"
+"Language-Team: Chinese (simplified)\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid "User account for running the BIND9 daemon:"
+msgstr "运行 BIND9 服务的用户账号:"
+
+#. Type: string
+#. Description
+#: ../templates:1001
+msgid ""
+"The default is to run the BIND9 daemon (named) under the 'bind' user "
+"account. To use a different account, please enter the appropriate username."
+msgstr ""
+"缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的"
+"用户名。"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid "Other startup options for named:"
+msgstr "named 的其他启动选项:"
+
+#. Type: string
+#. Description
+#: ../templates:2001
+msgid ""
+"Please provide any additional options (other than username) that should be "
+"passed to the BIND9 daemon (named) on startup."
+msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid "Should resolv.conf settings be overridden?"
+msgstr "是否覆盖 resolv.conf 的设置?"
+
+#. Type: boolean
+#. Description
+#: ../templates:3001
+msgid ""
+"Please choose whether the resolver should be forced to use the local BIND9 "
+"daemon (named) rather than what the current connection recommends, when this "
+"machine moves around."
+msgstr ""
+"请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推"
+"荐的域名解析服务器, 特别是当机器需要移动时。"
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..deeb37f
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,186 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+
+export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE
+
+export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
+
+include /usr/share/dpkg/default.mk
+
+DEB_REVISION = $(call dpkg_late_eval,DEB_REVISION,echo '$(DEB_VERSION)' | sed -e 's/^.*-/-/')
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+COMMA = ,
+ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+ NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+endif
+
+export arch = $(DEB_HOST_ARCH)
+
+ifeq ($(DEB_HOST_ARCH_OS),kfreebsd)
+EXTRA_FEATURES=--disable-linux-caps
+endif
+
+SED_NATIVE_PKCS11 := \
+ sed -e 's,libisc\.,libisc-pkcs11.,g' \
+ -e 's,libisc-nosymtbl\.,libisc-pkcs11-nosymtbl.,g' \
+ -e 's,libdns\.,libdns-pkcs11.,g' \
+ -e 's,@CRYPTO@,@CRYPTO_PK11@,g' \
+ -e 's,ISC_INCLUDES,ISC_PKCS11_INCLUDES,g' \
+ -e 's,DNS_INCLUDES,DNS_PKCS11_INCLUDES,g' \
+ -e 's,\(dnssec-[^ ]*\)@EXEEXT@,\1-pkcs11@EXEEXT@,g' \
+ -e 's,/lib/isc/,/lib/isc-pkcs11/,g' \
+ -e 's,/lib/dns/,/lib/dns-pkcs11/,g' \
+ -e 's,named@EXEEXT@,named-pkcs11@EXEEXT@,g' \
+ -e 's,@CONTRIB_DLZ@,,g' \
+ -e 's,$${DLZDRIVER_INCLUDES} $${DBDRIVER_INCLUDES},,g' \
+ -e 's,$${DLZDRIVER_LIBS} $${DBDRIVER_LIBS},,g' \
+ -e 's,$${DLZDRIVER_OBJS} $${DBDRIVER_OBJS},,g' \
+ -e 's,$${DLZDRIVER_SRCS} $${DBDRIVER_SRCS},,g' \
+ -e 's,@DNS_CRYPTO_LIBS@,@DNS_CRYPTO_PK11_LIBS@,g'
+
+%:
+ dh $@ --with python3 --fail-missing --exclude=.la --exclude=lwresd --exclude=__pycache__
+
+prepare_native_pkcs11:
+ rm -rf bin/named-pkcs11 && cp -r bin/named bin/named-pkcs11
+ rm -rf bin/dnssec-pkcs11 && cp -r bin/dnssec bin/dnssec-pkcs11
+ rm -rf lib/isc-pkcs11 && cp -r lib/isc lib/isc-pkcs11
+ rm -rf lib/dns-pkcs11 && cp -r lib/dns lib/dns-pkcs11
+ $(SED_NATIVE_PKCS11) < bin/named/Makefile.in > bin/named-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < bin/dnssec/Makefile.in > bin/dnssec-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < lib/isc/Makefile.in > lib/isc-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < lib/dns/Makefile.in > lib/dns-pkcs11/Makefile.in
+
+clean_native_pkcs11:
+ rm -rf bin/named-pkcs11
+ rm -rf bin/dnssec-pkcs11
+ rm -rf lib/isc-pkcs11
+ rm -rf lib/dns-pkcs11
+
+prepare_version:
+ if [ ! -f version.bak ]; then cp version version.bak; fi
+ sed -i 's,^EXTENSIONS=.*$$,EXTENSIONS=$(DEB_REVISION)-$(DEB_VENDOR),' version
+
+clean_version:
+ if [ -f version.bak ]; then cp version.bak version; fi
+
+override_dh_autoreconf: prepare_native_pkcs11 prepare_version
+ dh_autoreconf
+
+override_dh_auto_configure:
+ debian/checkapi
+ dh_auto_configure -B build -- \
+ --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \
+ --sysconfdir=/etc/bind \
+ --with-python=python3 \
+ --localstatedir=/ \
+ --enable-threads \
+ --enable-largefile \
+ --with-libtool \
+ --enable-shared \
+ --enable-static \
+ --with-gost=no \
+ --with-openssl=/usr \
+ --with-gssapi=/usr \
+ --disable-isc-spnego \
+ --with-libidn2 \
+ --with-libjson=/usr \
+ --with-lmdb=/usr \
+ --with-gnu-ld \
+ --with-geoip=/usr \
+ --with-atf=no \
+ --enable-ipv6 \
+ --enable-rrl \
+ --enable-filter-aaaa \
+ --enable-native-pkcs11 \
+ --with-pkcs11=\$${prefix}/lib/softhsm/libsofthsm2.so \
+ --with-randomdev=/dev/urandom \
+ --enable-dnstap \
+ $(EXTRA_FEATURES)
+ dh_auto_configure -B build-udeb -- \
+ --sysconfdir=/etc/bind \
+ --with-python=python3 \
+ --localstatedir=/ \
+ --disable-epoll \
+ --disable-kqueue \
+ --disable-devpoll \
+ --disable-threads \
+ --disable-linux-caps \
+ --with-openssl=/usr \
+ --without-libxml2 \
+ --without-libjson \
+ --without-lmdb \
+ --enable-ipv6 \
+ --enable-shared \
+ --with-libtool \
+ --with-gssapi=no \
+ --disable-isc-spnego \
+ --libdir=/lib/$(DEB_HOST_MULTIARCH) \
+ --includedir=/usr/include/bind-export
+ sh debian/apply-export-patch
+ # no need to build these targets here
+ sed -i 's/dnssec-pkcs11//;s/named-pkcs11//' build-udeb/bin/Makefile
+ sed -i 's/dns-pkcs11//;s/isc-pkcs11//' build-udeb/lib/Makefile
+ cp lib/dns/dnstap.proto build/lib/dns
+ cp lib/dns-pkcs11/dnstap.proto build/lib/dns-pkcs11
+
+override_dh_auto_build:
+ dh_auto_build -B build
+ dh_auto_build -B build-udeb
+
+override_dh_auto_clean: clean_native_pkcs11 clean_version
+ dh_auto_clean -B build
+ dh_auto_clean -B build-udeb
+
+override_dh_auto_install:
+ dh_auto_install -B build --destdir=$(CURDIR)/debian/tmp
+ dh_auto_install -B build-udeb --destdir=$(CURDIR)/debian/tmp-udeb
+
+override_dh_install:
+ dh_install --exclude=.la --exclude=lwresd --exclude=__pycache__ --fail-missing
+
+ # Fix symlink for export libs to be absolute
+ for lib in `find debian/tmp-udeb/lib/$(DEB_HOST_MULTIARCH)/ -type l -name 'lib*-export.so.*'`; do \
+ lib=$$(basename $$lib); \
+ dev=$$(echo $$lib | sed 's/\.so\..*/.so/'); \
+ echo /lib/$(DEB_HOST_MULTIARCH)/$$lib /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+ dh_link -plibbind-export-dev /lib/$(DEB_HOST_MULTIARCH)/$$lib \
+ /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+ done
+
+ dh_apparmor -pbind9 --profile-name=usr.sbin.named
+
+override_dh_systemd_enable:
+ dh_systemd_enable -pbind9 --no-enable --name=bind9-resolvconf bind9-resolvconf.service
+ dh_systemd_enable -pbind9 --no-enable --name=bind9-pkcs11 bind9-pkcs11.service
+ dh_systemd_enable -pbind9 bind9.service
+
+override_dh_makeshlibs: DNS_SOVER=$(shell debian/getapi dns)
+override_dh_makeshlibs: IRS_SOVER=$(shell debian/getapi irs)
+override_dh_makeshlibs: ISCCC_SOVER=$(shell debian/getapi isccc)
+override_dh_makeshlibs: ISCCFG_SOVER=$(shell debian/getapi isccfg)
+override_dh_makeshlibs: ISC_SOVER=$(shell debian/getapi isc)
+override_dh_makeshlibs:
+ dh_makeshlibs -plibdns-export$(DNS_SOVER) --add-udeb=libdns-export$(DNS_SOVER)-udeb
+ dh_makeshlibs -plibirs-export$(IRS_SOVER) --add-udeb=libirs-export$(IRS_SOVER)-udeb
+ dh_makeshlibs -plibisccc-export$(ISCCC_SOVER) --add-udeb=libisccc-export$(ISCCC_SOVER)-udeb
+ dh_makeshlibs -plibisccfg-export$(ISCCFG_SOVER) --add-udeb=libisccfg-export$(ISCCFG_SOVER)-udeb
+ dh_makeshlibs -plibisc-export$(ISC_SOVER) --add-udeb=libisc-export$(ISC_SOVER)-udeb
+ dh_makeshlibs --remaining-packages
+
+override_dh_shlibdeps:
+ dh_shlibdeps
+ # Downgrade libcrypto1.1-udeb dependency from 1.1.1 to 1.1.0
+ # The udebs don't use any newer symbols, but due to them using
+ # shlibs the dependency is generated anyway. This blocks migration
+ # to testing until OpenSSL 1.1.1 is sorted out
+ sed -i 's:libcrypto1.1-udeb (>= 1.1.1):libcrypto1.1-udeb (>= 1.1.0):' debian/*-udeb.substvars
+
+.PHONY: prepare_native_pkcs11 clean_native_pkcs11
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/templates b/debian/templates
new file mode 100644
index 0000000..b5dd9bc
--- /dev/null
+++ b/debian/templates
@@ -0,0 +1,21 @@
+Template: bind9/start-as-user
+Type: string
+Default: bind
+_Description: User account for running the BIND9 daemon:
+ The default is to run the BIND9 daemon (named) under the 'bind'
+ user account. To use a different account, please enter the
+ appropriate username.
+
+Template: bind9/different-configuration-file
+Type: string
+_Description: Other startup options for named:
+ Please provide any additional options (other than username) that should
+ be passed to the BIND9 daemon (named) on startup.
+
+Template: bind9/run-resolvconf
+Type: boolean
+Default: false
+_Description: Should resolv.conf settings be overridden?
+ Please choose whether the resolver should be forced to use the
+ local BIND9 daemon (named) rather than what the current connection
+ recommends, when this machine moves around.
diff --git a/debian/tests/control b/debian/tests/control
new file mode 100644
index 0000000..2fad418
--- /dev/null
+++ b/debian/tests/control
@@ -0,0 +1,3 @@
+Tests: simpletest
+Restrictions: needs-root, isolation-container
+Depends: bind9, dnsutils
diff --git a/debian/tests/simpletest b/debian/tests/simpletest
new file mode 100755
index 0000000..468a7c5
--- /dev/null
+++ b/debian/tests/simpletest
@@ -0,0 +1,26 @@
+#!/bin/sh
+
+set -e
+
+setup() {
+ service bind9 stop
+ service bind9 start
+}
+
+run() {
+ # Make a query against a local zone
+ dig -x 127.0.0.1 @127.0.0.1
+
+ # Make a query against an external nameserver and check for DNSSEC validation
+ echo "Checking for DNSSEC validation status of internetsociety.org"
+ dig -t a internetsociety.org @127.0.0.1 | egrep 'flags:.+ad; QUERY'
+}
+
+teardown() {
+ service bind9 stop
+}
+
+setup
+run
+teardown
+
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..98eed56
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,290 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=KES6
+-----END PGP PUBLIC KEY BLOCK-----
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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==
+=fX+D
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..cd00678
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,11 @@
+version=3
+
+opts=\
+repack,\
+compression=xz,\
+repacksuffix=+dfsg,\
+uversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dirversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\
+dversionmangle=s/\.dfsg\./-/;s/[\.\+]dfsg$//,\
+pgpsigurlmangle=s/$/.asc/ \
+ https://ftp.isc.org/isc/bind9/(9\.11\.\d+(?:(?:-P)\d)?)/ bind-@ANY_VERSION@\.tar\.gz