bind9 bind 9.18.12

[Douglas R. Reno]

New point version

[Douglas R. Reno]

Although bind-utils is tagged already, we could bring this back to 11.3 if desired since it's technically an end user package

[Bruce Dubbs]

9.18.12 released

• [bug] Fix DNSRPS-enabled builds as they were inadvertently broken by change 6042.

• [test] fuzz/dns_message_checksig leaked memory when shutting down.

• [bug] Handle primary server address lookup failures in nsupdate more gracefully.

• [bug] 'named -V' leaked memory.

• [bug] Force set the DS state after a 'rdnc dnssec -checkds' command.

• [bug] Add missing node lock when setting node->wild in add_wildcard_magic.

• [func] Refactor the isc_nm_xfr_allowed() function to return isc_result_t instead of boolean.

• [bug] Set RD=1 on DS requests to parental-agents.

• [bug] Avoid the OpenSSL lock contention when initializing Message Digest Contexts by using explicit algorithm fetching, initializing static contexts for every supported algorithms, and initializing the new context by copying the static copy.

• [func] The use of "port" when configuring query-source, transfer-source, notify-source and parental-source addresses has been deprecated, along with the use-v[46]-udp-ports and avoid-v[46]-udp-ports options. A warning will be logged when these options are used. In a future release, they will be removed.

• [bug] Detach from the view in zone_shutdown() to release the memory held by the dead view early.

• [bug] Downloading a zone via TLS from a server which does not negotiate "dot" ALPN token could crash BIND on shutdown. That has been fixed.

[Bruce Dubbs]

Fixed at commit 8a36345ac34e103ac0c1826d6fcee040beafa794