BIND 9.3.2 Release Notes (5900-2140, December 2011)

Table 9 Defects Fixed in both HP-UX 11i v1 and HP-UX 11i v2 Operating Systems (continued)
DescriptionIdentifier
Defects fixed in BIND 9.3.2 (C.9.3.2.2.0)
Query ID generation is cryptographically weak.JAGag45362
Defects fixed in BIND 9.3.2 (C.9.3.2.1.0)
named(1M) does not handle queries of type ANY properly.JAGag32951
named(1M) aborts unexpectedly under certain circumstances.JAGag32950
Under certain circumstances, DNSSEC utilities do not work properly.JAGag24093
Defects fixed in BIND 9.3.2 (C.9.3.2.0.0)
BIND does not handle SIG records properly.JAGag14593
BIND does not handle recursive queries properly.JAGag14592
BIND 9.x does not handle AXFR/IXFR responses properly in certain scenarios.JAGag07595
BIND 9.3.2 must be enabled on the HP-UX 11i v1 and v2 operating systems.JAGaf71605
Defects fixed in the HP-UX 11i v3 operating system
Table 10 lists the defects fixed in BIND 9.3.2 in the HP-UX 11i v3 operating system.
Table 10 Defects Fixed in the HP-UX 11i v3 Operating System
DescriptionIdentifier
Defects fixed in BIND 9.3.2 (C.9.3.2.11.0)
The named(1M) crashes, if subsequent queries are sent to cache an invalid record.QXCR1001180790
Defects fixed in BIND 9.3.2 (C.9.3.2.10.0)
When multiple threads try to acquire locks, there is a race, because the lock handling
mechanism is not synchronized. This causes the named daemon to abort.
QXCR1001118561
The named daemon allows specific packets to servers that causes named(1M) to
crash.
QXCR1001154168
Defects fixed in BIND 9.3.2 (C.9.3.2.9.0)
When the rndc utility is terminated, named(1M) does not shut down.QXCR1001090076
While reloading the server using rndc(1), named(1M) consumes more memory.QXCR1001079458
While using recursive resolvers with the DNSSEC validation option enabled, the
DNSSEC query to the nameserver returns a message of SERVFAIL or validation failure.
QXCR1001092088
When old signatures are retained in the named cache, validation failures occur.QXCR1001092086
Defects fixed in BIND 9.3.2 (C.9.3.2.8.0)
The named daemon does not behave as expected for certain messages.QXCR1000952300
The nameserver caches invalid responses from the additional section of the response
packet while processing recursive client queries.
QXCR1000991848
The nameserver sometimes returns invalid CNAME or DNAME responses.QXCR1001009615
The nameserver sometime returns invalid NXDOMAIN responses.QXCR1001004094
When named is started in a chroot environment, the following error is displayed:
open(/dev/poll) failed: No such file or directory
QXCR1000962881
Defects fixed in BIND 9.3.2 (C.9.3.2.6.0)
Defects fixed in this release 17