2022-04-12 13:41:18 +02:00
|
|
|
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
|
..
|
|
|
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
..
|
|
|
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
|
..
|
|
|
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
|
|
|
.. information regarding copyright ownership.
|
|
|
|
|
|
2023-11-10 13:50:32 +01:00
|
|
|
Notes for BIND 9.19.19
|
2023-01-13 15:35:32 +01:00
|
|
|
----------------------
|
2022-04-12 13:41:18 +02:00
|
|
|
|
|
|
|
|
Security Fixes
|
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
New Features
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
2023-11-23 18:44:38 +02:00
|
|
|
- Initial support for accepting the PROXYv2 protocol in all currently
|
|
|
|
|
implemented DNS transports in :iscman:`named` and complementary
|
|
|
|
|
support for sending it in :iscman:`dig` are included into this
|
|
|
|
|
release. Please consult the related documentation for additional
|
|
|
|
|
details.
|
|
|
|
|
:gl:`#4388`
|
2023-10-16 16:31:56 +02:00
|
|
|
|
2022-04-12 13:41:18 +02:00
|
|
|
Removed Features
|
|
|
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
|
|
2023-11-10 13:50:32 +01:00
|
|
|
- None.
|
2023-10-26 12:00:32 +02:00
|
|
|
|
2023-11-07 14:44:44 +01:00
|
|
|
- The support for AES algorithm for DNS cookies has been removed.
|
2023-11-07 14:44:44 +01:00
|
|
|
:gl:`#4421`
|
|
|
|
|
|
2023-10-31 15:09:05 +01:00
|
|
|
- The ``resolver-nonbackoff-tries`` and ``resolver-retry-interval`` options
|
2023-10-31 15:13:30 +01:00
|
|
|
have been removed. Using them is now a fatal error. :gl:`#4405`
|
2023-10-31 15:09:05 +01:00
|
|
|
|
2022-04-12 13:41:18 +02:00
|
|
|
Feature Changes
|
|
|
|
|
~~~~~~~~~~~~~~~
|
|
|
|
|
|
2023-11-22 16:39:40 +01:00
|
|
|
- The maximum number of allowed NSEC3 iterations for validation has been
|
|
|
|
|
lowered from 150 to 50. DNSSEC responses containing NSEC3 records with
|
|
|
|
|
iteration counts greater than 50 are now treated as insecure. :gl:`#4363`
|
|
|
|
|
|
|
|
|
|
- The number of NSEC3 iterations that can be configured for a zone must be 0.
|
|
|
|
|
:gl:`#4363`
|
2023-07-18 12:24:07 +10:00
|
|
|
|
2022-04-12 13:41:18 +02:00
|
|
|
Bug Fixes
|
|
|
|
|
~~~~~~~~~
|
|
|
|
|
|
2023-11-10 13:50:32 +01:00
|
|
|
- None.
|
2023-10-23 14:38:47 +02:00
|
|
|
|
2022-11-07 14:03:15 +01:00
|
|
|
Known Issues
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
2023-03-07 14:10:26 +01:00
|
|
|
- There are no new known issues with this release. See :ref:`above
|
|
|
|
|
<relnotes_known_issues>` for a list of all known issues affecting this
|
|
|
|
|
BIND 9 branch.
|
