2021-06-03 08:37:05 +02:00
|
|
|
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
|
..
|
|
|
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
..
|
|
|
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
|
..
|
|
|
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
|
|
|
.. information regarding copyright ownership.
|
2021-12-15 16:50:49 +01:00
|
|
|
|
|
|
|
|
Notes for BIND 9.17.22
|
|
|
|
|
----------------------
|
|
|
|
|
|
|
|
|
|
Security Fixes
|
|
|
|
|
~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
Known Issues
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
New Features
|
|
|
|
|
~~~~~~~~~~~~
|
|
|
|
|
|
2021-12-22 18:17:26 +01:00
|
|
|
- ``named`` now logs TLS pre-master secrets for debugging purposes when
|
|
|
|
|
the ``SSLKEYLOGFILE`` environment variable is set. This enables
|
|
|
|
|
troubleshooting issues with encrypted DNS traffic. :gl:`#2723`
|
2021-12-15 16:50:49 +01:00
|
|
|
|
|
|
|
|
Removed Features
|
|
|
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
Feature Changes
|
|
|
|
|
~~~~~~~~~~~~~~~
|
|
|
|
|
|
|
|
|
|
- None.
|
|
|
|
|
|
|
|
|
|
Bug Fixes
|
|
|
|
|
~~~~~~~~~
|
|
|
|
|
|
2021-12-07 14:26:05 +01:00
|
|
|
- If signatures created by the ZSK are expired, and the ZSK private key is offline,
|
|
|
|
|
allow the expired signatures to be replaced with signatures created by the KSK.
|
|
|
|
|
:gl:`#3049`
|
|
|
|
|
|
2021-12-15 16:50:49 +01:00
|
|
|
- On FreeBSD, a TCP connection would leak a small amount of heap memory leading
|
|
|
|
|
to out-of-memory problem in a long run. This has been fixed. :gl:`#3051`
|
2022-01-03 13:30:40 +01:00
|
|
|
|
|
|
|
|
- Under certain circumstances, the signed version of an inline-signed
|
|
|
|
|
zone could be dumped to disk without the serial number of the unsigned
|
|
|
|
|
version of the zone, preventing resynchronization of zone contents
|
|
|
|
|
after ``named`` restart in case the unsigned zone file gets modified
|
|
|
|
|
while ``named`` is not running. This has been fixed. :gl:`#3071`
|
2022-01-06 13:14:55 +01:00
|
|
|
|
2022-01-13 09:48:38 +01:00
|
|
|
- Using ``rndc`` on a busy recursive server could cause the ``named`` to abort
|
|
|
|
|
with assertion failure. This has been fixed. :gl:`#3079`
|
2022-01-13 09:39:41 +01:00
|
|
|
|
|
|
|
|
- With libuv >= 1.37.0, the recvmmsg support would not be enabled in ``named``
|
|
|
|
|
reducing the maximum query-response performance. The recvmmsg support would
|
|
|
|
|
be used only in libuv 1.35.0 and 1.36.0. This has been fixed. :gl:`#3095`
|
