2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

Set up release notes for BIND 9.19.25

This commit is contained in:
Michal Nowak 2024-05-03 15:51:53 +02:00
parent fd880c29f2
commit 4fae72e2de

View File

@ -9,7 +9,7 @@
.. See the COPYRIGHT file distributed with this work for additional .. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership. .. information regarding copyright ownership.
Notes for BIND 9.19.24 Notes for BIND 9.19.25
---------------------- ----------------------
Security Fixes Security Fixes
@ -20,40 +20,17 @@ Security Fixes
New Features New Features
~~~~~~~~~~~~ ~~~~~~~~~~~~
- A new option :any:`signatures-jitter` is added to :any:`dnssec-policy` to - None.
spread out signature expiration times over a period of time. :gl:`#4554`
- A new DNSSEC tool :iscman:`dnssec-ksr` is added to create Key Signing Request
(KSR) and Signed Key Response (SKR) files. :gl:`#1128`
- Queries and responses now emit distinct dnstap entries for DoT and DoH.
:any:`dnstap-read` understands DoH and DoT entries. :gl:`#4523`
Removed Features Removed Features
~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
- The ``named`` command line option ``-U <n>``, which specified the number of UDP dispatches, - None.
has been removed. Using it now prints a warning. :gl:`#1879`
Feature Changes Feature Changes
~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~
- Querying the statistics channel no longer blocks the DNS communication - None.
on the networking event loop. :gl:`#4680`
- DNSSEC signatures that are not valid because the current time falls outside
the signature inception and expiration dates no longer count towards maximum
validation and maximum validation failures limits. :gl:`#4586`
- Multiple RNDC messages will be processed when sent in a single TCP
message.
ISC would like to thank Dominik Thalhammer for reporting the issue
and preparing the initial patch. :gl:`#4416`
- :iscman:`dnssec-keygen` now allows the options ``-k`` and ``-f`` to be
used together. This allows creating keys for a given :any:`dnssec-policy`
that match only the KSK (``-fK``) or ZSK (``-fZ``) role.
Bug Fixes Bug Fixes
~~~~~~~~~ ~~~~~~~~~