mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 14:07:59 +00:00
Code Issues Releases Wiki Activity

Merge branch 'michal/set-up-version-and-release-notes-for-bind-9.19.17' into 'main'

Browse Source 
Set up version and release notes for BIND 9.19.17

See merge request isc-projects/bind9!8173
This commit is contained in:
Michał Kępień 2023-08-07 08:26:04 +00:00
commit 638db88737
2 changed files with 3 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configure.ac
View File

@ -16,7 +16,7 @@
#
m4_define([bind_VERSION_MAJOR], 9)dnl
m4_define([bind_VERSION_MINOR], 19)dnl
m4_define([bind_VERSION_PATCH], 16)dnl
m4_define([bind_VERSION_PATCH], 17)dnl
m4_define([bind_VERSION_EXTRA], -dev)dnl
m4_define([bind_DESCRIPTION], [(Development Release)])dnl
m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl

29
doc/notes/notes-current.rst
View File

@ -9,7 +9,7 @@
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.
Notes for BIND 9.19.16
Notes for BIND 9.19.17
----------------------
Security Fixes
@ -25,43 +25,18 @@ New Features
Removed Features
~~~~~~~~~~~~~~~~
- The 'auto-dnssec' configuration option has now been removed. Please
use :any:`dnssec-policy` or manual signing instead. The following options
have become obsolete: :any:`dnskey-sig-validity`,
:any:`dnssec-dnskey-kskonly`, :any:`dnssec-update-mode`,
:any:`sig-validity-interval`, and :any:`update-check-ksk`. :gl:`#3672`.
- The :any:`dialup` and :any:`heartbeat-interval` options have been
deprecated and will be removed in a future release. :gl:`#3700`
- None.
Feature Changes
~~~~~~~~~~~~~~~
- None.
- Return BADCOOKIE for out-of-date or otherwise bad, well formed
DNS SERVER COOKIES. Previously these were silently treated as
DNS CLIENT COOKIES. :gl:`#4194`
- The option :any:`inline-signing` can now also be set inside
:any:`dnssec-policy`. The built-in policies ``default`` and ``insecure``
enable the use of :any:`inline-signing`. If you set :any:`inline-signing`
at the ``zone`` level, it overrides the value used set in
:any:`dnssec-policy`. :gl:`#3677`.
Bug Fixes
~~~~~~~~~
- None.
- Query-processing latency under load has been improved by reducing the
uninterrupted time spent by resolving long cached chains of domain names.
:gl:`#4185`
- Ignore :any:`max-zone-ttl` for :any:`dnssec-policy` "insecure",
otherwise some zones will not be loaded if they use a TTL value larger
than 86400. :gl:`#4032`.
Known Issues
~~~~~~~~~~~~