2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-01 15:05:23 +00:00

Tweak CHANGES for BIND 9.17.1

This commit is contained in:
Michał Kępień
2020-04-08 22:12:57 +02:00
parent 69e3ec9cb1
commit dfe4009c30

59
CHANGES
View File

@@ -1,48 +1,46 @@
5384. [bug] Deactivate the handle before sending the async close 5383. [func] Add a quota attach function with a callback and clean up
callback. [GL #1700]
5383. [func] Add a quota attach function with a callback, cleanup
the isc_quota API. [GL !3280] the isc_quota API. [GL !3280]
5382. [bug] Use clock_gettime() instead of gettimeofday() for 5382. [bug] Use clock_gettime() instead of gettimeofday() for
isc_stdtime() function. [GL #1679] isc_stdtime() function. [GL #1679]
5381. [bug] Fix logging API data race by adding rwlock and cache 5381. [bug] Fix logging API data race by adding rwlock and caching
the logging levels in stdatomic variables to restore logging levels in stdatomic variables to restore
the performance to original levels. [GL #1675, #1717] performance to original levels. [GL #1675] [GL #1717]
5380. [contrib] Fix building the MySQL DLZ modules against MySQL 8 5380. [contrib] Fix building MySQL DLZ modules against MySQL 8
libraries. [GL #1678] libraries. [GL #1678]
5379. [placeholder] 5379. [placeholder]
5378. [bug] Fix assertion in nslookup when receiving invalid DNS 5378. [bug] Receiving invalid DNS data was triggering an assertion
data. [GL #1652] failure in nslookup. [GL #1652]
5377. [placeholder] 5377. [placeholder]
5376. [bug] Fix DNS ineffective rebinding protection when BIND 9 5376. [bug] Fix ineffective DNS rebinding protection when BIND is
is configured as a forwarding DNS server. [GL #1574] configured as a forwarding DNS server. Thanks to Tobias
(Thanks to Tobias Klein) Klein. [GL #1574]
5375. [test] Fix timing issue in kasp test. [GL #1669] 5375. [test] Fix timing issues in the "kasp" system test. [GL #1669]
5374. [bug] Statistics counters counting recursive clients and 5374. [bug] Statistics counters tracking recursive clients and
active connections could underflow. [GL #1087] active connections could underflow. [GL #1087]
5373. [bug] Collecting DNSSEC signing operations introduced by 5373. [bug] Collecting statistics for DNSSEC signing operations
GL #513 (change 5254) allocated counters for every (change 5254) caused an array of significant size (over
possible key id per zone which results in a lot of 100 kB) to be allocated for each configured zone. Each
wasted memory. Fix by tracking up to four keys of these arrays is tracking all possible key IDs; this
per zone, rotate counters when keys are replaced. could trigger an out-of-memory condition on servers with
This fixes the immediate problem of the high a high enough number of zones configured. Fixed by
memory usage, but should be improved in a future tracking up to four keys per zone and rotating counters
release by growing and shrinking the number of when keys are replaced. This fixes the immediate problem
keys to track triggered by key rollover events. of high memory usage, but should be improved in a future
[GL #1179] release by growing or shrinking the number of keys to
track upon key rollover events. [GL #1179]
5372. [bug] Fix migration from existing DNSSEC key files using 5372. [bug] Fix migration from existing DNSSEC key files
auto-dnssec maintain to dnssec-policy. [GL #1706] ("auto-dnssec maintain") to "dnssec-policy". [GL #1706]
5371. [bug] Improve incremental updates of the RPZ summary 5371. [bug] Improve incremental updates of the RPZ summary
database to reduce delays that could occur when database to reduce delays that could occur when
@@ -54,10 +52,9 @@
Fixed by deactivating the netmgr handle before Fixed by deactivating the netmgr handle before
scheduling the asynchronous close routine. [GL #1700] scheduling the asynchronous close routine. [GL #1700]
5369. [func] Add the ability to specify whether or not to wait 5369. [func] Add the ability to specify whether to wait for
for nameserver domain names to be looked up, with nameserver domain names to be looked up, with a new RPZ
a new RPZ modifying directive 'nsdname-wait-recurse'. modifying directive 'nsdname-wait-recurse'. [GL #1138]
[GL #1138]
5368. [bug] Named failed to restart if 'rndc addzone' names 5368. [bug] Named failed to restart if 'rndc addzone' names
contained special characters (e.g. '/'). [GL #1655] contained special characters (e.g. '/'). [GL #1655]