mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-05 00:55:24 +00:00
61 lines
1.8 KiB
ReStructuredText
61 lines
1.8 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.19.25
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- Malicious DNS client that sends many queries over TCP but never reads
|
|
responses can cause server to respond slowly or not respond at all for other
|
|
clients. :cve:`2024-0760` :gl:`#4481`
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- Added a new statistics variable ``recursive high-water`` that reports
|
|
the maximum number of simultaneous recursive clients BIND has handled
|
|
while running. :gl:`#4668`
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- Outgoing zone transfers are no longer enabled by default. An explicit
|
|
:any:`allow-transfer` ACL must now be set at the :any:`zone`, :any:`view` or
|
|
:namedconf:ref:`options` level to enable outgoing transfers. :gl:`#4728`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- An RPZ response's SOA record TTL was set to 1 instead of the SOA TTL, if
|
|
``add-soa`` was used. This has been fixed. :gl:`#3323`
|
|
|
|
- Potential data races were found in our DoH implementation related
|
|
to HTTP/2 session object management and endpoints set object
|
|
management after reconfiguration. These issues have been
|
|
fixed. :gl:`#4473`
|
|
|
|
ISC would like to thank Dzintars and Ivo from nic.lv for bringing
|
|
this to our attention.
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- There are no new known issues with this release. See :ref:`above
|
|
<relnotes_known_issues>` for a list of all known issues affecting this
|
|
BIND 9 branch.
|