mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-22 18:19:42 +00:00
78 lines
3.1 KiB
ReStructuredText
78 lines
3.1 KiB
ReStructuredText
..
|
|
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
This Source Code Form is subject to the terms of the Mozilla Public
|
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
See the COPYRIGHT file distributed with this work for additional
|
|
information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.17.5
|
|
---------------------
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- Add a new ``rndc`` command, ``rndc dnssec -checkds``, which signals to
|
|
``named`` that a DS record for a given zone or key has been published
|
|
or withdrawn from the parent. This command replaces the time-based
|
|
``parent-registration-delay`` configuration option. [GL #1613]
|
|
|
|
- Log when ``named`` adds a CDS/CDNSKEY to the zone. [GL #1748]
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- The ``--with-gperftools-profiler`` ``configure`` option was removed.
|
|
To use the gperftools profiler, the ``HAVE_GPERFTOOLS_PROFILER`` macro
|
|
now needs to be manually set in ``CFLAGS`` and ``-lprofiler`` needs to
|
|
be present in ``LDFLAGS``. [GL !4045]
|
|
|
|
- The ``glue-cache`` *option* has been marked as deprecated. The glue
|
|
cache *feature* still works and will be permanently *enabled* in a
|
|
future release. [GL #2146]
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- Previously, using ``dig +bufsize=0`` had the side effect of disabling
|
|
EDNS, and there was no way to test the remote server's behavior when
|
|
it had received a packet with EDNS0 buffer size set to 0. This is no
|
|
longer the case; ``dig +bufsize=0`` now sends a DNS message with EDNS
|
|
version 0 and buffer size set to 0. To disable EDNS, use ``dig
|
|
+noedns``. [GL #2054]
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- In rare circumstances, ``named`` would exit with an assertion failure
|
|
when the number of nodes stored in the red-black tree exceeded the
|
|
maximum allowed size of the internal hash table. [GL #2104]
|
|
|
|
- Silence spurious system log messages for an EPROTO(71) error code that
|
|
was seen on older operating systems, where unhandled ICMPv6 errors
|
|
resulted in a generic protocol error being returned instead of a more
|
|
specific error code. [GL #1928]
|
|
|
|
- With query name minimization enabled, ``named`` failed to resolve
|
|
``ip6.arpa.`` names that had extra labels to the left of the IPv6
|
|
part. For example, when ``named`` attempted query name minimization on
|
|
a name like ``A.B.1.2.3.4.(...).ip6.arpa.``, it stopped at the
|
|
leftmost IPv6 label, i.e. ``1.2.3.4.(...).ip6.arpa.``, without
|
|
considering the extra labels (``A.B``). That caused a query loop when
|
|
resolving the name: if ``named`` received NXDOMAIN answers, then the
|
|
same query was repeatedly sent until the number of queries sent
|
|
reached the value of the ``max-recursion-queries`` configuration
|
|
option. [GL #1847]
|
|
|
|
- Parsing of LOC records was made more strict by rejecting a sole period
|
|
(``.``) and/or ``m`` as a value. These changes prevent zone files
|
|
using such values from being loaded. Handling of negative altitudes
|
|
which are not integers was also corrected. [GL #2074]
|
|
|
|
- Several problems found by `OSS-Fuzz`_ were fixed. (None of these are
|
|
security issues.) [GL !3953] [GL !3975]
|
|
|
|
.. _OSS-Fuzz: https://github.com/google/oss-fuzz
|