mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-05 00:55:24 +00:00
2fadf29e6b
Define a :gl: Sphinx role that takes a GitLab issue/MR number as an argument and creates a hyperlink to the relevant ISC GitLab URL. This makes it easy to reach ISC GitLab pages directly from the release notes. Make all GitLab references in the release notes use the new Sphinx role.
63 lines
1.8 KiB
ReStructuredText
63 lines
1.8 KiB
ReStructuredText
..
|
|
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
This Source Code Form is subject to the terms of the Mozilla Public
|
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
See the COPYRIGHT file distributed with this work for additional
|
|
information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.17.13
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- Implement ``draft-vandijk-dnsop-nsec-ttl``, NSEC(3) TTL values are now set to
|
|
the minimum of the SOA MINIMUM value and the SOA TTL. :gl:`#2347`
|
|
|
|
- Reduce the supported maximum number of iterations that can be
|
|
configured in an NSEC3 zones to 150. :gl:`#2642`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- When dumping the cache to file, TTLs were being increased with
|
|
``max-stale-ttl``. Also the comment above stale RRsets could have nonsensical
|
|
values if the RRset was still marked a stale but the ``max-stale-ttl`` has
|
|
passed (and is actually an RRset awaiting cleanup). Both issues have now
|
|
been fixed. :gl:`#389` :gl:`#2289`
|
|
|
|
- ``named`` would overwrite a zone file unconditionally when it recovered from
|
|
a corrupted journal. :gl:`#2623`
|
|
|
|
- After the networking manager was introduced to ``named`` to handle
|
|
incoming traffic, it was discovered that the recursive performance had been
|
|
degraded compared to the previous version (9.11). This has been now fixed by
|
|
running internal tasks inside the networking manager worker threads, so
|
|
they do not compete for resources. :gl:`#2638`
|
|
|
|
- With ``dnssec-policy``, when creating new keys also check for keyid conflicts
|
|
between the new keys too. :gl:`#2628`
|