From 192329d3c60f74174a8f79110e5ca2b1f6936006 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Fri, 13 Aug 2021 09:52:50 +0200 Subject: [PATCH] Add change entry and release note for GL #2665 --- CHANGES | 5 +++++ doc/notes/notes-current.rst | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/CHANGES b/CHANGES index 02e21e6513..b8fa5e403e 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,8 @@ +5694. [bug] BIND looks up the deepest zone cut in cache in order + to iterate a query. When this node is stale, it may + bypass QNAME minimization. This has been fixed. + [GL #2665] + 5693. [func] Restore support for reading 'timeout' and 'attempts' options from /etc/resolv.conf, and use their values in dig, host and nslookup. (Previously this was diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index b0fa7eaab8..b6cee02efe 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -82,3 +82,7 @@ Bug Fixes When the affinity is not set, tests show a slight dip in the authoritative performance of around 5% (ranging from 3.8% to 7.8%), but the recursive performance is now consistently improved. :gl:`#2822` + +- When following QNAME minimization, BIND could use a stale zonecut from cache + to resolve the query, resulting in a non-minimized query. This has been + fixed :gl:`#2665`