upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-16 23:52:40 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Set up release notes for BIND 9.18.12

Browse source
This commit is contained in:
Michał Kępień 2023-01-13 15:40:27 +01:00
parent 6d89ad302b
commit b6d271a1af
1 changed files with 3 additions and 32 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
doc/notes/notes-current.rst
View file

@ -9,7 +9,7 @@
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.
Notes for BIND 9.18.11
Notes for BIND 9.18.12
----------------------
Security Fixes
@ -25,11 +25,7 @@ New Features
Removed Features
~~~~~~~~~~~~~~~~
- The Differentiated Services Code Point (DSCP) feature in BIND
has been non-operational since the new Network Manager was introduced
in BIND 9.16. It is now marked as obsolete, and vestigial code
implementing it has been removed. Configuring DSCP values in
``named.conf`` will cause a warning to be logged. :gl:`#3773`
- None.
Feature Changes
~~~~~~~~~~~~~~~
@ -39,32 +35,7 @@ Feature Changes
Bug Fixes
~~~~~~~~~
- TLS session resumption might lead to handshake failures when client
certificates are used for authentication (Mutual TLS). This has
been fixed. :gl:`#3725`
- When an outgoing request timed out, the ``named`` would retry up to three
times with the same server instead of trying a next available name server.
This has been fixed. :gl:`#3637`
- Recently used ADB names and ADB entries (IP addresses) could get cleaned when
ADB would be under memory pressure. To mitigate this, count only actual ADB
names and ADB entries into the overmem memory limit (exclude internal memory
structures used for "housekeeping") and exclude recently used (<= 10 seconds)
ADB names and entries from the overmem memory cleaner. :gl:`#3739`
- Fix a rare assertion failure in the outgoing TCP DNS connection handling.
:gl:`#3178` :gl:`#3636`
- In addition to a previously fixed bug, another similar issue was discovered
where quotas could be erroneously reached for servers, including any
configured forwarders, resulting in SERVFAIL answers being sent to clients.
This has been fixed. :gl:`#3752`
- Clients may see an unexpected "Prohibited" extended DNS error when ``named``
is configured with :any:`allow-recursion`). :gl:`#3743`
- Fix a TLS error that occured with large transfers over XoT. :gl:`#3772`
- None.
Known Issues
~~~~~~~~~~~~