bind9/doc/arm/notes.xml

<?xml version="1.0" encoding="utf-8"?>
<!--
 - Copyright (C) 2014, 2015  Internet Systems Consortium, Inc. ("ISC")
 -
 - Permission to use, copy, modify, and/or distribute this software for any
 - purpose with or without fee is hereby granted, provided that the above
 - copyright notice and this permission notice appear in all copies.
 -
 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 - AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 - PERFORMANCE OF THIS SOFTWARE.
-->

<sect1 xmlns:xi="http://www.w3.org/2001/XInclude">
  <xi:include href="noteversion.xml"/>
  <sect2 id="relnotes_intro">
    <title>Introduction</title>
    <para>
      This document summarizes changes since the last production release
      of BIND on the corresponding major release branch.
    </para>
  </sect2>
  <sect2 id="relnotes_download">
    <title>Download</title>
    <para>
      The latest versions of BIND 9 software can always be found at
      <ulink url="http://www.isc.org/downloads/"
	>http://www.isc.org/downloads/</ulink>.
      There you will find additional information about each release,
      source code, and pre-compiled versions for Microsoft Windows
      operating systems.
    </para>
  </sect2>
  <sect2 id="relnotes_security">
    <title>Security Fixes</title>
    <itemizedlist>
      <listitem>
	<para>
	  On servers configured to perform DNSSEC validation, an
	  assertion failure could be triggered on answers from
	  a specially configured server.
	</para>
        <para>
	  This flaw was discovered by Breno Silveira Soares, and is
	  disclosed in CVE-2015-4620. [RT #39795]
        </para>
      </listitem> 
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_features">
    <title>New Features</title>
    <itemizedlist>
      <listitem>
	<para>None</para>
      </listitem>
      <listitem>
	<para>
	  An <command>--enable-querytrace</command> configure switch is
	  now available to enable very verbose query tracelogging. This
	  option can only be set at compile time. This option has a
	  negative performance impact and should be used only for
	  debugging.
	</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_changes">
    <title>Feature Changes</title>
    <itemizedlist>
      <listitem>
	<para>None</para>
      </listitem>
      <listitem>
	<para>
	  Large inline-signing changes should be less disruptive.
	  Signature generation is now done incrementally; the number
	  of signatures to be generated in each quantum is controlled
	  by "sig-signing-signatures <replaceable>number</replaceable>;".
	  [RT #37927]
	</para>
      </listitem>
      <listitem>
	<para>
	  Retrieving the local port range from net.ipv4.ip_local_port_range
	  on Linux is now supported.
	</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_bugs">
    <title>Bug Fixes</title>
    <itemizedlist>
      <listitem>
	<para>
	  Asynchronous zone loads were not handled correctly when the
	  zone load was already in progress; this could trigger a crash
	  in zt.c. [RT #37573]
 	</para>
       </listitem>
      <listitem>
	<para>
	  A race during shutdown or reconfiguration could
	  cause an assertion failure in mem.c. [RT #38979]
	</para>
      </listitem>
      <listitem>
	<para>
	  Some answer formatting options didn't work correctly with
	  <command>dig +short</command>. [RT #39291]
	</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="end_of_life">
    <title>End of Life</title>
    <para>
      The BIND 9.9 (Extended Support Version) will be supported until June, 2017.
      <ulink url="https://www.isc.org/downloads/software-support-policy/"
        >https://www.isc.org/downloads/software-support-policy/</ulink>
    </para>
  </sect2>
  <sect2 id="relnotes_thanks">
    <title>Thank You</title>
    <para>
      Thank you to everyone who assisted us in making this release possible.
      If you would like to contribute to ISC to assist us in continuing to
      make quality open source software, please visit our donations page at
      <ulink url="http://www.isc.org/donate/"
	>http://www.isc.org/donate/</ulink>.
    </para>
  </sect2>
</sect1>