mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-07 16:00:34 -05:00
68 lines
2.1 KiB
ReStructuredText
68 lines
2.1 KiB
ReStructuredText
..
|
|
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
This Source Code Form is subject to the terms of the Mozilla Public
|
|
License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
|
|
See the COPYRIGHT file distributed with this work for additional
|
|
information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.17.15
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- Sending non-zero opcode via DoT or DoH channels would trigger an assertion
|
|
failure in ``named``. This has been fixed.
|
|
|
|
ISC would like to thank Ville Heikkila of Synopsys Cybersecurity Research
|
|
Center for responsibly disclosing the vulnerability to us. :gl:`#2787`
|
|
|
|
Known Issues
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- Support for compiling and running BIND 9 natively on Windows has been
|
|
completely removed. The last release branch that has working Windows
|
|
support is BIND 9.16. :gl:`#2690`
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- None.
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- Fixed a bug that caused the NSEC salt to be changed for KASP zones on
|
|
every startup. :gl:`#2725`
|
|
|
|
- Signed, insecure delegation responses prepared by ``named`` either
|
|
lacked the necessary NSEC records or contained duplicate NSEC records
|
|
when both wildcard expansion and CNAME chaining were required to
|
|
prepare the response. This has been fixed. :gl:`#2759`
|
|
|
|
- When preparing DNS responses, ``named`` could replace the letters
|
|
``W`` (uppercase) and ``w`` (lowercase) with ``\000``. This has been
|
|
fixed. :gl:`#2779`
|
|
|
|
- The configuration-checking code failed to account for the inheritance
|
|
rules of the ``key-directory`` option. As a side effect of this flaw,
|
|
the code detecting ``key-directory`` conflicts for zones using KASP
|
|
incorrectly reported unique key directories as being reused. This has
|
|
been fixed. :gl:`#2778`
|
|
|
|
- A deadlock at startup was introduced when fixing :gl:`#1875` because when
|
|
locking key files for reading and writing, "in-view" logic was not taken into
|
|
account. This has been fixed. :gl:`#2783`
|