1 | | New point version. |
| 1 | Changes in 9.13.2: |
| 2 | |
| 3 | 4987. [cleanup] dns_rdataslab_tordataset() and its related |
| 4 | dns_rdatasetmethods_t callbacks were removed as they |
| 5 | were not being used by anything in BIND. [GL #371] |
| 6 | |
| 7 | 4986. [func] When built on Linux, BIND now requires the libcap |
| 8 | library to set process privileges, unless capability |
| 9 | support is explicitly overridden with "configure |
| 10 | --disable-linux-caps". [GL #321] |
| 11 | |
| 12 | 4985. [func] Add a new slave zone option, "mirror", to enable |
| 13 | serving a non-authoritative copy of a zone that |
| 14 | is subject to DNSSEC validation before being |
| 15 | used. For now, this option is only meant to |
| 16 | facilitate deployment of an RFC 7706-style local |
| 17 | copy of the root zone. [GL #33] |
| 18 | |
| 19 | 4984. [bug] Improve handling of very large incremental |
| 20 | zone transfers to prevent journal corruption. [GL #339] |
| 21 | |
| 22 | 4983. [func] Add the ability to not return a DNS COOKIE option |
| 23 | when one is present in the request (answer-cookie no;). |
| 24 | [GL #173] |
| 25 | |
| 26 | 4982. [cleanup] Return FORMERR if the question section is empty |
| 27 | and no COOKIE option is present; this restores |
| 28 | older behavior except in the newly specified |
| 29 | COOKIE case. [GL #260] |
| 30 | |
| 31 | 4981. [bug] Fix race in cmsg buffer usage in socket code. |
| 32 | [GL #180] |
| 33 | |
| 34 | 4980. [bug] Named-checkconf failed to detect bad in-view targets. |
| 35 | [GL #288] |
| 36 | |
| 37 | 4979. [placeholder] |
| 38 | |
| 39 | 4978. [test] Fix error handling and resolver configuration in the |
| 40 | "rpz" system test. [GL #312] |
| 41 | |
| 42 | 4977. [func] When starting up, log the same details that |
| 43 | would be reported by 'named -V'. [GL #247] |
| 44 | |
| 45 | 4976. [bug] Log the label with invalid prefix length correctly |
| 46 | when loading RPZ zones. [GL #254] |
| 47 | |
| 48 | 4975. [bug] The server cookie computation for sha1 and sha256 did |
| 49 | not match the method described in RFC 7873. [GL #356] |
| 50 | |
| 51 | 4974. [bug] Restore default rrset-order to random. [GL #336] |
| 52 | |
| 53 | 4973. [func] verifyzone() and the functions it uses were moved to |
| 54 | libdns and refactored to prevent exit() from being |
| 55 | called upon failure. A side effect of that is that |
| 56 | dnssec-signzone and dnssec-verify now check for memory |
| 57 | leaks upon shutdown. [GL #266] |
| 58 | |
| 59 | 4972. [func] Declare the 'rdata' argument for dns_rdata_tostruct() |
| 60 | to be const. [GL #341] |
| 61 | |
| 62 | 4971. [bug] dnssec-signzone and dnssec-verify did not treat records |
| 63 | below a DNAME as out-of-zone data. [GL #298] |
| 64 | |
| 65 | 4970. [func] Add QNAME minimization option to resolver. [GL #16] |
| 66 | |
| 67 | 4969. [cleanup] Refactor zone logging functions. [GL #269] |