bind9-9.16.16

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

--- 9.16.16 released ---

5637. [func] Change the default value of the "max-ixfr-ratio" option to "unlimited".

5636. [bug] named and named-checkconf did not report an error when multiple zones with the "dnssec-policy" option set were using the same zone file.

5635. [bug] Journal compaction could fail when a journal with invalid transaction headers was not detected at startup.

5634. [bug] If "dnssec-policy" was active and a private key file was temporarily offline during a rekey event, named could incorrectly introduce replacement keys and break a signed zone.

5633. [doc] The "inline-signing" option was incorrectly described as being inherited from the "options"/"view" levels and was incorrectly accepted at those levels without effect.

5632. [func] Add a new built-in KASP, "insecure", which is used to transition a zone from a signed to an unsigned state. The existing built-in KASP "none" should no longer be used to unsign a zone.

5631. [protocol] Update the implementation of the ZONEMD RR type to match RFC 8976.

5630. [func] Treat DNSSEC responses containing NSEC3 records with iteration counts greater than 150 as insecure.

5629. [func] Reduce the maximum supported number of NSEC3 iterations that can be configured for a zone to 150.

5627. [bug] RRSIG(SOA) RRsets placed anywhere other than at the zone apex were triggering infinite resigning loops.

5626. [bug] When generating zone signing keys, KASP now also checks for key ID conflicts among newly created keys, rather than just between new and existing ones.

5625. [bug] A deadlock could occur when multiple "rndc addzone", "rndc delzone", and/or "rndc modzone" commands were invoked simultaneously for different zones.

5622. [cleanup] The lib/samples/ directory has been removed, as export versions of libraries are no longer maintained.

5619. [protocol] Implement draft-vandijk-dnsop-nsec-ttl, updating the protocol such that NSEC(3) TTL values are set to the minimum of the SOA MINIMUM value or the SOA TTL.

5618. [bug] Change 5149 introduced some inconsistencies in the way record TTLs were presented in cache dumps.

[Bruce Dubbs]

Fixed at d3ad4c0f91479af8364484994f18ee9f969c1cfa

Update to Test-Differences-0.68 (Perl module)
Update to bind9-9.16.16
Update to mesa-21.1.1
Update to pipewire-0.3.28
Update to libsigc++-2.10.7 and libsigc++-3.0.7
Update to glibmm-2.66.1

[Bruce Dubbs]

Milestone renamed