Opened 2 years ago

Closed 2 years ago

#16442 closed enhancement (fixed)

bind9-9.18.2 bind

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 11.2
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (3)

comment:1 by Bruce Dubbs, 2 years ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned

comment:2 by Bruce Dubbs, 2 years ago

9.18.2 released

  • [bug] The "starting maxtime timer" message related to outgoing zone transfers was incorrectly logged at the ERROR level instead of DEBUG(1).
  • [bug] Ensure that zone maintenance queries have a retry limit.
  • [bug] When using both the +qr and +y options dig could crash if the connection to the first server was not successful.
  • [func] Add new "reuseport" option to enable/disable load balancing of sockets.
  • [bug] dig could hang in some cases involving multiple servers in a lookup, when a request fails and the next one refuses to start for some reason, for example if it was an IPv4 mapped IPv6 address.
  • [bug] dig +nssearch was hanging until manually interrupted.

  • [bug] When an UPDATE targets a zone that is not configured, the requested zone name is now logged in the "not authoritative" error message, so that it is easier to track down problematic update clients.
  • [cleanup] When modifying a member zone in a catalog zone, and it is detected that the zone exists and was not created by the current catalog zone, distinguish the two cases when the zone was not added by a catalog zone at all, and when the zone was added by a different catalog zone, and log a warning message accordingly.

  • [bug] Quote the dns64 prefix in error messages that complain about problems with it, to avoid confusion with the following dns64 ACLs.

  • [cleanup] C99 variable-length arrays are difficult to use safely, so avoid them except in test code.

  • [bug] When encountering socket error while trying to initiate a TCP connection to a server, dig could hang indefinitely, when there were more servers to try.

  • [bug] When timing-out or having other types of socket errors during a query, dig wasn't trying to perform the lookup using other servers, in case they exist.

  • [bug] When resending a UDP request in the result of a timeout, the recv_done() function in dighost.c was prepending the new query into the loookup's queries list instead of inserting, which could cause an assertion failure when the resent query's result was SERVFAIL.

  • [bug] Replace single TCP write timer with per-TCP write timers.
  • [func] Set the minimum MTU on UDPv6 and TCPv6 sockets and limit TCP maximum segment size (TCP_MAXSEG) to (1220) for both TCPv4 and TCPv6 sockets.
  • [bug] Invalid dnssec-policy definitions were being accepted where the defined keys did not cover both KSK and ZSK roles for a given algorithm. This is now checked for and the dnssec-policy is rejected if both roles are not present for all algorithms in use.
  • [func] Replace hazard pointers based lock-free list with locked-list based queue that's simpler and has no or little performance impact.
  • [bug] When calling dns_dispatch_send(), attach/detach dns_request_t object as the read callback could be called before send callback dereferencing dns_request_t object too early.
  • [bug] Fix query context management issues in the TCP part of dig.

comment:3 by Bruce Dubbs, 2 years ago

Resolution: fixed
Status: assignedclosed

Fixed at commits

942236f8fd Update to bind and bind-utilities-9.18.2.
1c8962ea82 Update to vlc-3.0.17.4.
Note: See TracTickets for help on using tickets.