bind9-9.18.2 bind

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

9.18.2 released

• [bug] The "starting maxtime timer" message related to outgoing zone transfers was incorrectly logged at the ERROR level instead of DEBUG(1).

• [bug] Ensure that zone maintenance queries have a retry limit.

• [bug] When using both the +qr and +y options dig could crash if the connection to the first server was not successful.

• [func] Add new "reuseport" option to enable/disable load balancing of sockets.

• [bug] dig could hang in some cases involving multiple servers in a lookup, when a request fails and the next one refuses to start for some reason, for example if it was an IPv4 mapped IPv6 address.

• [bug] dig +nssearch was hanging until manually interrupted.

• [bug] When an UPDATE targets a zone that is not configured, the requested zone name is now logged in the "not authoritative" error message, so that it is easier to track down problematic update clients.

• [cleanup] When modifying a member zone in a catalog zone, and it is detected that the zone exists and was not created by the current catalog zone, distinguish the two cases when the zone was not added by a catalog zone at all, and when the zone was added by a different catalog zone, and log a warning message accordingly.

• [bug] Quote the dns64 prefix in error messages that complain about problems with it, to avoid confusion with the following dns64 ACLs.

• [cleanup] C99 variable-length arrays are difficult to use safely, so avoid them except in test code.

• [bug] When encountering socket error while trying to initiate a TCP connection to a server, dig could hang indefinitely, when there were more servers to try.

• [bug] When timing-out or having other types of socket errors during a query, dig wasn't trying to perform the lookup using other servers, in case they exist.

• [bug] When resending a UDP request in the result of a timeout, the recv_done() function in dighost.c was prepending the new query into the loookup's queries list instead of inserting, which could cause an assertion failure when the resent query's result was SERVFAIL.

• [bug] Replace single TCP write timer with per-TCP write timers.

• [func] Set the minimum MTU on UDPv6 and TCPv6 sockets and limit TCP maximum segment size (TCP_MAXSEG) to (1220) for both TCPv4 and TCPv6 sockets.

• [bug] Invalid dnssec-policy definitions were being accepted where the defined keys did not cover both KSK and ZSK roles for a given algorithm. This is now checked for and the dnssec-policy is rejected if both roles are not present for all algorithms in use.

• [func] Replace hazard pointers based lock-free list with locked-list based queue that's simpler and has no or little performance impact.

• [bug] When calling dns_dispatch_send(), attach/detach dns_request_t object as the read callback could be called before send callback dereferencing dns_request_t object too early.

• [bug] Fix query context management issues in the TCP part of dig.

[Bruce Dubbs]

Fixed at commits

942236f8fd Update to bind and bind-utilities-9.18.2.
1c8962ea82 Update to vlc-3.0.17.4.