#16919 closed enhancement (fixed)

bind9-9.18.6 bind

Reported by: Bruce Dubbs Owned by: thomas
Priority: normal Milestone: 11.2
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (5)

comment:1 by pierre, 20 months ago

Owner: changed from blfs-book to pierre
Status: newassigned

Notes for BIND 9.18.6

Feature Changes

  • The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically disabled on systems where they are disallowed by the security policy (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms need to be migrated to new algorithms prior to running on these systems, as graceful migration to different DNSSEC algorithms is not possible when RSASHA1 is disallowed by the operating system. [GL #3469]
  • Log messages related to fetch limiting have been improved to provide more complete information. Specifically, the final counts of allowed and spilled fetches are now logged before the counter object is destroyed. [GL #3461]

Bug Fixes

  • When running as a validating resolver forwarding all queries to another resolver, named could crash with an assertion failure. These crashes occurred when the configured forwarder sent a broken DS response and named failed its attempts to find a proper one instead. This has been fixed. [GL #3439]
  • Non-dynamic zones that inherit dnssec-policy from the view or options blocks were not marked as inline-signed and therefore never scheduled to be re-signed. This has been fixed. [GL #3438]
  • The old max-zone-ttl zone option was meant to be superseded by the max-zone-ttl option in dnssec-policy; however, the latter option was not fully effective. This has been corrected: zones no longer load if they contain TTLs greater than the limit configured in dnssec-policy. For zones with both the old max-zone-ttl option and dnssec-policy configured, the old option is ignored, and a warning is generated. [GL #2918]
  • rndc dumpdb -expired was fixed to include expired RRsets, even if stale-cache-enable is set to no and the cache-cleaning time window has passed. [GL #3462]

comment:2 by pierre, 20 months ago

Owner: changed from pierre to thomas
Status: assignednew

comment:3 by thomas, 20 months ago

Status: newassigned

comment:4 by thomas, 20 months ago

Since docs are now .rst format, the installation of the documentation is dropped (cannot be converted with BLFS tools) but a section is added which talks about the ARM and where to find it.

comment:5 by thomas, 20 months ago

Resolution: fixed
Status: assignedclosed

Fixed in [002d2dc]

Note: See TracTickets for help on using tickets.