bind9 bind 9.18.14

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

9.18.14 released

• [bug] Fix a possible use-after-free bug in the dns__catz_done_cb() function.

• [bug] A reference counting problem on the error path in the xfrin_connect_done() might cause an assertion failure on shutdown.

• [bug] Reduce the number of dns_dnssec_verify calls made determining if revoked keys needs to be removed from the trust anchors.

• [bug] Fix several issues in nsupdate timeout handling and update the -t option's documentation.

• [doc] Fix the DF-flag documentation on the outgoing UDP packets.

• [cleanup] Remove the isc_fsaccess API in favor of creating temporary file first and atomically replace the key with non-truncated content.

• [doc] Remove a dead link in the DNSSEC guide.

• [cleanup] Value stored to 'source' during its initialization is never read.

• [bug] Fix an omission in an earlier commit to avoid a race between the 'dns__catz_update_cb()' and 'dns_catz_dbupdate_callback()' functions.

• [cleanup] Deprecate zone type "delegation-only" and the "delegation-only" and "root-delegation-only" options.

• [bug] Hold a catz reference while the update process is running, so that the catalog zone is not destroyed during shutdown until the update process is finished or properly canceled by the activated 'shuttingdown' flag.

• [bug] When changing from a NSEC3 capable DNSSEC algorithm to an NSEC3 incapable DNSSEC algorithm using KASP the zone could sometimes be incompletely signed.

• [bug] Fix BIND and dig zone transfer hanging when downloading large zones over TLS from a primary server, especially over unstable connections.

[Bruce Dubbs]

Fixed at commit f40d447b0626d1514f0ab431a8cee29e4b4a6fe4

[Bruce Dubbs]

Milestone renamed