]> git.ipfire.org Git - ipfire-2.x.git/commit - lfs/bind
bind: Update to 9.11.18
authorMatthias Fischer <matthias.fischer@ipfire.org>
Tue, 21 Apr 2020 19:02:38 +0000 (21:02 +0200)
committerArne Fitzenreiter <arne_f@ipfire.org>
Tue, 21 Apr 2020 19:14:38 +0000 (19:14 +0000)
commit1494b402548fb461fe8306d6114fe31eeeecd98c
treeee1e48491034605e9e2fc79ab7f54eb4018dc4ec
parent2d52362dcb8e8b1284180667e23474a320d2ff8a
bind: Update to 9.11.18

For details see:
https://downloads.isc.org/isc/bind9/9.11.18/RELEASE-NOTES-bind-9.11.18.html

"Security Fixes

DNS rebinding protection was ineffective when BIND 9 is configured as a forwarding
DNS server. Found and responsibly reported by Tobias Klein. [GL #1574]

Known Issues

We have received reports that in some circumstances, receipt of an IXFR can cause
the processing of queries to slow significantly. Some of these were related to RPZ
processing, which has been fixed in this release (see below). Others appear to occur
where there are NSEC3-related changes (such as an operator changing the NSEC3 salt
used in the hash calculation). These are being investigated. [GL #1685]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
lfs/bind