From: Tinderbox User Date: Wed, 23 Mar 2016 06:45:14 +0000 (+0000) Subject: regen master X-Git-Tag: v9.11.0a1~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=46472a450e043434d78fa18edc73bca8c47f3981;p=thirdparty%2Fbind9.git regen master --- diff --git a/doc/arm/Bv9ARM.ch01.html b/doc/arm/Bv9ARM.ch01.html index af046a56f27..c37bad05fbb 100644 --- a/doc/arm/Bv9ARM.ch01.html +++ b/doc/arm/Bv9ARM.ch01.html @@ -555,6 +555,6 @@ -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch02.html b/doc/arm/Bv9ARM.ch02.html index 9fafcebc114..be765362d3f 100644 --- a/doc/arm/Bv9ARM.ch02.html +++ b/doc/arm/Bv9ARM.ch02.html @@ -153,6 +153,6 @@ -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch03.html b/doc/arm/Bv9ARM.ch03.html index feedd99aa4c..68af1ff9f48 100644 --- a/doc/arm/Bv9ARM.ch03.html +++ b/doc/arm/Bv9ARM.ch03.html @@ -669,6 +669,6 @@ controls { -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch04.html b/doc/arm/Bv9ARM.ch04.html index 5c4fdd5a3a5..4b9d2805e7a 100644 --- a/doc/arm/Bv9ARM.ch04.html +++ b/doc/arm/Bv9ARM.ch04.html @@ -2420,6 +2420,6 @@ $ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch05.html b/doc/arm/Bv9ARM.ch05.html index 4a882ca370b..4ec08dc430a 100644 --- a/doc/arm/Bv9ARM.ch05.html +++ b/doc/arm/Bv9ARM.ch05.html @@ -144,6 +144,6 @@ -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch06.html b/doc/arm/Bv9ARM.ch06.html index 580b769c8a7..0bac4dc786d 100644 --- a/doc/arm/Bv9ARM.ch06.html +++ b/doc/arm/Bv9ARM.ch06.html @@ -13390,6 +13390,6 @@ HOST-127.EXAMPLE. MX 0 . -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch07.html b/doc/arm/Bv9ARM.ch07.html index 9ac05c223fb..d234e672749 100644 --- a/doc/arm/Bv9ARM.ch07.html +++ b/doc/arm/Bv9ARM.ch07.html @@ -379,6 +379,6 @@ allow-query { !{ !10/8; any; }; key example; }; -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch08.html b/doc/arm/Bv9ARM.ch08.html index 1e6484869e5..b1f2689cc8f 100644 --- a/doc/arm/Bv9ARM.ch08.html +++ b/doc/arm/Bv9ARM.ch08.html @@ -134,6 +134,6 @@ -

BIND 9.11.0pre-alpha

+

BIND 9.11.0a1

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html index aaabecce92a..fb08a164ce3 100644 --- a/doc/arm/Bv9ARM.ch09.html +++ b/doc/arm/Bv9ARM.ch09.html @@ -44,7 +44,7 @@

Table of Contents

-
Release Notes for BIND Version 9.11.0pre-alpha
+
Release Notes for BIND Version 9.11.0a1
Introduction
Download
@@ -60,13 +60,16 @@

-Release Notes for BIND Version 9.11.0pre-alpha

+Release Notes for BIND Version 9.11.0a1

Introduction

- This document summarizes changes since the last production release - of BIND on the corresponding major release branch. + BIND 9.11.0 is a new feature release of BIND, still under development. + This document summarizes new features and functional changes that + have been introduced on this branch. With each development + release leading up to the final BIND 9.11.0 release, this document + will be updated with additional features added and bugs fixed.

@@ -623,9 +626,9 @@ the newly-created "cname" log category.

  • - If named is not configured to validate the answer then - allow fallback to plain DNS on timeout even when we know - the server supports EDNS. This will allow the server to + If named is not configured to validate + answers, then allow fallback to plain DNS on timeout even when + we know the server supports EDNS. This will allow the server to potentially resolve signed queries when TCP is being blocked.

  • @@ -693,190 +696,15 @@

    Porting Changes

    • - The Microsoft Windows install tool - BINDInstall.exe which requires a - non-free version of Visual Studio to be built, now uses two - files (lists of flags and files) created by the Configure - perl script with all the needed information which were - previously compiled in the binary. Read - win32utils/build.txt for more details. - [RT #38915] + None.

    Bug Fixes

    -
      -
    • - When deleting records from a zone database, interior nodes - could be left empty but not deleted, damaging search - performance afterward. [RT #40997] -

    • -
    • - A flag could be set in the wrong field when setting up - nonrecursive queries; this could cause the SERVFAIL cache to - cache responses it shouldn't. New querytrace logging has been - added which identified this error. [RT #41155] -

    • -
    • - The server could crash due to a use-after-free if a - zone transfer timed out. [RT #41297] -

    • -
    • - Authoritative servers that were marked as bogus (e.g. blackholed - in configuration or with invalid addresses) were being queried - anyway. [RT #41321] -

    • -
    • - Some of the options for GeoIP ACLs, including "areacode", - "metrocode", and "timezone", were incorrectly documented - as "area", "metro" and "tz". Both the long and abbreviated - versions are now accepted. -

    • -
    • - dig, host and - nslookup aborted when encountering - a name which, after appending search list elements, - exceeded 255 bytes. Such names are now skipped, but - processing of other names will continue. [RT #36892] -

    • -
    • - The error message generated when - named-checkzone or - named-checkconf -z encounters a - $TTL directive without a value has - been clarified. [RT #37138] -

    • -
    • - Semicolon characters (;) included in TXT records were - incorrectly escaped with a backslash when the record was - displayed as text. This is actually only necessary when there - are no quotation marks. [RT #37159] -

    • -
    • - When files opened for writing by named, - such as zone journal files, were referenced more than once - in named.conf, it could lead to file - corruption as multiple threads wrote to the same file. This - is now detected when loading named.conf - and reported as an error. [RT #37172] -

    • -
    • - When checking for updates to trust anchors listed in - managed-keys, named - now revalidates keys based on the current set of - active trust anchors, without relying on any cached - record of previous validation. [RT #37506] -

    • -
    • - Large-system tuning - (configure --with-tuning=large) caused - problems on some platforms by setting a socket receive - buffer size that was too large. This is now detected and - corrected at run time. [RT #37187] -

    • -
    • - When NXDOMAIN redirection is in use, queries for a name - that is present in the redirection zone but a type that - is not present will now return NOERROR instead of NXDOMAIN. -

    • -
    • - Due to an inadvertent removal of code in the previous - release, when named encountered an - authoritative name server which dropped all EDNS queries, - it did not always try plain DNS. This has been corrected. - [RT #37965] -

    • -
    • - A regression caused nsupdate to use the default recursive servers - rather than the SOA MNAME server when sending the UPDATE. -

    • -
    • - Adjusted max-recursion-queries to accommodate the smaller - initial packet sizes used in BIND 9.10 and higher when - contacting authoritative servers for the first time. -

    • -
    • - Built-in "empty" zones did not correctly inherit the - "allow-transfer" ACL from the options or view. [RT #38310] -

    • -
    • - Two leaks were fixed that could cause named - processes to grow to very large sizes. [RT #38454] -

    • -
    • - Fixed some bugs in RFC 5011 trust anchor management, - including a memory leak and a possible loss of state - information. [RT #38458] -

    • -
    • - Asynchronous zone loads were not handled correctly when the - zone load was already in progress; this could trigger a crash - in zt.c. [RT #37573] -

    • -
    • - A race during shutdown or reconfiguration could - cause an assertion failure in mem.c. [RT #38979] -

    • -
    • - Some answer formatting options didn't work correctly with - dig +short. [RT #39291] -

    • -
    • -

      - Several bugs have been fixed in the RPZ implementation: -

      -
        -
      • - Policy zones that did not specifically require recursion - could be treated as if they did; consequently, setting - qname-wait-recurse no; was - sometimes ineffective. This has been corrected. - In most configurations, behavioral changes due to this - fix will not be noticeable. [RT #39229] -

      • -
      • - The server could crash if policy zones were updated (e.g. - via rndc reload or an incoming zone - transfer) while RPZ processing was still ongoing for an - active query. [RT #39415] -

      • -
      • - On servers with one or more policy zones configured as - slaves, if a policy zone updated during regular operation - (rather than at startup) using a full zone reload, such as - via AXFR, a bug could allow the RPZ summary data to fall out - of sync, potentially leading to an assertion failure in - rpz.c when further incremental updates were made to the - zone, such as via IXFR. [RT #39567] -

      • -
      • - The server could match a shorter prefix than what was - available in CLIENT-IP policy triggers, and so, an - unexpected action could be taken. This has been - corrected. [RT #39481] -

      • -
      • - The server could crash if a reload of an RPZ zone was - initiated while another reload of the same zone was - already in progress. [RT #39649] -

      • -
      • - Negative trust anchors (NTAs) were incorrectly deleted - when the server was reloaded or reconfigured. [RT #41058] -

      • -
      • - Zones configured to use map format - master files can't be used as policy zones because RPZ - summary data isn't compiled when such zones are mapped into - memory. This limitation may be fixed in a future release, - but in the meantime it has been documented, and attempting - to use such zones in response-policy - statements is now a configuration error. [RT #38321] -

      • -
      -
    • -
    +
    • + None. +

    @@ -917,6 +745,6 @@

    -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html index 0618294bea5..64556f63fe4 100644 --- a/doc/arm/Bv9ARM.ch10.html +++ b/doc/arm/Bv9ARM.ch10.html @@ -155,6 +155,6 @@
    -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/Bv9ARM.ch11.html b/doc/arm/Bv9ARM.ch11.html index 4790d51cce2..1b77479fbeb 100644 --- a/doc/arm/Bv9ARM.ch11.html +++ b/doc/arm/Bv9ARM.ch11.html @@ -497,6 +497,6 @@
    -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/Bv9ARM.ch12.html b/doc/arm/Bv9ARM.ch12.html index 86cc87436fb..23d54bf4cf3 100644 --- a/doc/arm/Bv9ARM.ch12.html +++ b/doc/arm/Bv9ARM.ch12.html @@ -543,6 +543,6 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
    -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/Bv9ARM.ch13.html b/doc/arm/Bv9ARM.ch13.html index 08894680a0c..5d0d5f852fb 100644 --- a/doc/arm/Bv9ARM.ch13.html +++ b/doc/arm/Bv9ARM.ch13.html @@ -157,6 +157,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html index 2ae86d8b0d6..b9b9f531c0e 100644 --- a/doc/arm/Bv9ARM.html +++ b/doc/arm/Bv9ARM.html @@ -40,7 +40,7 @@

    BIND 9 Administrator Reference Manual

    -

    BIND Version 9.11.0pre-alpha

    +

    BIND Version 9.11.0a1

    @@ -244,7 +244,7 @@
    A. Release Notes
    -
    Release Notes for BIND Version 9.11.0pre-alpha
    +
    Release Notes for BIND Version 9.11.0a1
    Introduction
    Download
    @@ -393,6 +393,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html index 1aa2a268141..4fcfbe42159 100644 --- a/doc/arm/man.arpaname.html +++ b/doc/arm/man.arpaname.html @@ -81,6 +81,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html index 3100130ba40..8a11118d5ec 100644 --- a/doc/arm/man.ddns-confgen.html +++ b/doc/arm/man.ddns-confgen.html @@ -185,6 +185,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.delv.html b/doc/arm/man.delv.html index 04f112abd28..dab8584fbde 100644 --- a/doc/arm/man.delv.html +++ b/doc/arm/man.delv.html @@ -510,6 +510,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html index e3f782e6571..c3d4116f95d 100644 --- a/doc/arm/man.dig.html +++ b/doc/arm/man.dig.html @@ -853,6 +853,6 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html index 8dd13053bff..d3ca85caaa0 100644 --- a/doc/arm/man.dnssec-checkds.html +++ b/doc/arm/man.dnssec-checkds.html @@ -112,6 +112,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html index f7fe0c3161c..0b79d90998e 100644 --- a/doc/arm/man.dnssec-coverage.html +++ b/doc/arm/man.dnssec-coverage.html @@ -219,6 +219,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html index 508df20b7fc..f817ede8653 100644 --- a/doc/arm/man.dnssec-dsfromkey.html +++ b/doc/arm/man.dnssec-dsfromkey.html @@ -213,6 +213,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-importkey.html b/doc/arm/man.dnssec-importkey.html index 5feae314d8a..d5239113fe4 100644 --- a/doc/arm/man.dnssec-importkey.html +++ b/doc/arm/man.dnssec-importkey.html @@ -187,6 +187,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html index 12d3a35a634..499fc1e3759 100644 --- a/doc/arm/man.dnssec-keyfromlabel.html +++ b/doc/arm/man.dnssec-keyfromlabel.html @@ -391,6 +391,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html index 190e8062bd5..a880f5814bb 100644 --- a/doc/arm/man.dnssec-keygen.html +++ b/doc/arm/man.dnssec-keygen.html @@ -465,6 +465,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html index b07c1c94fb5..808ac940b0e 100644 --- a/doc/arm/man.dnssec-revoke.html +++ b/doc/arm/man.dnssec-revoke.html @@ -134,6 +134,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html index 2a847b8d6d6..6b2fff388a6 100644 --- a/doc/arm/man.dnssec-settime.html +++ b/doc/arm/man.dnssec-settime.html @@ -277,6 +277,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html index 3cadb9f3915..2c3a5d8ca89 100644 --- a/doc/arm/man.dnssec-signzone.html +++ b/doc/arm/man.dnssec-signzone.html @@ -567,6 +567,6 @@ db.example.com.signed -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index eeebe814f51..203444f47ce 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -164,6 +164,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.dnstap-read.html b/doc/arm/man.dnstap-read.html index f1c6872c942..1ca5b021322 100644 --- a/doc/arm/man.dnstap-read.html +++ b/doc/arm/man.dnstap-read.html @@ -107,6 +107,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index 51aad013024..2a7596e6b1f 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -102,6 +102,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index b5eae32ba29..ebaa6a5dda4 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -255,6 +255,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 910fd1a99ac..443ffdde3a5 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -112,6 +112,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.lwresd.html b/doc/arm/man.lwresd.html index a9500635cd2..c3192a21d7f 100644 --- a/doc/arm/man.lwresd.html +++ b/doc/arm/man.lwresd.html @@ -253,6 +253,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 89017142fed..c36a1ea9301 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -151,6 +151,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 97caa68a23b..965eca1e51a 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -338,6 +338,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 54e33a28105..6c4e6db5e91 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -102,6 +102,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html index 662c575cce0..a713756ca0b 100644 --- a/doc/arm/man.named-rrchecker.html +++ b/doc/arm/man.named-rrchecker.html @@ -104,6 +104,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named.conf.html b/doc/arm/man.named.conf.html index e6d770fb13b..d3dcead636d 100644 --- a/doc/arm/man.named.conf.html +++ b/doc/arm/man.named.conf.html @@ -691,6 +691,6 @@ zone -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 3bfc1ff40b0..78e6f8b8a30 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -384,6 +384,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index 5a90359aaf8..c2d3c0c220f 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -103,6 +103,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index 045cd7fbdd7..195fc558add 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -674,6 +674,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 9f21b77822a..d741bbd8dda 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -223,6 +223,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index a065efca967..4740df4fabd 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -246,6 +246,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 83188a67391..93c1fa8ed89 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -782,6 +782,6 @@ -

    BIND 9.11.0pre-alpha

    +

    BIND 9.11.0a1

    diff --git a/doc/arm/notes.html b/doc/arm/notes.html index bfddddcdac9..96a27e243b5 100644 --- a/doc/arm/notes.html +++ b/doc/arm/notes.html @@ -21,13 +21,16 @@

    -Release Notes for BIND Version 9.11.0pre-alpha

    +Release Notes for BIND Version 9.11.0a1

    Introduction

    - This document summarizes changes since the last production release - of BIND on the corresponding major release branch. + BIND 9.11.0 is a new feature release of BIND, still under development. + This document summarizes new features and functional changes that + have been introduced on this branch. With each development + release leading up to the final BIND 9.11.0 release, this document + will be updated with additional features added and bugs fixed.

    @@ -584,9 +587,9 @@ the newly-created "cname" log category.

  • - If named is not configured to validate the answer then - allow fallback to plain DNS on timeout even when we know - the server supports EDNS. This will allow the server to + If named is not configured to validate + answers, then allow fallback to plain DNS on timeout even when + we know the server supports EDNS. This will allow the server to potentially resolve signed queries when TCP is being blocked.

  • @@ -654,190 +657,15 @@

    Porting Changes

    • - The Microsoft Windows install tool - BINDInstall.exe which requires a - non-free version of Visual Studio to be built, now uses two - files (lists of flags and files) created by the Configure - perl script with all the needed information which were - previously compiled in the binary. Read - win32utils/build.txt for more details. - [RT #38915] + None.

    Bug Fixes

    -
      -
    • - When deleting records from a zone database, interior nodes - could be left empty but not deleted, damaging search - performance afterward. [RT #40997] -

    • -
    • - A flag could be set in the wrong field when setting up - nonrecursive queries; this could cause the SERVFAIL cache to - cache responses it shouldn't. New querytrace logging has been - added which identified this error. [RT #41155] -

    • -
    • - The server could crash due to a use-after-free if a - zone transfer timed out. [RT #41297] -

    • -
    • - Authoritative servers that were marked as bogus (e.g. blackholed - in configuration or with invalid addresses) were being queried - anyway. [RT #41321] -

    • -
    • - Some of the options for GeoIP ACLs, including "areacode", - "metrocode", and "timezone", were incorrectly documented - as "area", "metro" and "tz". Both the long and abbreviated - versions are now accepted. -

    • -
    • - dig, host and - nslookup aborted when encountering - a name which, after appending search list elements, - exceeded 255 bytes. Such names are now skipped, but - processing of other names will continue. [RT #36892] -

    • -
    • - The error message generated when - named-checkzone or - named-checkconf -z encounters a - $TTL directive without a value has - been clarified. [RT #37138] -

    • -
    • - Semicolon characters (;) included in TXT records were - incorrectly escaped with a backslash when the record was - displayed as text. This is actually only necessary when there - are no quotation marks. [RT #37159] -

    • -
    • - When files opened for writing by named, - such as zone journal files, were referenced more than once - in named.conf, it could lead to file - corruption as multiple threads wrote to the same file. This - is now detected when loading named.conf - and reported as an error. [RT #37172] -

    • -
    • - When checking for updates to trust anchors listed in - managed-keys, named - now revalidates keys based on the current set of - active trust anchors, without relying on any cached - record of previous validation. [RT #37506] -

    • -
    • - Large-system tuning - (configure --with-tuning=large) caused - problems on some platforms by setting a socket receive - buffer size that was too large. This is now detected and - corrected at run time. [RT #37187] -

    • -
    • - When NXDOMAIN redirection is in use, queries for a name - that is present in the redirection zone but a type that - is not present will now return NOERROR instead of NXDOMAIN. -

    • -
    • - Due to an inadvertent removal of code in the previous - release, when named encountered an - authoritative name server which dropped all EDNS queries, - it did not always try plain DNS. This has been corrected. - [RT #37965] -

    • -
    • - A regression caused nsupdate to use the default recursive servers - rather than the SOA MNAME server when sending the UPDATE. -

    • -
    • - Adjusted max-recursion-queries to accommodate the smaller - initial packet sizes used in BIND 9.10 and higher when - contacting authoritative servers for the first time. -

    • -
    • - Built-in "empty" zones did not correctly inherit the - "allow-transfer" ACL from the options or view. [RT #38310] -

    • -
    • - Two leaks were fixed that could cause named - processes to grow to very large sizes. [RT #38454] -

    • -
    • - Fixed some bugs in RFC 5011 trust anchor management, - including a memory leak and a possible loss of state - information. [RT #38458] -

    • -
    • - Asynchronous zone loads were not handled correctly when the - zone load was already in progress; this could trigger a crash - in zt.c. [RT #37573] -

    • -
    • - A race during shutdown or reconfiguration could - cause an assertion failure in mem.c. [RT #38979] -

    • -
    • - Some answer formatting options didn't work correctly with - dig +short. [RT #39291] -

    • -
    • -

      - Several bugs have been fixed in the RPZ implementation: -

      -
        -
      • - Policy zones that did not specifically require recursion - could be treated as if they did; consequently, setting - qname-wait-recurse no; was - sometimes ineffective. This has been corrected. - In most configurations, behavioral changes due to this - fix will not be noticeable. [RT #39229] -

      • -
      • - The server could crash if policy zones were updated (e.g. - via rndc reload or an incoming zone - transfer) while RPZ processing was still ongoing for an - active query. [RT #39415] -

      • -
      • - On servers with one or more policy zones configured as - slaves, if a policy zone updated during regular operation - (rather than at startup) using a full zone reload, such as - via AXFR, a bug could allow the RPZ summary data to fall out - of sync, potentially leading to an assertion failure in - rpz.c when further incremental updates were made to the - zone, such as via IXFR. [RT #39567] -

      • -
      • - The server could match a shorter prefix than what was - available in CLIENT-IP policy triggers, and so, an - unexpected action could be taken. This has been - corrected. [RT #39481] -

      • -
      • - The server could crash if a reload of an RPZ zone was - initiated while another reload of the same zone was - already in progress. [RT #39649] -

      • -
      • - Negative trust anchors (NTAs) were incorrectly deleted - when the server was reloaded or reconfigured. [RT #41058] -

      • -
      • - Zones configured to use map format - master files can't be used as policy zones because RPZ - summary data isn't compiled when such zones are mapped into - memory. This limitation may be fixed in a future release, - but in the meantime it has been documented, and attempting - to use such zones in response-policy - statements is now a configuration error. [RT #38321] -

      • -
      -
    • -
    +
    • + None. +

    diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 1e00cc73f3f..33c49929336 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -25,7 +25,7 @@ BIND 9.11.0 is a new feature release of BIND, still under development. This document summarizes new features and functional changes that - have been introduced on this branch. With each development + have been introduced on this branch. With each development release leading up to the final BIND 9.11.0 release, this document will be updated with additional features added and bugs fixed. @@ -695,7 +695,7 @@ - If named is not configured to validate + If named is not configured to validate answers, then allow fallback to plain DNS on timeout even when we know the server supports EDNS. This will allow the server to potentially resolve signed queries when TCP is being