From: Michał Kępień Date: Fri, 2 Jun 2023 10:28:23 +0000 (+0200) Subject: Tweak and reword release notes X-Git-Tag: v9.19.14~2^2~2 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=76877a83be202712ba7041895361bcf8993f8d82;p=thirdparty%2Fbind9.git Tweak and reword release notes --- diff --git a/doc/notes/notes-9.19.14.rst b/doc/notes/notes-9.19.14.rst index cfb62bd0237..362913b6e51 100644 --- a/doc/notes/notes-9.19.14.rst +++ b/doc/notes/notes-9.19.14.rst @@ -27,16 +27,16 @@ Security Fixes New Features ~~~~~~~~~~~~ -- Add support for multi-signer model 2 (RFC 8901) when using - ``inline-signing``. :gl:`#2710` +- Support for multi-signer model 2 (:rfc:`8901`) when using + :any:`inline-signing` was added. :gl:`#2710` -- A new option to :any:`dnssec-policy` has been added, :any:`cdnskey`, that - allows you to enable or disable the publication of CDNSKEY records. - :gl:`#4050` +- A new option to :any:`dnssec-policy` has been added, :any:`cdnskey`, + that allows users to enable or disable the publication of CDNSKEY + records. :gl:`#4050` -- The read timeout in ``rndc`` can now be specified on the command line - using the ``-t`` option, allowing commands that take a long time to - complete sufficient time to do so. :gl:`#4046` +- The read timeout in :iscman:`rndc` can now be specified on the command + line using the :option:`-t ` option, allowing commands that + take a long time to complete sufficient time to do so. :gl:`#4046` - The system test suite can now be executed with pytest (along with pytest-xdist for parallel execution). :gl:`#3978` @@ -46,30 +46,31 @@ Removed Features - Special-case code that was originally added to allow GSS-TSIG to work around bugs in the Windows 2000 version of Active Directory has now - been removed since Windows 2000 is long past end-of-life. - The ``nsupdate -o`` option and the ``oldgsstsig`` command to ``nsupdate`` - have been deprecated, and are now treated as synonyms for ``nsupdate -g`` - and ``gsstsig`` respectively. :gl:`#4012` + been removed, since Windows 2000 is long past end-of-life. The + :option:`-o ` option and the ``oldgsstsig`` command to + :iscman:`nsupdate` have been deprecated, and are now treated as + synonyms for :option:`-g ` and ``gsstsig`` respectively. + :gl:`#4012` Feature Changes ~~~~~~~~~~~~~~~ -- Improve the responsiveness of the ``named`` serving as an authoritative DNS - server for a delegation-heavy zone(s) shortly after loading such zone(s). - :gl:`#4045` +- The responsiveness of :iscman:`named` was improved, when serving as an + authoritative DNS server for a delegation-heavy zone(s) shortly after + loading such zone(s). :gl:`#4045` Bug Fixes ~~~~~~~~~ - When the :any:`stale-answer-enable` option was enabled and the - :any:`stale-answer-client-timeout` option was enabled and larger than 0, - ``named`` was taking two places from the :any:`clients-per-query` limit for - each client and was failing to gradually auto-tune its value, as configured. - This has been fixed. :gl:`#4074` - -- It could happen that after the :any:`stale-answer-client-timeout` duration, - a delegation from cache was returned to the client. This has now been fixed. - :gl:`#3950` + :any:`stale-answer-client-timeout` option was enabled and larger than + 0, :iscman:`named` previously allocated two slots from the + :any:`clients-per-query` limit for each client and failed to gradually + auto-tune its value, as configured. This has been fixed. :gl:`#4074` + +- Previously, it was possible for a delegation from cache to be returned + to the client after the :any:`stale-answer-client-timeout` duration. + This has been fixed. :gl:`#3950` - BIND could allocate too big buffers when sending data via stream-based DNS transports, leading to increased memory usage.