From: Michał Kępień <michal@isc.org>
Date: Wed, 15 Sep 2021 20:49:20 +0000 (+0200)
Subject: Set up release notes for BIND 9.17.19
X-Git-Tag: v9.17.19~38^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=81f18aa5c7296be46ef75259116e8892e34748f7;p=thirdparty%2Fbind9.git

Set up release notes for BIND 9.17.19
---

diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst
index 9a652a3fc4a..ceebf58f1c5 100644
--- a/doc/arm/notes.rst
+++ b/doc/arm/notes.rst
@@ -51,6 +51,7 @@ The latest versions of BIND 9 software can always be found at
 https://www.isc.org/download/. There you will find additional
 information about each release, and source code.
 
+.. include:: ../notes/notes-current.rst
 .. include:: ../notes/notes-9.17.18.rst
 .. include:: ../notes/notes-9.17.17.rst
 .. include:: ../notes/notes-9.17.16.rst
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
new file mode 100644
index 00000000000..d985db095f7
--- /dev/null
+++ b/doc/notes/notes-current.rst
@@ -0,0 +1,55 @@
+.. 
+   Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+   
+   This Source Code Form is subject to the terms of the Mozilla Public
+   License, v. 2.0. If a copy of the MPL was not distributed with this
+   file, you can obtain one at https://mozilla.org/MPL/2.0/.
+   
+   See the COPYRIGHT file distributed with this work for additional
+   information regarding copyright ownership.
+
+Notes for BIND 9.17.18
+----------------------
+
+Security Fixes
+~~~~~~~~~~~~~~
+
+- None.
+
+Known Issues
+~~~~~~~~~~~~
+
+- None.
+
+New Features
+~~~~~~~~~~~~
+
+- None.
+
+Removed Features
+~~~~~~~~~~~~~~~~
+
+- Native PKCS#11 support has been removed; BIND 9 now uses OpenSSL engine_pkcs11 from the
+  OpenSC project. :gl:`#2691`
+
+Feature Changes
+~~~~~~~~~~~~~~~
+
+- ``named`` and ``named-checkconf`` now issue a warning when there is a single
+  configured port in the ``query-source``, ``transfer-source``,
+  ``notify-source``, and ``parental-source``, and/or in their respective IPv6 counterparts.
+  :gl:`#2888`
+
+- ``named`` and ``named-checkconf`` now return an error when the single configured
+  port in the ``query-source``, ``transfer-source``, ``notify-source``,
+  ``parental-source``, and/or their respective IPv6 counterparts clashes with the
+  global listening port. This configuration is no longer supported as of BIND
+  9.16.0 but no error was reported, although sending UDP messages
+  (such as notifies) would fail. :gl:`#2888`
+
+Bug Fixes
+~~~~~~~~~
+
+- When new IP addresses were added to the system during ``named``
+  startup, ``named`` failed to listen on TCP for the newly added
+  interfaces. :gl:`#2852`