From b0f71ff9bea9a14759acaac2f8d2d7f6bdf9a96a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Fri, 5 Aug 2022 06:56:30 +0200 Subject: [PATCH 1/2] Update BIND version to 9.19.5-dev --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index bc90bcba30..b99be9adfc 100644 --- a/configure.ac +++ b/configure.ac @@ -16,7 +16,7 @@ # m4_define([bind_VERSION_MAJOR], 9)dnl m4_define([bind_VERSION_MINOR], 19)dnl -m4_define([bind_VERSION_PATCH], 4)dnl +m4_define([bind_VERSION_PATCH], 5)dnl m4_define([bind_VERSION_EXTRA], -dev)dnl m4_define([bind_DESCRIPTION], [(Development Release)])dnl m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl From 7242fa9fe9b1b6c24d3170c754aee4471234897d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Fri, 5 Aug 2022 06:56:30 +0200 Subject: [PATCH 2/2] Set up release notes for BIND 9.19.5 --- doc/notes/notes-current.rst | 36 +++--------------------------------- 1 file changed, 3 insertions(+), 33 deletions(-) diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 5509cdcf82..71ec1735ce 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -9,7 +9,7 @@ .. See the COPYRIGHT file distributed with this work for additional .. information regarding copyright ownership. -Notes for BIND 9.19.4 +Notes for BIND 9.19.5 --------------------- Security Fixes @@ -32,42 +32,12 @@ Removed Features - None. -- The use of the ``max-zone-ttl`` option in ``options`` and ``zone`` - blocks has been deprecated; it should now be configured as part of - ``dnssec-policy``. A warning is logged if this option is used in - ``options`` or ``zone``. In a future release, it will become - nonoperational. :gl:`#2918` - Feature Changes ~~~~~~~~~~~~~~~ -- DNSSEC ``RSASHA1`` and ``NSEC3RSASHA1`` are automatically disabled - on systems (e.g. RHEL9) where they are disallowed by the security - policy. Primary zones using those algorithms need to be moved - off of them prior to running on these systems as graceful migration - to different DNSSEC algorithms is not possible when RSASHA1 is - disallowed by the OS. :gl:`#3469` - -- Fetch limit log messages have been improved to provide more complete - information. Specifically, the final values of allowed and spilled fetches - will now be logged before the counter object gets destroyed. :gl:`#3461` +- None. Bug Fixes ~~~~~~~~~ -- When running as a validating resolver forwarding all queries to - another resolver, :iscman:`named` could crash with an assertion - failure. These crashes occurred when the configured forwarder sent a - broken DS response and :iscman:`named` failed its attempts to find a - proper one instead. This has been fixed. :gl:`#3439` - -- A DNS compression would be applied on the root zone name if it is repeatedly - used in the same RRSet. :gl:`#3423` - -- Non-dynamic zones that inherit dnssec-policy from the view or - options level were not marked as inline-signed, and thus were never - scheduled to be re-signed. This is now fixed. :gl:`#3438` - -- Fix `rndc dumpdb -expired` to include expired RRsets, even if the cache - cleaning time window has passed. This will now show expired RRsets that are - stuck in the cache. :gl:`#3462` +- None.