From 365d1c2bee6b41e20b5aae5a9211d2f295e8c02a Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 3 Dec 2020 16:53:22 +0100 Subject: [PATCH 1/5] Miscellaneous minor documentation updates --- CONTRIBUTING | 16 +++++++--------- CONTRIBUTING.md | 16 +++++++--------- 2 files changed, 14 insertions(+), 18 deletions(-) diff --git a/CONTRIBUTING b/CONTRIBUTING index 72a58aec9b..a60bb03eff 100644 --- a/CONTRIBUTING +++ b/CONTRIBUTING @@ -31,20 +31,18 @@ BIND is maintained by the Internet Systems Consortium, a public-benefit see the source, but only ISC employees have commit access. Until recently, the source could only be seen once ISC had published a release: read access to the source repository was restricted just as commit access was. -That's now changing, with the opening of a public git mirror to the BIND -source tree (see below). +That's now changing, with the opening of a public git repository of the +BIND source tree (see below). Access to source code Public BIND releases are always available from the ISC FTP site. -A public-access GIT repository is also available at https://gitlab.isc.org -. This repository is a mirror, updated several times per day, of the -source repository maintained by ISC. It contains all the public release -branches; upcoming releases can be viewed in their current state at any -time. It does not contain development branches or unreviewed work in -progress. Commits which address security vulnerablilities are withheld -until after public disclosure. +A public-access git repository is also available at https://gitlab.isc.org +. This repository contains all public release branches. Upcoming releases +can be viewed in their current state at any time. Short-lived development +branches contain unreviewed work in progress. Commits which address +security vulnerablilities are withheld until after public disclosure. You can browse the source online via https://gitlab.isc.org/isc-projects/ bind9 diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 570205b77a..6873d9794d 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -39,21 +39,19 @@ anyone can see the source, but only ISC employees have commit access. Until recently, the source could only be seen once ISC had published a release: read access to the source repository was restricted just as commit access was. That's now changing, with the opening of a -public git mirror to the BIND source tree (see below). +public git repository of the BIND source tree (see below). ### Access to source code Public BIND releases are always available from the [ISC FTP site](ftp://ftp.isc.org/isc/bind9). -A public-access GIT repository is also available at -[https://gitlab.isc.org](https://gitlab.isc.org). -This repository is a mirror, updated several times per day, of the -source repository maintained by ISC. It contains all the public release -branches; upcoming releases can be viewed in their current state at any -time. It does *not* contain development branches or unreviewed work in -progress. Commits which address security vulnerablilities are withheld -until after public disclosure. +A public-access git repository is also available at +[https://gitlab.isc.org](https://gitlab.isc.org). This repository +contains all public release branches. Upcoming releases can be viewed in +their current state at any time. Short-lived development branches +contain unreviewed work in progress. Commits which address security +vulnerablilities are withheld until after public disclosure. You can browse the source online via [https://gitlab.isc.org/isc-projects/bind9](https://gitlab.isc.org/isc-projects/bind9) From 880117798b73c33f8ce64722728e03a00a957a86 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Mon, 7 Dec 2020 09:58:28 +0100 Subject: [PATCH 2/5] Tweak and reword recent CHANGES entries --- CHANGES | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGES b/CHANGES index e3da7e2ef5..1e04cb42e4 100644 --- a/CHANGES +++ b/CHANGES @@ -1,5 +1,5 @@ -5544. [func] Restore the default value of nocookie-udp-size to 4096. - [GL #2250] +5544. [func] Restore the default value of "nocookie-udp-size" to 4096 + bytes. [GL #2250] 5541. [func] Adjust the "max-recursion-queries" default from 75 to 100. [GL #2305] @@ -10,7 +10,7 @@ 5539. [bug] Tighten handling of missing DNS COOKIE responses over UDP by falling back to TCP. [GL #2275] -5534. [bug] The synthesised CNAME from a DNAME was incorrectly +5534. [bug] The CNAME synthesized from a DNAME was incorrectly followed when the QTYPE was CNAME or ANY. [GL #2280] --- 9.11.25 released --- From f6cb61d5a0d79fcc41eff514546defa9acf07a56 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Mon, 7 Dec 2020 09:58:28 +0100 Subject: [PATCH 3/5] Tweak and reword release notes --- doc/arm/notes-9.11.26.xml | 41 +++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 21 deletions(-) diff --git a/doc/arm/notes-9.11.26.xml b/doc/arm/notes-9.11.26.xml index 535dcb7006..ea8f30c786 100644 --- a/doc/arm/notes-9.11.26.xml +++ b/doc/arm/notes-9.11.26.xml @@ -55,26 +55,25 @@ - Adjust the max-recursion-queries default - from 75 to 100. Since the queries sent towards root and - TLD servers are now included in the count (as a result - of the fix for CVE-2020-8616), - max-recursion-queries has a higher - chance of being exceeded by non-attack queries, which is - the main reason for increasing its default value. [GL - #2305] + The default value of max-recursion-queries was + increased from 75 to 100. Since the queries sent towards root and TLD + servers are now included in the count (as a result of the fix for + CVE-2020-8616), max-recursion-queries has a higher + chance of being exceeded by non-attack queries, which is the main + reason for increasing its default value. [GL #2305] - Restore the nocookie-udp-size default from 1232 to - 4096. Normally the EDNS buffer size is configured by - max-udp-size, but this configuration option - overrides the value, but most people don't and won't realize there's - an extra configuration option that needs to be tweaked. By changing - the default here, we allow the the max-udp-size to - be the sole option that needs to be changed when operator wants to - change the default EDNS buffer size. [GL #2250] + The default value of nocookie-udp-size was restored + back to 4096 bytes. Since max-udp-size is the upper + bound for nocookie-udp-size, this change relieves + the operator from having to change + nocookie-udp-size together with + max-udp-size in order to increase the default EDNS + buffer size limit. nocookie-udp-size can still be + set to a value lower than max-udp-size, if desired. + [GL #2250] @@ -84,21 +83,21 @@ - Tighten handling of missing DNS COOKIE responses over UDP by + Handling of missing DNS COOKIE responses over UDP was tightened by falling back to TCP. [GL #2275] - Building with native PKCS#11 support for AEP Keyper has - been broken since BIND 9.11.22. This has been fixed. [GL + Building with native PKCS#11 support for AEP Keyper has been broken + since BIND 9.11.22. This has been fixed. [GL #2315] #2315] - The synthesised CNAME from a DNAME was incorrectly followed - when the QTYPE was CNAME or ANY. [GL #2280] + The CNAME synthesized from a DNAME was incorrectly followed when the + QTYPE was CNAME or ANY. [GL #2280] From f5c4b2473df4c622a60a7e90b50959453adac883 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Mon, 7 Dec 2020 09:58:28 +0100 Subject: [PATCH 4/5] Reorder release notes --- doc/arm/notes-9.11.26.xml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/doc/arm/notes-9.11.26.xml b/doc/arm/notes-9.11.26.xml index ea8f30c786..a0463a717f 100644 --- a/doc/arm/notes-9.11.26.xml +++ b/doc/arm/notes-9.11.26.xml @@ -89,15 +89,15 @@ - Building with native PKCS#11 support for AEP Keyper has been broken - since BIND 9.11.22. This has been fixed. [GL #2315] - #2315] + The CNAME synthesized from a DNAME was incorrectly followed when the + QTYPE was CNAME or ANY. [GL #2280] - The CNAME synthesized from a DNAME was incorrectly followed when the - QTYPE was CNAME or ANY. [GL #2280] + Building with native PKCS#11 support for AEP Keyper has been broken + since BIND 9.11.22. This has been fixed. [GL #2315] + #2315] From 0c00a528efc0d4bf62493ea13a45c1bcfd6307d9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Mon, 7 Dec 2020 09:58:28 +0100 Subject: [PATCH 5/5] Prepare release notes for BIND 9.11.26 --- doc/arm/notes-9.11.26.xml | 44 ++------------------------------------- 1 file changed, 2 insertions(+), 42 deletions(-) diff --git a/doc/arm/notes-9.11.26.xml b/doc/arm/notes-9.11.26.xml index a0463a717f..4c78d15ea9 100644 --- a/doc/arm/notes-9.11.26.xml +++ b/doc/arm/notes-9.11.26.xml @@ -11,46 +11,6 @@
Notes for BIND 9.11.26 -
Security Fixes - - - - None. - - - -
- -
Known Issues - - - - None. - - - -
- -
New Features - - - - None. - - - -
- -
Removed Features - - - - None. - - - -
-
Feature Changes @@ -64,7 +24,7 @@ - + The default value of nocookie-udp-size was restored back to 4096 bytes. Since max-udp-size is the upper bound for nocookie-udp-size, this change relieves @@ -74,7 +34,7 @@ buffer size limit. nocookie-udp-size can still be set to a value lower than max-udp-size, if desired. [GL #2250] - +