305 lines
14 KiB
HTML
305 lines
14 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
|
||
<!--
|
||
- Copyright (C) 2000-2019 Internet Systems Consortium, Inc. ("ISC")
|
||
-
|
||
- This Source Code Form is subject to the terms of the Mozilla Public
|
||
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
||
- file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
||
-->
|
||
<html lang="en">
|
||
<head>
|
||
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
|
||
<title>Appendix A. Release Notes</title>
|
||
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
|
||
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
|
||
<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
|
||
<link rel="prev" href="Bv9ARM.ch07.html" title="Chapter 7. Troubleshooting">
|
||
<link rel="next" href="Bv9ARM.ch09.html" title="Appendix B. A Brief History of the DNS and BIND">
|
||
</head>
|
||
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
||
<div class="navheader">
|
||
<table width="100%" summary="Navigation header">
|
||
<tr><th colspan="3" align="center">Appendix A. Release Notes</th></tr>
|
||
<tr>
|
||
<td width="20%" align="left">
|
||
<a accesskey="p" href="Bv9ARM.ch07.html">Prev</a> </td>
|
||
<th width="60%" align="center"> </th>
|
||
<td width="20%" align="right"> <a accesskey="n" href="Bv9ARM.ch09.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
<hr>
|
||
</div>
|
||
<div class="appendix">
|
||
<div class="titlepage"><div><div><h1 class="title">
|
||
<a name="Bv9ARM.ch08"></a>Release Notes</h1></div></div></div>
|
||
<div class="toc">
|
||
<p><b>Table of Contents</b></p>
|
||
<dl class="toc">
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#id-1.9.2">Release Notes for BIND Version 9.15.0</a></span></dt>
|
||
<dd><dl>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_intro">Introduction</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_versions">Note on Version Numbering</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_platforms">Supported Platforms</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_download">Download</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_security">Security Fixes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_features">New Features</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_removed">Removed Features</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_changes">Feature Changes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_bugs">Bug Fixes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_license">License</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#end_of_life">End of Life</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch08.html#relnotes_thanks">Thank You</a></span></dt>
|
||
</dl></dd>
|
||
</dl>
|
||
</div>
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
|
||
<a name="id-1.9.2"></a>Release Notes for BIND Version 9.15.0</h2></div></div></div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
|
||
<p>
|
||
BIND 9.15 is an unstable development release of BIND.
|
||
This document summarizes new features and functional changes that
|
||
have been introduced on this branch. With each development release
|
||
leading up to the stable BIND 9.16 release, this document will be
|
||
updated with additional features added and bugs fixed.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_versions"></a>Note on Version Numbering</h3></div></div></div>
|
||
<p>
|
||
Until BIND 9.12, new feature development releases were tagged
|
||
as "alpha" and "beta", leading up to the first stable release
|
||
for a given development branch, which always ended in ".0".
|
||
More recently, BIND adopted the "odd-unstable/even-stable"
|
||
release numbering convention. There will be no "alpha" or "beta"
|
||
releases in the 9.15 branch, only increasing version numbers.
|
||
So, for example, what would previously have been called 9.15.0a1,
|
||
9.15.0a2, 9.15.0b1, and so on, will instead be called 9.15.0,
|
||
9.15.1, 9.15.2, etc.
|
||
</p>
|
||
<p>
|
||
The first stable release from this development branch will be
|
||
renamed as 9.16.0. Thereafter, maintenance releases will continue
|
||
on the 9.16 branch, while unstable feature development proceeds in
|
||
9.17.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_platforms"></a>Supported Platforms</h3></div></div></div>
|
||
<p>
|
||
To build on UNIX-like systems, BIND requires support for POSIX.1c
|
||
threads (IEEE Std 1003.1c-1995), the Advanced Sockets API for
|
||
IPv6 (RFC 3542), and standard atomic operations provided by the
|
||
C compiler.
|
||
</p>
|
||
<p>
|
||
The OpenSSL cryptography library must be available for the target
|
||
platform. A PKCS#11 provider can be used instead for Public Key
|
||
cryptography (i.e., DNSSEC signing and validation), but OpenSSL is
|
||
still required for general cryptography operations such as hashing
|
||
and random number generation.
|
||
</p>
|
||
<p>
|
||
More information can be found in the <code class="filename">PLATFORMS.md</code>
|
||
file that is included in the source distribution of BIND 9. If your
|
||
compiler and system libraries provide the above features, BIND 9
|
||
should compile and run. If that isn't the case, the BIND
|
||
development team will generally accept patches that add support
|
||
for systems that are still supported by their respective vendors.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_download"></a>Download</h3></div></div></div>
|
||
<p>
|
||
The latest versions of BIND 9 software can always be found at
|
||
<a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
|
||
There you will find additional information about each release,
|
||
source code, and pre-compiled versions for Microsoft Windows
|
||
operating systems.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||
<li class="listitem">
|
||
<p>
|
||
In certain configurations, <span class="command"><strong>named</strong></span> could crash
|
||
with an assertion failure if <span class="command"><strong>nxdomain-redirect</strong></span>
|
||
was in use and a redirected query resulted in an NXDOMAIN from the
|
||
cache. This flaw is disclosed in CVE-2019-6467. [GL #880]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
The TCP client quota set using the <span class="command"><strong>tcp-clients</strong></span>
|
||
option could be exceeded in some cases. This could lead to
|
||
exhaustion of file descriptors. (CVE-2018-5743) [GL #615]
|
||
</p>
|
||
</li>
|
||
</ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_features"></a>New Features</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
|
||
<p>
|
||
The new <span class="command"><strong>add-soa</strong></span> option specifies whether
|
||
or not the <span class="command"><strong>response-policy</strong></span> zone's SOA record
|
||
should be included in the additional section of RPZ responses.
|
||
[GL #865]
|
||
</p>
|
||
</li></ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_removed"></a>Removed Features</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
|
||
<p>
|
||
The <span class="command"><strong>dnssec-enable</strong></span> option has been deprecated and
|
||
no longer has any effect. DNSSEC responses are always enabled
|
||
if signatures and other DNSSEC data are present. [GL #866]
|
||
</p>
|
||
</li></ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||
<li class="listitem">
|
||
<p>
|
||
When <span class="command"><strong>trusted-keys</strong></span> and
|
||
<span class="command"><strong>managed-keys</strong></span> were both configured for the
|
||
same name, or when <span class="command"><strong>trusted-keys</strong></span> was used to
|
||
configure a trust anchor for the root zone and
|
||
<span class="command"><strong>dnssec-validation</strong></span> was set to the default
|
||
value of <code class="literal">auto</code>, automatic RFC 5011 key
|
||
rollovers would be disabled. This combination of settings was
|
||
never intended to work, but there was no check for it in the
|
||
parser. This has been corrected, and it is now a fatal
|
||
configuration error. [GL #868]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
DS and CDS records are now generated with SHA-256 digests
|
||
only, instead of both SHA-1 and SHA-256. This affects the
|
||
default output of <span class="command"><strong>dnssec-dsfromkey</strong></span>, the
|
||
<code class="filename">dsset</code> files generated by
|
||
<span class="command"><strong>dnssec-signzone</strong></span>, the DS records added to
|
||
a zone by <span class="command"><strong>dnssec-signzone</strong></span> based on
|
||
<code class="filename">keyset</code> files, the CDS records added to
|
||
a zone by <span class="command"><strong>named</strong></span> and
|
||
<span class="command"><strong>dnssec-signzone</strong></span> based on "sync" timing
|
||
parameters in key files, and the checks performed by
|
||
<span class="command"><strong>dnssec-checkds</strong></span>.
|
||
</p>
|
||
</li>
|
||
</ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
|
||
<p>
|
||
The <span class="command"><strong>allow-update</strong></span> and
|
||
<span class="command"><strong>allow-update-forwarding</strong></span> options were
|
||
inadvertently treated as configuration errors when used at the
|
||
<span class="command"><strong>options</strong></span> or <span class="command"><strong>view</strong></span> level.
|
||
This has now been corrected.
|
||
[GL #913]
|
||
</p>
|
||
</li></ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_license"></a>License</h3></div></div></div>
|
||
<p>
|
||
BIND is open source software licenced under the terms of the Mozilla
|
||
Public License, version 2.0 (see the <code class="filename">LICENSE</code>
|
||
file for the full text).
|
||
</p>
|
||
<p>
|
||
The license requires that if you make changes to BIND and distribute
|
||
them outside your organization, those changes must be published under
|
||
the same license. It does not require that you publish or disclose
|
||
anything other than the changes you have made to our software. This
|
||
requirement does not affect anyone who is using BIND, with or without
|
||
modifications, without redistributing it, nor anyone redistributing
|
||
BIND without changes.
|
||
</p>
|
||
<p>
|
||
Those wishing to discuss license compliance may contact ISC at
|
||
<a class="link" href="https://www.isc.org/mission/contact/" target="_top">
|
||
https://www.isc.org/mission/contact/</a>.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="end_of_life"></a>End of Life</h3></div></div></div>
|
||
<p>
|
||
BIND 9.15 is an unstable development branch. When its development
|
||
is complete, it will be renamed to BIND 9.16, which will be a
|
||
stable branch.
|
||
</p>
|
||
<p>
|
||
The end of life date for BIND 9.16 has not yet been determined.
|
||
For those needing long term support, the current Extended Support
|
||
Version (ESV) is BIND 9.11, which will be supported until at
|
||
least December 2021. See
|
||
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
|
||
for details of ISC's software support policy.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
|
||
<p>
|
||
Thank you to everyone who assisted us in making this release possible.
|
||
If you would like to contribute to ISC to assist us in continuing to
|
||
make quality open source software, please visit our donations page at
|
||
<a class="link" href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
|
||
</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="navfooter">
|
||
<hr>
|
||
<table width="100%" summary="Navigation footer">
|
||
<tr>
|
||
<td width="40%" align="left">
|
||
<a accesskey="p" href="Bv9ARM.ch07.html">Prev</a> </td>
|
||
<td width="20%" align="center"> </td>
|
||
<td width="40%" align="right"> <a accesskey="n" href="Bv9ARM.ch09.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td width="40%" align="left" valign="top">Chapter 7. Troubleshooting </td>
|
||
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
|
||
<td width="40%" align="right" valign="top"> Appendix B. A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
</div>
|
||
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.15.0 (Development Release)</p>
|
||
</body>
|
||
</html>
|