53a5776025
Use the new role :iscman: to replace all occurences or ``binary``
with :iscman:`binary`, creating a hyperlink to the manual page.
Generated using:
find bin -name *.rst | xargs fgrep --files-with-matches '.. iscman' | xargs -I{} -n1 basename {} .rst > /tmp/progs
for PROG in $(cat /tmp/progs); do find -name '*.rst' | xargs sed -i -e "s/\`\`$PROG\`\`/:iscman:\`$PROG\`/g"; done
Additional hand-edits were done mainly around filter-aaaa and
filter-a which are program names and and option names at the
same time. Couple more edits was neede to fix .rst syntax broken by
automatic replacement.
79 lines
3.2 KiB
ReStructuredText
79 lines
3.2 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.17.5
|
|
---------------------
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- Add a new :iscman:`rndc` command, :option:`rndc dnssec -checkds <rndc dnssec>`, which signals to
|
|
:iscman:`named` that a DS record for a given zone or key has been published
|
|
or withdrawn from the parent. This command replaces the time-based
|
|
``parent-registration-delay`` configuration option. :gl:`#1613`
|
|
|
|
- Log when :iscman:`named` adds a CDS/CDNSKEY to the zone. :gl:`#1748`
|
|
|
|
Removed Features
|
|
~~~~~~~~~~~~~~~~
|
|
|
|
- The ``--with-gperftools-profiler`` ``configure`` option was removed.
|
|
To use the gperftools profiler, the ``HAVE_GPERFTOOLS_PROFILER`` macro
|
|
now needs to be manually set in ``CFLAGS`` and ``-lprofiler`` needs to
|
|
be present in ``LDFLAGS``. :gl:`!4045`
|
|
|
|
- The ``glue-cache`` *option* has been marked as deprecated. The glue
|
|
cache *feature* still works and will be permanently *enabled* in a
|
|
future release. :gl:`#2146`
|
|
|
|
Feature Changes
|
|
~~~~~~~~~~~~~~~
|
|
|
|
- Previously, using ``dig +bufsize=0`` had the side effect of disabling
|
|
EDNS, and there was no way to test the remote server's behavior when
|
|
it had received a packet with EDNS0 buffer size set to 0. This is no
|
|
longer the case; ``dig +bufsize=0`` now sends a DNS message with EDNS
|
|
version 0 and buffer size set to 0. To disable EDNS, use ``dig
|
|
+noedns``. :gl:`#2054`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- In rare circumstances, :iscman:`named` would exit with an assertion failure
|
|
when the number of nodes stored in the red-black tree exceeded the
|
|
maximum allowed size of the internal hash table. :gl:`#2104`
|
|
|
|
- Silence spurious system log messages for an EPROTO(71) error code that
|
|
was seen on older operating systems, where unhandled ICMPv6 errors
|
|
resulted in a generic protocol error being returned instead of a more
|
|
specific error code. :gl:`#1928`
|
|
|
|
- With query name minimization enabled, :iscman:`named` failed to resolve
|
|
``ip6.arpa.`` names that had extra labels to the left of the IPv6
|
|
part. For example, when :iscman:`named` attempted query name minimization on
|
|
a name like ``A.B.1.2.3.4.(...).ip6.arpa.``, it stopped at the
|
|
leftmost IPv6 label, i.e. ``1.2.3.4.(...).ip6.arpa.``, without
|
|
considering the extra labels (``A.B``). That caused a query loop when
|
|
resolving the name: if :iscman:`named` received NXDOMAIN answers, then the
|
|
same query was repeatedly sent until the number of queries sent
|
|
reached the value of the ``max-recursion-queries`` configuration
|
|
option. :gl:`#1847`
|
|
|
|
- Parsing of LOC records was made more strict by rejecting a sole period
|
|
(``.``) and/or ``m`` as a value. These changes prevent zone files
|
|
using such values from being loaded. Handling of negative altitudes
|
|
which are not integers was also corrected. :gl:`#2074`
|
|
|
|
- Several problems found by `OSS-Fuzz`_ were fixed. (None of these are
|
|
security issues.) :gl:`!3953` :gl:`!3975`
|
|
|
|
.. _OSS-Fuzz: https://github.com/google/oss-fuzz
|