341 lines
13 KiB
HTML
341 lines
13 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
|
||
<!--
|
||
- Copyright (C) 2004-2016 Internet Systems Consortium, Inc. ("ISC")
|
||
- Copyright (C) 2000-2003 Internet Software Consortium.
|
||
-
|
||
- Permission to use, copy, modify, and/or distribute this software for any
|
||
- purpose with or without fee is hereby granted, provided that the above
|
||
- copyright notice and this permission notice appear in all copies.
|
||
-
|
||
- THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
||
- REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
||
- AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
||
- INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
||
- LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
||
- OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
||
- PERFORMANCE OF THIS SOFTWARE.
|
||
-->
|
||
<html lang="en">
|
||
<head>
|
||
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
|
||
<title>Appendix A. Release Notes</title>
|
||
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
|
||
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
|
||
<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
|
||
<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter 8. Troubleshooting">
|
||
<link rel="next" href="Bv9ARM.ch10.html" title="Appendix B. A Brief History of the DNS and BIND">
|
||
</head>
|
||
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
|
||
<div class="navheader">
|
||
<table width="100%" summary="Navigation header">
|
||
<tr><th colspan="3" align="center">Appendix A. Release Notes</th></tr>
|
||
<tr>
|
||
<td width="20%" align="left">
|
||
<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a> </td>
|
||
<th width="60%" align="center"> </th>
|
||
<td width="20%" align="right"> <a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
<hr>
|
||
</div>
|
||
<div class="appendix">
|
||
<div class="titlepage"><div><div><h1 class="title">
|
||
<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
|
||
<div class="toc">
|
||
<p><b>Table of Contents</b></p>
|
||
<dl class="toc">
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.9.10b1</a></span></dt>
|
||
<dd><dl>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_maint">Maintenance</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
|
||
<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
|
||
</dl></dd>
|
||
</dl>
|
||
</div>
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h2 class="title" style="clear: both">
|
||
<a name="id-1.10.2"></a>Release Notes for BIND Version 9.9.10b1</h2></div></div></div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
|
||
<p>
|
||
This document summarizes significant changes since the last
|
||
production release of BIND on the corresponding major release
|
||
branch.
|
||
Please see the CHANGES file for a further list of bug fixes and
|
||
other changes.
|
||
</p>
|
||
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_download"></a>Download</h3></div></div></div>
|
||
<p>
|
||
The latest versions of BIND 9 software can always be found at
|
||
<a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
|
||
There you will find additional information about each release,
|
||
source code, and pre-compiled versions for Microsoft Windows
|
||
operating systems.
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>named</strong></span> could mishandle authority sections
|
||
with missing RRSIGs, triggering an assertion failure. This
|
||
flaw is disclosed in CVE-2016-9444. [RT #43632]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>named</strong></span> mishandled some responses where
|
||
covering RRSIG records were returned without the requested
|
||
data, resulting in an assertion failure. This flaw is
|
||
disclosed in CVE-2016-9147. [RT #43548]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
|
||
records which could trigger an assertion failure when there was
|
||
a class mismatch. This flaw is disclosed in CVE-2016-9131.
|
||
[RT #43522]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
It was possible to trigger assertions when processing
|
||
responses containing answers of type DNAME. This flaw is
|
||
disclosed in CVE-2016-8864. [RT #43465]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Added the ability to specify the maximum number of records
|
||
permitted in a zone (<code class="option">max-records #;</code>).
|
||
This provides a mechanism to block overly large zone
|
||
transfers, which is a potential risk with slave zones from
|
||
other parties, as described in CVE-2016-6170.
|
||
[RT #42143]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
It was possible to trigger an assertion when rendering a
|
||
message using a specially crafted request. This flaw is
|
||
disclosed in CVE-2016-2776. [RT #43139]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Calling <span class="command"><strong>getrrsetbyname()</strong></span> with a non-
|
||
absolute name could trigger an infinite recursion bug in
|
||
<span class="command"><strong>lwresd</strong></span> or <span class="command"><strong>named</strong></span> with
|
||
<span class="command"><strong>lwres</strong></span> configured if, when combined with
|
||
a search list entry from <code class="filename">resolv.conf</code>,
|
||
the resulting name is too long. This flaw is disclosed in
|
||
CVE-2016-2775. [RT #42694]
|
||
</p>
|
||
</li>
|
||
</ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||
<li class="listitem">
|
||
<p>
|
||
The ISC DNSSEC Lookaside Validation (DLV) service is scheduled
|
||
to be disabled in 2017. A warning is now logged when
|
||
<span class="command"><strong>named</strong></span> is configured to use this service,
|
||
either explicitly or via <code class="option">dnssec-lookaside auto;</code>.
|
||
[RT #42207]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
If an ACL is specified with an address prefix in which the
|
||
prefix length is longer than the address portion (for example,
|
||
192.0.2.1/8), <span class="command"><strong>named</strong></span> will now log a warning.
|
||
In future releases this will be a fatal configuration error.
|
||
[RT #43367]
|
||
</p>
|
||
</li>
|
||
</ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||
<li class="listitem">
|
||
<p>
|
||
Named could deadlock there were multiple changes to
|
||
NSEC/NSEC3 parameters for a zone being processed at the
|
||
same time. [RT #42770]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Named could trigger a assertion when sending notify
|
||
messages. [RT #44019]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Windows installs were failing due to triggering UAC without
|
||
the installation binary being signed.
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
A change in the internal binary representation of the RBT database
|
||
node structure enabled a race condition to occur (especially when
|
||
BIND was built with certain compilers or optimizer settings),
|
||
leading to inconsistent database state which caused random
|
||
assertion failures. [RT #42380]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Referencing a nonexistent zone in a <span class="command"><strong>response-policy</strong></span>
|
||
statement could cause an assertion failure during configuration.
|
||
[RT #43787]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>rndc addzone</strong></span> could cause a crash
|
||
when attempting to add a zone with a type other than
|
||
<span class="command"><strong>master</strong></span> or <span class="command"><strong>slave</strong></span>.
|
||
Such zones are now rejected. [RT #43665]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>named</strong></span> could hang when encountering log
|
||
file names with large apparent gaps in version number (for
|
||
example, when files exist called "logfile.0", "logfile.1",
|
||
and "logfile.1482954169"). This is now handled correctly.
|
||
[RT #38688]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
If a zone was updated while <span class="command"><strong>named</strong></span> was
|
||
processing a query for nonexistent data, it could return
|
||
out-of-sync NSEC3 records causing potential DNSSEC validation
|
||
failure. [RT #43247]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
<span class="command"><strong>named</strong></span> could crash when loading a zone
|
||
which had RRISG records whose expiry fields were far enough
|
||
apart to cause an integer overflow when comparing them.
|
||
[RT #40571]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
The <span class="command"><strong>arpaname</strong></span> command was not installed into
|
||
the correct <span class="command"><strong>prefix</strong></span><code class="filename">/bin</code>
|
||
directory. [RT #42910]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
When receiving a response from an authoritative server with
|
||
a TTL value of zero, <span class="command"><strong>named></strong></span> will now only use
|
||
that response once, to answer the currently active clients that
|
||
were waiting for it. Previously, such response could be cached
|
||
and reused for up to one second. [RT #42142]
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Corrected a bug in the <span class="command"><strong>rndc</strong></span> control channel
|
||
that could allow a read past the end of a buffer, crashing
|
||
<span class="command"><strong>named</strong></span>. Thanks to Lian Yihan for reporting
|
||
this error.
|
||
</p>
|
||
</li>
|
||
<li class="listitem">
|
||
<p>
|
||
Reverted a change to the query logging format that was
|
||
inadvertently backported from the 9.11 branch. [RT #43238]
|
||
</p>
|
||
</li>
|
||
</ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_maint"></a>Maintenance</h3></div></div></div>
|
||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
|
||
<p>
|
||
The built-in root hints have been updated to include
|
||
IPv6 addresses for B.ROOT-SERVERS.NET (2001:500:84::b),
|
||
E.ROOT-SERVERS.NET (2001:500:a8::e) and
|
||
G.ROOT-SERVERS.NET (2001:500:12::d0d).
|
||
</p>
|
||
</li></ul></div>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="end_of_life"></a>End of Life</h3></div></div></div>
|
||
<p>
|
||
BIND 9.9 (Extended Support Version) will be supported until
|
||
December, 2017.
|
||
<a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
|
||
</p>
|
||
</div>
|
||
|
||
<div class="section">
|
||
<div class="titlepage"><div><div><h3 class="title">
|
||
<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
|
||
<p>
|
||
Thank you to everyone who assisted us in making this release possible.
|
||
If you would like to contribute to ISC to assist us in continuing to
|
||
make quality open source software, please visit our donations page at
|
||
<a class="link" href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
|
||
</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="navfooter">
|
||
<hr>
|
||
<table width="100%" summary="Navigation footer">
|
||
<tr>
|
||
<td width="40%" align="left">
|
||
<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a> </td>
|
||
<td width="20%" align="center"> </td>
|
||
<td width="40%" align="right"> <a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
|
||
</td>
|
||
</tr>
|
||
<tr>
|
||
<td width="40%" align="left" valign="top">Chapter 8. Troubleshooting </td>
|
||
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
|
||
<td width="40%" align="right" valign="top"> Appendix B. A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
</div>
|
||
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.9.10b1 (Extended Support Version)</p>
|
||
</body>
|
||
</html>
|