bind9/doc/arm/notes.xml

<?xml version="1.0" encoding="utf-8"?>
<!--
 - Copyright (C) 2014, 2015  Internet Systems Consortium, Inc. ("ISC")
 -
 - Permission to use, copy, modify, and/or distribute this software for any
 - purpose with or without fee is hereby granted, provided that the above
 - copyright notice and this permission notice appear in all copies.
 -
 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 - AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 - PERFORMANCE OF THIS SOFTWARE.
-->

<sect1 xmlns:xi="http://www.w3.org/2001/XInclude">
  <xi:include href="noteversion.xml"/>
  <sect2 id="relnotes_intro">
    <title>Introduction</title>
    <para>
      This document summarizes changes since the last production release
      of BIND on the corresponding major release branch.
    </para>
  </sect2>
  <sect2 id="relnotes_download">
    <title>Download</title>
    <para>
      The latest versions of BIND 9 software can always be found at
      <ulink url="http://www.isc.org/downloads/"
	>http://www.isc.org/downloads/</ulink>.
      There you will find additional information about each release,
      source code, and pre-compiled versions for Microsoft Windows
      operating systems.
    </para>
  </sect2>
  <sect2 id="relnotes_security">
    <title>Security Fixes</title>
    <itemizedlist>
      <listitem>
	<para>None</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_features">
    <title>New Features</title>
    <itemizedlist>
      <listitem>
	<para>None</para>
      </listitem>
      <listitem>
	<para>
	  An <command>--enable-querytrace</command> configure switch is
	  now available to enable very verbose query tracelogging. This
	  option can only be set at compile time. This option has a
	  negative performance impact and should be used only for
	  debugging.
	</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_changes">
    <title>Feature Changes</title>
    <itemizedlist>
      <listitem>
	<para>None</para>
      </listitem>
      <listitem>
	<para>
	  Large inline-signing changes should be less disruptive.
	  Signature generation is now done incrementally; the number
	  of signatures to be generated in each quantum is controlled
	  by "sig-signing-signatures <replaceable>number</replaceable>;".
	  [RT #37927]
	</para>
      </listitem>
      <listitem>
	<para>
	  When retrying a query via TCP due to the first answer being
	  truncated, <command>dig</command> will now correctly send
	  the SIT (server identity token) value returned by the server
	  in the prior response. [RT #39047]
	</para>
      </listitem>
      <listitem>
	<para>
	  Retrieving the local port range from net.ipv4.ip_local_port_range
	  on Linux is now supported.
	</para>
      </listitem>
    </itemizedlist>
  </sect2>
  <sect2 id="relnotes_bugs">
    <title>Bug Fixes</title>
    <itemizedlist>
      <listitem>
	<para>
	  Asynchronous zone loads were not handled correctly when the
	  zone load was already in progress; this could trigger a crash
	  in zt.c. [RT #37573]
 	</para>
       </listitem>
      <listitem>
	<para>
	  A race during shutdown or reconfiguration could
	  cause an assertion failure in mem.c. [RT #38979]
	</para>
      </listitem>
      <listitem>
	<para>
	  Some answer formatting options didn't work correctly with
	  <command>dig +short</command>. [RT #39291]
	</para>
      </listitem>
      <listitem>
	<para>
	  Several bugs have been fixed in the RPZ implementation:
	</para>
	<itemizedlist>
	  <para>
	    Policy zones that did not specifically require recursion
	    could be treated as if they did; consequently, setting
	    <command>qname-wait-recurse no;</command> was
	    sometimes ineffective.  This has been corrected.
	    In most configurations, behavioral changes due to this
	    fix will not be noticeable. [RT #39229]
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The server could crash if policy zones were updated (e.g.
	    via <command>rndc reload</command> or an incoming zone
	    transfer) while RPZ processing was still ongoing for an
	    active query. [RT #39415]
	  </para>
	</listitem>
	<listitem>
	  <para>
	    On servers with more than one policy zone configured,
	    if one policy zone was updated via AXFR (especially when
	    the zone was very large) a race condition could allow the
	    RPZ summary data to fall out of sync with the policy zones,
	    potentially leading to an assertion failure in rpz.c.
	    [RT #39567]
	  </para>
	</listitem>
      </itemizedlist>
    </itemizedlist>
  </sect2>
  <sect2 id="end_of_life">
    <title>End of Life</title>
    <para>
      The end of life for BIND 9.10 is yet to be determined but
      will not be before BIND 9.12.0 has been released for 6 months.
      <ulink url="https://www.isc.org/downloads/software-support-policy/"
        >https://www.isc.org/downloads/software-support-policy/</ulink>
    </para>
  </sect2>
  <sect2 id="relnotes_thanks">
    <title>Thank You</title>
    <para>
      Thank you to everyone who assisted us in making this release possible.
      If you would like to contribute to ISC to assist us in continuing to
      make quality open source software, please visit our donations page at
      <ulink url="http://www.isc.org/donate/"
	>http://www.isc.org/donate/</ulink>.
    </para>
  </sect2>
</sect1>