66 lines
2.5 KiB
XML
66 lines
2.5 KiB
XML
<!--
|
|
- Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
-
|
|
- This Source Code Form is subject to the terms of the Mozilla Public
|
|
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
- file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
-
|
|
- See the COPYRIGHT file distributed with this work for additional
|
|
- information regarding copyright ownership.
|
|
-->
|
|
|
|
<section xml:id="relnotes-9.11.26"><info><title>Notes for BIND 9.11.26</title></info>
|
|
|
|
<section xml:id="relnotes-9.11.26-changes"><info><title>Feature Changes</title></info>
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
The default value of <command>max-recursion-queries</command> was
|
|
increased from 75 to 100. Since the queries sent towards root and TLD
|
|
servers are now included in the count (as a result of the fix for
|
|
CVE-2020-8616), <command>max-recursion-queries</command> has a higher
|
|
chance of being exceeded by non-attack queries, which is the main
|
|
reason for increasing its default value. [GL #2305]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The default value of <command>nocookie-udp-size</command> was restored
|
|
back to 4096 bytes. Since <command>max-udp-size</command> is the upper
|
|
bound for <command>nocookie-udp-size</command>, this change relieves
|
|
the operator from having to change
|
|
<command>nocookie-udp-size</command> together with
|
|
<command>max-udp-size</command> in order to increase the default EDNS
|
|
buffer size limit. <command>nocookie-udp-size</command> can still be
|
|
set to a value lower than <command>max-udp-size</command>, if desired.
|
|
[GL #2250]
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</section>
|
|
|
|
<section xml:id="relnotes-9.11.26-bugs"><info><title>Bug Fixes</title></info>
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
Handling of missing DNS COOKIE responses over UDP was tightened by
|
|
falling back to TCP. [GL #2275]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
The CNAME synthesized from a DNAME was incorrectly followed when the
|
|
QTYPE was CNAME or ANY. [GL #2280]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
Building with native PKCS#11 support for AEP Keyper has been broken
|
|
since BIND 9.11.22. This has been fixed. [GL #2315]
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</section>
|
|
|
|
</section>
|