upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-18 08:32:17 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Tweak and reword release notes

Browse source
This commit is contained in:
Michal Nowak 2022-05-05 11:43:04 +02:00
parent 7f1fbcb4e7
commit 0cb80f7343
No known key found for this signature in database
GPG key ID: 24A3E8463AEE5E56
1 changed files with 26 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

48
doc/notes/notes-9.19.1.rst
View file

@ -26,36 +26,40 @@ Security Fixes
New Features
~~~~~~~~~~~~
- Add DNS Extended Errors (:rfc:`8914`) when stale answers are returned from
cache. :gl:`#2267`
- The Object Identifier (OID) embedded at the start of a PRIVATEOID public
key in a KEY, DNSKEY, CDNSKEY, or RKEY resource record is now checked to
ensure that it is valid when reading from zone files or receiving data
on the wire, and the OID is now printed when the ``dig +rrcomments``
option is used. Similarly, the name embedded at the start of a PRIVATEDNS
public key is also checked for validity. :gl:`#3234`
- Support DNS Extended Errors (:rfc:`8914`) ``Stale Answer`` and
``Stale NXDOMAIN Answer`` when stale answers are returned from cache.
:gl:`#2267`
- The Object Identifier (OID) embedded at the start of a PRIVATEOID
signature in a SIG, or RRSIG resource record is now checked to
public key in a KEY, DNSKEY, CDNSKEY, or RKEY resource records is now
checked to ensure that it is valid when reading from zone files or
receiving data on the wire. The Object Identifier is now printed when
the ``dig +rrcomments`` option is used. Similarly, the name embedded
at the start of a PRIVATEDNS public key is also checked for validity.
:gl:`#3234`
- The Object Identifier (OID) embedded at the start of a PRIVATEOID
signature in a SIG, or RRSIG resource records is now checked to
ensure that it is valid when reading from zone files or receiving
data on the wire. Similarly, the name embedded at the start of
a PRIVATEDNS public key is also checked for validity. :gl:`#3296`
- Catalog Zones schema version 2, as described in the "DNS Catalog Zones" IETF
draft version 5 document, is now supported by :iscman:`named`. All of the
previously supported BIND-specific catalog zone custom properties
(``primaries``, ``allow-query``, and ``allow-transfer``), as well as the new
Change of Ownership (``coo``) property, are now implemented. Schema version 1
is still supported, with some additional validation rules applied from
schema version 2: for example, the ``version`` property is mandatory, and a
member zone PTR RRset must not contain more than one record. In the event of a
- Catalog Zones schema version 2, as described in the
"DNS Catalog Zones" IETF draft version 5 document, is now supported by
:iscman:`named`. All of the previously supported BIND-specific catalog
zone custom properties (``primaries``, ``allow-query``, and
``allow-transfer``), as well as the new Change of Ownership (``coo``)
property, are now implemented. Schema version 1 is still supported,
with some additional validation rules applied from schema version 2:
for example, the ``version`` property is mandatory, and a member zone
PTR RRset must not contain more than one record. In the event of a
validation error, a corresponding error message is logged to help with
diagnosing the problem. :gl:`#3221` :gl:`#3222` :gl:`#3223` :gl:`#3224`
:gl:`#3225`
diagnosing the problem. :gl:`#3221` :gl:`#3222` :gl:`#3223`
:gl:`#3224` :gl:`#3225`
Bug Fixes
~~~~~~~~~
- CDS and CDNSKEY DELETE records are removed from the zone when configured with
'auto-dnssec maintain;'. This has been fixed. :gl:`#2931`.
- Previously, CDS and CDNSKEY DELETE records were removed from the zone
when configured with the ``auto-dnssec maintain;`` option. This has
been fixed. :gl:`#2931`