Merge branch 'v9_17_15-release' into 'main'

Merge 9.17.15 release branch

See merge request isc-projects/bind9!5220
This commit is contained in:
Michał Kępień 2021-06-23 11:02:05 +00:00
commit 3939385c13
5 changed files with 38 additions and 14 deletions

15
CHANGES
View file

@ -11,12 +11,17 @@
that is in a different view, "in-view" logic was not
taken into account. This has been fixed. [GL #2783]
5660. [bug] Checking of key-directory and dnssec-policy was broken.
The checks failed to account for key-directory
inheritance. [GL #2778]
5660. [bug] The configuration-checking code failed to account for
the inheritance rules of the "key-directory" option.
[GL #2778]
5659. [bug] 'W' in wildcard expansions was being mapped to '\000'.
[GL #2779]
This change was included in BIND 9.17.15.
5659. [bug] When preparing DNS responses, named could replace the
letters 'W' (uppercase) and 'w' (lowercase) with '\000'.
This has been fixed. [GL #2779]
This change was included in BIND 9.17.15.
5658. [bug] Increasing "max-cache-size" for a running named instance
(using "rndc reconfig") was not causing the hash tables

View file

@ -14,7 +14,7 @@
#
m4_define([bind_VERSION_MAJOR], 9)dnl
m4_define([bind_VERSION_MINOR], 17)dnl
m4_define([bind_VERSION_PATCH], 14)dnl
m4_define([bind_VERSION_PATCH], 15)dnl
m4_define([bind_VERSION_EXTRA], )dnl
m4_define([bind_DESCRIPTION], [(Development Release)])dnl
m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl

View file

@ -52,6 +52,7 @@ https://www.isc.org/download/. There you will find additional
information about each release, and source code.
.. include:: ../notes/notes-current.rst
.. include:: ../notes/notes-9.17.15.rst
.. include:: ../notes/notes-9.17.14.rst
.. include:: ../notes/notes-9.17.13.rst
.. include:: ../notes/notes-9.17.12.rst

View file

@ -0,0 +1,25 @@
..
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.
See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.
Notes for BIND 9.17.15
----------------------
Bug Fixes
~~~~~~~~~
- When preparing DNS responses, ``named`` could replace the letters
``W`` (uppercase) and ``w`` (lowercase) with ``\000``. This has been
fixed. :gl:`#2779`
- The configuration-checking code failed to account for the inheritance
rules of the ``key-directory`` option. As a side effect of this flaw,
the code detecting ``key-directory`` conflicts for zones using KASP
incorrectly reported unique key directories as being reused. This has
been fixed. :gl:`#2778`

View file

@ -8,7 +8,7 @@
See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.
Notes for BIND 9.17.15
Notes for BIND 9.17.16
----------------------
Security Fixes
@ -53,13 +53,6 @@ Bug Fixes
when both wildcard expansion and CNAME chaining were required to
prepare the response. This has been fixed. :gl:`#2759`
- Queries where the wildcard match contained the letter ``W`` failed
to return the correct response as the ``W`` was mapped to ``\000``.
:gl:`#2779`
- Checking of ``key-directory`` and ``dnssec-policy`` was broken.
The checks failed to account for key-directory inheritance. :gl:`#2778`
- A deadlock at startup was introduced when fixing :gl:`#1875` because when
locking key files for reading and writing, "in-view" logic was not taken into
account. This has been fixed. :gl:`#2783`