upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Reorder release notes

Browse source
This commit is contained in:
Michał Kępień 2023-01-12 22:11:14 +01:00
parent 828d5d51d0
commit 3fcc021294
1 changed files with 13 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
doc/notes/notes-9.18.11.rst
View file

@ -70,9 +70,16 @@ Feature Changes
Bug Fixes
~~~~~~~~~
- Previously, TLS session resumption could have led to handshake
failures when client certificates were used for authentication (Mutual
TLS). This has been fixed. :gl:`#3725`
- A rare assertion failure was fixed in outgoing TCP DNS connection
handling. :gl:`#3178` :gl:`#3636`
- Large zone transfers over TLS (XoT) could fail. This has been fixed.
:gl:`#3772`
- In addition to a previously fixed bug, another similar issue was
discovered where quotas could be erroneously reached for servers,
including any configured forwarders, resulting in SERVFAIL answers
being sent to clients. This has been fixed. :gl:`#3752`
- When an outgoing request timed out, :iscman:`named` would retry up to
three times with the same server instead of trying the next available
@ -85,19 +92,12 @@ Bug Fixes
seconds) ADB names and entries are excluded from the overmem memory
cleaner. :gl:`#3739`
- A rare assertion failure was fixed in outgoing TCP DNS connection
handling. :gl:`#3178` :gl:`#3636`
- In addition to a previously fixed bug, another similar issue was
discovered where quotas could be erroneously reached for servers,
including any configured forwarders, resulting in SERVFAIL answers
being sent to clients. This has been fixed. :gl:`#3752`
- The "Prohibited" Extended DNS Error was inadvertently set in some
NOERROR responses. This has been fixed. :gl:`#3743`
- Large zone transfers over TLS (XoT) could fail. This has been fixed.
:gl:`#3772`
- Previously, TLS session resumption could have led to handshake
failures when client certificates were used for authentication (Mutual
TLS). This has been fixed. :gl:`#3725`
Known Issues
~~~~~~~~~~~~