From af23f815223f2640a427d6884a5019e3bbf61780 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:46:38 +0100 Subject: [PATCH 1/3] Generate changelog for BIND 9.18.42 --- doc/arm/changelog.rst | 1 + doc/changelog/changelog-9.18.42.rst | 26 ++++++++++++++++++++++++++ 2 files changed, 27 insertions(+) create mode 100644 doc/changelog/changelog-9.18.42.rst diff --git a/doc/arm/changelog.rst b/doc/arm/changelog.rst index 32239a5889..105fb4dc1d 100644 --- a/doc/arm/changelog.rst +++ b/doc/arm/changelog.rst @@ -18,6 +18,7 @@ Changelog development. Regular users should refer to :ref:`Release Notes ` for changes relevant to them. +.. include:: ../changelog/changelog-9.18.42.rst .. include:: ../changelog/changelog-9.18.41.rst .. include:: ../changelog/changelog-9.18.40.rst .. include:: ../changelog/changelog-9.18.39.rst diff --git a/doc/changelog/changelog-9.18.42.rst b/doc/changelog/changelog-9.18.42.rst new file mode 100644 index 0000000000..4b2915c5fa --- /dev/null +++ b/doc/changelog/changelog-9.18.42.rst @@ -0,0 +1,26 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +BIND 9.18.42 +------------ + +Bug Fixes +~~~~~~~~~ + +- Skip unsupported algorithms when looking for signing key. + ``2882dbfc803`` + + A mix of supported and unsupported DNSSEC algorithms in the same zone + could have caused validation failures. Ignore the DNSSEC keys with + unsupported algorithm when looking for the signing keys. :gl:`#5622` + :gl:`!11211` + + From 948ece0e7f8c355f2d1c2476b32fa9ce7d388823 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:47:48 +0100 Subject: [PATCH 2/3] Prepare release notes for BIND 9.18.42 --- doc/arm/notes.rst | 1 + doc/notes/notes-9.18.42.rst | 24 ++++++++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 doc/notes/notes-9.18.42.rst diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst index c63ca973b1..2b620ed1d2 100644 --- a/doc/arm/notes.rst +++ b/doc/arm/notes.rst @@ -45,6 +45,7 @@ The list of known issues affecting the latest version in the 9.18 branch can be found at https://gitlab.isc.org/isc-projects/bind9/-/wikis/Known-Issues-in-BIND-9.18 +.. include:: ../notes/notes-9.18.42.rst .. include:: ../notes/notes-9.18.41.rst .. include:: ../notes/notes-9.18.40.rst .. include:: ../notes/notes-9.18.39.rst diff --git a/doc/notes/notes-9.18.42.rst b/doc/notes/notes-9.18.42.rst new file mode 100644 index 0000000000..44cb8ccd6c --- /dev/null +++ b/doc/notes/notes-9.18.42.rst @@ -0,0 +1,24 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +Notes for BIND 9.18.42 +---------------------- + +Bug Fixes +~~~~~~~~~ + +- Skip unsupported algorithms when looking for signing key. + + A mix of supported and unsupported DNSSEC algorithms in the same zone + could have caused validation failures. Ignore the DNSSEC keys with + unsupported algorithm when looking for the signing keys. :gl:`#5622` + + From 88132b485ede0db1c9931df0790a8dce18bae183 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:50:41 +0100 Subject: [PATCH 3/3] Tweak and reword release notes --- doc/notes/notes-9.18.42.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/notes/notes-9.18.42.rst b/doc/notes/notes-9.18.42.rst index 44cb8ccd6c..51eaba37b0 100644 --- a/doc/notes/notes-9.18.42.rst +++ b/doc/notes/notes-9.18.42.rst @@ -15,10 +15,10 @@ Notes for BIND 9.18.42 Bug Fixes ~~~~~~~~~ -- Skip unsupported algorithms when looking for signing key. +- Skip unsupported algorithms when looking for a signing key. A mix of supported and unsupported DNSSEC algorithms in the same zone - could have caused validation failures. Ignore the DNSSEC keys with - unsupported algorithm when looking for the signing keys. :gl:`#5622` + could cause validation failures. Unsupported algorithms are now + ignored when looking for signing keys. :gl:`#5622`