From af23f815223f2640a427d6884a5019e3bbf61780 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:46:38 +0100 Subject: [PATCH 1/4] Generate changelog for BIND 9.18.42 --- doc/arm/changelog.rst | 1 + doc/changelog/changelog-9.18.42.rst | 26 ++++++++++++++++++++++++++ 2 files changed, 27 insertions(+) create mode 100644 doc/changelog/changelog-9.18.42.rst diff --git a/doc/arm/changelog.rst b/doc/arm/changelog.rst index 32239a5889..105fb4dc1d 100644 --- a/doc/arm/changelog.rst +++ b/doc/arm/changelog.rst @@ -18,6 +18,7 @@ Changelog development. Regular users should refer to :ref:`Release Notes ` for changes relevant to them. +.. include:: ../changelog/changelog-9.18.42.rst .. include:: ../changelog/changelog-9.18.41.rst .. include:: ../changelog/changelog-9.18.40.rst .. include:: ../changelog/changelog-9.18.39.rst diff --git a/doc/changelog/changelog-9.18.42.rst b/doc/changelog/changelog-9.18.42.rst new file mode 100644 index 0000000000..4b2915c5fa --- /dev/null +++ b/doc/changelog/changelog-9.18.42.rst @@ -0,0 +1,26 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +BIND 9.18.42 +------------ + +Bug Fixes +~~~~~~~~~ + +- Skip unsupported algorithms when looking for signing key. + ``2882dbfc803`` + + A mix of supported and unsupported DNSSEC algorithms in the same zone + could have caused validation failures. Ignore the DNSSEC keys with + unsupported algorithm when looking for the signing keys. :gl:`#5622` + :gl:`!11211` + + From 948ece0e7f8c355f2d1c2476b32fa9ce7d388823 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:47:48 +0100 Subject: [PATCH 2/4] Prepare release notes for BIND 9.18.42 --- doc/arm/notes.rst | 1 + doc/notes/notes-9.18.42.rst | 24 ++++++++++++++++++++++++ 2 files changed, 25 insertions(+) create mode 100644 doc/notes/notes-9.18.42.rst diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst index c63ca973b1..2b620ed1d2 100644 --- a/doc/arm/notes.rst +++ b/doc/arm/notes.rst @@ -45,6 +45,7 @@ The list of known issues affecting the latest version in the 9.18 branch can be found at https://gitlab.isc.org/isc-projects/bind9/-/wikis/Known-Issues-in-BIND-9.18 +.. include:: ../notes/notes-9.18.42.rst .. include:: ../notes/notes-9.18.41.rst .. include:: ../notes/notes-9.18.40.rst .. include:: ../notes/notes-9.18.39.rst diff --git a/doc/notes/notes-9.18.42.rst b/doc/notes/notes-9.18.42.rst new file mode 100644 index 0000000000..44cb8ccd6c --- /dev/null +++ b/doc/notes/notes-9.18.42.rst @@ -0,0 +1,24 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +Notes for BIND 9.18.42 +---------------------- + +Bug Fixes +~~~~~~~~~ + +- Skip unsupported algorithms when looking for signing key. + + A mix of supported and unsupported DNSSEC algorithms in the same zone + could have caused validation failures. Ignore the DNSSEC keys with + unsupported algorithm when looking for the signing keys. :gl:`#5622` + + From 88132b485ede0db1c9931df0790a8dce18bae183 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 6 Nov 2025 19:50:41 +0100 Subject: [PATCH 3/4] Tweak and reword release notes --- doc/notes/notes-9.18.42.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/notes/notes-9.18.42.rst b/doc/notes/notes-9.18.42.rst index 44cb8ccd6c..51eaba37b0 100644 --- a/doc/notes/notes-9.18.42.rst +++ b/doc/notes/notes-9.18.42.rst @@ -15,10 +15,10 @@ Notes for BIND 9.18.42 Bug Fixes ~~~~~~~~~ -- Skip unsupported algorithms when looking for signing key. +- Skip unsupported algorithms when looking for a signing key. A mix of supported and unsupported DNSSEC algorithms in the same zone - could have caused validation failures. Ignore the DNSSEC keys with - unsupported algorithm when looking for the signing keys. :gl:`#5622` + could cause validation failures. Unsupported algorithms are now + ignored when looking for signing keys. :gl:`#5622` From af1647a9bd7c64ffa0ae1abe9ba9da1431c92e08 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Fri, 7 Nov 2025 10:35:47 +0100 Subject: [PATCH 4/4] Update BIND version for release --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index 69c223368b..7bd156aa57 100644 --- a/configure.ac +++ b/configure.ac @@ -17,7 +17,7 @@ m4_define([bind_VERSION_MAJOR], 9)dnl m4_define([bind_VERSION_MINOR], 18)dnl m4_define([bind_VERSION_PATCH], 42)dnl -m4_define([bind_VERSION_EXTRA], -dev)dnl +m4_define([bind_VERSION_EXTRA], )dnl m4_define([bind_DESCRIPTION], [(Extended Support Version)])dnl m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl m4_define([bind_PKG_VERSION], [[bind_VERSION_MAJOR.bind_VERSION_MINOR.bind_VERSION_PATCH]bind_VERSION_EXTRA])dnl