From d50b55ef6dc3c138a17e42a10707fd8d27d95cc2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 9 Nov 2023 13:10:33 +0100 Subject: [PATCH 1/5] Tweak CVE-2021-25219 reference --- doc/arm/reference.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index d7e97953f3..a40046e701 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -4281,7 +4281,8 @@ Tuning :short: Sets the resolver's lame cache. This is always set to 0. More information is available in the - security advisory for :cve:`2021-25219`. + `security advisory for CVE-2021-25219 + `_. .. namedconf:statement:: servfail-ttl :tags: server From d4cd418c9422fd7e763ac13a5bad0b4c53549f79 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 9 Nov 2023 13:10:33 +0100 Subject: [PATCH 2/5] Tweak CHANGES entry for [GL #4260] --- CHANGES | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 4ded7119d3..485bd56187 100644 --- a/CHANGES +++ b/CHANGES @@ -16,7 +16,9 @@ 6269. [maint] B.ROOT-SERVERS.NET addresses are now 170.247.170.2 and 2801:1b8:10::b. [GL #4101] -6267. [func] Adjust UDP timeouts used in zone maintenance. [GL #4260] +6267. [func] The timeouts for resending zone refresh queries over UDP + were lowered to enable named to more quickly determine + that a primary is down. [GL #4260] 6265. [bug] Don't schedule resign operations on the raw version of an inline-signing zone. [GL #4350] From 87c0ac8cf9480b0fda8fce1d748199b9342fe3c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 9 Nov 2023 13:10:33 +0100 Subject: [PATCH 3/5] Prepare release notes for BIND 9.18.20 --- doc/arm/notes.rst | 2 +- .../{notes-current.rst => notes-9.18.20.rst} | 17 ----------------- 2 files changed, 1 insertion(+), 18 deletions(-) rename doc/notes/{notes-current.rst => notes-9.18.20.rst} (91%) diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst index bc18cea075..d914e91c6b 100644 --- a/doc/arm/notes.rst +++ b/doc/arm/notes.rst @@ -35,7 +35,7 @@ information about each release, and source code. .. include:: ../notes/notes-known-issues.rst -.. include:: ../notes/notes-current.rst +.. include:: ../notes/notes-9.18.20.rst .. include:: ../notes/notes-9.18.19.rst .. include:: ../notes/notes-9.18.18.rst .. include:: ../notes/notes-9.18.17.rst diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-9.18.20.rst similarity index 91% rename from doc/notes/notes-current.rst rename to doc/notes/notes-9.18.20.rst index e1e4f2d4b4..ed62a2ad4b 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-9.18.20.rst @@ -12,26 +12,9 @@ Notes for BIND 9.18.20 ---------------------- -Security Fixes -~~~~~~~~~~~~~~ - -- None. - -New Features -~~~~~~~~~~~~ - -- None. - -Removed Features -~~~~~~~~~~~~~~~~ - -- None. - Feature Changes ~~~~~~~~~~~~~~~ -- None. - - B.ROOT-SERVERS.NET addresses are now 170.247.170.2 and 2801:1b8:10::b. :gl:`#4101` From d12076f9f4d3ba2b3fed6c03670220a013bcd5d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 9 Nov 2023 13:10:33 +0100 Subject: [PATCH 4/5] Tweak and reword release notes --- doc/notes/notes-9.18.20.rst | 25 +++++++++++++------------ 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/doc/notes/notes-9.18.20.rst b/doc/notes/notes-9.18.20.rst index ed62a2ad4b..523e100f6c 100644 --- a/doc/notes/notes-9.18.20.rst +++ b/doc/notes/notes-9.18.20.rst @@ -15,25 +15,26 @@ Notes for BIND 9.18.20 Feature Changes ~~~~~~~~~~~~~~~ -- B.ROOT-SERVERS.NET addresses are now 170.247.170.2 and 2801:1b8:10::b. - :gl:`#4101` +- The IP addresses for B.ROOT-SERVERS.NET have been updated to + 170.247.170.2 and 2801:1b8:10::b. :gl:`#4101` Bug Fixes ~~~~~~~~~ -- For inline-signing zones, if the unsigned version of the zone contains - DNSSEC records, it was scheduled to be resigning. This unwanted behavior - has been fixed. :gl:`#4350` +- If the unsigned version of an inline-signed zone contained DNSSEC + records, it was incorrectly scheduled for resigning. This has been + fixed. :gl:`#4350` -- The :any:`lock-file` file was being removed when it shouldn't - have been making it ineffective if named was started 3 or more - times. :gl:`#4387` +- The :any:`lock-file` file was being removed when it should not have + been, making the statement ineffective when :iscman:`named` was + started three or more times. This has been fixed. :gl:`#4387` -- When :any:`lock-file` was used at the same time as :option:`named -X`, the - assertion failure would be triggered. This has been fixed. :gl:`#4386` +- An assertion failure was triggered when :any:`lock-file` was used at + the same time as the :option:`named -X` command-line option. This has + been fixed. :gl:`#4386` -- Looking up stale data from the cache did not take into account local - authoritative zones. This has been fixed. :gl:`#4355` +- Looking up stale data from the cache did not take local authoritative + data into account. This has been fixed. :gl:`#4355` Known Issues ~~~~~~~~~~~~ From 965405211a89e952c1cd16f8ace56e9a5ae32df0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 9 Nov 2023 13:10:33 +0100 Subject: [PATCH 5/5] Reorder release notes --- doc/notes/notes-9.18.20.rst | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/doc/notes/notes-9.18.20.rst b/doc/notes/notes-9.18.20.rst index 523e100f6c..a1c24f51b4 100644 --- a/doc/notes/notes-9.18.20.rst +++ b/doc/notes/notes-9.18.20.rst @@ -25,16 +25,16 @@ Bug Fixes records, it was incorrectly scheduled for resigning. This has been fixed. :gl:`#4350` -- The :any:`lock-file` file was being removed when it should not have - been, making the statement ineffective when :iscman:`named` was - started three or more times. This has been fixed. :gl:`#4387` +- Looking up stale data from the cache did not take local authoritative + data into account. This has been fixed. :gl:`#4355` - An assertion failure was triggered when :any:`lock-file` was used at the same time as the :option:`named -X` command-line option. This has been fixed. :gl:`#4386` -- Looking up stale data from the cache did not take local authoritative - data into account. This has been fixed. :gl:`#4355` +- The :any:`lock-file` file was being removed when it should not have + been, making the statement ineffective when :iscman:`named` was + started three or more times. This has been fixed. :gl:`#4387` Known Issues ~~~~~~~~~~~~