From 8cdc0eafd9d7dc9878ff6253c27e5602a2562be1 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 2 May 2024 11:25:21 +0200 Subject: [PATCH 1/4] Prepare release notes for BIND 9.19.24 --- doc/arm/notes.rst | 2 +- doc/notes/{notes-current.rst => notes-9.19.24.rst} | 10 ---------- 2 files changed, 1 insertion(+), 11 deletions(-) rename doc/notes/{notes-current.rst => notes-9.19.24.rst} (96%) diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst index 6992c11ddd..aeacc4efe5 100644 --- a/doc/arm/notes.rst +++ b/doc/arm/notes.rst @@ -38,7 +38,7 @@ information about each release, and source code. .. include:: ../notes/notes-known-issues.rst -.. include:: ../notes/notes-current.rst +.. include:: ../notes/notes-9.19.24.rst .. include:: ../notes/notes-9.19.23.rst .. include:: ../notes/notes-9.19.22.rst .. include:: ../notes/notes-9.19.21.rst diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-9.19.24.rst similarity index 96% rename from doc/notes/notes-current.rst rename to doc/notes/notes-9.19.24.rst index 0fd1bb9137..8edfaefd2c 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-9.19.24.rst @@ -12,11 +12,6 @@ Notes for BIND 9.19.24 ---------------------- -Security Fixes -~~~~~~~~~~~~~~ - -- None. - New Features ~~~~~~~~~~~~ @@ -55,11 +50,6 @@ Feature Changes used together. This allows creating keys for a given :any:`dnssec-policy` that match only the KSK (``-fK``) or ZSK (``-fZ``) role. -Bug Fixes -~~~~~~~~~ - -- None. - Known Issues ~~~~~~~~~~~~ From 0f81fbcb1f68d4dd698c7a5460d54ee4f0d7f8c2 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Thu, 2 May 2024 12:30:39 +0200 Subject: [PATCH 2/4] Tweak and reword release notes --- doc/notes/notes-9.19.24.rst | 39 ++++++++++++++++++++----------------- 1 file changed, 21 insertions(+), 18 deletions(-) diff --git a/doc/notes/notes-9.19.24.rst b/doc/notes/notes-9.19.24.rst index 8edfaefd2c..a6ab2b27a9 100644 --- a/doc/notes/notes-9.19.24.rst +++ b/doc/notes/notes-9.19.24.rst @@ -15,40 +15,43 @@ Notes for BIND 9.19.24 New Features ~~~~~~~~~~~~ -- A new option :any:`signatures-jitter` is added to :any:`dnssec-policy` to - spread out signature expiration times over a period of time. :gl:`#4554` +- A new option :any:`signatures-jitter` has been added to :any:`dnssec-policy` + to allow signature expirations to be spread out over a period of time. + :gl:`#4554` -- A new DNSSEC tool :iscman:`dnssec-ksr` is added to create Key Signing Request - (KSR) and Signed Key Response (SKR) files. :gl:`#1128` +- A new DNSSEC tool :iscman:`dnssec-ksr` has been added to create Key Signing + Request (KSR) and Signed Key Response (SKR) files. :gl:`#1128` -- Queries and responses now emit distinct dnstap entries for DoT and DoH. - :any:`dnstap-read` understands DoH and DoT entries. :gl:`#4523` +- Queries and responses now emit distinct dnstap entries for DNS-over-TLS (DoT) + and DNS-over-HTTPS (DoH), and :any:`dnstap-read` understands these entries. + :gl:`#4523` Removed Features ~~~~~~~~~~~~~~~~ -- The ``named`` command line option ``-U ``, which specified the number of UDP dispatches, - has been removed. Using it now prints a warning. :gl:`#1879` +- The :iscman:`named` command-line option :option:`-U `, which + specified the number of UDP dispatches, has been removed. Using it now + returns a warning. :gl:`#1879` Feature Changes ~~~~~~~~~~~~~~~ -- Querying the statistics channel no longer blocks the DNS communication - on the networking event loop. :gl:`#4680` +- Querying the statistics channel no longer blocks DNS communication on the + networking event loop level. :gl:`#4680` - DNSSEC signatures that are not valid because the current time falls outside the signature inception and expiration dates no longer count towards maximum - validation and maximum validation failures limits. :gl:`#4586` + validation and maximum validation failure limits. :gl:`#4586` -- Multiple RNDC messages will be processed when sent in a single TCP - message. +- Multiple RNDC messages are now processed when sent in a single TCP message. - ISC would like to thank Dominik Thalhammer for reporting the issue - and preparing the initial patch. :gl:`#4416` + ISC would like to thank Dominik Thalhammer for reporting the issue and + preparing the initial patch. :gl:`#4416` -- :iscman:`dnssec-keygen` now allows the options ``-k`` and ``-f`` to be - used together. This allows creating keys for a given :any:`dnssec-policy` - that match only the KSK (``-fK``) or ZSK (``-fZ``) role. +- :iscman:`dnssec-keygen` now allows the options :option:`-k ` and :option:`-f ` to be used together. This allows the + creation of keys for a given :any:`dnssec-policy` that match only the KSK + (``-fK``) or ZSK (``-fZ``) roles. :gl:`#1128` Known Issues ~~~~~~~~~~~~ From b507cb7bc2ac73a602d894b26374e4a676fad3c0 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Fri, 3 May 2024 09:10:49 +0200 Subject: [PATCH 3/4] Add a CHANGES marker --- CHANGES | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGES b/CHANGES index 5a4b6a0eed..35d4658e76 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,5 @@ + --- 9.19.24 released --- + 6381. [bug] dns_qp_lookup() could position the iterator at the wrong predecessor when searching for names with uncommon characters, which are encoded as two-octet From be3e3da7b23355d4b699ae641648bc48d78ab327 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Fri, 3 May 2024 09:11:45 +0200 Subject: [PATCH 4/4] Update BIND version for release --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index fbe229ad38..2dd1c9c507 100644 --- a/configure.ac +++ b/configure.ac @@ -17,7 +17,7 @@ m4_define([bind_VERSION_MAJOR], 9)dnl m4_define([bind_VERSION_MINOR], 19)dnl m4_define([bind_VERSION_PATCH], 24)dnl -m4_define([bind_VERSION_EXTRA], -dev)dnl +m4_define([bind_VERSION_EXTRA], )dnl m4_define([bind_DESCRIPTION], [(Development Release)])dnl m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl m4_define([bind_PKG_VERSION], [[bind_VERSION_MAJOR.bind_VERSION_MINOR.bind_VERSION_PATCH]bind_VERSION_EXTRA])dnl