Merge branch 'pspacek/set-up-version-and-release-notes-for-bind-9.19.13' into 'main'

Set up version and release notes for BIND 9.19.13

See merge request isc-projects/bind9!7839
This commit is contained in:
Petr Špaček 2023-04-14 09:03:19 +00:00
commit 9e3f7f4d53
2 changed files with 5 additions and 35 deletions

View file

@ -16,7 +16,7 @@
#
m4_define([bind_VERSION_MAJOR], 9)dnl
m4_define([bind_VERSION_MINOR], 19)dnl
m4_define([bind_VERSION_PATCH], 12)dnl
m4_define([bind_VERSION_PATCH], 13)dnl
m4_define([bind_VERSION_EXTRA], -dev)dnl
m4_define([bind_DESCRIPTION], [(Development Release)])dnl
m4_define([bind_SRCID], [m4_esyscmd_s([git rev-parse --short HEAD | cut -b1-7])])dnl

View file

@ -9,7 +9,7 @@
.. See the COPYRIGHT file distributed with this work for additional
.. information regarding copyright ownership.
Notes for BIND 9.19.12
Notes for BIND 9.19.13
----------------------
Security Fixes
@ -20,41 +20,12 @@ Security Fixes
New Features
~~~~~~~~~~~~
- BIND now depends on ``liburcu``, Userspace RCU, for lock-free data
structures. :gl:`#3934`
- The new ``delv +ns`` option activates name server mode, in which ``delv``
sets up an internal recursive resolver and uses that, rather than an
external server, to look up the requested query name and type. All messages
sent and received during the resolution and validation process are logged.
This can be used in place of ``dig +trace``: it more accurately
reproduces the behavior of ``named`` when resolving a query.
The log message ``resolver priming query complete`` was moved from the
INFO log level to the DEBUG(1) log level, to prevent ``delv`` from
emitting that message when setting up its internal resolver. :gl:`#3842`
- A new configuration option :any:`checkds` is introduced that when set to
``yes`` will detect :any:`parental-agents` automatically by resolving the
parent NS records. These name servers will be used to check the DS RRset
during a KSK rollover initiated by :any:`dnssec-policy`. :gl:`#3901`
- None.
Removed Features
~~~~~~~~~~~~~~~~
- The TKEY Mode 2 (Diffie-Hellman Exchanged Keying Mode) has been removed and
using TKEY Mode 2 is now a fatal error. Users are advised to switch to TKEY
Mode 3 (GSS-API). :gl:`#3905`
- Zone type ``delegation-only``, and the ``delegation-only`` and
``root-delegation-only`` options, have been removed. Using them
is a configuration error.
These options were created to address the SiteFinder controversy, in
which certain top-level domains redirected misspelled queries to other
sites instead of returning NXDOMAIN responses. Since top-level domains are
now DNSSEC signed, and DNSSEC validation is active by default, the
options are no longer needed. :gl:`#3953`
- None.
Feature Changes
~~~~~~~~~~~~~~~
@ -64,8 +35,7 @@ Feature Changes
Bug Fixes
~~~~~~~~~
- Performance of DNSSEC validation in zones with many DNSKEY records
has been improved. :gl:`#3981`
- None.
Known Issues
~~~~~~~~~~~~