BIND 9.18.14

-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEEVO2++xeDVoSYmDzq9WHzfBlga4FAmQ1kaQACgkQq9WHzfBl
 ga4hXRAAirVMBI/BaeuxT58phKfcTEZXWMOvNGQaSfVWmNtwNzVvSCWemxOeuto0
 NX9f8HbK3wGe/72tL18OELdeZhtkeUjhFCGF0eTbcW9AypyZCQit+3h8EJGWYjvd
 rFo8JN7Eh1Zk5Arsb9lU993jAy7o9M0iSSluHH2+k8wAoipWhQYvdjsU94qyfvy2
 hdWIUpMV55p+DrVmyk7sZniajJtjHPxf1NFT+DeYQFzgKdFJK1Luwk/g9KSrjk36
 roOWKbDtELqjeIXA1x6krDaurYXyAE/2gJAe4ozBR3ty5CEUrELG6RyY9c+NA3lg
 rJESFCRRXef24CAQHIgSkLubyRJHv4zJd33nnhM4ZBsjTWhDqzUl6tyoy2U0xaZd
 qruAfo24e7it725SCWNk38DSFbDL70lT46ClF7iNgo5HmaCHMuZLM94h3vNwoiAM
 H039IJ60rQhBGRu/+UW4VnheoNSM3ZXMWQKn7zh93kiQNPmGGyNa0e3ZVrX148HE
 LY0K6363L9vrF67qyJ86C53NY3Njv2jMH4J3UVwMF3V040AmwXODaitFB/P49keK
 ckZe8DyChK8KdwuOe4NdhT/5BOMsOX1tCZt02Mrb4yn/aq3POUQuVGVGqunkQOcI
 K7djhXVedQshezRem5gYPhCMth2QLUNt56B46x/3LSCK8URY4/8=
 =Dd5k
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg25GGAuUyFX1gxo7QocNm8V6J/8
 frHSduYX7Aqk4iJLwAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
 AAAAQLjSdQAEA9BtnuRMc+PyXOf1nJ3a7PzJdCxHmt17rklHis408vm9RQx1miTBAh160G
 Ci+PsFDy1x8aOPLkobbwU=
 -----END SSH SIGNATURE-----

Merge tag 'v9.18.14' into bind-9.18

BIND 9.18.14

CHANGES

@@ -3,6 +3,8 @@
 			3.1.0 uses __attribute__(malloc), conflicting with a
 			redefined malloc in cmocka.h. [GL #4000]
 
+	--- 9.18.14 released ---
+
 6145.	[bug]		Fix a possible use-after-free bug in the
 			dns__catz_done_cb() function. [GL #3997]
 

doc/arm/notes.rst

@@ -36,6 +36,7 @@ information about each release, and source code.
 .. include:: ../notes/notes-known-issues.rst
 
 .. include:: ../notes/notes-current.rst
+.. include:: ../notes/notes-9.18.14.rst
 .. include:: ../notes/notes-9.18.13.rst
 .. include:: ../notes/notes-9.18.12.rst
 .. include:: ../notes/notes-9.18.11.rst

doc/notes/notes-9.18.14.rst

@@ -0,0 +1,46 @@
+.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+..
+.. SPDX-License-Identifier: MPL-2.0
+..
+.. This Source Code Form is subject to the terms of the Mozilla Public
+.. License, v. 2.0.  If a copy of the MPL was not distributed with this
+.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
+..
+.. See the COPYRIGHT file distributed with this work for additional
+.. information regarding copyright ownership.
+
+Notes for BIND 9.18.14
+----------------------
+
+Removed Features
+~~~~~~~~~~~~~~~~
+
+- Zone type ``delegation-only``, and the ``delegation-only`` and
+  ``root-delegation-only`` statements, have been deprecated.
+  A warning is now logged when they are used.
+
+  These statements were created to address the SiteFinder controversy,
+  in which certain top-level domains redirected misspelled queries to
+  other sites instead of returning NXDOMAIN responses. Since top-level
+  domains are now DNSSEC-signed, and DNSSEC validation is active by
+  default, the statements are no longer needed. :gl:`#3953`
+
+Bug Fixes
+~~~~~~~~~
+
+- Several bugs which could cause :iscman:`named` to crash during catalog
+  zone processing have been fixed. :gl:`#3955` :gl:`#3968` :gl:`#3997`
+
+- Previously, downloading large zones over TLS (XoT) from a primary
+  could hang the transfer on the secondary, especially when the
+  connection was unstable. This has been fixed. :gl:`#3867`
+
+- Performance of DNSSEC validation in zones with many DNSKEY records has
+  been improved. :gl:`#3981`
+
+Known Issues
+~~~~~~~~~~~~
+
+- There are no new known issues with this release. See :ref:`above
+  <relnotes_known_issues>` for a list of all known issues affecting this
+  BIND 9 branch.