diff --git a/CHANGES b/CHANGES index 9c3e14cdd4..7d321d9c53 100644 --- a/CHANGES +++ b/CHANGES @@ -3,6 +3,8 @@ 3.1.0 uses __attribute__(malloc), conflicting with a redefined malloc in cmocka.h. [GL #4000] + --- 9.18.14 released --- + 6145. [bug] Fix a possible use-after-free bug in the dns__catz_done_cb() function. [GL #3997] diff --git a/doc/arm/notes.rst b/doc/arm/notes.rst index 94a2330cb6..bae5652171 100644 --- a/doc/arm/notes.rst +++ b/doc/arm/notes.rst @@ -36,6 +36,7 @@ information about each release, and source code. .. include:: ../notes/notes-known-issues.rst .. include:: ../notes/notes-current.rst +.. include:: ../notes/notes-9.18.14.rst .. include:: ../notes/notes-9.18.13.rst .. include:: ../notes/notes-9.18.12.rst .. include:: ../notes/notes-9.18.11.rst diff --git a/doc/notes/notes-9.18.14.rst b/doc/notes/notes-9.18.14.rst new file mode 100644 index 0000000000..38e0256749 --- /dev/null +++ b/doc/notes/notes-9.18.14.rst @@ -0,0 +1,46 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +Notes for BIND 9.18.14 +---------------------- + +Removed Features +~~~~~~~~~~~~~~~~ + +- Zone type ``delegation-only``, and the ``delegation-only`` and + ``root-delegation-only`` statements, have been deprecated. + A warning is now logged when they are used. + + These statements were created to address the SiteFinder controversy, + in which certain top-level domains redirected misspelled queries to + other sites instead of returning NXDOMAIN responses. Since top-level + domains are now DNSSEC-signed, and DNSSEC validation is active by + default, the statements are no longer needed. :gl:`#3953` + +Bug Fixes +~~~~~~~~~ + +- Several bugs which could cause :iscman:`named` to crash during catalog + zone processing have been fixed. :gl:`#3955` :gl:`#3968` :gl:`#3997` + +- Previously, downloading large zones over TLS (XoT) from a primary + could hang the transfer on the secondary, especially when the + connection was unstable. This has been fixed. :gl:`#3867` + +- Performance of DNSSEC validation in zones with many DNSKEY records has + been improved. :gl:`#3981` + +Known Issues +~~~~~~~~~~~~ + +- There are no new known issues with this release. See :ref:`above + ` for a list of all known issues affecting this + BIND 9 branch.