BIND 9.18.9

-----BEGIN PGP SIGNATURE-----
 
 iQJDBAABCgAtFiEENKwGS3ftSQfs1TU17QVz/8hFYQUFAmNpg9oPHG1pY2hhbEBp
 c2Mub3JnAAoJEO0Fc//IRWEF594P/0ZwbJ2oQTSt2m9q6MCHlHkDPKSpI/J/76R/
 SX29obKO8RFZd2tm41rlzZMI2+ekQur7ecQp+YPibsyJSbbYQtdEeNlzKIj9X3/m
 yTDM+yP1iLmZWin2Dl+tCRafT+0O3Pl60kjmHuGnJbChf7XP6YwdMIqMJqG5t2Er
 wLz6hR/RkE6UsbMXnWRkUSvhpEEu/8qHEfDLfFWmvfcHPrwxw5ExTtqfw5KBMbWg
 MUwlnCthLETqOcoyDzBN17ftcud6v51D9aCb/a3B5Sx4VI/qHPrhMQNDZUUEyeEG
 rhmtqI3hrvW8AGLrKCK5qkE9FHtYGbfkWAdkQagapmT2fxQ+wPf0iHTGWUuTlmL4
 gM0LY7uqHkXUxeseYrtSFgraTiynjXQARSnnMQv5HCQ7Wc6pePw64AM73bD7occL
 oxFC2lg00G8szuwQKEtUFMVhiXyCuuFTZQvzB/eDOvD+S1MtzBPn8FyZovCWQPWF
 gNKpHwa/VorWQEbZ4x6zDVhC41b5Ea2W6gK7Vx2eLc1gX+3ogqrcegTY+K9Mil6o
 aMpdIbUwBlhyyIjOTy61mkuQ+g7mSvzQ3nQLkZE3But4NmUUWdf+OYQJziq7Sl62
 APOcYOQ+GhbD9674/P4gQd9AOqxhnrPcJCraOYGBbdV1h1Csjb7+y3+I4y49uUZU
 t38Z/IKs
 =VQAG
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEEIz+ZTe/bbr1Q+/5RJKPoRjruXlYFAmN0+J8ACgkQJKPoRjru
 Xla7cQ/+LUq4mrlApNsMJePMtO/02PCftSg9OqKMJdiSd06wJUb/echTsfqKGdFv
 K38+iAsg1Vq3azgetAqYHBZFy9yumkHi6fPZ2R2EISWLI1xLVXDmUEZB0TOfckAs
 5NCzX9KcRBrtuelxorSkn14PSt6Es7rN7sqBYxE6/0Z/l8cGJDhzOxYxeTFvubaX
 g6bkrEBadzeR1NILosJgQqyhZS2B3yT4GZS6/uqZ4fw+uptIRz7vCHtFB4jy/+hc
 V2HicUYsosNmTMILGhCBVkUBFgu5N/TT8XS2upBEZaC7n+aDLJBV3JbC1ngea4eP
 nwnAfWPuww+28Qj+m3ELBL+TBK3bo660lVQ4RVBnLja1eqHDAeCcPT9bO1ZjG8jj
 SiBdgDjAnZjgF6BbAid7XJ/DvpMK8nE2iS8Al/KhAiR9jIxUDAxVfdOk3Sqlcy4O
 yQUA2LiCDrehtl6PJneBXNKiY199ak0lxGf9PScTMjea52x5oE+SR88LThOpYE/+
 JNb2Dks1rp2eVKLkoaPW+ZKczB5/E7sPKItiokT00O5+yQbfezNfG2Ta/it7PSsv
 HuhJT797NdNeAlR7iNrywvtccqTcPGhsE47WVTGWQBiFH5BKecnYhpFwtRXzgXs1
 AWEKe4LyysTckygUsDz91WMq833VfS6z+VtXZMqLXxVs6zCvm8s=
 =cWe+
 -----END PGP SIGNATURE-----

Merge tag 'v9_18_9' into v9_18

BIND 9.18.9

CHANGES

@@ -7,6 +7,8 @@
 			headers.  Bump the number of allowed HTTP headers
 			to 100. [GL #3670]
 
+	--- 9.18.9 released ---
+
 6013.	[bug]		Fix a crash that could happen when you change
 			a dnssec-policy zone with NSEC3 to start using
 			inline-signing. [GL #3591]
@@ -38,7 +40,6 @@
 5999.	[bug]		rpz-ip rules could be ineffective in some scenarios
 			with CD=1 queries. [GL #3247]
 
-
 5998.	[bug]		The RecursClients statistics counter could overflow
 			in certain resolution scenarios. [GL #3584]
 

doc/arm/notes.rst

@@ -36,6 +36,7 @@ information about each release, and source code.
 .. include:: ../notes/notes-known-issues.rst
 
 .. include:: ../notes/notes-current.rst
+.. include:: ../notes/notes-9.18.9.rst
 .. include:: ../notes/notes-9.18.8.rst
 .. include:: ../notes/notes-9.18.7.rst
 .. include:: ../notes/notes-9.18.6.rst

doc/notes/notes-9.18.9.rst

@@ -0,0 +1,61 @@
+.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+..
+.. SPDX-License-Identifier: MPL-2.0
+..
+.. This Source Code Form is subject to the terms of the Mozilla Public
+.. License, v. 2.0.  If a copy of the MPL was not distributed with this
+.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
+..
+.. See the COPYRIGHT file distributed with this work for additional
+.. information regarding copyright ownership.
+
+Notes for BIND 9.18.9
+---------------------
+
+Bug Fixes
+~~~~~~~~~
+
+- A crash was fixed that happened when a :any:`dnssec-policy` zone that
+  used NSEC3 was reconfigured to enable :any:`inline-signing`.
+  :gl:`#3591`
+
+- In certain resolution scenarios, quotas could be erroneously reached
+  for servers, including any configured forwarders, resulting in
+  SERVFAIL answers being sent to clients. This has been fixed.
+  :gl:`#3598`
+
+- ``rpz-ip`` rules in :any:`response-policy` zones could be ineffective
+  in some cases if a query had the CD (Checking Disabled) bit set to 1.
+  This has been fixed. :gl:`#3247`
+
+- Previously, if Internet connectivity issues were experienced during
+  the initial startup of :iscman:`named`, a BIND resolver with
+  :any:`dnssec-validation` set to ``auto`` could enter into a state
+  where it would not recover without stopping :iscman:`named`, manually
+  deleting the ``managed-keys.bind`` and ``managed-keys.bind.jnl``
+  files, and starting :iscman:`named` again. This has been fixed.
+  :gl:`#2895`
+
+- The statistics counter representing the current number of clients
+  awaiting recursive resolution results (``RecursClients``) could
+  overflow in certain resolution scenarios. This has been fixed.
+  :gl:`#3584`
+
+- Previously, the port in remote servers such as in :any:`primaries` and
+  :any:`parental-agents` could be wrongly configured because of an
+  inheritance bug. This has been fixed. :gl:`#3627`
+
+- Previously, BIND failed to start on Solaris-based systems with
+  hundreds of CPUs. This has been fixed. :gl:`#3563`
+
+- When a DNS resource record's TTL value was equal to the resolver's
+  configured :any:`prefetch` "eligibility" value, the record was
+  erroneously not treated as eligible for prefetching. This has been
+  fixed. :gl:`#3603`
+
+Known Issues
+~~~~~~~~~~~~
+
+- There are no new known issues with this release. See :ref:`above
+  <relnotes_known_issues>` for a list of all known issues affecting this
+  BIND 9 branch.