mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-28 04:34:54 -04:00
61 lines
2.3 KiB
ReStructuredText
61 lines
2.3 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
Notes for BIND 9.20.11
|
|
----------------------
|
|
|
|
Security Fixes
|
|
~~~~~~~~~~~~~~
|
|
|
|
- Fix a possible assertion failure when
|
|
:any:`stale-answer-client-timeout` is set to ``0``.
|
|
|
|
In specific circumstances the :iscman:`named` resolver process could
|
|
exit with an assertion failure when stale answers were enabled and the
|
|
:any:`stale-answer-client-timeout` configuration option was set to
|
|
``0``. This has been fixed. :cve:`2025-40777` :gl:`#5372`
|
|
|
|
New Features
|
|
~~~~~~~~~~~~
|
|
|
|
- Add support for the CO flag to :iscman:`dig`.
|
|
|
|
Add support for Compact Denial of Existence to :iscman:`dig`. This
|
|
includes showing the CO (Compact Answers OK) flag when displaying
|
|
messages and adding an option to set the CO flag when making queries
|
|
(:option:`dig +coflag`). :gl:`#5319`
|
|
|
|
Bug Fixes
|
|
~~~~~~~~~
|
|
|
|
- Correct the default :any:`interface-interval` from 60s to 60m.
|
|
|
|
When the :any:`interface-interval` parser was changed from a
|
|
``uint32`` parser to a duration parser, the default value stayed at
|
|
plain number ``60`` which now means 60 seconds instead of 60 minutes.
|
|
The documentation also incorrectly states that the value is in
|
|
minutes. That has been fixed. :gl:`#5246`
|
|
|
|
- Fix a :any:`purge-keys` bug when using multiple views of a zone.
|
|
|
|
Previously, when a DNSSEC key was purged by one zone view, other zone
|
|
views would return an error about missing key files. This has been
|
|
fixed. :gl:`#5315`
|
|
|
|
- Use IPv6 queries in :option:`delv +ns`.
|
|
|
|
:option:`delv +ns` invokes the same code to perform name resolution as
|
|
:iscman:`named`, but it neglected to set up an IPv6 dispatch object
|
|
first. Consequently, it was behaving more like :option:`named -4`. It
|
|
now sets up dispatch objects for both address families, and performs
|
|
resolver queries to both IPv4 and IPv6 addresses, except when one of
|
|
the address families has been suppressed by using :option:`delv -4` or
|
|
:option:`delv -6`. :gl:`#5352`
|