Bv9ARM.ch09.html revision 666b453b37f9ccfe3c7984fb0b31b70a3ceb918f
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
f0aad5341752aefe5059832f6cf3abc3283c6e16Tinderbox User - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="next" href="Bv9ARM.ch10.html" title="Appendix�B.�A Brief History of the DNS and BIND">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<table width="100%" summary="Navigation header">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<tr><th colspan="3" align="center">Appendix�A.�Release Notes</th></tr>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="titlepage"><div><div><h1 class="title">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="Bv9ARM.ch09"></a>Release Notes</h1></div></div></div>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="section"><a href="Bv9ARM.ch09.html#id-1.10.2">Release Notes for BIND Version 9.11.2</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_intro">Introduction</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_download">Download</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#root_key">New DNSSEC Root Key</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_license">License Change</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#win_support">Legacy Windows No Longer Supported</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_security">Security Fixes</a></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_removed">Removed Features</a></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#proto_changes">Protocol Changes</a></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_changes">Feature Changes</a></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_bugs">Bug Fixes</a></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#end_of_life">End of Life</a></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="section"><a href="Bv9ARM.ch09.html#relnotes_thanks">Thank You</a></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h2 class="title" style="clear: both">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="id-1.10.2"></a>Release Notes for BIND Version 9.11.2</h2></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="relnotes_intro"></a>Introduction</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User This document summarizes changes since the last production
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User release on the BIND 9.11 branch.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Please see the <code class="filename">CHANGES</code> file for a further
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User list of bug fixes and other changes.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="relnotes_download"></a>Download</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The latest versions of BIND 9 software can always be found at
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <a class="link" href="http://www.isc.org/downloads/" target="_top">http://www.isc.org/downloads/</a>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User There you will find additional information about each release,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User source code, and pre-compiled versions for Microsoft Windows
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User operating systems.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="root_key"></a>New DNSSEC Root Key</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User ICANN is in the process of introducing a new Key Signing Key (KSK) for
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User the global root zone. BIND has multiple methods for managing DNSSEC
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User trust anchors, with somewhat different behaviors. If the root
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User key is configured using the <span class="command"><strong>managed-keys</strong></span>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User statement, or if the pre-configured root key is enabled by using
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span class="command"><strong>dnssec-validation auto</strong></span>, then BIND can keep keys up
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User to date automatically. Servers configured in this way should have
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User begun the process of rolling to the new key when it was published in
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User the root zone in July 2017. However, keys configured using the
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>trusted-keys</strong></span> statement are not automatically
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User maintained. If your server is performing DNSSEC validation and is
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User configured using <span class="command"><strong>trusted-keys</strong></span>, you are advised to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User change your configuration before the root zone begins signing with
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User the new KSK. This is currently scheduled for October 11, 2017.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User This release includes an updated version of the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="filename">bind.keys</code> file containing the new root
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User key. This file can also be downloaded from
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <a class="link" href="https://www.isc.org/bind-keys" target="_top">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="relnotes_license"></a>License Change</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User With the release of BIND 9.11.0, ISC changed to the open
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User source license for BIND from the ISC license to the Mozilla
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User Public License (MPL 2.0).
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User The MPL-2.0 license requires that if you make changes to
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User licensed software (e.g. BIND) and distribute them outside
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User your organization, that you publish those changes under that
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User same license. It does not require that you publish or disclose
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User anything other than the changes you made to our software.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User This requirement will not affect anyone who is using BIND, with
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User or without modifications, without redistributing it, nor anyone
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User redistributing it without changes. Therefore, this change will be
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt without consequence for most individuals and organizations who are
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Those unsure whether or not the license change affects their
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User use of BIND, or who wish to discuss how to comply with the
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User license may contact ISC at <a class="link" href="https://www.isc.org/mission/contact/" target="_top">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="win_support"></a>Legacy Windows No Longer Supported</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User As of BIND 9.11.2, Windows XP and Windows 2003 are no longer supported
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User platforms for BIND; "XP" binaries are no longer available for download
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User An error in TSIG handling could permit unauthorized zone
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User transfers or zone updates. These flaws are disclosed in
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User CVE-2017-3142 and CVE-2017-3143. [RT #45383]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User The BIND installer on Windows used an unquoted service path,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User which can enable privilege escalation. This flaw is disclosed
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User in CVE-2017-3141. [RT #45229]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User With certain RPZ configurations, a response with TTL 0
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User could cause <span class="command"><strong>named</strong></span> to go into an infinite
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User query loop. This flaw is disclosed in CVE-2017-3140.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="relnotes_removed"></a>Removed Features</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User The ISC DNSSEC Lookaside Validation (DLV) service has
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User been shut down; all DLV records in the dlv.isc.org zone
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User have been removed. References to the service have been
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User removed from BIND documentation. Lookaside validation
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User is no longer used by default by <span class="command"><strong>delv</strong></span>.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User The DLV key has been removed from <code class="filename">bind.keys</code>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Setting <span class="command"><strong>dnssec-lookaside</strong></span> to
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="command"><strong>auto</strong></span> or to use dlv.isc.org as a trust
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User anchor results in a warning being issued.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="proto_changes"></a>Protocol Changes</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User BIND can now use the Ed25519 and Ed448 Edwards Curve DNSSEC
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt signing algorithms described in RFC 8080. Note, however, that
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User these algorithms must be supported in OpenSSL;
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User currently they are only available in the development branch
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User of OpenSSL at
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <a class="link" href="https://github.com/openssl/openssl" target="_top">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User When parsing DNS messages, EDNS KEY TAG options are checked
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User for correctness. When printing messages (for example, in
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="command"><strong>dig</strong></span>), EDNS KEY TAG options are printed
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User in readable format.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="relnotes_changes"></a>Feature Changes</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>named</strong></span> will no longer start or accept
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User reconfiguration if <span class="command"><strong>managed-keys</strong></span> or
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>dnssec-validation auto</strong></span> are in use and
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User the managed-keys directory (specified by
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>managed-keys-directory</strong></span>, and defaulting
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User to the working directory if not specified),
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User is not writable by the effective user ID. [RT #46077]
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Previously, <span class="command"><strong>update-policy local;</strong></span> accepted
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt updates from any source so long as they were signed by the
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User locally-generated session key. This has been further restricted;
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User updates are now only accepted from locally configured addresses.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>dig +ednsopt</strong></span> now accepts the names
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User for EDNS options in addition to numeric values. For example,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt an EDNS Client-Subnet option could be sent using
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>dig +ednsopt=ecs:...</strong></span>. Thanks to
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User John Worley of Secure64 for the contribution. [RT #44461]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Threads in <span class="command"><strong>named</strong></span> are now set to human-readable
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User names to assist debugging on operating systems that support that.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Threads will have names such as "isc-timer", "isc-sockmgr",
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User "isc-worker0001", and so on. This will affect the reporting of
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User subsidiary thread names in <span class="command"><strong>ps</strong></span> and
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>top</strong></span>, but not the main thread. [RT #43234]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User DiG now warns about .local queries which are reserved for
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Multicast DNS. [RT #44783]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="titlepage"><div><div><h3 class="title">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User When <span class="command"><strong>named</strong></span> was reconfigured, failure of some
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User zones to load correctly could leave the system in an inconsistent
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User state; while generally harmless, this could lead to a crash later
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User when using <span class="command"><strong>rndc addzone</strong></span>. Reconfiguration changes
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User are now fully rolled back in the event of failure. [RT #45841]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Fixed a bug that was introduced in an earlier development
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User release which caused multi-packet AXFR and IXFR messages to fail
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User validation if not all packets contained TSIG records; this
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User caused interoperability problems with some other DNS
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User implementations. [RT #45509]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Reloading or reconfiguring <span class="command"><strong>named</strong></span> could
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User fail on some platforms when LMDB was in use. [RT #45203]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Due to some incorrectly deleted code, when BIND was
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User built with LMDB, zones that were deleted via
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="command"><strong>rndc delzone</strong></span> were removed from the
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User running server but were not removed from the new zone
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User database, so that deletion did not persist after a
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User server restart. This has been corrected. [RT #45185]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Semicolons are no longer escaped when printing CAA and
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User URI records. This may break applications that depend on the
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User presence of the backslash before the semicolon. [RT #45216]
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User AD could be set on truncated answer with no records present
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User in the answer and authority sections. [RT #45140]
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Some header files included <isc/util.h> incorrectly as
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User it pollutes with namespace with non ISC_ macros and this should
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User only be done by explicitly including <isc/util.h>. This
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt has been corrected. Some code may depend on <isc/util.h>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User being implicitly included via other header files. Such
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User code should explicitly include <isc/util.h>.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Zones created with <span class="command"><strong>rndc addzone</strong></span> could
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User temporarily fail to inherit the <span class="command"><strong>allow-transfer</strong></span>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User ACL set in the <span class="command"><strong>options</strong></span> section of
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <code class="filename">named.conf</code>. [RT #46603]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="end_of_life"></a>End of Life</h3></div></div></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User The end of life for BIND 9.11 is yet to be determined but
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User will not be before BIND 9.13.0 has been released for 6 months.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <a class="link" href="https://www.isc.org/downloads/software-support-policy/" target="_top">https://www.isc.org/downloads/software-support-policy/</a>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<div class="titlepage"><div><div><h3 class="title">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="relnotes_thanks"></a>Thank You</h3></div></div></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Thank you to everyone who assisted us in making this release possible.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User If you would like to contribute to ISC to assist us in continuing to
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User make quality open source software, please visit our donations page at
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <a class="link" href="http://www.isc.org/donate/" target="_top">http://www.isc.org/donate/</a>.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<table width="100%" summary="Navigation footer">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<td width="40%" align="right" valign="top">�Appendix�B.�A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.2</p>