BIND DNS Server Bugfix 9.16.40 und 9.18.14 veröffentlicht

Der Open-Source DNS Server BIND erhielt je Zweig ein Update und liegt nun in der Version 9.16.40 bzw. 9.18.14 vor.

Bind 9.18.14 ESR Release Notes

Removed Features

• Zone type delegation-only, and the delegation-only and root-delegation-only statements, have been deprecated. A warning is now logged when they are used.These statements were created to address the SiteFinder controversy, in which certain top-level domains redirected misspelled queries to other sites instead of returning NXDOMAIN responses. Since top-level domains are now DNSSEC-signed, and DNSSEC validation is active by default, the statements are no longer needed. [GL #3953]

Bug Fixes

• Several bugs which could cause named to crash during catalog zone processing have been fixed. [GL #3955] [GL #3968] [GL #3997]
• Previously, downloading large zones over TLS (XoT) from a primary could hang the transfer on the secondary, especially when the connection was unstable. This has been fixed. [GL #3867]
• Performance of DNSSEC validation in zones with many DNSKEY records has been improved. [GL #3981]

Known Issues

• There are no new known issues with this release. See above for a list of all known issues affecting this BIND 9 branch.

Bind 9.16.40 ESR Release Notes

Bug Fixes

• Logfiles using timestamp-style suffixes were not always correctly removed when the number of files exceeded the limit set by versions. This has been fixed for configurations which do not explicitly specify a directory path as part of the file argument in the channel specification. [GL #3959] [GL #3991]
• Performance of DNSSEC validation in zones with many DNSKEY records has been improved. [GL #3981]

Known Issues

• There are no new known issues with this release. See above for a list of all known issues affecting this BIND 9 branch.

Quelle: BIND 9 – ISC