1.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2.. 3.. SPDX-License-Identifier: MPL-2.0 4.. 5.. This Source Code Form is subject to the terms of the Mozilla Public 6.. License, v. 2.0. If a copy of the MPL was not distributed with this 7.. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8.. 9.. See the COPYRIGHT file distributed with this work for additional 10.. information regarding copyright ownership. 11 12Notes for BIND 9.18.4 13--------------------- 14 15Feature Changes 16~~~~~~~~~~~~~~~ 17 18- New :any:`dnssec-policy` configuration checks have been added to detect 19 unusual policies, such as missing KSK and/or ZSK and too-short key 20 lifetimes and re-sign periods. :gl:`#1611` 21 22Bug Fixes 23~~~~~~~~~ 24 25- The :any:`fetches-per-server` quota is designed to adjust itself downward 26 automatically when an authoritative server times out too frequently. 27 Due to a coding error, that adjustment was applied incorrectly, so 28 that the quota for a congested server was always set to 1. This has 29 been fixed. :gl:`#3327` 30 31- DNSSEC-signed catalog zones were not being processed correctly. This 32 has been fixed. :gl:`#3380` 33 34- Key files were updated every time the :any:`dnssec-policy` key manager 35 ran, whether the metadata had changed or not. :iscman:`named` now 36 checks whether changes were applied before writing out the key files. 37 :gl:`#3302` 38 39Known Issues 40~~~~~~~~~~~~ 41 42- There are no new known issues with this release. See :ref:`above 43 <relnotes_known_issues>` for a list of all known issues affecting this 44 BIND 9 branch. 45