1.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2.. 3.. SPDX-License-Identifier: MPL-2.0 4.. 5.. This Source Code Form is subject to the terms of the Mozilla Public 6.. License, v. 2.0. If a copy of the MPL was not distributed with this 7.. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8.. 9.. See the COPYRIGHT file distributed with this work for additional 10.. information regarding copyright ownership. 11 12Notes for BIND 9.18.5 13--------------------- 14 15Feature Changes 16~~~~~~~~~~~~~~~ 17 18- The :option:`dnssec-signzone -H` default value has been changed to 0 19 additional NSEC3 iterations. This change aligns the 20 :iscman:`dnssec-signzone` default with the default used by the 21 :any:`dnssec-policy` feature. At the same 22 time, documentation about NSEC3 has been aligned with the `Best 23 Current Practice`_. :gl:`#3395` 24 25.. _Best Current Practice: https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-nsec3-guidance-10 26 27Bug Fixes 28~~~~~~~~~ 29 30- An assertion failure caused by a TCP connection closing between a 31 connect (or accept) and a read from a socket has been fixed. 32 :gl:`#3400` 33 34- When grafting non-delegated namespace onto delegated namespace, 35 :any:`synth-from-dnssec` could incorrectly synthesize non-existence of 36 records within the non-delegated namespace using NSEC records from 37 higher zones. :gl:`#3402` 38 39- Previously, :iscman:`named` immediately returned a SERVFAIL response 40 to the client when it received a FORMERR response from an 41 authoritative server during recursive resolution. This has been fixed: 42 :iscman:`named` acting as a resolver now attempts to contact other 43 authoritative servers for a given domain when it receives a FORMERR 44 response from one of them. :gl:`#3152` 45 46- Previously, :option:`rndc reconfig` did not pick up changes to 47 :any:`endpoints` statements in :any:`http` blocks. This has been 48 fixed. :gl:`#3415` 49 50- It was possible for a catalog zone consumer to process a catalog zone 51 member zone when there was a configured pre-existing forward-only 52 forward zone with the same name. This has been fixed. :gl:`#2506` 53 54Known Issues 55~~~~~~~~~~~~ 56 57- There are no new known issues with this release. See :ref:`above 58 <relnotes_known_issues>` for a list of all known issues affecting this 59 BIND 9 branch. 60