1.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
2..
3.. SPDX-License-Identifier: MPL-2.0
4..
5.. This Source Code Form is subject to the terms of the Mozilla Public
6.. License, v. 2.0.  If a copy of the MPL was not distributed with this
7.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
8..
9.. See the COPYRIGHT file distributed with this work for additional
10.. information regarding copyright ownership.
11
12Notes for BIND 9.18.5
13---------------------
14
15Feature Changes
16~~~~~~~~~~~~~~~
17
18- The :option:`dnssec-signzone -H` default value has been changed to 0
19  additional NSEC3 iterations. This change aligns the
20  :iscman:`dnssec-signzone` default with the default used by the
21  :any:`dnssec-policy` feature. At the same
22  time, documentation about NSEC3 has been aligned with the `Best
23  Current Practice`_. :gl:`#3395`
24
25.. _Best Current Practice: https://datatracker.ietf.org/doc/html/draft-ietf-dnsop-nsec3-guidance-10
26
27Bug Fixes
28~~~~~~~~~
29
30- An assertion failure caused by a TCP connection closing between a
31  connect (or accept) and a read from a socket has been fixed.
32  :gl:`#3400`
33
34- When grafting non-delegated namespace onto delegated namespace,
35  :any:`synth-from-dnssec` could incorrectly synthesize non-existence of
36  records within the non-delegated namespace using NSEC records from
37  higher zones. :gl:`#3402`
38
39- Previously, :iscman:`named` immediately returned a SERVFAIL response
40  to the client when it received a FORMERR response from an
41  authoritative server during recursive resolution. This has been fixed:
42  :iscman:`named` acting as a resolver now attempts to contact other
43  authoritative servers for a given domain when it receives a FORMERR
44  response from one of them. :gl:`#3152`
45
46- Previously, :option:`rndc reconfig` did not pick up changes to
47  :any:`endpoints` statements in :any:`http` blocks. This has been
48  fixed. :gl:`#3415`
49
50- It was possible for a catalog zone consumer to process a catalog zone
51  member zone when there was a configured pre-existing forward-only
52  forward zone with the same name. This has been fixed. :gl:`#2506`
53
54Known Issues
55~~~~~~~~~~~~
56
57- There are no new known issues with this release. See :ref:`above
58  <relnotes_known_issues>` for a list of all known issues affecting this
59  BIND 9 branch.
60