1 .. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2 .. 3 .. SPDX-License-Identifier: MPL-2.0 4 .. 5 .. This Source Code Form is subject to the terms of the Mozilla Public 6 .. License, v. 2.0. If a copy of the MPL was not distributed with this 7 .. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8 .. 9 .. See the COPYRIGHT file distributed with this work for additional 10 .. information regarding copyright ownership. 11 12 BIND 9.20.10 13 ------------ 14 15 New Features 16 ~~~~~~~~~~~~ 17 18 - Implement a new 'notify-defer' configuration option. ``a24db6433e6`` 19 20 This new option sets a delay (in seconds) to wait before sending a set 21 of NOTIFY messages for a zone. Whenever a NOTIFY message is ready to 22 be sent, sending will be deferred for this duration. This option is 23 not to be confused with the :any:`notify-delay` option. The default is 24 0 seconds. :gl:`#5259` :gl:`!10465` 25 26 Removed Features 27 ~~~~~~~~~~~~~~~~ 28 29 - Implement the systemd notification protocol manually to remove 30 dependency on libsystemd. ``4f7e806a12b`` 31 32 libsystemd, despite being useful, adds a huge surface area for just 33 using the sd_notify API. libsystemd's surface has been exploited in 34 the past [1]. 35 36 Implement the systemd notification protocol by hand since it is just 37 sending newline-delimited datagrams to a UNIX socket. The code 38 shouldn't need more attention in the future since the notification 39 protocol is covered under systemd's stability promise [2]. 40 41 We don't need to support VSOCK-backed service notifications since they 42 are only intended for virtual machine inits. 43 44 [1]: https://www.openwall.com/lists/oss-security/2024/03/29/4 [2]: 45 https://systemd.io/PORTABILITY_AND_STABILITY/ :gl:`!10454` 46 47 Bug Fixes 48 ~~~~~~~~~ 49 50 - Fix zone deletion issue. ``66fc4ee86e0`` 51 52 A secondary zone could initiate a new zone transfer from the primary 53 server after it had been already deleted from the secondary server, 54 and before the internal garbage collection was activated to clean it 55 up completely. This has been fixed. :gl:`#5291` :gl:`!10496` 56 57 - Fix a zone refresh bug. ``f09bb8b88c6`` 58 59 A secondary zone could fail to further refresh with new versions of 60 the zone from a primary server if named was reconfigured during the 61 SOA request step of an ongoing zone transfer. This has been fixed. 62 :gl:`#5307` :gl:`!10495` 63 64 - Allow keystore.c to compile on Solaris. ``108adab25a0`` 65 66 keystore.c failed to compile on Solaris because NAME_MAX was 67 undefined. Include 'isc/dir.h' which defines NAME_MAX for platforms 68 that don't define it. :gl:`#5327` :gl:`!10523` 69 70 - Set name for all the isc_mem contexts. ``bdcd698edf7`` 71 72 :gl:`!10498` 73 74 75