1 1.1 christos .. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2 1.1 christos .. 3 1.1 christos .. SPDX-License-Identifier: MPL-2.0 4 1.1 christos .. 5 1.1 christos .. This Source Code Form is subject to the terms of the Mozilla Public 6 1.1 christos .. License, v. 2.0. If a copy of the MPL was not distributed with this 7 1.1 christos .. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8 1.1 christos .. 9 1.1 christos .. See the COPYRIGHT file distributed with this work for additional 10 1.1 christos .. information regarding copyright ownership. 11 1.1 christos 12 1.1 christos BIND 9.20.10 13 1.1 christos ------------ 14 1.1 christos 15 1.1 christos New Features 16 1.1 christos ~~~~~~~~~~~~ 17 1.1 christos 18 1.1 christos - Implement a new 'notify-defer' configuration option. ``a24db6433e6`` 19 1.1 christos 20 1.1 christos This new option sets a delay (in seconds) to wait before sending a set 21 1.1 christos of NOTIFY messages for a zone. Whenever a NOTIFY message is ready to 22 1.1 christos be sent, sending will be deferred for this duration. This option is 23 1.1 christos not to be confused with the :any:`notify-delay` option. The default is 24 1.1 christos 0 seconds. :gl:`#5259` :gl:`!10465` 25 1.1 christos 26 1.1 christos Removed Features 27 1.1 christos ~~~~~~~~~~~~~~~~ 28 1.1 christos 29 1.1 christos - Implement the systemd notification protocol manually to remove 30 1.1 christos dependency on libsystemd. ``4f7e806a12b`` 31 1.1 christos 32 1.1 christos libsystemd, despite being useful, adds a huge surface area for just 33 1.1 christos using the sd_notify API. libsystemd's surface has been exploited in 34 1.1 christos the past [1]. 35 1.1 christos 36 1.1 christos Implement the systemd notification protocol by hand since it is just 37 1.1 christos sending newline-delimited datagrams to a UNIX socket. The code 38 1.1 christos shouldn't need more attention in the future since the notification 39 1.1 christos protocol is covered under systemd's stability promise [2]. 40 1.1 christos 41 1.1 christos We don't need to support VSOCK-backed service notifications since they 42 1.1 christos are only intended for virtual machine inits. 43 1.1 christos 44 1.1 christos [1]: https://www.openwall.com/lists/oss-security/2024/03/29/4 [2]: 45 1.1 christos https://systemd.io/PORTABILITY_AND_STABILITY/ :gl:`!10454` 46 1.1 christos 47 1.1 christos Bug Fixes 48 1.1 christos ~~~~~~~~~ 49 1.1 christos 50 1.1 christos - Fix zone deletion issue. ``66fc4ee86e0`` 51 1.1 christos 52 1.1 christos A secondary zone could initiate a new zone transfer from the primary 53 1.1 christos server after it had been already deleted from the secondary server, 54 1.1 christos and before the internal garbage collection was activated to clean it 55 1.1 christos up completely. This has been fixed. :gl:`#5291` :gl:`!10496` 56 1.1 christos 57 1.1 christos - Fix a zone refresh bug. ``f09bb8b88c6`` 58 1.1 christos 59 1.1 christos A secondary zone could fail to further refresh with new versions of 60 1.1 christos the zone from a primary server if named was reconfigured during the 61 1.1 christos SOA request step of an ongoing zone transfer. This has been fixed. 62 1.1 christos :gl:`#5307` :gl:`!10495` 63 1.1 christos 64 1.1 christos - Allow keystore.c to compile on Solaris. ``108adab25a0`` 65 1.1 christos 66 1.1 christos keystore.c failed to compile on Solaris because NAME_MAX was 67 1.1 christos undefined. Include 'isc/dir.h' which defines NAME_MAX for platforms 68 1.1 christos that don't define it. :gl:`#5327` :gl:`!10523` 69 1.1 christos 70 1.1 christos - Set name for all the isc_mem contexts. ``bdcd698edf7`` 71 1.1 christos 72 1.1 christos :gl:`!10498` 73 1.1 christos 74 1.1 christos 75