Home | History | Annotate | Line # | Download | only in changelog 
      1 .. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
      2 ..
      3 .. SPDX-License-Identifier: MPL-2.0
      4 ..
      5 .. This Source Code Form is subject to the terms of the Mozilla Public
      6 .. License, v. 2.0.  If a copy of the MPL was not distributed with this
      7 .. file, you can obtain one at https://mozilla.org/MPL/2.0/.
      8 ..
      9 .. See the COPYRIGHT file distributed with this work for additional
     10 .. information regarding copyright ownership.
     11 
     12 BIND 9.20.11
     13 ------------
     14 
     15 Security Fixes
     16 ~~~~~~~~~~~~~~
     17 
     18 - [CVE-2025-40777] Fix a possible assertion failure when using the
     19   'stale-answer-client-timeout 0' option. ``055a592fd97``
     20 
     21   In specific circumstances the :iscman:`named` resolver process could
     22   terminate unexpectedly when stale answers were enabled and the
     23   ``stale-answer-client-timeout 0`` configuration option was used. This
     24   has been fixed. :gl:`#5372`
     25 
     26 New Features
     27 ~~~~~~~~~~~~
     28 
     29 - Add support for the CO flag to dig. ``47108af9f2e``
     30 
     31   Add support to display the CO (Compact Answers OK flag)
     32   when displaying messages.
     33 
     34   Add support to set the CO flag when making queries in dig (+coflag).
     35   :gl:`#5319` :gl:`!10578`
     36 
     37 Bug Fixes
     38 ~~~~~~~~~
     39 
     40 - Fix the default interface-interval from 60s to 60m. ``e8ffe3a15ca``
     41 
     42   When the interface-interval parser was changed from uint32 parser to
     43   duration parser, the default value stayed at plain number `60` which
     44   now means 60 seconds instead of 60 minutes.  The documentation also
     45   incorrectly states that the value is in minutes.  That has been fixed.
     46   :gl:`#5246` :gl:`!10679`
     47 
     48 - Fix purge-keys bug when using views. ``35efa742b03``
     49 
     50   Previously, when a DNSSEC key was purged by one zone view, other zone
     51   views would return an error about missing key files. This has been
     52   fixed. :gl:`#5315` :gl:`!10598`
     53 
     54 - Use IPv6 queries in delv +ns. ``4916fe0c6bd``
     55 
     56   `delv +ns` invokes the same code to perform name resolution as
     57   `named`, but it neglected to set up an IPv6 dispatch object first.
     58   Consequently, it was behaving more like `named -4`. It now sets up
     59   dispatch objects for both address families, and performs resolver
     60   queries to both v4 and v6 addresses, except when one of the address
     61   families has been suppressed by using `delv -4` or `delv -6`.
     62   :gl:`#5352` :gl:`!10573`
     63 
     64 
     65