1*4bcbe0a3Schristos.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") 2*4bcbe0a3Schristos.. 3*4bcbe0a3Schristos.. SPDX-License-Identifier: MPL-2.0 4*4bcbe0a3Schristos.. 5*4bcbe0a3Schristos.. This Source Code Form is subject to the terms of the Mozilla Public 6*4bcbe0a3Schristos.. License, v. 2.0. If a copy of the MPL was not distributed with this 7*4bcbe0a3Schristos.. file, you can obtain one at https://mozilla.org/MPL/2.0/. 8*4bcbe0a3Schristos.. 9*4bcbe0a3Schristos.. See the COPYRIGHT file distributed with this work for additional 10*4bcbe0a3Schristos.. information regarding copyright ownership. 11*4bcbe0a3Schristos 12*4bcbe0a3SchristosNotes for BIND 9.16.35 13*4bcbe0a3Schristos---------------------- 14*4bcbe0a3Schristos 15*4bcbe0a3SchristosBug Fixes 16*4bcbe0a3Schristos~~~~~~~~~ 17*4bcbe0a3Schristos 18*4bcbe0a3Schristos- A crash was fixed that happened when a ``dnssec-policy`` zone that 19*4bcbe0a3Schristos used NSEC3 was reconfigured to enable ``inline-signing``. :gl:`#3591` 20*4bcbe0a3Schristos 21*4bcbe0a3Schristos- In certain resolution scenarios, quotas could be erroneously reached 22*4bcbe0a3Schristos for servers, including any configured forwarders, resulting in 23*4bcbe0a3Schristos SERVFAIL answers being sent to clients. This has been fixed. 24*4bcbe0a3Schristos :gl:`#3598` 25*4bcbe0a3Schristos 26*4bcbe0a3Schristos- ``rpz-ip`` rules in ``response-policy`` zones could be ineffective in 27*4bcbe0a3Schristos some cases if a query had the CD (Checking Disabled) bit set to 1. 28*4bcbe0a3Schristos This has been fixed. :gl:`#3247` 29*4bcbe0a3Schristos 30*4bcbe0a3Schristos- Previously, if Internet connectivity issues were experienced during 31*4bcbe0a3Schristos the initial startup of :iscman:`named`, a BIND resolver with 32*4bcbe0a3Schristos ``dnssec-validation`` set to ``auto`` could enter into a state where 33*4bcbe0a3Schristos it would not recover without stopping :iscman:`named`, manually 34*4bcbe0a3Schristos deleting the ``managed-keys.bind`` and ``managed-keys.bind.jnl`` 35*4bcbe0a3Schristos files, and starting :iscman:`named` again. This has been fixed. 36*4bcbe0a3Schristos :gl:`#2895` 37*4bcbe0a3Schristos 38*4bcbe0a3Schristos- The statistics counter representing the current number of clients 39*4bcbe0a3Schristos awaiting recursive resolution results (``RecursClients``) could 40*4bcbe0a3Schristos overflow in certain resolution scenarios. This has been fixed. 41*4bcbe0a3Schristos :gl:`#3584` 42*4bcbe0a3Schristos 43*4bcbe0a3Schristos- Previously, BIND failed to start on Solaris-based systems with 44*4bcbe0a3Schristos hundreds of CPUs. This has been fixed. :gl:`#3563` 45*4bcbe0a3Schristos 46*4bcbe0a3Schristos- When a DNS resource record's TTL value was equal to the resolver's 47*4bcbe0a3Schristos configured ``prefetch`` "eligibility" value, the record was 48*4bcbe0a3Schristos erroneously not treated as eligible for prefetching. This has been 49*4bcbe0a3Schristos fixed. :gl:`#3603` 50*4bcbe0a3Schristos 51*4bcbe0a3SchristosKnown Issues 52*4bcbe0a3Schristos~~~~~~~~~~~~ 53*4bcbe0a3Schristos 54*4bcbe0a3Schristos- There are no new known issues with this release. See :ref:`above 55*4bcbe0a3Schristos <relnotes_known_issues>` for a list of all known issues affecting this 56*4bcbe0a3Schristos BIND 9 branch. 57