Hello everyone.

Knot DNS 2.1.1 by CZ.NIC Labs has been just declared stable. It mostly
contains bug fixes. The update is highly recommended as some of the
problems are quite critical.

- We have resolved the problem with source address selection for
  UDP messages when the server is configured to listen on all
  available addresses (i.e., 0.0.0.0 or ::0). Prior to this release
  and depending on the networking configuration, the server could
  choose a wrong source address.

- Duplicate private keys can be now imported into the KASP database.
  This is practical if you have the same signing key in the legacy
  format and share the key between multiple domains. Prior to this
  release, sharing the key was possible only with some hacks.

- We have resolved a problem with duplicate NSEC record which had
  been returned for Wildcard No Data answers. In the new version, the
  record is inserted into the response only once.

- We have fixed a possible server crash, which could happen during
  an incoming zone transfer when a server reload is requested.

- The fix of a crash with many configured interfaces and threads was
  included in the previous release. However the fix was incomplete. We
  have found another related problems which are addressed in the new
  version.

Thank you for the feedback and bug reports. And we are looking forward
to hear back from you. :-)

The sources are available on our server as usual.

Full changelog:
https://gitlab.labs.nic.cz/labs/knot/raw/v2.1.1/NEWS

Sources:
https://secure.nic.cz/files/knot-dns/knot-2.1.1.tar.xz

GPG signature:
https://secure.nic.cz/files/knot-dns/knot-2.1.1.tar.xz.asc

Best Regards,

Jan

--
 Jan Včelák, Knot DNS
 CZ.NIC Labs https://www.knot-dns.cz
 --------------------------------------------
 Milešovská 5, 130 00 Praha 3, Czech Republic
 WWW: https://labs.nic.cz https://www.nic.cz

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
knot-dns-users mailing list
[email protected]
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users

Reply via email to