<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-text-flowed" style="font-family: -moz-fixed;
font-size: 14px;" lang="x-western">Introduction
<br>
<br>
BIND 9.9.0b2 is the second beta release for BIND 9.9.0 and also
<br>
contains a security update to address CVE-2011-4313
<br>
<br>
Please see the CHANGES file in the source code release for a
complete
<br>
list of all changes.
<br>
<br>
Download
<br>
<br>
The latest versions of BIND 9 software can always be found on
our
<br>
web site at <a class="moz-txt-link-freetext"
href="http://www.isc.org/downloads/all">http://www.isc.org/downloads/all</a>.
There you will find
<br>
additional information about each release, source code, and
<br>
pre-compiled versions for Microsoft Windows operating systems.
<br>
<br>
Support
<br>
<br>
Product support information is available on
<br>
<a class="moz-txt-link-freetext"
href="http://www.isc.org/services/support">http://www.isc.org/services/support</a>
for paid support options. Free
<br>
support is provided by our user community via a mailing list.
<br>
Information on all public email lists is available at
<br>
<a class="moz-txt-link-freetext"
href="https://lists.isc.org/mailman/listinfo">https://lists.isc.org/mailman/listinfo</a>.
<br>
<br>
Security Fixes
<br>
<br>
BIND 9 nameservers performing recursive queries could cache an
<br>
invalid record and subsequent queries for that record could
crash
<br>
the resolvers with an assertion failure. [RT #26590]
[CVE-2011-4313]
<br>
New Features
<br>
<br>
* Add a 'named -U' option to set the number of UDP listener
threads
<br>
per interface. [RT #26485]
<br>
<br>
* dnssec-signzone: "-f -" prints to stdout; "-O full" option
<br>
prints in single-line-per-record format. [RT #20287]
<br>
<br>
* Add a configuration switch "dnssec-lookaside 'no'" to set
<br>
explicitly the current default behavior. [RT #24858]
<br>
<br>
* 'rndc querylog' can now be given an on/off parameter instead
<br>
of only being used as a toggle. [RT #18351]
<br>
<br>
* When the server logs messages about the state of recursive
<br>
client processing, it will include the name the client had
<br>
requested in the log messages, to make it easier to identify
<br>
problems when they occur. Such log messages will now look
similar
<br>
to this one: 03-Nov-2011 14:14:44.981 client 10.53.0.7#49775
<br>
(<a class="moz-txt-link-abbreviated"
href="http://www.example.com">www.example.com</a>): send
<br>
<br>
Bug Fixes
<br>
<br>
* Change #3186 was incomplete; dns_db_rpz_findips() could fail
to set
<br>
the database version correctly, causing an assertion failure.
[RT
<br>
#26180]
<br>
<br>
* Correct a behavior introduced in 9.9.0a3 whereby 'rndc
recursing'
<br>
could cause a core dump. [RT #26495]
<br>
<br>
* resolver.c:validated() was not thread-safe. [RT #26478]
<br>
<br>
* Correct a situation in rbtdb.c: where failure to remove a node
from
<br>
the deadnodes list prior to adding a reference to it could
lead to
<br>
a possible assertion failure. [RT #23219]
<br>
<br>
* Canceling the oldest query due to recursive-client overload
could
<br>
trigger an assertion failure. [RT #26463]
<br>
<br>
* NOEDNS caching on timeout was too agressive. [RT #26416]
<br>
<br>
* Clarify the error message reported when the config parser
cannot
<br>
open a file. [RT #22263]
<br>
<br>
* A query structure could be used after being freed. [RT
#22208]
<br>
<br>
* zone.c:zone_refreshkeys() could fail to detach references
correctly
<br>
when errors occurred, causing a hang on shutdown. [RT #26372]
<br>
<br>
Thank You
<br>
<br>
Thank you to everyone who assisted us in making this release
possible.
<br>
If you would like to contribute to ISC to assist us in
continuing
<br>
to make quality open source software, please visit our donations
<br>
page at <a class="moz-txt-link-freetext"
href="http://www.isc.org/supportisc">http://www.isc.org/supportisc</a>.
<br>
</div>
</body>
</html>