Update to 9.18.38 (#2367771)

Security Fixes:

Fix an issue when some specific queries could remain unanswered with serve-stale enabled.

New Features:

Add support for the CO flag to dig.

Bug fixes:

Correct the default interface-interval from 60s to 60m.
Fix a purge-keys bug when using multiple views of a zone.

https://downloads.isc.org/isc/bind9/9.18.38/doc/arm/html/notes.html#notes-for-bind-9-18-38

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-470bc2dd8a

This update's test gating status has been changed to 'waiting'.

7 months ago

pemensik edited this update.

7 months ago

pgfed commented & provided feedback 7 months ago

with

rpm -qa bind
    bind-9.18.38-1.fc42.x86_64

from https://koji.fedoraproject.org/koji/buildinfo?buildID=2804029

and

cat named.conf
    logging {
      channel loglevel_critical { severity critical; syslog; print-category yes; print-severity yes; print-time yes; };
    ...
      channel loglevel_notice   { severity notice;   syslog; print-category yes; print-severity yes; print-time yes; };

-     category dnssec          { loglevel_critical; };
+     category dnssec          { loglevel_notice;   };

logs stream

...
025-08-20T07:34:57.578146-04:00 test named[49058]: 20-Aug-2025 07:34:57.577 dnssec: error: zone example.com/IN/external (signed): zone_rekey:zone_verifykeys failed: some key files are missing
2025-08-20T07:34:57.578765-04:00 test named[49058]: 20-Aug-2025 07:34:57.577 dnssec: error: zone example.com/IN/external (signed): zone_rekey:zone_verifykeys failed: some key files are missing
2025-08-20T07:34:57.579396-04:00 test named[49058]: 20-Aug-2025 07:34:57.578 dnssec: error: zone example.com/IN/external (signed): zone_rekey:zone_verifykeys failed: some key files are missing
2025-08-20T07:34:57.580031-04:00 test named[49058]: 20-Aug-2025 07:34:57.579 dnssec: error: zone example.com/IN/external (signed): zone_rekey:zone_verifykeys failed: some key files are missing
2025-08-20T07:34:57.580651-04:00 test named[49058]: 20-Aug-2025 07:34:57.579 dnssec: error: zone example.com/IN/external (signed): zone_rekey:zone_verifykeys failed: some key files are missing
2025-08-20T07:34:57.581290-04:00 test named[49058]: 20-Aug-2025 07:34:57.580 dnssec: error: zone ```

back to

grep "category dnssec" named.conf - category dnssec { loglevel_notice; }; + category dnssec { loglevel_critical; }; ```

all's good

BZ#2375895 massive log spam; Spurious missing key-file messages -- upstream report/fix merged

This update's test gating status has been changed to 'passed'.

7 months ago

This update has been submitted for testing by bodhi.

7 months ago

This update has been pushed to testing.

7 months ago