BIND 9.7.1-P1 Release Announcement

[Larissa Shapiro]

                BIND 9.7.1-P1 is now available.

        BIND 9.7.1-P1 is a maintenance release for BIND 9.7.


BIND 9.7.1-P1 addresses two backwards compatibility issues introduced in
BIND 9.7.0:

  1) BIND 9.7.x expected negative responses to be in a certain format,
     one that matches what BIND generates. However, some non-BIND
     servers (including custom-created servers and load balancers) did
     not include everything BIND expected, so BIND returned SERVFAIL to
     the client.

  2) BIND 9.6.x and earlier accepted authoritative answers, even if the
     AA (authoritative data) bit was not set. This was done to work
     around TLD servers that were not correctly setting this bit. In
     BIND 9.7.0, answers without the AA bit set resulted in SERVFAIL,
     even if there was an answer.

BIND 9.7.1-P1 fixes the bug in issue #1 and backs out the code in issue
2 (AA bit strictness), restoring the pre-9.7.x behavior.

See this article for more details:

http://www.isc.org/community/blog/201007/compatibility-issues-bind-970-and-971


BIND 9.7.1-P1 can be downloaded from

        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz

The PGP signature of the distribution is at

        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.asc
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.sha256.asc
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/bind-9.7.1-P1.tar.gz.sha512.asc

The signature was generated with the ISC public key, which is
available at <https://www.isc.org/about/openpgp>.

A binary kit for Windows XP and Window 2003 is at

        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip

The PGP signature of the binary kit for Windows XP and Window 2003 is at

        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.asc
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.sha256.asc
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.zip.sha512.asc
        ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.asc

ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.sha256.asc

ftp://ftp.isc.org/isc/bind9/9.7.1-P1/BIND9.7.1-P1.debug.zip.sha512.asc


Changes since 9.7.1.

        --- 9.7.1-P1 released ---

2926.   [rollback]      Temporarily rollback change 2748. [RT #21594]

2925.   [bug]           Named failed to accept uncachable negative responses
                        from insecure zones. [RT# 21555]

        --- 9.7.1 released ---