Dear all,
We have an emergency quick-fix release, version 4.11.1 for NSD.
NSD 4.11.1 is available:
https://nlnetlabs.nl/downloads/nsd/nsd-4.11.1.tar.gz
sha256 696e50052008de4fa7ab1d818d5b77eb63247eea2f0575114c9592ff9188a614
pgp https://nlnetlabs.nl/downloads/nsd/nsd-4.11.1.tar.gz.asc
NSD version 4.11.0 had a serious bug in which applying updates to zones
(and other modifications that require a reload, such as adding and
deleting zones), could stop entirely after reception of a broken or
corrupted update via zone transfer. We believe that this broken state
would appear as one of the NSD processes consuming 100% CPU. Version
4.11.1 has this corrected as well as some other smaller non-critical bugs.
We strongly advise to not run NSD version 4.11.0, and if you have it
deployed already, upgrade to 4.11.1 at the earliest possible opportunity.
nsd 4.11.1
=========BUG FIXES:
- Fix #415: Fix out of tree builds. Thanks Florian Obser (@fobser).
- Fix #414: XoT interoperability with BIND and Knot
- Fix #421: old-main can quit before the reload process received
from old-main that it is done on the reload_listener pipe.
Thanks Otto Retter.
- Fix whitespace in comment.
- Fix #424: Stalled updates after corrupt transfer.
simdzone 0.2.1
=============BUG FIXES:
- Cleanup westmere and haswell object files (#244) Thanks @fobser
- Out of tree builds (NLnetLabs/nsd#415)
- Fix function declarations for fallback detection routine in
isadetection.h.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE5F8F8212F77A498_and_old_rev.asc
Type: application/pgp-keys
Size: 7749 bytes
Desc: OpenPGP public key
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20250119/9d3c4c0e/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20250119/9d3c4c0e/attachment-0001.bin>