diff options
| author | Florian Weimer <fweimer@redhat.com> | 2017-04-13 13:22:51 +0200 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2017-04-13 13:22:51 +0200 |
| commit | 44500cbb25bc6e76723304b9ff39f875c04309f9 (patch) | |
| tree | 924aa24c754a523da4c0f381f9f269ddc5c327c9 /NEWS | |
| parent | e14a27723cc3a154d67f3f26e719d08c0ba9ad25 (diff) | |
| download | glibc-44500cbb25bc6e76723304b9ff39f875c04309f9.tar.gz glibc-44500cbb25bc6e76723304b9ff39f875c04309f9.tar.xz glibc-44500cbb25bc6e76723304b9ff39f875c04309f9.zip | |
resolv: Remove EDNS fallback [BZ #21369]
EDNS is disabled by default (so there is interoperability issue), and the fallback code is problematic because it prevents an application from obtaining DNSSEC data after a FORMERR response.
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/NEWS b/NEWS index 99288b5f22..ace0e0d90f 100644 --- a/NEWS +++ b/NEWS @@ -41,6 +41,11 @@ Version 2.26 "The Rules of Hungarian Orthography, 12th edition" and the work of Egmont Koblinger (Bug 18934). +* The DNS stub resolver no longer performs EDNS fallback. If EDNS or DNSSEC + support is enabled, the configured recursive resolver must support EDNS. + (Responding to EDNS-enabled queries with responses which are not + EDNS-enabled is fine, but FORMERR responses are not.) + * res_mkquery and res_nmkquery no longer support the IQUERY opcode. DNS servers have not supported this opcode for a long time. |