Release Notes for DNS Server

Fixed Issues

1. Minor bug fixes.

Fixed Issues

1. Fixed an issue where DNS Server might not be able to accurately listen to the IP address changes of Synology NAS when Synology High Availability was updated.

Compatibility & Installation

1. DNS Server 9.16.23 requires DSM 7.1 or versions above.

What's New

1. Updated to BIND 9.16.23.

Fixed Issues

1. Fixed an issue where the domain data of Windows Server 2003 could not be migrated to Synology Directory Server.
2. Fix an issue where turning off IPv6 might cause the event "lame-servers network unreachable resolving" to repeatedly appear in the Log page and prevent domain names from being resolved properly.
3. Fix an issue where domain names might not be resolved properly when more than two views were added to the AD zone.
4. Fixed a security vulnerability regarding BIND (CVE-2021-25219).
5. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

Fixed Issues

1. Fixed an issue where existing keys could not be displayed on the Keys page after an update to DSM 7.0.
2. Fixed an issue where existing zone settings might not be editable after an update to DSM 7.0.

Compatibility and Installation

1. Updated to be compatible with DSM 7.0.

Important Note

1. This update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on regions.

What's New

1. Enhanced the capacity load of DNS lookups: the maximum number of concurrent sockets was increased to 4096.
2. Supports wildcard characters (*) for the creation of resource records in AD-integrated zones.

Fixed Issues

1. Minor bug fixes.

Known Issues & Limitations

1. Only supports selecting all AD-integrated zones during a view creation.

Fixed Issues

1. Fixed the issue where resource records in the AD-integrated zone could not be modified.
2. Fixed the issue where editing SOA records might fail.
3. Fixed the issue where the source IP list could not be configured during a view creation.
4. Fixed the issue where TXT records with more than 255 characters could not be added, edited, or deleted in the AD-integrated zone.
5. Fixed the issue where this package could not list more than 100 zones.
6. Fixed multiple security vulnerabilities regarding BIND (Synology-SA-20:12).
7. Fixed a security vulnerability (Synology-SA-20:27).

Fixed Issues

1. Fixed the issue where resource records related to Active Directory Server (the package replaced by Synology Directory Server since DSM 6.2) might not work properly.

2. Fixed the issue where DNS Server might cause the passive server in a Synology High Availability cluster running on DSM 6.2.2 or before to stop logging.

3. Fixed the issue where DNS Server might stop running when the domain name of Synology Directory Server conflicts with the domain name of another zone.

4. Fixed the issue where an error message fails to appear when the Zone Transfer Rule or the allowed Source IP List for Synology Directory Server's zone contains information other than host IP addresses.

5. Fixed the issue where DNS Server might stop running when the domain name of a reverse zone for Synology Directory Server conflicts with the domain name of another reverse zone.

What's New

1. Added support for listening on IP address changes and automatic updates of DNS host records in the AD-integrated zone upon any changes in the IP address of Synology NAS.

2. Added support for limiting IP addresses for zone transfer and forwarding DNS records from Master zones to Slave zones when Synology Directory Server is activated.

Fixed Issues

1. Fixed the issue where the registration of IP addresses to the AD-integrated zone might fail after Synology Directory Server is activated.

2. Fixed the issue where DNS Server might stop logging events after Synology MailPlus Server is activated or stopped.

3. Fixed the issue where the registration of email addresses in CAA resource records might fail when the CAA record type is iodef.

1. Aligned display date and time formats with DSM.
2. Minor bug fixes.

Fixed an issue where zones of specific Active Directory domain types might not display in resource records properly.

Thai user interface is now available.

1. Enhanced the compatibility and stability of Active Directory Server and DNS Server.
2. Refined log collection behavior and enhanced the stability of this function.

1. Added support for CAA record to enhance certificate issuance security.
2. You can now add, edit, and delete TXT records for Active Directory Server.
3. Fixed an issue where DNS Server logs might be cleared upon restart of MailPlus Server.

1. Added support for management of reverse zones in Active Directory Server.
2. You can now batch edit A/AAAA resource records.
3. Added function of log search.
4. Fixed an issue where DNS update zones could not be included in more than one view.

Fixed a security vulnerability regarding DNS Server (CVE-2017-3142 and CVE-2017-3143).

1. Fixed an issue where IPv6 subnet rules cannot be shown or edited on DNS Server.

1. Fixed a security vulnerability (CVE-2017-3135, CVE-2017-3136, CVE-2017-3137, CVE-2017-3138).
2. Added support for dynamic update of zone records.
3. Added support for Active Directory Server to register DNS zone records automatically.
4. Minor bug fixes.

1. Fixed multiple security issues (CVE-2016-9131, CVE-2016-9147, CVE-2016-9444 and CVE-2016-9778).
2. Fixed an issue where editing/deleting TXT records might fail.

1. Upgraded Bind9 to 9.9.9-P2 to address a security vulnerability (CVE-2016-2775).

1. Upgraded to bind 9.9.8-P3.

1. Fixed three security vulnerability (CVE-2015-8704, CVE-2016-1285, CVE-2016-1286).
2. Fixed an issue that cache cannot be updated properly in forwarder zone.
3. Minor bug fixes.

1. Fixed one security vulnerability (CVE-2015-8704).
2. Fixed an issue that cache cannot be updated properly in forwarder zone.
3. Minor bug fixes.

1. Upgraded BIND 9 to 9.9.8-P3 to address multiple security vulnerabilities (CVE-2015-8704, CVE-2015-8000, and CVE-2015-8461).
2. Fixed an issue where cache will not be refreshed when creating/editing a forwarding zone.

1. Upgraded bind to 9.9.8-P2 to fix security vulnerabilties (CVE-2015-8461 and CVE-2015-8000).

1. Upgraded Bind9 to 9.9.7-P3 to address multiple security vulnerabilities (CVE-2015-5477, CVE-2015-5722, CVE-2015-5986).

This is the initial release to add support for RT1900ac and DS216play.

1. Upgraded Bind to 9.9.7-P3 to address multiple vulnerabilities (CVE-2015-5477, CVE-2015-5722, and CVE-2015-5986).

1. Fixed an issue where the Management Interface could not be displayed.
2. Upgrade BIND to 9.9.7-P1 to address one security vulnerability (CVE-2015-4620).

1. Stability enhancements.
2. Minor bug fixes.

1. Fixed an issue where DNS Server package fails to start after system reboot.
2. Minor bug fixes.

1. Fixed an issue where DNS server could not start after system reboot.

1. Upgraded Bind to version 9.9.6-P1 to fix a security vulnerability that allowed remote attackers to use the weakness to perform DoS attacks (CVE-2014-8500).

1. Enhanced security.

1. Supports search and sort on all records.
2. Minor bugs fixed.

1. Fixed a security issue allowing denial of service attacks. (CVE-2014-0591)