CHANGES revision 28061f80b698171892e81c0856bc722190947998
e93624301705e3dc68992e3b488a764389eb8b98trawick4645. [bug] Fix PKCS#11 RSA parsing when MD5 is disabled.
e93624301705e3dc68992e3b488a764389eb8b98trawick [RT #45300]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp --- 9.11.2b1 released ---
a45de374fb215f294eb1369d4406ac79d6596ee1brianp4643. [security] An error in TSIG handling could permit unauthorized
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick zone transfers or zone updates. (CVE-2017-3142)
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick (CVE-2017-3143) [RT #45383]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick4642. [cleanup] Add more logging of RFC 5011 events affecting the
0007bb1e01dd762bde7280beb57113309c1715a3trawick status of managed keys: newly observed keys,
a1be7357e2c08b9dfe52c277063d212d65b15feejim deletion of revoked keys, etc. [RT #45354]
a1be7357e2c08b9dfe52c277063d212d65b15feejim4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
a1be7357e2c08b9dfe52c277063d212d65b15feejim --enable-developer. [RT #45373]
6682df9b639663c50f447e5690dd62cce7b1c086trawick4640. [bug] If query_findversion failed in query_getdb due to
6682df9b639663c50f447e5690dd62cce7b1c086trawick memory failure the error status was incorrectly
6682df9b639663c50f447e5690dd62cce7b1c086trawick discarded. [RT #45331]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick4639. [bug] Fix a regression in --with-tuning reporting introduced
51c0f0fe0a49a180389009442a83f74b1916f96atrawick by change 4488. [RT #45396]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick4638. [bug] Reloading or reconfiguring named could fail on
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick some platforms when LMDB was in use. [RT #45203]
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick4636. [bug] Normalize rpz policy zone names when checking for
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz existence. [RT #45358]
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz4635. [bug] Fix RPZ NSDNAME logging that was logging
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz failures as NSIP. [RT #45052]
60b83cd8f9427809082340cfd7581091990962f5jwoolley4634. [contrib] check5011.pl needs to handle optional space before
60b83cd8f9427809082340cfd7581091990962f5jwoolley semi-colon in +multi-line output. [RT #45352]
e93624301705e3dc68992e3b488a764389eb8b98trawick4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
4da4d1ae427ee8827c2325dd121ac05a83afd579wrowe4632. [security] The BIND installer on Windows used an unquoted
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm service path, which can enable privilege escalation.
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb (CVE-2017-3141) [RT #45229]
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb4631. [security] Some RPZ configurations could go into an infinite
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb query loop when encountering responses with TTL=0.
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb (CVE-2017-3140) [RT #45181]
4aaf7088758ca56823e585969320f2405a7cc5fcdougm4630. [bug] "dyndb" is dependent on dlopen existing / being
4aaf7088758ca56823e585969320f2405a7cc5fcdougm enabled. [RT #45291]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp4629. [bug] dns_client_startupdate could not be called with a
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp running client. [RT #45277]
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx4628. [bug] Fixed a potential reference leak in query_getdb().
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx [RT #45247]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim4626. [test] Added more tests for handling of different record
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim ordering in CNAME and DNAME responses. [QA #430]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim4625. [bug] Running "rndc addzone" and "rndc delzone" at close
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley to the same time could trigger a deadlock if using
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley LMDB. [RT #45209]
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley4623. [bug] Use --with-protobuf-c and --with-libfstrm to find
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley protoc-c and fstrm_capture. [RT #45187]
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp4622. [bug] Remove unnecessary escaping of semicolon in CAA and
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp URI records. [RT #45216]
82630c4a04be47f39298d3284b2c596244fb509bbrianp4621. [port] Force alignment of oid arrays to silence loader
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive warnings. [RT #45131]
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive4620. [port] Handle EPFNOSUPPORT being returned when probing
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm to see if a socket type is supported. [RT #45214]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm4619. [bug] Call isc_mem_put instead of isc_mem_free in
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard bin/named/server.c:setup_newzones. [RT #45202]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard4618. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard Add logging for lmdb call failures. [RT #45204]
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe4617. [test] Update rndc system test to be more delay tolerant.
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick [RT #45177]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim4616. [bug] When using LMDB, zones deleted using "rndc delzone"
7a64b871b8b5e5a427b570e90f0e38e88266c783jim were not correctly removed from the new-zone
7a64b871b8b5e5a427b570e90f0e38e88266c783jim database. [RT #45185]
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe4615. [bug] AD could be set on truncated answer with no records
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz present in the answer and authority sections.
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz4614. [test] Fixed an error in the sockaddr unit test. [RT #45146]
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz4612. [bug] Silence 'may be use uninitalised' warning and simplify
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp the code in lwres/getaddinfo:process_answer.
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp [RT #45158]
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin4611. [bug] The default LMDB mapsize was too low and caused
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin errors after few thousand zones were added using
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin rndc addzone. A new config option "lmdb-mapsize"
c148bc6b4eea544af816783400362f741c5f5fc2trawick has been introduced to configure the LMDB
c148bc6b4eea544af816783400362f741c5f5fc2trawick mapsize depending on operational needs.
c148bc6b4eea544af816783400362f741c5f5fc2trawick [RT #44954]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron4609. [cleanup] Rearrange makefiles to enable parallel execution
9d432e23f6025b78322cbee43e8e89262a108e5eaaron (i.e. "make -j"). [RT #45078]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron4608. [func] DiG now warns about .local queries which are reserved
9d432e23f6025b78322cbee43e8e89262a108e5eaaron for Multicast DNS. [RT #44783]
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick4606. [port] Stop using experimental "Experimental keys on scalar"
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick feature of perl as it has been removed. [RT #45012]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin4604. [bug] Don't use ERR_load_crypto_strings() when building
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin with OpenSSL 1.1.0. [RT #45117]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin4603. [doc] Automatically generate named.conf(5) man page
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim from doc/misc/options. Thanks to Tony Finch.
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim [RT #43525]
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick4602. [func] Threads are now set to human-readable
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick names to assist debugging, when supported by
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick the OS. [RT #43234]
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp4601. [bug] Reject incorrect RSA key lengths during key
2864362ca8266097928e84f101010bdf814ffa08stoddard generation and and sign/verify context
2864362ca8266097928e84f101010bdf814ffa08stoddard creation. [RT #45043]
2864362ca8266097928e84f101010bdf814ffa08stoddard4600. [bug] Adjust RPZ trigger counts only when the entry
2864362ca8266097928e84f101010bdf814ffa08stoddard being deleted exists. [RT #43386]
893c106ae59d8e96d921524b123ae26dea8ad37fgstein4599. [bug] Fix inconsistencies in inline signing time
893c106ae59d8e96d921524b123ae26dea8ad37fgstein comparison that were introduced with the
893c106ae59d8e96d921524b123ae26dea8ad37fgstein introduction of rdatasetheader->resign_lsb.
893c106ae59d8e96d921524b123ae26dea8ad37fgstein [RT #42112]
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh4597. [bug] The validator now ignores SHA-1 DS digest type
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp when a DS record with SHA-384 digest type is
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp present and is a supported digest type.
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp [RT #45017]
b9fe73991e7c592a634242a7e11f924689f58e1fgstein4596. [bug] Validate glue before adding it to the additional
b9fe73991e7c592a634242a7e11f924689f58e1fgstein section. This also fixes incorrect TTL capping
b9fe73991e7c592a634242a7e11f924689f58e1fgstein when the RRSIG expired earlier than the TTL.
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick [RT #45062]
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick4593. [doc] Update README using markdown, remove outdated FAQ
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick file in favor of the knowledge base.
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp4592. [bug] A race condition on shutdown could trigger an
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp assertion failure in dispatch.c. [RT #43822]
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp4591. [port] Addressed some python 3 compatibility issues.
d7856f850b9b51165f23ae381a891bda894e1373ianh Thanks to Ville Skytta. [RT #44955] [RT #44956]
d7856f850b9b51165f23ae381a891bda894e1373ianh4590. [bug] Support for PTHREAD_MUTEX_ADAPTIVE_NP was not being
d7856f850b9b51165f23ae381a891bda894e1373ianh properly detected. [RT #44871]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick4589. [cleanup] "configure -q" is now silent. [RT #44829]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick4588. [bug] nsupdate could send queries for TKEY to the wrong
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick server when using GSSAPI. Thanks to Tomas Hozza.
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick [RT #39893]
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm4587. [bug] named-checkzone failed to handle occulted data below
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm DNAMEs correctly. [RT #44877]
88ecd979f1112454432371f55a1420240fae3743trawick4586. [func] dig, host and nslookup now use TCP for ANY queries.
88ecd979f1112454432371f55a1420240fae3743trawick [RT #44687]
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick4585. [port] win32: Set CompileAS value. [RT #42474]
c02a689f2274966ed5d1c16207f74b5128c35c86trawick4584. [bug] A number of memory usage statistics were not properly
c02a689f2274966ed5d1c16207f74b5128c35c86trawick reported when they exceeded 4G. [RT #44750]
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick4574. [bug] Dig leaked memory with multiple +subnet options.
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick [RT #44683]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4555. [func] dig +ednsopt: EDNS options can now be specified by
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard name in addition to numeric value. [RT #44461]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard --- 9.11.1 released ---
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard --- 9.11.1rc3 released ---
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4582. [security] 'rndc ""' could trigger a assertion failure in named.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard (CVE-2017-3138) [RT #44924]
3a9c3ec5357b36fc34766cb8166168311af3562frbb4581. [port] Linux: Add getpid and getrandom to the list of system
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz calls named uses for seccomp. [RT #44883]
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz4580. [bug] 4578 introduced a regression when handling CNAME to
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz referral below the current domain. [RT #44850]
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz --- 9.11.1rc2 released ---
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4578. [security] Some chaining (CNAME or DNAME) responses to upstream
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin queries could trigger assertion failures.
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin (CVE-2017-3137) [RT #44734]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4575. [security] DNS64 with "break-dnssec yes;" can result in an
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin assertion failure. (CVE-2017-3136) [RT #44653]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin --- 9.11.1rc1 released ---
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4571. [bug] Out-of-tree builds of backtrace_test failed.
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin4570. [cleanup] named did not correctly fall back to the built-in
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin initializing keys if the bind.keys file was present
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin but empty. [RT #44531]
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh4569. [func] Store both local and remote addresses in dnstap
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh logging, and modify dnstap-read output format to
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh print them. [RT #43595]
92d311b27a6182c2eed67317990c8c168584ee75trawick4568. [contrib] Added a --with-bind option to the dnsperf configure
92d311b27a6182c2eed67317990c8c168584ee75trawick script to specify BIND prefix path.
92d311b27a6182c2eed67317990c8c168584ee75trawick4567. [port] Call getprotobyname and getservbyname prior to calling
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron chroot so that shared libraries get loaded. [RT #44537]
6f0dd808a674b7c09a625b36f320030f4e339f8faaron4565. [cleanup] The inline macro versions of isc_buffer_put*()
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron did not implement automatic buffer reallocation.
59511de77b389ced52253d055fc470ecfedfcd99aaron [RT #44216]
59511de77b389ced52253d055fc470ecfedfcd99aaron4564. [maint] Update the built in managed keys to include the
59511de77b389ced52253d055fc470ecfedfcd99aaron upcoming root KSK. [RT #44579]
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz4563. [bug] Modified zones would occasionally fail to reload.
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz4561. [port] Silence a warning in strict C99 compilers. [RT #44414]
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley4560. [bug] mdig: add -m option to enable memory debugging rather
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron than having it on all the time. [RT #44509]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron4559. [bug] openssl_link.c didn't compile if ISC_MEM_TRACKLINES
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron was turned off. [RT #44509]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron4558. [bug] Synthesised CNAME before matching DNAME was still
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron being cached when it should not have been. [RT #44318]
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh4557. [security] Combining dns64 and rpz can result in dereferencing
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh a NULL pointer (read). (CVE-2017-3135) [RT#44434]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm [RT #44336]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm4553. [bug] Named could deadlock there were multiple changes to
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm NSEC/NSEC3 parameters for a zone being processed at
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe the same time. [RT #42770]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm4552. [bug] Named could trigger a assertion when sending notify
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe messages. [RT #44019]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4551. [test] Add system tests for integrity checks of MX and
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron SRV records. [RT #43953]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4550. [cleanup] Increased the number of available master file
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron output style flags from 32 to 64. [RT #44043]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4547. [port] Add support for --enable-native-pkcs11 on the AEP
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron Keyper HSM. [RT #42463]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron --- 9.11.1b1 released ---
9379749d811388a7d0e3410940ddd6743a33d330jim4545. [func] Expand YAML output from dnstap-read to include
9379749d811388a7d0e3410940ddd6743a33d330jim a detailed breakdown of the DNS message contents.
9379749d811388a7d0e3410940ddd6743a33d330jim [RT #43642]
f37499bf7da81cd6b697d4667233137957426428jerenkrantz4544. [bug] Add message/payload size to dnstap-read YAML output.
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe [RT #43622]
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe4543. [bug] dns_client_startupdate now delays sending the update
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe request until isc_app_ctxrun has been called.
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron [RT #43976]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron4541. [bug] rndc addzone should properly reject non master/slave
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron zones. [RT #43665]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley [RT #43601]
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley4539. [bug] Referencing a nonexistent zone with RPZ could lead
83ca150ef902e9692972aa923e893bc6406d20f1ianh to a assertion failure when configuring. [RT #43787]
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick4538. [bug] Call dns_client_startresolve from client->task.
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp [RT #43896]
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp4537. [bug] Handle timeouts better in dig/host/nslookup. [RT #43576]
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe when reusing the event structure. [RT #43885]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4535. [bug] Address race condition in setting / testing of
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe DNS_REQUEST_F_SENDING. [RT #43889]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4533. [bug] dns_client_update should terminate on prerequisite
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron and also on BADZONE. [RT #43865]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron [RT #43836]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron4531. [security] 'is_zone' was not being properly updated by redirect2
29c30db45f6a469017e16b606611e460cc1a1f2caaron and subsequently preserved leading to an assertion
29c30db45f6a469017e16b606611e460cc1a1f2caaron failure. (CVE-2016-9778) [RT #43837]
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh in responses resulting in SERVFAIL being returned.
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh [RT #43779]
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick4529. [cleanup] Silence noisy log warning when DSCP probe fails
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick due to firewall rules. [RT #43847]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4528. [bug] Only set the flag bits for the i/o we are waiting
21644b4d1b09d0531911a8c9a891819a261480f8minfrin for on EPOLLERR or EPOLLHUP. [RT #43617]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4526. [doc] Corrected errors and improved formatting of
21644b4d1b09d0531911a8c9a891819a261480f8minfrin grammar definitions in the ARM. [RT #43739]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4525. [doc] Fixed outdated documentation on managed-keys.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #43810]
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron4524. [bug] The net zero test was broken causing IPv4 servers
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron with addresses ending in .0 to be rejected. [RT #43776]
7cdc36a99b42a3c5e36ac47726ad41c9c7b039ceianh4523. [doc] Expand config doc for <querysource4> and
7cdc36a99b42a3c5e36ac47726ad41c9c7b039ceianh <querysource6>. [RT #43768]
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick4522. [bug] Handle big gaps in log file version numbers better.
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick [RT #38688]
fe808620434aa59b796e8b60cd6eec65a32dfc2dstoddard4521. [cleanup] Log it as an error if an entropy source is not
e37c657172940f82d9b28a45fc1304140eb0b1d7stoddard found and there is no fallback available. [RT #43659]
5f08a022a210f4e511561e89f500621a15e6177dtrawick4520. [cleanup] Alphabetize more of the grammar when printing it
5f08a022a210f4e511561e89f500621a15e6177dtrawick out. Fix unbalanced indenting. [RT #43755]
6db5333c9461942b8af724b101e687af541d4d4cjerenkrantz4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz4517. [security] Named could mishandle authority sections that were
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz missing RRSIGs triggering an assertion failure.
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz (CVE-2016-9444) [RT # 43632]
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz4516. [bug] isc_socketmgr_renderjson was missing from the
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz windows build. [RT #43602]
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz4515. [port] FreeBSD: Find readline headers when they are in
d7d551e53cdfb3288eb651447d7209599c40d17estoddard edit/readline/ instead of readline/. [RT #43658]
d7d551e53cdfb3288eb651447d7209599c40d17estoddard4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron [RT #43566]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron [RT #43556]
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron4510. [security] Named mishandled some responses where covering RRSIG
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron records are returned without the requested data
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron resulting in a assertion failure. (CVE-2016-9147)
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron [RT #43548]
a4b3fb28f3d2e0983b15b4c6828c6980f2fc9b15jerenkrantz4509. [test] Make the rrl system test more reliable on slower
a4b3fb28f3d2e0983b15b4c6828c6980f2fc9b15jerenkrantz machines by using mdig instead of dig. [RT #43280]
548b2980e83f609186a76e98fb245d02e8547bc3jerenkrantz4508. [security] Named incorrectly tried to cache TKEY records which
548b2980e83f609186a76e98fb245d02e8547bc3jerenkrantz could trigger a assertion failure when there was
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz a class mismatch. (CVE-2016-9131) [RT #43522]
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz4507. [bug] Named could incorrectly log 'allows updates by IP
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz address, which is insecure' [RT #43432]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4504. [security] Allow the maximum number of records in a zone to
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz be specified. This provides a control for issues
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz raised in CVE-2016-6170. [RT #42143]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4503. [cleanup] "make uninstall" now removes files installed by
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz BIND. (This currently excludes Python files
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz due to lack of support in setup.py.) [RT #42912]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4502. [func] Report multiple and experimental options when printing
3dacbb0a9d24ff7178be1d79846225549719c0c7jerenkrantz grammar. [RT #43134]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4499. [port] MacOSX: silence deprecated function warning
1582553026e5e3a1921a34222eaee923fddee9b9wrowe by using arc4random_stir() when available
1582553026e5e3a1921a34222eaee923fddee9b9wrowe instead of arc4random_addrandom(). [RT #43503]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4498. [test] Simplify prerequisite checks in system tests.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #43516]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4496. [func] dig: add +idnout to control whether labels are
1582553026e5e3a1921a34222eaee923fddee9b9wrowe display in punycode or not. Requires idn support
1582553026e5e3a1921a34222eaee923fddee9b9wrowe to be enabled at compile time. [RT #43398]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4495. [bug] A isc_mutex_init call was not being checked.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #43391]
bd214bbc8d9db9d6d1dcb6b24462e6d1da8e8bbbstoddard4494. [bug] Look for <editline/readline.h>. [RT #43429]
064448ce15afe798e3c1dc0445fe2a30eb256bf6gregames4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
064448ce15afe798e3c1dc0445fe2a30eb256bf6gregames SO_TARGETS. [RT# 43336]
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames4492. [bug] irs_resconf_load failed to initialize sortlistnxt
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames causing bad writes if resolv.conf contained a
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames sortlist directive. [RT #43459]
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron4491. [bug] Improve message emitted when testing whether sendmsg
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron works with TOS/TCLASS fails. [RT #43483]
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz4489. [security] It was possible to trigger assertions when processing
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz a response containing a DNAME answer. (CVE-2016-8864)
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb4487. [test] Make system tests work on Windows. [RT #42931]
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb the python modules we install. [RT #43330]
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick4485. [bug] Failure to find readline when requested should be
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick fatal to configure. [RT #43328]
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick4484. [func] Check prefixes in acls to make sure the address and
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick prefix lengths are consistent. Warn only in
af262486b3d1c33299307195a715bd1e373f99afrbb BIND 9.11 and earlier. [RT #43367]
af262486b3d1c33299307195a715bd1e373f99afrbb4483. [bug] Address use before require check and remove extraneous
af262486b3d1c33299307195a715bd1e373f99afrbb dns_message_gettsigkey call in dns_tsig_sign.
af262486b3d1c33299307195a715bd1e373f99afrbb [RT #43374]
628ce9384209a460022be952ccdcc8538ad3ca84slive4482. [cleanup] Change #4455 was incomplete. [RT #43252]
628ce9384209a460022be952ccdcc8538ad3ca84slive4478. [func] Add +continue option to mdig, allow continue on socket
628ce9384209a460022be952ccdcc8538ad3ca84slive errors. [RT #43281]
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick4477. [test] Fix mkeys test timing issues. [RT #41028]
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick4476. [test] Fix reclimit test on slower machines. [RT #43283]
f6f453bf03007f391d347dc821e507cdd924d1bftrawick4475. [doc] Update named-checkconf documentation. [RT #43153]
f6f453bf03007f391d347dc821e507cdd924d1bftrawick4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
f6f453bf03007f391d347dc821e507cdd924d1bftrawick getprotobyname and getservbyname work. [RT #43197]
205f4595abf32ae208958d7f8abea68b335c9f39trawick4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
205f4595abf32ae208958d7f8abea68b335c9f39trawick4472. [bug] Named could fail to find the correct NSEC3 records when
1078b2c97bb39352bae929d2ed3f290a420470a7ianh a zone was updated between looking for the answer and
1078b2c97bb39352bae929d2ed3f290a420470a7ianh looking for the NSEC3 records proving nonexistence
1078b2c97bb39352bae929d2ed3f290a420470a7ianh of the answer. [RT #43247]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh --- 9.11.0 released ---
1078b2c97bb39352bae929d2ed3f290a420470a7ianh --- 9.11.0rc3 released ---
a8d5ccbcbde8cb6cf3a9dcf2eb05f393ab76baa9ianh4471. [cleanup] Render client/query logging format consistent for
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron ease of log file parsing. (Note that this affects
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron "querylog" format: there is now an additional field
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron indicating the client object address.) [RT #43238]
4224d5789080ea5586d49420da1e1996f5653bb5ianh4470. [bug] Reset message with intent parse before
4224d5789080ea5586d49420da1e1996f5653bb5ianh calling dns_dispatch_getnext. [RT #43229]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin --- 9.11.0rc2 released ---
2d2e3667d789f527a04ce6a0089621470c8143ccmartin4468. [bug] Address ECS option handling issues. [RT #43191]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin4467. [security] It was possible to trigger an assertion when
2d2e3667d789f527a04ce6a0089621470c8143ccmartin rendering a message. (CVE-2016-2776) [RT #43139]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin4466. [bug] Interface scanning didn't work on a Windows system
2d2e3667d789f527a04ce6a0089621470c8143ccmartin without a non local IPv6 addresses. [RT #43130]
9b0141308bc27f61d82742c198356975aa6b488abrianp4465. [bug] Don't use "%z" as Windows doesn't support it.
9b0141308bc27f61d82742c198356975aa6b488abrianp [RT #43131]
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh4464. [bug] Fix windows python support. [RT #43173]
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh4463. [bug] The dnstap system test failed on some systems.
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh [RT #43129]
22d348febc3c258df246ac93e37945398dbf0348ianh4462. [bug] Don't describe a returned EDNS COOKIE as "good"
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick when there isn't a valid server cookie. [RT #43167]
62af8654f682ca4913636bae099bec0befab985ctrawick4461. [bug] win32: not all external data was properly marked
62af8654f682ca4913636bae099bec0befab985ctrawick as external data for windows dll. [RT #43161]
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron --- 9.11.0rc1 released ---
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron4460. [test] Add system test for dnstap using unix domain sockets.
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron [RT #42926]
5e98e52df07f59be456af01ebf46d81defef2385trawick4459. [bug] TCP client objects created to handle pipeline queries
5e98e52df07f59be456af01ebf46d81defef2385trawick were not cleaned up correctly, causing uncontrolled
5e98e52df07f59be456af01ebf46d81defef2385trawick memory growth. [RT #43106]
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick4458. [cleanup] Update assertions to be more correct, and also remove
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron use of a reserved word. [RT #43090]
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe4455. [cleanup] Allow dyndb modules to correctly log the filename
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe and line number when processing configuration text
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe from named.conf. [RT #43050]
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp4453. [bug] Prefetching of DS records failed to update their
bf9e1eb04f8b0af835d15ac1d0ebcd8a154474cfjerenkrantz RRSIGs. [RT #42865]
e93cea6246ce30bf9791530a15c56f9e2eecf9cbianh4452. [bug] The default key manager policy file is now
f65342c1467751310036d4f9d75f554eaaf01cc6wrowe <sysdir>/dnssec-policy.conf (usually
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz4451. [cleanup] Log more useful information if a PKCS#11 provider
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz library cannot be loaded. [RT #43076]
45613d36b9466a48def0498cffa07f48980720f8jerenkrantz4450. [port] Provide more nuanced HSM support which better matches
45613d36b9466a48def0498cffa07f48980720f8jerenkrantz the specific PKCS11 providers capabilities. [RT #42458]
6f912b4ad14f622aa8d57f887c8c745e13ff6dbfjerenkrantz4449. [test] Fix catalog zones test on slower systems. [RT #42997]
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron4448. [bug] win32: ::1 was not being found when iterating
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron interfaces. [RT #42993]
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh4447. [tuning] Allow the fstrm_iothr_init() options to be set using
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh named.conf to control how dnstap manages the data
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh flow. [RT #42974]
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh4446. [bug] The cache_find() and _findrdataset() functions
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe could find rdatasets that had been marked stale.
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars [RT #42853]
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars4445. [cleanup] isc_errno_toresult() can now be used to call the
3fde4c273ea649d1320ec9c51e7d096cd9340a94jerenkrantz formerly private function isc__errno2result().
75eee56d2eaac9c27d32fc46b90bb6b1eac85359trawick4444. [bug] Fixed some issues related to dyndb: A bug caused
75eee56d2eaac9c27d32fc46b90bb6b1eac85359trawick braces to be omitted when passing configuration text
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe from named.conf to a dyndb driver, and there was a
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe use-after-free in the sample dyndb driver. [RT #43050]
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard TCP sockets. [RT #42864]
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard tree data structure with overlapping networks
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick (longest prefix match was ineffective).
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick [RT #43035]
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick4441. [cleanup] Alphabetize host's help output. [RT #43031]
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm4440. [func] Enable TCP fast open support when available on the
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm server side. [RT #42866]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe4439. [bug] Address race conditions getting ownernames of nodes.
1dfb5e008f35ed13c343b7f6306675e33c399792gstein [RT #43005]
1dfb5e008f35ed13c343b7f6306675e33c399792gstein4438. [func] Use LIFO rather than FIFO when processing startup
1dfb5e008f35ed13c343b7f6306675e33c399792gstein notify and refresh queries. [RT #42825]
eadb64379834961679105b7fd4178253fbb9f95dtrawick4437. [func] Minimal-responses now has two additional modes
eadb64379834961679105b7fd4178253fbb9f95dtrawick no-auth and no-auth-recursive which suppress
eadb64379834961679105b7fd4178253fbb9f95dtrawick adding the NS records to the authority section
eadb64379834961679105b7fd4178253fbb9f95dtrawick as well as the associated address records for the
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick nameservers. [RT #42005]
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick4436. [func] Return TLSA records as additional data for MX and SRV
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar lookups. [RT #42894]
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar will not fit into a single IPv4 encapsulated IPv6
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar UDP packet when transmitted over a Ethernet link.
6b6083e6518007139257ee449c2af3032d2437d0trawick [RT #42871]
6b6083e6518007139257ee449c2af3032d2437d0trawick4434. [protocol] Return EDNS EXPIRE option for master zones in addition
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick to slave zones. [RT #43008]
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick4433. [cleanup] Report an error when passing an invalid option or
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick view name to "rndc dumpdb". [RT #42958]
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp4432. [test] Hide rndc output on expected failures in logfileconfig
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp system test. [RT #27996]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe4431. [bug] named-checkconf now checks the rate-limit clause.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe [RT #42970]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe4430. [bug] Lwresd died if a search list was not defined.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe Found by 0x710DDDD At Alibaba Security. [RT #42895]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe4429. [bug] Address potential use after free on fclose() error.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe [RT #42976]
7f683bb300df767164724ebc664f339ac396b434dougm4428. [bug] The "test dispatch getnext" unit test could fail
7f683bb300df767164724ebc664f339ac396b434dougm in a threaded build. [RT #42979]
7f683bb300df767164724ebc664f339ac396b434dougm4427. [bug] The "query" and "response" parameters to the
7f683bb300df767164724ebc664f339ac396b434dougm "dnstap" option had their functions reversed.
7f683bb300df767164724ebc664f339ac396b434dougm --- 9.11.0b3 released ---
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe4426. [bug] Addressed Coverity warnings. [RT #42908]
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe4425. [bug] arpaname, dnstap-read and named-rrchecker were not
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm being installed into ${prefix}/bin. Tidy up
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm installation issues with CHANGE 4421. [RT #42910]
994c3fbc3335e8fe883b1ce4515efc0c85061cdfaaron4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz to provide feedback to the trust-anchor administrators
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid about how key rollovers are progressing as per
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid draft-ietf-dnsop-edns-key-tag-02. This can be
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid disabled using 'trust-anchor-telemetry no;'.
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid [RT #40583]
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz4423. [maint] Added missing IPv6 address 2001:500:84::b for
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick4422. [port] Silence clang warnings in dig.c and dighost.c.
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick [RT #42451]
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick4421. [func] When built with LMDB (Lightning Memory-mapped
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick Database), named will now use a database to store
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick the configuration for zones added by "rndc addzone"
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick instead of using a flat NZF file. This improves
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick performance of "rndc delzone" and "rndc modzone"
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick significantly. Existing NZF files will
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick automatically by converted to NZD databases.
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick To view the contents of an NZD or to roll back to
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick NZF format, use "named-nzd2nzf". To disable
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz this feature, use "configure --without-lmdb".
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard4420. [func] nslookup now looks for AAAA as well as A by default.
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard [RT #40420]
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard4419. [bug] Don't cause undefined result if the label of an
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard entry in catalog zone is changed. [RT #42708]
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
a21148678a1459064627d917a66669e7e8d140e6stoddard4417. [bug] dnssec-keymgr could fail to create successor keys
a21148678a1459064627d917a66669e7e8d140e6stoddard if the prepublication interval was set to a value
910df8b3f50a0515b430b999d4750de94c509f2atrawick smaller than the default. [RT #42820]
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe4416. [bug] dnssec-keymgr: Domain names in policy files could
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe fail to match due to trailing dots. [RT #42807]
51be7fc538641ed7cb22e959eb31629f7183f70fianh4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe excluded. [RT #42884]
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe4414. [bug] Corrected a bug in the MIPS implementation of
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe isc_atomic_xadd(). [RT #41965]
decd0c23bb26f6662f4b963cf86ee569613bffeagregames4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
decd0c23bb26f6662f4b963cf86ee569613bffeagregames was returned. [RT #42733]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron --- 9.11.0b2 released ---
e1753aabf5df187b5b04e72a958af4b65b1a125daaron4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
e1753aabf5df187b5b04e72a958af4b65b1a125daaron removed. [RT #42721]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron4411. [func] "rndc dnstap -roll" automatically rolls the
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron dnstap output file; the previous version is
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron saved with ".0" suffix, and earlier versions
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron with ".1" and so on. An optional numeric argument
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh indicates how many prior files to save. [RT #42830]
910df8b3f50a0515b430b999d4750de94c509f2atrawick4410. [bug] Address use after free and memory leak with dnstap.
910df8b3f50a0515b430b999d4750de94c509f2atrawick [RT #42746]
910df8b3f50a0515b430b999d4750de94c509f2atrawick4409. [bug] DNS64 should exclude mapped addresses by default when
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp an exclude acl is not defined. [RT #42810]
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp4408. [func] Continue waiting for expected response when we the
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp response we get does not match the request. [RT #41026]
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp4407. [performance] Use GCC builtin for clz in RPZ lookup code.
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp [RT #42818]
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp4406. [security] getrrsetbyname with a non absolute name could
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp trigger an infinite recursion bug in lwresd
185b73b1f914e5d8f99f31225cc656b882dcbf73ianh and named with lwres configured if when combined
6ef713e25735887d4a59a879b97a68bd575ecb92trawick with a search list entry the resulting name is
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard too long. (CVE-2016-2775) [RT #42694]
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard4405. [bug] Change 4342 introduced a regression where you could
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick not remove a delegation in a NSEC3 signed zone using
8abd60101b9794e224795ccf68b8ba984efbc94astoddard OPTOUT via nsupdate. [RT #42702]
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick4404. [misc] Allow krb5-config to be used when configuring gssapi.
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick [RT #42580]
6ef713e25735887d4a59a879b97a68bd575ecb92trawick4403. [bug] Rename variables and arguments that shadow: basename,
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick clone and gai_error.
26d590c0e5338f66ca1aad6f925374843fac5121stoddard4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
26d590c0e5338f66ca1aad6f925374843fac5121stoddard --- 9.11.0b1 released ---
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe4401. [misc] Change LICENSE to MPL 2.0.
d472f67198d6b15dd1270136f180cca9c9263243trawick4400. [bug] ttl policy was not being inherited in policy.py.
d472f67198d6b15dd1270136f180cca9c9263243trawick [RT #42718]
d472f67198d6b15dd1270136f180cca9c9263243trawick4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
d472f67198d6b15dd1270136f180cca9c9263243trawick 'ECDSAP384SHA384' don't have settable keysize.
d472f67198d6b15dd1270136f180cca9c9263243trawick [RT #42718]
a3bb95a3600153c7f09f62749e32093658943c32brianp4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
a3bb95a3600153c7f09f62749e32093658943c32brianp [RT #42718]
b760518cc17e7124ba546ed63063603f1ab82a40aaron4397. [bug] Update Windows python support. [RT #42538]
b760518cc17e7124ba546ed63063603f1ab82a40aaron4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
b760518cc17e7124ba546ed63063603f1ab82a40aaron [RT #42455]
b760518cc17e7124ba546ed63063603f1ab82a40aaron4395. [bug] Improve out-of-tree installation of python modules.
b760518cc17e7124ba546ed63063603f1ab82a40aaron [RT #42586]
23d8f62856c1531526042e1c5edf44557cadd2e5trawick4394. [func] Add rndc command "dnstap-reopen" to close and
23d8f62856c1531526042e1c5edf44557cadd2e5trawick reopen dnstap output files. [RT #41803]
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz4393. [bug] Address potential NULL pointer dereferences in
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz dnstap code.
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron traffic-sizes and rcode-volume reporting. [RT #41475]
c6741d11357aace4c9ba39535d3cb2d751f46114trawick4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
c6741d11357aace4c9ba39535d3cb2d751f46114trawick4390. [doc] Description of masters with TSIG, allow-query and
7230f1eb017a35b7d20e0e9ec0d234766f2a732dtrawick allow-transfer options in catalog zones. [RT #42692]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick4389. [test] Rewritten test suite for catalog zones. [RT #42676]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick4388. [func] Support for master entries with TSIG keys in catalog
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick zones. [RT #42577]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick4387. [bug] Change 4336 was not complete leading to SERVFAIL
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick being return as NS records expired. [RT #42683]
6b477c0a238733ca8fd156629310513d29dc7e02trawick4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
6b477c0a238733ca8fd156629310513d29dc7e02trawick4385. [func] Add support for allow-query and allow-transfer ACLs
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe to catalog zones. [RT #42578]
557eb8d48357657fa898250560f089c65539c634gregames4384. [bug] Change 4256 accidentally disabled logging of the
557eb8d48357657fa898250560f089c65539c634gregames rndc command. [RT #42654]
adb8c5e5291be5943122bbff404bc1018c79d555ianh4383. [bug] Correct spelling error in stats channel description of
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick "EDNS client subnet option received". [RT #42633]
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick compare the zone name using a canonical format.
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp [RT #42630]
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp4381. [bug] Missing "zone-directory" option in catalog zone
a222035458f89e2db231450ba6d5fae8052da5f5aaron definition caused BIND to crash. [RT #42579]
a222035458f89e2db231450ba6d5fae8052da5f5aaron --- 9.11.0a3 released ---
4a872628ca5bf20847f442a625c255b643120db0wrowe4380. [experimental] Added a "zone-directory" option to "catalog-zones"
4a872628ca5bf20847f442a625c255b643120db0wrowe syntax, allowing local masterfiles for slaves
4a872628ca5bf20847f442a625c255b643120db0wrowe that are provisioned by catalog zones to be stored
74528257888620220641cd28366731539a37e1f3ianh in a directory other than the server's working
74528257888620220641cd28366731539a37e1f3ianh directory. [RT #42527]
0632de713e41fa3aa928a1777677b0d79843ae2bdougm4379. [bug] An INSIST could be triggered if a zone contains
0632de713e41fa3aa928a1777677b0d79843ae2bdougm RRSIG records with expiry fields that loop
0cc82c261350ab8dc8a9992cad7197c4d22d597eianh using serial number arithmetic. [RT #40571]
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp [RT #42525]
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp4377. [bug] Don't reuse zero TTL responses beyond the current
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb client set (excludes ANY/SIG/RRSIG queries).
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb [RT #42142]
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb4376. [experimental] Added support for Catalog Zones, a new method for
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb provisioning secondary servers in which a list of
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb zones to be served is stored in a DNS zone and can
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb be propagated to slaves via AXFR/IXFR. [RT #41581]
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb4375. [func] Add support for automatic reallocation of isc_buffer
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb to isc_buffer_put* functions. [RT #42394]
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh probability of reference counting errors as seen
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh in 4365. [RT #42405]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh4372. [bug] Address undefined behavior in libt_api. [RT #42480]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh4371. [func] New "minimal-any" option reduces the size of UDP
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron responses for qtype ANY by returning a single
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron arbitrarily selected RRset instead of all RRsets.
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron Thanks to Tony Finch. [RT #41615]
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp4370. [bug] Address python3 compatibility issues with RNDC module.
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp [RT #42499] [RT #42506]
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz --- 9.11.0a2 released ---
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz4369. [bug] Fix 'make' and 'make install' out-of-tree python
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick support. [RT #42484]
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick4368. [bug] Fix a crash when calling "rndc stats" on some
0a2d57d962bef3a8898723925b3fb02d2e836994dougm Windows builds because some Visual Studio compilers
0a2d57d962bef3a8898723925b3fb02d2e836994dougm generated crashing code for the "%z" printf()
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames format specifier. [RT #42380]
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz4367. [bug] Remove unnecessary assignment of loadtime in
900127764fb985c340ee4979cac97146a330c694trawick zone_touched. [RT #42440]
1a6a0072a95887164091e366ba0e89c2b39a954abrianp4366. [bug] Address race condition when updating rbtnode bit
1a6a0072a95887164091e366ba0e89c2b39a954abrianp fields. [RT #42379]
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley4365. [bug] Address zone reference counting errors involving
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley nxdomain-redirect. [RT #42258]
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick4363. [port] win32: Disable explicit triggering UAC when running
6865813dee5d3c1ebf12dd810368171792a0190atrawick BINDInstall.
6865813dee5d3c1ebf12dd810368171792a0190atrawick4362. [func] Changed rndc reconfig behavior so that newly added
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley zones are loaded asynchronously and the loading does
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley not block the server. [RT #41934]
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick4361. [cleanup] Where supported, file modification times returned
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick by isc_file_getmodtime() are now accurate to the
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick nanosecond. [RT #41968]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb4360. [bug] Silence spurious 'bad key type' message when there is
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb a existing TSIG key. [RT #42195]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb4359. [bug] Inherited 'also-notify' lists were not being checked
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb by named-checkconf. [RT #42174]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb4358. [test] Added American Fuzzy Lop harness that allows
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb feeding fuzzed packets into BIND.
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb [RT #41723]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb4357. [func] Add the python RNDC module. [RT #42093]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb4356. [func] Add the ability to specify whether to wait for
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley nameserver addresses to be looked up or not to
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley RPZ with a new modifying directive 'nsip-wait-recurse'.
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley [RT #35009]
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley4355. [func] "pkcs11-list" now displays the extractability
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb attribute of private or secret keys stored in
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley an HSM, as either "true", "false", or "never"
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley Thanks to Daniel Stirnimann. [RT #36557]
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley4354. [bug] Check that the received HMAC length matches the
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley expected length prior to check the contents on the
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley control channel. This prevents a OOB read error.
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb This was reported by Lian Yihan, <lianyihan@360.cn>.
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz4353. [cleanup] Update PKCS#11 header files. [RT #42175]
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb is scheduled to be disabled in 2017. A warning is
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb now logged when named is configured to use it,
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb either explicitly or via "dnssec-lookaside auto;"
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb [RT #42207]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb4351. [bug] 'dig +noignore' didn't work. [RT #42273]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick4349. [contrib] kasp2policy: A python script to create a DNSSEC
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick policy file from an OpenDNSSEC KASP XML file.
ae64f3e7385f21ca9d4f30cc7f8702a9ac1034b6trawick4348. [func] dnssec-keymgr: A new python-based DNSSEC key
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames management utility, which reads a policy definition
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames file and can create or update DNSSEC keys as needed
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames to ensure that a zone's keys match policy, roll over
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames correctly on schedule, etc. Thanks to Sebastian
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames Castro for assistance in development. [RT #39211]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames4346. [bug] Fixed a regression introduced in change #4337 which
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames caused signed domains with revoked KSKs to fail
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames validation. [RT #42147]
f99bffd6087564cf9c05cc29d1c6b38d94e0ed30gregames4345. [contrib] perftcpdns mishandled the return values from
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz clock_nanosleep. [RT #42131]
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz4344. [port] Address openssl version differences. [RT #42059]
8458877c9ba0af86acd590eea531476adde3d02dmartin4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
8458877c9ba0af86acd590eea531476adde3d02dmartin [RT #42090]
8458877c9ba0af86acd590eea531476adde3d02dmartin4342. [bug] 'rndc flushtree' could fail to clean the tree if there
644be6f54749d2d9950d2c4d2ac448f7af016d26martin wasn't a node at the specified name. [RT #41846]
644be6f54749d2d9950d2c4d2ac448f7af016d26martin --- 9.11.0a1 released ---
8458877c9ba0af86acd590eea531476adde3d02dmartin4341. [bug] Correct the handling of ECS options with
b30b04f639d479b96cc08c43ffa34c92ba275676ianh address family 0. [RT #41377]
b30b04f639d479b96cc08c43ffa34c92ba275676ianh4340. [performance] Implement adaptive read-write locks, reducing the
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley overhead of locks that are only held briefly.
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley [RT #37329]
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe4338. [bug] Reimplement change 4324 as it wasn't properly doing
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe all the required book keeping. [RT #41941]
2548497d480c4f3e9b3fe14711bd510aa2157434gregames4337. [bug] The previous change exposed a latent flaw in
2548497d480c4f3e9b3fe14711bd510aa2157434gregames key refresh queries for managed-keys when
ccb5c3af2d491a7cd1c246cd23f0fb083da417fagregames a cached DNSKEY had TTL 0. [RT #41986]
da6e93dca0222159650783802e23172e3160605egregames4336. [bug] Don't emit records with zero ttl unless the records
da6e93dca0222159650783802e23172e3160605egregames were learnt with a zero ttl. [RT #41687]
c927e13f298c42251296d33cc1fa3eb8232b843daaron4335. [bug] zone->view could be detached too early. [RT #41942]
c927e13f298c42251296d33cc1fa3eb8232b843daaron4334. [func] 'named -V' now reports zlib version. [RT #41913]
c927e13f298c42251296d33cc1fa3eb8232b843daaron4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron 2001:500:9f::42.
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron4332. [placeholder]
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick4331. [func] When loading managed signed zones detect if the
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick RRSIG's inception time is in the future and regenerate
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick the RRSIG immediately. [RT #41808]
18acb2c0df442ead1d075a1a2207cbb197725b14coar4330. [protocol] Identify the PAD option as "PAD" when printing out
18acb2c0df442ead1d075a1a2207cbb197725b14coar a message.
18acb2c0df442ead1d075a1a2207cbb197725b14coar4329. [func] Warn about a common misconfiguration when forwarding
617f972690d850a52cd4e9ef2f32d356e0fae715aaron RFC 1918 zones. [RT #41441]
617f972690d850a52cd4e9ef2f32d356e0fae715aaron4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
617f972690d850a52cd4e9ef2f32d356e0fae715aaron4327. [func] Log query and depth counters during fetches when
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley querytrace (./configure --enable-querytrace) is
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley enabled (helps in diagnosing). [RT #41787]
022cff78006f698453640e0a0e97cc5f8c9de59drbb4326. [protocol] Add support for AVC. [RT #41819]
022cff78006f698453640e0a0e97cc5f8c9de59drbb4325. [func] Add a line to "rndc status" indicating the
022cff78006f698453640e0a0e97cc5f8c9de59drbb hostname and operating system details. [RT #41610]
526a776292f420ffeea0d081c61971ed381fad20stoddard4324. [bug] When deleting records from a zone database, interior
526a776292f420ffeea0d081c61971ed381fad20stoddard nodes could be left empty but not deleted, damaging
526a776292f420ffeea0d081c61971ed381fad20stoddard search performance afterward. [RT #40997]
526a776292f420ffeea0d081c61971ed381fad20stoddard4323. [bug] Improve HTTP header processing on statschannel.
526a776292f420ffeea0d081c61971ed381fad20stoddard [RT #41674]
526a776292f420ffeea0d081c61971ed381fad20stoddard4322. [security] Duplicate EDNS COOKIE options in a response could
526a776292f420ffeea0d081c61971ed381fad20stoddard trigger an assertion failure. (CVE-2016-2088)
526a776292f420ffeea0d081c61971ed381fad20stoddard [RT #41809]
62ddc9851530478919d169ba9c34b80f60cf7718trawick4321. [bug] Zones using mapped files containing out-of-zone data
62ddc9851530478919d169ba9c34b80f60cf7718trawick could return SERVFAIL instead of the expected NODATA
62ddc9851530478919d169ba9c34b80f60cf7718trawick or NXDOMAIN results. [RT #41596]
62ddc9851530478919d169ba9c34b80f60cf7718trawick4320. [bug] Insufficient memory allocation when handling
904d7bf799c6216beb34519463596b4fce630308wrowe "none" ACL could cause an assertion failure in
904d7bf799c6216beb34519463596b4fce630308wrowe named when parsing ACL configuration. [RT #41745]
904d7bf799c6216beb34519463596b4fce630308wrowe4319. [security] Fix resolver assertion failure due to improper
904d7bf799c6216beb34519463596b4fce630308wrowe DNAME handling when parsing fetch reply messages.
904d7bf799c6216beb34519463596b4fce630308wrowe (CVE-2016-1286) [RT #41753]
904d7bf799c6216beb34519463596b4fce630308wrowe4318. [security] Malformed control messages can trigger assertions
904d7bf799c6216beb34519463596b4fce630308wrowe in named and rndc. (CVE-2016-1285) [RT #41666]
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron4316. [func] Add option to tools to print RRs in unknown
83b031099aa3dc8a5fd2f708e397818cbd16c9aajerenkrantz presentation format [RT #41595].
83b031099aa3dc8a5fd2f708e397818cbd16c9aajerenkrantz4315. [bug] Check that configured view class isn't a meta class.
01e77cadbd9ad4962993380245bcc033dde523e4rbb [RT #41572].
01e77cadbd9ad4962993380245bcc033dde523e4rbb4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
8ea9794272347cfdd92861f46295406649f01afatrawick testing tools provided by Nominum, Inc.
8ea9794272347cfdd92861f46295406649f01afatrawick4313. [bug] Handle ns_client_replace failures in test mode.
8ea9794272347cfdd92861f46295406649f01afatrawick [RT #41190]
b900452c9c36031434d318880f023c0fb9143325rbb4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
b900452c9c36031434d318880f023c0fb9143325rbb was not consistent. [RT #41600]
b900452c9c36031434d318880f023c0fb9143325rbb4311. [bug] Prevent "rndc delzone" from being used on
b900452c9c36031434d318880f023c0fb9143325rbb response-policy zones. [RT #41593]
b900452c9c36031434d318880f023c0fb9143325rbb4310. [performance] Use __builtin_expect() where available to annotate
b900452c9c36031434d318880f023c0fb9143325rbb conditions with known behavior. [RT #41411]
8b666e1fb772b6fe45de3604b224f3e1f2cfd620rbb4309. [cleanup] Remove the spurious "none" filename from log messages
c453a141db60a5b19649eac508f4851a8729c556rbb when processing built-in configuration. [RT #41594]
c453a141db60a5b19649eac508f4851a8729c556rbb4308. [func] Added operating system details to "named -V"
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz output. [RT #41452]
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz4307. [bug] "dig +subnet" and "mdig +subnet" could send
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe incorrectly-formatted Client Subnet options
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe if the prefix length was not divisible by 8.
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe Also fixed a memory leak in "mdig". [RT #45178]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe4306. [maint] Added a PKCS#11 openssl patch supporting
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe version 1.0.2f [RT #38312]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb from the zone's apex. [RT #41483]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe4304. [port] xfer system test failed as 'tail -n +value' is not
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb portable. [RT #41315]
574f6ff9ee80ef4f772649c5c8319b764a8abe42jerenkrantz4303. [bug] "dig +subnet" was unable to send a prefix length of
574f6ff9ee80ef4f772649c5c8319b764a8abe42jerenkrantz zero, as it was incorrectly changed to 32 for v4
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick prefixes or 128 for v6 prefixes. In addition to
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick fixing this, "dig +subnet=0" has been added as a
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick short form for 0.0.0.0/0. The same changes have
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz also been made in "mdig". [RT #41553]
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe4300. [bug] A flag could be set in the wrong field when setting
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe up non-recursive queries; this could cause the
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe SERVFAIL cache to cache responses it shouldn't.
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe New querytrace logging has been added which
8bda0627eb2aca9e678c1303a0423d33069388dfwrowe identified this error. [RT #41155]
f00bc25ff5027f3a40e9cd0ade782641bd0bf1d0wrowe4299. [bug] Check that exactly totallen bytes are read when
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb reading a RRset from raw files in both single read
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb and incremental modes. [RT #41402]
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb4298. [bug] dns_rpz_add errors in loadzone were not being
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb propagated up the call stack. [RT #41425]
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb4297. [test] Ensure delegations in RPZ zones fail robustly.
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb [RT #41518]
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb4296. [bug] TCP packet sizes were calculated incorrectly in the
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb stats channel; they could be counted in the wrong
52df98b165194a0ad68885f49f81fdaf56ece568wrowe histogram bucket. [RT #40587]
52df98b165194a0ad68885f49f81fdaf56ece568wrowe4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb could allow incorrect text formatting of EDNS EXPIRE
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb options. [RT #41437]
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb4294. [bug] Fixed a regression in which "rndc stop -p" failed
7e44dd5082cd865068285e8f915bb5f045e0bb80lars to print the PID. [RT #41513]
7e44dd5082cd865068285e8f915bb5f045e0bb80lars4293. [bug] Address memory leak on priming query creation failure.
7e44dd5082cd865068285e8f915bb5f045e0bb80lars [RT #41512]
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe4292. [placeholder]
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz4290. [func] The timers returned by the statistics channel
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz (indicating current time, server boot time, and
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz most recent reconfiguration time) are now reported
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz with millisecond accuracy. [RT #40082]
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz4289. [bug] The server could crash due to memory being used
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz after it was freed if a zone transfer timed out.
976501adbc040220270f7d1d77c4b8373033be69wrowe [RT #41297]
976501adbc040220270f7d1d77c4b8373033be69wrowe4288. [bug] Fixed a regression in resolver.c:possibly_mark()
976501adbc040220270f7d1d77c4b8373033be69wrowe which caused known-bogus servers to be queried
976501adbc040220270f7d1d77c4b8373033be69wrowe anyway. [RT #41321]
10a00688adcf1df367b1243810beedaabe6b1abeminfrin4287. [bug] Silence an overly noisy log message when message
10a00688adcf1df367b1243810beedaabe6b1abeminfrin parsing fails. [RT #41374]
8a3a703eae0e35f674b189181609545c6fc77a09rbb4286. [security] render_ecs errors were mishandled when printing out
8a3a703eae0e35f674b189181609545c6fc77a09rbb a OPT record resulting in a assertion failure.
8a3a703eae0e35f674b189181609545c6fc77a09rbb (CVE-2015-8705) [RT #41397]
9af1ccb223d0669b3c3a43eed070d815afde9084mjc4285. [security] Specific APL data could trigger a INSIST.
9af1ccb223d0669b3c3a43eed070d815afde9084mjc (CVE-2015-8704) [RT #41396]
9d41fafe32b324c197f25224207fc6ce34f085bfrbb4284. [bug] Some GeoIP options were incorrectly documented
9d41fafe32b324c197f25224207fc6ce34f085bfrbb using abbreviated forms which were not accepted by
9d41fafe32b324c197f25224207fc6ce34f085bfrbb named. The code has been updated to allow both
9d41fafe32b324c197f25224207fc6ce34f085bfrbb long and abbreviated forms. [RT #41381]
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz4282. [func] 'dig +[no]mapped' determine whether the use of mapped
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz IPv4 addresses over IPv6 is permitted or not. The
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz default is +mapped. [RT #41307]
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz4280. [performance] Use optimal message sizes to improve compression
cdb15137887e284797e9510029098dc725b4dacfjerenkrantz in AXFRs. This reduces network traffic. [RT #40996]
798c7c11dc2fe3b08e591e9c76fc1a84857f2cd4jerenkrantz4279. [test] Don't use fixed ports when unit testing. [RT #41194]
798c7c11dc2fe3b08e591e9c76fc1a84857f2cd4jerenkrantz4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
abaaa634d7cee882b7c4bf078ded749ebf11997erbb4277. [performance] Improve performance of the RBT, the central zone
abaaa634d7cee882b7c4bf078ded749ebf11997erbb datastructure: The aux hashtable was improved,
abaaa634d7cee882b7c4bf078ded749ebf11997erbb hash function was updated to perform more
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz uniform mapping, uppernode was added to
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz dns_rbtnode, and other cleanups and performance
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz improvements were made. [RT #41165]
de3abad1fe263e577bb11e99b358836bd901397crbb4276. [protocol] Add support for SMIMEA. [RT #40513]
de3abad1fe263e577bb11e99b358836bd901397crbb4275. [performance] Lazily initialize dns_compress->table only when
de3abad1fe263e577bb11e99b358836bd901397crbb compression is enabled. [RT #41189]
de3abad1fe263e577bb11e99b358836bd901397crbb4274. [performance] Speed up typemap processing from text. [RT #41196]
de3abad1fe263e577bb11e99b358836bd901397crbb4273. [bug] Only call dns_test_begin() and dns_test_end() once each
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein in nsec3_test as it fails with GOST if called multiple
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein4272. [bug] dig: the +norrcomments option didn't work with +multi.
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein [RT #41234]
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe [RT #41235]
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe4270. [security] Update allowed OpenSSL versions as named is
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz potentially vulnerable to CVE-2015-3193.
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz4269. [bug] Zones using "map" format master files currently
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb don't work as policy zones. This limitation has
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb now been documented; attempting to use such zones
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb in "response-policy" statements is now a
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb configuration error. [RT #38321]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe4268. [func] "rndc status" now reports the path to the
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe configuration file. [RT #36470]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe4267. [test] Check sdlz error handling. [RT #41142]
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb4266. [placeholder]
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz4264. [bug] Check const of strchr/strrchr assignments match
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz argument's const status. [RT #41150]
2264fbcbab4c796c4222c30393c0b218c98b6befrbb4263. [contrib] Address compiler warnings in mysqldyn module.
2264fbcbab4c796c4222c30393c0b218c98b6befrbb [RT #41130]
2264fbcbab4c796c4222c30393c0b218c98b6befrbb4262. [bug] Fixed a bug in epoll socket code that caused
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz sockets to not be registered for ready
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz notification in some cases, causing named to not
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz read from or write to them, resulting in what
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe appear to the user as blocked connections.
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe [RT #41067]
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
441bd066858500e75e4f63ef149120bcf523de58jerenkrantz4260. [security] Insufficient testing when parsing a message allowed
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz records with an incorrect class to be be accepted,
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz triggering a REQUIRE failure when those records
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz were subsequently cached. (CVE-2015-8000) [RT #40987]
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe4259. [func] Add an option for non-destructive control channel
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe access using a "read-only" clause. In such
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe cases, a restricted set of rndc commands are
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe allowed for querying information from named.
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe [RT #40498]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe4258. [bug] Limit rndc query message sizes to 32 KiB. This should
117e2968318323d2ad2187fcd4de379d2eca245cwrowe not break any legitimate rndc commands, but will
117e2968318323d2ad2187fcd4de379d2eca245cwrowe prevent a rogue rndc query from allocating too
117e2968318323d2ad2187fcd4de379d2eca245cwrowe much memory. [RT #41073]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe4256. [bug] Allow rndc command arguments to be quoted so as
117e2968318323d2ad2187fcd4de379d2eca245cwrowe to allow spaces. [RT #36665]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe4255. [performance] Add 'message-compression' option to disable DNS
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe compression in responses. [RT #40726]
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe4254. [bug] Address missing lock when getting zone's serial.
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe [RT #41072]
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe4253. [security] Address fetch context reference count handling error
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe on socket error. (CVE-2015-8461) [RT#40945]
de419544885a5c64589dddf1b8517672ee17c1feminfrin4252. [func] Add support for automating the generation CDS and
de419544885a5c64589dddf1b8517672ee17c1feminfrin CDNSKEY rrsets to named and dnssec-signzone.
df14f0d3a5191cdd7c4bb5b03acd135d43a6f51brbb [RT #40424]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin4251. [bug] NTAs were deleted when the server was reconfigured
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin or reloaded. [RT #41058]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin4250. [func] Log the TSIG key in use during inbound zone
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin transfers. [RT #41075]
956c6100798467199833e7159a00506ee879d772minfrin4249. [func] Improve error reporting of TSIG / SIG(0) records in
956c6100798467199833e7159a00506ee879d772minfrin the wrong location. [RT #41030]
956c6100798467199833e7159a00506ee879d772minfrin4248. [performance] Add an isc_atomic_storeq() function, use it in
956c6100798467199833e7159a00506ee879d772minfrin stats counters to improve performance.
47697533fd7ced2259f9150677ea5efa583b6c13rbb [RT #39972] [RT #39979]
47697533fd7ced2259f9150677ea5efa583b6c13rbb4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
47697533fd7ced2259f9150677ea5efa583b6c13rbb defined to report json library version. [RT #41045]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe4246. [test] Ensure the statschannel system test runs when BIND
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe is not built with libjson. [RT #40944]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe4245. [placeholder]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe4244. [bug] The parser was not reporting that use-ixfr is obsolete.
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe [RT #41010]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe4242. [bug] Replace the client if not already replaced when
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe prefetching. [RT #41001]
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick the ARM. [RT #40955]
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick4240. [port] Fix LibreSSL compatibility. [RT #40977]
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj4239. [func] Changed default servfail-ttl value to 1 second from 10.
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj Also, the maximum value is now 30 instead of 300.
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick [RT #37556]
e00ae6859667e293a4c40108f524408ae1289f2frbb4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick [RT #40947]
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick4237. [doc] Upgraded documentation toolchain to use DocBook 5
13bac43a0f21d8c6401debc1baa76be984474074rbb and dblatex. [RT #40766]
13bac43a0f21d8c6401debc1baa76be984474074rbb4236. [performance] On machines with 2 or more processors (CPU), the
053497224246c4dbef9af594cacf5c00ed271e6cwrowe default value for the number of UDP listeners
053497224246c4dbef9af594cacf5c00ed271e6cwrowe has been changed to the number of detected
053497224246c4dbef9af594cacf5c00ed271e6cwrowe processors minus one. [RT #40761]
053497224246c4dbef9af594cacf5c00ed271e6cwrowe4235. [func] Added support in named for "dnstap", a fast method of
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe capturing and logging DNS traffic, and a new command
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe "dnstap-read" to read a dnstap log file. Use
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe "configure --enable-dnstap" to enable this
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe feature (note that this requires libprotobuf-c
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe and libfstrm). See the ARM for configuration details.
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe Thanks to Robert Edmonds of Farsight Security.
314b1f3fac7a0b556146ef055f37df00020604d0jwoolley [RT #40211]
78e8198247420a3efeb21e38b42c423e5863cbb0jwoolley4234. [func] Add deflate compression in statistics channel HTTP
78e8198247420a3efeb21e38b42c423e5863cbb0jwoolley server. [RT #40861]
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe [RT #40597]
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe4232. [contrib] Address unchecked memory allocation calls in
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe query-loc and zone2ldap. [RT #40789]
a906160166014e14adc01c87a956d89de0d79918rbb4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
a906160166014e14adc01c87a956d89de0d79918rbb [RT #40840]
a906160166014e14adc01c87a956d89de0d79918rbb4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
a906160166014e14adc01c87a956d89de0d79918rbb uninitialized result. [RT #40839]
a906160166014e14adc01c87a956d89de0d79918rbb4229. [bug] A variable could be used uninitialized in
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm dns_update_signaturesinc. [RT #40784]
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm4228. [bug] Address race condition in dns_client_destroyrestrans.
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm [RT #40605]
e00ae6859667e293a4c40108f524408ae1289f2frbb4227. [bug] Silence static analysis warnings. [RT #40828]
e00ae6859667e293a4c40108f524408ae1289f2frbb4226. [bug] Address a theoretical shutdown race in
e00ae6859667e293a4c40108f524408ae1289f2frbb zone.c:notify_send_queue(). [RT #38958]
e00ae6859667e293a4c40108f524408ae1289f2frbb4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
d94fd18ee21dc9b8c1f422144a881e941687d41fdougm shared libraries. [RT #39557]
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj4224. [func] Added support for "dyndb", a new interface for loading
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj zone data from an external database, developed by
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj Red Hat for the FreeIPA project.
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj DynDB drivers fully implement the BIND database
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj API, and are capable of significantly better
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj performance and functionality than DLZ drivers,
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm while taking advantage of advanced database
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm features not available in BIND such as multi-master
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm replication.
6b025bd5a034790b2bb31236092265e154d6a565dougm Thanks to Adam Tkac and Petr Spacek of Red Hat.
330e5149d05dc4f5121b30964753167e43690afdrbb [RT #35271]
d0af34e0d69afb8195eee403c60357d59ac046e1trawick4223. [func] Add support for setting max-cache-size to percentage
d0af34e0d69afb8195eee403c60357d59ac046e1trawick of available physical memory, set default to 90%.
d0af34e0d69afb8195eee403c60357d59ac046e1trawick [RT #38442]
91cbefdfe308c93892b52045a5f0253506432cd0trawick4222. [func] Bias IPv6 servers when selecting the next server to
598ce99543701a45a31bb01bf73c83d894592491rederpj query. [RT #40836]
598ce99543701a45a31bb01bf73c83d894592491rederpj4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
598ce99543701a45a31bb01bf73c83d894592491rederpj [RT #40583]
fa687651463b68c7cc0dda80341712d1ef9543efwrowe4220. [doc] Improve documentation for zone-statistics.
fa687651463b68c7cc0dda80341712d1ef9543efwrowe [RT #36955]
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe EGAIN when these soft error are not retried for
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe isc_socket_send*().
c760d13cffeef40df3f8c5a798e40a064dc80067bjh4218. [bug] Potential null pointer dereference on out of memory
c760d13cffeef40df3f8c5a798e40a064dc80067bjh if mmap is not supported. [RT #40777]
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin4217. [protocol] Add support for CSYNC. [RT #40532]
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin4216. [cleanup] Silence static analysis warnings. [RT #40649]
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin4215. [bug] nsupdate: skip to next request on GSSTKEY create
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin failure. [RT #40685]
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin4214. [protocol] Add support for TALINK. [RT #40544]
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin4213. [bug] Don't reuse a cache across multiple classes.
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin [RT #40205]
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin4212. [func] Re-query if we get a bad client cookie returned over
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin UDP. [RT #40748]
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin4211. [bug] Ensure that lwresd gets at least one task to work
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin with if enabled. [RT #40652]
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj4210. [cleanup] Silence use after free false positive. [RT #40743]
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj4209. [bug] Address resource leaks in dlz modules. [RT #40654]
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj4208. [bug] Address null pointer dereferences on out of memory.
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin [RT #40764]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin4207. [bug] Handle class mismatches with raw zone files.
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin [RT #40746]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin4206. [bug] contrib: fixed a possible NULL dereference in
330e5149d05dc4f5121b30964753167e43690afdrbb DLZ wildcard module. [RT #40745]
330e5149d05dc4f5121b30964753167e43690afdrbb4205. [bug] 'named-checkconf -p' could include unwanted spaces
330e5149d05dc4f5121b30964753167e43690afdrbb when printing tuples with unset optional fields.
9222dcffcfe8d92f94c85d4e857af7b63264c9dcrbb [RT #40731]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick4204. [bug] 'dig +trace' failed to lookup the correct type if
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick the initial root NS query was retried. [RT #40296]
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick4203. [test] The rrchecker system test now tests conversion
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick to and from unknown-type format. [RT #40584]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick4202. [bug] isccc_cc_fromwire() could return an incorrect
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick result. [RT #40614]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick4201. [func] The default preferred-glue is now the address record
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick type of the transport the query was received
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick over. [RT #40468]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick4200. [cleanup] win32: update BINDinstall to be BIND release
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick independent. [RT #38915]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #40545] [RT #40547] [RT #40561] [RT #40563]
50e228f0b8429c27e411611f4863fafaba403b47wrowe4198. [placeholder]
50e228f0b8429c27e411611f4863fafaba403b47wrowe4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
50e228f0b8429c27e411611f4863fafaba403b47wrowe [RT #40603]
50e228f0b8429c27e411611f4863fafaba403b47wrowe4196. [doc] Improve how "enum + other" types are documented.
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick [RT #40608]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick4194. [bug] named-checkconf -p failed to properly print a port
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick range. [RT #40634]
0315d8e436a65aa1fd145ce0a84f6c0f21e304c0wrowe4193. [bug] Handle broken servers that return BADVERS incorrectly.
0315d8e436a65aa1fd145ce0a84f6c0f21e304c0wrowe [RT #40427]
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb4192. [bug] The default rrset-order of random was not always being
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb applied. [RT #40456]
496dc24432cc5c9f95a627865879d4b83dca1055coar4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
496dc24432cc5c9f95a627865879d4b83dca1055coar as per RFC 6763. [RT #37889]
496dc24432cc5c9f95a627865879d4b83dca1055coar4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
5b5d90c6d3ffb9e28a62c6bc8e2cb60e4740f7f7coar valid with check-names. <forest> still needs to be
5b5d90c6d3ffb9e28a62c6bc8e2cb60e4740f7f7coar LDH. [RT #40399]
622f0f22cd52de0e9904b218defdeb3181e113f3trawick4189. [cleanup] Don't exit on overly long tokens in named.conf.
622f0f22cd52de0e9904b218defdeb3181e113f3trawick [RT #40418]
622f0f22cd52de0e9904b218defdeb3181e113f3trawick4188. [bug] Support HTTP/1.0 client properly on the statistics
622f0f22cd52de0e9904b218defdeb3181e113f3trawick channel. [RT #40261]
e83476358ef015a1959284421fdc25ab18a7aa02rbb4187. [func] When any RR type implementation doesn't
7b4c4bb891261e613de39a021d7554fd08132fc5rbb implement totext() for the RDATA's wire
7b4c4bb891261e613de39a021d7554fd08132fc5rbb representation and returns ISC_R_NOTIMPLEMENTED,
7b4c4bb891261e613de39a021d7554fd08132fc5rbb such RDATA is now printed in unknown
7b4c4bb891261e613de39a021d7554fd08132fc5rbb presentation format (RFC 3597). RR types affected
7b4c4bb891261e613de39a021d7554fd08132fc5rbb include LOC(29) and APL(42). [RT #40317].
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb4186. [bug] Fixed an RPZ bug where a QNAME would be matched
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb against a policy RR with wildcard owner name
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb (trigger) where the QNAME was the wildcard owner
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb name's parent. For example, the bug caused a query
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb with QNAME "example.com" to match a policy RR with
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb "*.example.com" as trigger. [RT #40357]
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
251b60354534e12b004603ecf2a83f32756dc885rbb owner name (trigger) would prevent another policy RR
251b60354534e12b004603ecf2a83f32756dc885rbb with its parent owner name from being
251b60354534e12b004603ecf2a83f32756dc885rbb loaded. For example, the bug caused a policy RR
251b60354534e12b004603ecf2a83f32756dc885rbb with trigger "example.com" to not have any
251b60354534e12b004603ecf2a83f32756dc885rbb effect when a previous policy RR with trigger
251b60354534e12b004603ecf2a83f32756dc885rbb "*.example.com" existed in that RPZ zone.
251b60354534e12b004603ecf2a83f32756dc885rbb [RT #40357]
251b60354534e12b004603ecf2a83f32756dc885rbb4184. [bug] Fixed a possible memory leak in name compression
12348d5b520522b6581d907ef9c1ceda029fbc05rbb when rendering long messages. (Also, improved
22d41dd622ae45958da09d4afd1163fd1923f7ddjwoolley wire_test for testing such messages.) [RT #40375]
12348d5b520522b6581d907ef9c1ceda029fbc05rbb4183. [cleanup] Use timing-safe memory comparisons in cryptographic
12348d5b520522b6581d907ef9c1ceda029fbc05rbb code. Also, the timing-safe comparison functions have
a3b2a05c4c0f6a29e75c9349b85640192f6a8bfejwoolley been renamed to avoid possible confusion with
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames memcmp(). Thanks to Loganaden Velvindron of
d65b067e7797b56d6678b0ddcd0aa9258cd55e64trawick AFRINIC. [RT #40148]
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley4182. [cleanup] Use mnemonics for RR class and type comparisons.
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley [RT #40297]
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick4181. [bug] Queued notify messages could be dequeued from the
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick wrong rate limiter queue. [RT #40350]
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick4180. [bug] Error responses in pipelined queries could
82efd02118af953c3840478fa5e979a4194a579fwrowe cause a crash in client.c. [RT #40289]
82efd02118af953c3840478fa5e979a4194a579fwrowe4179. [bug] Fix double frees in getaddrinfo() in libirs.
82efd02118af953c3840478fa5e979a4194a579fwrowe [RT #40209]
82efd02118af953c3840478fa5e979a4194a579fwrowe4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
82efd02118af953c3840478fa5e979a4194a579fwrowe text. [RT #40274]
82efd02118af953c3840478fa5e979a4194a579fwrowe4177. [bug] Fix assertion failure in parsing NSAP records from
82efd02118af953c3840478fa5e979a4194a579fwrowe text. [RT #40285]
82efd02118af953c3840478fa5e979a4194a579fwrowe4176. [bug] Address race issues with lwresd. [RT #40284]
82efd02118af953c3840478fa5e979a4194a579fwrowe4175. [bug] TKEY with GSS-API keys needed bigger buffers.
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley [RT #40333]
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley4174. [bug] "dnssec-coverage -r" didn't handle time unit
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley suffixes correctly. [RT #38444]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4173. [bug] dig +sigchase was not properly matching the trusted
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe key. [RT #40188]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley [RT #40265]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4171. [bug] Fixed incorrect class checks in TSIG RR
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe implementation. [RT #40287]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4170. [security] An incorrect boundary check in the OPENPGPKEY
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe rdatatype could trigger an assertion failure.
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley (CVE-2015-5986) [RT #40286]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4169. [test] Added a 'wire_test -d' option to read input as
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe raw binary data, for use as a fuzzing harness.
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley [RT #40312]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4168. [security] A buffer accounting error could trigger an
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe assertion failure when parsing certain malformed
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe DNSSEC keys. (CVE-2015-5722) [RT #40212]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe4167. [func] Update rndc's usage output to include recently added
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe commands. Thanks to Tony Finch for submitting a
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe patch. [RT #40010]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe4166. [func] Print informative output from rndc showzone when
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe allow-new-zones is not enabled for a view. Thanks to
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe Tony Finch for submitting a patch. [RT #40009]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe4165. [security] A failure to reset a value to NULL in tkey.c could
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe result in an assertion failure. (CVE-2015-5477)
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe [RT #40046]
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe4164. [bug] Don't rename slave files and journals on out of memory.
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe [RT #40033]
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe4163. [bug] Address compiler warnings. [RT #40024]
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames4161. [test] Add JSON test for traffic size stats; also test
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb for consistency between "rndc stats" and the XML
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb and JSON statistics channel contents. [RT #38700]
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb4160. [placeholder]
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb4159. [cleanup] Alphabetize dig's help output. [RT #39966]
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb4158. [placeholder]
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb4157. [placeholder]
62db15de4c1f335a64d45821796ae197cff94ef8rbb4156. [func] Added statistics counters to track the sizes
62db15de4c1f335a64d45821796ae197cff94ef8rbb of incoming queries and outgoing responses in
62db15de4c1f335a64d45821796ae197cff94ef8rbb histogram buckets, as specified in RSSAC002.
62db15de4c1f335a64d45821796ae197cff94ef8rbb [RT #39049]
62db15de4c1f335a64d45821796ae197cff94ef8rbb4155. [func] Allow RPZ rewrite logging to be configured on a
62db15de4c1f335a64d45821796ae197cff94ef8rbb per-zone basis using a newly introduced log clause in
f2e16ea0697f128c32da623a0b2b9d0f81c5ebcawrowe the response-policy option. [RT #39754]
f2e16ea0697f128c32da623a0b2b9d0f81c5ebcawrowe4154. [bug] A OPT record should be included with the FORMERR
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe response when there is a malformed EDNS option.
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe [RT #39647]
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe4153. [bug] Dig should zero non significant +subnet bits. Check
7ff254655b6cb0516fa27409470a98554bbec706wrowe that non significant ECS bits are zero on receipt.
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames [RT #39647]
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames4152. [func] Implement DNS COOKIE option. This replaces the
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames experimental SIT option of BIND 9.10. The following
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames named.conf directives are available: send-cookie,
286129112dc6bfee53f0db4f945d3352d4d5bed7stoddard cookie-secret, cookie-algorithm, nocookie-udp-size
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe and require-server-cookie. The following dig options
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb are available: +[no]cookie[=value] and +[no]badcookie.
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb [RT #39928]
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe minimal fix. [RT #39667]
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe4149. [bug] Fixed a race condition in the getaddrinfo()
4e136881902ae5dfba3c59a23db7aa09345cea3awrowe implementation in libirs, which caused the delv
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames utility to crash with an assertion failure when using
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames the '@server' syntax with a hostname argument.
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames [RT #39899]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames4148. [bug] Fix a bug when printing zone names with '/' character
6529086e53a38486d6cf0eac256b96548b6ef299wrowe in XML and JSON statistics output. [RT #39873]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
6529086e53a38486d6cf0eac256b96548b6ef299wrowe was returning referrals rather than nodata responses
6529086e53a38486d6cf0eac256b96548b6ef299wrowe when the AAAA records were filtered. [RT #39843]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe4146. [bug] Address reference leak that could prevent a clean
6529086e53a38486d6cf0eac256b96548b6ef299wrowe shutdown. [RT #37125]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe4145. [bug] Not all unassociated adb entries where being printed.
9876642ec8126175f143702d7b949643f8128fdftrawick [RT #37125]
9876642ec8126175f143702d7b949643f8128fdftrawick4144. [func] Add statistics counters for nxdomain redirections.
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames [RT #39790]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames4143. [placeholder]
0f2ac39337f7543f197db8b040f596123167eb2dstoddard4142. [bug] rndc addzone with view specified saved NZF config
0f2ac39337f7543f197db8b040f596123167eb2dstoddard that could not be read back by named. This has now
0f2ac39337f7543f197db8b040f596123167eb2dstoddard been fixed. [RT #39845]
0f2ac39337f7543f197db8b040f596123167eb2dstoddard4141. [bug] A formatting bug caused rndc zonestatus to print
0f2ac39337f7543f197db8b040f596123167eb2dstoddard negative numbers for large serial values. This has
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames now been fixed. [RT #39854]
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames4140. [cleanup] Remove redundant nzf_remove() call during delzone.
0f2ac39337f7543f197db8b040f596123167eb2dstoddard [RT #39844]
afab3e893c3fecabf2e3cac4e37ada58db984cearbb4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
afab3e893c3fecabf2e3cac4e37ada58db984cearbb4138. [security] An uninitialized value in validator.c could result
afab3e893c3fecabf2e3cac4e37ada58db984cearbb in an assertion failure. (CVE-2015-4620) [RT #39795]
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb4137. [bug] Make rndc reconfig report configuration errors the
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb same way rndc reload does. [RT #39635]
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb4136. [bug] Stale statistics counters with the leading
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb '#' prefix (such as #NXDOMAIN) were not being
67e81f5f6ddfe2e3d1f1208a04b8ccd368c658farbb updated correctly. This has been fixed. [RT #39141]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe4135. [cleanup] Log expired NTA at startup. [RT #39680]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe4134. [cleanup] Include client-ip rules when logging the number
6529086e53a38486d6cf0eac256b96548b6ef299wrowe of RPZ rules of each type. [RT #39670]
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe4133. [port] Update how various json libraries are handled.
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe [RT #39646]
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe4132. [cleanup] dig: added +rd as a synonym for +recurse,
65db4f712167a3498de73cee5c08032a8aa6a010rbb added +class as an unabbreviated alternative
65db4f712167a3498de73cee5c08032a8aa6a010rbb to +cl. [RT #39686]
65db4f712167a3498de73cee5c08032a8aa6a010rbb4131. [bug] Addressed further problems with reloading RPZ
65db4f712167a3498de73cee5c08032a8aa6a010rbb zones. [RT #39649]
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj4130. [bug] The compatibility shim for *printf() misprinted some
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj large numbers. [RT #39586]
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard key as per RFC 7344, Section 4.1. [RT #37215]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard4126. [bug] Addressed a regression introduced in change #4121.
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard [RT #39611]
c981632de03d61667b7a6dda3e1f0a80fd5973b1gregames4125. [test] Added tests for dig, renamed delv test to digdelv.
c981632de03d61667b7a6dda3e1f0a80fd5973b1gregames [RT #39490]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick4124. [func] Log errors or warnings encountered when parsing the
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick internal default configuration. Clarify the logging
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick of errors and warnings encountered in rndc
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick addzone or modzone parameters. [RT #39440]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick4123. [port] Added %z (size_t) format options to the portable
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick internal printf/sprintf implementation. [RT #39586]
688f7d0bc138bb02f92288017920468e7e314f23stoddard4122. [bug] The server could match a shorter prefix than what was
688f7d0bc138bb02f92288017920468e7e314f23stoddard available in CLIENT-IP policy triggers, and so, an
688f7d0bc138bb02f92288017920468e7e314f23stoddard unexpected action could be taken. This has been
688f7d0bc138bb02f92288017920468e7e314f23stoddard corrected. [RT #39481]
688f7d0bc138bb02f92288017920468e7e314f23stoddard4121. [bug] On servers with one or more policy zones
448a83963e3ec557bc9f9020ab44f9681595d1eerbb configured as slaves, if a policy zone updated
3b8937baf1826c625c1ca90d220453a5e4b499edrbb during regular operation (rather than at
3b8937baf1826c625c1ca90d220453a5e4b499edrbb startup) using a full zone reload, such as via
3b8937baf1826c625c1ca90d220453a5e4b499edrbb AXFR, a bug could allow the RPZ summary data to
3b8937baf1826c625c1ca90d220453a5e4b499edrbb fall out of sync, potentially leading to an
3b8937baf1826c625c1ca90d220453a5e4b499edrbb assertion failure in rpz.c when further
9180a5933673ffb1af633c255ceee029340f3b1erbb incremental updates were made to the zone, such
448a83963e3ec557bc9f9020ab44f9681595d1eerbb as via IXFR. [RT #39567]
e654452796751e21828a4078767e075eccf3b232stoddard4120. [bug] A bug in RPZ could cause the server to crash if
e654452796751e21828a4078767e075eccf3b232stoddard policy zones were updated while recursion was
e654452796751e21828a4078767e075eccf3b232stoddard pending for RPZ processing of an active query.
e654452796751e21828a4078767e075eccf3b232stoddard [RT #39415]
4670899d8a45ac6add3105181adf1976a1fae109stoddard4119. [test] Allow dig to set the message opcode. [RT #39550]
85986096003221e8eb135ad1fda59a57c3d0528brbb4118. [bug] Teach isc-config.sh about irs. [RT #39213]
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley4116. [bug] Fix a bug in RPZ that could cause some policy
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley zones that did not specifically require
cbed27f4c149736a6319a790c81aa8acc491fa18jwoolley recursion to be treated as if they did;
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley consequently, setting qname-wait-recurse no; was
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley sometimes ineffective. [RT #39229]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb4115. [func] "rndc -r" now prints the result code (e.g.,
7537a55be7520037878a521d4ec8c8eb2d44a288rbb ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
7537a55be7520037878a521d4ec8c8eb2d44a288rbb running the requested command. [RT #38913]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb4114. [bug] Fix a regression in radix tree implementation
7537a55be7520037878a521d4ec8c8eb2d44a288rbb introduced by ECS code. This bug was never
7537a55be7520037878a521d4ec8c8eb2d44a288rbb released, but it was reported by a user testing
7537a55be7520037878a521d4ec8c8eb2d44a288rbb master. [RT #38983]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb4113. [test] Check for Net::DNS is some system test
7537a55be7520037878a521d4ec8c8eb2d44a288rbb prerequisites. [RT #39369]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe4112. [bug] Named failed to load when "root-delegation-only"
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe was used without a list of domains to exclude.
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe [RT #39380]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe4111. [doc] Alphabetize rndc man page. [RT #39360]
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley4110. [bug] Address memory leaks / null pointer dereferences
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley on out of memory. [RT #39310]
54f7f1c85247dad29d8fa275866cea31d465b392stoddard4109. [port] linux: support reading the local port range from
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley4108. [func] An additional NXDOMAIN redirect method (option
54f7f1c85247dad29d8fa275866cea31d465b392stoddard "nxdomain-redirect") has been added, allowing
3af8fbdd62c9495c8f879eef1eb952a638a18a7adougm redirection to a specified DNS namespace instead
3af8fbdd62c9495c8f879eef1eb952a638a18a7adougm of a single redirect zone. [RT #37989]
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick4107. [bug] Address potential deadlock when updating zone content.
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick [RT #39269]
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe4106. [port] Improve readline support. [RT #38938]
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe4105. [port] Misc fixes for Microsoft Visual Studio
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe 2015 CTP6 in 64 bit mode. [RT #39308]
8ff9257331986cb3646442ab61703fcc02158046trawick4104. [bug] Address uninitialized elements. [RT #39252]
8ff9257331986cb3646442ab61703fcc02158046trawick4103. [port] Misc fixes for Microsoft Visual Studio
8ff9257331986cb3646442ab61703fcc02158046trawick 2015 CTP6. [RT #39267]
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames4102. [bug] Fix a use after free bug introduced in change
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames #4094. [RT #39281]
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames4101. [bug] dig: the +split and +rrcomments options didn't
4192c91889a84b18aec0b046a94a2b2863be204cstoddard work with +short. [RT #39291]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard4100. [bug] Inherited owernames on the line immediately following
4192c91889a84b18aec0b046a94a2b2863be204cstoddard a $INCLUDE were not working. [RT #39268]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard4099. [port] clang: make unknown commandline options hard errors
4192c91889a84b18aec0b046a94a2b2863be204cstoddard when determining what options are supported.
7af2fcad9e14a79d7020a33766fbd3a4dfd088dcorlikowski4098. [bug] Address use-after-free issue when using a
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe predecessor key with dnssec-settime. [RT #39272]
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard4097. [func] Add additional logging about xfrin transfer status.
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard [RT #39170]
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe4096. [bug] Fix a use after free of query->sendevent.
1ccb67ea7d1f2a3747d285835fd0ce0d123b66b2orlikowski4095. [bug] zone->options2 was not being properly initialized.
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb [RT #39228]
a7318397b355119d990d1f311b951dea2aafc53arbb4094. [bug] A race during shutdown or reconfiguration could
a7318397b355119d990d1f311b951dea2aafc53arbb cause an assertion in mem.c. [RT #38979]
a7318397b355119d990d1f311b951dea2aafc53arbb4093. [func] Dig now learns the SIT value from truncated
a7318397b355119d990d1f311b951dea2aafc53arbb responses when it retries over TCP. [RT #39047]
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb [RT #39173]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4090. [bug] Fix a crash while parsing malformed CAA RRs in
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard presentation format, i.e., from text such as
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard from master files. Thanks to John Van de
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard Meulebrouck Brendgard for discovering and
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard reporting this problem. [RT #39003]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4089. [bug] Send notifies immediately for slave zones during
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard startup. [RT #38843]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4088. [port] Fixed errors when building with libressl. [RT #38899]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4087. [bug] Fix a crash due to use-after-free due to sequencing
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard of tasks actions. [RT #38495]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard [RT #38828]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4084. [bug] Fix a possible race in updating stats counters.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard [RT #38826]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard4083. [cleanup] Print the number of CPUs and UDP listeners
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard consistently in the log and in "rndc status"
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard output; indicate whether threads are supported
0530cd68803616cfba0456038f2e679d41ebecb1minfrin in "named -V" output. [RT #38811]
55069cedbbaf2768c1f317c80129c6f869890fb9rbb4082. [bug] Incrementally sign large inline zone deltas.
55069cedbbaf2768c1f317c80129c6f869890fb9rbb [RT #37927]
6206099ac06c8fcc8c342e993e5d47d3dfb95d8dminfrin4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
0530cd68803616cfba0456038f2e679d41ebecb1minfrin4080. [func] Completed change #4022, adding a "lock-file" option
0530cd68803616cfba0456038f2e679d41ebecb1minfrin to named.conf to override the default lock file,
0530cd68803616cfba0456038f2e679d41ebecb1minfrin in addition to the "named -X <filename>" command
0530cd68803616cfba0456038f2e679d41ebecb1minfrin line option. Setting the lock file to "none"
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard using either method disables the check completely.
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard [RT #37908]
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard4079. [func] Preserve the case of the owner name of records to
ba4c566c200c2436dae841b7c811807c80cd712afielding the RRset level. [RT #37442]
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick CMSG_SPACE(sizeof(char)). [RT #38621]
864c5615d55b8ebbde24e72043f6325741335a74fielding4077. [test] Add static-stub regression test for DS NXDOMAIN
864c5615d55b8ebbde24e72043f6325741335a74fielding return making the static stub disappear. [RT #38564]
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin4076. [bug] Named could crash on shutdown with outstanding
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin reload / reconfig events. [RT #38622]
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin4075. [placeholder]
ba4c566c200c2436dae841b7c811807c80cd712afielding4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
ba4c566c200c2436dae841b7c811807c80cd712afielding4073. [cleanup] Add libjson-c version number reporting to
ba4c566c200c2436dae841b7c811807c80cd712afielding "named -V"; normalize version number formatting.
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick [RT #38056]
342e2ae0f9ab3e3a56c2f37be6ec6c9c44f9ef48trawick4072. [func] Add a --enable-querytrace configure switch for
342e2ae0f9ab3e3a56c2f37be6ec6c9c44f9ef48trawick very verbose query trace logging. (This option
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding has a negative performance impact and should be
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding used only for debugging.) [RT #37520]
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick4071. [cleanup] Initialize pthread mutex attrs just once, instead of
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick doing it per mutex creation. [RT #38547]
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick4070. [bug] Fix a segfault in nslookup in a query such as
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard [RT #38548]
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard4069. [doc] Reorganize options in the nsupdate man page.
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard [RT #38515]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard4068. [bug] Omit unknown serial number from JSON zone statistics.
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard [RT #38604]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard4067. [cleanup] Reduce noise from RRL when query logging is
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard disabled. [RT #38648]
0e161c3b556697af1dd88b719c05d3af239682d5dougm4066. [doc] Reorganize options in the dig man page. [RT #38516]
01f61931c658183042469eb02fd3f61e4e643a6atrawick4065. [test] Additional RFC 5011 tests. [RT #38569]
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj4064. [contrib] dnssec-keyset.sh: Generates a specified number
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj of DNSSEC keys with timing set to implement a
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj pre-publication key rollover strategy. Thanks
80e9324586de2fa55e2da4df409e6a85885ea659fielding to Jeffry A. Spain. [RT #38459]
80e9324586de2fa55e2da4df409e6a85885ea659fielding4063. [bug] Asynchronous zone loads were not handled
bacd210652b4559c2597f62e1d41ccbde92acdfafielding correctly when the zone load was already in
80e9324586de2fa55e2da4df409e6a85885ea659fielding progress; this could trigger a crash in zt.c.
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb [RT #37573]
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb4062. [bug] Fix an out-of-bounds read in RPZ code. If the
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding read succeeded, it doesn't result in a bug
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding during operation. If the read failed, named
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding could segfault. [RT #38559]
1702068419e130e99f021228659597c1ec658edcchuck4061. [bug] Handle timeout in legacy system test. [RT #38573]
1702068419e130e99f021228659597c1ec658edcchuck4060. [bug] dns_rdata_freestruct could be called on a
01f61931c658183042469eb02fd3f61e4e643a6atrawick uninitialized structure when handling a error.
01f61931c658183042469eb02fd3f61e4e643a6atrawick [RT #38568]
01f61931c658183042469eb02fd3f61e4e643a6atrawick4059. [bug] Addressed valgrind warnings. [RT #38549]
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard4058. [bug] UDP dispatches could use the wrong pseudorandom
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard number generator context. [RT #38578]
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard [RT #38565]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb4056. [bug] Expanded automatic testing of trust anchor
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb management and fixed several small bugs including
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb a memory leak and a possible loss of key state
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb information. [RT #38458]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb4055. [func] "rndc managed-keys" can be used to check status
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb of trust anchors or to force keys to be refreshed,
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb Also, the managed keys data file has easier-to-read
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb comments. [RT #38458]
105475009f541187ba7a14a367547d9404c578befielding4054. [func] Added a new tool 'mdig', a lightweight clone of
105475009f541187ba7a14a367547d9404c578befielding dig able to send multiple pipelined queries.
105475009f541187ba7a14a367547d9404c578befielding [RT #38261]
105475009f541187ba7a14a367547d9404c578befielding4053. [security] Revoking a managed trust anchor and supplying
105475009f541187ba7a14a367547d9404c578befielding an untrusted replacement could cause named
b90c64e517df3fe1c97806830f84a30362187f0afielding to crash with an assertion failure.
b90c64e517df3fe1c97806830f84a30362187f0afielding (CVE-2015-1349) [RT #38344]
b90c64e517df3fe1c97806830f84a30362187f0afielding4052. [bug] Fix a leak of query fetchlock. [RT #38454]
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick4050. [bug] RPZ could send spurious SERVFAILs in response
c4be1ca9db22140f3788166f0195304e2fe4743bgregames to duplicate queries. [RT #38510]
c4be1ca9db22140f3788166f0195304e2fe4743bgregames4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding4048. [bug] adb hash table was not being grown. [RT #38470]
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding4047. [cleanup] "named -V" now reports the current running versions
a70c3ad07126101795f5a988e86c88a699b297cerederpj of OpenSSL and the libxml2 libraries, in addition to
a70c3ad07126101795f5a988e86c88a699b297cerederpj the versions that were in use at build time.
a70c3ad07126101795f5a988e86c88a699b297cerederpj4046. [bug] Accounting of "total use" in memory context
a70c3ad07126101795f5a988e86c88a699b297cerederpj statistics was not correct. [RT #38370]
a3a9ceac1bc30598c594c89e1382609496b7752brbb4045. [bug] Skip to next master on dns_request_createvia4 failure.
a3a9ceac1bc30598c594c89e1382609496b7752brbb [RT #25185]
a3a9ceac1bc30598c594c89e1382609496b7752brbb4044. [bug] Change 3955 was not complete, resulting in an assertion
a3a9ceac1bc30598c594c89e1382609496b7752brbb failure if the timing was just right. [RT #38352]
25e17566bc9005778707317c8919c610513a4418stoddard4043. [func] "rndc modzone" can be used to modify the
25e17566bc9005778707317c8919c610513a4418stoddard configuration of an existing zone, using similar
25e17566bc9005778707317c8919c610513a4418stoddard syntax to "rndc addzone". [RT #37895]
25e17566bc9005778707317c8919c610513a4418stoddard4042. [bug] zone.c:iszonesecure was being called too late.
25e17566bc9005778707317c8919c610513a4418stoddard [RT #38371]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb4041. [func] TCP sockets can now be shared while connecting.
44ea927aaaa7c419de1c824beb01b26216f387c3dougm (This will be used to enable client-side support
44ea927aaaa7c419de1c824beb01b26216f387c3dougm of pipelined queries.) [RT #38231]
a601a32cec653022741d22b5d692b6afd6c4dc55trawick4040. [func] Added server-side support for pipelined TCP
a601a32cec653022741d22b5d692b6afd6c4dc55trawick queries. Clients may continue sending queries via
a601a32cec653022741d22b5d692b6afd6c4dc55trawick TCP while previous queries are being processed
a601a32cec653022741d22b5d692b6afd6c4dc55trawick in parallel. (The new "keep-response-order"
a601a32cec653022741d22b5d692b6afd6c4dc55trawick option allows clients to be specified for which
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb the old behavior will still be used.) [RT #37821]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb4038. [bug] Add 'rpz' flag to node and use it to determine whether
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb to call dns_rpz_delete. This should prevent unbalanced
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb add / delete calls. [RT #36888]
6202bc12656548c624a235bf43d6c866719b2b06rbb4037. [bug] also-notify was ignoring the tsig key when checking
6202bc12656548c624a235bf43d6c866719b2b06rbb for duplicates resulting in some expected notify
6202bc12656548c624a235bf43d6c866719b2b06rbb messages not being sent. [RT #38369]
6202bc12656548c624a235bf43d6c866719b2b06rbb4036. [bug] Make call to open a temporary file name safe during
6202bc12656548c624a235bf43d6c866719b2b06rbb NZF creation. [RT #38331]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj4035. [bug] Close temporary and NZF FILE pointers before moving
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj the former into the latter's place, as required on
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj Windows. [RT #38332]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj4034. [func] When added, negative trust anchors (NTA) are now
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj saved to files (viewname.nta), in order to
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb persist across restarts of the named server.
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb [RT #37087]
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb4033. [bug] Missing out of memory check in request.c:req_send.
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb [RT #38311]
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb4032. [bug] Built-in "empty" zones did not correctly inherit the
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb "allow-transfer" ACL from the options or view.
d353d275978f11f5221110e8f954d09d03ec5e3arbb [RT #38310]
d353d275978f11f5221110e8f954d09d03ec5e3arbb4031. [bug] named-checkconf -z failed to report a missing file
d353d275978f11f5221110e8f954d09d03ec5e3arbb with a hint zone. [RT #38294]
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding4030. [func] "rndc delzone" is now applicable to zones that were
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding configured in named.conf, as well as zones that
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb were added via "rndc addzone". (Note, however, that
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb if named.conf is not also modified, the deleted zone
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb will return when named is reloaded.) [RT #37887]
9832ee60b23ca2a3faa403bbe88720815969a9fefielding4029. [func] "rndc showzone" displays the current configuration
9832ee60b23ca2a3faa403bbe88720815969a9fefielding of a specified zone. [RT #37887]
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames4028. [bug] $GENERATE with a zero step was not being caught as a
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames error. A $GENERATE with a / but no step was not being
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames caught as a error. [RT #38262]
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
90a8cab05f4d949dd1317df7e19a2f787c46a5f6rbb4025. [port] bsdi: failed to build. [RT #38047]
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb dns_rdata_opt_current, dns_rdata_txt_first,
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb dns_rdata_txt_next and dns_rdata_txt_current were
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb documented but not implemented. These have now been
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb implemented.
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb dns_rdata_spf_first, dns_rdata_spf_next and
da3e32612f06d3082e41ba709919c996c89b8c06rederpj dns_rdata_spf_current were documented but not
da3e32612f06d3082e41ba709919c996c89b8c06rederpj implemented. The prototypes for these
da3e32612f06d3082e41ba709919c996c89b8c06rederpj functions have been removed. [RT #38068]
da3e32612f06d3082e41ba709919c996c89b8c06rederpj4023. [bug] win32: socket handling with explicit ports and
da3e32612f06d3082e41ba709919c996c89b8c06rederpj invoking named with -4 was broken for some
da3e32612f06d3082e41ba709919c996c89b8c06rederpj configurations. [RT #38068]
734ab810a1c5028776ed5d6c54b2ef974b75d397rbb4022. [func] Stop multiple spawns of named by limiting number of
0d9c389e9c63d02edb068917d49af2fa8012af91marc processes to 1. This is done by using a lockfile and
0d9c389e9c63d02edb068917d49af2fa8012af91marc checking whether we can listen on any configured
0d9c389e9c63d02edb068917d49af2fa8012af91marc TCP interfaces. [RT #37908]
ae416a3cdff7a12665838a2184183299dcee6ec9bjh4021. [bug] Adjust max-recursion-queries to accommodate
ae416a3cdff7a12665838a2184183299dcee6ec9bjh the need for more queries when the cache is
ae416a3cdff7a12665838a2184183299dcee6ec9bjh empty. [RT #38104]
b0bb6f215e43a79342c422bc9b0c258add88ca51stoddard4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick resulting in updates being sent to the wrong server.
99cec2acb38d6a2fb2d4a9d437db7b50ef5b208awrowe [RT #37925]
99cec2acb38d6a2fb2d4a9d437db7b50ef5b208awrowe4019. [func] If named is not configured to validate the answer
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick then allow fallback to plain DNS on timeout even
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick when we know the server supports EDNS. [RT #37978]
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick4018. [placeholder]
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb4017. [test] Add system test to check lookups to legacy servers
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb with broken DNS behavior. [RT #37965]
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb4016. [bug] Fix a dig segfault due to bad linked list usage.
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx [RT #37591]
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx4015. [bug] Nameservers that are skipped due to them being
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx CNAMEs were not being logged. They are now logged
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx to category 'cname' as per BIND 8. [RT #37935]
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx4014. [bug] When including a master file origin_changed was
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx not being properly set leading to a potentially
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick spurious 'inherited owner' warning. [RT #37919]
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick4013. [func] Add a new tcp-only option to server (config) /
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick peer (struct) to use TCP transport to send
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard queries (in place of UDP transport with a
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard TCP fallback on truncated (TC set) response).
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard [RT #37800]
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard4012. [cleanup] Check returned status of OpenSSL digest and HMAC
15ecbdb46249bbd3ac51fdacaff3b3ac4d179ffarbb functions when they return one. Note this applies
f0484231f96a9d95f5044c1c8cb33b322d6f9bcbdougm only to FIPS capable OpenSSL libraries put in
f0484231f96a9d95f5044c1c8cb33b322d6f9bcbdougm FIPS mode and MD5. [RT #37944]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb4011. [bug] master's list port and dscp inheritance was not
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb properly implemented. [RT #37792]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb4010. [cleanup] Clear the prefetchable state when initiating a
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb prefetch. [RT #37399]
2ca377182c951f9895cd5e7a350b442a39c8eb23rbb4009. [func] delv: added a +tcp option. [RT #37855]
2ca377182c951f9895cd5e7a350b442a39c8eb23rbb4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb4007. [doc] Remove acl forward reference restriction. [RT #37772]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb4006. [security] A flaw in delegation handling could be exploited
b6873e2c00ff7b0af18d837ef4c3cd58cf6b54c5rbb to put named into an infinite loop. This has
893328ef6ff86d0ca27774778d84410353789fb0fielding been addressed by placing limits on the number
893328ef6ff86d0ca27774778d84410353789fb0fielding of levels of recursion named will allow (default 7),
893328ef6ff86d0ca27774778d84410353789fb0fielding and the number of iterative queries that it will
893328ef6ff86d0ca27774778d84410353789fb0fielding send (default 50) before terminating a recursive
893328ef6ff86d0ca27774778d84410353789fb0fielding query (CVE-2014-8500).
274de94b0b59f4ee126dca1726624980828d0cd0stoddard The recursion depth limit is configured via the
274de94b0b59f4ee126dca1726624980828d0cd0stoddard "max-recursion-depth" option, and the query limit
274de94b0b59f4ee126dca1726624980828d0cd0stoddard via the "max-recursion-queries" option. [RT #37580]
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard4005. [func] The buffer used for returning text from rndc
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard commands is now dynamically resizable, allowing
962f339c5f0f61adde79936f610fb05ce0854d6echuck arbitrarily large amounts of text to be sent back
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick to the client. (Prior to this change, it was
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick possible for the output of "rndc tsig-list" to be
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick truncated.) [RT #37731]
3f0dd56fa6b79fe389f20738369b290e2f3e9201trawick4004. [bug] When delegations had AAAA glue but not A, a
70b83609159f247f5920421a890dc27a0718d63adreid reference could be leaked causing an assertion
70b83609159f247f5920421a890dc27a0718d63adreid failure on shutdown. [RT #37796]
70b83609159f247f5920421a890dc27a0718d63adreid4003. [security] When geoip-directory was reconfigured during
70b83609159f247f5920421a890dc27a0718d63adreid named run-time, the previously loaded GeoIP
70b83609159f247f5920421a890dc27a0718d63adreid data could remain, potentially causing wrong
a1033a770bfee276def7d4cb9759856f69293e48trawick ACLs to be used or wrong results to be served
a1033a770bfee276def7d4cb9759856f69293e48trawick based on geolocation (CVE-2014-8680). [RT #37720]
a1033a770bfee276def7d4cb9759856f69293e48trawick4002. [security] Lookups in GeoIP databases that were not
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick loaded could cause an assertion failure
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick (CVE-2014-8680). [RT #37679]
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick4001. [security] The caching of GeoIP lookups did not always
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick handle address families correctly, potentially
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick resulting in an assertion failure (CVE-2014-8680).
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb [RT #37672]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb from the redirect zone. [RT #37722]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb3999. [func] "mkeys" and "nzf" files are now named after
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb their corresponding views, unless the view name
86f191e8221867df8c9cd22271e7d54204f39186rbb contains characters that would be incompatible
86f191e8221867df8c9cd22271e7d54204f39186rbb with use in a filename (i.e., slash, backslash,
86f191e8221867df8c9cd22271e7d54204f39186rbb or capital letters). If a view name does contain
86f191e8221867df8c9cd22271e7d54204f39186rbb these characters, the files will still be named
86f191e8221867df8c9cd22271e7d54204f39186rbb using a cryptographic hash of the view name.
962f339c5f0f61adde79936f610fb05ce0854d6echuck Regardless of this, if a file using the old name
962f339c5f0f61adde79936f610fb05ce0854d6echuck format is found to exist, it will continue to be
962f339c5f0f61adde79936f610fb05ce0854d6echuck used. [RT #37704]
157e6980a24a44e4719173b1c555133caecbc172stoddard3998. [bug] isc_radix_search was returning matches that were
157e6980a24a44e4719173b1c555133caecbc172stoddard too precise. [RT #37680]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
171f8c636ff1374e3a3dfff333211becda355b98trawick3996. [bug] Address use after free on out of memory error in
171f8c636ff1374e3a3dfff333211becda355b98trawick keyring_add. [RT #37639]
171f8c636ff1374e3a3dfff333211becda355b98trawick3995. [bug] receive_secure_serial holds the zone lock for too
171f8c636ff1374e3a3dfff333211becda355b98trawick long. [RT #37626]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar3994. [func] Dig now supports setting the last unassigned DNS
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar header flag bit (dig +zflag). [RT #37421]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard3993. [func] Dig now supports EDNS negotiation by default.
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard (dig +[no]ednsnegotiation).
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard Note: This is disabled by default in BIND 9.10
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard and enabled by default in BIND 9.11. [RT #37604]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard3992. [func] DiG can now send queries without questions
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard (dig +header-only). [RT #37599]
21b8c3cb46cea2b31a585a95ce9f93f4f6abc35brbb3991. [func] Add the ability to buffer logging output by specifying
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar "buffered yes;" when defining a channel. [RT #26561]
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar3990. [test] Add tests for unknown DNSSEC algorithm handling.
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar [RT #37541]
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb3988. [func] Allow the zone serial of a dynamically updatable
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb zone to be updated via "rndc signing -serial".
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb [RT #37404]
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb3987. [port] Handle future Visual Studio 14 incompatible changes.
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb [RT #37380]
853a0c44563b056e40e9cffe911190f554e63ec3chuck3986. [doc] Add the BIND version number to page footers
853a0c44563b056e40e9cffe911190f554e63ec3chuck in the ARM. [RT #37398]
330c042543440d0987244c94c65d14eeb7af0868rbb3985. [doc] Describe how +ndots and +search interact in dig.
330c042543440d0987244c94c65d14eeb7af0868rbb [RT #37529]
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb3984. [func] Accept 256 byte long PINs in native PKCS#11
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb crypto. [RT #37410]
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick3983. [bug] Change #3940 was incomplete: negative trust anchors
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick could be set to last up to a week, but the
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick "nta-lifetime" and "nta-recheck" options were
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick still limited to one day. [RT #37522]
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb3982. [doc] Include release notes in product documentation.
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb [RT #37272]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3981. [bug] Cache DS/NXDOMAIN independently of other query types.
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb [RT #37467]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb size. [RT #37187]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3979. [bug] Negative trust anchor fetches were not properly
865980dc9aeb61741e586502440f0c0fea4835c6trawick managed. [RT #37488]
865980dc9aeb61741e586502440f0c0fea4835c6trawick3978. [test] Added a unit test for Diffie-Hellman key
865980dc9aeb61741e586502440f0c0fea4835c6trawick computation, completing change #3974. [RT #37477]
865980dc9aeb61741e586502440f0c0fea4835c6trawick3977. [cleanup] "rndc secroots" reported a "not found" error when
865980dc9aeb61741e586502440f0c0fea4835c6trawick there were no negative trust anchors set. [RT #37506]
9a0d076511763b559a755133f6a182e6c24ef643rbb3976. [bug] When refreshing managed-key trust anchors, clear
9a0d076511763b559a755133f6a182e6c24ef643rbb any cached trust so that they will always be
9a0d076511763b559a755133f6a182e6c24ef643rbb revalidated with the current set of secure
9a0d076511763b559a755133f6a182e6c24ef643rbb roots. [RT #37506]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb3975. [bug] Don't populate or use the bad cache for queries that
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb don't request or use recursion. [RT #37466]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb3974. [bug] Handle DH_compute_key() failure correctly in
6501b757f710f75d47c950300d8110aca67dc0b0rbb3973. [test] Added hooks for Google Performance Tools CPU profiler,
6501b757f710f75d47c950300d8110aca67dc0b0rbb including real-time/wall-clock profiling. Use
6501b757f710f75d47c950300d8110aca67dc0b0rbb "configure --with-gperftools-profiler" to enable.
dfd4950edac888e671b96f62ff5382b7cb350d48rbb [RT #37339]
dfd4950edac888e671b96f62ff5382b7cb350d48rbb3972. [bug] Fix host's usage statement. [RT #37397]
a6d4b3f8d54aaf14d8ee5dda3a09bf8b6370dfa4wrowe3971. [bug] Reduce the cascading failures due to a bad $TTL line
a6d4b3f8d54aaf14d8ee5dda3a09bf8b6370dfa4wrowe in named-checkconf / named-checkzone. [RT #37138]
c9a95767fbf0f5fb0976a06b97a256033925e433rbb3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
c9a95767fbf0f5fb0976a06b97a256033925e433rbb [RT #37237]
21b8c3cb46cea2b31a585a95ce9f93f4f6abc35brbb3969. [test] Added 'delv' system test. [RT #36901]
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb3968. [bug] Silence spurious log messages when using 'named -[46]'.
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb [RT #37308]
adaea88da2d103e4302e361c932b98cee86fb1c5rbb3967. [test] Add test for inlined signed zone in multiple views
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb with different DNSKEY sets. [RT #35759]
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb [RT #35746]
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb3965. [func] Log outgoing packets and improve packet logging to
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard support logging the remote address. [RT #36624]
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard3964. [func] nsupdate now performs check-names processing.
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard [RT #36266]
1374444b4fab1475091e12a81663f379b73005efrbb3963. [test] Added NXRRSET test cases to the "dlzexternal"
1374444b4fab1475091e12a81663f379b73005efrbb system test. [RT #37344]
3233d057ad276d823bded5c24c3fd6729ed1a736rbb3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
3233d057ad276d823bded5c24c3fd6729ed1a736rbb conditions. [RT #34663]
9927a2a72d50103f32323b53f5fc4577c1801327rbb3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
9927a2a72d50103f32323b53f5fc4577c1801327rbb BADSIG. [RT #37216]
9927a2a72d50103f32323b53f5fc4577c1801327rbb3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb3959. [bug] Updates could be lost if they arrived immediately
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb after a rndc thaw. [RT #37233]
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf3958. [bug] Detect when writeable files have multiple references
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf in named.conf. [RT #37172]
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb and ECDSAP384SHA384. [RT #37183]
364701a102725758f2e3a511924381e2faa93e27rbb3956. [func] Notify messages are now rate limited by notify-rate and
364701a102725758f2e3a511924381e2faa93e27rbb startup-notify-rate instead of serial-query-rate.
364701a102725758f2e3a511924381e2faa93e27rbb [RT #24454]
364701a102725758f2e3a511924381e2faa93e27rbb3955. [bug] Notify messages due to changes are no longer queued
0811e8a41d152f0016a385ce1dfa44f475425b70rbb behind startup notify messages. [RT #24454]
0811e8a41d152f0016a385ce1dfa44f475425b70rbb3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb two name pointers were the same. [RT #37176]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb3951. [func] Add the ability to set yet-to-be-defined EDNS flags
e91c80d53d8ffa738283d923638fa3efd8aa6bf7rbb to dig (+ednsflags=#). [RT #37142]
e91c80d53d8ffa738283d923638fa3efd8aa6bf7rbb3950. [port] Changed the bin/python Makefile to work around a
9359bd100badb53fd8a465cb3a0a90b218b30c4cben bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
9359bd100badb53fd8a465cb3a0a90b218b30c4cben3949. [experimental] Experimental support for draft-andrews-edns1 by sending
d0211374a981173d4537e3f919c708b5f64040fcgstein EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
d0211374a981173d4537e3f919c708b5f64040fcgstein building). Add support for limiting the EDNS version
d0211374a981173d4537e3f919c708b5f64040fcgstein advertised to servers: server { edns-version 0; };
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb Log the EDNS version received in the query log.
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb [RT #35864]
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb --with-tuning=large. [RT #37059]
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb3947. [cleanup] Set the executable bit on libraries when using
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb libtool. [RT #36786]
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin3946. [cleanup] Improved "configure" search for a python interpreter.
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin [RT #36992]
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin3945. [bug] Invalid wildcard expansions could be incorrectly
adaea88da2d103e4302e361c932b98cee86fb1c5rbb accepted by the validator. [RT #37093]
adaea88da2d103e4302e361c932b98cee86fb1c5rbb3944. [test] Added a regression test for "server-id". [RT #37057]
8a76b3f3c93d39930182afa227d258218f80926brbb3943. [func] SERVFAIL responses can now be cached for a
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb limited time (configured by "servfail-ttl",
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb default 10 seconds, limit 30). This can reduce
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb the frequency of retries when an authoritative
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb server is known to be failing, e.g., due to
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb ongoing DNSSEC validation problems. [RT #21347]
97ad13ce0413b573e63512b57c874ebbd41065b2rbb3942. [bug] Wildcard responses from a optout range should be
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb marked as insecure. [RT #37072]
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb3941. [doc] Include the BIND version number in the ARM. [RT #37067]
78f2608a1583b3cb409e12be701392ad1a929653rbb3940. [func] "rndc nta" now allows negative trust anchors to be
78f2608a1583b3cb409e12be701392ad1a929653rbb set for up to one week. [RT #37069]
78f2608a1583b3cb409e12be701392ad1a929653rbb3939. [func] Improve UPDATE forwarding performance by allowing TCP
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb connections to be shared. [RT #37039]
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb3938. [func] Added quotas to be used in recursive resolvers
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb that are under high query load for names in zones
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb whose authoritative servers are nonresponsive or
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb are experiencing a denial of service attack.
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb - "fetches-per-server" limits the number of
2a0c3663b66c9af764267ac3c4e140e659598474ben simultaneous queries that can be sent to any
2a0c3663b66c9af764267ac3c4e140e659598474ben single authoritative server. The configured
2a0c3663b66c9af764267ac3c4e140e659598474ben value is a starting point; it is automatically
2a0c3663b66c9af764267ac3c4e140e659598474ben adjusted downward if the server is partially or
8a76b3f3c93d39930182afa227d258218f80926brbb completely non-responsive. The algorithm used to
8a76b3f3c93d39930182afa227d258218f80926brbb adjust the quota can be configured via the
8a76b3f3c93d39930182afa227d258218f80926brbb "fetch-quota-params" option.
8a76b3f3c93d39930182afa227d258218f80926brbb - "fetches-per-zone" limits the number of
11d400383ba9f941cc49e1a8da562fd172d3d7c5stoddard simultaneous queries that can be sent for names
11d400383ba9f941cc49e1a8da562fd172d3d7c5stoddard within a single domain. (Note: Unlike
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb "fetches-per-server", this value is not
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb self-tuning.)
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb - New stats counters have been added to count
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb queries spilled due to these quotas.
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb See the ARM for details of these options. [RT #37125]
1a3161b56ebbbd036730d5372d4800cc495db212rbb3937. [func] Added some debug logging to better indicate the
1a3161b56ebbbd036730d5372d4800cc495db212rbb conditions causing SERVFAILs when resolving.
1a3161b56ebbbd036730d5372d4800cc495db212rbb [RT #35538]
2d87d8f191175a0683f430d790d81a5604b74ec6rbb3936. [func] Added authoritative support for the EDNS Client
2d87d8f191175a0683f430d790d81a5604b74ec6rbb Subnet (ECS) option.
2d87d8f191175a0683f430d790d81a5604b74ec6rbb ACLs can now include "ecs" elements which specify
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb an address or network prefix; if an ECS option is
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb included in a DNS query, then the address encoded
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb in the option will be matched against "ecs" ACL
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb Also, if an ECS address is included in a query,
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb then it will be used instead of the client source
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb address when matching "geoip" ACL elements. This
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb behavior can be overridden with "geoip-use-ecs no;".
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb (Note: to enable "geoip" ACLs, use "configure
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb --with-geoip". This requires libGeoIP version
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb 1.5.0 or higher.)
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb When "ecs" or "geoip" ACL elements are used to
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb select a view for a query, the response will include
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb an ECS option to indicate which client network the
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb answer is valid for.
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb (Thanks to Vincent Bernat.) [RT #36781]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb3935. [bug] "geoip asnum" ACL elements would not match unless
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb the full organization name was specified. They
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb can now match against the AS number alone (e.g.,
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb AS1234). [RT #36945]
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb sit-secret documentation. [RT #36980]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb3933. [bug] Corrected the implementation of dns_rdata_casecompare()
445997e06464e7625c7f0e22917f8f2d9876cfffrbb for the HIP rdata type. [RT #36911]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb3932. [test] Improved named-checkconf tests. [RT #36911]
a2c240fe8836beba2330b03d55569d9e31bb3358trawick3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
a2c240fe8836beba2330b03d55569d9e31bb3358trawick3930. [bug] "rndc nta -r" could cause a server hang if the
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb NTA was not found. [RT #36909]
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard3928. [test] Improve rndc system test. [RT #36898]
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard3927. [bug] dig: report PKCS#11 error codes correctly when
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf compiled with --enable-native-pkcs11. [RT #36956]
3568de757bac0b47256647504c186d17ca272f85rbb3926. [doc] Added doc for geoip-directory. [RT #36877]
98f3c8c547839251cb43e9f917114cc8b16ced9efanf3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
98f3c8c547839251cb43e9f917114cc8b16ced9efanf3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
1a411968bb62cc88c3cbf14a53caf6587c224259fanf3923. [bug] Sanity check the xml2-config output. [RT #22246]
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf3922. [bug] When resigning, dnssec-signzone was removing
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf all signatures from delegation nodes. It now
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf retains DS and (if applicable) NSEC signatures.
60777c94cb33363389d4848524c0809c235ba5e5rbb [RT #36946]
b5140df3124b186e4a977812fd9828d1e295c080wrowe3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
b5140df3124b186e4a977812fd9828d1e295c080wrowe3920. [doc] Added doc for masterfile-style. [RT #36823]
b5140df3124b186e4a977812fd9828d1e295c080wrowe3919. [bug] dig: continue to next line if a address lookup fails
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe in batch mode. [RT #36755]
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe3918. [doc] Update check-spf documentation. [RT #36910]
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe3917. [bug] dig, nslookup and host now continue on names that are
41aef8943f349ee0b5b510dd436301b4c33c628cwrowe too long after applying a search list elements.
41aef8943f349ee0b5b510dd436301b4c33c628cwrowe [RT #36892]
5727f68f33838686d447f55a100309e54efb20f8fielding3916. [contrib] zone2sqlite checked wrong result code. Address
5727f68f33838686d447f55a100309e54efb20f8fielding compiler warnings. [RT #36931]
5727f68f33838686d447f55a100309e54efb20f8fielding3915. [bug] Address a assertion if a route event arrived while
5727f68f33838686d447f55a100309e54efb20f8fielding shutting down. [RT #36887]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb3914. [bug] Allow the URI target and CAA value fields to
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb be zero length. [RT #36737]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb3913. [bug] Address race issue in dispatch. [RT #36731]
b974a8fc59a9d6193305dcd8690992a411d88232rbb3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
b974a8fc59a9d6193305dcd8690992a411d88232rbb3911. [func] Implement EDNS EXPIRE option client side, allowing
b974a8fc59a9d6193305dcd8690992a411d88232rbb a slave server to set the expiration timer correctly
fa996ff928f6170678c8789c8073c368f56d770arbb when transferring zone data from another slave
fa996ff928f6170678c8789c8073c368f56d770arbb server. [RT #35925]
fa996ff928f6170678c8789c8073c368f56d770arbb3910. [bug] Fix races to free event during shutdown. [RT #36720]
fa996ff928f6170678c8789c8073c368f56d770arbb3909. [bug] When computing the number of elements required for a
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb acl count_acl_elements could have a short count leading
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb to a assertion failure. Also zero out new acl elements
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb in dns_acl_merge. [RT #36675]
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe3908. [bug] rndc now differentiates between a zone in multiple
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe views and a zone that doesn't exist at all. [RT #36691]
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe3907. [cleanup] Alphabetize rndc help. [RT #36683]
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben3906. [protocol] Update URI record format to comply with
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben draft-faltstrom-uri-08. [RT #36642]
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3904. [func] Add the RPZ SOA to the additional section. [RT36507]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3903. [bug] Improve the accuracy of DiG's reported round trip
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb time. [RT 36611]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3902. [bug] liblwres wasn't handling link-local addresses in
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb nameserver clauses in resolv.conf. [RT #36039]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3901. [protocol] Added support for CAA record type (RFC 6844).
cab10c98980b42562a7850410cecd37798e170ecrbb [RT #36625]
cab10c98980b42562a7850410cecd37798e170ecrbb3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
cab10c98980b42562a7850410cecd37798e170ecrbb3899. [bug] "request-ixfr" is only applicable to slave and redirect
71715c646d5231de578431f8961e711764b899d3fanf zones. [RT #36608]
71715c646d5231de578431f8961e711764b899d3fanf3898. [bug] Too small a buffer in tohexstr() calls in test code.
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb [RT #36598]
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb3897. [bug] RPZ summary information was not properly being updated
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb after a AXFR resulting in changes sometimes being
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb ignored. [RT #35885]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb3896. [bug] Address performance issues with DSCP code on some
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb platforms. [RT #36534]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb3895. [func] Add the ability to set the DSCP code point to dig.
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb [RT #36546]
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb3894. [bug] Buffers in isc_print_vsnprintf were not properly
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb initialized leading to potential overflows when
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb printing out quad values. [RT #36505]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3893. [bug] Peer DSCP values could be returned without being set.
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe [RT #36538]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3892. [bug] Setting '-t aaaa' in .digrc had unintended side
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe effects. [RT #36452]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe to install python programs.
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb3890. [bug] RRSIG sets that were not loaded in a single transaction
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb at start up where not being correctly added to
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb re-signing heaps. [RT #36302]
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb3889. [port] hurd: configure fixes as per:
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb3888. [func] 'rndc status' now reports the number of automatic
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb zones. [RT #36015]
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
2c8f06bf370a44a3d0544ed5319355463c417132gregames they are easier to use in a debugger. [RT #36373]
2c8f06bf370a44a3d0544ed5319355463c417132gregames3886. [bug] rbtdb_write_header should use a once to initialize
db06e09891b001667974483058923b88c3258324rbb FILE_VERSION. [RT #36374]
db06e09891b001667974483058923b88c3258324rbb3885. [port] Use 'open()' rather than 'file()' to open files in
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf3883. [placeholder]
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf3882. [func] By default, negative trust anchors will be tested
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf periodically to see whether data below them can be
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf validated, and if so, they will be allowed to
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick expire early. The "rndc nta -force" option
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick overrides this behavior. The default NTA lifetime
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick and the recheck frequency can be configured by the
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick "nta-lifetime" and "nta-recheck" options. [RT #36146]
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick3881. [bug] Address memory leak with UPDATE error handling.
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick [RT #36303]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim3880. [test] Update ans.pl to work with new TSIG support in
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim Net::DNS; add additional Net::DNS version prerequisite
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim checks. [RT #36327]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim3879. [func] Add version printing option to various BIND utilities.
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim [RT #10686]
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb3878. [bug] Using the incorrect filename for a DLZ module
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb caused a segmentation fault on startup. [RT #36286]
83047afdc49c183cdca6373dba6a0c6afa638f12gstein3877. [bug] Inserting and deleting parent and child nodes
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb in response policy zones could trigger an assertion
c8cc46d12794845f39fa154224075a3bbe57a4c8ben failure. [RT #36272]
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb3876. [bug] Improve efficiency of DLZ redirect zones by
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb suppressing unnecessary database lookups. [RT #35835]
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb3875. [cleanup] Clarify log message when unable to read private
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb key files. [RT #24702]
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick3874. [test] Check that only "check-names master" is needed for
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick updates to be accepted.
0ea568e49752d337d2b513cce07f2a6f4699d6eatrawick3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
b7a0ad483b54711addc5f43f679189619a23c749ben3872. [bug] Address issues found by static analysis. [RT #36209]
328d02603f471fad56cc5588fc9e93f589593ad0rbb3871. [bug] Don't publish an activated key automatically before
328d02603f471fad56cc5588fc9e93f589593ad0rbb its publish time. [RT #35063]
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick3870. [func] Updated the random number generator used in
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick the resolver to use the updated ChaCha based one
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick (similar to OpenBSD's changes). Also moved the
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick RNG to libisc and added unit tests for it.
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick [RT #35942]
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick3869. [doc] Document that in-view zones cannot be used for
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick response policy zones. [RT #35941]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb3868. [bug] isc_mem_setwater incorrectly cleared hi_called
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb potentially leaving over memory cleaner running.
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb [RT #35270]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb3867. [func] "rndc nta" can now be used to set a temporary
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb negative trust anchor, which disables DNSSEC
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb validation below a specified name for a specified
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb period of time (not exceeding 24 hours). This
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb can be used when validation for a domain is known
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb to be failing due to a configuration error on
da07a882b90b44243c9cd88ac09a789999dccc4drbb the part of the domain owner rather than a
da07a882b90b44243c9cd88ac09a789999dccc4drbb spoofing attack. [RT #29358]
da07a882b90b44243c9cd88ac09a789999dccc4drbb3866. [bug] Named could die on disk full in generate_session_key.
da07a882b90b44243c9cd88ac09a789999dccc4drbb [RT #36119]
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb3865. [test] Improved testability of the red-black tree
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb implementation and added unit tests. [RT #35904]
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb3864. [bug] RPZ didn't work well when being used as forwarder.
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb [RT #36060]
5bf029f8452b6aa105cf3d9d9b19221920725428rbb3863. [bug] The "E" flag was missing from the query log as a
5bf029f8452b6aa105cf3d9d9b19221920725428rbb unintended side effect of code rearrangement to
60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb support EDNS EXPIRE. [RT #36117]
60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb3862. [cleanup] Return immediately if we are not going to log the
e03878add0099ba9741efc46d545955a60ea8bdcrbb message in ns_client_dumpmessage.
e03878add0099ba9741efc46d545955a60ea8bdcrbb3861. [security] Missing isc_buffer_availablelength check results
e03878add0099ba9741efc46d545955a60ea8bdcrbb in a REQUIRE assertion when printing out a packet
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb (CVE-2014-3859). [RT #36078]
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb3860. [bug] ioctl(DP_POLL) array size needs to be determined
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe at run time as it is limited to {OPEN_MAX}.
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe [RT #35878]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe3859. [placeholder]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe3858. [bug] Disable GCC 4.9 "delete null pointer check".
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe [RT #35968]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick3857. [bug] Make it harder for a incorrect NOEDNS classification
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick to be made. [RT #36020]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick3856. [bug] Configuring libjson without also configuring libxml
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick resulted in a REQUIRE assertion when retrieving
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick statistics using json. [RT #36009]
77c656dabf05adcdee0d30b15b4628be738a1913rbb3855. [bug] Limit smoothed round trip time aging to no more than
77c656dabf05adcdee0d30b15b4628be738a1913rbb once a second. [RT #32909]
77c656dabf05adcdee0d30b15b4628be738a1913rbb3854. [cleanup] Report unrecognized options, if any, in the final
7e73041858979fd162c849cc2e7447beb51eedf8rbb configure summary. [RT #36014]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb the handling of a rdataset with no records. [RT #35968]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick3852. [func] Increase the default number of clients available
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb for servicing lightweight resolver queries, and
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb make them configurable via the "lwres-tasks" and
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb "lwres-clients" options. (Thanks to Tomas Hozza.)
db9ac238bf63d7df2bebbaff4de1628a32151028trawick [RT #35857]
ce121a776564df6bb75498209094142d92404b8atrawick3851. [func] Allow libseccomp based system-call filtering
ce121a776564df6bb75498209094142d92404b8atrawick on Linux; use "configure --enable-seccomp" to
e1ade9256c87684358786fcf7eef251bd4c1db10rbb turn it on. Thanks to Loganaden Velvindron
e1ade9256c87684358786fcf7eef251bd4c1db10rbb of AFRINIC for the contribution. [RT #35347]
e1ade9256c87684358786fcf7eef251bd4c1db10rbb3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
e1ade9256c87684358786fcf7eef251bd4c1db10rbb [RT #35979]
db9ac238bf63d7df2bebbaff4de1628a32151028trawick3849. [doc] Alphabetized dig's +options. [RT #35992]
db9ac238bf63d7df2bebbaff4de1628a32151028trawick3848. [bug] Adjust 'statistics-channels specified but not effective'
eae32ab3fb398ca408bc2d45b22adf1b67a75471rbb error message to account for JSON support. [RT #36008]
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb3847. [bug] 'configure --with-dlz-postgres' failed to fail when
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb there is not support available.
42ec91fadb5532438ab4c02993b15c18a517967frbb3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
42ec91fadb5532438ab4c02993b15c18a517967frbb ixfr query. [RT #35980]
42ec91fadb5532438ab4c02993b15c18a517967frbb3845. [placeholder]
96fc773162e93e5b85686ab152f11baf4498d868rbb3844. [bug] Use the x64 version of the Microsoft Visual C++
2975523a2901fc601ae9510082a7d4fb11bb9aecake Redistributable when built for 64 bit Windows.
2975523a2901fc601ae9510082a7d4fb11bb9aecake [RT #35973]
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick [RT #35969]
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick3842. [bug] Adjust RRL log-only logging category. [RT #35945]
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35924]
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe3840. [port] Check for arc4random_addrandom() before using it;
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe it's been removed from OpenBSD 5.5. [RT #35907]
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe3839. [test] Use only posix-compatible shell in system tests.
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe [RT #35625]
f6e9f5600e77b78fb013bb543d364135961639d1rbb3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
f6e9f5600e77b78fb013bb543d364135961639d1rbb3837. [security] A NULL pointer is passed to query_prefetch resulting
f6e9f5600e77b78fb013bb543d364135961639d1rbb a REQUIRE assertion failure when a fetch is actually
f6e9f5600e77b78fb013bb543d364135961639d1rbb initiated (CVE-2014-3214). [RT #35899]
f6e9f5600e77b78fb013bb543d364135961639d1rbb3836. [bug] Address C++ keyword usage in header file.
f6e9f5600e77b78fb013bb543d364135961639d1rbb3835. [bug] Geoip ACL elements didn't work correctly when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referenced via named or nested ACLs. [RT #35879]
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick3834. [bug] The re-signing heaps were not being updated soon enough
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick leading to multiple re-generations of the same RRSIG
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick when a zone transfer was in progress. [RT #35273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3833. [bug] Cross compiling was broken due to calling genrandom at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build time. [RT #35869]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3832. [func] "named -L <filename>" causes named to send log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages to the specified file by default instead
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of to the system log. (Thanks to Tony Finch.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35845]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3831. [cleanup] Reduce logging noise when EDNS state changes occur.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35843]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3830. [func] When query logging is enabled, log query errors at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the same level ('info') as the queries themselves.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3829. [func] "dig +ttlunits" causes dig to print TTL values
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with time-unit suffixes: w, d, h, m, s for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding weeks, days, hours, minutes, and seconds. (Thanks
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to Tony Finch.) [RT #35823]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3828. [func] "dnssec-signzone -N date" updates serial number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the current date in YYYYMMDDNN format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35800]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3827. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3825. [bug] Address sign extension bug in isc_regex_validate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3824. [bug] A collision between two flag values could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding problems with cache cleaning when SIT was enabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35858]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3823. [func] Log the rpz cname target when rewriting. [RT #35667]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3822. [bug] Log the correct type of static-stub zones when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removing them. [RT #35842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding update and transaction support. Thanks to Marty
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Lee for the contribution. [RT #35656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3820. [func] The DLZ API doesn't pass the database version to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the lookup() function; this can cause DLZ modules
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that allow dynamic updates to mishandle prerequisite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checks. This has been corrected by adding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'dbversion' field to the dns_clientinfo_t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structure. [RT #35656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3819. [bug] NSEC3 hashes need to be able to be entered and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding displayed without padding. This is not a issue for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding currently defined algorithms but may be for future
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hash algorithms. [RT #27925]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3818. [bug] Stop lying to the optimizer that 'void *arg' is a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding constant in isc_event_allocate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3817. [func] The "delve" command is now spelled "delv" to avoid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a namespace collision with the Xapian project.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3816. [func] "dig +qr" now reports query size. (Thanks to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Tony Finch.) [RT #35822]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3814. [func] The "masterfile-style" zone option controls the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formatting of dumped zone files. Options are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "relative" (multiline format) and "full" (one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record per line). The default is "relative".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20798]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3813. [func] "host" now recognizes the "timeout", "attempts" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "debug" options when set in /etc/resolv.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Thanks to Adam Tkac at RedHat.) [RT #21885]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3812. [func] Dig now supports sending arbitrary EDNS options from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the command line (+ednsopt=code[:value]). [RT #35584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3811. [func] "serial-update-method date;" sets serial number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on dynamic update to today's date in YYYYMMDDNN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format. (Thanks to Bradley Forschinger.) [RT #24903]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3810. [bug] Work around broken nameservers that fail to ignore
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unknown EDNS options. [RT #35766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3809. [doc] Fix SIT and NSID documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3808. [doc] Clean up "prefetch" documentation. [RT #35751]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3807. [bug] Fix sign extension bug in dns_name_fromtext when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lowercase is set. [RT #35743]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3806. [test] Improved system test portability. [RT #35625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3805. [contrib] Added contrib/perftcpdns, a performance testing tool
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for DNS over TCP. [RT #35710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.10.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3804. [bug] Corrected a race condition in dispatch.c in which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding portentry could be reset leading to an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in socket_search(). (Change #3708
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addressed the same issue but was incomplete.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35128]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3803. [bug] "named-checkconf -z" incorrectly rejected zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using alternate data sources for not having a "file"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option. [RT #35685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3802. [bug] Various header files were not being installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3800. [bug] A pending event on the route socket could cause an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure when shutting down named. [RT #35674]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3799. [bug] Improve named's command line error reporting.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35603]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #35659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3797. [port] netbsd: geoip support probing was broken. [RT #35642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3795. [bug] Make named-checkconf detect raw masterfiles for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hint zones and reject them. [RT #35268]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3793. [bug] zone.c:save_nsec3param() could assert when out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #35621]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3792. [func] Provide links to the alternate statistics views when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding displaying in a browser. [RT #35605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3791. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3790. [bug] Handle broken nameservers that send BADVERS in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response to unknown EDNS options. Maintain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics on BADVERS responses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3789. [bug] Null pointer dereference on rbt creation failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3788. [bug] dns_peer_getrequestsit was returning request_nsid by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.10.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3787. [bug] The code that checks whether "auto-dnssec" is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allowed was ignoring "allow-update" ACLs set at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the options or view level. [RT #29536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3786. [func] Provide more detailed error codes when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding native PKCS#11. "pkcs11-tokens" now fails robustly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than asserting when run against an HSM with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an incomplete PKCS#11 API implementation. [RT #35479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3785. [bug] Debugging code dumphex didn't accept arbitrarily long
cfa64348224b66dd1c9979b809406c4d15b1c137fielding input (only compiled with -DDEBUG). [RT #35544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3784. [bug] Using "rrset-order fixed" when it had not been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabled at compile time caused inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding results. It now works as documented, defaulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to cyclic mode. [RT #28104]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3783. [func] "tsig-keygen" is now available as an alternate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding command name for "ddns-confgen". It generates
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a TSIG key in named.conf format without comments.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35503]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3782. [func] Specifying "auto" as the salt when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc signing -nsec3param" causes named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate a 64-bit salt at random. [RT #35322]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3781. [tuning] Use adaptive mutex locks when available; this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been found to improve performance under load
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on many systems. "configure --with-locktype=standard"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding restores conventional mutex locks. [RT #32576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3780. [bug] $GENERATE handled negative numbers incorrectly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3779. [cleanup] Clarify the error message when using an option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that was not enabled at compile time. [RT #35504]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3778. [bug] Log a warning when the wrong address family is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used in "listen-on" or "listen-on-v6". [RT #17848]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3777. [bug] EDNS EXPIRE code could dump core when processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLZ queries. [RT #35493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3776. [func] "rndc -q" suppresses output from successful
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc commands. Errors are printed on stderr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21393]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3775. [bug] dlz_dlopen driver could return the wrong error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding code on API version mismatch, leading to a segfault.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3774. [func] When using "request-nsid", log the NSID value in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding printable form as well as hex. [RT #20864]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3773. [func] "host", "nslookup" and "nsupdate" now have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options to print the version number and exit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26057]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Based in part on a contribution from Tim Tessier.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20822]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3771. [cleanup] Adjusted log level for "using built-in key"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #24383]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3770. [bug] "dig +trace" could fail with an assertion when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding needed to fall back to TCP due to a truncated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response. [RT #24660]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3769. [doc] Improved documentation of "rndc signing -list".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30652]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm. [RT #34000]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3767. [func] Log explicitly when using rndc.key to configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding command channel. [RT #35316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3766. [cleanup] Fixed problems with building outside the source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tree when using native PKCS#11. [RT #35459]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3765. [bug] Fixed a bug in "rndc secroots" that could crash
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named when dumping an empty keynode. [RT #35469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3764. [bug] The dnssec-keygen/settime -S and -i options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (to set up a successor key and set the prepublication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interval) were missing from dnssec-keyfromlabel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35394]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3763. [bug] delve: Cache DNSSEC records to avoid the need to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-fetch them when restarting validation. [RT #35476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3762. [bug] Address build problems with --pkcs11-native +
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-openssl with ECDSA support. [RT #35467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3761. [bug] Address dangling reference bug in dns_keytable_add.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35471]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3760. [bug] Improve SIT with native PKCS#11 and on Windows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35433]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3759. [port] Enable delve on Windows. [RT #35441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3758. [port] Enable export library APIs on Windows. [RT #35382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3757. [port] Enable Python tools (dnssec-coverage,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-checkds) to run on Windows. [RT #34355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3756. [bug] GSSAPI Kerberos realm checking was broken in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check_config leading to spurious messages being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logged. [RT #35443]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.10.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3755. [func] Add stats counters for known EDNS options + others.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3754. [cleanup] win32: Installer now places files in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Program Files area rather than system services.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3753. [bug] allow-notify was ignoring keys. [RT #35425]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3752. [bug] Address potential REQUIRE failure if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_STYLEFLAG_COMMENTDATA is set when printing out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a rdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3751. [tuning] The default setting for the -U option (setting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the number of UDP listeners per interface) has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been adjusted to improve performance. [RT #35417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3750. [experimental] Partially implement EDNS EXPIRE option as described
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in draft-andrews-dnsext-expire-00. Retrieval of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the remaining time until expiry for slave zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EXPIRE uses an experimental option code (65002),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which is subject to change. [RT #35416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3749. [func] "dig +subnet" sends an EDNS client subnet option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing the specified address/prefix when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding querying. (Thanks to Wilmer van der Gaast.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35415]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3748. [test] Use delve to test dns_client interfaces. [RT #35383]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3747. [bug] A race condition could lead to a core dump when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding destroying a resolver fetch object. [RT #35385]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3746. [func] New "max-zone-ttl" option enforces maximum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTLs for zones. If loading a zone containing a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding higher TTL, the load fails. DDNS updates with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding higher TTLs are accepted but the TTL is truncated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: Currently supported for master zones only;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing slaves will be added.) [RT #38405]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3745. [func] "configure --with-tuning=large" adjusts various
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compiled-in constants and default settings to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding values suited to large servers with abundant
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #29538]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3744. [experimental] SIT: send and process Source Identity Tokens
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (similar to DNS Cookies by Donald Eastlake 3rd),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which are designed to help clients detect off-path
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spoofed responses and for servers to identify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding legitimate clients.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIT uses an experimental EDNS option code (65001),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which will be changed to an IANA-assigned value
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if the experiment is deemed a success.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIT can be enabled via "configure --enable-sit" (or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-developer). It is enabled by default in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Servers can be configured to send smaller responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to clients that have not identified themselves via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIT. RRL processing has also been updated;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding legitimate clients are not subject to rate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding limiting. [RT #35389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3743. [bug] delegation-only flag wasn't working in forward zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding declarations despite being documented. This is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding needed to support turning off forwarding and turning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on delegation only at the same name. [RT #35392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3742. [port] linux: libcap support: declare curval at start of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding block. [RT #35387]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3741. [func] "delve" (domain entity lookup and validation engine):
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A new tool with dig-like semantics for performing DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups, with internal DNSSEC validation, using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same resolver and validator logic as named. This
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allows easy validation of DNSSEC data in environments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with untrustworthy resolvers, and assists with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding troubleshooting of DNSSEC problems. [RT #32406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3740. [contrib] Minor fixes to configure --with-dlz-bdb,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3739. [func] Added per-zone stats counters to track TCP and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding UDP queries. [RT #35375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3737. [bug] 'rndc retransfer' could trigger a assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with inline zones. [RT #35353]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3736. [bug] nsupdate: When specifying a server by name,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fall back to alternate addresses if the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address for that name is not reachable. [RT #25784]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3735. [cleanup] Merged the libiscpk11 library into libisc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to simplify dependencies. [RT #35205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3734. [bug] Improve building with libtool. [RT #35314]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3733. [func] Improve interface scanning support. Interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding information will be automatically updated if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OS supports routing sockets (MacOS, *BSD, Linux).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use "automatic-interface-scan no;" to disable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Add "rndc scan" to trigger a scan. [RT #23027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
cfa64348224b66dd1c9979b809406c4d15b1c137fielding driver to dump core on 64-bit systems. [RT #35324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3731. [func] Added a "no-case-compress" ACL, which causes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named to use case-insensitive compression
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (disabling change #3645) for specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clients. (This is useful when dealing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with broken client implementations that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use case-sensitive name comparisons,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejecting responses that fail to match the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding capitalization of the query that was sent.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3730. [cleanup] Added "never" as a synonym for "none" when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuring key event dates in the dnssec tools.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35277]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3729. [bug] dnssec-keygen could set the publication date
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly when only the activation date was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified on the command line. [RT #35278]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3728. [doc] Expanded native-PKCS#11 documentation,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifically pkcs11: URI labels. [RT #35287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3727. [func] The isc_bitstring API is no longer used and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been removed from libisc. [RT #35284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3726. [cleanup] Clarified the error message when attempting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to configure more than 32 response-policy zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35283]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3725. [contrib] Updated zkt and nslint to newest versions,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cleaned up and rearranged the contrib
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory, and added a README.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.10.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3724. [bug] win32: Fixed a bug that prevented dig and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding host from exiting properly after completing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a UDP query. [RT #35288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3723. [cleanup] Imported keys are now handled the same way
cfa64348224b66dd1c9979b809406c4d15b1c137fielding regardless of DNSSEC algorithm. [RT #35215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3722. [bug] Using geoip ACLs in a blackhole statement
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause a segfault. [RT #35272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3721. [doc] Improved documentation of the EDNS processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enhancements introduced in change #3593. [RT #35275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3720. [bug] Address compiler warnings. [RT #35261]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3719. [bug] Address memory leak in in peer.c. [RT #35255]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding probing to see if it is possible to set dscp values
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on a per packet basis. [RT #35252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3716. [bug] The dns_request code was setting dcsp values when not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requested. [RT #35252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3715. [bug] The region and city databases could fail to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialize when using some versions of libGeoIP,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing assertion failures when named was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured to use them. [RT #35427]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3714. [test] System tests that need to test for cryptography
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support before running can now use a common
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "testcrypto.sh" script to do so. [RT #35213]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3713. [bug] Save memory by not storing "also-notify" addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in zone objects that are configured not to send
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify requests. [RT #35195]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3712. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3711. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3710. [bug] Address double dns_zone_detach when switching to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using automatic empty zones from regular zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35177]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3709. [port] Use built-in versions of strptime() and timegm()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on all platforms to avoid portability issues.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35183]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3708. [bug] Address a portentry locking issue in dispatch.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35128]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on a missing resolv.conf file and initializes the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structure as if it had been configured with:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver ::1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver 127.0.0.1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: Callers will need to be updated to treat
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_FILENOTFOUND as a qualified success or else
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they will leak memory. The following code fragment
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will work with both old and new versions without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing the behaviour of the existing code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resconf = NULL;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result = irs_resconf_load(mctx, "/etc/resolv.conf",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if (result != ISC_SUCCESS) {
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if (resconf != NULL)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding irs_resconf_destroy(&resconf);
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35194]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3706. [contrib] queryperf: Fixed a possible integer overflow when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding printing results. [RT #35182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3705. [func] "configure --enable-native-pkcs11" enables BIND
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to use the PKCS#11 API for all cryptographic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions, so that it can drive a hardware service
cfa64348224b66dd1c9979b809406c4d15b1c137fielding module directly without the need to use a modified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL as intermediary (so long as the HSM's vendor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provides a complete-enough implementation of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding PKCS#11 interface). This has been tested successfully
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the Thales nShield HSM and with SoftHSMv2 from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OpenDNSSEC project. [RT #29031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3703. [func] To improve recursive resolver performance, cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records which are still being requested by clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can now be automatically refreshed from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authoritative server before they expire, reducing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or eliminating the time window in which no answer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is available in the cache. See the "prefetch" option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for more details. [RT #35041]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3702. [func] 'dnssec-coverage -l' option specifies a length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of time to check for coverage; events further into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the future are ignored. 'dnssec-coverage -z'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checks only ZSK events, and 'dnssec-coverage -k'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checks only KSK events. (Thanks to Peter Palfrader.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35168]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3701. [func] named-checkconf can now obscure shared secrets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when printing by specifying '-x'. [RT #34465]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3700. [func] Allow access to subgroups of XML statistics via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding special URLs http://<server>:<port>/xml/v3/server,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /zones, /net, /tasks, /mem, and /status. [RT #35115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3699. [bug] Improvements to statistics channel XSL stylesheet:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the stylesheet can now be cached by the browser;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section headers are omitted from the stats display
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when there is no data in those sections to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding displayed; counters are now right-justified for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding easier readability. [RT #35117]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3698. [cleanup] Replaced all uses of memcpy() with memmove().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3697. [bug] Handle "." as a search list element when IDN support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is enabled. [RT #35133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3696. [bug] dig failed to handle AXFR style IXFR responses which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding span multiple messages. [RT #35137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3695. [bug] Address a possible race in dispatch.c. [RT #35107]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3694. [bug] Warn when a key-directory is configured for a zone,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but does not exist or is not a directory. [RT #35108]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3693. [security] memcpy was incorrectly called with overlapping
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ranges resulting in malformed names being generated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on some platforms. This could cause INSIST failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when serving NSEC3 signed zones (CVE-2014-0591).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was no data at the node. [RT #35080]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3691. [contrib] Address null pointer dereference in LDAP and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding MySQL DLZ modules.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3690. [bug] Iterative responses could be missed when the source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding port for an upstream query was the same as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listener port (53). [RT #34925]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3689. [bug] Fixed a bug causing an insecure delegation from one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding static-stub zone to another to fail with a broken
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trust chain. [RT #35081]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3688. [bug] loadnode could return a freed node on out of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3687. [bug] Address null pointer dereference in zone_xfrdone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35042]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3686. [func] "dnssec-signzone -Q" drops signatures from keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that are still published but no longer active.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3685. [bug] "rndc refresh" didn't work correctly with slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones using inline-signing. [RT #35105]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3684. [bug] The list of included files would grow on reload.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3683. [cleanup] Add a more detailed "not found" message to rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands which specify a zone name. [RT #35059]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3682. [bug] Correct the behavior of rndc retransfer to allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing slave zones to retain NSEC3 parameters
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of reverting to NSEC. [RT #34745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3681. [port] Update the Windows build system to support feature
cfa64348224b66dd1c9979b809406c4d15b1c137fielding selection and WIN64 builds. This is a work in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding progress. [RT #34160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3680. [bug] Ensure buffer space is available in "rndc zonestatus".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #35084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3679. [bug] dig could fail to clean up TCP sockets still
cfa64348224b66dd1c9979b809406c4d15b1c137fielding waiting on connect(). [RT #35074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3678. [port] Update config.guess and config.sub. [RT #35060]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding times. [RT #35073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3676. [bug] "named-checkconf -z" now checks zones of type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hint and redirect as well as master. [RT #35046]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3675. [misc] Provide a place for third parties to add version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding information for their extensions in the version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file by setting the EXTENSIONS variable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.10.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3673. [func] New "in-view" zone option allows direct sharing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of zones between views. [RT #32968]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3672. [func] Local address can now be specified when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_client API. [RT #34811]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3671. [bug] Don't allow dnssec-importkey overwrite a existing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-imported private key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3670. [bug] Address read after free in server side of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lwres_getrrsetbyname. [RT #29075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34993]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3667. [test] dig: add support to keep the TCP socket open between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successive queries (+[no]keepopen). [RT #34918]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3666. [func] Add a tool, named-rrchecker, for checking the syntax
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of individual resource records. This tool is intended
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be called by provisioning systems so that the front
cfa64348224b66dd1c9979b809406c4d15b1c137fielding end does not need to be upgraded to support new DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record types. [RT #34778]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3665. [bug] Failure to release lock on error in receive_secure_db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding locking and other bugs. [RT #34855]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3663. [bug] Address bugs in dns_rdata_fromstruct and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3661. [bug] Address lock order reversal deadlock with inline zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34856]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3659. [port] solaris: don't add explicit dependencies/rules for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding python programs as make won't use the implicit rules.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34835]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3658. [port] linux: Address platform specific compilation issue
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when libcap-devel is installed. [RT #34838]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3657. [port] Some readline clones don't accept NULL pointers when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling add_history. [RT #34842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3656. [security] Treat an all zero netmask as invalid when generating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the localnets acl. (The prior behavior could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow unexpected matches when using some versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of Winsock: CVE-2013-6320.) [RT #34687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3655. [cleanup] Simplify TCP message processing when requesting a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfer. [RT #34825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3654. [bug] Address race condition with manual notify requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3653. [func] Create delegations for all "children" of empty zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding except "forward first". [RT #34826]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3652. [bug] Address bug with rpz-drop policy. [RT #34816]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3651. [tuning] Adjust when a master server is deemed unreachable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3650. [tuning] Use separate rate limiting queues for refresh and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify requests. [RT #30589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3649. [cleanup] Include a comment in .nzf files, giving the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the associated view. [RT #34765]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3648. [test] Updated the ATF test framework to version 0.17.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25627]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3647. [bug] Address a race condition when shutting down a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3646. [bug] Journal filename string could be set incorrectly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing garbage in log messages. [RT #34738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3645. [protocol] Use case sensitive compression when responding to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries. [RT #34737]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3644. [protocol] Check that EDNS subnet client options are well formed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34718]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3643. [doc] Clarify RRL "slip" documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3642. [func] Allow externally generated DNSKEY to be imported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into the DNSKEY management framework. A new tool
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-importkey is used to do this. [RT #34698]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3641. [bug] Handle changes to sig-validity-interval settings
cfa64348224b66dd1c9979b809406c4d15b1c137fielding better. [RT #34625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3640. [bug] ndots was not being checked when searching. Only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding continue searching on NXDOMAIN responses. Add the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ability to specify ndots to nslookup. [RT #34711]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a key zone. [RT #34238]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding encountered. [RT #34668]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3637. [bug] 'allow-query-on' was checking the source address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than the destination address. [RT #34590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3636. [bug] Automatic empty zones now behave better with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forward only "zones" beneath them. [RT #34583]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3635. [bug] Signatures were not being removed from a zone with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only KSK keys for a algorithm. [RT #34439]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3634. [func] Report build-id in rndc status. Report build-id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when building from a git repository. [RT #20422]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3633. [cleanup] Refactor OPT processing in named to make it easier
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to support new EDNS options. [RT #34414]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3632. [bug] Signature from newly inactive keys were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removed. [RT #32178]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3631. [bug] Remove spurious warning about missing signatures when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding qtype is SIG. [RT #34600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3629. [func] Allow the printing of cryptographic fields in DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records by dig to be suppressed (dig +nocrypto).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3628. [func] Report DNSKEY key id's when dumping the cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #34533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3626. [func] dig: NSID output now easier to read. [RT #21160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3625. [bug] Don't send notify messages to machines outside of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding test setup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3624. [bug] Look for 'json_object_new_int64' when looking for a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the json library. [RT #34449]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3623. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3622. [tuning] Eliminate an unnecessary lock when incrementing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache statistics. [RT #34339]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3621. [security] Incorrect bounds checking on private type 'keydata'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can lead to a remotely triggerable REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (CVE-2013-4854). [RT #34238]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3620. [func] Added "rpz-client-ip" policy triggers, enabling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ responses to be configured on the basis of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the client IP address; this can be used, for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding example, to blacklist misbehaving recursive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or stub resolvers. [RT #33605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3618. [func] "rndc reload" now checks modification times of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include files as well as master files to determine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding whether to skip reloading a zone. [RT #33936]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3617. [bug] Named was failing to answer queries during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc reload" [RT #34098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3616. [bug] Change #3613 was incomplete. [RT #34177]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3615. [cleanup] "configure" now finishes by printing a summary
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of optional BIND features and whether they are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding active or inactive. ("configure --enable-full-report"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increases the verbosity of the summary.) [RT #31777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3614. [port] Check for <linux/types.h>. [RT #34162]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3613. [bug] named could crash when deleting inline-signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones with "rndc delzone". [RT #34066]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3611. [bug] Improved resistance to a theoretical authentication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attack based on differential timing. [RT #33939]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3610. [cleanup] win32: Some executables had been omitted from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding installer. [RT #34116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3609. [bug] Corrected a possible deadlock in applications using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the export version of the isc_app API. [RT #33967]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3608. [port] win32: added todos.pl script to ensure all text files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the win32 build depends on are converted to DOS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding newline format. [RT #22067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message. [RT #34045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3606. [func] "rndc flushtree" now flushes matching
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records in the address database and bad cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the DNS cache. (Previously only the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS cache was flushed.) [RT #33970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3605. [port] win32: Addressed several compatibility issues
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with newer versions of Visual Studio. [RT #33916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3604. [bug] Fixed a compile-time error when building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding JSON but not XML. [RT #33959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3603. [bug] Install <isc/stat.h>. [RT #33956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding integrate with named and serve DNS data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Contributed by John Eaglesham of Yahoo.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3601. [bug] Added to PKCS#11 openssl patches a value len
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attribute in DH derive key. [RT #33928]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3600. [cleanup] dig: Fixed a typo in the warning output when receiving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an oversized response. [RT #33910]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3599. [tuning] Check for pointer equivalence in name comparisons.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18125]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3598. [cleanup] Improved portability of map file code. [RT #33820]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3597. [bug] Ensure automatic-resigning heaps are reconstructed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when loading zones in map format. [RT #33381]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3596. [port] Updated win32 build documentation, added
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-verify. [RT #22067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3595. [port] win32: Fix build problems introduced by change #3550.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33807]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3594. [maint] Update config.guess and config.sub. [RT #33816]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3593. [func] Update EDNS processing to better track remote server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding capabilities. [RT #30655]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3592. [doc] Moved documentation of rndc command options to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc man page. [RT #33506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3591. [func] Use CRC-64 to detect map file corruption at load
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #33746]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3590. [bug] When using RRL on recursive servers, defer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rate-limiting until after recursion is complete;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding also, use correct rcode for slipped NXDOMAIN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #33604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3589. [func] Report serial numbers in when starting zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Report accepted NOTIFY requests including serial.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3588. [bug] dig: addressed a memory leak in the sigchase code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that could cause a shutdown crash. [RT #33733]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3587. [func] 'named -g' now checks the logging configuration but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding does not use it. [RT #33473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3585. [func] "rndc delzone -clean" option removes zone files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when deleting a zone. [RT #33570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3584. [security] Caching data from an incompletely signed zone could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an assertion failure in resolver.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (CVE-2013-3919). [RT #33690]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3583. [bug] Address memory leak in GSS-API processing [RT #33574]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3582. [bug] Silence false positive warning regarding missing file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directive for inline slave zones. [RT #33662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3580. [bug] Addressed a possible race in acache.c [RT #33602]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3579. [maint] Updates to PKCS#11 openssl patches, supporting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33571]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3577. [bug] Handle zero TTL values better. [RT #33411]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3576. [bug] Address a shutdown race when validating. [RT #33573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3575. [func] Changed the logging category for RRL events from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'queries' to 'query-errors'. [RT #33540]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3574. [doc] The 'hostname' keyword was missing from server-id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding description in the named.conf man page. [RT #33476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone names containing punctuation marks and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nonstandard characters. [RT #33419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3572. [func] Threads are now enabled by default on most
cfa64348224b66dd1c9979b809406c4d15b1c137fielding operating systems. [RT #25483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3571. [bug] Address race condition in dns_client_startresolve().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33234]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3570. [bug] Check internal pointers are valid when loading map
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #33403]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding module, and added multithread support. [RT #33394]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3568. [cleanup] Add a product description line to the version file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be reported by named -v/-V. [RT #33366]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3567. [bug] Silence clang static analyzer warnings. [RT #33365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3566. [func] Log when forwarding updates to master. [RT #33240]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3565. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3564. [bug] Improved handling of corrupted map files. [RT #33380]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3562. [func] Update map file header format to include a SHA-1 hash
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the database content, so that corrupted map files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be rejected at load time. [RT #32459]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or NOTIMP. Adjust usage message. [RT #33363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3560. [bug] isc-config.sh did not honor includedir and libdir
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when set via configure. [RT #33345]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3559. [func] Check that both forms of Sender Policy Framework
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records exist or do not exist. [RT #33355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3557. [bug] Reloading redirect zones was broken. [RT #33292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3555. [bug] Address theoretical race conditions in acache.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (change #3553 was incomplete). [RT #33252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3554. [bug] RRL failed to correctly rate-limit upward
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referrals and failed to count dropped error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses in the statistics. [RT #33225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3553. [bug] Address suspected double free in acache. [RT #33252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3552. [bug] Wrong getopt option string for 'nsupdate -r'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3550. [func] Unified the internal and export versions of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND libraries, allowing external clients to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the same libraries as BIND. [RT #33131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3549. [doc] Documentation for "request-nsid" was missing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3548. [bug] The NSID request code in resolver.c was broken
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in invalid EDNS options being sent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3547. [bug] Some malformed unknown rdata records were not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding detected and rejected. [RT #33129]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3546. [func] Add EUI48 and EUI64 types. [RT #33082]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3545. [bug] RRL slip behavior was incorrect when set to 1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #33111]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3544. [contrib] check5011.pl: Script to report the status of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding managed keys as recorded in managed-keys.bind.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Contributed by Tony Finch <dot@dotat.at>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3543. [bug] Update socket structure before attaching to socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding manager after accept. [RT #33084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3542. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3541. [bug] Parts of libdns were not properly initialized when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding built in libexport mode. [RT #33028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3540. [test] libt_api: t_info and t_assert were not thread safe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3539. [port] win32: timestamp format didn't match other platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3538. [test] Running "make test" now requires loopback interfaces
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be set up. [RT #32452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3537. [tuning] Slave zones, when updated, now send NOTIFY messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to peers before being dumped to disk rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after. [RT #27242]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3536. [func] Add support for setting Differentiated Services Code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Point (DSCP) values in named. Most configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options which take a "port" option (e.g.,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listen-on, forwarders, also-notify, masters,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify-source, etc) can now also take a "dscp"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option specifying a code point for use with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding outgoing traffic, if supported by the underlying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OS. [RT #27596]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3535. [bug] Minor win32 cleanups. [RT #32962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3534. [bug] Extra text after an embedded NULL was ignored when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parsing zone files. [RT #32699]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3531. [bug] win32: A uninitialized value could be returned on out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #32960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3529. [func] Named now listens on both IPv4 and IPv6 interfaces
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by default. Named previously only listened on IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces by default unless named was running in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 only mode. [RT #32945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3528. [func] New "dnssec-coverage" command scans the timing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding metadata for a set of DNSSEC keys and reports if a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lapse in signing coverage has been scheduled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inadvertently. (Note: This tool depends on python;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it will not be built or installed on systems that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding do not have a python interpreter.) [RT #28098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3527. [compat] Add a URI to allow applications to explicitly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding request a particular XML schema from the statistics
cfa64348224b66dd1c9979b809406c4d15b1c137fielding channel, returning 404 if not supported. [RT #32481]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3526. [cleanup] Set up dependencies for unit tests correctly during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build. [RT #32803]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3525. [func] Support for additional signing algorithms in rndc:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The -A option to rndc-confgen can be used to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding select the algorithm for the generated key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (The default is still hmac-md5; this may
cfa64348224b66dd1c9979b809406c4d15b1c137fielding change in a future release.) [RT #20363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3524. [func] Added an alternate statistics channel in JSON format,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when the server is built with the json-c library:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding http://[address]:[port]/json. [RT #32630]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3523. [contrib] Ported filesystem and ldap DLZ drivers to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamically-loadable modules, and added the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "wildcard" module based on a contribution from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3522. [bug] DLZ lookups could fail to return SERVFAIL when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they ought to. [RT #32685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3520. [bug] 'mctx' was not being referenced counted in some places
cfa64348224b66dd1c9979b809406c4d15b1c137fielding where it should have been. [RT #32794]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3519. [func] Full replay protection via four-way handshake is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now mandatory for rndc clients. Very old versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of rndc will no longer work. [RT #32798]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding so that all dns_rrl_rtype_t enum values fit regardless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of whether it is teated as signed or unsigned by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the compiler. [RT #32792]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3516. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3515. [port] '%T' is not portable in strftime(). [RT #32763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3514. [bug] The ranges for valid key sizes in ddns-confgen and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc-confgen were too constrained. Keys up to 512
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bits are now allowed for most algorithms, and up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 1024 bits for hmac-sha384 and hmac-sha512.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3513. [func] "dig -u" prints times in microseconds rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding milliseconds. [RT #32704]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3512. [func] "rndc validation check" reports the current status
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of DNSSEC validation. [RT #21397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3511. [doc] Improve documentation of redirect zones. [RT #32756]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3510. [func] "rndc status" and XML statistics channel now report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server start and reconfiguration times. [RT #21048]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3509. [cleanup] Added a product line to version file to allow for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding easy naming of different products (BIND
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vs BIND ESV, for example). [RT #32755]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3508. [contrib] queryperf was incorrectly rejecting the -T option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3507. [bug] Statistics channel XSL had a glitch when attempting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to chart query data before any queries had been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding received. [RT #32620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3506. [func] When setting "max-cache-size" and "max-acache-size",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the keyword "unlimited" is no longer defined as equal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 4 gigabytes (except on 32-bit platforms); it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding means literally unlimited. [RT #32358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3505. [bug] When setting "max-cache-size" and "max-acache-size",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding larger values than 4 gigabytes could not be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding explicitly, though larger sizes were available
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when setting cache size to 0. This has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corrected; the full range is now available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3504. [func] Add support for ACLs based on geographic location,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using MaxMind GeoIP databases. Based on code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contributed by Ken Brownfield <kb@slide.com>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30681]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3503. [doc] Clarify size_spec syntax. [RT #32449]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3502. [func] zone-statistics: "no" is now a synonym for "none",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of "terse". [RT #29165]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3501. [func] zone-statistics now takes three options: full,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding terse, and none. "yes" and "no" are retained as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding synonyms for full and terse, respectively. [RT #29165]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3500. [security] Support NAPTR regular expression validation on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all platforms without using libregex, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be vulnerable to memory exhaustion attack
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (CVE-2013-2266). [RT #32688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3499. [doc] Corrected ARM documentation of built-in zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3498. [bug] zone statistics for zones which matched a potential
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty zone could have their zone-statistics setting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overridden.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3497. [func] When deleting a slave/stub zone using 'rndc delzone'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding report the files that were being used so they can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be cleaned up if desired. [RT #27899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3496. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3495. [func] Support multiple response-policy zones (up to 32),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while improving RPZ performance. "response-policy"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding syntax now includes a "min-ns-dots" clause, with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default 1, to exclude top-level domains from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSIP and NSDNAME checking. --enable-rpz-nsip and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-rpz-nsdname are now the default. [RT #32251]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3494. [func] DNS RRL: Blunt the impact of DNS reflection and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding amplification attacks by rate-limiting substantially-
cfa64348224b66dd1c9979b809406c4d15b1c137fielding identical responses. [RT #28130]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contributed by Mark Goldfinch. [RT #32549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3492. [bug] Fixed a regression in zone loading performance
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to lock contention. [RT #30399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3491. [bug] Slave zones using inline-signing must specify a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file name. [RT #31946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3490. [bug] When logging RDATA during update, truncate if it's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too long. [RT #32365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dlzcreate() failed to properly initialize
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dlzdb.link. When cloning a rdataset do not copy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the link contents. [RT #32651]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3488. [bug] Use after free error with DH generated keys. [RT #32649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3487. [bug] Change 3444 was not complete. There was a additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding place where the NOQNAME proof needed to be saved.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3486. [bug] named could crash when using TKEY-negotiated keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that had been deleted and then recreated. [RT #32506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3484. [bug] Some statistics were incorrectly rendered in XML.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3483. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3482. [func] dig +nssearch now prints name servers that don't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have address records (missing AAAA or A, or the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding doesn't exist). [RT #29348]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3481. [cleanup] Removed use of const const in atf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3480. [bug] Silence logging noise when setting up zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics. [RT #32525]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3479. [bug] Address potential memory leaks in gssapi support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding code. [RT #32405]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3478. [port] Fix a build failure in strict C99 environments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32475]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3477. [func] Expand logging when adding records via DDNS update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3476. [bug] "rndc zonestatus" could report a spurious "not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found" error on inline-signing zones. [RT #29226]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3475. [cleanup] Changed name of 'map' zone file format (previously
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'fast'). [RT #32458]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3474. [bug] nsupdate could assert when the local and remote
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address families didn't match. [RT #22897]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3473. [bug] dnssec-signzone/verify could incorrectly report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error condition due to an empty node above an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding opt-out delegation lacking an NSEC3. [RT #32072]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3472. [bug] The active-connections counter in the socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics could underflow. [RT #31747]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3471. [bug] The number of UDP dispatches now defaults to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the number of CPUs even if -n has been set to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a higher value. [RT #30964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3470. [bug] Slave zones could fail to dump when successfully
cfa64348224b66dd1c9979b809406c4d15b1c137fielding refreshing after an initial failure. [RT #31276]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3469. [bug] Handle DLZ lookup failures more gracefully. Improve
cfa64348224b66dd1c9979b809406c4d15b1c137fielding backward compatibility between versions of DLZ dlopen
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API. [RT #32275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3468. [security] RPZ rules to generate A records (but not AAAA records)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure when used in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conjunction with DNS64 (CVE-2012-5689). [RT #32141]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3467. [bug] Added checks in dnssec-keygen and dnssec-settime
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to check for delete date < inactive date. [RT #31719]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in DLZ example driver. [RT #32275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3465. [bug] Handle isolated reserved ports. [RT #31778]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3464. [maint] Updates to PKCS#11 openssl patches, supporting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3462. [doc] Clarify server selection behavior of dig when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding -4 or -6 options. [RT #32181]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3461. [bug] Negative responses could incorrectly have AD=1
f8daf64667c8f58631844cb460099333eabfe68bgregames set. [RT #32237]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3460. [bug] Only link against readline where needed. [RT #29810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3459. [func] Added -J option to named-checkzone/named-compilezone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to specify the path to the journal file. [RT #30958]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3458. [bug] Return FORMERR when presented with a overly long
cfa64348224b66dd1c9979b809406c4d15b1c137fielding domain named in a request. [RT #29682]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3456. [port] g++47: ATF failed to compile. [RT #32012]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3455. [contrib] queryperf: fix getopt option list. [RT #32338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3454. [port] sparc64: improve atomic support. [RT #25182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed. [RT #31960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3452. [bug] Accept duplicate singleton records. [RT #32329]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3451. [port] Increase per thread stack size from 64K to 1M.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3450. [bug] Stop logfileconfig system test spam system logs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32315]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3449. [bug] gen.c: use the pre-processor to construct format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding strings so that compiler can perform sanity checks;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check the snprintf results. [RT #17576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3448. [bug] The allow-query-on ACL was not processed correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29486]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3447. [port] Add support for libxml2-2.9.x [RT #32231]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3446. [port] win32: Add source ID (see change #3400) to build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31683]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3445. [bug] Warn about zone files with blank owner names
cfa64348224b66dd1c9979b809406c4d15b1c137fielding immediately after $ORIGIN directives. [RT #31848]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3444. [bug] The NOQNAME proof was not being returned from cached
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insecure responses. [RT #21409]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejected when generating keys. [RT #31927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3442. [port] Net::DNS 0.69 introduced a non backwards compatible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding change. [RT #32216]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3440. [bug] Reorder get_key_struct to not trigger a assertion when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cleaning up due to out of memory error. [RT #32131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3439. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
cfa64348224b66dd1c9979b809406c4d15b1c137fielding buffers with constant data. [RT #32064]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3436. [bug] Check malloc/calloc return values. [RT #32088]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3435. [bug] Cross compilation support in configure was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #32078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3434. [bug] Pass client info to the DLZ findzone() entry
cfa64348224b66dd1c9979b809406c4d15b1c137fielding point in addition to lookup(). This makes it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible for a database to answer differently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding whether it's authoritative for a name depending
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on the address of the client. [RT #31775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3433. [bug] dlz_findzone() did not correctly handle
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_NOMORE. [RT #31172]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3432. [func] Multiple DLZ databases can now be configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLZ databases are searched in the order configured,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless set to "search no", in which case a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone can be configured to be retrieved from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particular DLZ database by using a "dlz <name>"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in the zone statement. DLZ databases can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support type "master" and "redirect" zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3431. [bug] ddns-confgen: Some valid key algorithms were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not accepted. [RT #31927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3430. [bug] win32: isc_time_formatISO8601 was missing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'T' between the date and time. [RT #32044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3429. [bug] dns_zone_getserial2 could a return success without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding returning a valid serial. [RT #32007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3428. [cleanup] dig: Add timezone to date output. [RT #2269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3427. [bug] dig +trace incorrectly displayed name server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses instead of names. [RT #31641]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3426. [bug] dnssec-checkds: Clearer output when records are not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #31968]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3425. [bug] "acacheentry" reference counting was broken resulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in use after free. [RT #31908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3424. [func] dnssec-dsfromkey now emits the hash without spaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3423. [bug] "rndc signing -nsec3param" didn't accept the full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding range of possible values. Address portability issues.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3422. [bug] Added a clear error message for when the SOA does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding match the referral. [RT #31281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3421. [bug] Named loops when re-signing if all keys are offline.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3420. [bug] Address VPATH compilation issues. [RT #31879]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3419. [bug] Memory leak on validation cancel. [RT #31869]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3418. [func] New XML schema (version 3.0) for the statistics channel
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adds query type statistics at the zone level, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding flattens the XML tree and uses compressed format to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding optimize parsing. Includes new XSL that permits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding charting via the Google Charts API on browsers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support javascript in XSL. The old XML schema has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecated. [RT #30023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3417. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3416. [bug] Named could die on shutdown if running with 128 UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dispatches per interface. [RT #31743]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3415. [bug] named could die with a REQUIRE failure if a validation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was canceled. [RT #31804]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3414. [bug] Address locking issues found by Coverity. [RT #31626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3413. [func] Record the number of DNS64 AAAA RRsets that have been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding synthesized. [RT #27636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3412. [bug] Copy timeval structure from control message data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to UDP. [RT #31690]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3410. [bug] Addressed Coverity warnings. [RT #31626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from X.509 certificates, for use with DANE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (DNS-based Authentication of Named Entities).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3408. [bug] Some DNSSEC-related options (update-check-ksk,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are now legal in slave zones as long as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing is in use. [RT #31078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3407. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3406. [bug] mem.c: Fix compilation errors when building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3405. [bug] Handle time going backwards in acache. [RT #31253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3404. [bug] dnssec-signzone: When re-signing a zone, remove
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIG and NSEC records from nodes that used to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in-zone but are now below a zone cut. [RT #31556]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3402. [test] The IPv6 interface numbers used for system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tests were incorrect on some platforms. [RT #25085]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3401. [bug] Addressed Coverity warnings. [RT #31484]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3400. [cleanup] "named -V" can now report a source ID string, defined
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the "srcid" file in the build tree and normally set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the most recent git hash. [RT #31494]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3399. [port] netbsd: rename 'bool' parameter to avoid namespace
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clash. [RT #31515]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3398. [bug] SOA parameters were not being updated with inline
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signed zones if the zone was modified while the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server was offline. [RT #29272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3396. [bug] OPT records were incorrectly removed from signed,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding truncated responses. [RT #31439]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3394. [bug] Adjust 'successfully validated after lower casing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signer' log level and category. [RT #31414]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3393. [bug] 'host -C' could core dump if REFUSED was received.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31381]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3392. [func] Keep statistics on REFUSED responses. [RT #31412]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #31262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3390. [bug] Silence clang compiler warnings. [RT #30417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3388. [bug] Fixed several Coverity warnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: This change includes a fix for a bug that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was subsequently determined to be an exploitable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding security vulnerability, CVE-2012-5688: named could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding die on specific queries with dns64 enabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30996]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3387. [func] DS digest can be disabled at runtime with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding disable-ds-digests. [RT #21581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3386. [bug] Address locking violation when generating new NSEC /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3 chains. [RT #31224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3385. [bug] named-checkconf didn't detect missing master lists
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in also-notify clauses. [RT #30810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3384. [bug] Improved logging of crypto errors. [RT #30963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3383. [security] A certain combination of records in the RBT could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause named to hang while populating the additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section of a response. [RT #31090]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3382. [bug] SOA query from slave used use-v6-udp-ports range,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if set, regardless of the address family in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24173]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3381. [contrib] Update queryperf to support more RR types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30762]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3380. [bug] named could die if a nonexistent master list was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referenced in a also-notify. [RT #31004]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3379. [bug] isc_interval_zero and isc_time_epoch should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "const (type)* const". [RT #31069]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3378. [bug] Handle missing 'managed-keys-directory' better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3377. [bug] Removed spurious newline from NSEC3 multiline
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output. [RT #31044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3376. [bug] Lack of EDNS support was being recorded without a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful response. [RT #30811]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3374. [bug] isc_parse_uint32 failed to return a range error on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems with 64 bit longs. [RT #30232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3373. [bug] win32: open raw files in binary mode. [RT #30944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3372. [bug] Silence spurious "deleted from unreachable cache"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #30501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3371. [bug] AD=1 should behave like DO=1 when deciding whether to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding add NS RRsets to the additional section or not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3370. [bug] Address use after free while shutting down. [RT #30241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3369. [bug] nsupdate terminated unexpectedly in interactive mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if built with readline support. [RT #29550]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not C++ safe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3367. [bug] dns_dnsseckey_create() result was not being checked.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3366. [bug] Fixed Read-After-Write dependency violation for IA64
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic operations. [RT #25181]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3365. [bug] Removed spurious newlines from log messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3364. [security] Named could die on specially crafted record.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3363. [bug] Need to allow "forward" and "fowarders" options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in static-stub zones; this had been overlooked.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3362. [bug] Setting some option values to 0 in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure on startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27730]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3361. [bug] "rndc signing -nsec3param" didn't work correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when salt was set to '-' (no salt). [RT #30099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3360. [bug] 'host -w' could die. [RT #18723]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3359. [bug] An improperly-formed TSIG secret could cause a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory leak. [RT #30607]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3358. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3357. [port] Add support for libxml2-2.8.x [RT #30440]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding approaching their expiry, so they don't remain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in caches after expiry. [RT #26429]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3355. [port] Use more portable awk in verify system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3354. [func] Improve OpenSSL error logging. [RT #29932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3353. [bug] Use a single task for task exclusive operations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29872]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3352. [bug] Ensure that learned server attributes timeout of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adb cache. [RT #29856]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory debugging flags are set. [RT #30243]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3350. [bug] Memory read overrun in isc___mem_reallocate if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_MEM_DEBUGCTX memory debugging flag is set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30240]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3349. [bug] Change #3345 was incomplete. [RT #30233]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3348. [bug] Prevent RRSIG data from being cached if a negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record matching the covering type exists at a higher
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trust level. Such data already can't be retrieved from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the cache since change 3218 -- this prevents it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being inserted into the cache as well. [RT #26809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3347. [bug] dnssec-settime: Issue a warning when writing a new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding private key file would cause a change in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding permissions of the existing file. [RT #27724]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3346. [security] Bad-cache data could be used before it was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialized, causing an assert. [RT #30025]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3345. [bug] Addressed race condition when removing the last item
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or inserting the first item in an ISC_QUEUE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29539]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3344. [func] New "dnssec-checkds" command checks a zone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding determine which DS records should be published
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the parent zone, or which DLV records should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding published in a DLV zone, and queries the DNS to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ensure that it exists. (Note: This tool depends
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on python; it will not be built or installed on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that do not have a python interpreter.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3343. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3342. [bug] Change #3314 broke saving of stub zones to disk
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in excessive cpu usage in some cases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29952]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3341. [func] New "dnssec-verify" command checks a signed zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to ensure correctness of signatures and of NSEC/NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chains. [RT #23673]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3340. [func] Added new 'map' zone file format, which is an image
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a zone database that can be loaded directly into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory via mmap(), allowing much faster zone loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: Because of pointer sizes and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding considerations, this file format is platform-dependent;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'map' zone files cannot always be transferred from one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server to another.) [RT #25419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3339. [func] Allow the maximum supported rsa exponent size to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified: "max-rsa-exponent-size <value>;" [RT #29228]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3338. [bug] Address race condition in units tests: asyncload_zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and asyncload_zt. [RT #26100]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3337. [bug] Change #3294 broke support for the multiple keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in controls. [RT #29694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3336. [func] Maintain statistics for RRsets tagged as "stale".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3335. [func] nslookup: return a nonzero exit code when unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to get an answer. [RT #29492]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3334. [bug] Hold a zone table reference while performing a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding asynchronous load of a zone. [RT #28326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3333. [bug] Setting resolver-query-timeout too low can cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named to not recover if it loses connectivity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3331. [security] dns_rdataslab_fromrdataset could produce bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataslabs. [RT #29644]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3330. [func] Fix missing signatures on NOERROR results despite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ rewriting. Also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add optional "recursive-only yes|no" to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response-policy statement
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add optional "max-policy-ttl" to the response-policy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement to limit the false data that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "recursive-only no" can introduce into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolvers' caches
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add a RPZ performance test to bin/tests/system/rpz
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when queryperf is available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - the encoding of PASSTHRU action to "rpz-passthru".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (The old encoding is still accepted.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26172]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3329. [bug] Handle RRSIG signer-name case consistently: We
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate RRSIG records with the signer-name in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lower case. We accept them with any case, but if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they fail to validate, we try again in lower case.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3328. [bug] Fixed inconsistent data checking in dst_parse.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29401]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 'filter-aaaa-on-v4' but applies to IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connections. (Use "configure --enable-filter-aaaa"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to enable this option.) [RT #27308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3326. [func] Added task list statistics: task model, worker
cfa64348224b66dd1c9979b809406c4d15b1c137fielding threads, quantum, tasks running, tasks ready.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3325. [func] Report cache statistics: memory use, number of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nodes, number of hash buckets, hit and miss counts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3324. [test] Add better tests for ADB stats [RT #27057]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3323. [func] Report the number of buckets the resolver is using.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3322. [func] Monitor the number of active TCP and UDP dispatches.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27055]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3321. [func] Monitor the number of recursive fetches and the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of open sockets, and report these values in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the statistics channel. [RT #27054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3320. [func] Added support for monitoring of recursing client
cfa64348224b66dd1c9979b809406c4d15b1c137fielding count. [RT #27009]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3319. [func] Added support for monitoring of ADB entry count and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hash size. [RT #27057]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3318. [tuning] Reduce the amount of work performed while holding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bucket lock when finished with a fetch context.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29239]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3316. [tuning] Improved locking performance when recursing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3315. [tuning] Use multiple dispatch objects for sending upstream
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries; this can improve performance on busy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiprocessor systems by reducing lock contention.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3314. [bug] The masters list could be updated while stub_callback
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or refresh_callback were using it. [RT #26732]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3313. [protocol] Add TLSA record type. [RT #28989]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27631]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3311. [bug] Abort the zone dump if zone->db is NULL in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone.c:zone_gotwritehandle. [RT #29028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3310. [test] Increase table size for mutex profiling. [RT #28809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3309. [bug] resolver.c:fctx_finddone() was not thread safe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3308. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3305. [func] Add wire format lookup method to sdb. [RT #28563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28571]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3303. [bug] named could die when reloading. [RT #28606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3302. [bug] dns_dnssec_findmatchingkeys could fail to find
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys if the zone name contained character that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding required special mappings. [RT #28600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3301. [contrib] Update queryperf to build on darwin. Add -R flag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for non-recursive queries. [RT #28565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3300. [bug] Named could die if gssapi was enabled in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but was not compiled in. [RT #28338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3299. [bug] Make SDB handle errors from database drivers better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3298. [bug] Named could dereference a NULL pointer in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zmgr_start_xfrin_ifquota if the zone was being removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3297. [bug] Named could die on a malformed master file. [RT #28467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3296. [bug] Named could die with a INSIST failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding client.c:exit_check. [RT #28346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3295. [bug] Adjust isc_time_secondsastimet range check to be more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding portable. [RT # 26542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #28265]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3293. [func] nsupdate: list supported type. [RT #28261]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3292. [func] Log messages in the axfr stream at debug 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3291. [port] Fixed a build error on systems without ENOTSUP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28200]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3288. [bug] dlz_destroy() function wasn't correctly registered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the DLZ dlopen driver. [RT #28056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3286. [bug] Managed key maintenance timer could fail to start
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after 'rndc reconfig'. [RT #26786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3285. [bug] val-frdataset was incorrectly disassociated in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proveunsecure after calling startfinddlvsep.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27928]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3284. [bug] Address race conditions with the handling of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3283. [bug] Raw zones with with more than 512 records in a RRset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to load. [RT #27863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3282. [bug] Restrict the TTL of NS RRset to no more than that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the old NS RRset when replacing it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27792] [RT #27884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3281. [bug] SOA refresh queries could be treated as cancelled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding despite succeeding over the loopback interface.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27782]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3280. [bug] Potential double free of a rdataset on out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with DNS64. [RT #27762]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3279. [bug] Hold a internal reference to the zone while performing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a asynchronous load. Address potential memory leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if the asynchronous is cancelled. [RT #27750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3278. [bug] Make sure automatic key maintenance is started
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when "auto-dnssec maintain" is turned on during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc reconfig". [RT #26805]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3276. [bug] win32: ns_os_openfile failed to return NULL on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding safe_open failure. [RT #27696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option had been misspelled as '-clear'. (To avoid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding future confusion, both options now work.) [RT #27173]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3274. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3273. [bug] AAAA responses could be returned in the additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section even when filter-aaaa-on-v4 was in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3272. [func] New "rndc zonestatus" command prints information
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about the specified zone. [RT #21671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3271. [port] darwin: mksymtbl is not always stable, loop several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding times before giving up. mksymtbl was using non
cfa64348224b66dd1c9979b809406c4d15b1c137fielding portable perl to covert 64 bit hex strings. [RT #27653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0rc2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3270. [bug] "rndc reload" didn't reuse existing zones correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when inline-signing was in use. [RT #27650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3269. [port] darwin 11 and later now built threaded by default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out the earliest expiry time. [RT #23311]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3267. [bug] Memory allocation failures could be mis-reported as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected error. New ISC_R_UNSET result code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3266. [bug] The maximum number of NSEC3 iterations for a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY RRset was not being properly computed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26543]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3265. [bug] Corrected a problem with lock ordering in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing code. [RT #27557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3264. [bug] Automatic regeneration of signatures in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone could stall when the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was restarted. [RT #27344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3263. [bug] "rndc sync" did not affect the unsigned side of an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone. [RT #27337]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3262. [bug] Signed responses were handled incorrectly by RPZ.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3261. [func] RRset ordering now defaults to random. [RT #27174]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3260. [bug] "rrset-order cyclic" could appear not to rotate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for some query patterns. [RT #27170/27185]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3259. [bug] named-compilezone: Suppress "dump zone to <file>"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message when writing to stdout. [RT #27109]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3258. [test] Add "forcing full sign with unreadable keys" test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3257. [bug] Do not generate a error message when calling fsync()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a pipe or socket. [RT #27109]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3255. [func] No longer require that a empty zones be explicitly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabled or that a empty zone is disabled for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 1918 empty zones to be configured. [RT #27139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too long. [RT #26956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3252. [bug] When master zones using inline-signing were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updated while the server was offline, the source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone could fall out of sync with the signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copy. They can now resynchronize. [RT #26676]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory dns_sdlz_putrr() can allocate per record to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent run away memory consumption on ISC_R_NOSPACE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3250. [func] 'configure --enable-developer'; turn on various
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure options, normally off by default, that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we want developers to build and test with. [RT #27103]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3249. [bug] Update log message when saving slave zones files for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding analysis after load failures. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3248. [bug] Configure options --enable-fixed-rrset and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-exportlib were incompatible with each
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3247. [bug] 'raw' format zones failed to preserve load order
cfa64348224b66dd1c9979b809406c4d15b1c137fielding breaking 'fixed' sort order. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3246. [bug] Named failed to start with a empty also-notify list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3245. [bug] Don't report a error unchanged serials unless there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were other changes when thawing a zone with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-fromdifferences. [RT #26845]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3244. [func] Added readline support to nslookup and nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Also simplified nsupdate syntax to make "update"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and "prereq" optional. [RT #24659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being properly set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3242. [func] Extended the header of raw-format master files to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include the serial number of the zone from which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they were generated, if different (as in the case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of inline-signing zones). This is to be used in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zones, to track changes between the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unsigned and signed versions of the zone, which may
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have different serial numbers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: raw zonefiles generated by this version of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND are no longer compatible with prior versions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To generate a backward-compatible raw zonefile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using dnssec-signzone or named-compilezone, specify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output format "raw=0" instead of simply "raw".)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3241. [bug] Address race conditions in the resolver code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3240. [bug] DNSKEY state change events could be missed. [RT #26874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamp. [RT #26883]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3238. [bug] keyrdata was not being reinitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/dns/rbtdb.c:iszonesecure. [RT #26913]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3237. [bug] dig -6 didn't work with +trace. [RT #26906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3236. [bug] Backed out changes #3182 and #3202, related to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EDNS(0) fallback behavior. [RT #26416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3235. [func] dns_db_diffx, a extended dns_db_diff which returns
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the generated diff and optionally writes it to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding journal. [RT #26386]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26632]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3232. [bug] Zero zone->curmaster before return in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_setmasterswithkeys(). [RT #26732]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3231. [bug] named could fail to send a incompressible zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3230. [bug] 'dig axfr' failed to properly handle a multi-message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding axfr with a serial of 0. [RT #26796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3229. [bug] Fix local variable to struct var assignment
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found by CLANG warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3228. [tuning] Dynamically grow symbol table to improve zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loading performance. [RT #26523]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3227. [bug] Interim fix to make WKS's use of getprotobyname()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and getservbyname() self thread safe. [RT #26232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3226. [bug] Address minor resource leakages. [RT #26624]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #26507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3223. [bug] 'task_test privilege_drop' generated false positives.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3222. [cleanup] Replace dns_journal_{get,set}_bitws with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_journal_{get,set}_sourceserial. [RT #26634]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3221. [bug] Fixed a potential core dump on shutdown due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referencing fetch context after it's been freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26720]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could fail to set the database version correctly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing an assertion failure. [RT #26180]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3219. [bug] Disable NOEDNS caching following a timeout.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3218. [security] Cache lookup could return RRSIG data associated with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nonexistent records, leading to an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #26590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3214. [func] Add 'named -U' option to set the number of UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listener threads per interface. [RT #26485]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding list prior to adding a reference to it leading a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible assertion failure. [RT #23219]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option prints in single-line-per-record format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3210. [bug] Canceling the oldest query due to recursive-client
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overload could trigger an assertion failure. [RT #26463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3208. [bug] 'dig -y' handle unknown tsig algorithm better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25522]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3206. [cleanup] Add ISC information to log at start time. [RT #25484]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3205. [func] Upgrade dig's defaults to better reflect modern
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver behavior. Enable "dig +adflag" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dig +edns=0" by default. Enable "+dnssec" when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding running "dig +trace". [RT #23497]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3204. [bug] When a master server that has been marked as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unreachable sends a NOTIFY, mark it reachable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding again. [RT #25960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3203. [bug] Increase log level to 'info' for validation failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from expired or not-yet-valid RRSIGs. [RT #21796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3202. [bug] NOEDNS caching on timeout was too aggressive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3201. [func] 'rndc querylog' can now be given an on/off parameter
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of only being used as a toggle. [RT #18351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3200. [doc] Some rndc functions were undocumented or were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding missing from 'rndc -h' output. [RT #25555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3199. [func] When logging client information, include the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being queried. [RT #25944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3198. [doc] Clarified that dnssec-settime can alter keyfile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding permissions. [RT #24866]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3197. [bug] Don't try to log the filename and line number when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the config parser can't open a file. [RT #22263]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3196. [bug] nsupdate: return nonzero exit code when target zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding doesn't exist. [RT #25783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3195. [cleanup] Silence "file not found" warnings when loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding managed-keys zone. [RT #26340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3194. [doc] Updated RFC references in the 'empty-zones-enable'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation. [RT #25203]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3192. [bug] A query structure could be used after being freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3191. [bug] Print NULL records using "unknown" format. [RT #26392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3190. [bug] Underflow in error handling in isc_mutexblock_init.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3189. [test] Added a summary report after system tests. [RT #25517]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3188. [bug] zone.c:zone_refreshkeys() could fail to detach
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references correctly when errors occurred, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a hang on shutdown. [RT #26372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3187. [port] win32: support for Visual Studio 2008. [RT #26356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3186. [bug] Version/db mis-match in rpz code. [RT #26180]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3185. [func] New 'rndc signing' option for auto-dnssec zones:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -list' displays the current
cfa64348224b66dd1c9979b809406c4d15b1c137fielding state of signing operations
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -clear' clears the signing state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records for keys that have fully signed the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -nsec3param' sets the NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameters for the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The 'rndc keydone' syntax is removed. [RT #23729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3184. [bug] named had excessive cpu usage when a redirect zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured. [RT #26013]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3182. [bug] Auth servers behind firewalls which block packets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding greater than 512 bytes may cause other servers to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding perform poorly. Now, adb retains edns information
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and caches noedns servers. [RT #23392/24964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3181. [func] Inline-signing is now supported for master zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3180. [func] Local copies of slave zones are now saved in raw
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format by default, to improve startup performance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'masterfile-format text;' can be used to override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the default, if desired. [RT #25867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3179. [port] kfreebsd: build issues. [RT #26273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3178. [bug] A race condition introduced by change #3163 could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure on shutdown. [RT #26271]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3177. [func] 'rndc keydone', remove the indicator record that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named has finished signing the zone with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corresponding key. [RT #26206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3176. [doc] Corrected example code and added a README to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sample external DLZ module in contrib/dlz/example.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3175. [bug] Fix how DNSSEC positive wildcard responses from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3 signed zone are validated. Stop sending a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unnecessary NSEC3 record when generating such
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #26200]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3174. [bug] Always compute to revoked key tag from scratch.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3173. [port] Correctly validate root DS responses. [RT #25726]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3172. [port] darwin 10.* and freebsd [89] are now built threaded by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3171. [bug] Exclusively lock the task when adding a zone using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc addzone'. [RT #25600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3170. [func] RPZ update:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - fix precedence among competing rules
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - improve ARM text including documenting rule precedence
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - try to rewrite CNAME chains until first hit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - new "rpz" logging channel
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - RDATA for CNAME rules can include wildcards
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - replace "NO-OP" named.conf policy override with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "PASSTHRU" and add "DISABLED" override ("NO-OP"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is still recognized)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25172]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3169. [func] Catch db/version mis-matches when calling dns_db_*().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3168. [bug] Nxdomain redirection could trigger an assert with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a ANY query. [RT #26017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3167. [bug] Negative answers from forwarders were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly tagged making them appear to not be cached.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25380]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3166. [bug] Upgrading a zone to support inline-signing failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26014]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3165. [bug] dnssec-signzone could generate new signatures when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resigning, even when valid signatures were already
cfa64348224b66dd1c9979b809406c4d15b1c137fielding present. [RT #26025]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3164. [func] Enable DLZ modules to retrieve client information,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding so that responses can be changed depending on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source address of the query. [RT #25768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3163. [bug] Use finer-grained locking in client.c to address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding concurrency problems with large numbers of threads.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3162. [test] start.pl: modified to allow for "named.args" in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ns*/ subdirectory to override stock arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. Largely from RT #26044, but no separate ticket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3161. [bug] zone.c:del_sigs failed to always reset rdata leading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failures. [RT #25880]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3160. [bug] When printing out a NSEC3 record in multiline form
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the newline was not being printed causing type codes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be run together. [RT #25873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3159. [bug] On some platforms, named could assert on startup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when running in a chrooted environment without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /proc. [RT #25863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3158. [bug] Recursive servers would prefer a particular UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socket instead of using all available sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26038]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the config file before pausing the server. [RT #21373]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3156. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3155. [bug] Fixed a build failure when using contrib DLZ
cfa64348224b66dd1c9979b809406c4d15b1c137fielding drivers (e.g., mysql, postgresql, etc). [RT #25710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3154. [bug] Attempting to print an empty rdataset could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assert. [RT #25452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3153. [func] Extend request-ixfr to zone level and remove the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding side effect of forcing an AXFR. [RT #25156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3152. [cleanup] Some versions of gcc and clang failed due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrect use of __builtin_expect. [RT #25183]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3151. [bug] Queries for type RRSIG or SIG could be handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly. [RT #21050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3150. [func] Improved startup and reconfiguration time by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabling zones to load in multiple threads. [RT #25333]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3149. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3148. [bug] Processing of normal queries could be stalled when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forwarding a UPDATE message. [RT #24711]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3147. [func] Initial inline signing support. [RT #23657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3145. [test] Capture output of ATF unit tests in "./atf.out" if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding there were any errors while running them. [RT #25527]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3144. [bug] dns_dbiterator_seek() could trigger an assert when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used with a nonexistent database node. [RT #25358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3143. [bug] Silence clang compiler warnings. [RT #25174]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3142. [bug] NAPTR is class agnostic. [RT #25429]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3141. [bug] Silence spurious "zone serial (0) unchanged" messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding associated with empty zones. [RT #25079]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3140. [func] New command "rndc flushtree <name>" clears the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified name from the server cache along with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all names under it. [RT #19970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the hashing algorithms (md5, sha1 - sha512, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding their hmac counterparts). [RT #25067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3138. [bug] Address memory leaks and out-of-order operations when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shutting named down. [RT #25210]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3137. [func] Improve hardware scalability by allowing multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding worker threads to process incoming UDP packets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This can significantly increase query throughput
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on some systems. [RT #22992]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3136. [func] Add RFC 1918 reverse zones to the list of built-in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty zones switched on by the 'empty-zones-enable'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option. [RT #24990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24950]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3134. [bug] Improve the accuracy of dnssec-signzone's signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics. [RT #16030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3133. [bug] Change #3114 was incomplete. [RT #24577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3132. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3131. [tuning] Improve scalability by allocating one zone task
cfa64348224b66dd1c9979b809406c4d15b1c137fielding per 100 zones at startup time, rather than using a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fixed-size task table. [RT #24406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3130. [func] Support alternate methods for managing a dynamic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone's serial number. Two methods are currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defined using serial-update-method, "increment"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (default) and "unixtime". [RT #23849]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3129. [bug] Named could crash on 'rndc reconfig' when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-new-zones was set to yes and named ACLs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were used. [RT #22739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3128. [func] Inserting an NSEC3PARAM via dynamic update in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding auto-dnssec zone that has not been signed yet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will cause it to be signed with the specified NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameters when keys are activated. The
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3PARAM record will not appear in the zone until
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is signed, but the parameters will be stored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3127. [bug] 'rndc thaw' will now remove a zone's journal file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if the zone serial number has been changed and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences is not in use. [RT #24687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3126. [security] Using DNAME record to generate replacements caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ to exit with a assertion failure. [RT #24766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3125. [security] Using wildcard CNAME records as a replacement with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ caused named to exit with a assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24715]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3124. [bug] Use an rdataset attribute flag to indicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative-cache records rather than using rrtype 0;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this will prevent problems when that rrtype is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used in actual DNS packets. [RT #24777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3123. [security] Change #2912 exposed a latent flaw in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdataset_totext() that could cause named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crash with an assertion failure. [RT #24777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3121. [security] An authoritative name server sending a negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response containing a very large RRset could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an off-by-one error in the ncache code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and crash named. [RT #24650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3120. [bug] Named could fail to validate zones listed in a DLV
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that validated insecure without using DLV and had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DS records in the parent zone. [RT #24631]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3119. [bug] When rolling to a new DNSSEC key, a private-type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record could be created and never marked complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3118. [bug] nsupdate could dump core on shutdown when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIG(0) keys. [RT #24604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3117. [cleanup] Remove doc and parser references to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding never-implemented 'auto-dnssec create' option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3116. [func] New 'dnssec-update-mode' option controls updates
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of DNSSEC records in signed dynamic zones. Set to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'no-resign' to disable automatic RRSIG regeneration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while retaining the ability to sign new or changed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data. [RT #24533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3115. [bug] Named could fail to return requested data when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding following a CNAME that points into the same zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3114. [bug] Retain expired RRSIGs in dynamic zones if key is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inactive and there is no replacement key. [RT #23136]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3113. [doc] Document the relationship between serial-query-rate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3112. [doc] Add missing descriptions of the update policy name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding types "ms-self", "ms-subdomain", "krb5-self" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "krb5-subdomain", which allow machines to update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding their own records, to the BIND 9 ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3111. [bug] Improved consistency checks for dnssec-enable and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-validation, added test cases to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checkconf system test. [RT #24398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3110. [bug] dnssec-signzone: Wrong error message could appear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when attempting to sign with no KSK. [RT #24369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3109. [func] The also-notify option now uses the same syntax
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as a zone's masters clause. This means it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now possible to specify a TSIG key to use when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sending notifies to a given server, or to include
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an explicit named masters list in an also-notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement. [RT #23508]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3108. [cleanup] dnssec-signzone: Clarified some error and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
cfa64348224b66dd1c9979b809406c4d15b1c137fielding code (use -P instead). [RT #20852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3107. [bug] dnssec-signzone: Report the correct number of ZSKs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when using -x. [RT #20852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3106. [func] When logging client requests, include the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the TSIG key if any. [RT #23619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3105. [bug] GOST support can be suppressed by "configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --without-gost" [RT #24367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3104. [bug] Better support for cross-compiling. [RT #24367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3103. [bug] Configuring 'dnssec-validation auto' in a view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of in the options statement could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure in named-checkconf. [RT #24382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3102. [func] New 'dnssec-loadkeys-interval' option configures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding how often, in minutes, to check the key repository
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for updates when using automatic key maintenance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Default is every 60 minutes (formerly hard-coded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 12 hours). [RT #23744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3101. [bug] Zones using automatic key maintenance could fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to check the key repository for updates. [RT #23744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3100. [security] Certain response policy zone configurations could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an INSIST when receiving a query of type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIG. [RT #24280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3099. [test] "dlz" system test now runs but gives R:SKIPPED if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not compiled with --with-dlz-filesystem. [RT #24146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3098. [bug] DLZ zones were answering without setting the AA bit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3097. [test] Add a tool to test handling of malformed packets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3096. [bug] Set KRB5_KTNAME before calling log_cred() in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_gssapi_acceptctx(). [RT #24004]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3095. [bug] Handle isolated reserved ports in the port range.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23957]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3094. [doc] Expand dns64 documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3092. [bug] Signatures for records at the zone apex could go
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stale due to an incorrect timer setting. [RT #23769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3091. [bug] Fixed a bug in which zone keys that were published
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and then subsequently activated could fail to trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding automatic signing. [RT #22911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3090. [func] Make --with-gssapi default [RT #23738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3089. [func] dnssec-dsfromkey now supports reading keys from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard input "dnssec-dsfromkey -f -". [RT #20662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and add setup.sh in order to resolve changing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf issue. [RT #23687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3087. [bug] DDNS updates using SIG(0) with update-policy match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type "external" could cause a crash. [RT #23735]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3086. [bug] Running dnssec-settime -f on an old-style key will
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now force an update to the new key format even if no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other change has been specified, using "-P now -A now"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as default values. [RT #22474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3085. [func] New '-R' option in dnssec-signzone forces removal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of signatures which have not yet expired but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were generated by a key that no longer exists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22471]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3084. [func] A new command "rndc sync" dumps pending changes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a dynamic zone to disk; "rndc sync -clean" also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removes the journal file after syncing. Also,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc freeze" no longer removes journal files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3083. [bug] NOTIFY messages were not being sent when generating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a NSEC3 chain incrementally. [RT #23702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3082. [port] strtok_r is threads only. [RT #23747]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3081. [bug] Failure of DNAME substitution did not return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding YXDOMAIN. [RT #23591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3079. [bug] Handle isc_event_allocate failures in t_tasks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3078. [func] Added a new include file with function typedefs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the DLZ "dlopen" driver. [RT #23629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3077. [bug] zone.c:zone_refreshkeys() incorrectly called
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_attach(), use zone->irefs instead. [RT #23303]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keyfromlabel sets the default TTL of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key. When possible, automatic signing will use that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL when the key is published. [RT #23304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamp when determining which keys are active.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3074. [bug] Make the adb cache read through for zone data and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue learn for zone named is authoritative for.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3073. [bug] managed-keys changes were not properly being recorded.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3071. [bug] has_nsec could be used uninitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding update.c:next_active. [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3070. [bug] dnssec-signzone potential NULL pointer dereference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3069. [cleanup] Silence warnings messages from clang static analysis.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3068. [bug] Named failed to build with a OpenSSL without engine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support. [RT #23473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3067. [bug] ixfr-from-differences {master|slave}; failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding select the master/slave zones. [RT #23580]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3066. [func] The DLZ "dlopen" driver is now built by default,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no longer requiring a configure option. To
cfa64348224b66dd1c9979b809406c4d15b1c137fielding disable it, use "configure --without-dlopen".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Driver also supported on win32. [RT #23467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3065. [bug] RRSIG could have time stamps too far in the future.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3064. [bug] powerpc: add sync instructions to the end of atomic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding operations. [RT #23469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3062. [func] Made several changes to enhance human readability
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of DNSSEC data in dig output and in generated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone files:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - DNSKEY record comments are more verbose, no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding longer used in multiline mode only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - multiline RRSIG records reformatted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - multiline output mode for NSEC3PARAM records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - "dig +norrcomments" suppresses DNSKEY comments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - "dig +split=X" breaks hex/base64 records into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fields of width X; "dig +nosplit" disables this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22820]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3061. [func] New option "dnssec-signzone -D", only write out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generated DNSSEC records. [RT #22896]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3060. [func] New option "dnssec-signzone -X <date>" allows
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specification of a separate expiration date
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3059. [test] Added a regression test for change #3023.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3058. [bug] Cause named to terminate at startup or rndc reconfig/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload to fail, if a log file specified in the conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file isn't a plain file. [RT #22771]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3057. [bug] "rndc secroots" would abort after the first error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and so could miss some views. [RT #23488]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3056. [func] Added support for URI resource record. [RT #23386]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3055. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3054. [bug] Added elliptic curve support check in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding GOST OpenSSL engine detection. [RT #23485]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3053. [bug] Under a sustained high query load with a finite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-cache-size, it was possible for cache memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be exhausted and not recovered. [RT #23371]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3052. [test] Fixed last autosign test report. [RT #23256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3051. [bug] NS records obscure DNAME records at the bottom of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone if both are present. [RT #23035]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3050. [bug] The autosign system test was timing dependent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Wait for the initial autosigning to complete
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before running the rest of the test. [RT #23035]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3049. [bug] Save and restore the gid when creating creating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.pid at startup. [RT #23290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3048. [bug] Fully separate view key management. [RT #23419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3047. [bug] DNSKEY NODATA responses not cached fixed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validator.c. Tests added to dnssec system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3046. [bug] Use RRSIG original TTL to compute validated RRset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and RRSIG TTL. [RT #23332]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3045. [removed] Replaced by change #3050.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3044. [bug] Hold the socket manager lock while freeing the socket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23333]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3043. [test] Merged in the NetBSD ATF test framework (currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version 0.12) for development of future unit tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use configure --with-atf to build ATF internally
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or configure --with-atf=prefix to use an external
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copy. [RT #23209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3042. [bug] dig +trace could fail attempting to use IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses on systems with only IPv4 connectivity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3041. [bug] dnssec-signzone failed to generate new signatures on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ttl changes. [RT #23330]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3040. [bug] Named failed to validate insecure zones where a node
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with a CNAME existed between the trust anchor and the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding top of the zone. [RT #23338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3039. [func] Redirect on NXDOMAIN support. [RT #23146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3038. [bug] Install <dns/rpz.h>. [RT #23342]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3037. [doc] Update COPYRIGHT to contain all the individual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copyright notices that cover various parts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3036. [bug] Check built-in zone arguments to see if the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is re-usable or not. [RT #21914]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3035. [cleanup] Simplify by using strlcpy. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3029. [bug] isc_netaddr_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding catch NULL pointer dereferences before they happen.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3026. [bug] lib/isc/httpd.c: check that we have enough space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after calling grow_headerspace() and if not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-call grow_headerspace() until we do. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3025. [bug] Fixed a possible deadlock due to zone resigning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3024. [func] RTT Banding removed due to minor security increase
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but major impact on resolver latency. [RT #23310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3023. [bug] Named could be left in an inconsistent state when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding receiving multiple AXFR response messages that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not all TSIG-signed. [RT #23254]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3021. [bug] Change #3010 was incomplete. [RT #22296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3020. [bug] auto-dnssec failed to correctly update the zone when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing the DNSKEY RRset. [RT #23232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3019. [test] Test: check apex NSEC3 records after adding DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record via UPDATE. [RT #23229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3018. [bug] Named failed to check for the "none;" acl when deciding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if a zone may need to be re-signed. [RT #23120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3017. [doc] dnssec-keyfromlabel -I was not properly documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22887]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3016. [bug] rndc usage missing '-b'. [RT #22937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3014. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3013. [bug] The DNS64 ttl was not always being set as expected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3012. [bug] Remove DNSKEY TTL change pairs before generating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing records for any remaining DNSKEY changes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3011. [func] Change the default query timeout from 30 seconds
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 10. Allow setting this in named.conf using the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'resolver-query-timeout' option, which specifies a max
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time in seconds. 0 means 'default' and anything longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 30 will be silently set to 30. [RT #22852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for refreshing managed-keys. [RT #22296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3009. [bug] clients-per-query code didn't work as expected with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particular query patterns. [RT #22972]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.8.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3008. [func] Response policy zones (RPZ) support. [RT #21726]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3007. [bug] Named failed to preserve the case of domain names in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdata which is not compressible when writing master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #22863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3006. [func] Allow dynamically generated TSIG keys to be preserved
cfa64348224b66dd1c9979b809406c4d15b1c137fielding across restarts of named. Initially this is for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG keys generated using GSSAPI. [RT #22639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3005. [port] Solaris: Work around the lack of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gsskrb5_register_acceptor_identity() by setting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the KRB5_KTNAME environment variable to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contents of tkey-gssapi-keytab. Also fixed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding test errors on MacOSX. [RT #22853]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3004. [func] DNS64 reverse support. [RT #22769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3003. [experimental] Added update-policy match type "external",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabling named to defer the decision of whether to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow a dynamic update to an external daemon.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Contributed by Andrew Tridgell.) [RT #22758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3001. [func] Added a default trust anchor for the root zone, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be switched on by setting "dnssec-validation auto;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the named.conf options. [RT #21727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3000. [bug] More TKEY/GSS fixes:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - nsupdate can now get the default realm from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the user's Kerberos principal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - corrected gsstest compilation flags
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - improved documentation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - fixed some NULL dereferences
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22795]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2999. [func] Add GOST support (RFC 5933). [RT #20639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the task api. [RT #22776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2997. [func] named -V now reports the OpenSSL and libxml2 verions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it was compiled against. [RT #22687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2996. [security] Temporarily disable SO_ACCEPTFILTER support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2995. [bug] The Kerberos realm was not being correctly extracted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the signer's identity. [RT #22770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding do not use threads on earlier versions. Also kill
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the unproven-pthreads, mit-pthreads, and ptl2 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2993. [func] Dynamically grow adb hash tables. [RT #21186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for looking at a secure delegation. [RT #22059]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic zones. [RT #22365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2990. [bug] 'dnssec-settime -S' no longer tests prepublication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interval validity when the interval is set to 0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22761]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2989. [func] Added support for writable DLZ zones. (Contributed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by Andrew Tridgell of the Samba project.) [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of external DLZ drivers that can be loaded as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shared objects at runtime rather than linked with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. Currently this is switched on via a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compile-time option, "configure --with-dlz-dlopen".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: the syntax for configuring DLZ zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is likely to be refined in future releases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Contributed by Andrew Tridgell of the Samba
cfa64348224b66dd1c9979b809406c4d15b1c137fielding project.) [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2987. [func] Improve ease of configuring TKEY/GSS updates by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding a "tkey-gssapi-keytab" option. If set,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updates will be allowed with any key matching
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a principal in the specified keytab file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "tkey-gssapi-credential" is no longer required
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and is expected to be deprecated. (Contributed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by Andrew Tridgell of the Samba project.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2986. [func] Add new zone type "static-stub". It's like a stub
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone, but the nameserver names and/or their IP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses are statically configured. [RT #21474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2985. [bug] Add a regression test for change #2896. [RT #21324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2984. [bug] Don't run MX checks when the target of the MX record
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is ".". [RT #22645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.8.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2982. [bug] Reference count dst keys. dst_key_attach() can be used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increment the reference count.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: dns_tsigkey_createfromkey() callers should now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always call dst_key_free() rather than setting it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to NULL on success. [RT #22672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2980. [bug] named didn't properly handle UPDATES that changed the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL of the NSEC3PARAM RRset. [RT #22363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2979. [bug] named could deadlock during shutdown if two
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc stop" commands were issued at the same
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #22108]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2978. [port] hpux: look for <devpoll.h> [RT #21919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2977. [bug] 'nsupdate -l' report if the session key is missing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2976. [bug] named could die on exit after negotiating a GSS-TSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key. [RT #22573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong lock which could lead to server deadlock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2974. [bug] Some valid UPDATE requests could fail due to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency check examining the existing version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the zone rather than the new version resulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the UPDATE. [RT #22413]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2973. [bug] bind.keys.h was being removed by the "make clean"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at the end of configure resulting in build failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding where there is very old version of perl installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Move it to "make maintainer-clean". [RT #22230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2972. [bug] win32: address windows socket errors. [RT #21906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2971. [bug] Fixed a bug that caused journal files not to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compacted on Windows systems as a result of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-POSIX-compliant rename() semantics. [RT #22434]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2970. [security] Adding a NO DATA negative cache entry failed to clear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any matching RRSIG records. A subsequent lookup of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of NO DATA cache entry could trigger a INSIST when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected RRSIG was also returned with the NO DATA
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache entry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3613, VU#706148. [RT #22288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2969. [security] Fix acl type processing so that allow-query works
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in options and view statements. Also add a new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of tests to verify proper functioning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3615, VU#510208. [RT #22418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2968. [security] Named could fail to prove a data set was insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before marking it as insecure. One set of conditions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that can trigger this occurs naturally when rolling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY algorithms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3614, VU#837744. [RT #22309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2967. [bug] 'host -D' now turns on debugging messages earlier.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2966. [bug] isc_print_vsnprintf() failed to check if there was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space available in the buffer when adding a left
cfa64348224b66dd1c9979b809406c4d15b1c137fielding justified character with a non zero width,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (e.g. "%-1c"). [RT #22270]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2965. [func] Test HMAC functions using test data from RFC 2104 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 4634. [RT #21702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2964. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2963. [security] The allow-query acl was being applied instead of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache acl to cache lookups. [RT #22114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2962. [port] win32: add more dependencies to BINDBuild.dsw.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2961. [bug] Be still more selective about the non-authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answers we apply change 2748 to. [RT #22074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2960. [func] Check that named accepts non-authoritative answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21594]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2959. [func] Check that named starts with a missing masterfile.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2958. [bug] named failed to start with a missing master file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2957. [bug] entropy_get() and entropy_getpseudo() failed to match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the API for RAND_bytes() and RAND_pseudo_bytes()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively. [RT #21962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2955. [func] Provide more detail in the recursing log. [RT #22043]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build_sqldbinstance failure. [RT #21623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2953. [bug] Silence spurious "expected covering NSEC3, got an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exact match" message when returning a wildcard
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no data response. [RT #21744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2952. [port] win32: named-checkzone and named-checkconf failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to initialize winsock. [RT #21932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2951. [bug] named failed to generate a correct signed response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a optout, delegation only zone with no secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegations. [RT #22007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2950. [bug] named failed to perform a SOA up to date check when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding falling back to TCP on UDP timeouts when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences was set. [RT #21595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2949. [bug] dns_view_setnewzones() contained a memory leak if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it was called multiple times. [RT #21942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2948. [port] MacOS: provide a mechanism to configure the test
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces at reboot. See bin/tests/system/README
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2947. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2946. [doc] Document the default values for the minimum and maximum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone refresh and retry values in the ARM. [RT #21886]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2945. [doc] Update empty-zones list in ARM. [RT #21772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2944. [maint] Remove ORCHID prefix from built in empty zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2943. [func] Add support to load new keys into managed zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without signing immediately with "rndc loadkeys".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Add support to link keys with "dnssec-keygen -S"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and "dnssec-settime -S". [RT #21351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2942. [contrib] zone2sqlite failed to setup the entropy sources.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2941. [bug] sdb and sdlz (dlz's zone database) failed to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME at the zone apex. [RT #21610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2940. [port] Remove connection aborted error message on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Windows. [RT #21549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2939. [func] Check that named successfully skips NSEC3 records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that fail to match the NSEC3PARAM record currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in use. [RT #21868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2938. [bug] When generating signed responses, from a signed zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that uses NSEC3, named would use a uninitialized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pointer if it needed to skip a NSEC3 record because
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it didn't match the selected NSEC3PARAM record for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. [RT #21868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2937. [bug] Worked around an apparent race condition in over
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory conditions. Without this fix a DNS cache DB or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ADB could incorrectly stay in an over memory state,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding effectively refusing further caching, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subsequently made a BIND 9 caching server unworkable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This fix prevents this problem from happening by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polling the state of the memory context, rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding making a copy of the state, which appeared to cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a race. This is a "workaround" in that it doesn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding solve the possible race per se, but several experiments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proved this change solves the symptom. Also, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polling overhead hasn't been reported to be an issue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This bug should only affect a caching server that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifies a finite max-cache-size. It's also quite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding likely that the bug happens only when enabling threads,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but it's not confirmed yet. [RT #21818]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2936. [func] Improved configuration syntax and multiple-view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for addzone/delzone feature (see change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #2930). Removed "new-zone-file" option, replaced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with "allow-new-zones (yes|no)". The new-zone-file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for each view is now created automatically, with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a filename generated from a hash of the view name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It is no longer necessary to "include" the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new-zone-file in named.conf; this happens
cfa64348224b66dd1c9979b809406c4d15b1c137fielding automatically. Zones that were not added via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc addzone" can no longer be removed with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc delzone". [RT #19447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2935. [bug] nsupdate: improve 'file not found' error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2933. [bug] 'dig +nsid' used stack memory after it went out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scope. This could potentially result in a unknown,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding potentially malformed, EDNS option being sent instead
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the desired NSID option. [RT #21781]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2932. [cleanup] Corrected a numbering error in the "dnssec" test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2931. [bug] Temporarily and partially disable change 2864
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because it would cause infinite attempts of RRSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries. This is an urgent care fix; we'll
cfa64348224b66dd1c9979b809406c4d15b1c137fielding revisit the issue and complete the fix later.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2930. [experimental] New "rndc addzone" and "rndc delzone" commands
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow dynamic addition and deletion of zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To enable this feature, specify a "new-zone-file"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option at the view or options level in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Zone configuration information for the new zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will be written into that file. To make the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones persist after a restart, "include" the file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into named.conf in the appropriate view. (Note:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This feature is not yet documented, and its syntax
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is expected to change.) [RT #19447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2929. [bug] Improved handling of GSS security contexts:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added LRU expiration for generated TSIGs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added the ability to use a non-default realm
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added new "realm" keyword in nsupdate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - limited lifetime of generated keys to 1 hour
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or the lifetime of the context (whichever is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19737]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2928. [bug] Be more selective about the non-authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer we apply change 2748 to. [RT #21594]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2927. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2926. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2925. [bug] Named failed to accept uncachable negative responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from insecure zones. [RT #21555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2924. [func] 'rndc secroots' dump a combined summary of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding current managed keys combined with trusted keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20904]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2923. [bug] 'dig +trace' could drop core after "connection
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeout". [RT #21514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2922. [contrib] Update zkt to version 1.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2921. [bug] The resolver could attempt to destroy a fetch context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too soon. [RT #19878]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to IPv4 clients. New acl 'filter-aaaa' (default any).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20840]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2917. [func] Virtual time test framework. [RT #20801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2916. [func] Add framework to use IPv6 in tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2915. [cleanup] Be smarter about which objects we attempt to compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on configure options. [RT #21444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2914. [bug] Make the "autosign" system test more portable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20997]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2913. [func] Add pkcs#11 system tests. [RT #20784]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2912. [func] Windows clients don't like UPDATE responses that clear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the zone section. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2911. [bug] dnssec-signzone didn't handle out of zone records well.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2910. [func] Sanity check Kerberos credentials. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2909. [bug] named-checkconf -p could die if "update-policy local;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was specified in named.conf. [RT #21416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2908. [bug] It was possible for re-signing to stop after removing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a DNSKEY. [RT #21384]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2907. [bug] The export version of libdns had undefined references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2905. [port] aix: set use_atomic=yes with native compiler.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2904. [bug] When using DLV, sub-zones of the zones in the DLV,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could be incorrectly marked as insecure instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure leading to negative proofs failing. This was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a unintended outcome from change 2890. [RT #21392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2903. [bug] managed-keys-directory missing from namedconf.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21370]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2902. [func] Add regression test for change 2897. [RT #21040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2900. [bug] The placeholder negative caching element was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding properly constructed triggering a INSIST in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_ncache_towire(). [RT #21346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2899. [port] win32: Support linking against OpenSSL 1.0.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2898. [bug] nslookup leaked memory when -domain=value was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified. [RT #21301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2897. [bug] NSEC3 chains could be left behind when transitioning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to insecure. [RT #21040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2896. [bug] "rndc sign" failed to properly update the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when adding a DNSKEY for publication only. [RT #21045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2895. [func] genrandom: add support for the generation of multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #20917]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2893. [bug] Improve managed keys support. New named.conf option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding managed-keys-directory. [RT #20924]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2892. [bug] Handle REVOKED keys better. [RT #20961]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2891. [maint] Update empty-zones list to match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding draft-ietf-dnsop-default-local-zones-13. [RT #21099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2890. [bug] Handle the introduction of new trusted-keys and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DS, DLV RRsets better. [RT #21097]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2889. [bug] Elements of the grammar where not properly reported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21046]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2888. [bug] Only the first EDNS option was displayed. [RT #21273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2887. [bug] Report the keytag times in UTC in the .key file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding local time is presented as a comment within the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comment. [RT #21223]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2886. [bug] ctime() is not thread safe. [RT #21223]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2885. [bug] Improve -fno-strict-aliasing support probing in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure. [RT #21080]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2884. [bug] Insufficient validation in dns_name_getlabelsequence().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21283]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2883. [bug] 'dig +short' failed to handle really large datasets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2882. [bug] Remove memory context from list of active contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before clearing 'magic'. [RT #21274]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2881. [bug] Reduce the amount of time the rbtdb write lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is held when closing a version. [RT #21198]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistent. [RT #21078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2878. [func] Incrementally write the master file after performing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a AXFR. [RT #21010]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2877. [bug] The validator failed to skip obviously mismatching
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIGs. [RT #21138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2876. [bug] Named could return SERVFAIL for negative responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from unsigned zones. [RT #21131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2875. [bug] dns_time64_fromtext() could accept non digits.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2874. [bug] Cache lack of EDNS support only after the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successfully responds to the query using plain DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20930]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2873. [bug] Canceling a dynamic update via the dns/client module
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure. [RT #21133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2872. [bug] Modify dns/client.c:dns_client_createx() to only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding require one of IPv4 or IPv6 rather than both.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2871. [bug] Type mismatch in mem_api.c between the definition and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the header file, causing build failure with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-exportlib. [RT #21138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20877]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2868. [cleanup] Run "make clean" at the end of configure to ensure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any changes made by configure are integrated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use --with-make-clean=no to disable. [RT #20994]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding don't like it. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2866. [bug] Windows does not like the TSIG name being compressed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2865. [bug] memset to zero event.data. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2862. [bug] nsupdate didn't default to the parent zone when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updating DS records. [RT #20896]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2861. [doc] dnssec-settime man pages didn't correctly document the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inactivation time. [RT #21039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2860. [bug] named-checkconf's usage was out of date. [RT #21039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2859. [bug] When canceling validation it was possible to leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #20800]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2858. [bug] RTT estimates were not being adjusted on ICMP errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2857. [bug] named-checkconf did not fail on a bad trusted key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20705]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2856. [bug] The size of a memory allocation was not always properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recorded. [RT #20927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2855. [func] nsupdate will now preserve the entered case of domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names in update requests it sends. [RT #20928]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2854. [func] dig: allow the final soa record in a axfr response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be suppressed, dig +onesoa. [RT #20929]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2851. [doc] nslookup.1, removed <informalexample> from the docbook
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source as it produced bad nroff. [RT #21007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2850. [bug] If isc_heap_insert() failed due to memory shortage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the heap would have corrupted entries. [RT #20951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2849. [bug] Don't treat errors from the xml2 library as fatal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding README.rfc5011 into the ARM. [RT #20899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2846. [bug] EOF on unix domain sockets was not being handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #20731]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2844. [doc] notify-delay default in ARM was wrong. It should have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been five (5) seconds.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating key files if there is a chance that the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key ID will collide with an existing one after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding either of the keys has been revoked. (To override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this in the case of dnssec-keyfromlabel, use the -y
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option. dnssec-keygen will simply create a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding different, non-colliding key, so an override is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not necessary.) [RT #20838]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2842. [func] Added "smartsign" and improved "autosign" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec" regression tests. [RT #20865]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2841. [bug] Change 2836 was not complete. [RT #20883]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2840. [bug] Temporary fixed pkcs11-destroy usage check.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20760]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2839. [bug] A KSK revoked by named could not be deleted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20881]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2838. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2837. [port] Prevent Linux spurious warnings about fwrite().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2836. [bug] Keys that were scheduled to become active could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be delayed. [RT #20874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2835. [bug] Key inactivity dates were inadvertently stored in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the private key file with the outdated tag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "Unpublish" rather than "Inactive". This has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fixed; however, any existing keys that had Inactive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dates set will now need to have them reset, using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'dnssec-settime -I'. [RT #20868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2834. [bug] HMAC-SHA* keys that were longer than the algorithm
cfa64348224b66dd1c9979b809406c4d15b1c137fielding digest length were used incorrectly, leading to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interoperability problems with other DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations. This has been corrected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: If an oversize key is in use, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility is needed with an older release of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND, the new tool "isc-hmac-fixup" can convert
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the key secret to a form that will work with all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions.) [RT #20751]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20851]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to avoid redefinition in some OSs [RT 20831]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2831. [security] Do not attempt to validate or cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out-of-bailiwick data returned with a secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer; it must be re-fetched from its original
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source and validated in that context. [RT #20819]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2830. [bug] Changing the OPTOUT setting could take multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding passes. [RT #20813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2829. [bug] Fixed potential node inconsistency in rbtdb.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2828. [security] Cached CNAME or DNAME RR could be returned to clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without DNSSEC validation. [RT #20737]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being released. [RT #20740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was in the process of being created was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recorded in the zone. [RT #20786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2824. [bug] "rndc sign" was not being run by the correct task.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2822. [bug] rbtdb.c:loadnode() could return the wrong result.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2821. [doc] Add note that named-checkconf doesn't automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2820. [func] Handle read access failure of OpenSSL configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file more user friendly (PKCS#11 engine patch).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20668]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20771]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2818. [cleanup] rndc could return an incorrect error code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a zone was not found. [RT #20767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2816. [bug] previous_closest_nsec() could fail to return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data for NSEC3 nodes [RT #29730]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2815. [bug] Exclusively lock the task when freezing a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19838]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2814. [func] Provide a definitive error message when a master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone is not loaded. [RT #20757]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2813. [bug] Better handling of unreadable DNSSEC key files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2812. [bug] Make sure updates can't result in a zone with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC-only keys and NSEC3 records. [RT #20748]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output. [RT #20733]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2810. [doc] Clarified the process of transitioning an NSEC3 zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to insecure. [RT #20746]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2809. [cleanup] Restored accidentally-deleted text in usage output
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in dnssec-settime and dnssec-revoke [RT #20739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2808. [bug] Remove the attempt to install atomic.h from lib/isc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic.h is correctly installed by the architecture
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specific subdirectories. [RT #20722]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2807. [bug] Fixed a possible ASSERT when reconfiguring zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys. [RT #20720]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when it had changed. [RT #20703]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2805. [bug] Fixed namespace problems encountered when building
cfa64348224b66dd1c9979b809406c4d15b1c137fielding external programs using non-exported BIND9 libraries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (i.e., built without --enable-exportlib). [RT #20679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2804. [bug] Send notifies when a zone is signed with "rndc sign"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or as a result of a scheduled key change. [RT #20700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and genrandom under windows. [RT #20670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2801. [func] Detect and report records that are different according
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to DNSSEC but are semantically equal according to plain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS. Apply plain DNS comparisons rather than DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comparisons when processing UPDATE requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone now removes such semantically duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records prior to signing the RRset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone -r {ignore|warn|fail} (default warn)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone -r {ignore|warn|fail} (default warn)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf: check-dup-records {ignore|warn|fail};
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2800. [func] Reject zones which have NS records which refer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CNAMEs, DNAMEs or don't have address record (class IN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only). Reject UPDATEs which would cause the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to fail the above checks if committed. [RT #20678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2799. [cleanup] Changed the "secure-to-insecure" option to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec-secure-to-insecure", and "dnskey-ksk-only"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2798. [bug] Addressed bugs in managed-keys initialization
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and rollover. [RT #20683]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2797. [bug] Don't decrement the dispatch manager's maxbuffers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20613]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2796. [bug] Missing dns_rdataset_disassociate() call in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_nsec3_delnsec3sx(). [RT #20681]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2795. [cleanup] Add text to differentiate "update with no effect"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding log messages. [RT #18889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2794. [bug] Install <isc/namespace.h>. [RT #20677]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2793. [func] Add "autosign" and "metadata" tests to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding automatic tests. [RT #19946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2792. [func] "filter-aaaa-on-v4" can now be set in view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options (if compiled in). [RT #20635]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2791. [bug] The installation of isc-config.sh was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20667]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2790. [bug] Handle DS queries to stub zones. [RT #20440]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2788. [bug] dnssec-signzone could sign with keys that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not requested [RT #20625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2787. [bug] Spurious log message when zone keys were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamically reconfigured. [RT #20659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2786. [bug] Additional could be promoted to answer. [RT #20663]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2785. [bug] Revoked keys could fail to self-sign [RT #20652]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2784. [bug] TC was not always being set when required glue was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dropped. [RT #20655]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding buffer size of 512 or less. [RT #20654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2782. [port] win32: use getaddrinfo() for hostname lookups.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2781. [bug] Inactive keys could be used for signing. [RT #20649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2780. [bug] dnssec-keygen -A none didn't properly unset the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding activation date in all cases. [RT #20648]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2779. [bug] Dynamic key revocation could fail. [RT #20644]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2778. [bug] dnssec-signzone could fail when a key was revoked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without deleting the unrevoked version. [RT #20638]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2776. [bug] Change #2762 was not correct. [RT #20647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in dnssec-keyfromlabel. [RT #20643]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2774. [bug] Existing cache DB wasn't being reused after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reconfiguration. [RT #20629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2773. [bug] In autosigned zones, the SOA could be signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the KSK. [RT #20628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2772. [security] When validating, track whether pending data was from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the additional section or not and only return it if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validates as secure. [RT #20438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2771. [bug] dnssec-signzone: DNSKEY records could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corrupted when importing from key files [RT #20624]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2770. [cleanup] Add log messages to resolver.c to indicate events
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing FORMERR responses. [RT #20526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2769. [cleanup] Change #2742 was incomplete. [RT #19589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2767. [bug] named could crash on startup if a zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured with auto-dnssec and there was no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-directory. [RT #20615]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2766. [bug] isc_socket_fdwatchpoke() should only update the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socketmgr state if the socket is not pending on a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding read or write. [RT #20603]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2765. [bug] Skip masters for which the TSIG key cannot be found.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2762. [bug] DLV validation failed with a local slave DLV zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2761. [cleanup] Enable internal symbol table for backtrace only for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that are known to work. Currently, BSD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding variants, Linux and Solaris are supported. [RT #20202]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2759. [doc] Add information about .jbk/.jnw files to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the ARM. [RT #20303]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2758. [bug] win32: Added a workaround for a windows 2008 bug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that could cause the UDP client handler to shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down. [RT #19176]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2757. [bug] dig: assertion failure could occur in connect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeout. [RT #20599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2755. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2754. [bug] Secure-to-insecure transitions failed when zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was signed with NSEC3. [RT #20587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2753. [bug] Removed an unnecessary warning that could appear when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding building an NSEC chain. [RT #20589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2752. [bug] Locking violation. [RT #20587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2750. [bug] dig: assertion failure could occur when a server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't have an address. [RT #20579]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2749. [bug] ixfr-from-differences generated a non-minimal ixfr
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for NSEC3 signed zones. [RT #20452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2748. [func] Identify bad answers from GTLD servers and treat them
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as referrals. [RT #18884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2747. [bug] Journal roll forwards failed to set the re-signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time of RRSIGs correctly. [RT #20541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2746. [port] hpux: address signed/unsigned expansion mismatch of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2745. [bug] configure script didn't probe the return type of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gai_strerror(3) correctly. [RT #20573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2744. [func] Log if a query was over TCP. [RT #19961]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for a insecure delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2742. [cleanup] Clarify some DNSSEC-related log messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2741. [func] Allow the dnssec-keygen progress messages to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppressed (dnssec-keygen -q). Automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppress the progress messages when stdin is not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a tty. [RT #20474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2740. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2739. [cleanup] Clean up API for initializing and clearing trust
cfa64348224b66dd1c9979b809406c4d15b1c137fielding anchors for a view. [RT #20211]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding test. [RT #20453]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2737. [func] UPDATE requests can leak existence information.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17261]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2736. [func] Improve the performance of NSEC signed zones with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more than a normal amount of glue below a delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20191]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2735. [bug] dnssec-signzone could fail to read keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that were specified on the command line with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding full paths, but weren't in the current
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory. [RT #20421]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2734. [port] cygwin: arpaname did not compile. [RT #20473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2732. [func] Add optional filter-aaaa-on-v4 option, available
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if built with './configure --enable-filter-aaaa'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Filters out AAAA answers to clients connecting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via IPv4. (This is NOT recommended for general
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use.) [RT #20339]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2731. [func] Additional work on change 2709. The key parser
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will now ignore unrecognized fields when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding minor version number of the private key format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been increased. It will reject any key with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the major version number increased. [RT #20310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2730. [func] Have dnssec-keygen display a progress indication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a la 'openssl genrsa' on standard error. Note
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when the first '.' is followed by a long stop
cfa64348224b66dd1c9979b809406c4d15b1c137fielding one has the choice between slow generation vs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2729. [func] When constructing a CNAME from a DNAME use the DNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL. [RT #20451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone now warn immediately if asked to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding write into a nonexistent directory. [RT #20278]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2727. [func] The 'key-directory' option can now specify a relative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding path. [RT #20154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2726. [func] Added support for SHA-2 DNSSEC algorithms,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RSASHA256 and RSASHA512. [RT #20023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2725. [doc] Added information about the file "managed-keys.bind"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the ARM. [RT #20235]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2724. [bug] Updates to a existing node in secure zone using NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were failing. [RT #20448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_base64_totext(), didn't always mark regions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory as fully consumed after conversion. [RT #20445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2722. [bug] Ensure that the memory associated with the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a node in a rbt tree is not altered during the life
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the node. [RT #20431]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2721. [port] Have dst__entropy_status() prime the random number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generator. [RT #20369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2720. [bug] RFC 5011 trust anchor updates could trigger an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assert if the DNSKEY record was unsigned. [RT #20406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2719. [func] Skip trusted/managed keys for unsupported algorithms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2718. [bug] The space calculations in opensslrsa_todns() were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrect. [RT #20394]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2717. [bug] named failed to update the NSEC/NSEC3 record when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the last private type record was removed as a result
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of completing the signing the zone with a key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2715. [bug] Require OpenSSL support to be explicitly disabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2713. [bug] powerpc: atomic operations missing asm("ics") /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __isync() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2712. [func] New 'auto-dnssec' zone option allows zone signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be fully automated in zones configured for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic DNS. 'auto-dnssec allow;' permits a zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be signed by creating keys for it in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-directory and using 'rndc sign <zone>'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'auto-dnssec maintain;' allows that too, plus it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding also keeps the zone's DNSSEC keys up to date
cfa64348224b66dd1c9979b809406c4d15b1c137fielding according to their timing metadata. [RT #19943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2711. [port] win32: Add the bin/pkcs11 tools into the full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build. [RT #20372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone option cause a zone to be signed with only KSKs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing the DNSKEY RRset, not ZSKs. This reduces
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the size of a DNSKEY answer. [RT #20340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2709. [func] Added some data fields, currently unused, to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding private key file format, to allow implementation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of explicit key rollover in a future release
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without impairing backward or forward compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2708. [func] Insecure to secure and NSEC3 parameter changes via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding update are now fully supported and no longer require
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defines to enable. We now no longer overload the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3PARAM flag field, nor the NSEC OPT bit at the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding apex. Secure to insecure changes are controlled by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the named.conf option 'secure-to-insecure'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Warning: If you had previously enabled support by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding defines at compile time to BIND 9.6 you should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ensure that all changes that are in progress have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completed prior to upgrading to BIND 9.7. BIND 9.7
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not backwards compatible.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2707. [func] dnssec-keyfromlabel no longer require engine name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be specified in the label if there is a default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding engine or the -E option has been used. Also, it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now uses default algorithms as dnssec-keygen does
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20371]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2706. [bug] Loading a zone with a very large NSEC3 salt could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an assert. [RT #20368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2705. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2704. [bug] Serial of dynamic and stub zones could be inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with their SOA serial. [RT #19387]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2703. [func] Introduce an OpenSSL "engine" argument with -E
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for all binaries which can take benefit of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crypto hardware. [RT #20230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2701. [doc] Correction to ARM: hmac-md5 is no longer the only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported TSIG key algorithm. [RT #18046]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2700. [doc] The match-mapped-addresses option is discouraged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2699. [bug] Missing lock in rbtdb.c. [RT #20037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2698. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding S_IFREG are defined after including <isc/stat.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2696. [bug] named failed to successfully process some valid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding acl constructs. [RT #20308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2695. [func] DHCP/DDNS - update fdwatch code for use by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DHCP. Modify the api to isc_sockfdwatch_t (the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callback function for isc_socket_fdwatchcreate)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to include information about the direction (read
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or write) and add isc_socket_fdwatchpoke.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2693. [port] Add some noreturn attributes. [RT #20257]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2692. [port] win32: 32/64 bit cleanups. [RT #20335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chain when re-signing a previously-signed zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use -u to modify NSEC3 parameters or switch
cfa64348224b66dd1c9979b809406c4d15b1c137fielding between NSEC and NSEC3. [RT #20304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20315]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2689. [bug] Correctly handle snprintf result. [RT #20306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to decide to fetch the destination address. [RT #20305]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Also, added warnings when revoking a ZSK, as this is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not defined by protocol (but is legal). [RT #19943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2686. [bug] dnssec-signzone should clean the old NSEC chain when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing with NSEC3 and vice versa. [RT #20301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2684. [cleanup] dig: formalize +ad and +cd as synonyms for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding +adflag and +cdflag. [RT #19305]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the NSEC3 parameters used to sign the zone change.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2682. [bug] "configure --enable-symtable=all" failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build. [RT #20282]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decoded. [RT #20269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2679. [func] dig -k can now accept TSIG keys in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format. [RT #20031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2678. [func] Treat DS queries as if "minimal-response yes;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was set. [RT #20258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2677. [func] Changes to key metadata behavior:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - Keys without "publish" or "active" dates set will
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no longer be used for smart signing. However,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding those dates will be set to "now" by default when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a key is created; to generate a key but not use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it yet, use dnssec-keygen -G.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - New "inactive" date (dnssec-keygen/settime -I)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sets the time when a key is no longer used for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing but is still published.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - The "unpublished" date (-U) is deprecated in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding favor of "deleted" (-D).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20247]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2676. [bug] --with-export-installdir should have been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-export-includedir. [RT #20252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2675. [bug] dnssec-signzone could crash if the key directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not exist. [RT #20232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2674. [bug] "dnssec-lookaside auto;" crashed if named was built
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without openssl. [RT #20231]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2673. [bug] The managed-keys.bind zone file could fail to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding load due to a spurious result from sync_keyzone()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2672. [bug] Don't enable searching in 'host' when doing reverse
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups. [RT #20218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2671. [bug] Add support for PKCS#11 providers not returning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the public exponent in RSA private keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (OpenCryptoki for instance) in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keyfromlabel. [RT #19294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2670. [bug] Unexpected connect failures failed to log enough
cfa64348224b66dd1c9979b809406c4d15b1c137fielding information to be useful. [RT #20205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2669. [func] Update PKCS#11 support to support Keyper HSM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Update PKCS#11 patch to be against openssl-0.9.8i.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2668. [func] Several improvements to dnssec-* tools, including:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-keygen and dnssec-settime can now set key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding metadata fields 0 (to unset a value, use "none")
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-revoke sets the revocation date in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addition to the revoke bit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-settime can now print individual metadata
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fields instead of always printing all of them,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and can print them in unix epoch time format for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use by scripts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2667. [func] Add support for logging stack backtrace on assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure (not available for all platforms). [RT #19780]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2666. [func] Added an 'options' argument to dns_name_fromstring()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (API change from 9.7.0a2). [RT #20196]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2665. [func] Clarify syntax for managed-keys {} statement, add
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ARM documentation about RFC 5011 support. [RT #19874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2664. [bug] create_keydata() and minimal_update() in zone.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't properly check return values for some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions. [RT #19956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2663. [func] win32: allow named to run as a service using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "NT AUTHORITY\LocalService" as the account. [RT #19977]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding returned a misleading error code when lwresd was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down. [RT #20028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating lwres context. [RT #20029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2660. [func] Add a new set of DNS libraries for non-BIND9
cfa64348224b66dd1c9979b809406c4d15b1c137fielding applications. See README.libdns. [RT #19369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2659. [doc] Clarify dnssec-keygen doc: key name must match zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name for DNSSEC keys. [RT #19938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2658. [bug] dnssec-settime and dnssec-revoke didn't process
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key file paths correctly. [RT #20078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2657. [cleanup] Lower "journal file <path> does not exist, creating it"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding log level to debug 1. [RT #20058]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2656. [func] win32: add a "tools only" check box to the installer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which causes it to only install dig, host, nslookup,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nsupdate and relevant DLLs. [RT #19998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2655. [doc] Document that key-directory does not affect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2654. [bug] Improve error reporting on duplicated names for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deny-answer-xxx. [RT #20164]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2653. [bug] Treat ENGINE_load_private_key() failures as key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not found rather than out of memory. [RT #18033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2652. [func] Provide more detail about what record is being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deleted. [RT #20061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2651. [bug] Dates could print incorrectly in K*.key files on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 64-bit systems. [RT #20076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2650. [bug] Assertion failure in dnssec-signzone when trying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to read keyset-* files. [RT #20075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2649. [bug] Set the domain for forward only zones. [RT #19944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2647. [bug] Remove unnecessary SOA updates when a new KSK is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added. [RT #19913]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which default to 64 bits. [RT #19927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2644. [bug] Change #2628 caused a regression on some systems;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named was unable to write the PID file and would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail on startup. [RT #20001]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2643. [bug] Stub zones interacted badly with NSEC3 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2642. [bug] nsupdate could dump core on solaris when reading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improperly formatted key files. [RT #20015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2641. [bug] Fixed an error in parsing update-policy syntax,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added a regression test to check it. [RT #20007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2640. [security] A specially crafted update packet will cause named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to exit. [RT #20000]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2638. [bug] Install arpaname. [RT #19957]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2636. [func] Simplify zone signing and key maintenance with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-* tools. Major changes:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - all dnssec-* tools now take a -K option to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specify a directory in which key files will be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - DNSSEC can now store metadata indicating when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they are scheduled to be published, activated,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding revoked or removed; these values can be set by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keygen or overwritten by the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-settime command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-signzone -S (for "smart") option reads key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding metadata and uses it to determine automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which keys to publish to the zone, use for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing, revoke, or remove from the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19816]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19716]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2634. [port] win32: Add support for libxml2, enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statschannel. [RT #19773]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2633. [bug] Handle 15 bit rand() functions. [RT #19783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2632. [func] util/kit.sh: warn if documentation appears to be out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding date. [RT #19922]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19926 ]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2630. [func] Improved syntax for DDNS autoconfiguration: use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "update-policy local;" to switch on local DDNS in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. (The "ddns-autoconf" option has been removed.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19875]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2629. [port] Check for seteuid()/setegid(), use setresuid()/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding setresgid() if not present. [RT #19932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2628. [port] linux: Allow /var/run/named/named.pid to be opened
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at startup with reduced capabilities in operation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2627. [bug] Named aborted if the same key was included in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trusted-keys more than once. [RT #19918]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2626. [bug] Multiple trusted-keys could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #19914]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2624. [func] 'named-checkconf -p' will print out the parsed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration. [RT #18871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2623. [bug] Named started searches for DS non-optimally. [RT #19915]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2621. [doc] Made copyright boilerplate consistent. [RT #19833]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2620. [bug] Delay thawing the zone until the reload of it has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completed successfully. [RT #19750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2619. [func] Add support for RFC 5011, automatic trust anchor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maintenance. The new "managed-keys" statement can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be used in place of "trusted-keys" for zones which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support this protocol. (Note: this syntax is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding expected to change prior to 9.7.0 final.) [RT #19248]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2618. [bug] The sdb and sdlz db_interator_seek() methods could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loop infinitely. [RT #19847]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2617. [bug] ifconfig.sh failed to emit an error message when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding run from the wrong location. [RT #19375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2616. [bug] 'host' used the nameservers from resolv.conf even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a explicit nameserver was specified. [RT #19852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2615. [bug] "__attribute__((unused))" was in the wrong place
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for ia64 gcc builds. [RT #19854]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2614. [port] win32: 'named -v' should automatically be executed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the foreground. [RT #19844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2613. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2612. [func] Add default values for the arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keygen. Without arguments, it will now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate a 1024-bit RSASHA1 zone-signing key,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or with the -f KSK option, a 2048-bit RSASHA1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-signing key. [RT #19300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2611. [func] Add -l option to dnssec-dsfromkey to generate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLV records instead of DS records. [RT #19300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2610. [port] sunos: Change #2363 was not complete. [RT #19796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2609. [func] Simplify the configuration of dynamic zones:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add ddns-confgen command to generate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration text for named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add zone option "ddns-autoconf yes;", which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes named to generate a TSIG session key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and allow updates to the zone using that key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add '-l' (localhost) option to nsupdate, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes nsupdate to connect to a locally-running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named process using the session key generated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2608. [func] Perform post signing verification checks in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone. These can be disabled with -P.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The post sign verification test ensures that for each
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm in use there is at least one non revoked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding self signed KSK key. That all revoked KSK keys are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding self signed. That all records in the zone are signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the algorithm. [RT #19653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2607. [bug] named could incorrectly delete NSEC3 records for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty nodes when processing a update request.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19749]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2606. [bug] "delegation-only" was not being accepted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation-only type zones. [RT #19717]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2605. [bug] Accept DS responses from delegation only zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT # 19296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2604. [func] Add support for DNS rebinding attack prevention through
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new options, deny-answer-addresses and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deny-answer-aliases. Based on contributed code from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding JD Nurmi, Google. [RT #18192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2603. [port] win32: handle .exe extension of named-checkzone and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-comilezone argv[0] names under windows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2602. [port] win32: fix debugging command line build of libisccfg.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2601. [doc] Mention file creation mode mask in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named manual page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2600. [doc] ARM: miscellaneous reformatting for different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding page widths. [RT #19574]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2599. [bug] Address rapid memory growth when validation fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2598. [func] Reserve the -F flag. [RT #19657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2597. [bug] Handle a validation failure with a insecure delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from a NSEC3 signed master/slave zone. [RT #19464]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
cfa64348224b66dd1c9979b809406c4d15b1c137fielding long, leading to inefficient memory usage or rejecting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding newer cache entries in the worst case. [RT #19563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2594. [func] Have rndc warn if using its default configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file when the key file also exists. [RT #19424]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2591. [bug] named could die when processing a update in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removed_orphaned_ds(). [RT #19507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2590. [func] Report zone/class of "update with no effect".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2588. [bug] SO_REUSEADDR could be set unconditionally after failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of bind(2) call. This should be rare and mostly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding harmless, but may cause interference with other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processes that happen to use the same port. [RT #19642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2587. [func] Improve logging by reporting serial numbers for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when zone serial has gone backwards or unchanged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or SDB. [RT #19577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2585. [bug] Uninitialized socket name could be referenced via a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics channel, triggering an assertion failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding XML rendering. [RT #19427]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2584. [bug] alpha: gcc optimization could break atomic operations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19227]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2583. [port] netbsd: provide a control to not add the compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding date to the version string, -DNO_VERSION_DATE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2582. [bug] Don't emit warning log message when we attempt to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remove non-existent journal. [RT #19516]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Requires MySQL 5.0.19 or later. [RT #19084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2580. [bug] UpdateRej statistics counter could be incremented twice
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for one rejection. [RT #19476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2579. [bug] DNSSEC lookaside validation failed to handle unknown
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithms. [RT #19479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2578. [bug] Changed default sig-signing-type to 65534, because
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 65535 turns out to be reserved. [RT #19477]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2577. [doc] Clarified some statistics counters. [RT #19454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2576. [bug] NSEC record were not being correctly signed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a zone transitions from insecure to secure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Handle such incorrectly signed zones. [RT #19114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2575. [func] New functions dns_name_fromstring() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_tostring(), to simplify conversion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a string to a dns_name structure and vice
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versa. [RT #19451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2574. [doc] Document nsupdate -g and -o. [RT #19351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2573. [bug] Replacing a non-CNAME record with a CNAME record in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding single transaction in a signed zone failed. [RT #19397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2572. [func] Simplify DLV configuration, with a new option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec-lookaside auto;" This is the equivalent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of "dnssec-lookaside . trust-anchor dlv.isc.org;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding plus setting a trusted-key for dlv.isc.org.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: The trusted key is hard-coded into named,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but is also stored in (and can be overridden
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by) $sysconfdir/bind.keys. As the ISC DLV key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rolls over it can be kept up to date by replacing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the bind.keys file with a key downloaded from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2571. [func] Add a new tool "arpaname" which translates IP addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2570. [func] Log the destination address the query was sent to.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2569. [func] Move journalprint, nsec3hash, and genrandom
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "make install" will put them in $sbindir. [RT #19301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2568. [bug] Report when the write to indicate a otherwise
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful start fails. [RT #19360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2567. [bug] dst__privstruct_writefile() could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding write_public_key() could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-dsfromkey could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2566. [cleanup] Clarify logged message when an insecure DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response arrives from a zone thought to be secure:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "insecurity proof failed" instead of "not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insecure". [RT #19400]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2565. [func] Add support for HIP record. Includes new functions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_hip_first(), dns_rdata_hip_next()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_rdata_hip_current(). [RT #19384]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2564. [bug] Only take EDNS fallback steps when processing timeouts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19405]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2563. [bug] Dig could leak a socket causing it to wait forever
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to exit. [RT #19359]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2562. [doc] ARM: miscellaneous improvements, reorganization,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and some new content.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2559. [bug] dnssec-dsfromkey could compute bad DS records when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reading from a K* files. [RT #19357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2558. [func] Set the ownership of missing directories created
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for pid-file if -u has been specified on the command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding line. [RT #19328]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2557. [cleanup] PCI compliance:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * new libisc log module file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * isc_dir_chroot() now also changes the working
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory to "/".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * additional INSISTs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * additional logging when files can't be removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error checks in the correct order resulting in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong error code sometimes being returned. [RT #19249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2555. [func] dig: when emitting a hex dump also display the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corresponding characters. [RT #19258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2554. [bug] Validation of uppercase queries from NSEC3 zones could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #19297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2552. [bug] zero-no-soa-ttl-cache was not being honored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2551. [bug] Potential Reference leak on return. [RT #19341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19343]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2549. [port] linux: define NR_OPEN if not currently defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2548. [bug] Install iterated_hash.h. [RT #19335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2547. [bug] openssl_link.c:mem_realloc() could reference an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out-of-range area of the source buffer. New public
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function isc_mem_reallocate() was introduced to address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this bug. [RT #19313]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2546. [func] Add --enable-openssl-hash configure flag to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL (in place of internal routine) for hash
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions (MD5, SHA[12] and HMAC). [RT #18815]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2545. [doc] ARM: Legal hostname checking (check-names) is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for SRV RDATA too. [RT #19304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2542. [doc] Update the description of dig +adflag. [RT #19290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2541. [bug] Conditionally update dispatch manager statistics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19247]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2539. [security] Update the interaction between recursion, allow-query,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache and allow-recursion. [RT #19198]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2538. [bug] cache/ADB memory could grow over max-cache-size,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding especially with threads and smaller max-cache-size
cfa64348224b66dd1c9979b809406c4d15b1c137fielding values. [RT #19240]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2537. [func] Added more statistics counters including those on socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding I/O events and query RTT histograms. [RT #18802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2536. [cleanup] Silence some warnings when -Werror=format-security is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified. [RT #19083]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2534. [func] Check NAPTR records regular expressions and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replacement strings to ensure they are syntactically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid and consistent. [RT #18168]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2533. [doc] ARM: document @ (at-sign). [RT #17144]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2532. [bug] dig: check the question section of the response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding see if it matches the asked question. [RT #18495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2531. [bug] Change #2207 was incomplete. [RT #19098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2530. [bug] named failed to reject insecure to secure transitions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via UPDATE. [RT #19101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2529. [cleanup] Upgrade libtool to silence complaints from recent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version of autoconf. [RT #18657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2528. [cleanup] Silence spurious configure warning about
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --datarootdir [RT #19096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2527. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2526. [func] New named option "attach-cache" that allows multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding views to share a single cache to save memory and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improve lookup efficiency. Based on contributed code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from Barclay Osborn, Google. [RT #18905]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2525. [func] New logging category "query-errors" to provide detailed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding internal information about query failures, especially
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about server failures. [RT #19027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2523. [bug] Random type rdata freed by dns_nsec_typepresent().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19112]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2521. [bug] Improve epoll cross compilation support. [RT #19047]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2520. [bug] Update xml statistics version number to 2.0 as change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #2388 made the schema incompatible to the previous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version. [RT #19080]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2519. [bug] dig/host with -4 or -6 didn't work if more than two
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver addresses of the excluded address family
cfa64348224b66dd1c9979b809406c4d15b1c137fielding preceded in resolv.conf. [RT #19081]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2518. [func] Add support for the new CERT types from RFC 4398.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19077]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2517. [bug] dig +trace with -4 or -6 failed when it chose a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver address of the excluded address type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18843]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2516. [bug] glue sort for responses was performed even when not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding needed. [RT #19039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19063]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a nameserver of the excluded address family.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18848]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2513. [bug] Fix windows cli build. [RT #19062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2512. [func] Print a summary of the cached records which make up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the negative response. [RT #18885]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18885]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2509. [bug] Specifying a fixed query source port was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19051]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2508. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2507. [func] Log the recursion quota values when killing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding oldest query or refusing to recurse due to quota.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19022]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2506. [port] solaris: Check at configure time if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hack_shutup_pthreadonceinit is needed. [RT #19037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2505. [port] Treat amd64 similarly to x86_64 when determining
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic operation support. [RT #19031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2504. [bug] Address race condition in the socket code. [RT #18899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2503. [port] linux: improve compatibility with Linux Standard
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Base. [RT #18793]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2502. [cleanup] isc_radix: Improve compliance with coding style,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding document function in <isc/radix.h>. [RT #18534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2501. [func] $GENERATE now supports all rdata types. Multi-field
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdata types need to be quoted. See the ARM for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding details. [RT #18368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function. [RT #18582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18837]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2498. [bug] Removed a bogus function argument used with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_SOCKET_USE_POLLWATCH: it could cause compiler
cfa64348224b66dd1c9979b809406c4d15b1c137fielding warning or crash named with the debug 1 level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of logging. [RT #18917]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2496. [bug] Add sanity length checks to NSID option. [RT #18813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2495. [bug] Tighten RRSIG checks. [RT #18795]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding installed. [RT #18826]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2493. [bug] The linux capabilities code was not correctly cleaning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding up after itself. [RT #18767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2492. [func] Rndc status now reports the number of cpus discovered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and the number of worker threads when running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multi-threaded. [RT #18273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2491. [func] Attempt to re-use a local port if we are already using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the port. [RT #18548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is cleared when IPV6_V6ONLY is set. [RT #18785]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2489. [port] solaris: Workaround Solaris's kernel bug about
cfa64348224b66dd1c9979b809406c4d15b1c137fielding http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Define ISC_SOCKET_USE_POLLWATCH at build time to enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this workaround. [RT #18870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from keyset and .key files. [RT #18694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2487. [bug] Give TCP connections longer to complete. [RT #18675]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2486. [func] The default locations for named.pid and lwresd.pid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows the owner of the containing directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be set, for "named -u" support, and allows there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be a permanent symbolic link in the path, for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "named -t" support. [RT #18306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2485. [bug] Change update's the handling of obscured RRSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records. Not all orphaned DS records were being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removed. [RT #18828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2484. [bug] It was possible to trigger a REQUIRE failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding NSEC3 proofs to the response in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query_addwildcardproof(). [RT #18828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2483. [port] win32: chroot() is not supported. [RT #18805]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2482. [port] libxml2: support versions 2.7.* in addition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 2.6.*. [RT #18806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding collisions. [RT #18812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2480. [bug] named could fail to emit all the required NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records. [RT #18812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2478. [bug] 'addresses' could be used uninitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure_forward(). [RT #18800]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2477. [bug] dig: the global option to print the command line is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding +cmd not print_cmd. Update the output to reflect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this. [RT #17008]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2476. [doc] ARM: improve documentation for max-journal-size and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences. [RT #15909] [RT #18541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2475. [bug] LRU cache cleanup under overmem condition could purge
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particular entries more aggressively. [RT #17628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2474. [bug] ACL structures could be allocated with insufficient
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space, causing an array overrun. [RT #18765]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2473. [port] linux: raise the limit on open files to the possible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maximum value before spawning threads; 'files'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified in named.conf doesn't seem to work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding threads as expected. [RT #18784]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2472. [port] linux: check the number of available cpu's before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling chroot as it depends on "/proc". [RT #16923]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2471. [bug] named-checkzone was not reporting missing mandatory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue when sibling checks were disabled. [RT #18768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2470. [bug] Elements of the isc_radix_node_t could be incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overwritten. [RT #18719]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2469. [port] solaris: Work around Solaris's select() limitations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2468. [bug] Resolver could try unreachable servers multiple times.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18302]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2465. [bug] Adb's handling of lame addresses was different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv4 and IPv6. [RT #18738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2464. [port] linux: check that a capability is present before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trying to set it. [RT #18135]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API and glibc hides parts of the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API as a result. This is stupid as it breaks how the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding two halves (Basic and Advanced) of the IPv6 Socket API
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were designed to be used but we have to live with it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API. [RT #18388]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2462. [doc] Document -m (enable memory usage debugging)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option for dig. [RT #18757]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2461. [port] sunos: Change #2363 was not complete. [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18697]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2458. [doc] ARM: update and correction for max-cache-size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2457. [tuning] max-cache-size is reverted to 0, the previous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default. It should be safe because expired cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries are also purged. [RT #18684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address, regardless of family. They now correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding distinguish IPv4 from IPv6. [RT #18559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2455. [bug] Stop metadata being transferred via axfr/ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2453. [bug] Remove NULL pointer dereference in dns_journal_print().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2452. [func] Improve bin/test/journalprint. [RT #18316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2451. [port] solaris: handle runtime linking better. [RT #18356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2450. [doc] Fix lwresd docbook problem for manual page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2449. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2448. [func] Add NSEC3 support. [RT #15452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2447. [cleanup] libbind has been split out as a separate product.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2446. [func] Add a new log message about build options on startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A new command-line option '-V' for named is also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provided to show this information. [RT #18645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2445. [doc] ARM out-of-date on empty reverse zones (list includes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC1918 address, but these are not yet compiled in).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18578]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (clear DF) for UDP responses and requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2443. [bug] win32: UDP connect() would not generate an event,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and so connected UDP sockets would never clean up.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Fix this by doing an immediate WSAConnect() rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than an io completion port type for UDP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2442. [bug] A lock could be destroyed twice. [RT #18626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2441. [bug] isc_radix_insert() could copy radix tree nodes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incompletely. [RT #18573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2440. [bug] named-checkconf used an incorrect test to determine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if an ACL was set to none.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2438. [bug] Timeouts could be logged incorrectly under win32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2437. [bug] Sockets could be closed too early, leading to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inconsistent states in the socket module. [RT #18298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2435. [bug] Fixed an ACL memory leak affecting win32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2434. [bug] Fixed a minor error-reporting bug in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2433. [tuning] Set initial timeout to 800ms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2432. [bug] More Windows socket handling improvements. Stop
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using I/O events and use IO Completion Ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding throughout. Rewrite the receive path logic to make
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it easier to support multiple simultaneous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requesters in the future. Add stricter consistency
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checking as a compile-time option (define
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2431. [bug] Acl processing could leak memory. [RT #18323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2430. [bug] win32: isc_interval_set() could round down to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zero if the input was less than NS_INTERVAL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nanoseconds. Round up instead. [RT #18549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2429. [doc] nsupdate should be in section 1 of the man pages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18283]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2428. [bug] dns_iptable_merge() mishandled merges of negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tables. [RT #18409]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was set. [RT #18528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2426. [bug] libbind: inet_net_pton() can sometimes return the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong value if excessively large net masks are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supplied. [RT #18512]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2425. [bug] named didn't detect unavailable query source addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at load time. [RT #18536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2424. [port] configure now probes for a working epoll
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementation. Allow the use of kqueue,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding epoll and /dev/poll to be selected at compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #18277]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2423. [security] Randomize server selection on queries, so as to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding make forgery a little more difficult. Instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always preferring the server with the lowest RTT,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pick a server with RTT within the same 128
cfa64348224b66dd1c9979b809406c4d15b1c137fielding millisecond band. [RT #18441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2422. [bug] Handle the special return value of a empty node as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if it was a NXRRSET in the validator. [RT #18447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2421. [func] Add new command line option '-S' for named to specify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the max number of sockets. [RT #18493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use caution: this option may not work for some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding operating systems without rebuilding named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2420. [bug] Windows socket handling cleanup. Let the io
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completion event send out canceled read/write
cfa64348224b66dd1c9979b809406c4d15b1c137fielding done events, which keeps us from writing to memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we no longer have ownership of. Add debugging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socket_log() function. Rework TCP socket handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to not leak sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should not be used for isc_sockettype_fdwatch sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2417. [bug] Connecting UDP sockets for outgoing queries could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpectedly fail with an 'address already in use'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #18411]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2416. [func] Log file descriptors that cause exceeding the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding internal maximum. [RT #18460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2415. [bug] 'rndc dumpdb' could trigger various assertion failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in rbtdb.c. [RT #18455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2414. [bug] A masterdump context held the database lock too long,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing various troubles such as dead lock and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursive lock acquisition. [RT #18311, #18456]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2412. [bug] win32: address a resource leak. [RT #18374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at compilation time. [RT #18433]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: with changes #2469 and #2421 above, there is no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2410. [bug] Correctly delete m_versionInfo. [RT #18432]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2409. [bug] Only log that we disabled EDNS processing if we were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subsequently successful. [RT #18029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2408. [bug] A duplicate TCP dispatch event could be sent, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could then trigger an assertion failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resquery_response(). [RT #18275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2406. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2405. [cleanup] The default value for dnssec-validation was changed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "yes" in 9.5.0-P1 and all subsequent releases; this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was inadvertently omitted from CHANGES at the time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2404. [port] hpux: files unlimited support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2403. [bug] TSIG context leak. [RT #18341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2402. [port] Support Solaris 2.11 and over. [RT #18362]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2401. [bug] Expect to get E[MN]FILE errno internal_accept()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (from accept() or fcntl() system calls). [RT #18358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2399. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2398. [bug] Improve file descriptor management. New,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding temporary, named.conf option reserved-sockets,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default 512. [RT #18344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2397. [bug] gssapi_functions had too many elements. [RT #18355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2396. [bug] Don't set SO_REUSEADDR for randomized ports.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2395. [port] Avoid warning and no effect from "files unlimited"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on Linux when running as root. [RT #18335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2394. [bug] Default configuration options set the limit for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding open files to 'unlimited' as described in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation. [RT #18331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2393. [bug] nested acls containing keys could trigger an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion in acl.c. [RT #18166]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2392. [bug] remove 'grep -q' from acl test script, some platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding don't support it. [RT #18253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2391. [port] hpux: cover additional recvmsg() error codes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2390. [bug] dispatch.c could make a false warning on 'odd socket'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18301].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2389. [bug] Move the "working directory writable" check to after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the ns_os_changeuser() call. [RT #18326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2388. [bug] Avoid using tables for layout purposes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics XSL [RT #18159].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2387. [bug] Silence compiler warnings in lib/isc/radix.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18147] [RT #18258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2386. [func] Add warning about too small 'open files' limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2385. [bug] A condition variable in socket.c could leak in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rare error handling [RT #17968].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2384. [security] Fully randomize UDP query ports to improve
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forgery resilience. [RT #17949, #18098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2383. [bug] named could double queries when they resulted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SERVFAIL due to overkilling EDNS0 failure detection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2381. [port] dlz/mysql: support multiple install layouts for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding mysql. <prefix>/include/{,mysql/}mysql.h and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <prefix>/lib/{,mysql/}. [RT #18152]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proofs which, in turn, caused validation failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for insecure zones immediately below a secure zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server was authoritative for. [RT #18112]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TLDs and supported RRs with TTLs [RT #17972]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18169]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2376. [bug] Change #2144 was not complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2375. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2374. [bug] "blackhole" ACLs could cause named to segfault due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to some uninitialized memory. [RT #18095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2373. [bug] Default values of zone ACLs were re-parsed each time a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new zone was configured, causing an overconsumption
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #18092]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2371. [doc] Add +nsid option to dig man page. [RT #18039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2370. [bug] "rndc freeze" could trigger an assertion in named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when called on a nonexistent zone. [RT #18050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2369. [bug] libbind: Array bounds overrun on read in bitncmp().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2368. [port] Linux: use libcap for capability management if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible. [RT #18026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2367. [bug] Improve counting of dns_resstatscounter_retry
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2366. [bug] Adb shutdown race. [RT #18021]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2365. [bug] Fix a bug that caused dns_acl_isany() to return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spurious results. [RT #18000]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2364. [bug] named could trigger a assertion when serving a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malformed signed zone. [RT #17828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2362. [cleanup] Make "rrset-order fixed" a compile-time option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding settable by "./configure --enable-fixed-rrset".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Disabled by default. [RT #17977]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2361. [bug] "recursion" statistics counter could be counted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple times for a single query. [RT #17990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2360. [bug] Fix a condition where we release a database version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (which may acquire a lock) while holding the lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2359. [bug] Fix NSID bug. [RT #17942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2358. [doc] Update host's default query description. [RT #17934]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2357. [port] Don't use OpenSSL's engine support in versions before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL 0.9.7f. [RT #17922]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2356. [bug] Built in mutex profiler was not scalable enough.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17436]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2355. [func] Extend the number statistics counters available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2354. [bug] Failed to initialize some rdatasetheader_t elements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2353. [func] Add support for Name Server ID (RFC 5001).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'dig +nsid' requests NSID from server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'request-nsid yes;' causes recursive server to send
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSID requests to upstream servers. Server responds
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to NSID requests with the string configured by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'server-id' option. [RT #17091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2352. [bug] Various GSS_API fixups. [RT #17729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2350. [port] win32: IPv6 support. [RT #17797]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2349. [func] Provide incremental re-signing support for secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic zones. [RT #1091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Documentation is in the new README.pkcs11 file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New tool, dnssec-keyfromlabel, which takes the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding label of a key pair in a HSM and constructs a DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key pair for use by named and dnssec-signzone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2347. [bug] Delete now traverses the RB tree in the canonical
cfa64348224b66dd1c9979b809406c4d15b1c137fielding order. [RT #17451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2346. [func] Memory statistics now cover all active memory contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in increased detail. [RT #17580]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2345. [bug] named-checkconf failed to detect when forwarders
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were set at both the options/view level and in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a root zone. [RT #17671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2344. [bug] Improve "logging{ file ...; };" documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17888]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2343. [bug] (Seemingly) duplicate IPv6 entries could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding created in ADB. [RT #17837]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2341. [bug] libbind: add missing -I../include for off source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tree builds. [RT #17606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2340. [port] openbsd: interface configuration. [RT #17700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2339. [port] tru64: support for libbind. [RT #17589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2338. [bug] check_ds() could be called with a non DS rdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2336. [func] If "named -6" is specified then listen on all IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces if there are not listen-on-v6 clauses in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2335. [port] sunos: libbind and *printf() support for long long.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bug in fromstruct_txt(). [RT #17609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2333. [bug] Fix off by one error in isc_time_nowplusinterval().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17608]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2332. [contrib] query-loc-0.4.0. [RT #17602]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2331. [bug] Failure to regenerate any signatures was not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported nor being past back to the UPDATE client.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2330. [bug] Remove potential race condition when handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding over memory events. [RT #17572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding WARNING: API CHANGE: over memory callback
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function now needs to call isc_mem_waterack().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See <isc/mem.h> for details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2329. [bug] Clearer help text for dig's '-x' and '-i' options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2327. [bug] It was possible to dereference a NULL pointer in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rbtdb.c. Implement dead node processing in zones as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we do for caches. [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2326. [bug] It was possible to trigger a INSIST in the acache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2325. [port] Linux: use capset() function if available. [RT #17557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2323. [port] tru64: namespace clash. [RT #17547]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2322. [port] MacOS: work around the limitation of setrlimit()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for RLIMIT_NOFILE. [RT #17526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2321. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2320. [func] Make statistics counters thread-safe for platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that support certain atomic operations. [RT #17466]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2319. [bug] Silence Coverity warnings in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2318. [port] sunos fixes for libbind. [RT #17514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2315. [bug] Used incorrect address family for mapped IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses in acl.c. [RT #17519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2314. [bug] Uninitialized memory use on error path in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2313. [cleanup] Silence Coverity warnings. Handle private stacks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17447] [RT #17478]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17458]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2311. [bug] IPv6 addresses could match IPv4 ACL entries and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vice versa. [RT #17462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2310. [bug] dig, host, nslookup: flush stdout before emitting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug/fatal messages. [RT #17501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2306. [bug] Remove potential race from lib/dns/resolver.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17470]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2305. [security] inet_network() buffer overflow. CVE-2008-0122.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2304. [bug] Check returns from all dns_rdata_tostruct() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17471]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2301. [bug] Remove resource leak and fix error messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2300. [bug] Fixed failure to close open file in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2299. [bug] Remove unnecessary NULL check in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2298. [bug] isc_mutex_lock() failure not caught in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2297. [bug] isc_entropy_createfilesource() failure not caught in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2296. [port] Allow docbook stylesheet location to be specified to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure. [RT #17457]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17459]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2294. [func] Allow the experimental statistics channels to have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple connections and ACL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: the stats-server and stats-server-v6 options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available in the previous beta releases are replaced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the generic statistics-channels statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2293. [func] Add ACL regression test. [RT #17375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2292. [bug] Log if the working directory is not writable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure to set PR_SET_DUMPABLE. [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2290. [bug] Let AD in the query signal that the client wants AD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set in the response. [RT #17301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2289. [func] named-checkzone now reports the out-of-zone CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #17309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2288. [port] win32: mark service as running when we have finished
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loading. [RT #17441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2286. [func] Allow a TCP connection to be used as a weak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authentication method for reverse zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New update-policy methods tcp-self and 6to4-self.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2285. [func] Test framework for client memory context management.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2284. [bug] Memory leak in UPDATE prerequisite processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2283. [bug] TSIG keys were not attaching to the memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. TSIG keys should use the rings
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory context rather than the clients memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2281. [bug] Attempts to use undefined acls were not being logged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17307]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2280. [func] Allow the experimental http server to be reached
cfa64348224b66dd1c9979b809406c4d15b1c137fielding over IPv6 as well as IPv4. [RT #17332]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to protect applications from receiving spurious
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIGPIPE signals when using the resolver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2278. [bug] win32: handle the case where Windows returns no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding search list or DNS suffix. [RT #17354]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2277. [bug] Empty zone names were not correctly being caught at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the post parse checks. [RT #17357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2276. [bug] Install <dst/gssapi.h>. [RT #17359]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2275. [func] Add support to dig to perform IXFR queries over UDP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17235]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2274. [func] Log zone transfer statistics. [RT #17336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2273. [bug] Adjust log level to WARNING when saving inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stub/slave master and journal files. [RT #17279]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2271. [bug] Fix a memory leak in http server code [RT #17100]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2270. [bug] dns_db_closeversion() version->writer could be reset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before it is tested. [RT #17290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2267. [bug] Radix tree node_num value could be set incorrectly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing positive ACL matches to look like negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ones. [RT #17311]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2266. [bug] client.c:get_clientmctx() returned the same mctx
cfa64348224b66dd1c9979b809406c4d15b1c137fielding once the pool of mctx's was filled. [RT #17218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2265. [bug] Test that the memory context's basic_table is non NULL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before freeing. [RT #17265]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2264. [bug] Server prefix length was being ignored. [RT #17308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2263. [bug] "named-checkconf -z" failed to set default value
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for "check-integrity". [RT #17306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2262. [bug] Error status from all but the last view could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lost. [RT #17292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2260. [bug] Reported wrong clients-per-query when increasing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding value. [RT #17236]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2259. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a7 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2257. [bug] win32: Use the full path to vcredist_x86.exe when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling it. [RT #17222]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2256. [bug] win32: Correctly register the installation location of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2254. [bug] timer.c:dispatch() failed to lock timer->lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reading timer->idle allowing it to see
cfa64348224b66dd1c9979b809406c4d15b1c137fielding intermediate values as timer->idle was reset by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_timer_touch(). [RT #17243]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2253. [func] "max-cache-size" defaults to 32M.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "max-acache-size" defaults to 16M.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2252. [bug] Fixed errors in sortlist code [RT #17216]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2251. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2250. [func] New flag 'memstatistics' to state whether the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory statistics file should be written or not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Additionally named's -m option will cause the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics file to be written. [RT #17113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2249. [bug] Only set Authentic Data bit if client requested
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC, per RFC 3655 [RT #17175]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2247. [doc] Sort doc/misc/options. [RT #17067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2246. [bug] Make the startup of test servers (ans.pl) more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding robust. [RT #17147]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2245. [bug] Validating lack of DS records at trust anchors wasn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding working. [RT #17151]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2244. [func] Allow the check of nameserver names against the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SOA MNAME field to be disabled by specifying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'notify-to-soa yes;'. [RT #17073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2243. [func] Configuration files without a newline at the end now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parse without error. [RT #17120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
cfa64348224b66dd1c9979b809406c4d15b1c137fielding library could require a source of random data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17127]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a number of INSIST()s into plain fatal() errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which report the triggering result code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The 'key' command wasn't disabling GSS-TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2238. [bug] It was possible to trigger a REQUIRE when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation was canceled. [RT #17106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2236. [bug] dnssec-signzone failed to preserve the case of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of wildcard owner names. [RT #17085]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2233. [func] Add support for O(1) ACL processing, based on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding radix tree code originally written by Kevin
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Brintnall. [RT #16288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2232. [bug] dns_adb_findaddrinfo() could fail and return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_SUCCESS. [RT #17137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17088]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2230. [bug] We could INSIST reading a corrupted journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17132]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2229. [bug] Null pointer dereference on query pool creation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #17133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2228. [contrib] contrib: Change 2188 was incomplete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2227. [cleanup] Tidied up the FAQ. [RT #17121]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2226. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2225. [bug] More support for systems with no IPv4 addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17111]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2224. [bug] Defer journal compaction if a xfrin is in progress.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2223. [bug] Make a new journal when compacting. [RT #17119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2222. [func] named-checkconf now checks server key references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17097]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2221. [bug] Set the event result code to reflect the actual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record turned to caller when a cache update is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejected due to a more credible answer existing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2220. [bug] win32: Address a race condition in final shutdown of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the Windows socket code. [RT #17028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2219. [bug] Apply zone consistency checks to additions, not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removals, when updating. [RT #17049]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2217. [func] Adjust update log levels. [RT #17092]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2216. [cleanup] Fix a number of errors reported by Coverity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17094]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2214. [bug] Deregister OpenSSL lock callback when cleaning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding up. Reorder OpenSSL cleanup so that RAND_cleanup()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is called before the locks are destroyed. [RT #17098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2213. [bug] SIG0 diagnostic failure messages were looking at the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong status code. [RT #17101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2212. [func] 'host -m' now causes memory statistics and active
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory to be printed at exit. [RT 17028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2211. [func] Update "dynamic update temporarily disabled" message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2210. [bug] Deleting class specific records via UPDATE could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #17074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2209. [port] osx: linking against user supplied static OpenSSL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding libraries failed as the system ones were still being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #17078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2208. [port] win32: make sure both build methods produce the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same output. [RT #17058]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2207. [port] Some implementations of getaddrinfo() fail to set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ai_canonname correctly. [RT #17061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a6 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2206. [security] "allow-query-cache" and "allow-recursion" now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cross inherit from each other.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-query-cache is not set in named.conf then
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-recursion is used if set, otherwise allow-query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is used if set, otherwise the default (localnets;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding localhost;) is used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-recursion is not set in named.conf then
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache is used if set, otherwise allow-query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is used if set, otherwise the default (localnets;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding localhost;) is used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16987]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2204. [bug] "rndc flushname name unknown-view" caused named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to crash. [RT #16984]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2203. [security] Query id generation was cryptographically weak.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT # 16915]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2202. [security] The default acls for allow-query-cache and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-recursion were not being applied. [RT #16960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2201. [bug] The build failed in a separate object directory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2200. [bug] The search for cached NSEC records was stopping to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding early leading to excessive DLV queries. [RT #16930]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2199. [bug] win32: don't call WSAStartup() while loading dlls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2198. [bug] win32: RegCloseKey() could be called when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RegOpenKeyEx() failed. [RT #16911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2197. [bug] Add INSIST to catch negative responses which are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not setting the event result code appropriately.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16909]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2196. [port] win32: yield processor while waiting for once to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to complete. [RT #16958]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2195. [func] dnssec-keygen now defaults to nametype "ZONE"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when generating DNSKEYs. [RT #16954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2194. [bug] Close journal before calling 'done' in xfrin.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a5 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2193. [port] win32: BINDInstall.exe is now linked statically.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2192. [port] win32: use vcredist_x86.exe to install Visual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Studio's redistributable dlls if building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Visual Stdio 2005 or later.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2191. [func] named-checkzone now allows dumping to stdout (-).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkconf now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Better handling of '-?' for usage summaries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2190. [func] Make fallback to plain DNS from EDNS due to timeouts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more visible. New logging category "edns-disabled".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2189. [bug] Handle socket() returning EINTR. [RT #15949]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2188. [contrib] queryperf: autoconf changes to make the search for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding libresolv or libbind more robust. [RT #16299]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2187. [bug] query_addds(), query_addwildcardproof() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query_addnxrrsetnsec() should take a version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding argument. [RT #16368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2186. [port] cygwin: libbind: check for struct sockaddr_storage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding independently of IPv6. [RT #16482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2185. [port] sunos: libbind: check for ssize_t, memmove() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memchr(). [RT #16463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2184. [bug] bind9.xsl.h didn't build out of the source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16830]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2183. [bug] dnssec-signzone didn't handle offline private keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding well. [RT #16832]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could return ISC_R_SUCCESS when they ran out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #16365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2180. [cleanup] Remove bit test from 'compress_test' as they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are no longer needed. [RT #16497]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2179. [func] 'rndc command zone' will now find 'zone' if it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unique to all the views. [RT #16821]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2178. [bug] 'rndc reload' of a slave or stub zone resulted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a reference leak. [RT #16867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2177. [bug] Array bounds overrun on read (rcodetext) at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug level 10+. [RT #16798]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2176. [contrib] dbus update to handle race condition during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialization (Bugzilla 235809). [RT #16842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2175. [bug] win32: windows broadcast condition variable support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was broken. [RT #16592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2174. [bug] I/O errors should always be fatal when reading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master files. [RT #16825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2173. [port] win32: When compiling with MSVS 2005 SP1 we also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a4 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2172. [bug] query_addsoa() was being called with a non zone db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16834]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2171. [bug] Handle breaks in DNSSEC trust chains where the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers are not DS aware (DS queries to the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding return a referral to the child).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2170. [func] Add acache processing to test suite. [RT #16711]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2169. [bug] host, nslookup: when reporting NXDOMAIN report the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding given name and not the last name searched for.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2168. [bug] nsupdate: in non-interactive mode treat syntax errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as fatal errors. [RT #16785]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2167. [bug] When re-using a automatic zone named failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attach it to the new view. [RT #16786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2166. [bug] When running in batch mode, dig could misinterpret
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a server address as a name to be looked up, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected output. [RT #16743]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2165. [func] Allow the destination address of a query to determine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if we will answer the query or recurse.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-on, allow-recursion-on and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache-on. [RT #16291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2164. [bug] The code to determine how named-checkzone /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone was called failed under windows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16764]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2163. [bug] If only one of query-source and query-source-v6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified a port the query pools code broke (change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 2129). [RT #16768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2162. [func] Allow "rrset-order fixed" to be disabled at compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #16665]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2161. [bug] Fix which log messages are emitted for 'rndc flush'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16698]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from getifaddrs(). [RT #16708]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2159. [bug] Array bounds overrun in acache processing. [RT #16710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2158. [bug] ns_client_isself() failed to initialize key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leading to a REQUIRE failure. [RT #16688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2157. [func] dns_db_transfernode() created. [RT #16685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolver.c:validated() and resolver.c:cache_name().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Fix a memory leak in rbtdb.c:free_noqname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Make lookup.c:lookup_find() robust against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding event leaks. [RT #16685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched in acls by omitting the scope. [RT #16599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2153. [bug] nsupdate could leak memory. [RT #16691]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2152. [cleanup] Use sizeof(buf) instead of fixed number in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dighost.c:get_trusted_key(). [RT #16678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2151. [bug] Missing newline in usage message for journalprint.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2150. [bug] 'rrset-order cyclic' uniformly distribute the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding starting point for the first response for a given
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRset. [RT #16655]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2149. [bug] isc_mem_checkdestroyed() failed to abort on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there were still active memory contexts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2148. [func] Add positive logging for rndc commands. [RT #14623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2147. [bug] libbind: remove potential buffer overflow from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SO_BSDCOMPAT" message. [RT #16641]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2145. [bug] Check DS/DLV digest lengths for known digests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16622]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2143. [bug] We failed to restart the IPv6 client when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding kernel failed to return the destination the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding packet was sent to. [RT #16613]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2142. [bug] Handle master files with a modification time that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matches the epoch. [RT #16612]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding equivalent of LDH checks). [RT #16609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2140. [bug] libbind: missing unlock on pthread_key_create()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. [RT #16654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2139. [bug] dns_view_find() was being called with wrong type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in adb.c. [RT #16670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2138. [bug] Lock order reversal in resolver.c. [RT #16653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2137. [port] Mips little endian and/or mips 64 bit are now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported for atomic operations. [RT #16648]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2136. [bug] nslookup/host looped if there was no search list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and the host didn't exist. [RT #16657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2134. [func] Additional statistics support. [RT #16666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2133. [port] powerpc: Support both IBM and MacOS Power PC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assembler syntaxes. [RT #16647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2132. [bug] Missing unlock on out of memory in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dispatchmgr_setudp().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2130. [func] Log if CD or DO were set. [RT #16640]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2129. [func] Provide a pool of UDP sockets for queries to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding made over. See use-queryport-pool, queryport-pool-ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and queryport-pool-updateinterval. [RT #16415]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2126. [security] Serialize validation of type ANY responses. [RT #16555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was defined. [RT #16574]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2124. [security] It was possible to dereference a freed fetch
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. [RT #16584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2123. [func] Use Doxygen to generate internal documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2122. [func] Experimental http server and statistics support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for named via xml.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
cfa64348224b66dd1c9979b809406c4d15b1c137fielding second timeout. [RT #16553]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2120. [doc] Fix markup on nsupdate man page. [RT #16556]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2119. [compat] libbind: allow res_init() to succeed enough to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding return the default domain even if it was unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to allocate memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2118. [bug] Handle response with long chains of domain name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compression pointers which point to other compression
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pointers. [RT #16427]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which could lead to validation failures. named didn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handle negative DS responses that were in the process
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of being validated. Check CNAME bit before accepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NODATA proof. To be able to ignore a child NSEC there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding must be SOA (and NS) set in the bitmap. [RT #16399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2116. [bug] 'rndc reload' could cause the cache to continually
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be cleaned. [RT #16401]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2115. [bug] 'rndc reconfig' could trigger a INSIST if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of masters for a zone was reduced. [RT #16444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2114. [bug] dig/host/nslookup: searches for names with multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding labels were failing. [RT #16447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2113. [bug] nsupdate: if a zone is specified it should be used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for server discover. [RT #16455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2112. [security] Warn if weak RSA exponent is used. [RT #16460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2111. [bug] Fix a number of errors reported by Coverity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding priming queries. [RT #16491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2108. [func] DHCID support. [RT #16456]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2106. [func] 'rndc status' now reports named's version. [RT #16426]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2105. [func] GSS-TSIG support (RFC 3645).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2104. [port] Fix Solaris SMF error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2103. [port] Add /usr/sfw to list of locations for OpenSSL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding under Solaris.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2102. [port] Silence Solaris 10 warnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2101. [bug] OpenSSL version checks were not quite right.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2100. [port] win32: copy libeay32.dll to Build\Debug.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Copy Debug\named-checkzone to Debug\named-compilezone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2099. [port] win32: more manifest issues.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2098. [bug] Race in rbtdb.c:no_references(), which occasionally
cfa64348224b66dd1c9979b809406c4d15b1c137fielding triggered an INSIST failure about the node lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference. [RT #16411]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2097. [bug] named could reference a destroyed memory context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after being reloaded / reconfigured. [RT #16428]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2096. [bug] libbind: handle applications that fail to detect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding res_init() failures better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding net_cidr_ntop_ipv6(). [RT #16388]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2094. [contrib] Update named-bootconf. [RT #16404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2093. [bug] named-checkzone -s was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2092. [bug] win32: dig, host, nslookup. Use registry config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if resolv.conf does not exist or no nameservers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listed. [RT #15877]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2091. [port] dighost.c: race condition on cleanup. [RT #16417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2090. [port] win32: Visual C++ 2005 command line manifest support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2089. [security] Raise the minimum safe OpenSSL versions to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prior to these have known security flaws which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are (potentially) exploitable in named. [RT #16391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2088. [security] Change the default RSA exponent from 3 to 65537.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2086. [port] libbind: FreeBSD now has get*by*_r() functions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16403]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2085. [doc] win32: added index.html and README to zip. [RT #16201]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2084. [contrib] dbus update for 9.3.3rc2.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2083. [port] win32: Visual C++ 2005 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2082. [doc] Document 'cache-file' as a test only option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2080. [port] libbind: res_init.c did not compile on older versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of Solaris. [RT #16363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2079. [bug] The lame cache was not handling multiple types
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #16361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2078. [bug] dnssec-checkzone output style "default" was badly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. It is now called "relative". [RT #16326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complete signed zone. [RT #16326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2076. [bug] Several files were missing #include <config.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing build failures on OSF. [RT #16341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2075. [bug] The spillat timer event hander could leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_createraw2() and dns_request_createraw3()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to send multiple UDP requests. [RT #16349]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2073. [bug] Incorrect semantics check for update policy "wildcard".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16353]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2072. [bug] We were not generating valid HMAC SHA digests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16320]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2071. [port] Test whether gcc accepts -fno-strict-aliasing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2070. [bug] The remote address was not always displayed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reporting dispatch failures. [RT #16315]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2069. [bug] Cross compiling was not working. [RT #16330]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2068. [cleanup] Lower incremental tuning message to debug 1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16319]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2067. [bug] 'rndc' could close the socket too early triggering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a INSIST under Windows. [RT #16317]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2066. [security] Handle SIG queries gracefully. [RT #16300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2065. [bug] libbind: probe for HPUX prototypes for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding endprotoent_r() and endservent_r(). [RT 16313]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2063. [bug] Change #1955 introduced a bug which caused the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc flush' call to not free memory. [RT #16244]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2062. [bug] 'dig +nssearch' was reusing a buffer before it had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been returned by the socket code. [RT #16307]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2061. [bug] Accept expired wildcard message reversed. [RT #16296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2060. [bug] Enabling DLZ support could leave views partially
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured. [RT #16295]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2059. [bug] Search into cache rbtdb could trigger an INSIST
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure while cleaning up a stale rdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2058. [bug] Adjust how we calculate rtt estimates in the presence
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of authoritative servers that drop EDNS and/or CD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requests. Also fallback to EDNS/512 and plain DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding faster for zones with less than 3 servers. [RT #16187]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2057. [bug] Make setting "ra" dependent on both allow-query-cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and allow-recursion. [RT #16290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2056. [bug] dig: ixfr= was not being treated case insensitively
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at all times. [RT #15955]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2055. [bug] Missing goto after dropping multicast query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2054. [port] freebsd: do not explicitly link against -lpthread.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16170]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2052. [bug] 'rndc' improve connect failed message to report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the failing address. [RT #15978]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2051. [port] More strtol() fixes. [RT #16249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2050. [bug] Parsing of NSAP records was not case insensitive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2049. [bug] Restore SOA before AXFR when falling back from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a attempted IXFR when transferring in a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Allow a initial SOA query before attempting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a AXFR to be requested. [RT #16156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2048. [bug] It was possible to loop forever when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid-v4-udp-ports / avoid-v6-udp-ports when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OS always returned the same local port.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2047. [bug] Failed to initialize the interface flags to zero.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16245]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cleanup [RT #16247].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2045. [func] Use lock buckets for acache entries to limit memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consumption. [RT #16183]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2044. [port] Add support for atomic operations for Itanium.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16179]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2043. [port] nsupdate/nslookup: Force the flushing of the prompt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for interactive sessions. [RT #16148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2042. [bug] named-checkconf was incorrectly rejecting the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging category "config". [RT #16117]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of libraries to be linked. [RT #16129]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2040. [bug] rbtdb no_references() could trigger an INSIST
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure with --enable-atomic. [RT #16022]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2039. [func] Check that all buffers passed to the socket code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have been retrieved when the socket event is freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2038. [bug] dig/nslookup/host was unlinking from wrong list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when handling errors. [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2037. [func] When unlinking the first or last element in a list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check that the list head points to the element to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be unlinked. [RT #15959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2035. [func] Make falling back to TCP on UDP refresh failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding optional. Default "try-tcp-refresh yes;" for BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility. [RT #16123]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2033. [bug] We weren't creating multiple client memory contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on demand as expected. [RT #16095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2031. [bug] Emit a error message when "rndc refresh" is called on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a non slave/stub zone. [RT # 16073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2030. [bug] We were being overly conservative when disabling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding openssl engine support. [RT #16030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2029. [bug] host printed out the server multiple times when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified on the command line. [RT #15992]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2028. [port] linux: socket.c compatibility for old systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2027. [port] libbind: Solaris x86 support. [RT #16020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2026. [bug] Rate limit the two recursive client exceeded messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2025. [func] Update "zone serial unchanged" message. [RT #16026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2024. [bug] named emitted spurious "zone serial unchanged"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages on reload. [RT #16027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2023. [bug] "make install" should create ${localstatedir}/run and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ${sysconfdir} if they do not exist. [RT #16033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2022. [bug] If dnssec validation is disabled only assert CD if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD was requested. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2019. [tuning] Reduce the amount of work performed per quantum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when cleaning the cache. [RT #15986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2018. [bug] Checking if the HMAC MD5 private file was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2017. [bug] allow-query default was not correct. [RT #15946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2016. [bug] Return a partial answer if recursion is not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allowed but requested and we had the answer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the original qname. [RT #15945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2015. [cleanup] use-additional-cache is now acache-enable for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency. Default acache-enable off in BIND 9.4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as it requires memory usage to be configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It may be enabled by default in BIND 9.5 once we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have more experience with it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2014. [func] Statistics about acache now recorded and sent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to log. [RT #15976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses more gracefully. [RT #15941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2012. [func] Don't insert new acache entries if acache is full.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2011. [func] dnssec-signzone can now update the SOA record of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the signed zone, either as an increment or as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding system time(). [RT #15633]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2010. [placeholder] rt15958
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2009. [bug] libbind: Coverity fixes. [RT #15808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2008. [func] It is now possible to enable/disable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation from rndc. This is useful for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding mobile hosts where the current connection point
cfa64348224b66dd1c9979b809406c4d15b1c137fielding breaks DNSSEC (firewall/proxy). [RT #15592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc validation newstate [view]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2007. [func] It is now possible to explicitly enable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation. default dnssec-validation no; to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be changed to yes in 9.5.0. [RT #15674]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2006. [security] Allow-query-cache and allow-recursion now default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the built in acls "localnets" and "localhost".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is being done to make caching servers less
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attractive as reflective amplifying targets for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spoofed traffic. This still leave authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers exposed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The best fix is for full BCP 38 deployment to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remove spoofed traffic.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2005. [bug] libbind: Retransmission timeouts should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on which attempt it is to the nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and not the nameserver itself. [RT #13548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2004. [bug] dns_tsig_sign() could pass a NULL pointer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_context_destroy() when cleaning up after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #15835]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2003. [bug] libbind: The DNS name/address lookup functions could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occasionally follow a random pointer due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structures not being completely zeroed. [RT #15806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2002. [bug] libbind: tighten the constraints on when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding struct addrinfo._ai_pad exists. [RT #15783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2001. [func] Check the KSK flag when updating a secure dynamic zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone option "update-check-ksk yes;". [RT #15817]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1999. [func] Implement "rrset-order fixed". [RT #13662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1998. [bug] Restrict handling of fifos as sockets to just SunOS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows named to connect to entropy gathering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding daemons that use fifos instead of sockets. [RT #15840]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1997. [bug] Named was failing to replace negative cache entries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a positive one for the type was learnt.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15818]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1996. [bug] nsupdate: if a zone has been specified it should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear in the output of 'show'. [RT #15797]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1995. [bug] 'host' was reporting multiple "is an alias" messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1994. [port] OpenSSL 0.9.8 support. [RT #15694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1993. [bug] Log messages, via syslog, were missing the space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after the timestamp if "print-time yes" was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1992. [bug] Not all incoming zone transfer messages included the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view. [RT #15825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1991. [cleanup] The configuration data, once read, should be treated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as read only. Expand the use of const to enforce this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at compile time. [RT #15813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1990. [bug] libbind: isc's override of broken gettimeofday()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations was not always effective.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15709]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1989. [bug] win32: don't check the service password when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-installing. [RT #15882]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1988. [bug] Remove a bus error from the SHA256/SHA512 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15878]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1986. [func] Report when a zone is removed. [RT #15849]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1985. [protocol] DLV has now been assigned a official type code of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 32769. [RT #15807]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: care should be taken to ensure you upgrade
cfa64348224b66dd1c9979b809406c4d15b1c137fielding both named and dnssec-signzone at the same time for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones with DLV records where named is the master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the zone. Also any zones that contain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLV records should be removed when upgrading a slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. You do not however have to upgrade all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers for a zone with DLV records simultaneously.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1984. [func] dig, nslookup and host now advertise a 4096 byte
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EDNS UDP buffer size by default. [RT #15855]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1983. [func] Two new update policies. "selfsub" and "selfwild".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12895]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1982. [bug] DNSKEY was being accepted on the parent side of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a delegation. KEY is still accepted there for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 3007 validated updates. [RT #15620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1981. [bug] win32: condition.c:wait() could fail to reattain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the mutex lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1980. [func] dnssec-signzone: output the SOA record as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding first record in the signed zone. [RT #15758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1979. [port] linux: allow named to drop core after changing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding user ids. [RT #15753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1978. [port] Handle systems which have a broken recvmsg().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1977. [bug] Silence noisy log message. [RT #15704]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1975. [bug] libbind: isc_gethexstring() could misparse multi-line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex strings with comments. [RT #15814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1974. [doc] List each of the zone types and associated zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options separately in the ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding HMACSHA512 support. [RT #13606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1972. [contrib] DBUS dynamic forwarders integration from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Jason Vas Dias <jvdias@redhat.com>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1971. [port] linux: make detection of missing IF_NAMESIZE more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding robust. [RT #15443]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1970. [bug] nsupdate: adjust UDP timeout when falling back to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unsigned SOA query. [RT #15775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1969. [bug] win32: the socket code was freeing the socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structure too early. [RT #15776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1966. [bug] Don't set CD when we have fallen back to plain DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1965. [func] Suppress spurious "recursion requested but not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available" warning with 'dig +qr'. [RT #15780].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1963. [port] Tru64 4.0E doesn't support send() and recv().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1962. [bug] Named failed to clear old update-policy when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was removed. [RT #15491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1961. [bug] Check the port and address of responses forwarded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to dispatch. [RT #15474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15465]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1959. [func] Control the zeroing of the negative response TTL to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a soa query. Defaults "zero-no-soa-ttl yes;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "zero-no-soa-ttl-cache no;". [RT #15460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1958. [bug] Named failed to update the zone's secure state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding until the zone was reloaded. [RT #15412]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1957. [bug] Dig mishandled responses to class ANY queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1956. [bug] Improve cross compile support, 'gen' is now built
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by native compiler. See README for additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cross compile support information. [RT #15148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1954. [func] Named now falls back to advertising EDNS with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 512 byte receive buffer if the initial EDNS queries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1953. [func] The maximum EDNS UDP response named will send can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now be set in named.conf (max-udp-size). This is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding independent of the advertised receive buffer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (edns-udp-size). [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1952. [port] hpux: tell the linker to build a runtime link
cfa64348224b66dd1c9979b809406c4d15b1c137fielding path "-Wl,+b:". [RT #14816].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1951. [security] Drop queries from particular well known ports.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Don't return FORMERR to queries from particular
cfa64348224b66dd1c9979b809406c4d15b1c137fielding well known ports. [RT #15636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a TCP socket. This prevents the source address being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set for TCP connections. [RT #15628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1949. [func] Addition memory leakage checks. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1948. [bug] If was possible to trigger a REQUIRE failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrin.c:maybe_free() if named ran out of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1947. [func] It is now possible to configure named to accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding expired RRSIGs. Default "dnssec-accept-expired no;".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Setting "dnssec-accept-expired yes;" leaves named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vulnerable to replay attacks. [RT #14685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1946. [bug] resume_dslookup() could trigger a REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when using forwarders. [RT #15549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To generate a RSAMD5 key you must explicitly request
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RSAMD5. [RT #13780]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1944. [cleanup] isc_hash_create() does not need a read/write lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15522]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1943. [bug] Set the loadtime after rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1942. [bug] If the name of a DNSKEY match that of one in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trusted-keys do not attempt to validate the DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using the parents DS RRset. [RT #15649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1941. [bug] ncache_adderesult() should set eresult even if no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset is passed to it. [RT #15642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1940. [bug] Fixed a number of error conditions reported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1939. [bug] The resolver could dereference a null pointer after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation if all the queries have timed out.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1938. [bug] The validator was not correctly handling unsecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative responses at or below a SEP. [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1936. [bug] The validator could leak memory. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1935. [bug] 'acache' was DO sensitive. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1934. [func] Validate pending NS RRsets, in the authority section,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prior to returning them if it can be done without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requiring DNSKEYs to be fetched. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1931. [bug] Per-client mctx could require a huge amount of memory,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particularly for a busy caching server. [RT #15519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1930. [port] HPUX: ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1927. [bug] Access to soanode or nsnode in rbtdb violated the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lock order rule and could cause a dead lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15518]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1926. [bug] The Windows installer did not check for empty
cfa64348224b66dd1c9979b809406c4d15b1c137fielding passwords. BINDinstall was being installed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the wrong place. [RT #15483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1925. [port] All outer level AC_TRY_RUNs need cross compiling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defaults. [RT #15469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1924. [port] libbind: hpux ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1923. [bug] ns_client_detach() called too early. [RT #15499]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1922. [bug] check-tool.c:setup_logging() missing call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_log_setcontext().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1921. [bug] Client memory contexts were not using internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malloc. [RT #15434]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1920. [bug] The cache rbtdb lock array was too small to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have the desired performance characteristics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1919. [contrib] queryperf: a set of new features: collecting/printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response delays, printing intermediate results, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adjusting query rate for the "target" qps.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1918. [bug] Memory leak when checking acls. [RT #15391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when generating man pages. [RT #15385]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1915. [bug] dig +ndots was broken. [RT #15215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1914. [protocol] DS is required to accept mnemonic algorithms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (RFC 4034). Still emit numeric algorithms for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility with RFC 3658. [RT #15354]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1913. [func] Integrate contributed DLZ code into named. [RT #11382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1912. [port] aix: atomic locking for powerpc. [RT #15020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1911. [bug] Update windows socket code. [RT #14965]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1910. [bug] dig's +sigchase code overhauled. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1909. [bug] The DLV code has been re-worked to make no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query order sensitive. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1908. [func] dig now warns if 'RA' is not set in the answer when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'RD' was set in the query. host/nslookup skip servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that fail to set 'RA' when 'RD' is set unless a server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is explicitly set. [RT #15005]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15006]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1906. [func] dig now has a '-q queryname' and '+showsearch' options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1905. [bug] Strings returned from cfg_obj_asstring() should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treated as read-only. The prototype for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cfg_obj_asstring() has been updated to reflect this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding friends. Note: RFC 1918 zones are not yet covered by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this but are likely to be in a future release.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New options: empty-server, empty-contact,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty-zones-enable and disable-empty-zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1903. [func] ISC string copy API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1902. [func] Attempt to make the amount of work performed in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration self tuning. The covers nodes clean from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the cache per iteration, nodes written to disk when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rewriting a master file and nodes destroyed per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration when destroying a zone or a cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14996]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1901. [cleanup] Don't add DNSKEY records to the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1900. [bug] ixfr-from-differences failed to ensure that the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding serial number increased. [RT #15036]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1899. [func] named-checkconf now validates update-policy entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_NETADDR_FORMATSIZE to allow for scope details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1897. [func] x86 and x86_64 now have separate atomic locking
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1896. [bug] Recursive clients soft quota support wasn't working
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as expected. [RT #15103]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1895. [bug] A escaped character is, potentially, converted to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the output character set too early. [RT #14666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1894. [doc] Review ARM for BIND 9.4.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1893. [port] Use uintptr_t if available. [RT #14606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1892. [func] Support for SPF rdata type. [RT #15033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1891. [port] freebsd: pthread_mutex_init can fail if it runs out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #14995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1890. [func] Raise the UDP receive buffer size to 32k if it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding less than 32k. [RT #14953]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1889. [port] sunos: non blocking i/o support. [RT #14951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1888. [func] Support for IPSECKEY rdata type. [RT #14967]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1887. [bug] The cache could delete expired records too fast for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clients with a virtual time in the past. [RT #14991]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1886. [bug] fctx_create() could return success even though it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed. [RT #14993]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1885. [func] dig: report the number of extra bytes still left in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the packet after processing all the records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding levels. [RT #14962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1882. [func] Limit the number of recursive clients that can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding waiting for a single query (<qname,qtype,qclass>) to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolve. New options clients-per-query and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-clients-per-query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1881. [func] Add a system test for named-checkconf. [RT #14931]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1880. [func] The lame cache is now done on a <qname,qclass,qtype>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding basis as some servers only appear to be lame for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain query types. [RT #14916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14892]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1878. [func] Detect duplicates of UDP queries we are recursing on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and drop them. New stats category "duplicate".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1877. [bug] Fix unreasonably low quantum on call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbt_destroy2(). Remove unnecessary unhash_node()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding call. [RT #14919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1876. [func] Additional memory debugging support to track size
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and mctx arguments. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1875. [bug] process_dhtkey() was using the wrong memory context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to free some memory. [RT #14890]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1874. [port] sunos: portability fixes. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1873. [port] win32: isc__errno2result() now reports its caller.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1871. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1870. [func] Added framework for handling multiple EDNS versions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1869. [func] dig can now specify the EDNS version when making
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a query. [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1868. [func] edns-udp-size can now be overridden on a per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server basis. [RT #14851]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1867. [bug] It was possible to trigger a INSIST in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dlv_validatezonekey(). [RT #14846]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1866. [bug] resolv.conf parse errors were being ignored by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bad addresses. [RT #14841]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1864. [bug] Don't try the alternative transfer source if you
cfa64348224b66dd1c9979b809406c4d15b1c137fielding got a answer / transfer with the main source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address. [RT #14802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1863. [bug] rrset-order "fixed" error messages not complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1862. [func] Add additional zone data constancy checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone has extended checking of NS, MX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SRV record and the hosts they reference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named has extended post zone load checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone options: check-mx and integrity-check.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1861. [bug] dig could trigger a INSIST on certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #14801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly set. [RT #14775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1859. [func] Add support for CH A record. [RT #14695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1858. [bug] The flush-zones-on-shutdown option wasn't being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parsed. [RT #14686]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1857. [bug] named could trigger a INSIST() if reconfigured /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reloaded too fast. [RT #14673]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1855. [bug] ixfr-from-differences was failing to detect changes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of ttl due to dns_diff_subtract() was ignoring the ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of records. [RT #14616]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1854. [bug] lwres also needs to know the print format for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (long long). [RT #13754]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1853. [bug] Rework how DLV interacts with proveunsecure().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1852. [cleanup] Remove last vestiges of dnssec-signkey and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-makekeyset (removed from Makefile years ago).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1851. [doc] Doxygen comment markup. [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1849. [doc] All forms of the man pages (docbook, man, html) should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have consistent copyright dates.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1848. [bug] Improve SMF integration. [RT #13238]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1847. [bug] isc_ondestroy_init() is called too late in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbtdb_create()/dns_rbtdb64_create().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13661]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <bortzmeyer@nic.fr>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1845. [bug] Improve error reporting to distinguish between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept()/fcntl() and socket()/fcntl() errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for each 16 bit piece of the IPv6 address. The text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding representation of a IPv6 address has been tightened
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when CFLAGS contains "-I /usr/local/include"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in old header files being used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1842. [port] cmsg_len() could produce incorrect results on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some platform. [RT #13744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1841. [bug] "dig +nssearch" now makes a recursive query to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding find the list of nameservers to query. [RT #13694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1840. [func] dnssec-signzone can now randomize signature end times
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (dnssec-signzone -j jitter). [RT #13609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1839. [bug] <isc/hash.h> was not being installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1838. [cleanup] Don't allow Linux capabilities to be inherited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1837. [bug] Compile time option ISC_FACILITY was not effective
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for 'named -u <user>'. [RT #13714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1836. [cleanup] Silence compiler warnings in hash_test.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1834. [bug] Bad memset in rdata_test.c. [RT #13658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1831. [doc] Update named-checkzone documentation. [RT #13604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1829. [bug] win32: "pid-file none;" broken. [RT #13563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1828. [bug] isc_rwlock_init() failed to properly cleanup if it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding encountered a error. [RT #13549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1827. [bug] host: update usage message for '-a'. [RT #37116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory error. [RT #13537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1825. [bug] Missing UNLOCK() on out of memory error from in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rbtdb.c:subtractrdataset(). [RT #13519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1824. [bug] Memory leak on dns_zone_setdbtype() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13510]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1823. [bug] Wrong macro used to check for point to point interface.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1822. [bug] check-names test for RT was reversed. [RT #13382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1821. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1820. [bug] Gracefully handle acl loops. [RT #13659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1819. [bug] The validator needed to check both the algorithm and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding digest types of the DS to determine if it could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used to introduce a secure zone. [RT #13593]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1817. [func] Add support for additional zone file formats for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improving loading performance. The masterfile-format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in named.conf can be used to specify a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-default format. A separate command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone was provided to generate zone files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the new format. Additionally, the -I and -O options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for dnssec-signzone specify the input and output
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1815. [bug] nsupdate triggered a REQUIRE if the server was set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without also setting the zone and it encountered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a CNAME and was using TSIG. [RT #13086]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1814. [func] UNIX domain controls are now supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1813. [func] Restructured the data locking framework using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding architecture dependent atomic operations (when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available), improving response performance on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multi-processor machines significantly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding x86, x86_64, alpha, powerpc, and mips are currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13453]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1811. [func] Preserve the case of domain names in rdata during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfers. [RT #13547]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1810. [bug] configure, lib/bind/configure make different default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decisions about whether to do a threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13212]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1809. [bug] "make distclean" failed for libbind if the platform
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1808. [bug] zone.c:notify_zone() contained a race condition,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone->db could change underneath it. [RT #13511]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1807. [bug] When forwarding (forward only) set the active domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the forward zone name. [RT #13526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1806. [bug] The resolver returned the wrong result when a CNAME /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME was encountered when fetching glue from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure namespace. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1805. [bug] Pending status was not being cleared when DLV was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding active. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1804. [bug] Ensure that if we are queried for glue that it fits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the additional section or TC is set to tell the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding client to retry using TCP. [RT #10114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1803. [bug] dnssec-signzone sometimes failed to remove old
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIGs. [RT #13483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1802. [bug] Handle connection resets better. [RT #11280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1801. [func] Report differences between hints and real NS rrset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and associated address records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1800. [bug] Changes #1719 allowed a INSIST to be triggered.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13428]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1799. [bug] 'rndc flushname' failed to flush negative cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #13438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1798. [func] The server syntax has been extended to support a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding range of servers. [RT #11132]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1797. [func] named-checkconf now check acls to verify that they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only refer to existing acls. [RT #13101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1795. [bug] "rndc dumpdb" was not fully documented. Minor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formating issues with "rndc dumpdb -all". [RT #13396]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1794. [func] Named and named-checkzone can now both check for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-terminal wildcard records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1793. [func] Extend adjusting TTL warning messages. [RT #13378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1792. [func] New zone option "notify-delay". Specify a minimum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delay between sets of NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1791. [bug] 'host -t a' still printed out AAAA and MX records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow parallel make to succeed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1789. [bug] Prerequisite test for tkey and dnssec could fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with "configure --with-libtool".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1788. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1786. [port] AIX: libt_api needs to be taught to look for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding T_testlist in the main executable (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13239]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1785. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1784. [cleanup] "libtool -allow-undefined" is the default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Leave hooks in configure to allow it to be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if needed in the future.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1782. [port] OSX: --with-libtool + --enable-libbind broke on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __evOptMonoTime. [RT #13219]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1780. [bug] Update libtool to 1.5.10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1774. [port] Aix: Silence compiler warnings / build failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1773. [bug] Fast retry on host / net unreachable. [RT #13153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1772. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1771. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1770. [bug] named-checkconf failed to report missing a missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file clause for rbt{64} master/hint zones. [RT #13009]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1769. [port] win32: change compiler flags /MTd ==> /MDd,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /MT ==> /MD.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset. [RT #12907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for (struct in6_pktinfo) failed. [RT #13077]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1766. [bug] Update the master file timestamp on successful refresh
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the journal's timestamp. [RT #13062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1765. [bug] configure --with-openssl=auto failed. [RT #12937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1764. [bug] dns_zone_replacedb failed to emit a error message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there was no SOA record in the replacement db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13016]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1763. [func] Perform sanity checks on NS records which refer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'in zone' names. [RT #13002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding even when it failed. [RT #12995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1760. [bug] Host / net unreachable was not penalising rtt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding estimates. [RT #12970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1759. [bug] Named failed to startup if the OS supported IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but had no IPv6 interfaces configured. [RT #12942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1758. [func] Don't send notify messages to self. [RT #12933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1757. [func] host now can turn on memory debugging flags with '-m'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1756. [func] named-checkconf now checks the logging configuration.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12352]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1755. [func] allow-update is now settable at the options / view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #6636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1754. [bug] We weren't always attempting to query the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the DS records at the zone cut.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12774]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1753. [bug] Don't serve a slave zone which has no NS records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12894]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1752. [port] Move isc_app_start() to after ns_os_daemonise()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as some fork() implementations unblock the signals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that are blocked by isc_app_start(). [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12864]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1749. [bug] 'check-names response ignore;' failed to ignore.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12866]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1748. [func] dig now returns the byte count for axfr/ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1747. [bug] BIND 8 compatibility: named/named-checkconf failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to parse "host-statistics-max" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1746. [func] Make public the function to read a key file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_key_read_public(). [RT #12450]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1745. [bug] Dig/host/nslookup accept replies from link locals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding regardless of scope if no scope was specified when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query was sent. [RT #12745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1744. [bug] If tuple2msgname() failed to convert a tuple to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a name a REQUIRE could be triggered. [RT #12796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1743. [bug] If isc_taskmgr_create() was not able to create the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requested number of worker threads then destruction
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the manager would trigger an INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12790]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1742. [bug] Deleting all records at a node then adding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding previously existing record, in a single UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transaction, failed to leave / regenerate the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding associated RRSIG records. [RT #12788]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1741. [bug] Deleting all records at a node in a secure zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using a update-policy grant failed. [RT #12787]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1740. [bug] Replace rbt's hash algorithm as it performed badly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with certain zones. [RT #12729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTE: a hash context now needs to be established
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via isc_hash_create() if the application was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding already doing this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1739. [bug] dns_rbt_deletetree() could incorrectly return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_QUOTA. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1738. [bug] Enable overrun checking by default. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1737. [bug] named failed if more than 16 masters were specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12627]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1736. [bug] dst_key_fromnamedfile() could fail to read a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding public key. [RT #12687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RE #12688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1733. [bug] Return non-zero exit status on initial load failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1731. [port] darwin: relax version test in ifconfig.sh.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1730. [port] Determine the length type used by the socket API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1729. [func] Improve check-names error messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1728. [doc] Update check-names documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1727. [bug] named-checkzone: check-names support didn't match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1726. [port] aix5: add support for aix5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1725. [port] linux: update error message on interaction of threads,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding capabilities and setuid support (named -u). [RT #12541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1724. [bug] Look for DNSKEY records with "dig +sigtrace".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1722. [bug] Don't commit the journal on malformed ixfr streams.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1721. [bug] Error message from the journal processing were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always identifying the relevant journal. [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1719. [bug] named was not correctly caching a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses when looking for the zone / master server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1717. [port] solaris: ifconfig.sh did not support Solaris 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "ifconfig.sh down" didn't work for Solaris 9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1716. [doc] named.conf(5) was being installed in the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding location. [RT #12441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1715. [func] 'dig +trace' now randomly selects the next servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to try. Report if there is a bad delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1714. [bug] dig/host/nslookup were only trying the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address when a nameserver was specified by name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12286]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1713. [port] linux: extend capset failure message to say:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding please ensure that the capset kernel module is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded. see insmod(8)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages for the specified zone. [RT #9479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1709. [port] solaris: add SMF support from Sun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for conformance to the name space convention. Binary
cfa64348224b66dd1c9979b809406c4d15b1c137fielding backward compatibility to the old function name is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provided. [RT #12376]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1707. [contrib] sdb/ldap updated to version 1.0-beta.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1706. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #12328]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1705. [func] Allow the journal's name to be changed via named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1704. [port] lwres needed a snprintf() implementation for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without snprintf(). Add missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "#include <isc/print.h>". [RT #12321]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1703. [bug] named would loop sending NOTIFY messages when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to receive a response. [RT #12322]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1702. [bug] also-notify should not be applied to built in zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1701. [doc] A minimal named.conf man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1700. [func] nslookup is no longer to be treated as deprecated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Remove "deprecated" warning message. Add man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1699. [bug] dnssec-signzone can generate "not exact" errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when resigning. [RT #12281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1698. [doc] Use reserved IPv6 documentation prefix.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1697. [bug] xxx-source{,-v6} was not effective when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified one of listening addresses and a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding different port than the listening port. [RT #12257]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1696. [bug] dnssec-signzone failed to clean out nodes that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consisted of only NSEC and RRSIG records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1695. [bug] DS records when forwarding require special handling.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1694. [bug] Report if the builtin views of "_default" / "_bind"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are defined in named.conf. [RT #12023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1693. [bug] max-journal-size was not effective for master zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with ixfr-from-differences set. [RT #12024]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /usr/lib. [RT #11971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1691. [bug] sdb's attachversion was not complete. [RT #11990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1690. [bug] Delay detaching view from the client until UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processing completes when shutting down. [RT #11714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained gratuitous semicolons. [RT #11707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1688. [bug] LDFLAGS was not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1687. [bug] Race condition in dispatch. [RT #10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1686. [bug] Named sent a extraneous NOTIFY when it received a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding redundant UPDATE request. [RT #11943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1685. [bug] Change #1679 loop tests weren't quite right.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1684. [func] ixfr-from-differences now takes master and slave in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addition to yes and no at the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1683. [bug] dig +sigchase could leak memory. [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1682. [port] Update configure test for (long long) printf format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1681. [bug] Only set SO_REUSEADDR when a port is specified in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_bind(). [RT #11742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1680. [func] rndc: the source address can now be specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1679. [bug] When there was a single nameserver with multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses for a zone not all addresses were tried.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1676. [func] New option "allow-query-cache". This lets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query be used to specify the default zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding access level rather than having to have every
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone override the global value. allow-query-cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be set at both the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-query-cache is not set allow-query applies.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1675. [bug] named would sometimes add extra NSEC records to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the authority section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1674. [port] linux: increase buffer size used to scan
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1673. [port] linux: issue a error messages if IPv6 interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scans fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1672. [cleanup] Tests which only function in a threaded build
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now return R:THREADONLY (rather than R:UNTESTED)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a non-threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1671. [contrib] queryperf: add NAPTR to the list of known types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1670. [func] Log UPDATE requests to slave zones without an acl as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "disabled" at debug level 3. [RT #11657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1669. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1667. [port] linux: not all versions have IF_NAMESIZE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1666. [bug] The optional port on hostnames in dual-stack-servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was being ignored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1665. [func] rndc now allows addresses to be set in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1663. [func] Look for OpenSSL by default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1662. [bug] Change #1658 failed to change one use of 'type'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 'keytype'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1661. [bug] Restore dns_name_concatenate() call in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adb.c:set_target(). [RT #11582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1660. [bug] win32: connection_reset_fix() was being called
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unconditionally. [RT #11595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1659. [cleanup] Cleanup some messages that were referring to KEY vs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY, NXT vs NSEC and SIG vs RRSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and DH. Tighten which options apply to KEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1657. [doc] ARM: document query log output.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY and RRSIG. [RT #11542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1655. [bug] Logging multiple versions w/o a size was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11446]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1654. [bug] isc_result_totext() contained array bounds read
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1653. [func] Add key type checking to dst_key_fromfilename(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DST_TYPE_KEY should be used to read TSIG, TKEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIG(0) keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1652. [bug] TKEY still uses KEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1651. [bug] dig: process multiple dash options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1650. [bug] dig, nslookup: flush standard out after each command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1649. [bug] Silence "unexpected non-minimal diff" message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1648. [func] Update dnssec-lookaside named.conf syntax to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple dnssec-lookaside namespaces (not yet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implemented).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1647. [bug] It was possible trigger a INSIST when chasing a DS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record that required walking back over a empty node.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1646. [bug] win32: logging file versions didn't work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-UNC filenames. [RT #11486]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1645. [bug] named could trigger a REQUIRE failure if multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding masters with keys are specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1644. [bug] Update the journal modification time after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful refresh query. [RT #11436]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1643. [bug] dns_db_closeversion() could leak memory / node
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references. [RT #11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1642. [port] Support OpenSSL implementations which don't have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DSA support. [RT #11360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1641. [bug] Update the check-names description in ARM. [RT #11389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly closing the socket. [RT #11291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1639. [func] Initial dlv system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1638. [bug] "ixfr-from-differences" could generate a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure if the journal open failed. [RT #11347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1637. [bug] Node reference leak on error in addnoqname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a error had occurred. The database version no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched the version of the database that was dumped.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1635. [bug] Memory leak on error in query_addds().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1634. [bug] named didn't supply a useful error message when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding detected duplicate views. [RT #11208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1633. [bug] named should return NOTIMP to update requests to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slaves without a allow-update-forwarding acl specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1632. [bug] nsupdate failed to send prerequisite only UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #11288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1631. [bug] dns_journal_compact() could sometimes corrupt the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding journal. [RT #11124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1630. [contrib] queryperf: add support for IPv6 transport.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1629. [func] dig now supports IPv6 scoped addresses with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding extended format in the local-server part. [RT #8753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1628. [bug] Typo in Compaq Trucluster support. [RT #11264]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1627. [bug] win32: sockets were not being closed when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding last external reference was removed. [RT #11179]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1626. [bug] --enable-getifaddrs was broken. [RT #11259]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1625. [bug] named failed to load/transfer RFC2535 signed zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which contained CNAMES. [RT #11237]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1624. [bug] zonemgr_putio() call should be locked. [RT #11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1623. [bug] A serial number of zero was being displayed in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "sending notifies" log message when also-notify was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used. [RT #11177]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available, and suppress wildcard binding if not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1621. [bug] match-destinations did not work for IPv6 TCP queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1620. [func] When loading a zone report if it is signed. [RT #11149]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11118]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1618. [bug] Fencepost errors in dns_name_ishostname() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_ismailbox() could trigger a INSIST().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1617. [port] win32: VC++ 6.0 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1616. [compat] Ensure that named's version is visible in the core
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dump. [RT #11127]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1614. [port] win32: silence resource limit messages. [RT #11101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1613. [bug] Builds would fail on machines w/o a if_nametoindex().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1612. [bug] check-names at the option/view level could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an INSIST. [RT #11116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1611. [bug] solaris: IPv6 interface scanning failed to cope with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no active IPv6 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1610. [bug] On dual stack machines "dig -b" failed to set the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address type to be looked up with "@server".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11069]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1609. [func] dig now has support to chase DNSSEC signature chains.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC validation code in dig coded by Olivier Courtay
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (olivier.courtay@irisa.fr) for the IDsA project
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1608. [func] dig and host now accept -4/-6 to select IP transport
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to use when making queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1607. [bug] dig, host and nslookup were still using random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to generate query ids. [RT #11013]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1606. [bug] DLV insecurity proof was failing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1604. [bug] A xfrout_ctx_create() failure would result in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrout_ctx_destroy() being called with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding partially initialized structure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1603. [bug] nsupdate: set interactive based on isatty().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10929]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1602. [bug] Logging to a file failed unless a size was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10925]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1601. [bug] Silence spurious warning 'both "recursion no;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "allow-recursion" active' warning from view "_bind".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10920]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1600. [bug] Duplicate zone pre-load checks were not case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insensitive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1599. [bug] Fix memory leak on error path when checking named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1598. [func] Specify that certain parts of the namespace must
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be secure (dnssec-must-be-secure).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1597. [func] Allow notify-source and query-source to be specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on a per server basis similar to transfer-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1596. [func] Accept 'notify-source' style syntax for query-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1595. [func] New notify type 'master-only'. Enable notify for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master zones only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1594. [bug] 'rndc dumpdb' could prevent named from answering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries while the dump was in progress. [RT #10565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1593. [bug] rndc should return "unknown command" to unknown
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands. [RT #10642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1592. [bug] configure_view() could leak a dispatch. [RT #10675]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1591. [bug] libbind: updated to BIND 8.4.5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1590. [port] netbsd: update thread support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1589. [func] DNSSEC lookaside validation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1587. [bug] dns_message_settsigkey() failed to clear existing key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1586. [func] "check-names" is now implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1585. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1584. [bug] "make test" failed with a read only source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1583. [bug] Records add via UPDATE failed to get the correct trust
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #10452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1582. [bug] rrset-order failed to work on RRsets with more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 32 elements. [RT #10381]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1581. [func] Disable DNSSEC support by default. To enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC specify "dnssec-enable yes;" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1580. [bug] Zone destruction on final detach takes a long time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1579. [bug] Multiple task managers could not be created.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding workaround code. [RT #10331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1576. [bug] Race condition in dns_dispatch_addresponse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1574. [bug] Don't attempt to open the controls socket(s) when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding running tests. [RT #9091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1573. [port] linux: update to libtool 1.5.2 so that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "make install DESTDIR=/xx" works with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "configure --with-libtool". [RT #9941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1572. [bug] nsupdate: sign the soa query to find the enclosing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone if the server is specified. [RT #10148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1571. [bug] rbt:hash_node() could fail leaving the hash table
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in an inconsistent state. [RT #10208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1570. [bug] nsupdate failed to handle classes other than IN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New keyword 'class' which sets the default class.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10202]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1569. [func] nsupdate new command 'answer' which displays the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complete answer message to the last update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1568. [bug] nsupdate now reports that the update failed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interactive mode. [RT #10236]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1566. [port] Support for the cmsg framework on Solaris and HP/UX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This also solved the problem that match-destinations
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv6 addresses did not work on these systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10221]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1565. [bug] CD flag should be copied to outgoing queries unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the query is under a secure entry point in which case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD should be set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1564. [func] Attempt to provide a fallback entropy source to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used if named is running chrooted and named is unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to open entropy source within the chroot area.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1563. [bug] Gracefully fail when unable to obtain neither an IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nor an IPv6 dispatch. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1562. [bug] isc_socket_create() and isc_socket_accept() could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak memory under error conditions. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1561. [bug] It was possible to release the same name twice if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named ran out of memory. [RT #10197]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and EAI_NONAME to the same value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1559. [port] named should ignore SIGFSZ.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding child zones for which we don't have a supported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm. Such child zones are treated as unsigned.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1557. [func] Implement missing DNSSEC tests for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOQNAME proof with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOWILDARD proof with NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Cache and return NOQNAME with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1556. [bug] nsupdate now treats all names as fully qualified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1555. [func] 'rrset-order cyclic' no longer has a random starting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding point per query. [RT #7572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1554. [bug] dig, host, nslookup failed when no nameservers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were specified in /etc/resolv.conf. [RT #8232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1553. [bug] The windows socket code could stop accepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connections. [RT #10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1552. [bug] Accept NOTIFY requests from mapped masters if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched-mapped is set. [RT #10049]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1551. [port] Open "/dev/null" before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1550. [port] Call tzset(), if available, before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1549. [func] named-checkzone can now write out the zone contents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a easily parsable format (-D and -o).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1548. [bug] When parsing APL records it was possible to silently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept out of range ADDRESSFAMILY values. [RT #9979]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1547. [bug] Named wasted memory recording duplicate lame zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #9341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1546. [bug] We were rejecting valid secure CNAME to negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1545. [bug] It was possible to leak memory if named was unable to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bind to the specified transfer source and TSIG was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being used. [RT #10120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1544. [bug] Named would logged a single entry to a file despite it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being over the specified size limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1543. [bug] Logging using "versions unlimited" did not work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1542. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1541. [func] NSEC now uses new bitmap format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1539. [bug] Open UDP sockets for notify-source and transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that use reserved ports at startup. [RT #9475]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1538. [placeholder] rt9997
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1537. [func] New option "querylog". If set specify whether query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging is to be enabled or disabled at startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1536. [bug] Windows socket code failed to log a error description
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when returning ISC_R_UNEXPECTED. [RT #9998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1535. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1534. [bug] Race condition when priming cache. [RT #9940]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1533. [func] Warn if both "recursion no;" and "allow-recursion"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are active. [RT #4389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1532. [port] netbsd: the configure test for <sys/sysctl.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1531. [port] AIX more libtool fixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1530. [bug] It was possible to trigger a INSIST() failure if a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slave master file was removed at just the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding moment. [RT #9462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1529. [bug] "notify explicit;" failed to log that NOTIFY messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were being sent for the zone. [RT #9442]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1528. [cleanup] Simplify some dns_name_ functions based on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecation of bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1527. [cleanup] Reduce the number of gettimeofday() calls without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding losing necessary timer granularity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1526. [func] Implemented "additional section caching (or acache)",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an internal cache framework for additional section
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content to improve response performance. Several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration options were provided to control the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1525. [bug] dns_cache_create() could trigger a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in isc_mem_put() during error cleanup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1524. [port] AIX needs to be able to resolve all symbols when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating shared libraries (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1523. [bug] Fix race condition in rbtdb. [RT #9189]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1522. [bug] dns_db_findnode() relax the requirements on 'name'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1521. [bug] dns_view_createresolver() failed to check the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result from isc_mem_create(). [RT #9294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1520. [protocol] Add SSHFP (SSH Finger Print) type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding length of the new bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained a off-by-one error when working out the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of octets in the bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1517. [port] Support for IPv6 interface scanning on HP/UX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TrueUNIX 5.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1515. [func] Allow transfer source to be set in a server statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1514. [bug] named: isc_hash_destroy() was being called too early.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1513. [doc] Add "US" to root-delegation-only exclude list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1512. [bug] Extend the delegation-only logging to return query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type, class and responding nameserver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1511. [bug] delegation-only was generating false positives
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on negative answers from sub-zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1510. [func] New view option "root-delegation-only". Apply
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation-only check to all TLDs and root.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note there are some TLDs that are NOT delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only (e.g. DE, LV, US and MUSEUM) these can be excluded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the checks by using exclude.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding root-delegation-only exclude {
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "DE"; "LV"; "US"; "MUSEUM";
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1509. [bug] Hint zones should accept delegation-only. Forward
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone should not accept delegation-only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1508. [bug] Don't apply delegation-only checks to answers from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1507. [bug] Handle BIND 8 style returns to NS queries to parents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when making delegation-only checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1506. [bug] Wrong return type for dns_view_isdelegationonly().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1504. [func] New zone type "delegation-only".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1503. [port] win32: install libeay32.dll outside of system32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1501. [func] Allow TCP queue length to be specified via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf, tcp-listen-queue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1500. [bug] host failed to lookup MX records. Also look up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AAAA records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1499. [bug] isc_random need to be seeded better if arc4random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1498. [port] bsdos: 5.x support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1497. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1496. [port] test for pthread_attr_setstacksize().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1495. [cleanup] Replace hash functions with universal hash.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1494. [security] Turn on RSA BLINDING as a precaution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1493. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1492. [cleanup] Preserve rwlock quota context when upgrading /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding downgrading. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lines. [RT #6206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1490. [bug] Accept reading state as well as working state in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ns_client_next(). [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1489. [compat] Treat 'allow-update' on slave zones as a warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1488. [bug] Don't override trust levels for glue addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1487. [bug] A REQUIRE() failure could be triggered if a zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queued for transfer and the zone was then removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1486. [bug] isc_print_snprintf() '%%' consumed one too many format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding characters. [RT #8230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1485. [bug] gen failed to handle high type values. [RT #6225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1484. [bug] The number of records reported after a AXFR was wrong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1483. [bug] dig axfr failed if the message id in the answer failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to match that in the request. Only the id in the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message is required to match. [RT #8138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1482. [bug] named could fail to start if the kernel supports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 but no interfaces are configured. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv4. [RT #6229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1481. [bug] Refresh and stub queries failed to use masters keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if specified. [RT #7391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1480. [bug] Provide replay protection for rndc commands. Full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replay protection requires both rndc and named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be updated. Partial replay protection (limited
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exposure after restart) is provided if just named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is updated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1479. [bug] cfg_create_tuple() failed to handle out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory cleanup. parse_list() would leak memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on syntax errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1478. [port] ifconfig.sh didn't account for other virtual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces. It now takes a optional argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to specify the first interface number. [RT #3907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1477. [bug] memory leak using stub zones and TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1476. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1475. [port] Probe for old sprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1474. [port] Provide strtoul() and memmove() for platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1473. [bug] create_map() and create_string() failed to handle out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory cleanup. [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1471. [bug] libbind: updated to BIND 8.4.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1470. [bug] Incorrect length passed to snprintf. [RT #5966]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1469. [func] Log end of outgoing zone transfer at same level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as the start of transfer is logged. [RT #4441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1468. [func] Internal zones are no longer counted for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc status'. [RT #4706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1467. [func] $GENERATES now supports optional class and ttl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1466. [bug] lwresd configuration errors resulted in memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and lock leaks. [RT #5228]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to check that trailing bits were zero allowing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some invalid base64 strings to be accepted. [RT #5397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1464. [bug] Preserve "out of zone" data for outgoing zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers. [RT #5192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NXT bit maps. [RT #5577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1462. [bug] parse_sizeval() failed to check the token type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1460. [bug] inet_pton() failed to reject certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 literals.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1459. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1458. [cleanup] sprintf() -> snprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1457. [port] Provide strlcat() and strlcpy() for platforms without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1455. [bug] <netaddr> missing from server grammar in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1454. [port] Use getifaddrs() if available for interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --disable-getifaddrs to override. Glibc currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has a getifaddrs() that does not support IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use --enable-getifaddrs=glibc to force the use of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this version under linux machines.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1452. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1451. [bug] rndc-confgen didn't exit with a error code for all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. [RT #5209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1450. [bug] Fetching expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances. [RT #5124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1449. [bug] query_addbestns() didn't handle running out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1448. [bug] Handle empty wildcards labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1447. [bug] We were casting (unsigned int) to and from (void *).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset->private4 is now rdataset->privateuint4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to reflect a type change.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1446. [func] Implemented undocumented alternate transfer sources
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from BIND 8. See use-alt-transfer-source,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding alt-transfer-source and alt-transfer-source-v6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SECURITY: use-alt-transfer-source is ENABLED unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding you are using views. This may cause a security risk
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in accidental disclosure of wrong zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content if the master supplying different source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content based on IP address. If you are not certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC recommends setting use-alt-transfer-source no;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been replaced with DNS_ADBFIND_STARTATZONE which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes the search to start using the closest zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1444. [func] dns_view_findzonecut2() allows you to specify if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache should be searched for zone cuts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1443. [func] Masters lists can now be specified and referenced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in zone masters clauses and other masters lists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1442. [func] New functions for manipulating port lists:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_create(), dns_portlist_add(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_remove(), dns_portlist_match(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_attach() and dns_portlist_detach().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1441. [func] It is now possible to tell dig to bind to a specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source port.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1440. [func] It is now possible to tell named to avoid using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain source ports (avoid-v4-udp-ports,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid-v6-udp-ports).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1439. [bug] Named could return NOERROR with certain NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. Return NOTAUTH if the NOTIFY zone is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not being served.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1438. [func] Log TSIG (if any) when logging NOTIFY requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1437. [bug] Leave space for stdio to work in. [RT #5033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1436. [func] dns_zonemgr_resumexfrs() can be used to restart
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stalled transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1435. [bug] zmgr_resume_xfrs() was being called read locked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than write locked. zmgr_resume_xfrs()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not being called if the zone was being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1434. [bug] "rndc reconfig" failed to initiate the initial
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfer of new slave zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1433. [bug] named could trigger a REQUIRE failure if it could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not get a file descriptor when attempting to write
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a master file. [RT #4347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1432. [func] The advertised EDNS UDP buffer size can now be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via named.conf (edns-udp-size).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1431. [bug] isc_print_snprintf() "%s" with precision could walk off
cfa64348224b66dd1c9979b809406c4d15b1c137fielding end of argument. [RT #5191]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1430. [port] linux: IPv6 interface scanning support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1429. [bug] Prevent the cache getting locked to old servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1428. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1427. [bug] Race condition in adb with threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1426. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1425. [port] linux/libbind: define __USE_MISC when testing *_r()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function prototypes in netdb.h. [RT #4921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1424. [bug] EDNS version not being correctly printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1423. [contrib] queryperf: added A6 and SRV.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1422. [func] Log name/type/class when denying a query. [RT #4663]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1421. [func] Differentiate updates that don't succeed due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites (unsuccessful) vs other reasons
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1420. [port] solaris: work around gcc optimizer bug.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1419. [port] openbsd: use /dev/arandom. [RT #4950]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1418. [bug] 'rndc reconfig' did not cause new slaves to load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1417. [func] ID.SERVER/CHAOS is now a built in zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See "server-id" for how to configure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1414. [func] Support for KSK flag.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1413. [func] Explicitly request the (re-)generation of DS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from keysets (dnssec-signzone -g).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1412. [func] You can now specify servers to be tried if a nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has IPv6 address and you only support IPv4 or the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reverse. See dual-stack-servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1410. [func] Handle records that live in the parent zone, e.g. DS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1408. [bug] "make distclean" was not complete. [RT #4700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1407. [bug] lfsr incorrectly implements the shift register.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1406. [bug] dispatch initializes one of the LFSR's with a incorrect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polynomial. [RT #4617]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1405. [func] Use arc4random() if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signkey now report their version in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1402. [cleanup] A6 has been moved to experimental and is no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fully supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1401. [bug] adb wasn't clearing state when the timer expired.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1400. [bug] Block the addition of wildcard NS records by IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or UPDATE. [RT #3502]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1399. [bug] Use serial number arithmetic when testing SIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamps. [RT #4268]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1398. [doc] ARM: notify-also should have been also-notify.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1396. [func] dnssec-signzone: adjust the default signing time by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 1 hour to allow for clock skew.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a working implementation. [RT #4079]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1394. [func] It is now possible to check if a particular element is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a acl. Remove duplicate entries from the localnets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not available in the kernel to prevent accidently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listening on IPv4 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1392. [bug] named-checkzone: update usage.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1391. [func] Add support for IPv6 scoped addresses in named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1390. [func] host now supports ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1389. [bug] named could fail to rotate long log files. [RT #3666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defining HAVE_IFLIST_SYSCTL. [RT #3770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1387. [bug] named could crash due to an access to invalid memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space (which caused an assertion failure) in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incremental cleaning. [RT #3588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1386. [bug] named-checkzone -z stopped on errors in a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1385. [bug] Setting serial-query-rate to 10 would trigger a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1384. [bug] host was incompatible with BIND 8 in its exit code and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the output with the -l option. [RT #3536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1383. [func] Track the serial number in a IXFR response and log if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a mismatch occurs. This is a more specific error than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "not exact". [RT #3445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1382. [bug] make install failed with --enable-libbind. [RT #3656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1381. [bug] named failed to correctly process answers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained DNAME records where the resulting CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulted in a negative answer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1380. [func] 'rndc recursing' dump recursing queries to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'recursing-file = "named.recursing";'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1379. [func] 'rndc status' now reports tcp and recursion quota
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1377. [func] dns_zone_load{new}() now reports if the zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded, queued for loading to up to date.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1376. [func] New function dns_zone_logc() to log to specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1374. [func] dns_adb_dump() now logs the lame zones associated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with each server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1373. [bug] Recovery from expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1372. [bug] named crashes with an assertion failure on exit when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sharing the same port for listening and querying, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing listening addresses several times. [RT #3509]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1371. [bug] notify-source-v6, transfer-source-v6 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query-source-v6 with explicit addresses and using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same ports as named was listening on could interfere
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with named's ability to answer queries sent to those
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1370. [bug] dig '+[no]recurse' was incorrectly documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1369. [bug] Adding an NS record as the lexicographically last
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record in a secure zone didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1368. [func] remove support for bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1367. [func] Use response times to select forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1365. [func] "localhost" and "localnets" acls now include IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses / prefixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1364. [func] Log file name when unable to open memory statistics
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dump database files. [RT #3437]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1363. [func] Listen-on-v6 now supports specific addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1362. [bug] remove IFF_RUNNING test when scanning interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1361. [func] log the reason for rejecting a server when resolving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1360. [bug] --enable-libbind would fail when not built in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree for certain OS's.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1359. [security] Support patches OpenSSL libraries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1358. [bug] It was possible to trigger a INSIST when debugging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large dynamic updates. [RT #3390]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1357. [bug] nsupdate was extremely wasteful of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1356. [tuning] Reduce the number of events / quantum for zone tasks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1354. [doc] lwres man pages had illegal nroff.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1353. [contrib] sdb/ldap to version 0.9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1352. [bug] dig, host, nslookup when falling back to TCP use the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding current search entry (if any). [RT #3374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1351. [bug] lwres_getipnodebyname() returned the wrong name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1350. [bug] dns_name_fromtext() failed to handle too many labels
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1348. [port] win32: Rewrote code to use I/O Completion Ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in socket.c and eliminating a host of socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding errors. Performance is enhanced.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1347. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1346. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1345. [port] Use a explicit -Wformat with gcc. Not all versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include it in -Wall.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1344. [func] Log if the serial number on the master has gone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If you have multiple machines specified in the masters
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause you may want to set 'multi-master yes;' to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppress this warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1343. [func] Log successful notifies received (info). Adjust log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level for failed notifies to notice.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1342. [func] Log remote address with TCP dispatch failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1341. [func] Allow a rate limiter to be stalled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1340. [bug] Delay and spread out the startup refresh load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups. Bit string lookups are no longer attempted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1338. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1337. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1336. [func] Nibble lookups under IP6.ARPA are now supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_byaddr_create(). dns_byaddr_createptrname() is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecated, use dns_byaddr_createptrname2() instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1335. [bug] When performing a nonexistence proof, the validator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should discard parent NXTs from higher in the DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1334. [bug] When signing/verifying rdatasets, duplicate rdatas
cfa64348224b66dd1c9979b809406c4d15b1c137fielding need to be suppressed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1333. [contrib] queryperf now reports a summary of returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rcodes (-c), rcodes are printed in mnemonic form (-v).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1332. [func] Report the current serial with periodic commits when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1331. [func] Generate DNSSEC wildcard proofs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1330. [bug] When processing events (non-threaded) only allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the task one chance to use to use its quantum.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1329. [func] named-checkzone will now check if nameservers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear to be IP addresses. Available modes "fail",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "warn" (default) and "ignore" the results of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1328. [bug] The validator could incorrectly verify an invalid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative proof.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1327. [bug] The validator would incorrectly mark data as insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when seeing a bogus signature before a correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1326. [bug] DNAME/CNAME signatures were not being cached when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation was not being performed. [RT #3284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1325. [bug] If the tcpquota was exhausted it was possible to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to trigger a INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1324. [port] darwin: ifconfig.sh now supports darwin.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1322. [bug] dnssec-signzone usage message was misleading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would incorrectly duplicate its output and sign it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1320. [doc] query-source-v6 was missing from options section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1319. [func] libbind: log attempts to exploit #1318.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1318. [bug] libbind: Remote buffer overrun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding element name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1316. [bug] libbind: gethostans() could get out of sync parsing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the response if there was a very long CNAME chain.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1315. [bug] Options should apply to the internal _bind view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1314. [port] Handle ECONNRESET from sendmsg() [unix].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1313. [func] Query log now says if the query was signed (S) or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if EDNS was used (E).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1312. [func] Log TSIG key used w/ outgoing zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1310. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #3157]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1309. [func] Log that a zone transfer was covered by a TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1308. [func] DS (delegation signer) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1307. [bug] nsupdate: allow white space base64 key data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1306. [bug] Badly encoded LOC record when the size, horizontal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding precision or vertical precision was 0.1m.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1305. [bug] Document that internal zones are included in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc status results.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1304. [func] New function: dns_zone_name().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1302. [func] Extended rndc dumpdb to support dumping of zones and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view selection: 'dumpdb [-all|-zones|-cache] [view]'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1301. [func] New category 'update-security'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1300. [port] Compaq Trucluster support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1299. [bug] Set AI_ADDRCONFIG when looking up addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via getaddrinfo() (affects dig, host, nslookup, rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and nsupdate).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could be left with a trailing "\" after configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been run.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1297. [port] linux: make handling EINVAL from socket() no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conditional on #ifdef LINUX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1296. [bug] isc_log_closefilelogs() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1295. [bug] isc_log_setdebuglevel() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1294. [func] libbind: no longer attempts bit string labels for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for nibble style resolution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1292. [func] Enable IPv6 support when using ioctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scanning and OS supports SIOCGLIFADDR using struct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if_laddrreq.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1291. [func] Enable IPv6 support when using sysctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1290. [func] "dig axfr" now reports the number of messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the number of records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reflect written requirements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a rdataset to a zone db in the rbtdb implementation of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addrdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1286. [bug] dns_name_downcase() enforce requirement that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding target != NULL or name->buffer != NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1285. [func] lwres: probe the system to see what address families
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are currently in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1284. [bug] The RTT estimate on unused servers was not aged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1283. [func] Use "dataready" accept filter if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1282. [port] libbind: hpux 11.11 interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1281. [func] Log zone when unable to get private keys to update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. Log zone when NXT records are missing from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1280. [bug] libbind: escape '(' and ')' when converting to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding presentation form.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1278. [func] dig: now supports +[no]cl +[no]ttlid.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1277. [func] You can now create your own customized printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding styles: dns_master_stylecreate() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_styledestroy().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1276. [bug] libbind: const pointer conflicts in res_debug.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1274. [bug] Memory leak in lwres_gnbarequest_parse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1273. [port] libbind: solaris: 64 bit binary compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1272. [contrib] Berkeley DB 4.0 sdb implementation from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1271. [bug] "recursion available: {denied,approved}" was too
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1270. [bug] Check that system inet_pton() and inet_ntop() support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1269. [port] Openserver: ifconfig.sh support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1268. [port] Openserver: the value FD_SETSIZE depends on whether
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <sys/param.h> is included or not. Be consistent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1267. [func] isc_file_openunique() now creates file using mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 0666 rather than 0600.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are not C++ compatible, use *_TYPE versions instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1264. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1263. [bug] Reference after free error if dns_dispatchmgr_create()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for compressed TSIG owner names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1260. [func] libbind: res_update can now update IPv6 servers,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new function res_findzonecut2().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding w/o sa_len.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1258. [bug] libbind: res_nametotype() and res_nametoclass() were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1257. [bug] Failure to write pid-file should not be fatal on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #2861]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1255. [bug] When verifying that an NXT proves nonexistence, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the rcode of the message and only do the matching NXT
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check. That is, for NXDOMAIN responses, check that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the name is in the range between the NXT owner and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding next name, and for NOERROR NODATA responses, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that the type is not present in the NXT bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1254. [func] preferred-glue option from BIND 8.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1253. [bug] The dnssec system test failed to remove the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1252. [bug] Dig, host and nslookup were not checking the address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the answer was coming from against the address it was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sent to. [RT #2692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1251. [port] win32: a make file contained absolute version specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1250. [func] Nsupdate will report the address the update was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1249. [bug] Missing masters clause was not handled gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1248. [bug] DESTDIR was not being propagated between makes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1247. [bug] Don't reset the interface index for link/site local
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses. [RT #2576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1246. [func] New functions isc_sockaddr_issitelocal(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and isc_netaddr_islinklocal().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1244. [bug] Receiving a TCP message from a blackhole address would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent further messages being received over that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1243. [bug] It was possible to trigger a REQUIRE() in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_findtype(). [RT #2659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1241. [bug] Drop received UDP messages with a zero source port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as these are invariably forged. [RT #2621]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1240. [bug] It was possible to leak zone references by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifying an incorrect zone to rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1239. [bug] Under certain circumstances named could continue to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use a name after it had been freed triggering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding INSIST() failures. [RT #2614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1238. [bug] It is possible to lockup the server when shutting down
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if notifies were being processed. [RT #2591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1237. [bug] nslookup: "set q=type" failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NULL terminated text regions. [RT #2588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1235. [func] Report 'out of memory' errors from openssl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1234. [bug] contrib/sdb: 'zonetodb' failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register(). DNS_R_SEENINCLUDE should not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1233. [bug] The flags field of a KEY record can be expressed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex as well as decimal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1229. [bug] named would crash if it received a TSIG signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query as part of an AXFR response. [RT #2570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if a number was expected and some other token was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #2532]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1226. [func] Use EDNS for zone refresh queries. [RT #2551]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1225. [func] dns_message_setopt() no longer requires that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_renderbegin() to have been called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1224. [bug] 'rrset-order' and 'sortlist' should be additive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not exclusive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1222. [bug] Specifying 'port *' did not always result in a system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding selected (non-reserved) port being used. [RT #2537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compared case insensitively. [RT #2542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1220. [func] Support for APL rdata type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1219. [func] Named now reports the TSIG extended error code when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signature verification fails. [RT #1651]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1218. [bug] Named incorrectly returned SERVFAIL rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1217. [func] Report locations of previous key definition when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1216. [bug] Multiple server clauses for the same server were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported. [RT #2514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1214. [bug] Win32: isc_file_renameunique() could leave zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files behind.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1213. [func] Report view associated with client if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1212. [port] libbind: 64k answer buffers were causing stack space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be exceeded for certain OS. Use heap space instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1211. [bug] dns_name_fromtext() incorrectly handled certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid octal bitlabels. [RT #2483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatible addresses. [RT #2461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1209. [bug] Dig, host, nslookup were not checking the message ids
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on the responses. [RT #2454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1208. [bug] dns_master_load*() failed to log a error message if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error was detected when parsing the owner name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a record. [RT #2448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an invalid pointer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger a non-EDNS retry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the message. [RT #2449]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1204. [bug] libbind: res_nupdate() failed to update the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server addresses before sending the update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1203. [func] Report locations of previous acl and zone definitions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1201. [bug] Require that if 'callbacks' is passed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_fromtext(), callbacks->error and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callbacks->warn are initialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1200. [bug] Log 'errno' that we are unable to convert to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_result_t. [RT #2404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1198. [bug] OPT printing style was not consistent with the way the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding header fields are printed. The DO bit was not reported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if set. Report if any of the MBZ bits are set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1197. [bug] Attempts to define the same acl multiple times were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1196. [contrib] update mdnkit to 2.2.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1195. [bug] Attempts to redefine builtin acls should be caught.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1194. [bug] Not all duplicate zone definitions were being detected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at the named.conf checking stage. [RT #2431]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1193. [bug] dig +besteffort parsing didn't handle packet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding truncation. dns_message_parse() has new flag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_MESSAGE_IGNORETRUNCATION.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1192. [bug] The seconds fields in LOC records were restricted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to three decimal places. More decimal places should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be allowed but warned about.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1191. [bug] A dynamic update removing the last non-apex name in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a secure zone would fail. [RT #2399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1189. [bug] On some systems, malloc(0) returns NULL, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the caller to report an out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #2398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1188. [bug] Dynamic updates of a signed zone would fail if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some of the zone private keys were unavailable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1187. [bug] named was incorrectly returning DNSSEC records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in negative responses when the DO bit was not set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EOL token when reading to end of line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless RES_INIT is set when calling res_*init().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when res_*init() is called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1183. [bug] Handle ENOSR error when writing to the internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control pipe. [RT #2395]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1182. [bug] The server could throw an assertion failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding constructing a negative response packet.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1181. [func] Add the "key-directory" configuration statement,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which allows the server to look for online signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys in alternate directories.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1180. [func] dnssec-keygen should always generate keys with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding protocol 3 (DNSSEC), since it's less confusing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1179. [func] Add SIG(0) support to nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1178. [bug] Follow and cache (if appropriate) A6 and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data chains to completion in the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1177. [func] Report view when loading zones if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind). [RT #2270]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1176. [doc] Document that allow-v6-synthesis is only performed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for clients that are supplied recursive service.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1175. [bug] named-checkzone and named-checkconf failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register() at startup which could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in runtime exceptions when printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "out of memory" errors. [RT #2335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1174. [bug] Win32: add WSAECONNRESET to the expected errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from connect(). [RT #2308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1173. [bug] Potential memory leaks in isc_log_create() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_log_settag(). [RT #2336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding table of RR types in ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1171. [func] Added function isc_region_compare(), updated files in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/dns to use this function instead of local one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1170. [bug] Don't attempt to print the token when a I/O error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occurs when parsing named.conf. [RT #2275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1169. [func] Identify recursive queries in the query log.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1167. [contrib] nslint-2.1a3 (from author).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1166. [bug] "Not Implemented" should be reported as NOTIMP,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not NOTIMPL. [RT #2281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1164. [bug] Empty masters clauses in slave / stub zones were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handled gracefully. [RT #2262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1163. [func] isc_time_formattimestamp() now includes the year.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1162. [bug] The allow-notify option was not accepted in slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone statements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1161. [bug] named-checkzone looped on unbalanced brackets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1160. [bug] Generating Diffie-Hellman keys longer than 1024
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bits could fail. [RT #2241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1158. [func] Report the client's address when logging notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1157. [func] match-clients and match-destinations now accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys. [RT #2045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1156. [port] The configure test for strsep() incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeeded on certain patched versions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AIX 4.3.3. [RT #2190]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1155. [func] Recover from master files being removed from under
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1154. [bug] Don't attempt to obtain the netmask of a interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there is no address configured. [RT #2176]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1153. [func] 'rndc {stop|halt} -p' now reports the process id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the instance of named being shutdown.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1152. [bug] libbind: read buffer overflows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1151. [bug] nslookup failed to check that the arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the port, timeout, and retry options were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid integers and in range. [RT #2099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1150. [bug] named incorrectly accepted TTL values
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing plus or minus signs, such as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1149. [func] New function isc_parse_uint32().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1148. [func] 'rndc-confgen -a' now provides positive feedback.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OS. listen-on-v6 { any; }; should no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in IPv4 queries be accepted. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control { inet :: ... }; should no longer result
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in IPv4 connections being accepted. This can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overridden at compile time by defining
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_ALLOW_MAPPED=1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported by the OS by a new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_ipv6only().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1145. [func] "host" no longer reports a NOERROR/NODATA response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by printing nothing. [RT #2065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1144. [bug] rndc-confgen would crash if both the -a and -t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options were specified. [RT #2159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1143. [bug] When a trusted-keys statement was present and named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was built without crypto support, it would leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1142. [bug] dnssec-signzone would fail to delete temporary files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in some failure cases. [RT #2144]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1141. [bug] When named rejected a control message, it would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak a file descriptor and memory. It would also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail to respond, causing rndc to hang.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #2139, #2164]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the -s option. [RT #2138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1139. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache(s) via 'rndc flushname name [view]'. [RT #2051]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1138. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache by calling the new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_cache_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1137. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ADB by calling the new function dns_adb_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1136. [bug] CNAME records synthesized from DNAMEs did not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a TTL of zero as required by RFC2672.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1135. [func] You can now override the default syslog() facility for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named/lwresd at compile time. [RT #1982]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1134. [bug] Multi-threaded servers could deadlock in ferror()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reloading zone files. [RT #1951, #1998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1131. [bug] The match-destinations view option did not work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 destinations. [RT #2073, #2074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1130. [bug] Log messages reporting an out-of-range serial number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not include the out-of-range number but the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding following token. [RT #2076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1129. [bug] Multi-threaded servers could crash under heavy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolution load due to a race condition. [RT #2018]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1128. [func] sdb drivers can now provide RR data in either text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or wire format, the latter using the new functions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_sdb_putrdata() and dns_sdb_putnamedrdata().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1127. [func] rndc: If the server to contact has multiple addresses,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding try all of them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1126. [bug] The server could access a freed event if shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down while a client start event was pending
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delivery. [RT #2061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1125. [bug] rndc: -k option was missing from usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are now documented. [RT #2052]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which