CHANGES revision 778a01b1aa76273d4a28c7559a509edc7a00ec95
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2893. [bug] Improve managed keys support. New named.conf option
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater managed-keys-directory. [RT #20924]
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User2892. [bug] Handle REVOKED keys better. [RT #20961]
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater2891. [maint] Update empty-zones list to match
46da3117812814a29432a8d9a9ccf8acdbfdadceAutomatic Updater draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater2890. [bug] Handle the introduction of new trusted-keys and
79b273c187a4aa1016a62181983dfdd0521681aeMark Andrews DS, DLV RRsets better. [RT #21097]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2889. [bug] Elements of the grammar where not properly reported.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2888. [bug] Only the first EDNS option was displayed. [RT #21273]
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater2887. [bug] Report the keytag times in UTC in the .key file,
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews local time is presented as a comment within the
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User comment. [RT #21223]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User configure. [RT #21080]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2884. [bug] Insufficient valadation in dns_name_getlabelsequence().
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2883. [bug] 'dig +short' failed to handle really large datasets.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2882. [bug] Remove memory context from list of active contexts
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater before clearing 'magic'. [RT #21274]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2881. [bug] Reduce the amount of time the rbtdb write lock
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt is held when closing a version. [RT #21198]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt consistent. [RT #21078]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater2878. [func] Incrementally write the master file after performing
2d2dc37599979c83495510f8af8d1756753aa2c5Automatic Updater a AXFR. [RT #21010]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2877. [bug] The validator failed to skip obviously mismatching
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater RRSIGs. [RT #21138]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2876. [bug] Named could return SERVFAIL for negative responses
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater from unsigned zones. [RT #21131]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2875. [bug] dns_time64_fromtext() could accept non digits.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2874. [bug] Cache lack of EDNS support only after the server
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews successfully responds to the query using plain DNS.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2873. [bug] Canceling a dynamic update via the dns/client module
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User could trigger an assertion failure. [RT #21133]
e5a3fb2b751598fdbcf2cde07a47202aaab93081Tinderbox User2872. [bug] Modify dns/client.c:dns_client_createx() to only
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater require one of IPv4 or IPv6 rather than both.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
c59750de3ea3c7d5890000fb4606e8f5835a52aaTinderbox User the header file, causing build failure with
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater --enable-exportlib. [RT #21138]
ec7751119a08c6a7250f3187beed69a8b836d349Tinderbox User2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
114f7780384371121918624ae2c80ecfce545683Tinderbox User2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2868. [cleanup] Run "make clean" at the end of configure to ensure
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson any changes made by configure are integrated.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Use --with-make-clean=no to disable. [RT #20994]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater don't like it. [RT #20986]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2866. [bug] Windows does not like the TSIG name being compressed.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2865. [bug] memset to zero event.data. [RT #20986]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2862. [bug] nsupdate didn't default to the parent zone when
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User updating DS records. [RT #20896]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User inactivation time. [RT #21039]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2859. [bug] When cancelling validation it was possible to leak
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater memory. [RT #20800]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User2856. [bug] The size of a memory allocation was not always properly
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews recorded. [RT #20927]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2855. [func] nsupdate will now preserve the entered case of domain
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews names in update requests it sends. [RT #20928]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews be suppressed, dig +onesoa. [RT #20929]
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2851. [doc] nslookup.1, removed <informalexample> from the docbook
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater source as it produced bad nroff. [RT #21007]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2850. [bug] If isc_heap_insert() failed due to memory shortage
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater README.rfc5011 into the ARM. [RT #20899]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2846. [bug] EOF on unix domain sockets was not being handled
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson correctly. [RT #20731]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2844. [doc] notify-delay default in ARM was wrong. It should have
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User been five (5) seconds.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater creating key files if there is a chance that the new
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater key ID will collide with an existing one after
c6a0f4ae1d7183a16ffb196b86b647f870694796Automatic Updater either of the keys has been revoked. (To override
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater this in the case of dnssec-keyfromlabel, use the -y
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User option. dnssec-keygen will simply create a
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User different, non-colliding key, so an override is
269519eeb959d905ed125f96426e01d725c3b597Tinderbox User not necessary.) [RT #20838]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2842. [func] Added "smartsign" and improved "autosign" and
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater "dnssec" regression tests. [RT #20865]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2841. [bug] Change 2836 was not complete. [RT #20883]
e85565067cf73f8cc21ee29b11761659f1d47ee9Automatic Updater2840. [bug] Temporary fixed pkcs11-destroy usage check.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2839. [bug] A KSK revoked by named could not be deleted.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2838. [placeholder]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2837. [port] Prevent Linux spurious warnings about fwrite().
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater2836. [bug] Keys that were scheduled to become active could
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater be delayed. [RT #20874]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater2835. [bug] Key inactivity dates were inadvertently stored in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the private key file with the outdated tag
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater "Unpublish" rather than "Inactive". This has been
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater fixed; however, any existing keys that had Inactive
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dates set will now need to have them reset, using
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 'dnssec-settime -I'. [RT #20868]
dbd021853bb1cd6ab128e8da8865f5965030aedcTinderbox User2834. [bug] HMAC-SHA* keys that were longer than the algorithm
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater digest length were used incorrectly, leading to
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater interoperability problems with other DNS
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater implementations. This has been corrected.
7262eb86f2b465822206122921e2f357218f0cfdAutomatic Updater (Note: If an oversize key is in use, and
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews compatibility is needed with an older release of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater BIND, the new tool "isc-hmac-fixup" can convert
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater the key secret to a form that will work with all
bbb069be941f649228760edcc241122933c066d2Automatic Updater versions.) [RT #20751]
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to avoid redefinition in some OSes [RT 20831]
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater2831. [security] Do not attempt to validate or cache
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews out-of-bailiwick data returned with a secure
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews answer; it must be re-fetched from its original
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User source and validated in that context. [RT #20819]
cafd3a2b9974fe0a4ab95e0289746062bd958d68Automatic Updater2830. [bug] Changing the OPTOUT setting could take multiple
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews passes. [RT #20813]
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater2829. [bug] Fixed potential node inconsistency in rbtdb.c.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2828. [security] Cached CNAME or DNAME RR could be returned to clients
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User without DNSSEC validation. [RT #20737]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater being released. [RT #20740]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater was in the process of being created was not properly
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater recorded in the zone. [RT #20786]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2824. [bug] "rndc sign" was not being run by the correct task.
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2822. [bug] rbtdb.c:loadnode() could return the wrong result.
3857cb6fcabeb79d85de4b3e3e4ab99912b701f8Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater file more user friendly (PKCS#11 engine patch).
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews2818. [cleanup] rndc could return an incorrect error code
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews when a zone was not found. [RT #20767]
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2816. [bug] previous_closest_nsec() could fail to return
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews data for NSEC3 nodes [RT #29730]
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2814. [func] Provide a definitive error message when a master
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews zone is not loaded. [RT #20757]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews2812. [bug] Make sure updates can't result in a zone with
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater NSEC-only keys and NSEC3 records. [RT 20748]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater output. [RT #20733]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater2810. [doc] Clarified the process of transitioning an NSEC3 zone
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater to insecure. [RT #20746]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater2809. [cleanup] Restored accidentally-deleted text in usage output
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater in dnssec-settime and dnssec-revoke [RT #20739]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User atomic.h is correctly installed by the architecture
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User specific subdirectories. [RT #20722]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User2807. [bug] Fixed a possible ASSERT when reconfiguring zone
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User keys. [RT #20720]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater --- 9.7.0rc1 released ---
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when it had changed. [RT #20703]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews2805. [bug] Fixed namespace problems encountered when building
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews external programs using non-exported BIND9 libraries
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2804. [bug] Send notifies when a zone is signed with "rndc sign"
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater or as a result of a scheduled key change. [RT #20700]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater and genrandom under windows. [RT #20670]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2801. [func] Detect and report records that are different according
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to DNSSEC but are sematically equal according to plain
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User DNS. Apply plain DNS comparisons rather than DNSSEC
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User comparisons when processing UPDATE requests.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User dnssec-signzone now removes such semantically duplicate
b13d89bd89878137c81b36a36596cca3920f27a4Automatic Updater records prior to signing the RRset.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User named-checkzone -r {ignore|warn|fail} (default warn)
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater named-compilezone -r {ignore|warn|fail} (default warn)
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User named.conf: check-dup-records {ignore|warn|fail};
bc0a4c01beede169df81a3ee5b614ed9e82339dbAutomatic Updater2800. [func] Reject zones which have NS records which refer to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User CNAMEs, DNAMEs or don't have address record (class IN
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington only). Reject UPDATEs which would cause the zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to fail the above checks if committed. [RT #20678]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2799. [cleanup] Changed the "secure-to-insecure" option to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "dnssec-secure-to-insecure", and "dnskey-ksk-only"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2798. [bug] Addressed bugs in managed-keys initialization
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and rollover. [RT #20683]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2797. [bug] Don't decrement the dispatch manager's maxbuffers.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2796. [bug] Missing dns_rdataset_disassociate() call in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dns_nsec3_delnsec3sx(). [RT #20681]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2795. [cleanup] Add text to differentiate "update with no effect"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington log messages. [RT #18889]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2794. [bug] Install <isc/namespace.h>. [RT #20677]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2793. [func] Add "autosign" and "metadata" tests to the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington automatic tests. [RT #19946]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2792. [func] "filter-aaaa-on-v4" can now be set in view
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington options (if compiled in). [RT #20635]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2791. [bug] The installation of isc-config.sh was broken.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2790. [bug] Handle DS queries to stub zones. [RT #20440]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2788. [bug] dnssec-signzone could sign with keys that were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington not requested [RT #20625]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2787. [bug] Spurious log message when zone keys were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dynamically reconfigured. [RT #20659]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2786. [bug] Additional could be promoted to answer. [RT #20663]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.7.0b3 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2785. [bug] Revoked keys could fail to self-sign [RT #20652]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2784. [bug] TC was not always being set when required glue was
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dropped. [RT #20655]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User buffer size of 512 or less. [RT #20654]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2782. [port] win32: use getaddrinfo() for hostname lookups.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2781. [bug] Inactive keys could be used for signing. [RT #20649]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2780. [bug] dnssec-keygen -A none didn't properly unset the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User activation date in all cases. [RT #20648]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2779. [bug] Dynamic key revokation could fail. [RT #20644]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2778. [bug] dnssec-signzone could fail when a key was revoked
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater without deleting the unrevoked version. [RT #20638]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User2776. [bug] Change #2762 was not correct. [RT #20647]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington in dnssec-keyfromlabel. [RT #20643]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2774. [bug] Existing cache DB wasn't being reused after
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews reconfiguration. [RT #20629]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2773. [bug] In autosigned zones, the SOA could be signed
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington with the KSK. [RT #20628]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2772. [security] When validating, track whether pending data was from
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the additional section or not and only return it if
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User validates as secure. [RT #20438]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2771. [bug] dnssec-signzone: DNSKEY records could be
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington corrupted when importing from key files [RT #20624]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2770. [cleanup] Add log messages to resolver.c to indicate events
e10d61d84e0b735f1e8eca18644cfdb1b06cad33Tinderbox User causing FORMERR responses. [RT #20526]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2769. [cleanup] Change #2742 was incomplete. [RT #19589]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2767. [bug] named could crash on startup if a zone was
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User configured with auto-dnssec and there was no
e01f44b37ba11c9d34f4a8394f950efae5c07f33Automatic Updater key-directory. [RT #20615]
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater2766. [bug] isc_socket_fdwatchpoke() should only update the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater socketmgr state if the socket is not pending on a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater read or write. [RT #20603]
3de6db3208d51de1e138b63b9670430c03f99694Automatic Updater2765. [bug] Skip masters for which the TSIG key cannot be found.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2762. [bug] DLV validation failed with a local slave DLV zone.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2761. [cleanup] Enable internal symbol table for backtrace only for
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington systems that are known to work. Currently, BSD
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington variants, Linux and Solaris are supported. [RT# 20202]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2759. [doc] Add information about .jbk/.jnw files to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the ARM. [RT #20303]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2758. [bug] win32: Added a workaround for a windows 2008 bug
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that could cause the UDP client handler to shut
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington down. [RT #19176]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2757. [bug] dig: assertion failure could occur in connect
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington timeout. [RT #20599]
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2755. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2754. [bug] Secure-to-insecure transitions failed when zone
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater was signed with NSEC3. [RT #20587]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2753. [bug] Removed an unnecessary warning that could appear when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington building an NSEC chain. [RT #20589]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2752. [bug] Locking violation. [RT #20587]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2750. [bug] dig: assertion failure could occur when a server
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington didn't have an address. [RT #20579]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2749. [bug] ixfr-from-differences generated a non-minimal ixfr
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for NSEC3 signed zones. [RT #20452]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2748. [func] Identify bad answers from GTLD servers and treat them
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington as referrals. [RT #18884]
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User2747. [bug] Journal roll forwards failed to set the re-signing
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews time of RRSIGs correctly. [RT #20541]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2746. [port] hpux: address signed/unsigned expansion mismatch of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2745. [bug] configure script didn't probe the return type of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington gai_strerror(3) correctly. [RT #20573]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2744. [func] Log if a query was over TCP. [RT #19961]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for a insecure delegation.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.7.0b2 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2742. [cleanup] Clarify some DNSSEC-related log messages in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2741. [func] Allow the dnssec-keygen progress messages to be
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User suppressed (dnssec-keygen -q). Automatically
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater suppress the progress messages when stdin is not
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a tty. [RT #20474]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2740. [placeholder]
56effd2e3f579fd77b1fb37d47871d1bf1286bc4Automatic Updater2739. [cleanup] Clean up API for initializing and clearing trust
42bee07ebb8152a6ec2f87f4790d87368c24704cAutomatic Updater anchors for a view. [RT #20211]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User test. [RT #20453]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2737. [func] UPDATE requests can leak existance information.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2736. [func] Improve the performance of NSEC signed zones with
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews more than a normal amount of glue below a delegation.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2735. [bug] dnssec-signzone could fail to read keys
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews that were specified on the command line with
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington full paths, but weren't in the current
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington directory. [RT #20421]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2734. [port] cygwin: arpaname did not compile. [RT #20473]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2732. [func] Add optional filter-aaaa-on-v4 option, available
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington if built with './configure --enable-filter-aaaa'.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Filters out AAAA answers to clients connecting
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington via IPv4. (This is NOT recommended for general
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington use.) [RT #20339]
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User2731. [func] Additional work on change 2709. The key parser
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington will now ignore unrecognized fields when the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User minor version number of the private key format
febbdb34a7f7759922e239655e7429d78d3a8d26Tinderbox User has been increased. It will reject any key with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the major version number increased. [RT #20310]
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User2730. [func] Have dnssec-keygen display a progress indication
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a la 'openssl genrsa' on standard error. Note
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when the first '.' is followed by a long stop
84a18c72b9f05a7d2aabbc50886de494251d1719Automatic Updater one has the choice between slow generation vs.
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User poor random quality, i.e., '-r /dev/urandom'.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2729. [func] When constructing a CNAME from a DNAME use the DNAME
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews TTL. [RT #20451]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User dnssec-signzone now warn immediately if asked to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User write into a nonexistent directory. [RT #20278]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2727. [func] The 'key-directory' option can now specify a relative
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User path. [RT #20154]
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater2726. [func] Added support for SHA-2 DNSSEC algorithms,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User RSASHA256 and RSASHA512. [RT #20023]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater2725. [doc] Added information about the file "managed-keys.bind"
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater to the ARM. [RT #20235]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2724. [bug] Updates to a existing node in secure zone using NSEC
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User were failing. [RT #20448]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
e8c17c74535be290abaaa160a434ed80bf0ad2feMark Andrews isc_base64_totext(), didn't always mark regions of
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater memory as fully consumed after conversion. [RT #20445]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater2722. [bug] Ensure that the memory associated with the name of
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater a node in a rbt tree is not altered during the life
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User of the node. [RT #20431]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2721. [port] Have dst__entropy_status() prime the random number
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater generator. [RT #20369]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2720. [bug] RFC 5011 trust anchor updates could trigger an
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater assert if the DNSKEY record was unsigned. [RT #20406]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2719. [func] Skip trusted/managed keys for unsupported algorithms.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2718. [bug] The space calculations in opensslrsa_todns() were
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater incorrect. [RT #20394]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2717. [bug] named failed to update the NSEC/NSEC3 record when
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater the last private type record was removed as a result
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater of completing the signing the zone with a key.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater --- 9.7.0b1 released ---
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2715. [bug] Require OpenSSL support to be explicitly disabled.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2713. [bug] powerpc: atomic operations missing asm("ics") /
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater __isync() calls.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2712. [func] New 'auto-dnssec' zone option allows zone signing
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater to be fully automated in zones configured for
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater dynamic DNS. 'auto-dnssec allow;' permits a zone
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater to be signed by creating keys for it in the
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater key-directory and using 'rndc sign <zone>'.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater 'auto-dnssec maintain;' allows that too, plus it
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater also keeps the zone's DNSSEC keys up to date
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater according to their timing metadata. [RT #19943]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2711. [port] win32: Add the bin/pkcs11 tools into the full
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater build. [RT #20372]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater zone option cause a zone to be signed with only KSKs
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater signing the DNSKEY RRset, not ZSKs. This reduces
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the size of a DNSKEY answer. [RT #20340]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater2709. [func] Added some data fields, currently unused, to the
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater private key file format, to allow implementation
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User of explicit key rollover in a future release
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater without impairing backward or forward compatibility.
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews update are now fully supported and no longer require
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews defines to enable. We now no longer overload the
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater NSEC3PARAM flag field, nor the NSEC OPT bit at the
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater apex. Secure to insecure changes are controlled by
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater by the named.conf option 'secure-to-insecure'.
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater Warning: If you had previously enabled support by
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater adding defines at compile time to BIND 9.6 you should
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User ensure that all changes that are in progress have
75333ed9bf283dc5f93deea43460149937402985Automatic Updater completed prior to upgrading to BIND 9.7. BIND 9.7
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater is not backwards compatible.
4ea3649f028ea6a1e42377082a7ccf8f789fb950Automatic Updater2707. [func] dnssec-keyfromlabel no longer require engine name
40072ce70bc4125329addb4aaa56d18a1230bc17Automatic Updater to be specified in the label if there is a default
60d5d17479b47c03b9c7c86f54269718103750b8Automatic Updater engine or the -E option has been used. Also, it
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater now uses default algorithms as dnssec-keygen does
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2706. [bug] Loading a zone with a very large NSEC3 salt could
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater trigger an assert. [RT #20368]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater2705. [placeholder]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2704. [bug] Serial of dynamic and stub zones could be inconsistent
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater with their SOA serial. [RT #19387]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater2703. [func] Introduce an OpenSSL "engine" argument with -E
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater for all binaries which can take benefit of
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater crypto hardware. [RT #20230]
19dbf2e20df03f2b81ed1f347e27718084374059Automatic Updater2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater2701. [doc] Correction to ARM: hmac-md5 is no longer the only
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater supported TSIG key algorithm. [RT #18046]
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater2700. [doc] The match-mapped-addresses option is discouraged.
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater2699. [bug] Missing lock in rbtdb.c. [RT #20037]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2698. [placeholder]
016614bf32c25cbd3f2b39f68455b8c98a1a22b3Automatic Updater2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
7dd02af3c9350553e1d52d980a7812425b3f1295Automatic Updater S_IFREG are defined after including <isc/stat.h>.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington2696. [bug] named failed to successfully process some valid
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington acl constructs. [RT #20308]
01f91b9cd440833f66e7476e43659655cb52ad10Automatic Updater2695. [func] DHCP/DDNS - update fdwatch code for use by
3e5b24a74c03d5b52f32d138e64e427bd2cbc8f3Automatic Updater DHCP. Modify the api to isc_sockfdwatch_t (the
3e5b24a74c03d5b52f32d138e64e427bd2cbc8f3Automatic Updater callback funciton for isc_socket_fdwatchcreate)
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User to include information about the direction (read
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews or write) and add isc_socket_fdwatchpoke.
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User chain when re-signing a previously-signed zone.
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User Use -u to modify NSEC3 parameters or switch
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt between NSEC and NSEC3. [RT #20304]
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt2689. [bug] Correctly handle snprintf result. [RT #20306]
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt to decide to fetch the destination address. [RT #20305]
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt Also, added warnings when revoking a ZSK, as this is
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt not defined by protocol (but is legal). [RT #19943]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2686. [bug] dnssec-signzone should clean the old NSEC chain when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater signing with NSEC3 and vice versa. [RT #20301]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2684. [cleanup] dig: formalize +ad and +cd as synonyms for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater +adflag and +cdflag. [RT #19305]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater the NSEC3 parameters used to sign the zone change.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2682. [bug] "configure --enable-symtable=all" failed to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User build. [RT #20282]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User decoded. [RT #20269]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2679. [func] dig -k can now accept TSIG keys in named.conf
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater format. [RT #20031]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2678. [func] Treat DS queries as if "minimal-response yes;"
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User was set. [RT #20258]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2677. [func] Changes to key metadata behavior:
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - Keys without "publish" or "active" dates set will
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User no longer be used for smart signing. However,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User those dates will be set to "now" by default when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a key is created; to generate a key but not use
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater it yet, use dnssec-keygen -G.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - New "inactive" date (dnssec-keygen/settime -I)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater sets the time when a key is no longer used for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater signing but is still published.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - The "unpublished" date (-U) is deprecated in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater favor of "deleted" (-D).
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2676. [bug] --with-export-installdir should have been
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User --with-export-includedir. [RT #20252]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater2675. [bug] dnssec-signzone could crash if the key directory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater did not exist. [RT #20232]
88d58d79c5bc7ce3c20a42461a5070116c736836Automatic Updater --- 9.7.0a3 released ---
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater2674. [bug] "dnssec-lookaside auto;" crashed if named was built
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User without openssl. [RT #20231]
48b36fa08b2b5bc0d552dc2a4425b3f7007b3d59Automatic Updater2673. [bug] The managed-keys.bind zone file could fail to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater load due to a spurious result from sync_keyzone()
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2672. [bug] Don't enable searching in 'host' when doing reverse
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater lookups. [RT #20218]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2671. [bug] Add support for PKCS#11 providers not returning
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the public exponent in RSA private keys
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater (OpenCryptoki for instance) in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dnssec-keyfromlabel. [RT #19294]
9fa39c73fc1d8bc44fdbbb79a1d26b837e7dd555Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater information to be useful. [RT #20205]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2669. [func] Update PKCS#11 support to support Keyper HSM.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Update PKCS#11 patch to be against openssl-0.9.8i.
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater2668. [func] Several improvements to dnssec-* tools, including:
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater - dnssec-keygen and dnssec-settime can now set key
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater metadata fields 0 (to unset a value, use "none")
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User - dnssec-revoke sets the revocation date in
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater addition to the revoke bit
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User - dnssec-settime can now print individual metadata
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User fields instead of always printing all of them,
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User and can print them in unix epoch time format for
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User use by scripts
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews2667. [func] Add support for logging stack backtrace on assertion
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews failure (not available for all platforms). [RT #19780]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2666. [func] Added an 'options' argument to dns_name_fromstring()
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User (API change from 9.7.0a2). [RT #20196]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2665. [func] Clarify syntax for managed-keys {} statement, add
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater ARM documentation about RFC 5011 support. [RT #19874]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2664. [bug] create_keydata() and minimal_update() in zone.c
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User didn't properly check return values for some
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews functions. [RT #19956]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2663. [func] win32: allow named to run as a service using
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater "NT AUTHORITY\LocalService" as the account. [RT #19977]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews returned a misleading error code when lwresd was
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews down. [RT #20028]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews creating lwres context. [RT #20029]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User applications. See README.libdns. [RT #19369]
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont2659. [doc] Clarify dnssec-keygen doc: key name must match zone
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont name for DNSSEC keys. [RT #19938]
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont2658. [bug] dnssec-settime and dnssec-revoke didn't process
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User key file paths correctly. [RT #20078]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater2657. [cleanup] Lower "journal file <path> does not exist, creating it"
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater log level to debug 1. [RT #20058]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater2656. [func] win32: add a "tools only" check box to the installer
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater which causes it to only install dig, host, nslookup,
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater nsupdate and relevant DLLs. [RT #19998]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User2655. [doc] Document that key-directory does not affect
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User bind.keys, rndc.key or session.key. [RT #20155]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater2654. [bug] Improve error reporting on duplicated names for
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater deny-answer-xxx. [RT #20164]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater2653. [bug] Treat ENGINE_load_private_key() failures as key
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater not found rather than out of memory. [RT #18033]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater2652. [func] Provide more detail about what record is being
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User deleted. [RT #20061]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2651. [bug] Dates could print incorrectly in K*.key files on
be46cb4bee9253ee4832340c719920642e00c41aTinderbox User 64-bit systems. [RT #20076]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater2650. [bug] Assertion failure in dnssec-signzone when trying
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User to read keyset-* files. [RT #20075]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2649. [bug] Set the domain for forward only zones. [RT #19944]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2647. [bug] Remove unnecessary SOA updates when a new KSK is
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater added. [RT #19913]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater which default to 64 bits. [RT #19927]
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein --- 9.7.0a2 released ---
e171a4137c6ba348957e61b7c4c3541493c0da02Automatic Updater2644. [bug] Change #2628 caused a regression on some systems;
c53a6f37deaa396660adb6a4ca600c4a58adfd3fAutomatic Updater named was unable to write the PID file and would
c53a6f37deaa396660adb6a4ca600c4a58adfd3fAutomatic Updater fail on startup. [RT #20001]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2643. [bug] Stub zones interacted badly with NSEC3 support.
b3386fba31414344f38f0c30849c056dceb22dceTinderbox User2642. [bug] nsupdate could dump core on solaris when reading
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater improperly formatted key files. [RT #20015]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2641. [bug] Fixed an error in parsing update-policy syntax,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater added a regression test to check it. [RT #20007]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2640. [security] A specially crafted update packet will cause named
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User to exit. [RT #20000]
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2638. [bug] Install arpaname. [RT #19957]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2636. [func] Simplify zone signing and key maintenance with the
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater dnssec-* tools. Major changes:
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater - all dnssec-* tools now take a -K option to
4104e236f71eb5108fcfda6711878a97f6f4a8e7Automatic Updater specify a directory in which key files will be
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - DNSSEC can now store metadata indicating when
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User they are scheduled to be published, activated,
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater revoked or removed; these values can be set by
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater dnssec-keygen or overwritten by the new
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User dnssec-settime command
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater - dnssec-signzone -S (for "smart") option reads key
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater metadata and uses it to determine automatically
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont which keys to publish to the zone, use for
c53a6f37deaa396660adb6a4ca600c4a58adfd3fAutomatic Updater signing, revoke, or remove from the zone
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2634. [port] win32: Add support for libxml2, enable
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater statschannel. [RT #19773]
f8a9a38ee40c139a8d145ac76ecbff3a0f986453Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2632. [func] util/kit.sh: warn if documentation appears to be out of
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User date. [RT #19922]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2630. [func] Improved syntax for DDNS autoconfiguration: use
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User "update-policy local;" to switch on local DDNS in a
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User zone. (The "ddns-autoconf" option has been removed.)
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2629. [port] Check for seteuid()/setegid(), use setresuid()/
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User setresgid() if not present. [RT #19932]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2628. [port] linux: Allow /var/run/named/named.pid to be opened
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User at startup with reduced capabilities in operation.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2627. [bug] Named aborted if the same key was included in
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User trusted-keys more than once. [RT #19918]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2626. [bug] Multiple trusted-keys could trigger an assertion
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User failure. [RT #19914]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User2624. [func] 'named-checkconf -p' will print out the parsed
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User configuration. [RT #18871]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2621. [doc] Made copyright boilterplate consistent. [RT #19833]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2620. [bug] Delay thawing the zone until the reload of it has
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews completed successfully. [RT #19750]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews maintenance. The new "managed-keys" statement can
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews be used in place of "trusted-keys" for zones which
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews support this protocol. (Note: this syntax is
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2618. [bug] The sdb and sdlz db_interator_seek() methods could
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User loop infinitely. [RT #19847]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2617. [bug] ifconfig.sh failed to emit an error message when
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater run from the wrong location. [RT #19375]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User when a explicit nameserver was specified. [RT #19852]
8c9c79e5fea0cb698026a74821695907c8312a46Mark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User for ia64 gcc builds. [RT #19854]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2614. [port] win32: 'named -v' should automatically be executed
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User in the foreground. [RT #19844]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2613. [placeholder]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater --- 9.7.0a1 released ---
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2612. [func] Add default values for the arguments to
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater dnssec-keygen. Without arguments, it will now
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User generate a 1024-bit RSASHA1 zone-signing key,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or with the -f KSK option, a 2048-bit RSASHA1
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater key-signing key. [RT #19300]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2611. [func] Add -l option to dnssec-dsfromkey to generate
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DLV records instead of DS records. [RT #19300]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2610. [port] sunos: Change #2363 was not complete. [RT #19796]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2609. [func] Simplify the configuration of dynamic zones:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - add ddns-confgen command to generate
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater configuration text for named.conf
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater - add zone option "ddns-autoconf yes;", which
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User causes named to generate a TSIG session key
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User and allow updates to the zone using that key
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User - add '-l' (localhost) option to nsupdate, which
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington causes nsupdate to connect to a locally-running
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington named process using the session key generated
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2608. [func] Perform post signing verification checks in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dnssec-signzone. These can be disabled with -P.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User The post sign verification test ensures that for each
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User algorithm in use there is at least one non revoked
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington self signed KSK key. That all revoked KSK keys are
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews self signed. That all records in the zone are signed
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User by the algorithm. [RT #19653]
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater2607. [bug] named could incorrectly delete NSEC3 records for
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater empty nodes when processing a update request.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2606. [bug] "delegation-only" was not being accepted in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User delegation-only type zones. [RT #19717]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2605. [bug] Accept DS responses from delegation only zones.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater2604. [func] Add support for DNS rebinding attack prevention through
5e1503eb9464c2284bb782228d4c315087a2415fAutomatic Updater new options, deny-answer-addresses and
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater deny-answer-aliases. Based on contributed code from
5e1503eb9464c2284bb782228d4c315087a2415fAutomatic Updater JD Nurmi, Google. [RT #18192]
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater2603. [port] win32: handle .exe extension of named-checkzone and
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater named-comilezone argv[0] names under windows.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater2602. [port] win32: fix debugging command line build of libisccfg.
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark Andrews2601. [doc] Mention file creation mode mask in the
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark Andrews named manual page.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater2600. [doc] ARM: miscellaneous reformatting for different
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater page widths. [RT #19574]
e2e3f655d133f08056c9035412d4c013aab234e7Automatic Updater2599. [bug] Address rapid memory growth when validation fails.
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater2598. [func] Reserve the -F flag. [RT #19657]
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater2597. [bug] Handle a validation failure with a insecure delegation
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater from a NSEC3 signed master/slave zone. [RT #19464]
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User long, leading to inefficient memory usage or rejecting
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater newer cache entries in the worst case. [RT #19563]
e2e3f655d133f08056c9035412d4c013aab234e7Automatic Updater2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2594. [func] Have rndc warn if using its default configuration
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington file when the key file also exists. [RT #19424]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2591. [bug] named could die when processing a update in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater removed_orphaned_ds(). [RT #19507]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2590. [func] Report zone/class of "update with no effect".
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2588. [bug] SO_REUSEADDR could be set unconditionally after failure
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User of bind(2) call. This should be rare and mostly
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User harmless, but may cause interference with other
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User processes that happen to use the same port. [RT #19642]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2587. [func] Improve logging by reporting serial numbers for
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User when zone serial has gone backwards or unchanged.
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater or SDB. [RT #19577]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2585. [bug] Uninitialized socket name could be referenced via a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater statistics channel, triggering an assertion failure in
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater XML rendering. [RT #19427]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2584. [bug] alpha: gcc optimization could break atomic operations.
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2583. [port] netbsd: provide a control to not add the compile
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews date to the version string, -DNO_VERSION_DATE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2582. [bug] Don't emit warning log message when we attempt to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater remove non-existent journal. [RT #19516]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater Requires MySQL 5.0.19 or later. [RT #19084]
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater2580. [bug] UpdateRej statistics counter could be incremented twice
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater for one rejection. [RT #19476]
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater2579. [bug] DNSSEC lookaside validation failed to handle unknown
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater algorithms. [RT #19479]
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater2578. [bug] Changed default sig-signing-type to 65534, because
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews 65535 turns out to be reserved. [RT #19477]
79242b4b2baccf73f007645983fccad02747af13Automatic Updater2577. [doc] Clarified some statistics counters. [RT #19454]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2576. [bug] NSEC record were not being correctly signed when
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater a zone transitions from insecure to secure.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Handle such incorrectly signed zones. [RT #19114]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2575. [func] New functions dns_name_fromstring() and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User dns_name_tostring(), to simplify conversion
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of a string to a dns_name structure and vice
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater versa. [RT #19451]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2574. [doc] Document nsupdate -g and -o. [RT #19351]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2573. [bug] Replacing a non-CNAME record with a CNAME record in a
0c7657e9302e7f9a8fe4f32fe561dc7e7e7ee6b5Automatic Updater single transaction in a signed zone failed. [RT #19397]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2572. [func] Simplify DLV configuration, with a new option
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User "dnssec-lookaside auto;" This is the equivalent
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User of "dnssec-lookaside . trust-anchor dlv.isc.org;"
12ee3c02ab36d7e7430bd705cc289db1a69a5733Mark Andrews plus setting a trusted-key for dlv.isc.org.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews Note: The trusted key is hard-coded into named,
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater but is also stored in (and can be overridden
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater by) $sysconfdir/bind.keys. As the ISC DLV key
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews rolls over it can be kept up to date by replacing
55f7099aade5630f3b10b5f007536c60e80cced2Automatic Updater the bind.keys file with a key downloaded from
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater https://www.isc.org/solutions/dlv. [RT #18685]
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater2571. [func] Add a new tool "arpaname" which translates IP addresses
cd839f5cf5f84cf163f55ff05cb88ce37efd24d1Automatic Updater to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2570. [func] Log the destination address the query was sent to.
fd8fb4df8499e292daeac765f599ac7c507d9ca3Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User "make install" will put them in $sbindir. [RT #19301]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2568. [bug] Report when the write to indicate a otherwise
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User successful start fails. [RT #19360]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2567. [bug] dst__privstruct_writefile() could miss write errors.
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater write_public_key() could miss write errors.
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater dnssec-dsfromkey could miss write errors.
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater2566. [cleanup] Clarify logged message when an insecure DNSSEC
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater response arrives from a zone thought to be secure:
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater "insecurity proof failed" instead of "not
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User insecure". [RT #19400]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2565. [func] Add support for HIP record. Includes new functions
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User dns_rdata_hip_first(), dns_rdata_hip_next()
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User and dns_rdata_hip_current(). [RT #19384]
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater2564. [bug] Only take EDNS fallback steps when processing timeouts.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2563. [bug] Dig could leak a socket causing it to wait forever
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews to exit. [RT #19359]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2562. [doc] ARM: miscellaneous improvements, reorganization,
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater and some new content.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2559. [bug] dnssec-dsfromkey could compute bad DS records when
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater reading from a K* files. [RT #19357]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2558. [func] Set the ownership of missing directories created
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User for pid-file if -u has been specified on the command
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater line. [RT #19328]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2557. [cleanup] PCI compliance:
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User * new libisc log module file
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews * isc_dir_chroot() now also changes the working
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User directory to "/".
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater * additional INSISTs
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater * additional logging when files can't be removed.
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater error checks in the correct order resulting in the
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater wrong error code sometimes being returned. [RT #19249]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2555. [func] dig: when emitting a hex dump also display the
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater corresponding characters. [RT #19258]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2554. [bug] Validation of uppercase queries from NSEC3 zones could
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User fail. [RT #19297]
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2552. [bug] zero-no-soa-ttl-cache was not being honoured.
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2551. [bug] Potential Reference leak on return. [RT #19341]
a6e1f63f50af688610ebd2521ba7f028767b51f3Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater2549. [port] linux: define NR_OPEN if not currently defined.
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2548. [bug] Install iterated_hash.h. [RT #19335]
e0bf4fc289705375be65c05a8fb085d514a98c97Tinderbox User2547. [bug] openssl_link.c:mem_realloc() could reference an
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater out-of-range area of the source buffer. New public
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User function isc_mem_reallocate() was introduced to address
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater this bug. [RT #19313]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2546. [func] Add --enable-openssl-hash configure flag to use
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater OpenSSL (in place of internal routine) for hash
dbd021853bb1cd6ab128e8da8865f5965030aedcTinderbox User functions (MD5, SHA[12] and HMAC). [RT #18815]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater2545. [doc] ARM: Legal hostname checking (check-names) is
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater for SRV RDATA too. [RT #19304]
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
6686505e3ae3289eea38002a3269828893532489Evan Hunt2542. [doc] Update the description of dig +adflag. [RT #19290]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2541. [bug] Conditionally update dispatch manager statistics.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater2539. [security] Update the interaction between recursion, allow-query,
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater allow-query-cache and allow-recursion. [RT #19198]
bde1625cbc0256920625797a2cd4f05312f02ffaMark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater especially with threads and smaller max-cache-size
ed52536a1722606f22332ba4f92cbb74c3b256d9Tinderbox User values. [RT #19240]
b86a75e3ade957c80316e03e148a6969fc3179b9Automatic Updater2537. [func] Added more statistics counters including those on socket
ed52536a1722606f22332ba4f92cbb74c3b256d9Tinderbox User I/O events and query RTT histograms. [RT #18802]
ed52536a1722606f22332ba4f92cbb74c3b256d9Tinderbox User2536. [cleanup] Silence some warnings when -Werror=format-security is
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver specified. [RT #19083]
ed52536a1722606f22332ba4f92cbb74c3b256d9Tinderbox User2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver2534. [func] Check NAPTR records regular expressions and
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver replacement strings to ensure they are syntactically
ed52536a1722606f22332ba4f92cbb74c3b256d9Tinderbox User valid and consistant. [RT #18168]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2533. [doc] ARM: document @ (at-sign). [RT #17144]
5645e0c82a55b05abb975bd91b9566823dc5efb0Evan Hunt2532. [bug] dig: check the question section of the response to
5645e0c82a55b05abb975bd91b9566823dc5efb0Evan Hunt see if it matches the asked question. [RT #18495]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2531. [bug] Change #2207 was incomplete. [RT #19098]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews via UPDATE. [RT #19101]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews version of autoconf. [RT #18657]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2528. [cleanup] Silence spurious configure warning about
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews --datarootdir [RT #19096]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2527. [placeholder]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews views to share a single cache to save memory and
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews improve lookup efficiency. Based on contributed code
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews from Barclay Osborn, Google. [RT #18905]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews internal information about query failures, especially
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews about server failures. [RT #19027]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2521. [bug] Improve epoll cross compilation support. [RT #19047]
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater2520. [bug] Update xml statistics version number to 2.0 as change
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews #2388 made the schema incompatible to the previous
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews version. [RT #19080]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews nameserver addresses of the excluded address family
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews preceded in resolv.conf. [RT #19081]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews nameserver address of the excluded address type.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2516. [bug] glue sort for responses was performed even when not
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews needed. [RT #19039]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews a nameserver of the excluded address family.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2513. [bug] Fix windows cli build. [RT #19062]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2512. [func] Print a summary of the cached records which make up
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the negative response. [RT #18885]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2509. [bug] Specifying a fixed query source port was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2508. [placeholder]
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater2507. [func] Log the recursion quota values when killing the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User oldest query or refusing to recurse due to quota.
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2506. [port] solaris: Check at configure time if
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater hack_shutup_pthreadonceinit is needed. [RT #19037]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2505. [port] Treat amd64 similarly to x86_64 when determining
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater atomic operation support. [RT #19031]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2504. [bug] Address race condition in the socket code. [RT #18899]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2503. [port] linux: improve compatibility with Linux Standard
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater Base. [RT #18793]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2502. [cleanup] isc_radix: Improve compliance with coding style,
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater document function in <isc/radix.h>. [RT #18534]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2501. [func] $GENERATE now supports all rdata types. Multi-field
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater rdata types need to be quoted. See the ARM for
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater details. [RT #18368]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater function. [RT #18582]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater --- 9.6.0rc1 released ---
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2498. [bug] Removed a bogus function argument used with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User ISC_SOCKET_USE_POLLWATCH: it could cause compiler
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater warning or crash named with the debug 1 level
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User of logging. [RT #18917]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2496. [bug] Add sanity length checks to NSID option. [RT #18813]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2495. [bug] Tighten RRSIG checks. [RT #18795]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User installed. [RT #18826]
059cd1994d4ac5c1b967ce777d2c7409dc829a42Tinderbox User2493. [bug] The linux capabilities code was not correctly cleaning
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User up after itself. [RT #18767]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2492. [func] Rndc status now reports the number of cpus discovered
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User and the number of worker threads when running
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater multi-threaded. [RT #18273]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2491. [func] Attempt to re-use a local port if we are already using
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater the port. [RT #18548]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User is cleared when IPV6_V6ONLY is set. [RT #18785]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2489. [port] solaris: Workaround Solaris's kernel bug about
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Define ISC_SOCKET_USE_POLLWATCH at build time to enable
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this workaround. [RT #18870]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater from keyset and .key files. [RT #18694]
13deeb1d12876eddcd6d468b170da710c00b4041Tinderbox User2487. [bug] Give TCP connections longer to complete. [RT #18675]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2486. [func] The default locations for named.pid and lwresd.pid
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater This allows the owner of the containing directory
94d0b4bd411a66a2c5a7ebc8722579a59cf9640bAutomatic Updater to be set, for "named -u" support, and allows there
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User to be a permanent symbolic link in the path, for
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User "named -t" support. [RT #18306]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2485. [bug] Change update's the handling of obscured RRSIG
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User records. Not all orphaned DS records were being
ec7751119a08c6a7250f3187beed69a8b836d349Tinderbox User removed. [RT #18828]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2484. [bug] It was possible to trigger a REQUIRE failure when
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User adding NSEC3 proofs to the response in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User query_addwildcardproof(). [RT #18828]
879391501ee0ffba072433120bf1baa4087f8899Automatic Updater2483. [port] win32: chroot() is not supported. [RT #18805]
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater2482. [port] libxml2: support versions 2.7.* in addition
8f536463f9fdfa7da6a8310e4f4895373beb2961Mark Andrews to 2.6.*. [RT #18806]
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater --- 9.6.0b1 released ---
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
ace530234c82bbfcd03bbfd4ba6c6a04293d497fMark Andrews collisions. [RT #18812]
dcd42a39d311b44877161ffd1e27fa62700c0171Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater records. [RT #18812]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2478. [bug] 'addresses' could be used uninitialized in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configure_forward(). [RT #18800]
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User2477. [bug] dig: the global option to print the command line is
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User +cmd not print_cmd. Update the output to reflect
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this. [RT #17008]
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User2476. [doc] ARM: improve documentation for max-journal-size and
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User ixfr-from-differences. [RT #15909] [RT #18541]
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User2475. [bug] LRU cache cleanup under overmem condition could purge
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User particular entries more aggressively. [RT #17628]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2474. [bug] ACL structures could be allocated with insufficient
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington space, causing an array overrun. [RT #18765]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2473. [port] linux: raise the limit on open files to the possible
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater maximum value before spawning threads; 'files'
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater specified in named.conf doesn't seem to work with
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater threads as expected. [RT #18784]
63654fea53d6a58a65112234bc8d0c322e0c81b5Automatic Updater2472. [port] linux: check the number of available cpu's before
27aa770222192dda4ba4ff4b76defd4b8c846226Automatic Updater calling chroot as it depends on "/proc". [RT #16923]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2471. [bug] named-checkzone was not reporting missing mandatory
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User glue when sibling checks were disabled. [RT #18768]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2470. [bug] Elements of the isc_radix_node_t could be incorrectly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater overwritten. [RT# 18719]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2469. [port] solaris: Work around Solaris's select() limitations.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2468. [bug] Resolver could try unreachable servers multiple times.
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2465. [bug] Adb's handling of lame addresses was different
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for IPv4 and IPv6. [RT #18738]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2464. [port] linux: check that a capability is present before
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater trying to set it. [RT #18135]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater API and glibc hides parts of the IPv6 Advanced Socket
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User API as a result. This is stupid as it breaks how the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater two halves (Basic and Advanced) of the IPv6 Socket API
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater were designed to be used but we have to live with it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User API. [RT #18388]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews option for dig. [RT #18757]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2461. [port] sunos: Change #2363 was not complete. [RT #17513]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews --- 9.6.0a1 released ---
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2457. [tuning] max-cache-size is reverted to 0, the previous
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater default. It should be safe because expired cache
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater entries are also purged. [RT #18684]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater address, regardless of family. They now correctly
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater distinguish IPv4 from IPv6. [RT #18559]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User2455. [bug] Stop metadata being transferred via axfr/ixfr.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2453. [bug] Remove NULL pointer dereference in dns_journal_print().
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater2452. [func] Improve bin/test/journalprint. [RT #18316]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2451. [port] solaris: handle runtime linking better. [RT #18356]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2450. [doc] Fix lwresd docbook problem for manual page.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2449. [placeholder]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2448. [func] Add NSEC3 support. [RT #15452]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2447. [cleanup] libbind has been split out as a separate product.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2446. [func] Add a new log message about build options on startup.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater A new command-line option '-V' for named is also
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater provided to show this information. [RT# 18645]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2445. [doc] ARM out-of-date on empty reverse zones (list includes
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater RFC1918 address, but these are not yet compiled in).
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (clear DF) for UDP responses and requests.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2443. [bug] win32: UDP connect() would not generate an event,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User and so connected UDP sockets would never clean up.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Fix this by doing an immediate WSAConnect() rather
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User than an io completion port type for UDP.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2442. [bug] A lock could be destroyed twice. [RT# 18626]
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater2441. [bug] isc_radix_insert() could copy radix tree nodes
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User incompletely. [RT #18573]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2440. [bug] named-checkconf used an incorrect test to determine
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater if an ACL was set to none.
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2438. [bug] Timeouts could be logged incorrectly under win32.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2437. [bug] Sockets could be closed too early, leading to
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater inconsistent states in the socket module. [RT #18298]
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2435. [bug] Fixed an ACL memory leak affecting win32.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2434. [bug] Fixed a minor error-reporting bug in
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater2433. [tuning] Set initial timeout to 800ms.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2432. [bug] More Windows socket handling improvements. Stop
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User using I/O events and use IO Completion Ports
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User throughout. Rewrite the receive path logic to make
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User it easier to support multiple simultaneous
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User requesters in the future. Add stricter consistency
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater checking as a compile-time option (define
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2431. [bug] Acl processing could leak memory. [RT #18323]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2430. [bug] win32: isc_interval_set() could round down to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User zero if the input was less than NS_INTERVAL
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User nanoseconds. Round up instead. [RT #18549]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2429. [doc] nsupdate should be in section 1 of the man pages.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2428. [bug] dns_iptable_merge() mishandled merges of negative
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington tables. [RT #18409]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington was set. [RT #18528]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2426. [bug] libbind: inet_net_pton() can sometimes return the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User wrong value if excessively large net masks are
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews supplied. [RT #18512]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater2425. [bug] named didn't detect unavailable query source addresses
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews at load time. [RT #18536]
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User2424. [port] configure now probes for a working epoll
6fab60452ed15c1039aee974a32d692d07eda4d2Automatic Updater implementation. Allow the use of kqueue,
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews epoll and /dev/poll to be selected at compile
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews time. [RT #18277]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2423. [security] Randomize server selection on queries, so as to
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews make forgery a little more difficult. Instead of
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews always preferring the server with the lowest RTT,
71ba75c604df3604673232828a68bb28c420e698Mark Andrews pick a server with RTT within the same 128
71ba75c604df3604673232828a68bb28c420e698Mark Andrews millisecond band. [RT #18441]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2422. [bug] Handle the special return value of a empty node as
dfd613f037c1385db661f17e086d34ea57fea9b0Automatic Updater if it was a NXRRSET in the validator. [RT #18447]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2421. [func] Add new command line option '-S' for named to specify
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater the max number of sockets. [RT #18493]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater Use caution: this option may not work for some
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater operating systems without rebuilding named.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2420. [bug] Windows socket handling cleanup. Let the io
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater completion event send out canceled read/write
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt done events, which keeps us from writing to memory
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt we no longer have ownership of. Add debugging
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt socket_log() function. Rework TCP socket handling
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater to not leak sockets.
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater should not be used for isc_sockettype_fdwatch sockets.
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2417. [bug] Connecting UDP sockets for outgoing queries could
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson unexpectedly fail with an 'address already in use'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater error. [RT #18411]
3a9593055ead76cbbb417aee2d2e656c2c92cf46Automatic Updater2416. [func] Log file descriptors that cause exceeding the
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater internal maximum. [RT #18460]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2415. [bug] 'rndc dumpdb' could trigger various assertion failures
a8a1d4629ed697be4b0c0bb96b3c59d494450eedAutomatic Updater2414. [bug] A masterdump context held the database lock too long,
7932a7637170550bc53b38c35db9a0187dcb3d3bAutomatic Updater causing various troubles such as dead lock and
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson recursive lock acquisition. [RT #18311, #18456]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater2412. [bug] win32: address a resource leak. [RT #18374]
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews at compilation time. [RT #18433]
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User Note: with changes #2469 and #2421 above, there is no
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2410. [bug] Correctly delete m_versionInfo. [RT #18432]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2409. [bug] Only log that we disabled EDNS processing if we were
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User subsequently successful. [RT #18029]
467a823e57af687ebd486dfd73ea32f9d2a145beTinderbox User2408. [bug] A duplicate TCP dispatch event could be sent, which
467a823e57af687ebd486dfd73ea32f9d2a145beTinderbox User could then trigger an assertion failure in
7d704e522860496310bb29c28e76064868401a9cMark Andrews resquery_response(). [RT #18275]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2406. [placeholder]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2405. [cleanup] The default value for dnssec-validation was changed to
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater "yes" in 9.5.0-P1 and all subsequent releases; this
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User was inadvertently omitted from CHANGES at the time.
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2404. [port] hpux: files unlimited support.
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2403. [bug] TSIG context leak. [RT #18341]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2401. [bug] Expect to get E[MN]FILE errno internal_accept()
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2399. [placeholder]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2398. [bug] Improve file descriptor management. New,
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater temporary, named.conf option reserved-sockets,
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User default 512. [RT #18344]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2395. [port] Avoid warning and no effect from "files unlimited"
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater on Linux when running as root. [RT #18335]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2394. [bug] Default configuration options set the limit for
2ec4ab21838e218863d052ebfa3e106e04f50820Evan Hunt open files to 'unlimited' as described in the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews documentation. [RT #18331]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2393. [bug] nested acls containing keys could trigger an
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews assertion in acl.c. [RT #18166]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews don't support it. [RT #18253]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews [RT #18301].
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2389. [bug] Move the "working directory writable" check to after
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the ns_os_changeuser() call. [RT #18326]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2388. [bug] Avoid using tables for layout purposes in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews statistics XSL [RT #18159].
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews [RT #18147] [RT #18258]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2386. [func] Add warning about too small 'open files' limit.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2385. [bug] A condition variable in socket.c could leak in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews rare error handling [RT #17968].
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2384. [security] Fully randomize UDP query ports to improve
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews forgery resilience. [RT #17949, #18098]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2383. [bug] named could double queries when they resulted in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews proofs which, in turn, caused validation failures
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews for insecure zones immediately below a secure zone
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the server was authoritative for. [RT #18112]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2376. [bug] Change #2144 was not complete.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2375. [placeholder]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to some uninitialized memory. [RT #18095]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews new zone was configured, causing an overconsumption
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of memory. [RT #18092]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews when called on a nonexistent zone. [RT #18050]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2368. [port] Linux: use libcap for capability management if
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews possible. [RT# 18026]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2367. [bug] Improve counting of dns_resstatscounter_retry
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2366. [bug] Adb shutdown race. [RT #18021]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews spurious results. [RT #18000]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2364. [bug] named could trigger a assertion when serving a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews malformed signed zone. [RT #17828]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews settable by "./configure --enable-fixed-rrset".
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Disabled by default. [RT #17977]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2361. [bug] "recursion" statistics counter could be counted
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews multiple times for a single query. [RT #17990]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2360. [bug] Fix a condition where we release a database version
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (which may acquire a lock) while holding the lock.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews OpenSSL 0.9.7f. [RT #17922]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2355. [func] Extend the number statistics counters available.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews 'dig +nsid' requests NSID from server.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews 'request-nsid yes;' causes recursive server to send
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews NSID requests to upstream servers. Server responds
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to NSID requests with the string configured by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews 'server-id' option. [RT #17091]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2349. [func] Provide incremental re-signing support for secure
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dynamic zones. [RT #1091]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Documentation is in the new README.pkcs11 file.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews New tool, dnssec-keyfromlabel, which takes the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews label of a key pair in a HSM and constructs a DNS
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews key pair for use by named and dnssec-signzone.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews order. [RT #17451]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in increased detail. [RT #17580]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2345. [bug] named-checkconf failed to detect when forwarders
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews were set at both the options/view level and in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews a root zone. [RT #17671]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews created in ADB. [RT #17837]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2341. [bug] libbind: add missing -I../include for off source
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews tree builds. [RT #17606]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews interfaces if there are not listen-on-v6 clauses in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2335. [port] sunos: libbind and *printf() support for long long.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews bug in fromstruct_txt(). [RT #17609]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2331. [bug] Failure to regenerate any signatures was not being
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews reported nor being past back to the UPDATE client.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2330. [bug] Remove potential race condition when handling
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews over memory events. [RT #17572]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews WARNING: API CHANGE: over memory callback
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews function now needs to call isc_mem_waterack().
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews See <isc/mem.h> for details.
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2327. [bug] It was possible to dereference a NULL pointer in
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews rbtdb.c. Implement dead node processing in zones as
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews we do for caches. [RT #17312]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
35bc7055d1b9b816e68a4180d46a49963e45c233Automatic Updater2325. [port] Linux: use capset() function if available. [RT #17557]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater2323. [port] tru64: namespace clash. [RT #17547]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2322. [port] MacOS: work around the limitation of setrlimit()
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater for RLIMIT_NOFILE. [RT #17526]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2321. [placeholder]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2320. [func] Make statistics counters thread-safe for platforms
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater that support certain atomic operations. [RT #17466]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2319. [bug] Silence Coverity warnings in
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2318. [port] sunos fixes for libbind. [RT #17514]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User2315. [bug] Used incorrect address family for mapped IPv4
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User addresses in acl.c. [RT #17519]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2314. [bug] Uninitialized memory use on error path in
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User [RT #17447] [RT #17478]
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2311. [bug] IPv6 addresses could match IPv4 ACL entries and
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater vice versa. [RT #17462]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews debug/fatal messages. [RT #17501]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
35bc7055d1b9b816e68a4180d46a49963e45c233Automatic Updater2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater2306. [bug] Remove potential race from lib/dns/resolver.c.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2305. [security] inet_network() buffer overflow. CVE-2008-0122.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2304. [bug] Check returns from all dns_rdata_tostruct() calls.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2301. [bug] Remove resource leak and fix error messages in
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater bin/tests/system/lwresd/lwtest.c. [RT #17474]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2300. [bug] Fixed failure to close open file in
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2299. [bug] Remove unnecessary NULL check in
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2298. [bug] isc_mutex_lock() failure not caught in
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2297. [bug] isc_entropy_createfilesource() failure not caught in
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2296. [port] Allow docbook stylesheet location to be specified to
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater configure. [RT #17457]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2294. [func] Allow the experimental statistics channels to have
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater multiple connections and ACL.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater Note: the stats-server and stats-server-v6 options
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater available in the previous beta releases are replaced
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater with the generic statistics-channels statement.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2293. [func] Add ACL regression test. [RT #17375]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2292. [bug] Log if the working directory is not writable.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater failure to set PR_SET_DUMPABLE. [RT #17312]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2290. [bug] Let AD in the query signal that the client wants AD
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater set in the response. [RT #17301]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2289. [func] named-checkzone now reports the out-of-zone CNAME
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater found. [RT #17309]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2288. [port] win32: mark service as running when we have finished
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater loading. [RT #17441]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2286. [func] Allow a TCP connection to be used as a weak
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater authentication method for reverse zones.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater New update-policy methods tcp-self and 6to4-self.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2285. [func] Test framework for client memory context management.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2284. [bug] Memory leak in UPDATE prerequisite processing.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2283. [bug] TSIG keys were not attaching to the memory
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater context. TSIG keys should use the rings
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater memory context rather than the clients memory
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater context. [RT #17377]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2281. [bug] Attempts to use undefined acls were not being logged.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2280. [func] Allow the experimental http server to be reached
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater over IPv6 as well as IPv4. [RT #17332]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater to protect applications from receiving spurious
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater SIGPIPE signals when using the resolver.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2278. [bug] win32: handle the case where Windows returns no
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater search list or DNS suffix. [RT #17354]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2277. [bug] Empty zone names were not correctly being caught at
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater in the post parse checks. [RT #17357]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2275. [func] Add support to dig to perform IXFR queries over UDP.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2274. [func] Log zone transfer statistics. [RT #17336]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2273. [bug] Adjust log level to WARNING when saving inconsistent
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater stub/slave master and journal files. [RT# 17279]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2271. [bug] Fix a memory leak in http server code [RT #17100]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2270. [bug] dns_db_closeversion() version->writer could be reset
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater before it is tested. [RT #17290]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
c6a0f4ae1d7183a16ffb196b86b647f870694796Automatic Updater2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater --- 9.5.0b1 released ---
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2267. [bug] Radix tree node_num value could be set incorrectly,
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater causing positive ACL matches to look like negative
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater ones. [RT #17311]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2266. [bug] client.c:get_clientmctx() returned the same mctx
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater once the pool of mctx's was filled. [RT #17218]
09091b4f0f69cca36f74a291fa3eb496686aeb1eAutomatic Updater2265. [bug] Test that the memory context's basic_table is non NULL
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User before freeing. [RT #17265]
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User2264. [bug] Server prefix length was being ignored. [RT #17308]
644973f327e9db74779e7c0426db90909173b284Automatic Updater2263. [bug] "named-checkconf -z" failed to set default value
644973f327e9db74779e7c0426db90909173b284Automatic Updater for "check-integrity". [RT #17306]
418cc932318b1d67f88a36904d88d8a5a0a2ba09Automatic Updater2262. [bug] Error status from all but the last view could be
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater lost. [RT #17292]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2260. [bug] Reported wrong clients-per-query when increasing the
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater value. [RT #17236]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2259. [placeholder]
7e10208057d60f5b4a49178b5f036afd4a526e2bMark Andrews --- 9.5.0a7 released ---
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2257. [bug] win32: Use the full path to vcredist_x86.exe when
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater calling it. [RT #17222]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2256. [bug] win32: Correctly register the installation location of
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
418cc932318b1d67f88a36904d88d8a5a0a2ba09Automatic Updater2254. [bug] timer.c:dispatch() failed to lock timer->lock
dc11390a658e02e1a03accd4dbe14c94fa9de556Automatic Updater when reading timer->idle allowing it to see
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews intermediate values as timer->idle was reset by
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews isc_timer_touch(). [RT #17243]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2253. [func] "max-cache-size" defaults to 32M.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews "max-acache-size" defaults to 16M.
90863a6f9bfb06062c7fdf269bb675e7b674fc31Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2251. [placeholder]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2250. [func] New flag 'memstatistics' to state whether the
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews memory statistics file should be written or not.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Additionally named's -m option will cause the
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews statistics file to be written. [RT #17113]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews DNSSEC, per RFC 3655 [RT #17175]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews robust. [RT #17147]
68e1b398b5b1b417723e90b5e52b9148f8f93294Automatic Updater2245. [bug] Validating lack of DS records at trust anchors wasn't
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews working. [RT #17151]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2244. [func] Allow the check of nameserver names against the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User SOA MNAME field to be disabled by specifying
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews 'notify-to-soa yes;'. [RT #17073]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2243. [func] Configuration files without a newline at the end now
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater parse without error. [RT #17120]
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User library could require a source of random data.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
bdcada7d31335e05ebca757eb789e57166fb2a02Tinderbox User a number of INSIST()s into plain fatal() errors
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews which report the triggering result code.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews The 'key' command wasn't disabling GSS-TSIG.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
7a42357217528037bdfedcb17eeebfe96ae4266aAutomatic Updater2238. [bug] It was possible to trigger a REQUIRE when a
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews validation was canceled. [RT #17106]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2236. [bug] dnssec-signzone failed to preserve the case of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of wildcard owner names. [RT #17085]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2233. [func] Add support for O(1) ACL processing, based on
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User radix tree code originally written by Kevin
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Brintnall. [RT #16288]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2232. [bug] dns_adb_findaddrinfo() could fail and return
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ISC_R_SUCCESS. [RT #17137]
644973f327e9db74779e7c0426db90909173b284Automatic Updater2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2230. [bug] We could INSIST reading a corrupted journal.
5f7e0eb1cb917b788906d3e2aa01bfc4885dcae4Mark Andrews2229. [bug] Null pointer dereference on query pool creation
bf1263835e8e35421960f65088c043f42aacef13Mark Andrews failure. [RT #17133]
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2228. [contrib] contrib: Change 2188 was incomplete.
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater2227. [cleanup] Tidied up the FAQ. [RT #17121]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2226. [placeholder]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2225. [bug] More support for systems with no IPv4 addresses.
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater2224. [bug] Defer journal compaction if a xfrin is in progress.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2223. [bug] Make a new journal when compacting. [RT #17119]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2222. [func] named-checkconf now checks server key references.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2221. [bug] Set the event result code to reflect the actual
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater record turned to caller when a cache update is
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson rejected due to a more credible answer existing.
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater2220. [bug] win32: Address a race condition in final shutdown of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the Windows socket code. [RT #17028]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2219. [bug] Apply zone consistency checks to additions, not
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User removals, when updating. [RT #17049]
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2217. [func] Adjust update log levels. [RT #17092]
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2214. [bug] Deregister OpenSSL lock callback when cleaning
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater up. Reorder OpenSSL cleanup so that RAND_cleanup()
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater is called before the locks are destroyed. [RT #17098]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2213. [bug] SIG0 diagnostic failure messages were looking at the
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater wrong status code. [RT #17101]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2212. [func] 'host -m' now causes memory statistics and active
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User memory to be printed at exit. [RT 17028]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2211. [func] Update "dynamic update temporarily disabled" message.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2210. [bug] Deleting class specific records via UPDATE could
e10d61d84e0b735f1e8eca18644cfdb1b06cad33Tinderbox User fail. [RT #17074]
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews2209. [port] osx: linking against user supplied static OpenSSL
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater libraries failed as the system ones were still being
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater found. [RT #17078]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2208. [port] win32: make sure both build methods produce the
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews same output. [RT #17058]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User ai_canonname correctly. [RT #17061]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.5.0a6 released ---
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater2206. [security] "allow-query-cache" and "allow-recursion" now
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater cross inherit from each other.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User If allow-query-cache is not set in named.conf then
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews allow-recursion is used if set, otherwise allow-query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is used if set, otherwise the default (localnets;
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater localhost;) is used.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater If allow-recursion is not set in named.conf then
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User allow-query-cache is used if set, otherwise allow-query
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is used if set, otherwise the default (localnets;
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater localhost;) is used.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2204. [bug] "rndc flushanme name unknown-view" caused named
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User to crash. [RT #16984]
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User2203. [security] Query id generation was cryptographically weak.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2202. [security] The default acls for allow-query-cache and
53b97c9873a923f504893d1e2ab62000dfac221fTinderbox User allow-recursion were not being applied. [RT #16960]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2201. [bug] The build failed in a separate object directory.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2200. [bug] The search for cached NSEC records was stopping to
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater early leading to excessive DLV queries. [RT #16930]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2199. [bug] win32: don't call WSAStartup() while loading dlls.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2198. [bug] win32: RegCloseKey() could be called when
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User RegOpenKeyEx() failed. [RT #16911]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews not setting the event result code appropriately.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2196. [port] win32: yield processor while waiting for once to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to complete. [RT #16958]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2195. [func] dnssec-keygen now defaults to nametype "ZONE"
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater when generating DNSKEYs. [RT #16954]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2194. [bug] Close journal before calling 'done' in xfrin.c.
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox User --- 9.5.0a5 released ---
713a5e3080f112b3efde9235e9c92035056ff966Automatic Updater2193. [port] win32: BINDInstall.exe is now linked statically.
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User2192. [port] win32: use vcredist_x86.exe to install Visual
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews Studio's redistributable dlls if building with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Visual Stdio 2005 or later.
f8b9948a4116226ac41b5509cca152849006c66cAutomatic Updater2191. [func] named-checkzone now allows dumping to stdout (-).
be46cb4bee9253ee4832340c719920642e00c41aTinderbox User named-checkconf now has -h for help.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User named-checkzone now has -h for help.
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater rndc now has -h for help.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Better handling of '-?' for usage summaries.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2190. [func] Make fallback to plain DNS from EDNS due to timeouts
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater more visible. New logging category "edns-disabled".
572cb2c1c931f6bc6a4a019c103ae88239b0eb96Automatic Updater2189. [bug] Handle socket() returning EINTR. [RT #15949]
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater2188. [contrib] queryperf: autoconf changes to make the search for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater libresolv or libbind more robust. [RT #16299]
f22980c16f244b7d7f33b5248f2d38bd4885f108Automatic Updater2187. [bug] query_addds(), query_addwildcardproof() and
233f603cc1e6dd17b8912796f3fff5cfbbb76c90Automatic Updater query_addnxrrsetnsec() should take a version
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews argument. [RT #16368]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2186. [port] cygwin: libbind: check for struct sockaddr_storage
0c4a369f10d0bdfe63caa42bb1913859dd349f21Automatic Updater independently of IPv6. [RT #16482]
d630ef2ff74445949a482660938e9fa9da52ca14Automatic Updater2185. [port] sunos: libbind: check for ssize_t, memmove() and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User memchr(). [RT #16463]
572cb2c1c931f6bc6a4a019c103ae88239b0eb96Automatic Updater2184. [bug] bind9.xsl.h didn't build out of the source tree.
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater2183. [bug] dnssec-signzone didn't handle offline private keys
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater well. [RT #16832]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
f4029eb7463e99df00618de89f0bee5ac062a237Automatic Updater could return ISC_R_SUCCESS when they ran out of
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater memory. [RT #16365]
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2180. [cleanup] Remove bit test from 'compress_test' as they
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User are no longer needed. [RT #16497]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2179. [func] 'rndc command zone' will now find 'zone' if it is
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User unique to all the views. [RT #16821]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2178. [bug] 'rndc reload' of a slave or stub zone resulted in
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews a reference leak. [RT #16867]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2177. [bug] Array bounds overrun on read (rcodetext) at
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews debug level 10+. [RT #16798]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2176. [contrib] dbus update to handle race condition during
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User initialization (Bugzilla 235809). [RT #16842]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2175. [bug] win32: windows broadcast condition variable support
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User was broken. [RT #16592]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2174. [bug] I/O errors should always be fatal when reading
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater master files. [RT #16825]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2173. [port] win32: When compiling with MSVS 2005 SP1 we also
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.5.0a4 released ---
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2172. [bug] query_addsoa() was being called with a non zone db.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2171. [bug] Handle breaks in DNSSEC trust chains where the parent
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater servers are not DS aware (DS queries to the parent
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater return a referral to the child).
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2170. [func] Add acache processing to test suite. [RT #16711]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2169. [bug] host, nslookup: when reporting NXDOMAIN report the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater given name and not the last name searched for.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2168. [bug] nsupdate: in non-interactive mode treat syntax errors
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater as fatal errors. [RT #16785]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2167. [bug] When re-using a automatic zone named failed to
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater attach it to the new view. [RT #16786]
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater --- 9.5.0a3 released ---
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2166. [bug] When running in batch mode, dig could misinterpret
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a server address as a name to be looked up, causing
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater unexpected output. [RT #16743]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2165. [func] Allow the destination address of a query to determine
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater if we will answer the query or recurse.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User allow-query-on, allow-recursion-on and
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater allow-query-cache-on. [RT #16291]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2164. [bug] The code to determine how named-checkzone /
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater named-compilezone was called failed under windows.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2163. [bug] If only one of query-source and query-source-v6
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater specified a port the query pools code broke (change
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 2129). [RT #16768]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2162. [func] Allow "rrset-order fixed" to be disabled at compile
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater time. [RT #16665]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2161. [bug] Fix which log messages are emitted for 'rndc flush'.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User from getifaddrs(). [RT #16708]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater --- 9.5.0a2 released ---
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2159. [bug] Array bounds overrun in acache processing. [RT #16710]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2158. [bug] ns_client_isself() failed to initialize key
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater leading to a REQUIRE failure. [RT #16688]
1b670d35282f1b9352692ad212be3c0aa97b0689Automatic Updater2157. [func] dns_db_transfernode() created. [RT #16685]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater resolver.c:validated() and resolver.c:cache_name().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Fix a memory leak in rbtdb.c:free_noqname().
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User Make lookup.c:lookup_find() robust against
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater event leaks. [RT #16685]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater matched in acls by omitting the scope. [RT #16599]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2153. [bug] nsupdate could leak memory. [RT #16691]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2152. [cleanup] Use sizeof(buf) instead of fixed number in
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User dighost.c:get_trusted_key(). [RT #16678]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2151. [bug] Missing newline in usage message for journalprint.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2150. [bug] 'rrset-order cyclic' uniformly distribute the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User starting point for the first response for a given
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater RRset. [RT #16655]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2149. [bug] isc_mem_checkdestroyed() failed to abort on
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User if there were still active memory contexts.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2148. [func] Add positive logging for rndc commands. [RT #14623]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2147. [bug] libbind: remove potential buffer overflow from
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater SO_BSDCOMPAT" message. [RT #16641]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2145. [bug] Check DS/DLV digest lengths for known digests.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2143. [bug] We failed to restart the IPv6 client when the
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater kernel failed to return the destination the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater packet was sent to. [RT #16613]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2142. [bug] Handle master files with a modification time that
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater matches the epoch. [RT# 16612]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater equivalent of LDH checks). [RT #16609]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2140. [bug] libbind: missing unlock on pthread_key_create()
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater failures. [RT #16654]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2139. [bug] dns_view_find() was being called with wrong type
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in adb.c. [RT #16670]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2138. [bug] Lock order reversal in resolver.c. [RT #16653]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2137. [port] Mips little endian and/or mips 64 bit are now
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User supported for atomic operations. [RT#16648]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2136. [bug] nslookup/host looped if there was no search list
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and the host didn't exist. [RT #16657]
e2e3f655d133f08056c9035412d4c013aab234e7Automatic Updater2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2134. [func] Additional statistics support. [RT #16666]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2133. [port] powerpc: Support both IBM and MacOS Power PC
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User assembler syntaxes. [RT #16647]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2132. [bug] Missing unlock on out of memory in
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater dns_dispatchmgr_setudp().
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
a6cf3a9ae446de1b6e25fdfe82caa348c28ca925Tinderbox User2130. [func] Log if CD or DO were set. [RT #16640]
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater2129. [func] Provide a pool of UDP sockets for queries to be
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User made over. See use-queryport-pool, queryport-pool-ports
114f7780384371121918624ae2c80ecfce545683Tinderbox User and queryport-pool-updateinterval. [RT #16415]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2126. [security] Serialize validation of type ANY responses. [RT #16555]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User was defined. [RT #16574]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2124. [security] It was possible to dereference a freed fetch
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater context. [RT #16584]
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews --- 9.5.0a1 released ---
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox User2123. [func] Use Doxygen to generate internal documentation.
42c81cf2de732ec6d00e73fc755a399ca037e543Mark Andrews2122. [func] Experimental http server and statistics support
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User for named via xml.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User second timeout. [RT #16553]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2120. [doc] Fix markup on nsupdate man page. [RT #16556]
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews return the default domain even if it was unable
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews to allocate memory.
7d704e522860496310bb29c28e76064868401a9cMark Andrews2118. [bug] Handle response with long chains of domain name
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews compression pointers which point to other compression
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater pointers. [RT #16427]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater which could lead to validation failures. named didn't
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater handle negative DS responses that were in the process
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater of being validated. Check CNAME bit before accepting
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater NODATA proof. To be able to ignore a child NSEC there
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater must be SOA (and NS) set in the bitmap. [RT #16399]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2116. [bug] 'rndc reload' could cause the cache to continually
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater be cleaned. [RT #16401]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2115. [bug] 'rndc reconfig' could trigger a INSIST if the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User number of masters for a zone was reduced. [RT #16444]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2114. [bug] dig/host/nslookup: searches for names with multiple
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User labels were failing. [RT #16447]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2113. [bug] nsupdate: if a zone is specified it should be used
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for server discover. [RT# 16455]
da24e725ff982595d74da7e75e9fbd6a696367ccAutomatic Updater2112. [security] Warn if weak RSA exponent is used. [RT #16460]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2111. [bug] Fix a number of errors reported by Coverity.
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User priming queries. [RT #16491]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
992616aaf75643a0c9f84826f0a1ed5a27e84328Mark Andrews2108. [func] DHCID support. [RT #16456]
765c97d56ccddc9d7904c7d9ff2e2d825d9687e4Automatic Updater2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
765c97d56ccddc9d7904c7d9ff2e2d825d9687e4Automatic Updater2106. [func] 'rndc status' now reports named's version. [RT #16426]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2105. [func] GSS-TSIG support (RFC 3645).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2104. [port] Fix Solaris SMF error message.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2103. [port] Add /usr/sfw to list of locations for OpenSSL
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User under Solaris.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2102. [port] Silence Solaris 10 warnings.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2101. [bug] OpenSSL version checks were not quite right.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2100. [port] win32: copy libeay32.dll to Build\Debug.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Copy Debug\named-checkzone to Debug\named-compilezone.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2099. [port] win32: more manifest issues.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2098. [bug] Race in rbtdb.c:no_references(), which occasionally
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User triggered an INSIST failure about the node lock
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User reference. [RT #16411]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2097. [bug] named could reference a destroyed memory context
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User after being reloaded / reconfigured. [RT #16428]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2096. [bug] libbind: handle applications that fail to detect
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User res_init() failures better.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User net_cidr_ntop_ipv6(). [RT #16388]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2094. [contrib] Update named-bootconf. [RT# 16404]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2093. [bug] named-checkzone -s was broken.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2092. [bug] win32: dig, host, nslookup. Use registry config
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User if resolv.conf does not exist or no nameservers
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User listed. [RT #15877]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2091. [port] dighost.c: race condition on cleanup. [RT #16417]
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater2090. [port] win32: Visual C++ 2005 command line manifest support.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2089. [security] Raise the minimum safe OpenSSL versions to
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User prior to these have known security flaws which
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User are (potentially) exploitable in named. [RT #16391]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2088. [security] Change the default RSA exponent from 3 to 65537.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2086. [port] libbind: FreeBSD now has get*by*_r() functions.
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews2085. [doc] win32: added index.html and README to zip. [RT #16201]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2084. [contrib] dbus update for 9.3.3rc2.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2083. [port] win32: Visual C++ 2005 support.
09091b4f0f69cca36f74a291fa3eb496686aeb1eAutomatic Updater2082. [doc] Document 'cache-file' as a test only option.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2080. [port] libbind: res_init.c did not compile on older versions
55aec75784a22e9d06d52b2b8a7d5aa42d31dc00Automatic Updater of Solaris. [RT #16363]
da59e63e7af147a8bcef985b98b04443e04c3a0eTinderbox User2079. [bug] The lame cache was not handling multiple types
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater correctly. [RT #16361]
93bd88e172a36b549938bce1731df7c10a8f3fb5Automatic Updater2078. [bug] dnssec-checkzone output style "default" was badly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater named. It is now called "relative". [RT #16326]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
db5b7e2cdf150c46e8242d3e2e3ad3f5c7300258Automatic Updater complete signed zone. [RT #16326]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2076. [bug] Several files were missing #include <config.h>
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater causing build failures on OSF. [RT #16341]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2075. [bug] The spillat timer event hander could leak memory.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
365bb6f27eace1836cb5bc6b5f9ed8c88fe22e4aTinderbox User dns_request_createraw2() and dns_request_createraw3()
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User failed to send multiple UDP requests. [RT #16349]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2073. [bug] Incorrect semantics check for update policy "wildcard".
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2072. [bug] We were not generating valid HMAC SHA digests.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2071. [port] Test whether gcc accepts -fno-strict-aliasing.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2070. [bug] The remote address was not always displayed when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reporting dispatch failures. [RT #16315]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2069. [bug] Cross compiling was not working. [RT #16330]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2068. [cleanup] Lower incremental tuning message to debug 1.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2067. [bug] 'rndc' could close the socket too early triggering
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater a INSIST under Windows. [RT #16317]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2066. [security] Handle SIG queries gracefully. [RT #16300]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2065. [bug] libbind: probe for HPUX prototypes for
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater endprotoent_r() and endservent_r(). [RT 16313]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2063. [bug] Change #1955 introduced a bug which caused the first
83d29eff2912ef967596eb5ed148de7668b35564Automatic Updater 'rndc flush' call to not free memory. [RT #16244]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2062. [bug] 'dig +nssearch' was reusing a buffer before it had
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User been returned by the socket code. [RT #16307]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2061. [bug] Accept expired wildcard message reversed. [RT #16296]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2060. [bug] Enabling DLZ support could leave views partially
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configured. [RT #16295]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2059. [bug] Search into cache rbtdb could trigger an INSIST
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User failure while cleaning up a stale rdataset.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2058. [bug] Adjust how we calculate rtt estimates in the presence
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of authoritative servers that drop EDNS and/or CD
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater requests. Also fallback to EDNS/512 and plain DNS
9d80d23172c30fd63e5046a7e69b8445e564ff31Automatic Updater faster for zones with less than 3 servers. [RT #16187]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2057. [bug] Make setting "ra" dependent on both allow-query-cache
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User and allow-recursion. [RT #16290]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater2056. [bug] dig: ixfr= was not being treated case insensitively
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater at all times. [RT #15955]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2055. [bug] Missing goto after dropping multicast query.
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2054. [port] freebsd: do not explicitly link against -lpthread.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2052. [bug] 'rndc' improve connect failed message to report
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User the failing address. [RT #15978]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2051. [port] More strtol() fixes. [RT #16249]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2050. [bug] Parsing of NSAP records was not case insensitive.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2049. [bug] Restore SOA before AXFR when falling back from
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User a attempted IXFR when transferring in a zone.
c904ec617fe9e711c6743660a66b7dee1e213756Tinderbox User Allow a initial SOA query before attempting
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User a AXFR to be requested. [RT #16156]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2048. [bug] It was possible to loop forever when using
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater avoid-v4-udp-ports / avoid-v6-udp-ports when
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User the OS always returned the same local port.
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater2047. [bug] Failed to initialize the interface flags to zero.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User cleanup [RT #16247].
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2045. [func] Use lock buckets for acache entries to limit memory
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User consumption. [RT #16183]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2044. [port] Add support for atomic operations for Itanium.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2043. [port] nsupdate/nslookup: Force the flushing of the prompt
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User for interactive sessions. [RT#16148]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2042. [bug] named-checkconf was incorrectly rejecting the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater logging category "config". [RT #16117]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User set of libraries to be linked. [RT #16129]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2040. [bug] rbtdb no_references() could trigger an INSIST
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater failure with --enable-atomic. [RT #16022]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2039. [func] Check that all buffers passed to the socket code
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater have been retrieved when the socket event is freed.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2038. [bug] dig/nslookup/host was unlinking from wrong list
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when handling errors. [RT #16122]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2037. [func] When unlinking the first or last element in a list
1ac49378a458420bc685293d12e567d7222d17b6Tinderbox User check that the list head points to the element to
681beefc668253b3e469a1de282fbc33a3752422Automatic Updater be unlinked. [RT #15959]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
b16e2045ac28229c31f1ea3ebad15cbcb13e1d24Automatic Updater2035. [func] Make falling back to TCP on UDP refresh failure
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User optional. Default "try-tcp-refresh yes;" for BIND 8
b3386fba31414344f38f0c30849c056dceb22dceTinderbox User compatibility. [RT #16123]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2033. [bug] We weren't creating multiple client memory contexts
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater on demand as expected. [RT #16095]
71bfd0968456cc0c69fd400d2dafd02977c649d2Tinderbox User2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2031. [bug] Emit a error message when "rndc refresh" is called on
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User a non slave/stub zone. [RT # 16073]
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User2030. [bug] We were being overly conservative when disabling
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater openssl engine support. [RT #16030]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2029. [bug] host printed out the server multiple times when
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User specified on the command line. [RT #15992]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2028. [port] linux: socket.c compatibility for old systems.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2027. [port] libbind: Solaris x86 support. [RT #16020]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2026. [bug] Rate limit the two recursive client exceeded messages.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2025. [func] Update "zone serial unchanged" message. [RT #16026]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2024. [bug] named emitted spurious "zone serial unchanged"
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User messages on reload. [RT #16027]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2023. [bug] "make install" should create ${localstatedir}/run and
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User ${sysconfdir} if they do not exist. [RT #16033]
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User CD was requested. [RT #16037]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
1ac49378a458420bc685293d12e567d7222d17b6Tinderbox User2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User2019. [tuning] Reduce the amount of work performed per quantum
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User when cleaning the cache. [RT #15986]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2018. [bug] Checking if the HMAC MD5 private file was broken.
c904ec617fe9e711c6743660a66b7dee1e213756Tinderbox User2017. [bug] allow-query default was not correct. [RT #15946]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2016. [bug] Return a partial answer if recursion is not
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater allowed but requested and we had the answer
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to the original qname. [RT #15945]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2015. [cleanup] use-additional-cache is now acache-enable for
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User consistency. Default acache-enable off in BIND 9.4
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User as it requires memory usage to be configured.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater It may be enabled by default in BIND 9.5 once we
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater have more experience with it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2014. [func] Statistics about acache now recorded and sent
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User to log. [RT #15976]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater responses more gracefully. [RT #15941]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2012. [func] Don't insert new acache entries if acache is full.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2011. [func] dnssec-signzone can now update the SOA record of
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User the signed zone, either as an increment or as the
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater system time(). [RT #15633]
c904ec617fe9e711c6743660a66b7dee1e213756Tinderbox User2010. [placeholder] rt15958
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2009. [bug] libbind: Coverity fixes. [RT #15808]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2008. [func] It is now possible to enable/disable DNSSEC
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validation from rndc. This is useful for the
ce0fd07045292942bfa3e755d9ce596941528a63Automatic Updater mobile hosts where the current connection point
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater breaks DNSSEC (firewall/proxy). [RT #15592]
523b258f0045155255bc61cd75f5cc605013fa7dAutomatic Updater rndc validation newstate [view]
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater2007. [func] It is now possible to explicitly enable DNSSEC
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validation. default dnssec-validation no; to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User be changed to yes in 9.5.0. [RT #15674]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2006. [security] Allow-query-cache and allow-recursion now default
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User to the built in acls "localnets" and "localhost".
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater This is being done to make caching servers less
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User attractive as reflective amplifying targets for
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater spoofed traffic. This still leave authoritative
6a6965084d061016f7ba44637c7c50e096cac36aAutomatic Updater servers exposed.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User The best fix is for full BCP 38 deployment to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater remove spoofed traffic.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2005. [bug] libbind: Retransmission timeouts should be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater based on which attempt it is to the nameserver
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and not the nameserver itself. [RT #13548]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2004. [bug] dns_tsig_sign() could pass a NULL pointer to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dst_context_destroy() when cleaning up after a
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User error. [RT #15835]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2003. [bug] libbind: The DNS name/address lookup functions could
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User occasionally follow a random pointer due to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater structures not being completely zeroed. [RT #15806]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2002. [bug] libbind: tighten the constraints on when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater struct addrinfo._ai_pad exists. [RT #15783]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2001. [func] Check the KSK flag when updating a secure dynamic zone.
0ead2ac0a4b59c3e4a731027f0f66fbe602b1289Tinderbox User New zone option "update-check-ksk yes;". [RT #15817]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
98215f712033f868cc65cc2e54894bf770517883Automatic Updater1999. [func] Implement "rrset-order fixed". [RT #13662]
78bc8fdc2488c92d7228e8de19827e2c114c56caAutomatic Updater1998. [bug] Restrict handling of fifos as sockets to just SunOS.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater This allows named to connect to entropy gathering
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater daemons that use fifos instead of sockets. [RT #15840]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater1997. [bug] Named was failing to replace negative cache entries
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews when a positive one for the type was learnt.
0429fc942ef48b8ab07a01648b22f98174a2ae6fAutomatic Updater1996. [bug] nsupdate: if a zone has been specified it should
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User appear in the output of 'show'. [RT #15797]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater1995. [bug] 'host' was reporting multiple "is an alias" messages.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1994. [port] OpenSSL 0.9.8 support. [RT #15694]
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater1993. [bug] Log messages, via syslog, were missing the space
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater after the timestamp if "print-time yes" was specified.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1992. [bug] Not all incoming zone transfer messages included the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater view. [RT #15825]
c904ec617fe9e711c6743660a66b7dee1e213756Tinderbox User1991. [cleanup] The configuration data, once read, should be treated
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater as read only. Expand the use of const to enforce this
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater at compile time. [RT #15813]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1990. [bug] libbind: isc's override of broken gettimeofday()
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User implementations was not always effective.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1989. [bug] win32: don't check the service password when
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User re-installing. [RT #15882]
40696c4c389a780082fb77840c173b201ce696d6Automatic Updater1988. [bug] Remove a bus error from the SHA256/SHA512 support.
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1986. [func] Report when a zone is removed. [RT #15849]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1985. [protocol] DLV has now been assigned a official type code of
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User 32769. [RT #15807]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Note: care should be taken to ensure you upgrade
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater both named and dnssec-signzone at the same time for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater zones with DLV records where named is the master
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater server for the zone. Also any zones that contain
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DLV records should be removed when upgrading a slave
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater zone. You do not however have to upgrade all
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater servers for a zone with DLV records simultaneously.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1984. [func] dig, nslookup and host now advertise a 4096 byte
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater EDNS UDP buffer size by default. [RT #15855]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1983. [func] Two new update policies. "selfsub" and "selfwild".
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1982. [bug] DNSKEY was being accepted on the parent side of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a delegation. KEY is still accepted there for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater RFC 3007 validated updates. [RT #15620]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson1981. [bug] win32: condition.c:wait() could fail to reattain
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater the mutex lock.
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater1980. [func] dnssec-signzone: output the SOA record as the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater first record in the signed zone. [RT #15758]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1979. [port] linux: allow named to drop core after changing
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater user ids. [RT #15753]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1978. [port] Handle systems which have a broken recvmsg().
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater1977. [bug] Silence noisy log message. [RT #15704]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
e5fe07a7ebff18f7ed4ac434b37daff6c8ee5d5bAutomatic Updater1975. [bug] libbind: isc_gethexstring() could misparse multi-line
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater hex strings with comments. [RT #15814]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1974. [doc] List each of the zone types and associated zone
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User options separately in the ARM.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater HMACSHA512 support. [RT #13606]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson1972. [contrib] DBUS dynamic forwarders integration from
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater Jason Vas Dias <jvdias@redhat.com>.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1971. [port] linux: make detection of missing IF_NAMESIZE more
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater robust. [RT #15443]
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User1970. [bug] nsupdate: adjust UDP timeout when falling back to
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic Updater unsigned SOA query. [RT #15775]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews1969. [bug] win32: the socket code was freeing the socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater structure too early. [RT #15776]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1966. [bug] Don't set CD when we have fallen back to plain DNS.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1965. [func] Suppress spurious "recursion requested but not
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater available" warning with 'dig +qr'. [RT #15780].
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1963. [port] Tru64 4.0E doesn't support send() and recv().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1962. [bug] Named failed to clear old update-policy when it
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater was removed. [RT #15491]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1961. [bug] Check the port and address of responses forwarded
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to dispatch. [RT #15474]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1959. [func] Control the zeroing of the negative response TTL to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a soa query. Defaults "zero-no-soa-ttl yes;" and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "zero-no-soa-ttl-cache no;". [RT #15460]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1958. [bug] Named failed to update the zone's secure state
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User until the zone was reloaded. [RT #15412]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews by native compiler. See README for additional
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews cross compile support information. [RT #15148]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews1954. [func] Named now falls back to advertising EDNS with a
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews 512 byte receive buffer if the initial EDNS queries
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews fail. [RT #14852]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1953. [func] The maximum EDNS UDP response named will send can
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews now be set in named.conf (max-udp-size). This is
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews independent of the advertised receive buffer
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews (edns-udp-size). [RT #14852]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews path "-Wl,+b:". [RT #14816].
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews1951. [security] Drop queries from particular well known ports.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Don't return FORMERR to queries from particular
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews well known ports. [RT #15636]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews a TCP socket. This prevents the source address being
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews set for TCP connections. [RT #15628]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1948. [bug] If was possible to trigger a REQUIRE failure in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews xfrin.c:maybe_free() if named ran out of memory.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1947. [func] It is now possible to configure named to accept
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Setting "dnssec-accept-expired yes;" leaves named
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews vulnerable to replay attacks. [RT #14685]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews when using forwarders. [RT #15549]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews To generate a RSAMD5 key you must explicitly request
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews RSAMD5. [RT #13780]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1943. [bug] Set the loadtime after rolling forward the journal.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1942. [bug] If the name of a DNSKEY match that of one in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User trusted-keys do not attempt to validate the DNSKEY
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User using the parents DS RRset. [RT #15649]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1941. [bug] ncache_adderesult() should set eresult even if no
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rdataset is passed to it. [RT #15642]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1940. [bug] Fixed a number of error conditions reported by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1939. [bug] The resolver could dereference a null pointer after
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validation if all the queries have timed out.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson1938. [bug] The validator was not correctly handling unsecure
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater negative responses at or below a SEP. [RT #15528]
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater1936. [bug] The validator could leak memory. [RT #15544]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1935. [bug] 'acache' was DO sensitive. [RT #15430]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1934. [func] Validate pending NS RRsets, in the authority section,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User prior to returning them if it can be done without
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater requiring DNSKEYs to be fetched. [RT #15430]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater1931. [bug] Per-client mctx could require a huge amount of memory,
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews particularly for a busy caching server. [RT #15519]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User1927. [bug] Access to soanode or nsnode in rbtdb violated the
9fa6e3bdb4ec36d8734c63c4366375a681aa3a4dAutomatic Updater lock order rule and could cause a dead lock.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1926. [bug] The Windows installer did not check for empty
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User passwords. BINDinstall was being installed in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the wrong place. [RT #15483]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews defaults. [RT #15469]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1923. [bug] ns_client_detach() called too early. [RT #15499]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews dns_log_setcontext().
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1921. [bug] Client memory contexts were not using internal
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater malloc. [RT# 15434]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1920. [bug] The cache rbtdb lock array was too small to
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater have the desired performance characteristics.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews response delays, printing intermediate results, and
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews adjusting query rate for the "target" qps.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1918. [bug] Memory leak when checking acls. [RT #15391]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews when generating man pages. [RT #15385]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews (RFC 4034). Still emit numeric algorithms for
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews compatibility with RFC 3658. [RT #15354]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1911. [bug] Update windows socket code. [RT #14965]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1910. [bug] dig's +sigchase code overhauled. [RT #14933]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1909. [bug] The DLV code has been re-worked to make no longer
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews query order sensitive. [RT #14933]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1908. [func] dig now warns if 'RA' is not set in the answer when
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater 'RD' was set in the query. host/nslookup skip servers
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater that fail to set 'RA' when 'RD' is set unless a server
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater is explicitly set. [RT #15005]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1905. [bug] Strings returned from cfg_obj_asstring() should be
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater treated as read-only. The prototype for
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater cfg_obj_asstring() has been updated to reflect this.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater friends. Note: RFC 1918 zones are not yet covered by
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater this but are likely to be in a future release.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews New options: empty-server, empty-contact,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews empty-zones-enable and disable-empty-zone.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1903. [func] ISC string copy API.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1902. [func] Attempt to make the amount of work performed in a
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews iteration self tuning. The covers nodes clean from
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the cache per iteration, nodes written to disk when
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews rewriting a master file and nodes destroyed per
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater iteration when destroying a zone or a cache.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1901. [cleanup] Don't add DNSKEY records to the additional section.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1900. [bug] ixfr-from-differences failed to ensure that the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews serial number increased. [RT #15036]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1899. [func] named-checkconf now validates update-policy entries.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews implementations.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1896. [bug] Recursive clients soft quota support wasn't working
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews as expected. [RT #15103]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1895. [bug] A escaped character is, potentially, converted to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the output character set too early. [RT #14666]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1894. [doc] Review ARM for BIND 9.4.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews of memory. [RT #14995]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews less than 32k. [RT #14953]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1889. [port] sunos: non blocking i/o support. [RT #14951]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1887. [bug] The cache could delete expired records too fast for
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews clients with a virtual time in the past. [RT #14991]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1886. [bug] fctx_create() could return success even though it
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews failed. [RT #14993]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1885. [func] dig: report the number of extra bytes still left in
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the packet after processing all the records.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews levels. [RT #14962]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1882. [func] Limit the number of recursive clients that can be
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews waiting for a single query (<qname,qtype,qclass>) to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews resolve. New options clients-per-query and
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews max-clients-per-query.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1880. [func] The lame cache is now done on a <qname,qclass,qtype>
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews basis as some servers only appear to be lame for
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews certain query types. [RT #14916]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews and drop them. New stats category "duplicate".
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1877. [bug] Fix unreasonably low quantum on call to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews call. [RT #14919]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1876. [func] Additional memory debugging support to track size
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews and mctx arguments. [RT #14814]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1875. [bug] process_dhtkey() was using the wrong memory context
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews to free some memory. [RT #14890]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1874. [port] sunos: portability fixes. [RT #14814]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1873. [port] win32: isc__errno2result() now reports its caller.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1871. [placeholder]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1870. [func] Added framework for handling multiple EDNS versions.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1869. [func] dig can now specify the EDNS version when making
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews a query. [RT #14873]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1868. [func] edns-udp-size can now be overridden on a per
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews server basis. [RT #14851]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1867. [bug] It was possible to trigger a INSIST in
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater dlv_validatezonekey(). [RT #14846]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1866. [bug] resolv.conf parse errors were being ignored by
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews bad addresses. [RT #14841]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1864. [bug] Don't try the alternative transfer source if you
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews got a answer / transfer with the main source
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews address. [RT #14802]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1862. [func] Add additional zone data constancy checks.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews named-checkzone has extended checking of NS, MX and
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater SRV record and the hosts they reference.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater named has extended post zone load checks.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater New zone options: check-mx and integrity-check.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews responses. [RT #14801]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews incorrectly set. [RT #14775]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1859. [func] Add support for CH A record. [RT #14695]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews parsed. [RT #14686]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1857. [bug] named could trigger a INSIST() if reconfigured /
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews reloaded too fast. [RT #14673]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews of records. [RT #14616]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1854. [bug] lwres also needs to know the print format for
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater (long long). [RT #13754]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1853. [bug] Rework how DLV interacts with proveunsecure().
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater dnssec-makekeyset (removed from Makefile years ago).
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1851. [doc] Doxygen comment markup. [RT #11398]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1849. [doc] All forms of the man pages (docbook, man, html) should
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater have consistent copyright dates.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1848. [bug] Improve SMF integration. [RT #13238]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1847. [bug] isc_ondestroy_init() is called too late in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater <bortzmeyer@nic.fr>.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1845. [bug] Improve error reporting to distinguish between
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater accept()/fcntl() and socket()/fcntl() errors.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater for each 16 bit piece of the IPv6 address. The text
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews representation of a IPv6 address has been tightened
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews when CFLAGS contains "-I /usr/local/include"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews resulting in old header files being used.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1842. [port] cmsg_len() could produce incorrect results on
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews some platform. [RT #13744]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews find the list of nameservers to query. [RT #13694]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1840. [func] dnssec-signzone can now randomize signature end times
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews (dnssec-signzone -j jitter). [RT #13609]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1839. [bug] <isc/hash.h> was not being installed.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews for 'named -u <user>'. [RT #13714]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1836. [cleanup] Silence compiler warnings in hash_test.c.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1834. [bug] Bad memset in rdata_test.c. [RT #13658]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
017d755d7a606dfb1e02a9d6e2b29e49e39fde16Tinderbox User1831. [doc] Update named-checkzone documentation. [RT#13604]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater1829. [bug] win32: "pid-file none;" broken. [RT #13563]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater1828. [bug] isc_rwlock_init() failed to properly cleanup if it
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User encountered a error. [RT #13549]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1827. [bug] host: update usage message for '-a'. [RT #37116]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User of memory error. [RT #13537]
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater1825. [bug] Missing UNLOCK() on out of memory error from in
af9dbf1ccdd53933aaae9300d13ce0965d39b067Evan Hunt rbtdb.c:subtractrdataset(). [RT #13519]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1824. [bug] Memory leak on dns_zone_setdbtype() failure.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1823. [bug] Wrong macro used to check for point to point interface.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1822. [bug] check-names test for RT was reversed. [RT #13382]
af9dbf1ccdd53933aaae9300d13ce0965d39b067Evan Hunt1821. [placeholder]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1820. [bug] Gracefully handle acl loops. [RT #13659]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1819. [bug] The validator needed to check both the algorithm and
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User digest types of the DS to determine if it could be
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews used to introduce a secure zone. [RT #13593]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
63d98873e29dee9608c27f40613cb69d130a56e7Mark Andrews1817. [func] Add support for additional zone file formats for
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews improving loading performance. The masterfile-format
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater option in named.conf can be used to specify a
ca9a8f6d0b0f2a400a96f868193471510364336fMark Andrews non-default format. A separate command
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User named-compilezone was provided to generate zone files
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User in the new format. Additionally, the -I and -O options
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews for dnssec-signzone specify the input and output
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User1815. [bug] nsupdate triggered a REQUIRE if the server was set
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which