CHANGES 214 KB
Newer Older
1
2
3
2043.	[port]		nsupdate/nslookup: Force the flushing of the prompt
			for interactive sessions. [RT#16148]

4
5
6
2042.	[bug]		named-checkconf was incorrectly rejecting the
			logging category "config". [RT #16117]

7
8
9
2041.	[bug]		"configure --with-dlz-bdb=yes" produced a bad
			set of libraries to be linked. [RT #16129]

10
11
2040.	[bug]		rbtdb no_references() could trigger an INSIST
			failure with --enable-atomic.  [RT #16022]
12

13
2039.	[func]		Check that all buffers passed to the socket code
Mark Andrews's avatar
Mark Andrews committed
14
			have been retrieved when the socket event is freed.
15
16
17
18
19
			[RT #16122]

2038.	[bug]		dig/nslookup/host was unlinking from wrong list
			when handling errors. [RT #16122]

20
21
22
23
2037.	[func]		When unlinking the first or last element in a list
			check that the list head points to the element to
			be unlinked. [RT #15959]

24
25
26
2036.	[bug]		'rndc recursing' could cause trigger a REQUIRE.
			[RT #16075]

27
28
29
30
2035.	[func]		Make falling back to TCP on UDP refresh failure
			optional. Default "try-tcp-refresh yes;" for BIND 8
			compatibility. [RT #16123]

31
32
2034.	[bug]		gcc: set -fno-strict-aliasing. [RT #16124]

33
34
35
2033.	[bug]		We wern't creating multiple client memory contexts
			on demand as expected. [RT #16095]

36
37
2032.	[bug]		Remove a INSIST in query_addadditional2(). [RT #16074]

38
39
40
2031.	[bug]		Emit a error message when "rndc refresh" is called on
			a non slave/stub zone. [RT # 16073]

41
42
43
2030.	[bug]		We were being overly conservative when disabling
			openssl engine support. [RT #16030]

44
45
46
2029.	[bug]		host printed out the server multiple times when
			specified on the command line. [RT #15992]

Mark Andrews's avatar
Mark Andrews committed
47
2028.	[port]		linux: socket.c compatability for old systems.
48
49
			[RT #16015]

Mark Andrews's avatar
Mark Andrews committed
50
2027.	[port]		libbind: Solaris x86 support. [RT #16020]
51

52
53
54
2026.	[bug]		Rate limit the two recursive client exceeded messages.
			[RT #16044]

55
56
2025.	[func]		Update "zone serial unchanged" message. [RT #16026]

57
58
59
2024.	[bug]		named emited spurious "zone serial unchanged"
			messages on reload. [RT #16027]

60
61
62
2023.	[bug]		"make install" should create ${localstatedir}/run and
			${sysconfdir} if they do not exist. [RT #16033]

63
64
65
66
67
2022.	[bug]		If dnssec validation is disabled only assert CD if
			CD was requested. [RT #16037]

2021.	[bug]		dnssec-enable no; triggered a REQUIRE. [RT #16037]

68
69
2020.	[bug]		rdataset_setadditional() could leak memory. [RT #16034]

70
71
72
2019.	[tuning]	Reduce the amount of work performed per quantum
			when cleaning the cache. [RT #15986]

73
74
75
76
2018.	[bug]		Checking if the HMAC MD5 private file was broken.
			[RT #15960]

2017.	[bug]		allow-query default was not correct. [RT #15946]
77

78
79
80
81
2016.	[bug]		Return a partial answer if recursion is not
			allowed but requested and we had the answer
			to the original qname. [RT #15945]

82
83
84
85
86
87
2015.	[cleanup]	use-additional-cache is now acache-enable for
			consistancy.  Default acache-enable off in BIND 9.4
			as it requires memory usage to be configured.
			It may be enabled by default in BIND 9.5 once we
			have more experience with it.

Shane Kerr's avatar
Shane Kerr committed
88
89
90
2014.	[func]		Statistics about acache now recorded and sent
			to log. [RT #15976]

91
92
93
2013.	[bug]		Handle unexpected TSIGs on unsigned AXFR/IXFR
			responses more gracefully. [RT #15941]

94
95
96
2012.	[func]		Don't insert new acache entries if acache is full.
			[RT #15970]

97
98
99
100
2011.	[func]		dnssec-signzone can now update the SOA record of
			the signed zone, either as an increment or as the
			system time(). [RT #15633]

101
102
2010.	[placeholder]	rt15958

103
104
2009.	[bug]		libbind: coverity fixes. [RT #15808]

105
106
107
108
109
110
111
2008.	[func]		It is now posssible to enable/disable DNSSEC
			validation from rndc.  This is useful for the
			mobile hosts where the current connection point
			breaks DNSSEC (firewall/proxy).  [RT #15592]

				rndc validation newstate [view]

112
113
114
115
2007.	[func]		It is now possible to explicitly enable DNSSEC
			validation.  default dnssec-validation no; to
			be changed to yes in 9.5.0.  [RT #15674]

116
117
118
119
120
121
122
123
124
125
126
2006.	[security]	Allow-query-cache and allow-recursion now default
			to the builtin acls "localnets" and "localhost".

			This is being done to make caching servers less
			attractive as reflective amplifying targets for
			spoofed traffic.  This still leave authoritative
			servers exposed.

			The best fix is for full BCP 38 deployment to
			remove spoofed traffic.

127
128
129
130
2005.	[bug]		libbind: Retransmission timeouts should be
			based on which attempt it is to the nameserver
			and not the nameserver itself. [RT #13548]

131
132
133
134
2004.	[bug]		dns_tsig_sign() could pass a NULL pointer to
			dst_context_destroy() when cleaning up after a
			error. [RT #15835]

135
136
137
138
139
2003.	[bug]		libbind: The DNS name/address lookup functions could
			occasionally follow a random pointer due to
			structures not being completely zeroed. [RT #15806]

2002.	[bug]		libbind: tighten the constraints on when
140
141
			struct addrinfo._ai_pad exists.  [RT #15783]

142
143
144
145
2001.	[func]		Check the KSK flag when updating a secure dynamic zone.
			New zone option "update-check-ksk yes;".  [RT #15817]

2000.	[bug]		memmove()/strtol() fix was incomplete. [RT #15812]
146

147
148
1999.	[func]		Implement "rrset-order fixed". [RT #13662]

149
150
151
152
1998.	[bug]		Restrict handling of fifos as sockets to just SunOS.
			This allows named to connect to entropy gathering
			daemons that use fifos instead of sockets. [RT #15840]

153
154
155
156
1997.	[bug]		Named was failing to replace negative cache entries
			when a positive one for the type was learnt.
			[RT #15818]

157
158
159
1996.	[bug]		nsupdate: if a zone has been specified it should
			appear in the output of 'show'. [RT #15797]

160
161
162
1995.	[bug]		'host' was reporting multiple "is an alias" messages.
			[RT #15702]

163
164
1994.	[port]		OpenSSL 0.9.8 support. [RT #15694]

165
166
167
168
1993.	[bug]		Log messsage, via syslog, were missing the space
			after the timestamp if "print-time yes" was specified.
			[RT #15844]

Mark Andrews's avatar
Mark Andrews committed
169
1992.	[bug]		Not all incoming zone transfer messages included the
170
171
			view.  [RT #15825]

172
173
174
175
1991.	[cleanup]	The configuration data, once read, should be treated
			as readonly.  Expand the use of const to enforce this
			at compile time. [RT #15813]

176
177
178
179
1990.	[bug]		libbind:  isc's override of broken gettimeofday()
			implementions was not always effective.
			[RT #15709]

180
181
182
1989.	[bug]		win32: don't check the service password when
			re-installing. [RT #15882]

183
184
185
1988.	[bug]		Remove a bus error from the SHA256/SHA512 support.
			[RT #15878]

186
187
1987.	[func]		DS/DLV SHA256 digest algorithm support. [RT #15608]

188
189
1986.	[func]		Report when a zone is removed. [RT #15849]

190
191
192
193
194
195
196
197
198
199
200
1985.	[protocol]	DLV has now been assigned a official type code of
			32769. [RT #15807]

			Note: care should be taken to ensure you upgrade
			both named and dnssec-signzone at the same time for
			zones with DLV records where named is the master
			server for the zone.  Also any zones that contain
			DLV records should be removed when upgrading a slave
			zone.  You do not however have to upgrade all
			servers for a zone with DLV records simultaniously.

201
202
203
1984.	[func]		dig, nslookup and host now advertise a 4096 byte
			EDNS UDP buffer size by default. [RT #15855]

204
205
206
1983.	[func]		Two new update policies.  "selfsub" and "selfwild".
			[RT #12895]

207
208
209
210
1982.	[bug]		DNSKEY was being accepted on the parent side of
			a delegation.  KEY is still accepted there for
			RFC 3007 validated updates. [RT #15620]

211
212
213
1981.	[bug]		win32: condition.c:wait() could fail to reattain
			the mutex lock.

214
215
216
1980.	[func]		dnssec-signzone: output the SOA record as the
			first record in the signed zone. [RT #15758]

217
218
219
1979.	[port]		linux: allow named to drop core after changing
			user ids. [RT #15753]

220
221
222
1978.	[port]		Handle systems which have a broken recvmsg().
			[RT #15742]

223
224
1977.	[bug]		Silence noisy log message. [RT #15704]

225
226
1976.	[bug]		Handle systems with no IPv4 addresses. [RT #15695]

227
228
229
1975.	[bug]		libbind: isc_gethexstring() could misparse multi-line
			hex strings with comments. [RT #15814]

230
231
232
1974.	[doc]		List each of the zone types and associated zone
			options seperately in the ARM.

233
234
235
1973.	[func]		TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
			HMACSHA512 support. [RT #13606]

236
237
238
1972.	[contrib]	DBUS dynamic forwarders integation from
			Jason Vas Dias <jvdias@redhat.com>.

239
1971.	[port]		linux: make detection of missing IF_NAMESIZE more
240
			robust. [RT #15443]
241

242
243
244
1970.	[bug]		nsupdate: adjust UDP timeout when falling back to
			unsigned SOA query. [RT #15775]

245
246
247
1969.	[bug]		win32: the socket code was freeing the socket
			structure too early. [RT #15776]

248
249
1968.	[bug]		Missing lock in resolver.c:validated(). [RT #15739]

250
251
1967.	[func]		dig/nslookup/host: warn about missing "QR". [RT #15779]

Mark Andrews's avatar
Mark Andrews committed
252
1966.	[bug]		Don't set CD when we have fallen back to plain DNS.
253
254
			[RT #15727]

255
256
257
1965.	[func]		Suppress spurious "recusion requested but not
			available" warning with 'dig +qr'. [RT #15780].

258
259
1964.	[func]		Seperate out MX and SRV to CNAME checks. [RT #15723]

260
261
262
1963.	[port]		Tru64 4.0E doesn't support send() and recv(). 
			[RT #15586]

263
264
265
1962.	[bug]		Named failed to clear old update-policy when it
			was removed. [RT #15491]

266
267
268
1961.	[bug]		Check the port and address of responses forwarded
			to dispatch. [RT #15474]

269
270
271
1960.	[bug]		Update code should set NSEC ttls from SOA MINIMUM.
			[RT #15465]

272
273
274
275
1959.	[func]		Control the zeroing of the negative response TTL to
			a soa query.  Defaults "zero-no-soa-ttl yes;" and
			"zero-no-soa-ttl-cache no;". [RT #15460]

276
277
278
1958.	[bug]		Named failed to update the zone's secure state
			until the zone was reloaded. [RT #15412]

279
280
281
1957.	[bug]		Dig mishandled responses to class ANY queries.
			[RT #15402]

282
283
284
285
1956.	[bug]		Improve cross compile support, 'gen' is now built
			by native compiler.  See README for additional
			cross compile support information. [RT #15148]

286
287
1955.	[bug]		Pre-allocate the cache cleaning interator. [RT #14998]

Mark Andrews's avatar
Mark Andrews committed
288
1954.	[func]		Named now falls back to advertising EDNS with a
289
290
291
			512 byte receive buffer if the initial EDNS queries
			fail.  [RT #14852]

Mark Andrews's avatar
Mark Andrews committed
292
1953.	[func]		The maximum EDNS UDP response named will send can
293
294
295
296
			now be set in named.conf (max-udp-size).  This is
			independent of the advertised receive buffer
			(edns-udp-size). [RT #14852]

297
298
299
1952.	[port]		hpux: tell the linker to build a runtime link
			path "-Wl,+b:". [RT #14816].

300
301
302
303
1951.	[security]	Drop queries from particular well known ports.
			Don't return FORMERR to queries from particular
			well known ports.  [RT #15636]
			
304
305
306
307
1950.	[port]		Solaris 2.5.1 and earlier cannot bind() then connect()
			a TCP socket. This prevents the source address being
			set for TCP connections. [RT #15628]

308
309
1949.	[func]		Addition memory leakage checks. [RT #15544]

310
311
312
313
1948.	[bug]		If was possible to trigger a REQUIRE failure in
			xfrin.c:maybe_free() if named ran out of memory.
			[RT #15568]

314
315
316
317
318
1947.	[func]		It is now possible to configure named to accept
			expired RRSIGs.  Default "dnssec-accept-expired no;".
			Setting "dnssec-accept-expired yes;" leaves named
			vulnerable to replay attacks.  [RT #14685]

319
320
321
1946.	[bug]		resume_dslookup() could trigger a REQUIRE failure
			when using forwarders. [RT #15549]

322
1945.	[cleanup]	dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
Mark Andrews's avatar
Mark Andrews committed
323
			To generate a RSAMD5 key you must explicitly request
324
325
			RSAMD5. [RT #13780]
			
326
327
328
1944.	[cleanup]	isc_hash_create() does not need a read/write lock.
			[RT #15522]

Mark Andrews's avatar
Mark Andrews committed
329
1943.	[bug]		Set the loadtime after rolling forward the journal.
330
331
			[RT #15647]

332
333
334
335
1942.	[bug]		If the name of a DNSKEY match that of one in
			trusted-keys do not attempt to validate the DNSKEY
			using the parents DS RRset. [RT #15649]

336
337
338
1941.	[bug]		ncache_adderesult() should set eresult even if no
			rdataset is passed to it. [RT #15642]

339
340
341
1940.	[bug]		Fixed a number of error conditions reported by
			Coverity.

342
343
344
345
346
347
348
1939.	[bug]		The resolver could dereference a null pointer after
			validation if all the queries have timed out.
			[RT #15528]

1938.	[bug]		The validator was not correctly handling unsecure
			negative responses at or below a SEP. [RT #15528]

349
350
1937.	[bug]		sdlz doesn't handle RRSIG records. [RT #15564]

Mark Andrews's avatar
Mark Andrews committed
351
1936.	[bug]		The validator could leak memory. [RT #15544]
352

353
354
355
356
357
358
1935.	[bug]		'acache' was DO sensitive. [RT #15430]

1934.	[func]		Validate pending NS RRsets, in the authority section,
			prior to returning them if it can be done without
			requiring DNSKEYs to be fetched.  [RT #15430]

Mark Andrews's avatar
Mark Andrews committed
359
1933.	[bug]		dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
360

361
362
1932.	[bug]		hpux: LDFLAGS was getting corrupted. [RT #15530]

363
364
1931.	[bug]		Per-client mctx could require a huge amount of memory,
			particularly for a busy caching server. [RT #15519]
365

366
367
368
369
1930.	[port]		HPUX: ia64 support. [RT #15473]

1929.	[port]		FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.

370
371
1928.	[bug]		Race in rbtdb.c:currentversion(). [RT #15517]

372
373
374
1927.	[bug]		Access to soanode or nsnode in rbtdb violated the
			lock order rule and could cause a dead lock.
			[RT# 15518]
375

376
1926.	[bug]		The Windows installer did not check for empty
377
378
			passwords.  BINDinstall was being installed in
			the wrong place. [RT #15483]
379

380
381
382
1925.	[port]		All outer level AC_TRY_RUNs need cross compiling
			defaults. [RT #15469]

383
384
1924.	[port]		libbind: hpux ia64 support. [RT #15473]

385
386
1923.	[bug]		ns_client_detach() called too early. [RT #15499]

387
388
389
1922.	[bug]		check-tool.c:setup_logging() missing call to
			dns_log_setcontext().

Mark Andrews's avatar
Mark Andrews committed
390
1921.	[bug]		Client memory contexts were not using internal
391
392
			malloc. [RT# 15434]

Mark Andrews's avatar
update    
Mark Andrews committed
393
1920.	[bug]		The cache rbtdb lock array was too small to
394
395
396
			have the desired performance characteristics.
			[RT #15454]

397
398
399
1919.	[contrib]	queryperf: a set of new features: collecting/printing
			response delays, printing intermediate results, and
			adjusting query rate for the "target" qps.
400

401
402
1918.	[bug]		Memory leak when checking acls. [RT #15391]

403
404
405
1917.	[doc]		funcsynopsisinfo wasn't being treated as verbatim
			when generating man pages. [RT #15385]

406
407
1916.	[func]		Integrate contibuted IDN code from JPNIC. [RT #15383]

408
409
1915.	[bug]		dig +ndots was broken. [RT #15215]

410
411
412
413
1914.	[protocol]	DS is required to accept mnemonic algorithms
			(RFC 4034).  Still emit numeric algorithms for
			compatability with RFC 3658. [RT #15354]

414
415
1913.	[func]		Integrate contibuted DLZ code into named. [RT #11382]

Mark Andrews's avatar
Mark Andrews committed
416
1912.	[port]		aix: atomic locking for powerpc. [RT #15020]
417

Mark Andrews's avatar
Mark Andrews committed
418
1911.	[bug]		Update windows socket code. [RT #14965]
419

Mark Andrews's avatar
Mark Andrews committed
420
1910.	[bug]		dig's +sigchase code overhauled. [RT #14933]
421

Mark Andrews's avatar
Mark Andrews committed
422
1909.	[bug]		The DLV code has been re-worked to make no longer
423
424
			query order sensitive. [RT #14933]

Mark Andrews's avatar
Mark Andrews committed
425
1908.	[func]		dig now warns if 'RA' is not set in the answer when
426
427
428
429
			'RD' was set in the query.  host/nslookup skip servers
			that fail to set 'RA' when 'RD' is set unless a server
			is explicitly set.  [RT #15005]

Mark Andrews's avatar
Mark Andrews committed
430
1907.	[func]		host/nslookup now continue (default)/fail on SERVFAIL.
431
432
			[RT #15006]

Mark Andrews's avatar
Mark Andrews committed
433
1906.	[func]		dig now has a '-q queryname' and '+showsearch' options.
434
435
			[RT #15034]

Mark Andrews's avatar
Mark Andrews committed
436
1905.	[bug]		Strings returned from cfg_obj_asstring() should be
437
438
439
440
			treated as read-only.  The prototype for 
			cfg_obj_asstring() has been updated to reflect this.
			[RT #15256]

Mark Andrews's avatar
Mark Andrews committed
441
1904.	[func]		Automatic empty zone creation for D.F.IP6.ARPA and
442
443
444
445
446
447
			friends.  Note: RFC 1918 zones are not yet covered by
			this but are likely to be in a future release.

			New options: empty-server, empty-contact,
			empty-zones-enable and disable-empty-zone.

Mark Andrews's avatar
Mark Andrews committed
448
1903.	[func]		ISC string copy API.
449

Mark Andrews's avatar
Mark Andrews committed
450
1902.	[func]		Attempt to make the amount of work performed in a
451
452
453
454
455
456
			iteration self tuning.  The covers nodes clean from
			the cache per iteration, nodes written to disk when
			rewriting a master file and nodes destroyed per
			iteration when destroying a zone or a cache.
			[RT #14996]

Mark Andrews's avatar
Mark Andrews committed
457
1901.	[cleanup]	Don't add DNSKEY records to the additional section.
458

Mark Andrews's avatar
Mark Andrews committed
459
1900.	[bug]		ixfr-from-differences failed to ensure that the
460
461
			serial number increased. [RT #15036]

Mark Andrews's avatar
Mark Andrews committed
462
1899.	[func]		named-checkconf now validates update-policy entries.
463
464
			[RT #14963]

Mark Andrews's avatar
Mark Andrews committed
465
1898.	[bug]		Extend ISC_SOCKADDR_FORMATSIZE and
466
467
			ISC_NETADDR_FORMATSIZE to allow for scope details.

Mark Andrews's avatar
Mark Andrews committed
468
1897.	[func]		x86 and x86_64 now have seperate atomic locking
469
470
			implementations.

Mark Andrews's avatar
Mark Andrews committed
471
1896.	[bug]		Recursive clients soft quota support wasn't working
472
473
			as expected. [RT #15103]

Mark Andrews's avatar
Mark Andrews committed
474
1895.	[bug]		A escaped character is, potentially, converted to
475
476
			the output character set too early. [RT #14666]

Mark Andrews's avatar
Mark Andrews committed
477
1894.	[doc]		Review ARM for BIND 9.4.
478

Mark Andrews's avatar
Mark Andrews committed
479
1893.	[port]		Use uintptr_t if available. [RT #14606]
480

Mark Andrews's avatar
Mark Andrews committed
481
1892.	[func]		Support for SPF rdata type. [RT #15033]
482

Mark Andrews's avatar
Mark Andrews committed
483
1891.	[port]		freebsd: pthread_mutex_init can fail if it runs out
484
485
			of memory. [RT #14995]

Mark Andrews's avatar
Mark Andrews committed
486
1890.	[func]		Raise the UDP recieve buffer size to 32k if it is
487
488
			less than 32k. [RT #14953]

Mark Andrews's avatar
Mark Andrews committed
489
1889.	[port]		sunos: non blocking i/o support. [RT #14951]
490

Mark Andrews's avatar
Mark Andrews committed
491
1888.	[func]		Support for IPSECKEY rdata type. [RT #14967]
492

Mark Andrews's avatar
Mark Andrews committed
493
1887.	[bug]		The cache could delete expired records too fast for
494
495
			clients with a virtual time in the past. [RT #14991]

Mark Andrews's avatar
Mark Andrews committed
496
1886.	[bug]		fctx_create() could return success even though it
497
498
			failed. [RT #14993]

Mark Andrews's avatar
Mark Andrews committed
499
1885.	[func]		dig: report the number of extra bytes still left in
500
501
			the packet after processing all the records.

Mark Andrews's avatar
Mark Andrews committed
502
1884.	[cleanup]	dighost.c: move external declarations into <dig/dig.h>.
503

Mark Andrews's avatar
Mark Andrews committed
504
1883.	[bug]		dnssec-signzone, dnssec-keygen: handle negative debug
505
506
			levels. [RT #14962]

Mark Andrews's avatar
Mark Andrews committed
507
1882.	[func]		Limit the number of recursive clients that can be
508
509
510
511
			waiting for a single query (<qname,qtype,qclass>) to
			resolve.  New options clients-per-query and
			max-clients-per-query.

Mark Andrews's avatar
Mark Andrews committed
512
1881.	[func]		Add a system test for named-checkconf. [RT #14931]
513

Mark Andrews's avatar
Mark Andrews committed
514
1880.	[func]		The lame cache is now done on a <qname,qclass,qtype>
515
516
517
			basis as some servers only appear to be lame for
			certain query types.  [RT #14916]

Mark Andrews's avatar
Mark Andrews committed
518
1879.	[func]		"USE INTERNAL MALLOC" is now runtime selectable.
519
520
			[RT #14892]

Mark Andrews's avatar
Mark Andrews committed
521
1878.	[func]		Detect duplicates of UDP queries we are recursing on
522
			and drop them.  New stats category "duplicates".
523
			[RT #2471]
524

Mark Andrews's avatar
Mark Andrews committed
525
1877.	[bug]		Fix unreasonably low quantum on call to
526
527
528
			dns_rbt_destroy2().  Remove unnecessay unhash_node()
			call. [RT #14919]

Mark Andrews's avatar
Mark Andrews committed
529
1876.	[func]		Additional memory debugging support to track size
Mark Andrews's avatar
Mark Andrews committed
530
			and mctx arguments. [RT #14814]
531

Mark Andrews's avatar
Mark Andrews committed
532
1875.	[bug]		process_dhtkey() was using the wrong memory context
533
534
			to free some memory. [RT #14890]

Mark Andrews's avatar
Mark Andrews committed
535
1874.	[port]		sunos: portability fixes. [RT #14814]
536

Mark Andrews's avatar
Mark Andrews committed
537
1873.	[port]		win32: isc__errno2result() now reports its caller.
538
539
			[RT #13753]

Mark Andrews's avatar
Mark Andrews committed
540
1872.	[port]		win32: Handle ERROR_NETNAME_DELETED.  [RT #13753]
541

Mark Andrews's avatar
Mark Andrews committed
542
1871.	[placeholder]
543

Mark Andrews's avatar
Mark Andrews committed
544
1870.	[func]		Added framework for handling multiple EDNS versions.
545
			[RT #14873]
546

Mark Andrews's avatar
Mark Andrews committed
547
1869.	[func]		dig can now specify the EDNS version when making
548
			a query. [RT #14873]
549

550
551
1868.	[func]		edns-udp-size can now be overridden on a per
			server basis. [RT #14851]
Mark Andrews's avatar
Mark Andrews committed
552

553
554
1867.	[bug]		It was possible to trigger a INSIST in
			dlv_validatezonekey(). [RT #14846]
Mark Andrews's avatar
Mark Andrews committed
555

556
557
1866.	[bug]		resolv.conf parse errors were being ignored by
			dig/host/nslookup. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
558

559
560
1865.	[bug]		Silently ignore nameservers in /etc/resolv.conf with
			bad addresses. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
561

562
563
564
1864.	[bug]		Don't try the alternative transfer source if you
			got a answer / transfer with the main source
			address. [RT #14802]
Mark Andrews's avatar
Mark Andrews committed
565

566
567
1863.	[bug]		rrset-order "fixed" error messages not complete.

568
569
570
571
572
573
574
1862.	[func]		Add additional zone data constancy checks.
			named-checkzone has extended checking of NS, MX and 
			SRV record and the hosts they reference.
			named has extended post zone load checks.
			New zone options: check-mx and integrity-check. 
			[RT #4940]

575
576
1861.	[bug]		dig could trigger a INSIST on certain malformed
			responses. [RT #14801]
Mark Andrews's avatar
Mark Andrews committed
577

578
579
1860.	[port]		solaris 2.8: hack_shutup_pthreadmutexinit was
			incorrectly set. [RT #14775]
Mark Andrews's avatar
Mark Andrews committed
580

581
1859.	[func]		Add support for CH A record. [RT #14695]
Mark Andrews's avatar
Mark Andrews committed
582

583
584
585
1858.	[bug]		The flush-zones-on-shutdown option wasn't being
			parsed. [RT #14686]

586
587
1857.	[bug]		named could trigger a INSIST() if reconfigured /
			reloaded too fast.  [RT #14673]
Mark Andrews's avatar
Mark Andrews committed
588

Rob Austein's avatar
regen    
Rob Austein committed
589
590
591
1856.	[doc]		Switch Docbook toolchain from DSSSL to XSL.
			[RT #11398]

592
593
594
1855.	[bug]		ixfr-from-differences was failing to detect changes
			of ttl due to dns_diff_subtract() was ignoring the ttl
			of records.  [RT #14616]
Mark Andrews's avatar
Mark Andrews committed
595

596
597
598
1854.	[bug]		lwres also needs to know the print format for
			(long long).  [RT #13754]

599
600
601
1853.	[bug]		Rework how DLV interacts with proveunsecure().
			[RT #13605]

602
603
604
1852.	[cleanup]	Remove last vestiges of dnssec-signkey and
			dnssec-makekeyset (removed from Makefile years ago).

605
606
1851.	[doc]		Doxygen comment markup. [RT #11398]

607
608
1850.	[bug]		Memory leak in lwres_getipnodebyaddr(). [RT #14591]

609
610
611
1849.	[doc]		All forms of the man pages (docbook, man, html) should
			have consistant copyright dates.

612
613
1848.	[bug]		Improve SMF integration. [RT #13238]

614
1847.	[bug]		isc_ondestroy_init() is called too late in
Mark Andrews's avatar
Mark Andrews committed
615
			dns_rbtdb_create()/dns_rbtdb64_create(). 
616
617
			[RT #13661]
			
618
619
620
1846.	[contrib]	query-loc-0.3.0 from Stephane Bortzmeyer
			<bortzmeyer@nic.fr>.

621
622
623
1845.	[bug]		Improve error reporting to distingish between
			accept()/fcntl() and socket()/fcntl() errors.
			[RT #13745]
Mark Andrews's avatar
Mark Andrews committed
624

625
626
627
628
629
630
1844.	[bug]		inet_pton() accepted more that 4 hexadecimal digits
			for each 16 bit piece of the IPv6 address.  The text
			representation of a IPv6 address has been tighted
			to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
			[RT #5662]

631
632
633
634
635
1843.	[cleanup]	CINCLUDES takes precedence over CFLAGS.  This helps
			when CFLAGS contains "-I /usr/local/include"
			resulting in old header files being used.

1842.	[port]		cmsg_len() could produce incorrect results on
636
637
			some platform. [RT #13744]

638
639
1841.	[bug]		"dig +nssearch" now makes a recursive query to
			find the list of nameservers to query. [RT #13694]
Mark Andrews's avatar
Mark Andrews committed
640

Mark Andrews's avatar
Mark Andrews committed
641
1840.	[func]		dnssec-signzone can now randomize signature end times
642
643
			(dnssec-signzone -j jitter). [RT #13609]

644
645
1839.	[bug]		<isc/hash.h> was not being installed.

646
647
1838.	[cleanup]	Don't allow Linux capabilities to be inherited.
			[RT #13707]
Mark Andrews's avatar
Mark Andrews committed
648

649
650
1837.	[bug]		Compile time option ISC_FACILITY was not effective
			for 'named -u <user>'.  [RT #13714]
Mark Andrews's avatar
Mark Andrews committed
651

652
653
1836.	[cleanup]	Silence compiler warnings in hash_test.c.

654
655
1835.	[bug]		Update dnssec-signzone's usage message. [RT #13657]

656
657
1834.	[bug]		Bad memset in rdata_test.c. [RT #13658]

658
659
1833.	[bug]		Race condition in isc_mutex_lock_profile(). [RT #13660]

660
661
662
1832.	[bug]		named fails to return BADKEY on unknown TSIG algorithm.
			[RT #13620]

663
664
1831.	[doc]		Update named-checkzone documentation. [RT#13604]

665
666
1830.	[bug]		adb lame cache has sence of test reversed. [RT #13600]

667
668
1829.	[bug]		win32: "pid-file none;" broken. [RT #13563]

669
670
671
1828.	[bug]		isc_rwlock_init() failed to properly cleanup if it
			encountered a error. [RT #13549]

672
673
1827.	[bug]		host: update usage message for '-a'. [RT #37116]

674
675
676
677
678
1826.	[bug]		Missing DESTROYLOCK() in isc_mem_createx() on out
			of memory error. [RT #13537]

1825.	[bug]		Missing UNLOCK() on out of memory error from in
			rbtdb.c:subtractrdataset(). [RT #13519]
679

680
681
682
1824.	[bug]		Memory leak on dns_zone_setdbtype() failure.
			[RT #13510]

683
684
685
1823.	[bug]		Wrong macro used to check for point to point interface.
			[RT#13418]

686
687
1822.	[bug]		check-names test for RT was reversed. [RT #13382]

Mark Andrews's avatar
Mark Andrews committed
688
689
1821.	[placeholder]

690
1820.	[bug]		Gracefully handle acl loops. [RT #13659]
Mark Andrews's avatar
Mark Andrews committed
691

692
693
694
695
1819.	[bug]		The validator needed to check both the algorithm and
			digest types of the DS to determine if it could be
			used to introduce a secure zone. [RT #13593]

696
697
1818.	[bug]		'named-checkconf -z' triggered an INSIST. [RT #13599]

698
1817.	[func]		Add support for additional zone file formats for
699
700
			improving loading performance.  The masterfile-format
			option in named.conf can be used to specify a
701
			non-default format.  A separate command
702
			named-compilezone was provided to generate zone files
703
704
705
			in the new format.  Additionally, the -I and -O options
			for dnssec-signzone specify the input and output
			formats.
706

707
708
1816.	[port]		UnixWare: failed to compile lib/isc/unix/net.c.
			[RT #13597]
Mark Andrews's avatar
Mark Andrews committed
709

710
711
712
1815.	[bug]		nsupdate triggered a REQUIRE if the server was set
			without also setting the zone and it encountered
			a CNAME and was using TSIG.  [RT #13086]
Mark Andrews's avatar
Mark Andrews committed
713

714
1814.	[func]		UNIX domain controls are now supported.
Mark Andrews's avatar
Mark Andrews committed
715

716
717
718
719
1813.	[func]		Restructured the data locking framework using
			architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
720
			x86, x86_64, alpha, powerpc, and mips are currently
721
			supported.
722

723
724
725
1812.	[port]		win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
			[RT #13453]

726
727
1811.	[func]		Preserve the case of domain names in rdata during
			zone transfers. [RT #13547]
Mark Andrews's avatar
Mark Andrews committed
728

729
730
731
1810.	[bug]		configure, lib/bind/configure make different default
			decisions about whether to do a threaded build.
			[RT #13212]
Mark Andrews's avatar
Mark Andrews committed
732

733
734
1809.	[bug]		"make distclean" failed for libbind if the platform
			is not supported.
Mark Andrews's avatar
Mark Andrews committed
735

736
737
1808.	[bug]		zone.c:notify_zone() contained a race condition,
			zone->db could change underneath it.  [RT #13511]
Mark Andrews's avatar
Mark Andrews committed
738

739
740
1807.	[bug]		When forwarding (forward only) set the active domain
			from the forward zone name. [RT #13526]
Mark Andrews's avatar
Mark Andrews committed
741

742
743
744
1806.	[bug]		The resolver returned the wrong result when a CNAME /
			DNAME was encountered when fetching glue from a
			secure namespace. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
745

746
747
1805.	[bug]		Pending status was not being cleared when DLV was
			active. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
748

749
750
751
1804.	[bug]		Ensure that if we are queried for glue that it fits
			in the additional section or TC is set to tell the
			client to retry using TCP. [RT #10114]
Mark Andrews's avatar
Mark Andrews committed
752

753
754
1803.	[bug]		dnssec-signzone sometimes failed to remove old
			RRSIGs. [RT #13483]
Mark Andrews's avatar
Mark Andrews committed
755

756
1802.	[bug]		Handle connection resets better. [RT #11280]
Mark Andrews's avatar
Mark Andrews committed
757

758
759
1801.	[func]		Report differences between hints and real NS rrset
			and associated address records.
Mark Andrews's avatar
Mark Andrews committed
760

761
762
763
1800.	[bug]		Changes #1719 allowed a INSIST to be triggered.
			[RT #13428]

764
765
1799.	[bug]		'rndc flushname' failed to flush negative cache
			entries. [RT #13438]
Mark Andrews's avatar
Mark Andrews committed
766

767
768
1798.	[func]		The server syntax has been extended to support a
			range of servers.  [RT #11132]
Mark Andrews's avatar
Mark Andrews committed
769

770
771
772
1797.	[func]		named-checkconf now check acls to verify that they
			only refer to existing acls. [RT #13101]

773
1796.	[func]		"rndc freeze/thaw" now freezes/thaws all zones.
Mark Andrews's avatar
Mark Andrews committed
774

Mark Andrews's avatar
Mark Andrews committed
775
1795.	[bug]		"rndc dumpdb" was not fully documented.  Minor
776
			formating issues with "rndc dumpdb -all".  [RT #13396]
Mark Andrews's avatar
Mark Andrews committed
777

778
779
1794.	[func]		Named and named-checkzone can now both check for
			non-terminal wildcard records.
Mark Andrews's avatar
Mark Andrews committed
780

781
1793.	[func]		Extend adjusting TTL warning messages. [RT #13378]
Mark Andrews's avatar
Mark Andrews committed
782

783
784
1792.	[func]		New zone option "notify-delay".  Specify a minimum
			delay between sets of NOTIFY messages.
Mark Andrews's avatar
Mark Andrews committed
785

786
787
1791.	[bug]		'host -t a' still printed out AAAA and MX records.
			[RT #13230]
Mark Andrews's avatar
Mark Andrews committed
788

789
790
791
1790.	[cleanup]	Move lib/dns/sec/dst up into lib/dns.  This should
			allow parallel make to succeed.

792
793
794
1789.	[bug]		Prerequisite test for tkey and dnssec could fail
			with "configure --with-libtool".

795
796
797
1788.	[bug]		libbind9.la/libbind9.so needs to link against
			libisccfg.la/libisccfg.so.

798
799
1787.	[port]		HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.

800
801
802
803
1786.	[port]		AIX: libt_api needs to be taught to look for
			T_testlist in the main executable (--with-libtool).
			[RT #13239]

804
805
806
1785.	[bug]		libbind9.la/libbind9.so needs to link against
			libisc.la/libisc.so.

807
808
809
810
1784.	[cleanup]	"libtool -allow-undefined" is the default.
			Leave hooks in configure to allow it to be set
			if needed in the future.

811
812
813
1783.	[cleanup]	We only need one copy of libtool.m4, ltmain.sh in the
			source tree.

814
815
1782.	[port]		OSX: --with-libtool + --enable-libbind broke on
			__evOptMonoTime.  [RT #13219]
Mark Andrews's avatar
Mark Andrews committed
816

817
1781.	[port]		FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
Mark Andrews's avatar
Mark Andrews committed
818

819
820
1780.	[bug]		Update libtool to 1.5.10.

821
822
1779.	[port]		OSF 5.1: libtool didn't handle -pthread correctly.

823
1778.	[port]		HUX 11.11: fix broken IN6ADDR_ANY_INIT and
824
825
			IN6ADDR_LOOPBACK_INIT macros.

826
1777.	[port]		OSF 5.1: fix broken IN6ADDR_ANY_INIT and
827
			IN6ADDR_LOOPBACK_INIT macros.
828

829
830
1776.	[port]		Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
			IN6ADDR_LOOPBACK_INIT macros.
Mark Andrews's avatar
Mark Andrews committed
831

832
833
1775.	[bug]		Only compile getnetent_r.c when threaded. [RT #13205]

834
835
1774.	[port]		Aix: Silence compiler warnings / build failures.
			[RT #13154]
Mark Andrews's avatar
Mark Andrews committed
836

837
1773.	[bug]		Fast retry on host / net unreachable. [RT #13153]
Mark Andrews's avatar
Mark Andrews committed
838

Mark Andrews's avatar
Mark Andrews committed
839
840
1772.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
841
842
1771.	[placeholder]

843
844
845
1770.	[bug]		named-checkconf failed to report missing a missing
			file clause for rbt{64} master/hint zones. [RT#13009]

846
847
848
1769.	[port]		win32: change compiler flags /MTd ==> /MDd,
			/MT ==> /MD.

849
850
851
1768.	[bug]		nsecnoexistnodata() could be called with a non-NSEC
			rdataset. [RT #12907]

852
853
1767.	[port]		Builds on IPv6 platforms without IPv6 Advanced API
			support for (struct in6_pktinfo) failed.  [RT #13077]
Mark Andrews's avatar
Mark Andrews committed
854

855
856
1766.	[bug]		Update the master file timestamp on successful refresh
			as well as the journal's timestamp. [RT# 13062]
Mark Andrews's avatar
Mark Andrews committed
857

858
859
1765.	[bug]		configure --with-openssl=auto failed. [RT #12937]

860
861
862
1764.	[bug]		dns_zone_replacedb failed to emit a error message
			if there was no SOA record in the replacment db.
			[RT #13016]
Mark Andrews's avatar
Mark Andrews committed
863

864
865
1763.	[func]		Perform sanity checks on NS records which refer to
			'in zone' names. [RT #13002]
Mark Andrews's avatar
Mark Andrews committed
866

867
868
1762.	[bug]		isc_interfaceiter_create() could return ISC_R_SUCCESS
			even when it failed. [RT #12995]
Mark Andrews's avatar
Mark Andrews committed
869

870
871
1761.	[bug]		'rndc dumpdb' didn't report unassociated entries.
			[RT #12971]
Mark Andrews's avatar
Mark Andrews committed
872

873
874
1760.	[bug]		Host / net unreachable was not penalising rtt
			estimates. [RT #12970]
Mark Andrews's avatar
Mark Andrews committed
875

876
877
1759.	[bug]		Named failed to startup if the OS supported IPv6
			but had no IPv6 interfaces configured. [RT #12942]
Mark Andrews's avatar
Mark Andrews committed
878

879
1758.	[func]		Don't send notify messages to self. [RT #12933]
Mark Andrews's avatar
Mark Andrews committed
880

881
1757.	[func]		host now can turn on memory debugging flags with '-m'.
Mark Andrews's avatar
Mark Andrews committed
882

883
884
1756.	[func]		named-checkconf now checks the logging configuration.
			[RT #12352]
Mark Andrews's avatar
Mark Andrews committed
885

886
887
1755.	[func]		allow-update is now settable at the options / view
			level. [RT #6636]
Mark Andrews's avatar
Mark Andrews committed
888

889
890
891
1754.	[bug]		We wern't always attempting to query the parent
			server for the DS records at the zone cut.
			[RT #12774]
Mark Andrews's avatar
Mark Andrews committed
892

893
894
895
1753.	[bug]		Don't serve a slave zone which has no NS records.
			[RT #12894]

896
897
898
899
1752.	[port]		Move isc_app_start() to after ns_os_daemonise()
			as some fork() implementations unblock the signals
			that are blocked by isc_app_start(). [RT #12810]

900
901
1751.	[bug]		--enable-getifaddrs failed under linux. [RT #12867]

902
903
904
1750.	[port]		lib/bind/make/rules.in:subdirs was not bash friendly.
			[RT #12864]

905
906
1749.	[bug]		'check-names response ignore;' failed to ignore.
			[RT #12866]
Mark Andrews's avatar
Mark Andrews committed
907

908
909
1748.	[func]		dig now returns the byte count for axfr/ixfr.
			
910
911
912
1747.	[bug]		BIND 8 compatability: named/named-checkconf failed
			to parse "host-statistics-max" in named.conf.

Mark Andrews's avatar
Mark Andrews committed
913
1746.	[func]		Make public the function to read a key file,
914
915
			dst_key_read_public(). [RT #12450]

916
917
918
1745.	[bug]		Dig/host/nslookup accept replies from link locals
			regardless of scope if no scope was specified when
			query was sent. [RT #12745]
Mark Andrews's avatar
Mark Andrews committed
919

920
921
922
1744.	[bug]		If tuple2msgname() failed to convert a tuple to
			a name a REQUIRE could be triggered. [RT #12796]

923
1743.	[bug]		If isc_taskmgr_create() was not able to create the
924
925
926
927
			requested number of worker threads then destruction
			of the manager would trigger an INSIST() failure.
			[RT #12790]
			
928
929
930
931
932
1742.	[bug]		Deleting all records at a node then adding a
			previously existing record, in a single UPDATE
			transaction, failed to leave / regenerate the
			associated RRSIG records. [RT #12788]

933
934
935
1741.	[bug]		Deleting all records at a node in a secure zone
			using a update-policy grant failed. [RT #12787]

936
937
938
939
940
941
1740.	[bug]		Replace rbt's hash algorithm as it performed badly
			with certain zones. [RT #12729]
			
			NOTE: a hash context now needs to be established
			via isc_hash_create() if the application was not
			already doing this.
Mark Andrews's avatar
Mark Andrews committed
942

943
944
1739.	[bug]		dns_rbt_deletetree() could incorrectly return
			ISC_R_QUOTA.  [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
945

946
1738.	[bug]		Enable overrun checking by default. [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
947

Mark Andrews's avatar
Mark Andrews committed
948
1737.	[bug]		named failed if more than 16 masters were specified.
949
950
			[RT #12627]

951
952
953
1736.	[bug]		dst_key_fromnamedfile() could fail to read a
			public key. [RT #12687]
			
954
955
956
1735.	[bug]		'dig +sigtrace' could die with a REQUIRE failure.
			[RE #12688]

957
958
959
1734.	[cleanup]	'rndc-confgen -a -t' remove extra '/' in path.
			[RT #12588]

960
961
1733.	[bug]		Return non-zero exit status on initial load failure.
			[RT #12658]
Mark Andrews's avatar
Mark Andrews committed
962

963
964
1732.	[bug]		'rrset-order name "*"' wasn't being applied to ".".
			[RT #12467]
Mark Andrews's avatar
Mark Andrews committed
965

966
967
1731.	[port]		darwin: relax version test in ifconfig.sh.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
968

969
970
1730.	[port]		Determine the length type used by the socket API.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
971

972
1729.	[func]		Improve check-names error messages.
Mark Andrews's avatar
Mark Andrews committed
973

974
1728.	[doc]		Update check-names documentation.
Mark Andrews's avatar
Mark Andrews committed
975

976
977
1727.	[bug]		named-checkzone: check-names support didn't match
			documentation.
Mark Andrews's avatar
Mark Andrews committed
978

Mark Andrews's avatar
Mark Andrews committed
979
1726.	[port]		aix5: add support for aix5.
Mark Andrews's avatar
aix5    
Mark Andrews committed
980

981
982
1725.	[port]		linux: update error message on interaction of threads,
			capabilities and setuid support (named -u). [RT #12541]
Mark Andrews's avatar
Mark Andrews committed
983

984
985
1724.	[bug]		Look for DNSKEY records with "dig +sigtrace".
			[RT #12557]
Mark Andrews's avatar
Mark Andrews committed
986

987
988
1723.	[cleanup]	Silence compiler warnings from t_tasks.c. [RT #12493]

989
990
1722.	[bug]		Don't commit the journal on malformed ixfr streams.
			[RT #12519]
Mark Andrews's avatar
Mark Andrews committed
991

992
993
1721.	[bug]		Error message from the journal processing were not
			always identifing the relevent journal. [RT #12519]
Mark Andrews's avatar
Mark Andrews committed
994

995
996
1720.	[bug]		'dig +chase' did not terminate on a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
997

998
999
1719.	[bug]		named was not correctly caching a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
1000

1001
1002
1003
1718.	[bug]		nsupdate was not handling RFC 2308 Type 3 negative
			responses when looking for the zone / master server.
			[RT #12506]
Mark Andrews's avatar
Mark Andrews committed
1004

1005
1006
1007
1717.	[port]		solaris: ifconfig.sh did not support Solaris 10.
			"ifconfig.sh down" didn't work for Solaris 9.

1008
1009
1010
1716.	[doc]		named.conf(5) was being installed in the wrong
			location.  [RT# 12441]

1011
1012
1715.	[func]		'dig +trace' now randomly selects the next servers
			to try.  Report if there is a bad delegation.
Mark Andrews's avatar
Mark Andrews committed
1013

1014
1015
1016
1017
1714.	[bug]		dig/host/nslookup were only trying the first
			address when a nameserver was specified by name.
			[RT #12286]

1018
1019
1020
1713.	[port]		linux: extend capset failure message to say:
			please ensure that the capset kernel module is
			loaded.  see insmod(8)
Mark Andrews's avatar
Mark Andrews committed
1021

1022
1023
1712.	[bug]		Missing FULLCHECK for "trusted-key" in dig.

1024
1711.	[func]		'rndc unfreeze' has been deprecated by 'rndc thaw'.
Mark Andrews's avatar
Mark Andrews committed
1025

1026
1027
1710.	[func]		'rndc notify zone [class [view]]' resend the NOTIFY
			messages for the specified zone. [RT #9479]
Mark Andrews's avatar
Mark Andrews committed
1028

1029
1709.	[port]		solaris: add SMF support from Sun.
Mark Andrews's avatar
Mark Andrews committed
1030

1031
1032
1033
1034
1708.	[cleanup]	Replaced dns_fullname_hash() with dns_name_fullhash()
			for conformance to the name space convention.  Binary
			backward compatibility to the old function name is
			provided. [RT #12376]
1035

1036
1037
1707.	[contrib]	sdb/ldap updated to version 1.0-beta.

1038
1039
1706.	[bug]		'rndc stop' failed to cause zones to be flushed
			sometimes. [RT #12328]
Mark Andrews's avatar
Mark Andrews committed
1040

1041
1705.	[func]		Allow the journal's name to be changed via named.conf.
Mark Andrews's avatar
Mark Andrews committed
1042

1043
1044
1045
1704.	[port]		lwres needed a snprintf() implementation for
			platforms without snprintf().  Add missing
			"#include <isc/print.h>". [RT #12321]
Mark Andrews's avatar
Mark Andrews committed
1046

1047
1048
1703.	[bug]		named would loop sending NOTIFY messages when it
			failed to receive a response. [RT #12322]
Mark Andrews's avatar
Mark Andrews committed
1049

1050
1051
1702.	[bug]		also-notify should not be applied to builtin zones.
			[RT #12323]
Mark Andrews's avatar
Mark Andrews committed
1052

1053
1054
1701.	[doc]		A minimal named.conf man page.

1055
1056
1057
1700.	[func]		nslookup is no longer to be treated as deprecated.
			Remove "deprecated" warning message.  Add man page.

1058
1059
1699.	[bug]		dnssec-signzone can generate "not exact" errors
			when resigning. [RT #12281]
Mark Andrews's avatar
Mark Andrews committed
1060

1061
1062
1698.	[doc]		Use reserved IPv6 documentation prefix.