CHANGES 223 KB
Newer Older
Mark Andrews's avatar
Mark Andrews committed
1
2142.	[bug]		Handle master files with a modification time that
2
3
			matches the epoch. [RT# 16612]

4
5
6
2141.	[bug]		dig/host should not be setting IDN_ASCCHECK (IDN
			equivalent of LDH checks).  [RT #16609]

7
8
9
2140.	[bug]		libbind: missing unlock on pthread_key_create()
			failures. [RT #16654]

10
11
12
2139.	[bug]		dns_view_find() was being called with wrong type
			in adb.c. [RT #16670]

13
14
2138.	[bug]		Lock order reversal in resolver.c. [RT #16653]

15
2137.	[port]		Mips little endian and/or mips 64 bit are now
Mark Andrews's avatar
Mark Andrews committed
16
			supported for atomic operations. [RT#16648]
17

18
19
20
2136.	[bug]		nslookup/host looped if there was no search list
			and the host didn't exist. [RT #16657]

21
22
2135.	[bug]		Uninitialised rdataset in sdlz.c. [RT# 16656]

23
24
2134.	[func]		Additional statistics support. [RT #16666]

25
26
27
2133.	[port]		powerpc:  Support both IBM and MacOS Power PC
			assembler syntaxes. [RT #16647]

28
29
30
2132.	[bug]		Missing unlock on out of memory in
			dns_dispatchmgr_setudp().

31
32
2131.	[contrib]	dlz/mysql: AXFR was broken. [RT #16630]

33
34
2130.	[func]		Log if CD or DO were set. [RT #16640]

35
36
37
38
2129.	[func]		Provide a pool of UDP sockets for queries to be
			made over. See use-queryport-pool, queryport-pool-ports
			and queryport-pool-updateinterval.  [RT #16415]

39
40
2128.	[doc]		xsltproc --nonet, update DTD versions.  [RT #16635]

41
42
2127.	[port]		Improved OpenSSL 0.9.8 support. [RT #16563]

Mark Andrews's avatar
Mark Andrews committed
43
2126.	[security]	Serialise validation of type ANY responses. [RT #16555]
44

45
46
47
2125.	[bug]		dns_zone_getzeronosoattl() REQUIRE failure if DLZ
			was defined. [RT #16574]

Mark Andrews's avatar
Mark Andrews committed
48
2124.	[security]	It was possible to dereference a freed fetch
49
			context. [RT #16584]
Mark Andrews's avatar
9.5.0a1    
Mark Andrews committed
50
51
52

	--- 9.5.0a1 released ---

53
54
55
2123.	[func]		Use Doxygen to generate internal documention.
			[RT #11398]

56
57
58
2122.	[func]		Experimental http server and statistics support
			for named via xml.

59
60
61
2121.	[func]		Add a 10 slot dead masters cache (LRU) with a 600
			second timeout. [RT #16553]

62
63
2120.	[doc]		Fix markup on nsupdate man page. [RT #16556]

64
65
66
67
2119.	[compat]	libbind: allow res_init() to succeed enough to
			return the default domain even if it was unable
			to allocate memory.

68
69
70
71
2118.	[bug]		Handle response with long chains of domain name
			compression pointers which point to other compression
			pointers. [RT #16427]

72
73
74
75
76
77
78
2117.	[bug]		DNSSEC fixes: named could fail to cache NSEC records
			which could lead to validation failures.  named didn't
			handle negative DS responses that were in the process
			of being validated.  Check CNAME bit before accepting
			NODATA proof. To be able to ignore a child NSEC there
			must be SOA (and NS) set in the bitmap. [RT #16399]

79
80
81
2116.	[bug]		'rndc reload' could cause the cache to continually
			be cleaned. [RT #16401]

82
83
84
2115.	[bug]		'rndc reconfig' could trigger a INSIST if the
			number of masters for a zone was reduced. [RT #16444]

85
2114.	[bug]		dig/host/nslookup: searches for names with multiple
Mark Andrews's avatar
Mark Andrews committed
86
			labels were failing. [RT #16447]
87

88
89
90
2113.	[bug]		nsupdate: if a zone is specified it should be used
			for server discover. [RT# 16455]

91
92
2112.	[security]	Warn if weak RSA exponent is used. [RT #16460]

93
94
95
2111.	[bug]		Fix a number of errors reported by Coverity.
			[RT #16507]

96
97
98
2110.	[bug]		"minimal-response yes;" interacted badly with BIND 8
			priming queries. [RT #16491]

99
100
2109.	[port]		libbind: silence aix 5.3 compiler warnings. [RT #16502]

101
102
2108.	[func]		DHCID support. [RT #16456]

103
104
2107.	[bug]		dighost.c: more cleanup of buffers. [RT #16499]

105
106
2106.	[func]		'rndc status' now reports named's version. [RT #16426]

107
108
2105.	[func]		GSS-TSIG support (RFC 3645).

109
110
2104.	[port]		Fix Solaris SMF error message.

111
112
113
2103.	[port]		Add /usr/sfw to list of locations for OpenSSL
			under Solaris.

114
115
2102.	[port]		Silence solaris 10 warnings.

116
117
118
2101.	[bug]		OpenSSL version checks were not quite right.
			[RT #16476]

119
120
121
2100.	[port]		win32: copy libeay32.dll to Build\Debug.
			Copy Debug\named-checkzone to Debug\named-compilezone.

122
123
2099.	[port]		win32: more manifiest issues.

Mark Andrews's avatar
Mark Andrews committed
124
2098.	[bug]		Race in rbtdb.c:no_references(), which occasionally
125
126
			triggered an INSIST failure about the node lock
			reference.  [RT #16411]
127

128
129
130
2097.	[bug]		named could reference a destroyed memory context
			after being reloaded / reconfigured. [RT #16428]

131
132
133
2096.	[bug]		libbind: handle applications that fail to detect
			res_init() failures better.

134
135
136
2095.	[port]		libbind: alway prototype inet_cidr_ntop_ipv6() and
			net_cidr_ntop_ipv6(). [RT #16388]
 
137
138
2094.	[contrib]	Update named-bootconf.  [RT# 16404]

139
140
2093.	[bug]		named-checkzone -s was broken.

141
142
143
144
2092.	[bug]		win32: dig, host, nslookup.  Use registry config
			if resolv.conf does not exist or no nameservers
			listed. [RT #15877] 

145
146
2091.	[port]		dighost.c: race condition on cleanup. [RT #16417]

147
148
149
2090.	[port]		win32: Visual C++ 2005 command line manifest support.
			[RT #16417]

150
151
152
153
154
155
156
157
2089.	[security]	Raise the minimum safe OpenSSL versions to
			OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
			prior to these have known security flaws which
			are (potentially) exploitable in named. [RT #16391]

2088.	[security]	Change the default RSA exponent from 3 to 65537.
			[RT #16391]

158
159
160
2087.	[port]		libisc failed to compile on OS's w/o a vsnprintf.
			[RT #16382]

161
162
163
2086.	[port]		libbind: FreeBSD now has get*by*_r() functions.
			[RT #16403]

164
165
2085.	[doc]		win32: added index.html and README to zip. [RT #16201]

166
167
2084.	[contrib]	dbus update for 9.3.3rc2.

168
169
2083.	[port]		win32: Visual C++ 2005 support.

170
171
2082.	[doc]		Document 'cache-file' as a test only option.

172
173
174
2081.	[port]		libbind: minor 64-bit portability fix in memcluster.c.
			[RT #16360]

175
176
177
2080.	[port]		libbind: res_init.c did not compile on older versions
			of Solaris. [RT #16363]

178
179
180
2079.	[bug]		The lame cache was not handling multiple types
			correctly. [RT #16361]

181
182
183
184
185
186
2078.	[bug]		dnssec-checkzone output style "default" was badly
			named.  It is now called "relative". [RT #16326]

2077.	[bug]		'dnssec-signzone -O raw' wasn't outputing the
			complete signed zone. [RT #16326]

187
188
189
2076.	[bug]		Several files were missing #include <config.h>
			causing build failures on OSF. [RT #16341]

190
191
192
2075.	[bug]		The spillat timer event hander could leak memory.
			[RT #16357]

Mark Andrews's avatar
Mark Andrews committed
193
2074.	[bug]		dns_request_createvia2(), dns_request_createvia3(),
194
195
196
			dns_request_createraw2() and dns_request_createraw3()
			failed to send multiple UDP requests. [RT #16349]

197
198
199
2073.	[bug]		Incorrect semantics check for update policy "wildcard".
			[RT #16353]

200
201
202
2072.	[bug]		We were not generating valid HMAC SHA digests.
			[RT #16320]

203
204
205
2071.	[port]		Test whether gcc accepts -fno-strict-aliasing.
			[RT #16324]

206
207
208
2070.	[bug]		The remote address was not always displayed when
			reporting dispatch failures. [RT #16315]

209
210
2069.	[bug]		Cross compiling was not working. [RT #16330]

211
212
213
2068.	[cleanup]	Lower incremental tuning message to debug 1.
			[RT #16319]

214
215
216
2067.	[bug]		'rndc' could close the socket too early triggering
			a INSIST under Windows. [RT #16317]

217
2066.	[security]	Handle SIG queries gracefully. [RT #16300]
Mark Andrews's avatar
Mark Andrews committed
218

219
220
221
2065.	[bug]		libbind: probe for HPUX prototypes for
			endprotoent_r() and endservent_r().  [RT 16313]

222
223
2064.	[bug]		libbind: silence AIX compiler warnings. [RT #16218]

224
225
226
2063.	[bug]		Change #1955 introduced a bug which caused the first
			'rndc flush' call to not free memory. [RT #16244]

Mark Andrews's avatar
Mark Andrews committed
227
2062.	[bug]		'dig +nssearch' was reusing a buffer before it had
228
229
			been returned by the socket code. [RT #16307]

230
231
2061.	[bug]		Accept expired wildcard message reversed. [RT #16296]

232
233
234
2060.	[bug]		Enabling DLZ support could leave views partially
			configured. [RT #16295]

235
236
237
2059.	[bug]		Search into cache rbtdb could trigger an INSIST
			failure while cleaning up a stale rdataset.
			[RT #16292]
238

239
2058.	[bug]		Adjust how we calculate rtt estimates in the presence
Mark Andrews's avatar
Mark Andrews committed
240
			of authoritative servers that drop EDNS and/or CD
241
242
243
			requests.  Also fallback to EDNS/512 and plain DNS
			faster for zones with less than 3 servers.  [RT #16187]

244
245
246
2057.	[bug]		Make setting "ra" dependent on both allow-query-cache
			and allow-recursion. [RT #16290]

247
248
249
2056.	[bug]		dig: ixfr= was not being treated case insensitively
			at all times. [RT #15955]

250
251
252
2055.	[bug]		Missing goto after dropping multicast query.
			[RT #15944]

253
254
255
2054.	[port]		freebsd: do not explicitly link against -lpthread.
			[RT #16170]

256
257
2053.	[port]		netbsd:libbind: silence compiler warnings. [RT #16220]

258
259
260
2052.	[bug]		'rndc' improve connect failed message to report
			the failing address. [RT #15978]

261
262
2051.	[port]		More strtol() fixes. [RT #16249]

263
264
265
2050.	[bug]		Parsing of NSAP records was not case insensitive.
			[RT #16287]

266
267
268
269
270
2049.	[bug]		Restore SOA before AXFR when falling back from
			a attempted IXFR when transfering in a zone.
			Allow a initial SOA query before attempting
			a AXFR to be requested. [RT #16156]

271
272
273
274
275
2048.	[bug]		It was possible to loop forever when using
			avoid-v4-udp-ports / avoid-v6-udp-ports when
			the OS always returned the same local port.
			[RT #16182]

276
277
278
2047.	[bug]		Failed to initialise the interface flags to zero.
			[RT #16245]

279
2046.	[bug]		rbtdb.c:rdataset_setadditional() could cause duplicate
280
			cleanup [RT #16247].
281

282
2045.	[func]		Use lock buckets for acache entries to limit memory
283
			consumption. [RT #16183]
284

285
2044.	[port]		Add support for atomic operations for Itanium.
286
			[RT #16179]
287

288
289
290
2043.	[port]		nsupdate/nslookup: Force the flushing of the prompt
			for interactive sessions. [RT#16148]

291
292
293
2042.	[bug]		named-checkconf was incorrectly rejecting the
			logging category "config". [RT #16117]

294
295
296
2041.	[bug]		"configure --with-dlz-bdb=yes" produced a bad
			set of libraries to be linked. [RT #16129]

297
298
2040.	[bug]		rbtdb no_references() could trigger an INSIST
			failure with --enable-atomic.  [RT #16022]
299

300
2039.	[func]		Check that all buffers passed to the socket code
Mark Andrews's avatar
Mark Andrews committed
301
			have been retrieved when the socket event is freed.
302
303
304
305
306
			[RT #16122]

2038.	[bug]		dig/nslookup/host was unlinking from wrong list
			when handling errors. [RT #16122]

307
308
309
310
2037.	[func]		When unlinking the first or last element in a list
			check that the list head points to the element to
			be unlinked. [RT #15959]

311
312
313
2036.	[bug]		'rndc recursing' could cause trigger a REQUIRE.
			[RT #16075]

314
315
316
317
2035.	[func]		Make falling back to TCP on UDP refresh failure
			optional. Default "try-tcp-refresh yes;" for BIND 8
			compatibility. [RT #16123]

318
319
2034.	[bug]		gcc: set -fno-strict-aliasing. [RT #16124]

320
321
322
2033.	[bug]		We wern't creating multiple client memory contexts
			on demand as expected. [RT #16095]

323
324
2032.	[bug]		Remove a INSIST in query_addadditional2(). [RT #16074]

325
326
327
2031.	[bug]		Emit a error message when "rndc refresh" is called on
			a non slave/stub zone. [RT # 16073]

328
329
330
2030.	[bug]		We were being overly conservative when disabling
			openssl engine support. [RT #16030]

331
332
333
2029.	[bug]		host printed out the server multiple times when
			specified on the command line. [RT #15992]

Mark Andrews's avatar
Mark Andrews committed
334
2028.	[port]		linux: socket.c compatability for old systems.
335
336
			[RT #16015]

Mark Andrews's avatar
Mark Andrews committed
337
2027.	[port]		libbind: Solaris x86 support. [RT #16020]
338

339
340
341
2026.	[bug]		Rate limit the two recursive client exceeded messages.
			[RT #16044]

342
343
2025.	[func]		Update "zone serial unchanged" message. [RT #16026]

344
345
346
2024.	[bug]		named emited spurious "zone serial unchanged"
			messages on reload. [RT #16027]

347
348
349
2023.	[bug]		"make install" should create ${localstatedir}/run and
			${sysconfdir} if they do not exist. [RT #16033]

350
351
352
353
354
2022.	[bug]		If dnssec validation is disabled only assert CD if
			CD was requested. [RT #16037]

2021.	[bug]		dnssec-enable no; triggered a REQUIRE. [RT #16037]

355
356
2020.	[bug]		rdataset_setadditional() could leak memory. [RT #16034]

357
358
359
2019.	[tuning]	Reduce the amount of work performed per quantum
			when cleaning the cache. [RT #15986]

360
361
362
363
2018.	[bug]		Checking if the HMAC MD5 private file was broken.
			[RT #15960]

2017.	[bug]		allow-query default was not correct. [RT #15946]
364

365
366
367
368
2016.	[bug]		Return a partial answer if recursion is not
			allowed but requested and we had the answer
			to the original qname. [RT #15945]

369
370
371
372
373
374
2015.	[cleanup]	use-additional-cache is now acache-enable for
			consistancy.  Default acache-enable off in BIND 9.4
			as it requires memory usage to be configured.
			It may be enabled by default in BIND 9.5 once we
			have more experience with it.

Shane Kerr's avatar
Shane Kerr committed
375
376
377
2014.	[func]		Statistics about acache now recorded and sent
			to log. [RT #15976]

378
379
380
2013.	[bug]		Handle unexpected TSIGs on unsigned AXFR/IXFR
			responses more gracefully. [RT #15941]

381
382
383
2012.	[func]		Don't insert new acache entries if acache is full.
			[RT #15970]

384
385
386
387
2011.	[func]		dnssec-signzone can now update the SOA record of
			the signed zone, either as an increment or as the
			system time(). [RT #15633]

388
389
2010.	[placeholder]	rt15958

390
391
2009.	[bug]		libbind: coverity fixes. [RT #15808]

392
393
394
395
396
397
398
2008.	[func]		It is now posssible to enable/disable DNSSEC
			validation from rndc.  This is useful for the
			mobile hosts where the current connection point
			breaks DNSSEC (firewall/proxy).  [RT #15592]

				rndc validation newstate [view]

399
400
401
402
2007.	[func]		It is now possible to explicitly enable DNSSEC
			validation.  default dnssec-validation no; to
			be changed to yes in 9.5.0.  [RT #15674]

403
404
405
406
407
408
409
410
411
412
413
2006.	[security]	Allow-query-cache and allow-recursion now default
			to the builtin acls "localnets" and "localhost".

			This is being done to make caching servers less
			attractive as reflective amplifying targets for
			spoofed traffic.  This still leave authoritative
			servers exposed.

			The best fix is for full BCP 38 deployment to
			remove spoofed traffic.

414
415
416
417
2005.	[bug]		libbind: Retransmission timeouts should be
			based on which attempt it is to the nameserver
			and not the nameserver itself. [RT #13548]

418
419
420
421
2004.	[bug]		dns_tsig_sign() could pass a NULL pointer to
			dst_context_destroy() when cleaning up after a
			error. [RT #15835]

422
423
424
425
426
2003.	[bug]		libbind: The DNS name/address lookup functions could
			occasionally follow a random pointer due to
			structures not being completely zeroed. [RT #15806]

2002.	[bug]		libbind: tighten the constraints on when
427
428
			struct addrinfo._ai_pad exists.  [RT #15783]

429
430
431
432
2001.	[func]		Check the KSK flag when updating a secure dynamic zone.
			New zone option "update-check-ksk yes;".  [RT #15817]

2000.	[bug]		memmove()/strtol() fix was incomplete. [RT #15812]
433

434
435
1999.	[func]		Implement "rrset-order fixed". [RT #13662]

436
437
438
439
1998.	[bug]		Restrict handling of fifos as sockets to just SunOS.
			This allows named to connect to entropy gathering
			daemons that use fifos instead of sockets. [RT #15840]

440
441
442
443
1997.	[bug]		Named was failing to replace negative cache entries
			when a positive one for the type was learnt.
			[RT #15818]

444
445
446
1996.	[bug]		nsupdate: if a zone has been specified it should
			appear in the output of 'show'. [RT #15797]

447
448
449
1995.	[bug]		'host' was reporting multiple "is an alias" messages.
			[RT #15702]

450
451
1994.	[port]		OpenSSL 0.9.8 support. [RT #15694]

452
453
454
455
1993.	[bug]		Log messsage, via syslog, were missing the space
			after the timestamp if "print-time yes" was specified.
			[RT #15844]

Mark Andrews's avatar
Mark Andrews committed
456
1992.	[bug]		Not all incoming zone transfer messages included the
457
458
			view.  [RT #15825]

459
460
461
462
1991.	[cleanup]	The configuration data, once read, should be treated
			as readonly.  Expand the use of const to enforce this
			at compile time. [RT #15813]

463
464
465
466
1990.	[bug]		libbind:  isc's override of broken gettimeofday()
			implementions was not always effective.
			[RT #15709]

467
468
469
1989.	[bug]		win32: don't check the service password when
			re-installing. [RT #15882]

470
471
472
1988.	[bug]		Remove a bus error from the SHA256/SHA512 support.
			[RT #15878]

473
474
1987.	[func]		DS/DLV SHA256 digest algorithm support. [RT #15608]

475
476
1986.	[func]		Report when a zone is removed. [RT #15849]

477
478
479
480
481
482
483
484
485
486
487
1985.	[protocol]	DLV has now been assigned a official type code of
			32769. [RT #15807]

			Note: care should be taken to ensure you upgrade
			both named and dnssec-signzone at the same time for
			zones with DLV records where named is the master
			server for the zone.  Also any zones that contain
			DLV records should be removed when upgrading a slave
			zone.  You do not however have to upgrade all
			servers for a zone with DLV records simultaniously.

488
489
490
1984.	[func]		dig, nslookup and host now advertise a 4096 byte
			EDNS UDP buffer size by default. [RT #15855]

491
492
493
1983.	[func]		Two new update policies.  "selfsub" and "selfwild".
			[RT #12895]

494
495
496
497
1982.	[bug]		DNSKEY was being accepted on the parent side of
			a delegation.  KEY is still accepted there for
			RFC 3007 validated updates. [RT #15620]

498
499
500
1981.	[bug]		win32: condition.c:wait() could fail to reattain
			the mutex lock.

501
502
503
1980.	[func]		dnssec-signzone: output the SOA record as the
			first record in the signed zone. [RT #15758]

504
505
506
1979.	[port]		linux: allow named to drop core after changing
			user ids. [RT #15753]

507
508
509
1978.	[port]		Handle systems which have a broken recvmsg().
			[RT #15742]

510
511
1977.	[bug]		Silence noisy log message. [RT #15704]

512
513
1976.	[bug]		Handle systems with no IPv4 addresses. [RT #15695]

514
515
516
1975.	[bug]		libbind: isc_gethexstring() could misparse multi-line
			hex strings with comments. [RT #15814]

517
518
519
1974.	[doc]		List each of the zone types and associated zone
			options seperately in the ARM.

520
521
522
1973.	[func]		TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
			HMACSHA512 support. [RT #13606]

523
524
525
1972.	[contrib]	DBUS dynamic forwarders integation from
			Jason Vas Dias <jvdias@redhat.com>.

526
1971.	[port]		linux: make detection of missing IF_NAMESIZE more
527
			robust. [RT #15443]
528

529
530
531
1970.	[bug]		nsupdate: adjust UDP timeout when falling back to
			unsigned SOA query. [RT #15775]

532
533
534
1969.	[bug]		win32: the socket code was freeing the socket
			structure too early. [RT #15776]

535
536
1968.	[bug]		Missing lock in resolver.c:validated(). [RT #15739]

537
538
1967.	[func]		dig/nslookup/host: warn about missing "QR". [RT #15779]

Mark Andrews's avatar
Mark Andrews committed
539
1966.	[bug]		Don't set CD when we have fallen back to plain DNS.
540
541
			[RT #15727]

542
543
544
1965.	[func]		Suppress spurious "recusion requested but not
			available" warning with 'dig +qr'. [RT #15780].

545
546
1964.	[func]		Seperate out MX and SRV to CNAME checks. [RT #15723]

547
548
549
1963.	[port]		Tru64 4.0E doesn't support send() and recv(). 
			[RT #15586]

550
551
552
1962.	[bug]		Named failed to clear old update-policy when it
			was removed. [RT #15491]

553
554
555
1961.	[bug]		Check the port and address of responses forwarded
			to dispatch. [RT #15474]

556
557
558
1960.	[bug]		Update code should set NSEC ttls from SOA MINIMUM.
			[RT #15465]

559
560
561
562
1959.	[func]		Control the zeroing of the negative response TTL to
			a soa query.  Defaults "zero-no-soa-ttl yes;" and
			"zero-no-soa-ttl-cache no;". [RT #15460]

563
564
565
1958.	[bug]		Named failed to update the zone's secure state
			until the zone was reloaded. [RT #15412]

566
567
568
1957.	[bug]		Dig mishandled responses to class ANY queries.
			[RT #15402]

569
570
571
572
1956.	[bug]		Improve cross compile support, 'gen' is now built
			by native compiler.  See README for additional
			cross compile support information. [RT #15148]

573
574
1955.	[bug]		Pre-allocate the cache cleaning interator. [RT #14998]

Mark Andrews's avatar
Mark Andrews committed
575
1954.	[func]		Named now falls back to advertising EDNS with a
576
577
578
			512 byte receive buffer if the initial EDNS queries
			fail.  [RT #14852]

Mark Andrews's avatar
Mark Andrews committed
579
1953.	[func]		The maximum EDNS UDP response named will send can
580
581
582
583
			now be set in named.conf (max-udp-size).  This is
			independent of the advertised receive buffer
			(edns-udp-size). [RT #14852]

584
585
586
1952.	[port]		hpux: tell the linker to build a runtime link
			path "-Wl,+b:". [RT #14816].

587
588
589
590
1951.	[security]	Drop queries from particular well known ports.
			Don't return FORMERR to queries from particular
			well known ports.  [RT #15636]
			
591
592
593
594
1950.	[port]		Solaris 2.5.1 and earlier cannot bind() then connect()
			a TCP socket. This prevents the source address being
			set for TCP connections. [RT #15628]

595
596
1949.	[func]		Addition memory leakage checks. [RT #15544]

597
598
599
600
1948.	[bug]		If was possible to trigger a REQUIRE failure in
			xfrin.c:maybe_free() if named ran out of memory.
			[RT #15568]

601
602
603
604
605
1947.	[func]		It is now possible to configure named to accept
			expired RRSIGs.  Default "dnssec-accept-expired no;".
			Setting "dnssec-accept-expired yes;" leaves named
			vulnerable to replay attacks.  [RT #14685]

606
607
608
1946.	[bug]		resume_dslookup() could trigger a REQUIRE failure
			when using forwarders. [RT #15549]

609
1945.	[cleanup]	dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
Mark Andrews's avatar
Mark Andrews committed
610
			To generate a RSAMD5 key you must explicitly request
611
612
			RSAMD5. [RT #13780]
			
613
614
615
1944.	[cleanup]	isc_hash_create() does not need a read/write lock.
			[RT #15522]

Mark Andrews's avatar
Mark Andrews committed
616
1943.	[bug]		Set the loadtime after rolling forward the journal.
617
618
			[RT #15647]

619
620
621
622
1942.	[bug]		If the name of a DNSKEY match that of one in
			trusted-keys do not attempt to validate the DNSKEY
			using the parents DS RRset. [RT #15649]

623
624
625
1941.	[bug]		ncache_adderesult() should set eresult even if no
			rdataset is passed to it. [RT #15642]

626
627
628
1940.	[bug]		Fixed a number of error conditions reported by
			Coverity.

629
630
631
632
633
634
635
1939.	[bug]		The resolver could dereference a null pointer after
			validation if all the queries have timed out.
			[RT #15528]

1938.	[bug]		The validator was not correctly handling unsecure
			negative responses at or below a SEP. [RT #15528]

636
637
1937.	[bug]		sdlz doesn't handle RRSIG records. [RT #15564]

Mark Andrews's avatar
Mark Andrews committed
638
1936.	[bug]		The validator could leak memory. [RT #15544]
639

640
641
642
643
644
645
1935.	[bug]		'acache' was DO sensitive. [RT #15430]

1934.	[func]		Validate pending NS RRsets, in the authority section,
			prior to returning them if it can be done without
			requiring DNSKEYs to be fetched.  [RT #15430]

Mark Andrews's avatar
Mark Andrews committed
646
1933.	[bug]		dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
647

648
649
1932.	[bug]		hpux: LDFLAGS was getting corrupted. [RT #15530]

650
651
1931.	[bug]		Per-client mctx could require a huge amount of memory,
			particularly for a busy caching server. [RT #15519]
652

653
654
655
656
1930.	[port]		HPUX: ia64 support. [RT #15473]

1929.	[port]		FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.

657
658
1928.	[bug]		Race in rbtdb.c:currentversion(). [RT #15517]

659
660
661
1927.	[bug]		Access to soanode or nsnode in rbtdb violated the
			lock order rule and could cause a dead lock.
			[RT# 15518]
662

663
1926.	[bug]		The Windows installer did not check for empty
664
665
			passwords.  BINDinstall was being installed in
			the wrong place. [RT #15483]
666

667
668
669
1925.	[port]		All outer level AC_TRY_RUNs need cross compiling
			defaults. [RT #15469]

670
671
1924.	[port]		libbind: hpux ia64 support. [RT #15473]

672
673
1923.	[bug]		ns_client_detach() called too early. [RT #15499]

674
675
676
1922.	[bug]		check-tool.c:setup_logging() missing call to
			dns_log_setcontext().

Mark Andrews's avatar
Mark Andrews committed
677
1921.	[bug]		Client memory contexts were not using internal
678
679
			malloc. [RT# 15434]

Mark Andrews's avatar
update    
Mark Andrews committed
680
1920.	[bug]		The cache rbtdb lock array was too small to
681
682
683
			have the desired performance characteristics.
			[RT #15454]

684
685
686
1919.	[contrib]	queryperf: a set of new features: collecting/printing
			response delays, printing intermediate results, and
			adjusting query rate for the "target" qps.
687

688
689
1918.	[bug]		Memory leak when checking acls. [RT #15391]

690
691
692
1917.	[doc]		funcsynopsisinfo wasn't being treated as verbatim
			when generating man pages. [RT #15385]

693
694
1916.	[func]		Integrate contibuted IDN code from JPNIC. [RT #15383]

695
696
1915.	[bug]		dig +ndots was broken. [RT #15215]

697
698
699
700
1914.	[protocol]	DS is required to accept mnemonic algorithms
			(RFC 4034).  Still emit numeric algorithms for
			compatability with RFC 3658. [RT #15354]

701
702
1913.	[func]		Integrate contibuted DLZ code into named. [RT #11382]

Mark Andrews's avatar
Mark Andrews committed
703
1912.	[port]		aix: atomic locking for powerpc. [RT #15020]
704

Mark Andrews's avatar
Mark Andrews committed
705
1911.	[bug]		Update windows socket code. [RT #14965]
706

Mark Andrews's avatar
Mark Andrews committed
707
1910.	[bug]		dig's +sigchase code overhauled. [RT #14933]
708

Mark Andrews's avatar
Mark Andrews committed
709
1909.	[bug]		The DLV code has been re-worked to make no longer
710
711
			query order sensitive. [RT #14933]

Mark Andrews's avatar
Mark Andrews committed
712
1908.	[func]		dig now warns if 'RA' is not set in the answer when
713
714
715
716
			'RD' was set in the query.  host/nslookup skip servers
			that fail to set 'RA' when 'RD' is set unless a server
			is explicitly set.  [RT #15005]

Mark Andrews's avatar
Mark Andrews committed
717
1907.	[func]		host/nslookup now continue (default)/fail on SERVFAIL.
718
719
			[RT #15006]

Mark Andrews's avatar
Mark Andrews committed
720
1906.	[func]		dig now has a '-q queryname' and '+showsearch' options.
721
722
			[RT #15034]

Mark Andrews's avatar
Mark Andrews committed
723
1905.	[bug]		Strings returned from cfg_obj_asstring() should be
724
725
726
727
			treated as read-only.  The prototype for 
			cfg_obj_asstring() has been updated to reflect this.
			[RT #15256]

Mark Andrews's avatar
Mark Andrews committed
728
1904.	[func]		Automatic empty zone creation for D.F.IP6.ARPA and
729
730
731
732
733
734
			friends.  Note: RFC 1918 zones are not yet covered by
			this but are likely to be in a future release.

			New options: empty-server, empty-contact,
			empty-zones-enable and disable-empty-zone.

Mark Andrews's avatar
Mark Andrews committed
735
1903.	[func]		ISC string copy API.
736

Mark Andrews's avatar
Mark Andrews committed
737
1902.	[func]		Attempt to make the amount of work performed in a
738
739
740
741
742
743
			iteration self tuning.  The covers nodes clean from
			the cache per iteration, nodes written to disk when
			rewriting a master file and nodes destroyed per
			iteration when destroying a zone or a cache.
			[RT #14996]

Mark Andrews's avatar
Mark Andrews committed
744
1901.	[cleanup]	Don't add DNSKEY records to the additional section.
745

Mark Andrews's avatar
Mark Andrews committed
746
1900.	[bug]		ixfr-from-differences failed to ensure that the
747
748
			serial number increased. [RT #15036]

Mark Andrews's avatar
Mark Andrews committed
749
1899.	[func]		named-checkconf now validates update-policy entries.
750
751
			[RT #14963]

Mark Andrews's avatar
Mark Andrews committed
752
1898.	[bug]		Extend ISC_SOCKADDR_FORMATSIZE and
753
754
			ISC_NETADDR_FORMATSIZE to allow for scope details.

Mark Andrews's avatar
Mark Andrews committed
755
1897.	[func]		x86 and x86_64 now have seperate atomic locking
756
757
			implementations.

Mark Andrews's avatar
Mark Andrews committed
758
1896.	[bug]		Recursive clients soft quota support wasn't working
759
760
			as expected. [RT #15103]

Mark Andrews's avatar
Mark Andrews committed
761
1895.	[bug]		A escaped character is, potentially, converted to
762
763
			the output character set too early. [RT #14666]

Mark Andrews's avatar
Mark Andrews committed
764
1894.	[doc]		Review ARM for BIND 9.4.
765

Mark Andrews's avatar
Mark Andrews committed
766
1893.	[port]		Use uintptr_t if available. [RT #14606]
767

Mark Andrews's avatar
Mark Andrews committed
768
1892.	[func]		Support for SPF rdata type. [RT #15033]
769

Mark Andrews's avatar
Mark Andrews committed
770
1891.	[port]		freebsd: pthread_mutex_init can fail if it runs out
771
772
			of memory. [RT #14995]

Mark Andrews's avatar
Mark Andrews committed
773
1890.	[func]		Raise the UDP recieve buffer size to 32k if it is
774
775
			less than 32k. [RT #14953]

Mark Andrews's avatar
Mark Andrews committed
776
1889.	[port]		sunos: non blocking i/o support. [RT #14951]
777

Mark Andrews's avatar
Mark Andrews committed
778
1888.	[func]		Support for IPSECKEY rdata type. [RT #14967]
779

Mark Andrews's avatar
Mark Andrews committed
780
1887.	[bug]		The cache could delete expired records too fast for
781
782
			clients with a virtual time in the past. [RT #14991]

Mark Andrews's avatar
Mark Andrews committed
783
1886.	[bug]		fctx_create() could return success even though it
784
785
			failed. [RT #14993]

Mark Andrews's avatar
Mark Andrews committed
786
1885.	[func]		dig: report the number of extra bytes still left in
787
788
			the packet after processing all the records.

Mark Andrews's avatar
Mark Andrews committed
789
1884.	[cleanup]	dighost.c: move external declarations into <dig/dig.h>.
790

Mark Andrews's avatar
Mark Andrews committed
791
1883.	[bug]		dnssec-signzone, dnssec-keygen: handle negative debug
792
793
			levels. [RT #14962]

Mark Andrews's avatar
Mark Andrews committed
794
1882.	[func]		Limit the number of recursive clients that can be
795
796
797
798
			waiting for a single query (<qname,qtype,qclass>) to
			resolve.  New options clients-per-query and
			max-clients-per-query.

Mark Andrews's avatar
Mark Andrews committed
799
1881.	[func]		Add a system test for named-checkconf. [RT #14931]
800

Mark Andrews's avatar
Mark Andrews committed
801
1880.	[func]		The lame cache is now done on a <qname,qclass,qtype>
802
803
804
			basis as some servers only appear to be lame for
			certain query types.  [RT #14916]

Mark Andrews's avatar
Mark Andrews committed
805
1879.	[func]		"USE INTERNAL MALLOC" is now runtime selectable.
806
807
			[RT #14892]

Mark Andrews's avatar
Mark Andrews committed
808
1878.	[func]		Detect duplicates of UDP queries we are recursing on
809
			and drop them.  New stats category "duplicates".
810
			[RT #2471]
811

Mark Andrews's avatar
Mark Andrews committed
812
1877.	[bug]		Fix unreasonably low quantum on call to
813
814
815
			dns_rbt_destroy2().  Remove unnecessay unhash_node()
			call. [RT #14919]

Mark Andrews's avatar
Mark Andrews committed
816
1876.	[func]		Additional memory debugging support to track size
Mark Andrews's avatar
Mark Andrews committed
817
			and mctx arguments. [RT #14814]
818

Mark Andrews's avatar
Mark Andrews committed
819
1875.	[bug]		process_dhtkey() was using the wrong memory context
820
821
			to free some memory. [RT #14890]

Mark Andrews's avatar
Mark Andrews committed
822
1874.	[port]		sunos: portability fixes. [RT #14814]
823

Mark Andrews's avatar
Mark Andrews committed
824
1873.	[port]		win32: isc__errno2result() now reports its caller.
825
826
			[RT #13753]

Mark Andrews's avatar
Mark Andrews committed
827
1872.	[port]		win32: Handle ERROR_NETNAME_DELETED.  [RT #13753]
828

Mark Andrews's avatar
Mark Andrews committed
829
1871.	[placeholder]
830

Mark Andrews's avatar
Mark Andrews committed
831
1870.	[func]		Added framework for handling multiple EDNS versions.
832
			[RT #14873]
833

Mark Andrews's avatar
Mark Andrews committed
834
1869.	[func]		dig can now specify the EDNS version when making
835
			a query. [RT #14873]
836

837
838
1868.	[func]		edns-udp-size can now be overridden on a per
			server basis. [RT #14851]
Mark Andrews's avatar
Mark Andrews committed
839

840
841
1867.	[bug]		It was possible to trigger a INSIST in
			dlv_validatezonekey(). [RT #14846]
Mark Andrews's avatar
Mark Andrews committed
842

843
844
1866.	[bug]		resolv.conf parse errors were being ignored by
			dig/host/nslookup. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
845

846
847
1865.	[bug]		Silently ignore nameservers in /etc/resolv.conf with
			bad addresses. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
848

849
850
851
1864.	[bug]		Don't try the alternative transfer source if you
			got a answer / transfer with the main source
			address. [RT #14802]
Mark Andrews's avatar
Mark Andrews committed
852

853
854
1863.	[bug]		rrset-order "fixed" error messages not complete.

855
856
857
858
859
860
861
1862.	[func]		Add additional zone data constancy checks.
			named-checkzone has extended checking of NS, MX and 
			SRV record and the hosts they reference.
			named has extended post zone load checks.
			New zone options: check-mx and integrity-check. 
			[RT #4940]

862
863
1861.	[bug]		dig could trigger a INSIST on certain malformed
			responses. [RT #14801]
Mark Andrews's avatar
Mark Andrews committed
864

865
866
1860.	[port]		solaris 2.8: hack_shutup_pthreadmutexinit was
			incorrectly set. [RT #14775]
Mark Andrews's avatar
Mark Andrews committed
867

868
1859.	[func]		Add support for CH A record. [RT #14695]
Mark Andrews's avatar
Mark Andrews committed
869

870
871
872
1858.	[bug]		The flush-zones-on-shutdown option wasn't being
			parsed. [RT #14686]

873
874
1857.	[bug]		named could trigger a INSIST() if reconfigured /
			reloaded too fast.  [RT #14673]
Mark Andrews's avatar
Mark Andrews committed
875

Rob Austein's avatar
regen    
Rob Austein committed
876
877
878
1856.	[doc]		Switch Docbook toolchain from DSSSL to XSL.
			[RT #11398]

879
880
881
1855.	[bug]		ixfr-from-differences was failing to detect changes
			of ttl due to dns_diff_subtract() was ignoring the ttl
			of records.  [RT #14616]
Mark Andrews's avatar
Mark Andrews committed
882

883
884
885
1854.	[bug]		lwres also needs to know the print format for
			(long long).  [RT #13754]

886
887
888
1853.	[bug]		Rework how DLV interacts with proveunsecure().
			[RT #13605]

889
890
891
1852.	[cleanup]	Remove last vestiges of dnssec-signkey and
			dnssec-makekeyset (removed from Makefile years ago).

892
893
1851.	[doc]		Doxygen comment markup. [RT #11398]

894
895
1850.	[bug]		Memory leak in lwres_getipnodebyaddr(). [RT #14591]

896
897
898
1849.	[doc]		All forms of the man pages (docbook, man, html) should
			have consistant copyright dates.

899
900
1848.	[bug]		Improve SMF integration. [RT #13238]

901
1847.	[bug]		isc_ondestroy_init() is called too late in
Mark Andrews's avatar
Mark Andrews committed
902
			dns_rbtdb_create()/dns_rbtdb64_create(). 
903
904
			[RT #13661]
			
905
906
907
1846.	[contrib]	query-loc-0.3.0 from Stephane Bortzmeyer
			<bortzmeyer@nic.fr>.

908
909
910
1845.	[bug]		Improve error reporting to distingish between
			accept()/fcntl() and socket()/fcntl() errors.
			[RT #13745]
Mark Andrews's avatar
Mark Andrews committed
911

912
913
914
915
916
917
1844.	[bug]		inet_pton() accepted more that 4 hexadecimal digits
			for each 16 bit piece of the IPv6 address.  The text
			representation of a IPv6 address has been tighted
			to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
			[RT #5662]

918
919
920
921
922
1843.	[cleanup]	CINCLUDES takes precedence over CFLAGS.  This helps
			when CFLAGS contains "-I /usr/local/include"
			resulting in old header files being used.

1842.	[port]		cmsg_len() could produce incorrect results on
923
924
			some platform. [RT #13744]

925
926
1841.	[bug]		"dig +nssearch" now makes a recursive query to
			find the list of nameservers to query. [RT #13694]
Mark Andrews's avatar
Mark Andrews committed
927

Mark Andrews's avatar
Mark Andrews committed
928
1840.	[func]		dnssec-signzone can now randomize signature end times
929
930
			(dnssec-signzone -j jitter). [RT #13609]

931
932
1839.	[bug]		<isc/hash.h> was not being installed.

933
934
1838.	[cleanup]	Don't allow Linux capabilities to be inherited.
			[RT #13707]
Mark Andrews's avatar
Mark Andrews committed
935

936
937
1837.	[bug]		Compile time option ISC_FACILITY was not effective
			for 'named -u <user>'.  [RT #13714]
Mark Andrews's avatar
Mark Andrews committed
938

939
940
1836.	[cleanup]	Silence compiler warnings in hash_test.c.

941
942
1835.	[bug]		Update dnssec-signzone's usage message. [RT #13657]

943
944
1834.	[bug]		Bad memset in rdata_test.c. [RT #13658]

945
946
1833.	[bug]		Race condition in isc_mutex_lock_profile(). [RT #13660]

947
948
949
1832.	[bug]		named fails to return BADKEY on unknown TSIG algorithm.
			[RT #13620]

950
951
1831.	[doc]		Update named-checkzone documentation. [RT#13604]

952
953
1830.	[bug]		adb lame cache has sence of test reversed. [RT #13600]

954
955
1829.	[bug]		win32: "pid-file none;" broken. [RT #13563]

956
957
958
1828.	[bug]		isc_rwlock_init() failed to properly cleanup if it
			encountered a error. [RT #13549]

959
960
1827.	[bug]		host: update usage message for '-a'. [RT #37116]

961
962
963
964
965
1826.	[bug]		Missing DESTROYLOCK() in isc_mem_createx() on out
			of memory error. [RT #13537]

1825.	[bug]		Missing UNLOCK() on out of memory error from in
			rbtdb.c:subtractrdataset(). [RT #13519]
966

967
968
969
1824.	[bug]		Memory leak on dns_zone_setdbtype() failure.
			[RT #13510]

970
971
972
1823.	[bug]		Wrong macro used to check for point to point interface.
			[RT#13418]

973
974
1822.	[bug]		check-names test for RT was reversed. [RT #13382]

Mark Andrews's avatar
Mark Andrews committed
975
976
1821.	[placeholder]

977
1820.	[bug]		Gracefully handle acl loops. [RT #13659]
Mark Andrews's avatar
Mark Andrews committed
978

979
980
981
982
1819.	[bug]		The validator needed to check both the algorithm and
			digest types of the DS to determine if it could be
			used to introduce a secure zone. [RT #13593]

983
984
1818.	[bug]		'named-checkconf -z' triggered an INSIST. [RT #13599]

985
1817.	[func]		Add support for additional zone file formats for
986
987
			improving loading performance.  The masterfile-format
			option in named.conf can be used to specify a
988
			non-default format.  A separate command
989
			named-compilezone was provided to generate zone files
990
991
992
			in the new format.  Additionally, the -I and -O options
			for dnssec-signzone specify the input and output
			formats.
993

994
995
1816.	[port]		UnixWare: failed to compile lib/isc/unix/net.c.
			[RT #13597]
Mark Andrews's avatar
Mark Andrews committed
996

997
998
999
1815.	[bug]		nsupdate triggered a REQUIRE if the server was set
			without also setting the zone and it encountered
			a CNAME and was using TSIG.  [RT #13086]
Mark Andrews's avatar
Mark Andrews committed
1000

1001
1814.	[func]		UNIX domain controls are now supported.
Mark Andrews's avatar
Mark Andrews committed
1002

1003
1004
1005
1006
1813.	[func]		Restructured the data locking framework using
			architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
1007
			x86, x86_64, alpha, powerpc, and mips are currently
1008
			supported.
1009

1010
1011
1012
1812.	[port]		win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
			[RT #13453]

1013
1014
1811.	[func]		Preserve the case of domain names in rdata during
			zone transfers. [RT #13547]
Mark Andrews's avatar
Mark Andrews committed
1015

1016
1017
1018
1810.	[bug]		configure, lib/bind/configure make different default
			decisions about whether to do a threaded build.
			[RT #13212]
Mark Andrews's avatar
Mark Andrews committed
1019

1020
1021
1809.	[bug]		"make distclean" failed for libbind if the platform
			is not supported.
Mark Andrews's avatar
Mark Andrews committed
1022

1023
1024
1808.	[bug]		zone.c:notify_zone() contained a race condition,
			zone->db could change underneath it.  [RT #13511]
Mark Andrews's avatar
Mark Andrews committed
1025

1026
1027
1807.	[bug]		When forwarding (forward only) set the active domain
			from the forward zone name. [RT #13526]
Mark Andrews's avatar
Mark Andrews committed
1028

1029
1030
1031
1806.	[bug]		The resolver returned the wrong result when a CNAME /
			DNAME was encountered when fetching glue from a
			secure namespace. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
1032

1033
1034
1805.	[bug]		Pending status was not being cleared when DLV was
			active. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
1035

1036
1037
1038
1804.	[bug]		Ensure that if we are queried for glue that it fits
			in the additional section or TC is set to tell the
			client to retry using TCP. [RT #10114]
Mark Andrews's avatar
Mark Andrews committed
1039

1040
1041
1803.	[bug]		dnssec-signzone sometimes failed to remove old
			RRSIGs. [RT #13483]
Mark Andrews's avatar
Mark Andrews committed
1042

1043
1802.	[bug]		Handle connection resets better. [RT #11280]
Mark Andrews's avatar
Mark Andrews committed
1044

1045
1046
1801.	[func]		Report differences between hints and real NS rrset
			and associated address records.
Mark Andrews's avatar
Mark Andrews committed
1047

1048
1049
1050
1800.	[bug]		Changes #1719 allowed a INSIST to be triggered.
			[RT #13428]

1051
1052
1799.	[bug]		'rndc flushname' failed to flush negative cache
			entries. [RT #13438]
Mark Andrews's avatar
Mark Andrews committed
1053

1054
1055
1798.	[func]		The server syntax has been extended to support a
			range of servers.  [RT #11132]
Mark Andrews's avatar
Mark Andrews committed
1056

1057
1058
1059
1797.	[func]		named-checkconf now check acls to verify that they
			only refer to existing acls. [RT #13101]

1060
1796.	[func]		"rndc freeze/thaw" now freezes/thaws all zones.
Mark Andrews's avatar
Mark Andrews committed
1061

Mark Andrews's avatar
Mark Andrews committed
1062
1795.	[bug]		"rndc dumpdb" was not fully documented.  Minor
1063
			formating issues with "rndc dumpdb -all".  [RT #13396]
Mark Andrews's avatar
Mark Andrews committed
1064

1065
1066
1794.	[func]		Named and named-checkzone can now both check for
			non-terminal wildcard records.
Mark Andrews's avatar
Mark Andrews committed
1067

1068
1793.	[func]		Extend adjusting TTL warning messages. [RT #13378]
Mark Andrews's avatar
Mark Andrews committed
1069

1070
1071
1792.	[func]		New zone option "notify-delay".  Specify a minimum
			delay between sets of NOTIFY messages.
Mark Andrews's avatar
Mark Andrews committed
1072

1073
1074
1791.	[bug]		'host -t a' still printed out AAAA and MX records.
			[RT #13230]
Mark Andrews's avatar
Mark Andrews committed
1075

1076
1077
1078
1790.	[cleanup]	Move lib/dns/sec/dst up into lib/dns.  This should
			allow parallel make to succeed.

1079
1080
1081
1789.	[bug]		Prerequisite test for tkey and dnssec could fail
			with "configure --with-libtool".

1082
1083
1084
1788.	[bug]		libbind9.la/libbind9.so needs to link against
			libisccfg.la/libisccfg.so.

1085
1086
1787.	[port]		HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.

1087
1088
1089
1090
1786.	[port]		AIX: libt_api needs to be taught to look for
			T_testlist in the main executable (--with-libtool).
			[RT #13239]

1091
1092
1093
1785.	[bug]		libbind9.la/libbind9.so needs to link against
			libisc.la/libisc.so.

1094
1095
1096
1097
1784.	[cleanup]	"libtool -allow-undefined" is the default.
			Leave hooks in configure to allow it to be set
			if needed in the future.

1098
1099
1100
1783.	[cleanup]	We only need one copy of libtool.m4, ltmain.sh in the
			source tree.

1101
1102
1782.	[port]		OSX: --with-libtool + --enable-libbind broke on
			__evOptMonoTime.  [RT #13219]
Mark Andrews's avatar
Mark Andrews committed
1103

1104
1781.	[port]		FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
Mark Andrews's avatar
Mark Andrews committed
1105

1106
1107
1780.	[bug]		Update libtool to 1.5.10.

1108
1109
1779.	[port]		OSF 5.1: libtool didn't handle -pthread correctly.

1110
1778.	[port]		HUX 11.11: fix broken IN6ADDR_ANY_INIT and
1111
1112
			IN6ADDR_LOOPBACK_INIT macros.

1113
1777.	[port]		OSF 5.1: fix broken IN6ADDR_ANY_INIT and
1114