CHANGES 254 KB
Newer Older
1
2
3
4
2445.	[doc]		ARM out-of-date on empty reverse zones (list includes
			RFC1918 address, but these are not yet compiled in).
			[RT #18578]

Mark Andrews's avatar
Mark Andrews committed
5
2444.	[port]		Linux, FreeBSD, AIX: Turn off path mtu discovery
6
7
			(clear DF) for UDP responses and requests.

8
9
10
11
12
2443.	[bug]		win32: UDP connect() would not generate an event,
			and so connected UDP sockets would never clean up.
			Fix this by doing an immediate WSAConnect() rather
			than an io completion port type for UDP.

13
14
2442.	[bug]		A lock could be destroyed twice. [RT# 18626]

15
16
17
18
19
20
21
22
23
2441.   [bug]           isc_radix_insert() could copy radix tree nodes
			incompletely. [RT #18573]

2440.   [bug]		named-checkconf used an incorrect test to determine
			if an ACL was set to none.

2439.   [bug]		Potential NULL dereference in dns_acl_isanyornone().
			[RT #18559]

24
2438.   [bug]		Timeouts could be logged incorrectly under win32.
Evan Hunt's avatar
Evan Hunt committed
25

Evan Hunt's avatar
Evan Hunt committed
26
27
28
2437.	[bug]		Sockets could be closed too early, leading to
			inconsistent states in the socket module. [RT #18298]

29
2436.	[security]	win32: UDP client handler can be shutdown. [RT #18576]
Mark Andrews's avatar
Mark Andrews committed
30

31
32
2435.	[bug]		Fixed an ACL memory leak affecting win32.

33
34
2434.	[bug]		Fixed a minor error-reporting bug in
			lib/isc/win32/socket.c.
Evan Hunt's avatar
Evan Hunt committed
35

36
37
2433.	[tuning]	Set initial timeout to 800ms.

38
39
40
41
42
43
44
2432.   [bug]		More Windows socket handling improvements.  Stop
			using I/O events and use IO Completion Ports
			throughout.  Rewrite the receive path logic to make
			it easier to support multiple simultaneous
			requestrs in the future.  Add stricter consistency
			checking as a compile-time option (define
			ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
Evan Hunt's avatar
Evan Hunt committed
45

46
47
2431.	[bug]		Acl processing could leak memory. [RT #18323]

48
49
50
51
2430.	[bug]		win32: isc_interval_set() could round down to
			zero if the input was less than NS_INTERVAL
			nanoseconds.  Round up instead. [RT #18549]

52
53
54
2429.	[doc]		nsupdate should be in section 1 of the man pages.
			[RT #18283]

55
56
57
2428.	[bug]		dns_iptable_merge() mishandled merges of negative
			tables. [RT #18409]

58
59
60
2427.	[func]		Treat DNSKEY queries as if "minimal-response yes;"
			was set. [RT #18528]

61
62
63
64
2426.	[bug]		libbind: inet_net_pton() can sometimes return the
			wrong value if excessively large netmasks are
			supplied. [RT #18512]

65
66
67
2425.	[bug]		named didn't detect unavailable query source addresses
			at load time. [RT #18536]

68
69
70
71
72
2424.	[port]		configure now probes for a working epoll
			implementation.  Allow the use of kqueue,
			epoll and /dev/poll to be selected at compile
			time. [RT #18277]
			
73
2423.   [security]	Randomize server selection on queries, so as to
Evan Hunt's avatar
Evan Hunt committed
74
75
76
77
78
79
                        make forgery a little more difficult.  Instead of
                        always preferring the server with the lowest RTT,
                        pick a server with RTT within the same 128
                        millisecond band.  [RT #18441]

2422.	[bug]		Handle the special return value of a empty node as
80
81
			if it was a NXRRSET in the validator. [RT #18447]

Evan Hunt's avatar
Evan Hunt committed
82
2421.	[func]		Add new command line option '-S' for named to specify
83
84
85
86
			the max number of sockets. [RT #18493]
			Use caution: this option may not work for some
			operating systems without rebuilding named.

87
88
89
90
91
92
2420.   [bug]		Windows socket handling cleanup.  Let the io
			completion event send out cancelled read/write
			done events, which keeps us from writing to memeory
			we no longer have ownership of.  Add debugging
			socket_log() function.  Rework TCP socket handling
			to not leak sockets.
Evan Hunt's avatar
Evan Hunt committed
93

94
95
96
97
2419.	[cleanup]	Document that isc_socket_create() and isc_socket_open()
			should not be used for isc_sockettype_fdwatch sockets.
			[RT #18521]

98
99
100
2418.	[bug]		AXFR request on a DLZ could trigger a REQUIRE failure
			[RT #18430]

101
102
103
104
2417.	[bug]		Connecting UDP sockets for outgoing queries could
			unexpectedly fail with an 'address already in use'
			error. [RT #18411]

105
106
107
2416.	[func]		Log file descriptors that cause exceeding the
			internal maximum. [RT #18460]

108
109
110
2415.	[bug]		'rndc dumpdb' could trigger various assertion failures
			in rbtdb.c. [RT #18455]

111
112
113
114
2414.	[bug]		A masterdump context held the database lock too long,
			causing various troubles such as dead lock and
			recursive lock acquisition. [RT #18311, #18456]

115
116
2413.	[bug]		Fixed an unreachable code path in socket.c. [RT #18442]

117
118
2412.	[bug]		win32: address a resourse leak. [RT #18374]

119
120
121
122
2411.	[bug]		Allow using a larger number of sockets than FD_SETSIZE
			for select().  To enable this, set ISC_SOCKET_MAXSOCKETS
			at compilation time.  [RT #18433]

123
124
2410.	[bug]		Correctly delete m_versionInfo. [RT #18432]

Mark Andrews's avatar
Mark Andrews committed
125
2409.	[bug]		Only log that we disabled EDNS processing if we were
126
127
			subsequently successful.  [RT #18029]

128
129
130
131
2408.	[bug]		A duplicate TCP dispatch event could be sent, which
			could then trigger an assertion failure in
			resquery_response().  [RT #18275]

132
133
2407.	[port]		hpux: test for sys/dyntune.h. [RT #18421]

Evan Hunt's avatar
Evan Hunt committed
134
2406.	[placeholder]
135

136
137
138
139
2405.   [cleanup]       The default value for dnssec-validation was changed to
                        "yes" in 9.5.0-P1 and all subsequent releases; this
                        was inadvertently omitted from CHANGES at the time.

140
141
2404.	[port]		hpux: files unlimited support.

142
143
2403.	[bug]		TSIG context leak. [RT #18341]

144
145
2402.	[port]		Support Solaris 2.11 and over. [RT #18362]

146
147
148
2401.	[bug]		Expect to get E[MN]FILE errno internal_accept()
			(from accept() or fcntl() system calls). [RT #18358]

Tatuya JINMEI 神明達哉's avatar
Tatuya JINMEI 神明達哉 committed
149
2400.	[bug]		Log if kqueue()/epoll_create()/open(/dev/poll) fails.
150
151
			[RT #18297]

152
153
2399.	[placeholder]

154
2398.	[bug]           Improve file descriptor management.  New,
155
156
157
			temporary, named.conf option reserved-sockets,
			default 512. [RT #18344]

158
159
2397.	[bug]		gssapi_functions had too many elements. [RT #18355]

160
161
162
2396.	[bug]		Don't set SO_REUSEADDR for randomized ports.
			[RT #18336]

163
164
165
2395.	[port]		Avoid warning and no effect from "files unlimited"
			on Linux when running as root. [RT #18335]

166
167
168
2394.	[bug]		Default configuration options set the limit for
			open files to 'unlimited' as described in the
			documentation. [RT #18331]
169

170
171
172
173
174
2393.	[bug]		nested acls containing keys could trigger an
			assertion in acl.c. [RT #18166]

2392.	[bug]		remove 'grep -q' from acl test script, some platforms
			don't support it. [RT #18253]
175
176

2391.	[port]		hpux: cover additional recvmsg() error codes.
177
178
			[RT #18301]

179
2390.	[bug]		dispatch.c could make a false warning on 'odd socket'.
180
181
			[RT #18301].

182
2389.	[bug]		Move the "working directory writable" check to after
Mark Andrews's avatar
Mark Andrews committed
183
			the ns_os_changeuser() call. [RT #18326]
184

185
186
187
2388.	[bug]		Avoid using tables for layout purposes in
			statistics XSL [RT #18159].

188
189
190
2387.	[bug]		Silence compiler warnings in lib/isc/radix.c.
			[RT #18147] [RT #18258]

191
192
2386.	[func]		Add warning about too small 'open files' limit.
			[RT #18269]
193

194
195
196
2385.	[bug]		A condition variable in socket.c could leak in
			rare error handling [RT #17968].

197
198
199
2384.	[security]	Fully randomize UDP query ports to improve
			forgery resilience. [RT #17949, #18098]

200
201
2383.	[bug]		named could double queries when they resulted in
			SERVFAIL due to overkilling EDNS0 failure detection.
Tatuya JINMEI 神明達哉's avatar
Tatuya JINMEI 神明達哉 committed
202
			[RT #18182]
203

204
205
206
2382.	[doc]		Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
			to ARM.

207
208
209
210
2381.	[port]		dlz/mysql: support multiple install layouts for
			mysql.  <prefix>/include/{,mysql/}mysql.h and
			<prefix>/lib/{,mysql/}. [RT #18152]

211
212
213
214
215
2380.	[bug]		dns_view_find() was not returning NXDOMAIN/NXRRSET
			proofs which, in turn, caused validation failures
			for insecure zones immediately below a secure zone
			the server was authoritative for. [RT #18112] 

216
217
218
2379.	[contrib]	queryperf/gen-data-queryperf.py: removed redundant
			TLDs and supported RRs with TTLs [RT #17972]

219
220
221
2378.	[bug]		gssapi_functions{} had a redundant member in BIND 9.5.
			[RT #18169]

222
223
2377.	[bug]		Address race condition in dnssec-signzone. [RT #18142]

Mark Andrews's avatar
Mark Andrews committed
224
2376.	[bug]		Change #2144 was not complete.
225

226
2375.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
227
228

2374.	[bug]		"blackhole" ACLs could cause named to segfault due
229
230
			to some uninitialized memory. [RT #18095]

Mark Andrews's avatar
Mark Andrews committed
231
2373.	[bug]		Default values of zone ACLs were re-parsed each time a
232
233
			new zone was configured, causing an overconsumption
			of memory. [RT #18092]
234

Mark Andrews's avatar
Mark Andrews committed
235
2372.	[bug]		Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
236

Mark Andrews's avatar
Mark Andrews committed
237
2371.	[doc]		Add +nsid option to dig man page. [RT #18039]
238

Mark Andrews's avatar
Mark Andrews committed
239
240
2370.	[bug]		"rndc freeze" could trigger an assertion in named
			when called on a nonexistent zone. [RT #18050]
241

242
243
244
2369.	[bug]		libbind: Array bounds overrun on read in bitncmp().
			[RT #18054]

Mark Andrews's avatar
Mark Andrews committed
245
246
2368.	[port]		Linux: use libcap for capability management if
			possible. [RT# 18026]
247

Mark Andrews's avatar
Mark Andrews committed
248
249
2367.	[bug]		Improve counting of dns_resstatscounter_retry
			[RT #18030]
250

251
252
2366.	[bug]		Adb shutdown race. [RT #18021]

Mark Andrews's avatar
Mark Andrews committed
253
254
2365.	[bug]		Fix a bug that caused dns_acl_isany() to return
			spurious results. [RT #18000]
255

256
257
258
2364.	[bug]		named could trigger a assertion when serving a
			malformed signed zone. [RT #17828]

259
260
261
2363.	[port]		sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
			[RT #17513]

Mark Andrews's avatar
Mark Andrews committed
262
263
264
2362.   [cleanup]	Make "rrset-order fixed" a compile-time option.
			settable by "./configure --enable-fixed-rrset".
			Disabled by default. [RT #17977]
265

266
267
268
2361.	[bug]		"recursion" statistics counter could be counted
			multiple times for a single query.  [RT #17990]

269
270
271
2360.	[bug]		Fix a condition where we release a database version
			(which may acquire a lock) while holding the lock.

272
273
2359.	[bug]		Fix NSID bug. [RT #17942]

274
275
2358.	[doc]		Update host's default query description. [RT #17934]

276
277
278
2357.	[port]		Don't use OpenSSL's engine support in versions before
			OpenSSL 0.9.7f. [RT #17922]

Mark Andrews's avatar
Mark Andrews committed
279
2356.	[bug]		Built in mutex profiler was not scalable enough.
280
281
			[RT #17436]

282
283
284
2355.	[func]		Extend the number statistics counters available.
			[RT #17590]

Mark Andrews's avatar
Mark Andrews committed
285
2354.	[bug]		Failed to initialize some rdatasetheader_t elements.
286
287
			[RT #17927]

288
289
290
291
292
293
294
2353.	[func]		Add support for Name Server ID (RFC 5001).
			'dig +nsid' requests NSID from server.
			'request-nsid yes;' causes recursive server to send
			NSID requests to upstream servers.  Server responds
			to NSID requests with the string configured by
			'server-id' option.  [RT #17091]

295
296
2352.	[bug]		Various GSS_API fixups. [RT #17729]

297
298
2351.	[bug]		convertxsl.pl generated very long lines. [RT #17906]

299
300
2350.	[port]		win32: IPv6 support. [RT #17797]

301
302
303
2349.	[func]		Provide incremental re-signing support for secure
			dynamic zones. [RT #1091]

Francis Dupont's avatar
Francis Dupont committed
304
305
306
307
2348.	[func]		Use the EVP interface to OpenSSL. Add PKCS#11 support.
			Documentation is in the new README.pkcs11 file.
			[RT #16844]

Francis Dupont's avatar
Francis Dupont committed
308
309
310
2347.	[bug]		Delete now traverses the RB tree in the canonical
			order. [RT #17451]

311
312
313
2346.	[func]		Memory statistics now cover all active memory contexts
			in increased detail. [RT #17580]

314
315
316
317
2345.	[bug]		named-checkconf failed to detect when forwarders
			were set at both the options/view level and in
			a root zone. [RT #17671]

318
319
320
2344.	[bug]		Improve "logging{ file ...; };" documentation.
			[RT #17888]

321
322
323
2343.	[bug]		(Seemingly) duplicate IPv6 entries could be
			created in ADB. [RT #17837]

324
325
2342.	[func]		Use getifaddrs() if available under Linux. [RT #17224]

326
327
328
2341.	[bug]		libbind: add missing -I../include for off source
			tree builds. [RT #17606]

329
330
2340.	[port]		openbsd: interface configuration. [RT #17700]

331
332
2339.	[port]		tru64: support for libbind. [RT #17589]

Mark Andrews's avatar
Mark Andrews committed
333
2338.	[bug]		check_ds() could be called with a non DS rdataset.
334
335
			[RT #17598]

Mark Andrews's avatar
Mark Andrews committed
336
2337.	[bug]		BUILD_LDFLAGS was not being correctly set.  [RT #17614]
337

338
339
340
341
2336.	[func]		If "named -6" is specified then listen on all IPv6
			interfaces if there are not listen-on-v6 clauses in
			named.conf.  [RT #17581]

342
343
344
2335.	[port]		sunos:  libbind and *printf() support for long long. 
			[RT #17513]

345
346
347
2334.	[bug]		Bad REQUIRES in fromstruct_in_naptr(),  off by one
			bug in fromstruct_txt(). [RT #17609]
			
348
349
350
2333.	[bug]		Fix off by one error in isc_time_nowplusinterval().
			[RT #17608]

351
352
2332.	[contrib]	query-loc-0.4.0. [RT #17602]

Mark Andrews's avatar
80 cols    
Mark Andrews committed
353
2331.	[bug]		Failure to regenerate any signatures was not being
Mark Andrews's avatar
Mark Andrews committed
354
355
			reported nor being past back to the UPDATE client.
			[RT #17570]
356

357
358
359
360
361
362
363
2330.	[bug]		Remove potential race condition when handling
			over memory events. [RT #17572]

			WARNING: API CHANGE: over memory callback
			function now needs to call isc_mem_waterack().
			See <isc/mem.h> for details.

364
365
2329.	[bug]		Clearer help text for dig's '-x' and '-i' options.

366
2328.	[maint]		Add AAAA addresses for A.ROOT-SERVERS.NET,
367
368
369
370
			F.ROOT-SERVERS.NET, H.ROOT-SERVERS.NET,
			J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
			M.ROOT-SERVERS.NET.

Mark Andrews's avatar
Mark Andrews committed
371
2327.	[bug]		It was possible to dereference a NULL pointer in
Mark Andrews's avatar
Mark Andrews committed
372
			rbtdb.c.  Implement dead node processing in zones as
Mark Andrews's avatar
Mark Andrews committed
373
			we do for caches. [RT #17312]
374

375
376
377
2326.	[bug]		It was possible to trigger a INSIST in the acache
			processing.

378
379
2325.	[port]		Linux: use capset() function if available. [RT #17557]

Mark Andrews's avatar
80 cols    
Mark Andrews committed
380
2324.	[bug]		Fix IPv6 matching against "any;". [RT #17533]
381

382
383
2323.	[port]		tru64: namespace clash. [RT #17547]

384
385
386
2322.	[port]		MacOS: work around the limitation of setrlimit()
			for RLIMIT_NOFILE. [RT #17526]

Mark Andrews's avatar
Mark Andrews committed
387
388
2321.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
389
2320.	[func]		Make statistics counters thread-safe for platforms
390
391
			that support certain atomic operations. [RT #17466]

392
2319.	[bug]		Silence Coverity warnings in 
Evan Hunt's avatar
Evan Hunt committed
393
			lib/dns/rdata/in_1/apl_42.c. [RT #17469]
394

395
2318.	[port]		sunos fixes for libbind.  [RT #17514]
396

397
398
2317.	[bug]		"make distclean" removed bind9.xsl.h. [RT #17518]

399
400
401
2316.	[port]		Missing #include <isc/print.h> in lib/dns/gssapictx.c.
			[RT #17513]

402
403
404
2315.   [bug]           Used incorrect address family for mapped IPv4
                        addresses in acl.c. [RT #17519]

405
406
407
2314.	[bug]		Uninitialized memory use on error path in
			bin/named/lwdnoop.c.  [RT #17476]

408
409
410
2313.	[cleanup]	Silence Coverity warnings. Handle private stacks.
			[RT #17447] [RT #17478]

411
412
413
2312.	[cleanup]	Silence Coverity warning in lib/isc/unix/socket.c.
			[RT #17458]

414
415
416
2311.   [bug]           IPv6 addresses could match IPv4 ACL entries and
                        vice versa. [RT #17462]

Mark Andrews's avatar
Mark Andrews committed
417
2310.	[bug]		dig, host, nslookup: flush stdout before emitting
418
			debug/fatal messages.  [RT #17501]
419

420
421
422
2309.   [cleanup]       Fix Coverity warnings in lib/dns/acl.c and iptable.c.
                        [RT #17455]

423
424
425
2308.	[cleanup]	Silence Coverity warning in bin/named/controlconf.c.
			[RT #17495]

426
427
2307.	[bug]		Remove infinite loop from lib/dns/sdb.c. [RT #17496]

428
429
430
2306.	[bug]		Remove potential race from lib/dns/resolver.c.
			[RT #17470]

431
432
2305.	[security]	inet_network() buffer overflow. CVE-2008-0122.

433
434
435
2304.	[bug]		Check returns from all dns_rdata_tostruct() calls.
			[RT #17460]

436
437
438
2303.	[bug]		Remove unnecessary code from bin/named/lwdgnba.c.
			[RT #17471]

439
440
2302.	[bug]		Fix memset() calls in lib/tests/t_api.c. [RT #17472]

441
442
443
2301.	[bug]		Remove resource leak and fix error messages in
			bin/tests/system/lwresd/lwtest.c. [RT #17474]

444
445
446
2300.	[bug]		Fixed failure to close open file in 
			bin/tests/names/t_names.c. [RT #17473]

447
448
449
2299.	[bug]		Remove unnecessary NULL check in
			bin/nsupdate/nsupdate.c. [RT #17475]

450
451
452
2298.	[bug]		isc_mutex_lock() failure not caught in
			bin/tests/timers/t_timers.c. [RT #17468]

453
454
455
2297.	[bug]		isc_entropy_createfilesource() failure not caught in
			bin/tests/dst/t_dst.c. [RT #17467]

456
457
458
2296.	[port]		Allow docbook stylesheet location to be specified to
			configure. [RT #17457]

459
460
461
2295.	[bug]		Silence static overrun error in bin/named/lwaddr.c.
			[RT #17459]

462
463
464
465
2294.	[func]		Allow the experimental statistics channels to have
			multiple connections and ACL.
			Note: the stats-server and stats-server-v6 options
			available in the previous beta releases are replaced
Mark Andrews's avatar
Mark Andrews committed
466
			with the generic statistics-channels statement.
467

468
469
2293.	[func]		Add ACL regression test. [RT #17375]

470
471
472
473
474
475
2292.	[bug]		Log if the working directory is not writable.
			[RT #17312]

2291.   [bug]           PR_SET_DUMPABLE may be set too late.  Also report
			failure to set PR_SET_DUMPABLE. [RT #17312]

476
477
478
2290.	[bug]		Let AD in the query signal that the client wants AD
			set in the response. [RT #17301]

479
480
481
2289.	[func]		named-checkzone now reports the out-of-zone CNAME
			found. [RT #17309]

482
483
484
2288.	[port]		win32: mark service as running when we have finished
			loading.  [RT #17441]

485
486
2287.	[bug]		Use 'volatile' if the compiler supports it. [RT #17413]

487
488
489
490
491
2286.	[func]		Allow a TCP connection to be used as a weak
			authentication method for reverse zones.
			New update-policy methods tcp-self and 6to4-self.
			[RT #17378]

492
493
494
2285.	[func]		Test framework for client memory context management.
			[RT #17377]

495
496
497
2284.	[bug]		Memory leak in UPDATE prerequisite processing.
			[RT #17377]

498
499
500
501
502
2283.	[bug]		TSIG keys were not attaching to the memory
			context.  TSIG keys should use the rings
			memory context rather than the clients memory
			context. [RT #17377]

503
2282.	[bug]		Acl code fixups. [RT #17346] [RT #17374]
504

505
506
507
2281.	[bug]		Attempts to use undefined acls were not being logged.
			[RT #17307]

508
509
510
2280.	[func]		Allow the experimental http server to be reached
			over IPv6 as well as IPv4. [RT #17332]

511
512
513
514
2279.   [bug]           Use setsockopt(SO_NOSIGPIPE), when available,
			to protect applications from receiving spurious
			SIGPIPE signals when using the resolver.

515
2278.	[bug]		win32: handle the case where Windows returns no
Mark Andrews's avatar
Mark Andrews committed
516
			search list or DNS suffix. [RT #17354]
517

518
519
520
2277.	[bug]		Empty zone names were not correctly being caught at
			in the post parse checks. [RT #17357]

521
522
2276.	[bug]		Install <dst/gssapi.h>.  [RT# 17359]

523
524
525
2275.	[func]		Add support to dig to perform IXFR queries over UDP.
			[RT #17235]

Mark Andrews's avatar
Mark Andrews committed
526
2274.	[func]		Log zone transfer statistics. [RT #17336]
527

Mark Andrews's avatar
Mark Andrews committed
528
2273.	[bug]		Adjust log level to WARNING when saving inconsistent
529
530
			stub/slave master and journal files. [RT# 17279]

531
532
533
2272.	[bug]		Handle illegal dnssec-lookaside trust-anchor names.
			[RT #17262]

Michael Graff's avatar
Michael Graff committed
534
535
2271.	[bug]		Fix a memory leak in http server code [RT #17100]

536
537
538
2270.	[bug]		dns_db_closeversion() version->writer could be reset
			before it is tested. [RT #17290]

539
540
2269.	[contrib]	dbus memory leaks and missing va_end calls. [RT #17232]

541
542
543
2268.	[bug]		0.IN-ADDR.ARPA was missing from the empty zones
			list.

544
545
	--- 9.5.0b1 released ---

546
547
548
549
2267.   [bug]           Radix tree node_num value could be set incorrectly,
                        causing positive ACL matches to look like negative
                        ones.  [RT #17311]

550
551
552
2266.	[bug]		client.c:get_clientmctx() returned the same mctx
			once the pool of mctx's was filled. [RT #17218]

553
554
555
2265.	[bug]		Test that the memory context's basic_table is non NULL
			before freeing.  [RT #17265]

556
557
2264.	[bug]		Server prefix length was being ignored. [RT #17308]

558
559
560
2263.	[bug]		"named-checkconf -z" failed to set default value
			for "check-integrity".  [RT #17306]

561
562
563
2262.	[bug]		Error status from all but the last view could be
			lost. [RT #17292]

564
565
2261.   [bug]           Fix memory leak with "any" and "none" ACLs [RT #17272]

566
2260.	[bug]		Reported wrong clients-per-query when increasing the
567
                        value. [RT #17236]
Mark Andrews's avatar
Mark Andrews committed
568

569
570
2259.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
571
572
	--- 9.5.0a7 released ---

573
574
575
2258.	[bug]		Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
			[RT #17241]

576
577
578
2257.	[bug]		win32: Use the full path to vcredist_x86.exe when
			calling it. [RT #17222]

579
580
581
2256.	[bug]		win32: Correctly register the installation location of
			bindevt.dll. [RT #17159]

582
2255.	[maint]		L.ROOT-SERVERS.NET is now 199.7.83.42.
583

584
585
586
587
588
2254.	[bug]		timer.c:dispatch() failed to lock timer->lock
			when reading timer->idle allowing it to see
			intermediate values as timer->idle was reset by
			isc_timer_touch(). [RT #17243]

Mark Andrews's avatar
Mark Andrews committed
589
2253.	[func]	 	"max-cache-size" defaults to 32M.
Mark Andrews's avatar
Mark Andrews committed
590
591
			"max-acache-size" defaults to 16M.

592
2252.   [bug]           Fixed errors in sortlist code [RT #17216]
593

594
595
596
597
598
599
600
2251.	[placeholder]

2250.	[func]		New flag 'memstatistics' to state whether the
			memory statistics file should be written or not.
			Additionally named's -m option will cause the
			statistics file to be written. [RT #17113]
			
601
602
603
2249.   [bug]           Only set Authentic Data bit if client requested
                        DNSSEC, per RFC 3655 [RT #17175]

604
605
2248.   [cleanup]       Fix several errors reported by Coverity. [RT #17160]

606
607
2247.	[doc]		Sort doc/misc/options. [RT #17067]

608
609
610
2246.	[bug]		Make the startup of test servers (ans.pl) more
			robust. [RT #17147]

611
612
613
2245.	[bug]		Validating lack of DS records at trust anchors wasn't
			working. [RT #17151]

614
615
616
617
2244.	[func]		Allow the check of nameserver names against the
			SOA MNAME field to be disabled by specifying
			'notify-to-soa yes;'.  [RT #17073]

618
619
620
2243.	[func]		Configuration files without a newline at the end now
			parse without error. [RT #17120]

621
622
623
624
2242.	[bug]		nsupdate: GSS-TSIG support using the Heimdal Kerberos
			library could require a source of random data.
			[RT #17127]

Mark Andrews's avatar
Mark Andrews committed
625
2241.	[func]		nsupdate: add a interactive 'help' command. [RT #17099]
626
627
628
629
630
631
632

2240.	[bug]		Cleanup nsupdates GSS-TSIG support.  Convert
			a number of INSIST()s into plain fatal() errors
			which report the triggering result code.
			The 'key' command wasn't disabling GSS-TSIG.
			[RT #17099]

Mark Andrews's avatar
Mark Andrews committed
633
2239.	[func]		Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
634

635
2238.	[bug]		It was possible to trigger a REQUIRE when a
Mark Andrews's avatar
Mark Andrews committed
636
			validation was canceled. [RT #17106]
637

638
639
2237.	[bug]		libbind: res_init() was not thread aware. [RT #17123]

Mark Andrews's avatar
Mark Andrews committed
640
2236.	[bug]		dnssec-signzone failed to preserve the case of
Mark Andrews's avatar
Mark Andrews committed
641
			of wildcard owner names. [RT #17085]
642

643
644
2235.	[bug]		<isc/atomic.h> was not being installed. [RT #17135]

Evan Hunt's avatar
Evan Hunt committed
645
646
2234.   [port]          Correct some compiler warnings on SCO OSr5 [RT #17134]
  
647
2233.   [func]          Add support for O(1) ACL processing, based on
Mark Andrews's avatar
Mark Andrews committed
648
649
                        radix tree code originally written by Kevin
                        Brintnall. [RT #16288]
650

651
652
653
2232.	[bug]		dns_adb_findaddrinfo() could fail and return
			ISC_R_SUCCESS. [RT #17137]

654
655
656
2231.	[bug]		Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
			[RT #17088]

657
658
659
2230.	[bug]		We could INSIST reading a corrupted journal.
			[RT #17132]

Mark Andrews's avatar
Mark Andrews committed
660
2229.	[bug]		Null pointer dereference on query pool creation
661
662
			failure. [RT #17133]

Mark Andrews's avatar
Mark Andrews committed
663
2228.	[contrib]	contrib: Change 2188 was incomplete.
664

665
666
2227.	[cleanup]	Tidied up the FAQ. [RT #17121]

Mark Andrews's avatar
Mark Andrews committed
667
668
2226.	[placeholder]

669
670
671
2225.	[bug]		More support for systems with no IPv4 addresses.
		        [RT #17111]

672
673
674
675
676
2224.	[bug]		Defer journal compaction if a xfrin is in progress.
			[RT #17119]

2223.	[bug]		Make a new journal when compacting. [RT #17119]

677
678
679
2222.	[func]		named-checkconf now checks server key references.
		        [RT #17097]

680
2221.	[bug]		Set the event result code to reflect the actual
Mark Andrews's avatar
Mark Andrews committed
681
682
683
			record turned to caller when a cache update is
			rejected due to a more credible answer existing.
			[RT #17017]
684

685
686
687
2220.	[bug]		win32: Address a race condition in final shutdown of
			the Windows socket code. [RT #17028]
			
Mark Andrews's avatar
Mark Andrews committed
688
2219.	[bug]		Apply zone consistency checks to additions, not
Mark Andrews's avatar
Mark Andrews committed
689
			removals, when updating. [RT #17049]
690

691
692
693
2218.	[bug]		Remove unnecessary REQUIRE from dns_validator_create().
			[RT #16976]

694
695
2217.	[func]		Adjust update log levels. [RT #17092]

696
697
698
2216.	[cleanup]	Fix a number of errors reported by Coverity.
		        [RT #17094]

699
700
2215.	[bug]		Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]

701
702
703
704
2214.	[bug]		Deregister OpenSSL lock callback when cleaning
			up.  Reorder OpenSSL cleanup so that RAND_cleanup()
			is called before the locks are destroyed. [RT #17098]

705
706
707
2213.	[bug]		SIG0 diagnostic failure messages were looking at the
			wrong status code. [RT #17101]

Mark Andrews's avatar
Mark Andrews committed
708
2212.	[func]		'host -m' now causes memory statistics and active
709
710
			memory to be printed at exit. [RT 17028]

711
712
713
2211.	[func]		Update "dynamic update temporarily disabled" message.
			[RT #17065]

714
715
716
2210.	[bug]		Deleting class specific records via UPDATE could
			fail.  [RT #17074]

717
718
719
720
2209.	[port]		osx: linking against user supplied static OpenSSL
			libraries failed as the system ones were still being
			found. [RT #17078]

721
722
723
2208.	[port]		win32: make sure both build methods produce the
			same output. [RT #17058]

724
725
2207.	[port]		Some implementations of getaddrinfo() fail to set
			ai_canonname correctly. [RT #17061]
Mark Andrews's avatar
Mark Andrews committed
726
727
728

	--- 9.5.0a6 released ---

729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
2206.	[security]	"allow-query-cache" and "allow-recursion" now
			cross inherit from each other.

			If allow-query-cache is not set in named.conf then
			allow-recursion is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			If allow-recursion is not set in named.conf then
			allow-query-cache is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			[RT #16987]
	
744
745
2205.	[bug]		libbind: change #2119 broke thread support. [RT #16982]

Mark Andrews's avatar
Mark Andrews committed
746
2204.	[bug]		"rndc flushanme name unknown-view" caused named
747
			to crash. [RT #16984]
Mark Andrews's avatar
9.5.0a6    
Mark Andrews committed
748

749
750
751
2203.	[security]	Query id generation was cryptographically weak.
			[RT # 16915]

752
753
754
2202.	[security]	The default acls for allow-query-cache and
			allow-recursion were not being applied. [RT #16960]

Mark Andrews's avatar
Mark Andrews committed
755
2201.	[bug]		The build failed in a separate object directory.
756
757
			[RT #16943]

758
759
760
2200.	[bug]		The search for cached NSEC records was stopping to
			early leading to excessive DLV queries. [RT #16930]

761
762
763
2199.	[bug]		win32: don't call WSAStartup() while loading dlls.
			[RT #16911]

764
765
766
2198.	[bug]		win32: RegCloseKey() could be called when
			RegOpenKeyEx() failed. [RT #16911]

767
768
769
770
2197.	[bug]		Add INSIST to catch negative responses which are
			not setting the event result code appropriately.
			[RT #16909]

771
2196.	[port]		win32: yield processor while waiting for once to
772
			to complete. [RT #16958]
773

774
775
776
2195.	[func]		dnssec-keygen now defaults to nametype "ZONE"
			when generating DNSKEYs. [RT #16954]

777
2194.	[bug]		Close journal before calling 'done' in xfrin.c.
Mark Andrews's avatar
9.5.0a5    
Mark Andrews committed
778
779
780

	--- 9.5.0a5 released ---

Mark Andrews's avatar
Mark Andrews committed
781
782
783
2193.	[port]		win32: BINDInstall.exe is now linked statically.
			[RT #16906]

784
785
786
787
2192.	[port]		win32: use vcredist_x86.exe to install Visual
			Studio's redistributable dlls if building with
			Visual Stdio 2005 or later.

788
789
790
2191.	[func]		named-checkzone now allows dumping to stdout (-).
			named-checkconf now has -h for help.
			named-checkzone now has -h for help.
Mark Andrews's avatar
Mark Andrews committed
791
			rndc now has -h for help.
792
793
794
			Better handling of '-?' for usage summaries.
			[RT #16707]

795
796
797
798
2190.	[func]		Make fallback to plain DNS from EDNS due to timeouts
			more visible.  New logging category "edns-disabled".
			[RT #16871]

799
800
2189.	[bug]		Handle socket() returning EINTR. [RT #15949]

Mark Andrews's avatar
Mark Andrews committed
801
2188.	[contrib]	queryperf: autoconf changes to make the search for
802
803
			libresolv or libbind more robust. [RT #16299]

804
805
2187.	[bug]		query_addds(), query_addwildcardproof() and
			query_addnxrrsetnsec() should take a version
Mark Andrews's avatar
Mark Andrews committed
806
			argument. [RT #16368]
807

808
809
810
2186.	[port]		cygwin: libbind: check for struct sockaddr_storage
			independently of IPv6. [RT #16482]

811
812
813
2185.	[port]		sunos: libbind: check for ssize_t, memmove() and
			memchr(). [RT #16463]

814
815
816
2184.	[bug]		bind9.xsl.h didn't build out of the source tree.
			[RT #16830]

817
818
819
2183.	[bug]		dnssec-signzone didn't handle offline private keys
			well.  [RT #16832]

820
821
822
823
2182.	[bug]		dns_dispatch_createtcp() and dispatch_createudp()
			could return ISC_R_SUCCESS when they ran out of
			memory. [RT #16365]

824
825
2181.	[port]		sunos: libbind: add paths.h from BIND 8. [RT #16462]

826
827
828
2180.	[cleanup]	Remove bit test from 'compress_test' as they
			are no longer needed. [RT #16497]

829
830
831
2179.	[func]		'rndc command zone' will now find 'zone' if it is
			unique to all the views. [RT #16821]

832
833
834
2178.	[bug]		'rndc reload' of a slave or stub zone resulted in
			a reference leak. [RT #16867]

835
836
2177.	[bug]		Array bounds overrun on read (rcodetext) at
			debug level 10+. [RT #16798]
837

838
2176.	[contrib]	dbus update to handle race condition during
Mark Andrews's avatar
Mark Andrews committed
839
			initialization (Bugzilla 235809). [RT #16842]
840

Mark Andrews's avatar
Mark Andrews committed
841
2175.	[bug]		win32: windows broadcast condition variable support
842
843
			was broken. [RT #16592]

844
845
846
2174.	[bug]		I/O errors should always be fatal when reading
			master files. [RT #16825]

847
848
2173.	[port]		win32: When compiling with MSVS 2005 SP1 we also
			need to ship Microsoft.VC80.MFCLOC.
Mark Andrews's avatar
9.5.0a4    
Mark Andrews committed
849
850
851

	--- 9.5.0a4 released ---

852
853
854
2172.	[bug]		query_addsoa() was being called with a non zone db.
			[RT #16834]

855
856
857
858
2171.	[bug]		Handle breaks in DNSSEC trust chains where the parent
			servers are not DS aware (DS queries to the parent
			return a referral to the child).

859
860
2170.	[func]		Add acache processing to test suite. [RT #16711]

861
862
863
2169.	[bug]		host, nslookup: when reporting NXDOMAIN report the
			given name and not the last name searched for.
			[RT #16763]
864

865
866
867
2168.	[bug]		nsupdate: in non-interactive mode treat syntax errors
			as fatal errors. [RT #16785]

868
869
2167.	[bug]		When re-using a automatic zone named failed to
			attach it to the new view. [RT #16786]
Evan Hunt's avatar
9.5.0a3    
Evan Hunt committed
870
871
872

	--- 9.5.0a3 released ---

873
874
875
876
2166.	[bug]		When running in batch mode, dig could misinterpret
			a server address as a name to be looked up, causing
			unexpected output. [RT #16743]

877
878
879
880
881
2165.	[func]		Allow the destination address of a query to determine
			if we will answer the query or recurse.
			allow-query-on, allow-recursion-on and
			allow-query-cache-on. [RT #16291]

882
883
884
885
2164.	[bug]		The code to determine how named-checkzone / 
			named-compilezone was called failed under windows.
			[RT #16764]

886
887
888
889
2163.	[bug]		If only one of query-source and query-source-v6
			specified a port the query pools code broke (change
			2129).  [RT #16768]

890
891
892
2162.	[func]		Allow "rrset-order fixed" to be disabled at compile
			time. [RT #16665]

893
894
895
2161.	[bug]		Fix which log messages are emitted for 'rndc flush'.
			[RT #16698]

896
897
898
2160.	[bug]		libisc wasn't handling NULL ifa_addr pointers returned
			from getifaddrs(). [RT #16708]

Mark Andrews's avatar
9.5.0a2    
Mark Andrews committed
899
900
	--- 9.5.0a2 released ---

Mark Andrews's avatar
Mark Andrews committed
901
902
2159.	[bug]		Array bounds overrun in acache processing. [RT #16710]

Mark Andrews's avatar
Mark Andrews committed
903
2158.	[bug]		ns_client_isself() failed to initialize key
904
905
			leading to a REQUIRE failure. [RT #16688]

906
907
908
909
910
911
912
913
2157.	[func]		dns_db_transfernode() created. [RT #16685]

2156.	[bug]		Fix node reference leaks in lookup.c:lookup_find(),
			resolver.c:validated() and resolver.c:cache_name().
			Fix a memory leak in rbtdb.c:free_noqname().
			Make lookup.c:lookup_find() robust against
			event leaks. [RT #16685]

914
915
916
2155.	[contrib]	SQLite sdb module from jaboydjr@netwalk.com.
			[RT #16694]

917
918
919
2154.	[func]		Scoped (e.g. IPv6 link-local) addresses may now be
			matched in acls by omitting the scope. [RT #16599]

920
921
2153.	[bug]		nsupdate could leak memory. [RT #16691]

922
923
924
2152.	[cleanup]	Use sizeof(buf) instead of fixed number in
			dighost.c:get_trusted_key(). [RT #16678]

925
926
927
2151.	[bug]		Missing newline in usage message for journalprint.
			[RT #16679]

928
929
930
931
2150.	[bug]		'rrset-order cyclic' uniformly distribute the
			starting point for the first response for a given
			RRset. [RT #16655]

932
933
934
935
2149.	[bug]		isc_mem_checkdestroyed() failed to abort on
			if there were still active memory contexts.
			[RT #16672]

936
937
2148.	[func]		Add positive logging for rndc commands. [RT #14623]

938
939
940
2147.	[bug]		libbind: remove potential buffer overflow from
			hmac_link.c. [RT #16437]

941
942
943
2146.	[cleanup]	Silence Linux's spurious "obsolete setsockopt
			SO_BSDCOMPAT" message. [RT #16641]

944
945
946
2145.	[bug]		Check DS/DLV digest lengths for known digests.
			[RT #16622]

947
948
949
2144.	[cleanup]	Suppress logging of SERVFAIL from forwarders.
			[RT #16619]

950
951
952
953
2143.	[bug]		We failed to restart the IPv6 client when the
			kernel failed to return the destination the
			packet was sent to. [RT #16613]

Mark Andrews's avatar
Mark Andrews committed
954
2142.	[bug]		Handle master files with a modification time that
955
956
			matches the epoch. [RT# 16612]

957
958
959
2141.	[bug]		dig/host should not be setting IDN_ASCCHECK (IDN
			equivalent of LDH checks).  [RT #16609]

960
961
962
2140.	[bug]		libbind: missing unlock on pthread_key_create()
			failures. [RT #16654]

963
964
965
2139.	[bug]		dns_view_find() was being called with wrong type
			in adb.c. [RT #16670]

966
967
2138.	[bug]		Lock order reversal in resolver.c. [RT #16653]

968
2137.	[port]		Mips little endian and/or mips 64 bit are now
Mark Andrews's avatar
Mark Andrews committed
969
			supported for atomic operations. [RT#16648]
970

971
972
973
2136.	[bug]		nslookup/host looped if there was no search list
			and the host didn't exist. [RT #16657]

Mark Andrews's avatar
Mark Andrews committed
974
2135.	[bug]		Uninitialized rdataset in sdlz.c. [RT# 16656]
975

976
977
2134.	[func]		Additional statistics support. [RT #16666]

978
979
980
2133.	[port]		powerpc:  Support both IBM and MacOS Power PC
			assembler syntaxes. [RT #16647]

981
982
983
2132.	[bug]		Missing unlock on out of memory in
			dns_dispatchmgr_setudp().

984
985
2131.	[contrib]	dlz/mysql: AXFR was broken. [RT #16630]

986
987
2130.	[func]		Log if CD or DO were set. [RT #16640]

988
989
990
991
2129.	[func]		Provide a pool of UDP sockets for queries to be
			made over. See use-queryport-pool, queryport-pool-ports
			and queryport-pool-updateinterval.  [RT #16415]

992
993
2128.	[doc]		xsltproc --nonet, update DTD versions.  [RT #16635]

994
995
2127.	[port]		Improved OpenSSL 0.9.8 support. [RT #16563]

Mark Andrews's avatar
Mark Andrews committed
996
2126.	[security]	Serialize validation of type ANY responses. [RT #16555]
997

998
999
1000
2125.	[bug]		dns_zone_getzeronosoattl() REQUIRE failure if DLZ
			was defined. [RT #16574]

Mark Andrews's avatar
Mark Andrews committed
1001
2124.	[security]	It was possible to dereference a freed fetch
1002
			context. [RT #16584]
Mark Andrews's avatar
9.5.0a1    
Mark Andrews committed
1003
1004
1005

	--- 9.5.0a1 released ---

Mark Andrews's avatar
Mark Andrews committed
1006
2123.	[func]		Use Doxygen to generate internal documentation.
1007
1008
			[RT #11398]

1009
1010
1011
2122.	[func]		Experimental http server and statistics support
			for named via xml.

1012
1013
1014
2121.	[func]		Add a 10 slot dead masters cache (LRU) with a 600
			second timeout. [RT #16553]

1015
1016
2120.	[doc]		Fix markup on nsupdate man page. [RT #16556]

1017
1018
1019
1020
2119.	[compat]	libbind: allow res_init() to succeed enough to
			return the default domain even if it was unable
			to allocate memory.

1021
1022
1023
1024
2118.	[bug]		Handle response with long chains of domain name
			compression pointers which point to other compression
			pointers. [RT #16427]

1025
1026
1027
1028
1029
1030
1031
2117.	[bug]		DNSSEC fixes: named could fail to cache NSEC records
			which could lead to validation failures.  named didn't
			handle negative DS responses that were in the process
			of being validated.  Check CNAME bit before accepting
			NODATA proof. To be able to ignore a child NSEC there
			must be SOA (and NS) set in the bitmap. [RT #16399]

1032
1033
1034
2116.	[bug]		'rndc reload' could cause the cache to continually
			be cleaned. [RT #16401]

1035
1036
1037
2115.	[bug]		'rndc reconfig' could trigger a INSIST if the
			number of masters for a zone was reduced. [RT #16444]

1038
2114.	[bug]		dig/host/nslookup: searches for names with multiple
Mark Andrews's avatar
Mark Andrews committed
1039
			labels were failing. [RT #16447]
1040

1041
1042
1043
2113.	[bug]		nsupdate: if a zone is specified it should be used
			for server discover. [RT# 16455]

1044
1045
2112.	[security]	Warn if weak RSA exponent is used. [RT #16460]

1046
1047
1048
2111.	[bug]		Fix a number of errors reported by Coverity.
			[RT #16507]

Tatuya JINMEI 神明達哉's avatar
typo    
Tatuya JINMEI 神明達哉 committed
1049
2110.	[bug]		"minimal-responses yes;" interacted badly with BIND 8
1050
1051
			priming queries. [RT #16491]

1052
1053
2109.	[port]		libbind: silence aix 5.3 compiler warnings. [RT #16502]

1054
1055
2108.	[func]		DHCID support. [RT #16456]

1056
1057
2107.	[bug]		dighost.c: more cleanup of buffers. [RT #16499]

1058
1059
2106.	[func]		'rndc status' now reports named's version. [RT #16426]

1060
1061
2105.	[func]		GSS-TSIG support (RFC 3645).

1062
1063
2104.	[port]		Fix Solaris SMF error message.

1064
1065
1066
2103.	[port]		Add /usr/sfw to list of locations for OpenSSL
			under Solaris.

Mark Andrews's avatar
Mark Andrews committed
1067
2102.	[port]		Silence Solaris 10 warnings.
1068

1069
1070
1071
2101.	[bug]		OpenSSL version checks were not quite right.
			[RT #16476]

1072
1073
1074
2100.	[port]		win32: copy libeay32.dll to Build\Debug.
			Copy Debug\named-checkzone to Debug\named-compilezone.

Mark Andrews's avatar
Mark Andrews committed
1075
2099.	[port]		win32: more manifest issues.
1076

Mark Andrews's avatar
Mark Andrews committed
1077
2098.	[bug]		Race in rbtdb.c:no_references(), which occasionally
1078
1079
			triggered an INSIST failure about the node lock
			reference.  [RT #16411]
1080

1081
1082
1083
2097.	[bug]		named could reference a destroyed memory context
			after being reloaded / reconfigured. [RT #16428]

1084
1085
1086
2096.	[bug]		libbind: handle applications that fail to detect
			res_init() failures better.

1087
1088
1089
2095.	[port]		libbind: alway prototype inet_cidr_ntop_ipv6() and
			net_cidr_ntop_ipv6(). [RT #16388]
 
1090
1091
2094.	[contrib]	Update named-bootconf.  [RT# 16404]

1092
1093
2093.	[bug]		named-checkzone -s was broken.

1094
1095
1096
1097
2092.	[bug]		win32: dig, host, nslookup.  Use registry config
			if resolv.conf does not exist or no nameservers
			listed. [RT #15877] 

1098
1099
2091.	[port]		dighost.c: race condition on cleanup. [RT #16417]

1100
1101
1102
2090.	[port]		win32: Visual C++ 2005 command line manifest support.
			[RT #16417]

1103
1104
1105
1106
1107
1108
1109
1110
2089.	[security]	Raise the minimum safe OpenSSL versions to
			OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
			prior to these have known security flaws which
			are (potentially) exploitable in named. [RT #16391]

2088.	[security]	Change the default RSA exponent from 3 to 65537.
			[RT #16391]

1111
1112
1113
2087.	[port]		libisc failed to compile on OS's w/o a vsnprintf.
			[RT #16382]

1114
1115
1116
2086.	[port]		libbind: FreeBSD now has get*by*_r() functions.
			[RT #16403]

1117
1118
2085.	[doc]		win32: added index.html and README to zip. [RT #16201]

1119
1120
2084.	[contrib]	dbus update for 9.3.3rc2.

1121
1122
2083.	[port]		win32: Visual C++ 2005 support.

1123
1124
2082.	[doc]		Document 'cache-file' as a test only option.

1125
1126
1127
2081.	[port]		libbind: minor 64-bit portability fix in memcluster.c.
			[RT #16360]

1128
1129
1130
2080.	[port]		libbind: res_init.c did not compile on older versions
			of Solaris. [RT #16363]

1131
1132
1133
2079.	[bug]		The lame cache was not handling multiple types
			correctly. [RT #16361]

1134
1135
1136
2078.	[bug]		dnssec-checkzone output style "default" was badly
			named.  It is now called "relative". [RT #16326]

Mark Andrews's avatar
Mark Andrews committed
1137
2077.	[bug]		'dnssec-signzone -O raw' wasn't outputting the
1138
1139
			complete signed zone. [RT #16326]

1140
1141
1142
2076.	[bug]		Several files were missing #include <config.h>
			causing build failures on OSF. [RT #16341]