CHANGES 220 KB
Newer Older
1
2
2109.	[port]		libbind: silence aix 5.3 compiler warnings. [RT #16502]

3
4
2108.	[func]		DHCID support. [RT #16456]

5
6
2107.	[bug]		dighost.c: more cleanup of buffers. [RT #16499]

7
8
2106.	[func]		'rndc status' now reports named's version. [RT #16426]

9
10
2105.	[func]		GSS-TSIG support (RFC 3645).

11
12
2104.	[port]		Fix Solaris SMF error message.

13
14
15
2103.	[port]		Add /usr/sfw to list of locations for OpenSSL
			under Solaris.

16
17
2102.	[port]		Silence solaris 10 warnings.

18
19
20
2101.	[bug]		OpenSSL version checks were not quite right.
			[RT #16476]

21
22
23
2100.	[port]		win32: copy libeay32.dll to Build\Debug.
			Copy Debug\named-checkzone to Debug\named-compilezone.

24
25
2099.	[port]		win32: more manifiest issues.

26
27
28
2098.	[bug]           Race in rbtdb.c:no_references(), which occasionally
			triggered an INSIST failure about the node lock
			reference.  [RT #16411]
29

30
31
32
2097.	[bug]		named could reference a destroyed memory context
			after being reloaded / reconfigured. [RT #16428]

33
34
35
2096.	[bug]		libbind: handle applications that fail to detect
			res_init() failures better.

36
37
38
2095.	[port]		libbind: alway prototype inet_cidr_ntop_ipv6() and
			net_cidr_ntop_ipv6(). [RT #16388]
 
39
40
2094.	[contrib]	Update named-bootconf.  [RT# 16404]

41
42
2093.	[bug]		named-checkzone -s was broken.

43
44
45
46
2092.	[bug]		win32: dig, host, nslookup.  Use registry config
			if resolv.conf does not exist or no nameservers
			listed. [RT #15877] 

47
48
2091.	[port]		dighost.c: race condition on cleanup. [RT #16417]

49
50
51
2090.	[port]		win32: Visual C++ 2005 command line manifest support.
			[RT #16417]

52
53
54
55
56
57
58
59
2089.	[security]	Raise the minimum safe OpenSSL versions to
			OpenSSL 0.9.7l and OpenSSL 0.9.8d.  Versions
			prior to these have known security flaws which
			are (potentially) exploitable in named. [RT #16391]

2088.	[security]	Change the default RSA exponent from 3 to 65537.
			[RT #16391]

60
61
62
2087.	[port]		libisc failed to compile on OS's w/o a vsnprintf.
			[RT #16382]

63
64
65
2086.	[port]		libbind: FreeBSD now has get*by*_r() functions.
			[RT #16403]

66
67
2085.	[doc]		win32: added index.html and README to zip. [RT #16201]

68
69
2084.	[contrib]	dbus update for 9.3.3rc2.

70
71
2083.	[port]		win32: Visual C++ 2005 support.

72
73
2082.	[doc]		Document 'cache-file' as a test only option.

74
75
76
2081.	[port]		libbind: minor 64-bit portability fix in memcluster.c.
			[RT #16360]

77
78
79
2080.	[port]		libbind: res_init.c did not compile on older versions
			of Solaris. [RT #16363]

80
81
82
2079.	[bug]		The lame cache was not handling multiple types
			correctly. [RT #16361]

83
84
85
86
87
88
2078.	[bug]		dnssec-checkzone output style "default" was badly
			named.  It is now called "relative". [RT #16326]

2077.	[bug]		'dnssec-signzone -O raw' wasn't outputing the
			complete signed zone. [RT #16326]

89
90
91
2076.	[bug]		Several files were missing #include <config.h>
			causing build failures on OSF. [RT #16341]

92
93
94
2075.	[bug]		The spillat timer event hander could leak memory.
			[RT #16357]

Mark Andrews's avatar
Mark Andrews committed
95
2074.	[bug]		dns_request_createvia2(), dns_request_createvia3(),
96
97
98
			dns_request_createraw2() and dns_request_createraw3()
			failed to send multiple UDP requests. [RT #16349]

99
100
101
2073.	[bug]		Incorrect semantics check for update policy "wildcard".
			[RT #16353]

102
103
104
2072.	[bug]		We were not generating valid HMAC SHA digests.
			[RT #16320]

105
106
107
2071.	[port]		Test whether gcc accepts -fno-strict-aliasing.
			[RT #16324]

108
109
110
2070.	[bug]		The remote address was not always displayed when
			reporting dispatch failures. [RT #16315]

111
112
2069.	[bug]		Cross compiling was not working. [RT #16330]

113
114
115
2068.	[cleanup]	Lower incremental tuning message to debug 1.
			[RT #16319]

116
117
118
2067.	[bug]		'rndc' could close the socket too early triggering
			a INSIST under Windows. [RT #16317]

119
2066.	[security]	Handle SIG queries gracefully. [RT #16300]
Mark Andrews's avatar
Mark Andrews committed
120

121
122
123
2065.	[bug]		libbind: probe for HPUX prototypes for
			endprotoent_r() and endservent_r().  [RT 16313]

124
125
2064.	[bug]		libbind: silence AIX compiler warnings. [RT #16218]

126
127
128
2063.	[bug]		Change #1955 introduced a bug which caused the first
			'rndc flush' call to not free memory. [RT #16244]

Mark Andrews's avatar
Mark Andrews committed
129
2062.	[bug]		'dig +nssearch' was reusing a buffer before it had
130
131
			been returned by the socket code. [RT #16307]

132
133
2061.	[bug]		Accept expired wildcard message reversed. [RT #16296]

134
135
136
2060.	[bug]		Enabling DLZ support could leave views partially
			configured. [RT #16295]

137
138
139
2059.	[bug]		Search into cache rbtdb could trigger an INSIST
			failure while cleaning up a stale rdataset.
			[RT #16292]
140

141
2058.	[bug]		Adjust how we calculate rtt estimates in the presence
Mark Andrews's avatar
Mark Andrews committed
142
			of authoritative servers that drop EDNS and/or CD
143
144
145
			requests.  Also fallback to EDNS/512 and plain DNS
			faster for zones with less than 3 servers.  [RT #16187]

146
147
148
2057.	[bug]		Make setting "ra" dependent on both allow-query-cache
			and allow-recursion. [RT #16290]

149
150
151
2056.	[bug]		dig: ixfr= was not being treated case insensitively
			at all times. [RT #15955]

152
153
154
2055.	[bug]		Missing goto after dropping multicast query.
			[RT #15944]

155
156
157
2054.	[port]		freebsd: do not explicitly link against -lpthread.
			[RT #16170]

158
159
2053.	[port]		netbsd:libbind: silence compiler warnings. [RT #16220]

160
161
162
2052.	[bug]		'rndc' improve connect failed message to report
			the failing address. [RT #15978]

163
164
2051.	[port]		More strtol() fixes. [RT #16249]

165
166
167
2050.	[bug]		Parsing of NSAP records was not case insensitive.
			[RT #16287]

168
169
170
171
172
2049.	[bug]		Restore SOA before AXFR when falling back from
			a attempted IXFR when transfering in a zone.
			Allow a initial SOA query before attempting
			a AXFR to be requested. [RT #16156]

173
174
175
176
177
2048.	[bug]		It was possible to loop forever when using
			avoid-v4-udp-ports / avoid-v6-udp-ports when
			the OS always returned the same local port.
			[RT #16182]

178
179
180
2047.	[bug]		Failed to initialise the interface flags to zero.
			[RT #16245]

181
2046.	[bug]		rbtdb.c:rdataset_setadditional() could cause duplicate
182
			cleanup [RT #16247].
183

184
2045.	[func]		Use lock buckets for acache entries to limit memory
185
			consumption. [RT #16183]
186

187
2044.	[port]		Add support for atomic operations for Itanium.
188
			[RT #16179]
189

190
191
192
2043.	[port]		nsupdate/nslookup: Force the flushing of the prompt
			for interactive sessions. [RT#16148]

193
194
195
2042.	[bug]		named-checkconf was incorrectly rejecting the
			logging category "config". [RT #16117]

196
197
198
2041.	[bug]		"configure --with-dlz-bdb=yes" produced a bad
			set of libraries to be linked. [RT #16129]

199
200
2040.	[bug]		rbtdb no_references() could trigger an INSIST
			failure with --enable-atomic.  [RT #16022]
201

202
2039.	[func]		Check that all buffers passed to the socket code
Mark Andrews's avatar
Mark Andrews committed
203
			have been retrieved when the socket event is freed.
204
205
206
207
208
			[RT #16122]

2038.	[bug]		dig/nslookup/host was unlinking from wrong list
			when handling errors. [RT #16122]

209
210
211
212
2037.	[func]		When unlinking the first or last element in a list
			check that the list head points to the element to
			be unlinked. [RT #15959]

213
214
215
2036.	[bug]		'rndc recursing' could cause trigger a REQUIRE.
			[RT #16075]

216
217
218
219
2035.	[func]		Make falling back to TCP on UDP refresh failure
			optional. Default "try-tcp-refresh yes;" for BIND 8
			compatibility. [RT #16123]

220
221
2034.	[bug]		gcc: set -fno-strict-aliasing. [RT #16124]

222
223
224
2033.	[bug]		We wern't creating multiple client memory contexts
			on demand as expected. [RT #16095]

225
226
2032.	[bug]		Remove a INSIST in query_addadditional2(). [RT #16074]

227
228
229
2031.	[bug]		Emit a error message when "rndc refresh" is called on
			a non slave/stub zone. [RT # 16073]

230
231
232
2030.	[bug]		We were being overly conservative when disabling
			openssl engine support. [RT #16030]

233
234
235
2029.	[bug]		host printed out the server multiple times when
			specified on the command line. [RT #15992]

Mark Andrews's avatar
Mark Andrews committed
236
2028.	[port]		linux: socket.c compatability for old systems.
237
238
			[RT #16015]

Mark Andrews's avatar
Mark Andrews committed
239
2027.	[port]		libbind: Solaris x86 support. [RT #16020]
240

241
242
243
2026.	[bug]		Rate limit the two recursive client exceeded messages.
			[RT #16044]

244
245
2025.	[func]		Update "zone serial unchanged" message. [RT #16026]

246
247
248
2024.	[bug]		named emited spurious "zone serial unchanged"
			messages on reload. [RT #16027]

249
250
251
2023.	[bug]		"make install" should create ${localstatedir}/run and
			${sysconfdir} if they do not exist. [RT #16033]

252
253
254
255
256
2022.	[bug]		If dnssec validation is disabled only assert CD if
			CD was requested. [RT #16037]

2021.	[bug]		dnssec-enable no; triggered a REQUIRE. [RT #16037]

257
258
2020.	[bug]		rdataset_setadditional() could leak memory. [RT #16034]

259
260
261
2019.	[tuning]	Reduce the amount of work performed per quantum
			when cleaning the cache. [RT #15986]

262
263
264
265
2018.	[bug]		Checking if the HMAC MD5 private file was broken.
			[RT #15960]

2017.	[bug]		allow-query default was not correct. [RT #15946]
266

267
268
269
270
2016.	[bug]		Return a partial answer if recursion is not
			allowed but requested and we had the answer
			to the original qname. [RT #15945]

271
272
273
274
275
276
2015.	[cleanup]	use-additional-cache is now acache-enable for
			consistancy.  Default acache-enable off in BIND 9.4
			as it requires memory usage to be configured.
			It may be enabled by default in BIND 9.5 once we
			have more experience with it.

Shane Kerr's avatar
Shane Kerr committed
277
278
279
2014.	[func]		Statistics about acache now recorded and sent
			to log. [RT #15976]

280
281
282
2013.	[bug]		Handle unexpected TSIGs on unsigned AXFR/IXFR
			responses more gracefully. [RT #15941]

283
284
285
2012.	[func]		Don't insert new acache entries if acache is full.
			[RT #15970]

286
287
288
289
2011.	[func]		dnssec-signzone can now update the SOA record of
			the signed zone, either as an increment or as the
			system time(). [RT #15633]

290
291
2010.	[placeholder]	rt15958

292
293
2009.	[bug]		libbind: coverity fixes. [RT #15808]

294
295
296
297
298
299
300
2008.	[func]		It is now posssible to enable/disable DNSSEC
			validation from rndc.  This is useful for the
			mobile hosts where the current connection point
			breaks DNSSEC (firewall/proxy).  [RT #15592]

				rndc validation newstate [view]

301
302
303
304
2007.	[func]		It is now possible to explicitly enable DNSSEC
			validation.  default dnssec-validation no; to
			be changed to yes in 9.5.0.  [RT #15674]

305
306
307
308
309
310
311
312
313
314
315
2006.	[security]	Allow-query-cache and allow-recursion now default
			to the builtin acls "localnets" and "localhost".

			This is being done to make caching servers less
			attractive as reflective amplifying targets for
			spoofed traffic.  This still leave authoritative
			servers exposed.

			The best fix is for full BCP 38 deployment to
			remove spoofed traffic.

316
317
318
319
2005.	[bug]		libbind: Retransmission timeouts should be
			based on which attempt it is to the nameserver
			and not the nameserver itself. [RT #13548]

320
321
322
323
2004.	[bug]		dns_tsig_sign() could pass a NULL pointer to
			dst_context_destroy() when cleaning up after a
			error. [RT #15835]

324
325
326
327
328
2003.	[bug]		libbind: The DNS name/address lookup functions could
			occasionally follow a random pointer due to
			structures not being completely zeroed. [RT #15806]

2002.	[bug]		libbind: tighten the constraints on when
329
330
			struct addrinfo._ai_pad exists.  [RT #15783]

331
332
333
334
2001.	[func]		Check the KSK flag when updating a secure dynamic zone.
			New zone option "update-check-ksk yes;".  [RT #15817]

2000.	[bug]		memmove()/strtol() fix was incomplete. [RT #15812]
335

336
337
1999.	[func]		Implement "rrset-order fixed". [RT #13662]

338
339
340
341
1998.	[bug]		Restrict handling of fifos as sockets to just SunOS.
			This allows named to connect to entropy gathering
			daemons that use fifos instead of sockets. [RT #15840]

342
343
344
345
1997.	[bug]		Named was failing to replace negative cache entries
			when a positive one for the type was learnt.
			[RT #15818]

346
347
348
1996.	[bug]		nsupdate: if a zone has been specified it should
			appear in the output of 'show'. [RT #15797]

349
350
351
1995.	[bug]		'host' was reporting multiple "is an alias" messages.
			[RT #15702]

352
353
1994.	[port]		OpenSSL 0.9.8 support. [RT #15694]

354
355
356
357
1993.	[bug]		Log messsage, via syslog, were missing the space
			after the timestamp if "print-time yes" was specified.
			[RT #15844]

Mark Andrews's avatar
Mark Andrews committed
358
1992.	[bug]		Not all incoming zone transfer messages included the
359
360
			view.  [RT #15825]

361
362
363
364
1991.	[cleanup]	The configuration data, once read, should be treated
			as readonly.  Expand the use of const to enforce this
			at compile time. [RT #15813]

365
366
367
368
1990.	[bug]		libbind:  isc's override of broken gettimeofday()
			implementions was not always effective.
			[RT #15709]

369
370
371
1989.	[bug]		win32: don't check the service password when
			re-installing. [RT #15882]

372
373
374
1988.	[bug]		Remove a bus error from the SHA256/SHA512 support.
			[RT #15878]

375
376
1987.	[func]		DS/DLV SHA256 digest algorithm support. [RT #15608]

377
378
1986.	[func]		Report when a zone is removed. [RT #15849]

379
380
381
382
383
384
385
386
387
388
389
1985.	[protocol]	DLV has now been assigned a official type code of
			32769. [RT #15807]

			Note: care should be taken to ensure you upgrade
			both named and dnssec-signzone at the same time for
			zones with DLV records where named is the master
			server for the zone.  Also any zones that contain
			DLV records should be removed when upgrading a slave
			zone.  You do not however have to upgrade all
			servers for a zone with DLV records simultaniously.

390
391
392
1984.	[func]		dig, nslookup and host now advertise a 4096 byte
			EDNS UDP buffer size by default. [RT #15855]

393
394
395
1983.	[func]		Two new update policies.  "selfsub" and "selfwild".
			[RT #12895]

396
397
398
399
1982.	[bug]		DNSKEY was being accepted on the parent side of
			a delegation.  KEY is still accepted there for
			RFC 3007 validated updates. [RT #15620]

400
401
402
1981.	[bug]		win32: condition.c:wait() could fail to reattain
			the mutex lock.

403
404
405
1980.	[func]		dnssec-signzone: output the SOA record as the
			first record in the signed zone. [RT #15758]

406
407
408
1979.	[port]		linux: allow named to drop core after changing
			user ids. [RT #15753]

409
410
411
1978.	[port]		Handle systems which have a broken recvmsg().
			[RT #15742]

412
413
1977.	[bug]		Silence noisy log message. [RT #15704]

414
415
1976.	[bug]		Handle systems with no IPv4 addresses. [RT #15695]

416
417
418
1975.	[bug]		libbind: isc_gethexstring() could misparse multi-line
			hex strings with comments. [RT #15814]

419
420
421
1974.	[doc]		List each of the zone types and associated zone
			options seperately in the ARM.

422
423
424
1973.	[func]		TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
			HMACSHA512 support. [RT #13606]

425
426
427
1972.	[contrib]	DBUS dynamic forwarders integation from
			Jason Vas Dias <jvdias@redhat.com>.

428
1971.	[port]		linux: make detection of missing IF_NAMESIZE more
429
			robust. [RT #15443]
430

431
432
433
1970.	[bug]		nsupdate: adjust UDP timeout when falling back to
			unsigned SOA query. [RT #15775]

434
435
436
1969.	[bug]		win32: the socket code was freeing the socket
			structure too early. [RT #15776]

437
438
1968.	[bug]		Missing lock in resolver.c:validated(). [RT #15739]

439
440
1967.	[func]		dig/nslookup/host: warn about missing "QR". [RT #15779]

Mark Andrews's avatar
Mark Andrews committed
441
1966.	[bug]		Don't set CD when we have fallen back to plain DNS.
442
443
			[RT #15727]

444
445
446
1965.	[func]		Suppress spurious "recusion requested but not
			available" warning with 'dig +qr'. [RT #15780].

447
448
1964.	[func]		Seperate out MX and SRV to CNAME checks. [RT #15723]

449
450
451
1963.	[port]		Tru64 4.0E doesn't support send() and recv(). 
			[RT #15586]

452
453
454
1962.	[bug]		Named failed to clear old update-policy when it
			was removed. [RT #15491]

455
456
457
1961.	[bug]		Check the port and address of responses forwarded
			to dispatch. [RT #15474]

458
459
460
1960.	[bug]		Update code should set NSEC ttls from SOA MINIMUM.
			[RT #15465]

461
462
463
464
1959.	[func]		Control the zeroing of the negative response TTL to
			a soa query.  Defaults "zero-no-soa-ttl yes;" and
			"zero-no-soa-ttl-cache no;". [RT #15460]

465
466
467
1958.	[bug]		Named failed to update the zone's secure state
			until the zone was reloaded. [RT #15412]

468
469
470
1957.	[bug]		Dig mishandled responses to class ANY queries.
			[RT #15402]

471
472
473
474
1956.	[bug]		Improve cross compile support, 'gen' is now built
			by native compiler.  See README for additional
			cross compile support information. [RT #15148]

475
476
1955.	[bug]		Pre-allocate the cache cleaning interator. [RT #14998]

Mark Andrews's avatar
Mark Andrews committed
477
1954.	[func]		Named now falls back to advertising EDNS with a
478
479
480
			512 byte receive buffer if the initial EDNS queries
			fail.  [RT #14852]

Mark Andrews's avatar
Mark Andrews committed
481
1953.	[func]		The maximum EDNS UDP response named will send can
482
483
484
485
			now be set in named.conf (max-udp-size).  This is
			independent of the advertised receive buffer
			(edns-udp-size). [RT #14852]

486
487
488
1952.	[port]		hpux: tell the linker to build a runtime link
			path "-Wl,+b:". [RT #14816].

489
490
491
492
1951.	[security]	Drop queries from particular well known ports.
			Don't return FORMERR to queries from particular
			well known ports.  [RT #15636]
			
493
494
495
496
1950.	[port]		Solaris 2.5.1 and earlier cannot bind() then connect()
			a TCP socket. This prevents the source address being
			set for TCP connections. [RT #15628]

497
498
1949.	[func]		Addition memory leakage checks. [RT #15544]

499
500
501
502
1948.	[bug]		If was possible to trigger a REQUIRE failure in
			xfrin.c:maybe_free() if named ran out of memory.
			[RT #15568]

503
504
505
506
507
1947.	[func]		It is now possible to configure named to accept
			expired RRSIGs.  Default "dnssec-accept-expired no;".
			Setting "dnssec-accept-expired yes;" leaves named
			vulnerable to replay attacks.  [RT #14685]

508
509
510
1946.	[bug]		resume_dslookup() could trigger a REQUIRE failure
			when using forwarders. [RT #15549]

511
1945.	[cleanup]	dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
Mark Andrews's avatar
Mark Andrews committed
512
			To generate a RSAMD5 key you must explicitly request
513
514
			RSAMD5. [RT #13780]
			
515
516
517
1944.	[cleanup]	isc_hash_create() does not need a read/write lock.
			[RT #15522]

Mark Andrews's avatar
Mark Andrews committed
518
1943.	[bug]		Set the loadtime after rolling forward the journal.
519
520
			[RT #15647]

521
522
523
524
1942.	[bug]		If the name of a DNSKEY match that of one in
			trusted-keys do not attempt to validate the DNSKEY
			using the parents DS RRset. [RT #15649]

525
526
527
1941.	[bug]		ncache_adderesult() should set eresult even if no
			rdataset is passed to it. [RT #15642]

528
529
530
1940.	[bug]		Fixed a number of error conditions reported by
			Coverity.

531
532
533
534
535
536
537
1939.	[bug]		The resolver could dereference a null pointer after
			validation if all the queries have timed out.
			[RT #15528]

1938.	[bug]		The validator was not correctly handling unsecure
			negative responses at or below a SEP. [RT #15528]

538
539
1937.	[bug]		sdlz doesn't handle RRSIG records. [RT #15564]

Mark Andrews's avatar
Mark Andrews committed
540
1936.	[bug]		The validator could leak memory. [RT #15544]
541

542
543
544
545
546
547
1935.	[bug]		'acache' was DO sensitive. [RT #15430]

1934.	[func]		Validate pending NS RRsets, in the authority section,
			prior to returning them if it can be done without
			requiring DNSKEYs to be fetched.  [RT #15430]

Mark Andrews's avatar
Mark Andrews committed
548
1933.	[bug]		dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
549

550
551
1932.	[bug]		hpux: LDFLAGS was getting corrupted. [RT #15530]

552
553
1931.	[bug]		Per-client mctx could require a huge amount of memory,
			particularly for a busy caching server. [RT #15519]
554

555
556
557
558
1930.	[port]		HPUX: ia64 support. [RT #15473]

1929.	[port]		FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.

559
560
1928.	[bug]		Race in rbtdb.c:currentversion(). [RT #15517]

561
562
563
1927.	[bug]		Access to soanode or nsnode in rbtdb violated the
			lock order rule and could cause a dead lock.
			[RT# 15518]
564

565
1926.	[bug]		The Windows installer did not check for empty
566
567
			passwords.  BINDinstall was being installed in
			the wrong place. [RT #15483]
568

569
570
571
1925.	[port]		All outer level AC_TRY_RUNs need cross compiling
			defaults. [RT #15469]

572
573
1924.	[port]		libbind: hpux ia64 support. [RT #15473]

574
575
1923.	[bug]		ns_client_detach() called too early. [RT #15499]

576
577
578
1922.	[bug]		check-tool.c:setup_logging() missing call to
			dns_log_setcontext().

Mark Andrews's avatar
Mark Andrews committed
579
1921.	[bug]		Client memory contexts were not using internal
580
581
			malloc. [RT# 15434]

Mark Andrews's avatar
update    
Mark Andrews committed
582
1920.	[bug]		The cache rbtdb lock array was too small to
583
584
585
			have the desired performance characteristics.
			[RT #15454]

586
587
588
1919.	[contrib]	queryperf: a set of new features: collecting/printing
			response delays, printing intermediate results, and
			adjusting query rate for the "target" qps.
589

590
591
1918.	[bug]		Memory leak when checking acls. [RT #15391]

592
593
594
1917.	[doc]		funcsynopsisinfo wasn't being treated as verbatim
			when generating man pages. [RT #15385]

595
596
1916.	[func]		Integrate contibuted IDN code from JPNIC. [RT #15383]

597
598
1915.	[bug]		dig +ndots was broken. [RT #15215]

599
600
601
602
1914.	[protocol]	DS is required to accept mnemonic algorithms
			(RFC 4034).  Still emit numeric algorithms for
			compatability with RFC 3658. [RT #15354]

603
604
1913.	[func]		Integrate contibuted DLZ code into named. [RT #11382]

Mark Andrews's avatar
Mark Andrews committed
605
1912.	[port]		aix: atomic locking for powerpc. [RT #15020]
606

Mark Andrews's avatar
Mark Andrews committed
607
1911.	[bug]		Update windows socket code. [RT #14965]
608

Mark Andrews's avatar
Mark Andrews committed
609
1910.	[bug]		dig's +sigchase code overhauled. [RT #14933]
610

Mark Andrews's avatar
Mark Andrews committed
611
1909.	[bug]		The DLV code has been re-worked to make no longer
612
613
			query order sensitive. [RT #14933]

Mark Andrews's avatar
Mark Andrews committed
614
1908.	[func]		dig now warns if 'RA' is not set in the answer when
615
616
617
618
			'RD' was set in the query.  host/nslookup skip servers
			that fail to set 'RA' when 'RD' is set unless a server
			is explicitly set.  [RT #15005]

Mark Andrews's avatar
Mark Andrews committed
619
1907.	[func]		host/nslookup now continue (default)/fail on SERVFAIL.
620
621
			[RT #15006]

Mark Andrews's avatar
Mark Andrews committed
622
1906.	[func]		dig now has a '-q queryname' and '+showsearch' options.
623
624
			[RT #15034]

Mark Andrews's avatar
Mark Andrews committed
625
1905.	[bug]		Strings returned from cfg_obj_asstring() should be
626
627
628
629
			treated as read-only.  The prototype for 
			cfg_obj_asstring() has been updated to reflect this.
			[RT #15256]

Mark Andrews's avatar
Mark Andrews committed
630
1904.	[func]		Automatic empty zone creation for D.F.IP6.ARPA and
631
632
633
634
635
636
			friends.  Note: RFC 1918 zones are not yet covered by
			this but are likely to be in a future release.

			New options: empty-server, empty-contact,
			empty-zones-enable and disable-empty-zone.

Mark Andrews's avatar
Mark Andrews committed
637
1903.	[func]		ISC string copy API.
638

Mark Andrews's avatar
Mark Andrews committed
639
1902.	[func]		Attempt to make the amount of work performed in a
640
641
642
643
644
645
			iteration self tuning.  The covers nodes clean from
			the cache per iteration, nodes written to disk when
			rewriting a master file and nodes destroyed per
			iteration when destroying a zone or a cache.
			[RT #14996]

Mark Andrews's avatar
Mark Andrews committed
646
1901.	[cleanup]	Don't add DNSKEY records to the additional section.
647

Mark Andrews's avatar
Mark Andrews committed
648
1900.	[bug]		ixfr-from-differences failed to ensure that the
649
650
			serial number increased. [RT #15036]

Mark Andrews's avatar
Mark Andrews committed
651
1899.	[func]		named-checkconf now validates update-policy entries.
652
653
			[RT #14963]

Mark Andrews's avatar
Mark Andrews committed
654
1898.	[bug]		Extend ISC_SOCKADDR_FORMATSIZE and
655
656
			ISC_NETADDR_FORMATSIZE to allow for scope details.

Mark Andrews's avatar
Mark Andrews committed
657
1897.	[func]		x86 and x86_64 now have seperate atomic locking
658
659
			implementations.

Mark Andrews's avatar
Mark Andrews committed
660
1896.	[bug]		Recursive clients soft quota support wasn't working
661
662
			as expected. [RT #15103]

Mark Andrews's avatar
Mark Andrews committed
663
1895.	[bug]		A escaped character is, potentially, converted to
664
665
			the output character set too early. [RT #14666]

Mark Andrews's avatar
Mark Andrews committed
666
1894.	[doc]		Review ARM for BIND 9.4.
667

Mark Andrews's avatar
Mark Andrews committed
668
1893.	[port]		Use uintptr_t if available. [RT #14606]
669

Mark Andrews's avatar
Mark Andrews committed
670
1892.	[func]		Support for SPF rdata type. [RT #15033]
671

Mark Andrews's avatar
Mark Andrews committed
672
1891.	[port]		freebsd: pthread_mutex_init can fail if it runs out
673
674
			of memory. [RT #14995]

Mark Andrews's avatar
Mark Andrews committed
675
1890.	[func]		Raise the UDP recieve buffer size to 32k if it is
676
677
			less than 32k. [RT #14953]

Mark Andrews's avatar
Mark Andrews committed
678
1889.	[port]		sunos: non blocking i/o support. [RT #14951]
679

Mark Andrews's avatar
Mark Andrews committed
680
1888.	[func]		Support for IPSECKEY rdata type. [RT #14967]
681

Mark Andrews's avatar
Mark Andrews committed
682
1887.	[bug]		The cache could delete expired records too fast for
683
684
			clients with a virtual time in the past. [RT #14991]

Mark Andrews's avatar
Mark Andrews committed
685
1886.	[bug]		fctx_create() could return success even though it
686
687
			failed. [RT #14993]

Mark Andrews's avatar
Mark Andrews committed
688
1885.	[func]		dig: report the number of extra bytes still left in
689
690
			the packet after processing all the records.

Mark Andrews's avatar
Mark Andrews committed
691
1884.	[cleanup]	dighost.c: move external declarations into <dig/dig.h>.
692

Mark Andrews's avatar
Mark Andrews committed
693
1883.	[bug]		dnssec-signzone, dnssec-keygen: handle negative debug
694
695
			levels. [RT #14962]

Mark Andrews's avatar
Mark Andrews committed
696
1882.	[func]		Limit the number of recursive clients that can be
697
698
699
700
			waiting for a single query (<qname,qtype,qclass>) to
			resolve.  New options clients-per-query and
			max-clients-per-query.

Mark Andrews's avatar
Mark Andrews committed
701
1881.	[func]		Add a system test for named-checkconf. [RT #14931]
702

Mark Andrews's avatar
Mark Andrews committed
703
1880.	[func]		The lame cache is now done on a <qname,qclass,qtype>
704
705
706
			basis as some servers only appear to be lame for
			certain query types.  [RT #14916]

Mark Andrews's avatar
Mark Andrews committed
707
1879.	[func]		"USE INTERNAL MALLOC" is now runtime selectable.
708
709
			[RT #14892]

Mark Andrews's avatar
Mark Andrews committed
710
1878.	[func]		Detect duplicates of UDP queries we are recursing on
711
			and drop them.  New stats category "duplicates".
712
			[RT #2471]
713

Mark Andrews's avatar
Mark Andrews committed
714
1877.	[bug]		Fix unreasonably low quantum on call to
715
716
717
			dns_rbt_destroy2().  Remove unnecessay unhash_node()
			call. [RT #14919]

Mark Andrews's avatar
Mark Andrews committed
718
1876.	[func]		Additional memory debugging support to track size
Mark Andrews's avatar
Mark Andrews committed
719
			and mctx arguments. [RT #14814]
720

Mark Andrews's avatar
Mark Andrews committed
721
1875.	[bug]		process_dhtkey() was using the wrong memory context
722
723
			to free some memory. [RT #14890]

Mark Andrews's avatar
Mark Andrews committed
724
1874.	[port]		sunos: portability fixes. [RT #14814]
725

Mark Andrews's avatar
Mark Andrews committed
726
1873.	[port]		win32: isc__errno2result() now reports its caller.
727
728
			[RT #13753]

Mark Andrews's avatar
Mark Andrews committed
729
1872.	[port]		win32: Handle ERROR_NETNAME_DELETED.  [RT #13753]
730

Mark Andrews's avatar
Mark Andrews committed
731
1871.	[placeholder]
732

Mark Andrews's avatar
Mark Andrews committed
733
1870.	[func]		Added framework for handling multiple EDNS versions.
734
			[RT #14873]
735

Mark Andrews's avatar
Mark Andrews committed
736
1869.	[func]		dig can now specify the EDNS version when making
737
			a query. [RT #14873]
738

739
740
1868.	[func]		edns-udp-size can now be overridden on a per
			server basis. [RT #14851]
Mark Andrews's avatar
Mark Andrews committed
741

742
743
1867.	[bug]		It was possible to trigger a INSIST in
			dlv_validatezonekey(). [RT #14846]
Mark Andrews's avatar
Mark Andrews committed
744

745
746
1866.	[bug]		resolv.conf parse errors were being ignored by
			dig/host/nslookup. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
747

748
749
1865.	[bug]		Silently ignore nameservers in /etc/resolv.conf with
			bad addresses. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
750

751
752
753
1864.	[bug]		Don't try the alternative transfer source if you
			got a answer / transfer with the main source
			address. [RT #14802]
Mark Andrews's avatar
Mark Andrews committed
754

755
756
1863.	[bug]		rrset-order "fixed" error messages not complete.

757
758
759
760
761
762
763
1862.	[func]		Add additional zone data constancy checks.
			named-checkzone has extended checking of NS, MX and 
			SRV record and the hosts they reference.
			named has extended post zone load checks.
			New zone options: check-mx and integrity-check. 
			[RT #4940]

764
765
1861.	[bug]		dig could trigger a INSIST on certain malformed
			responses. [RT #14801]
Mark Andrews's avatar
Mark Andrews committed
766

767
768
1860.	[port]		solaris 2.8: hack_shutup_pthreadmutexinit was
			incorrectly set. [RT #14775]
Mark Andrews's avatar
Mark Andrews committed
769

770
1859.	[func]		Add support for CH A record. [RT #14695]
Mark Andrews's avatar
Mark Andrews committed
771

772
773
774
1858.	[bug]		The flush-zones-on-shutdown option wasn't being
			parsed. [RT #14686]

775
776
1857.	[bug]		named could trigger a INSIST() if reconfigured /
			reloaded too fast.  [RT #14673]
Mark Andrews's avatar
Mark Andrews committed
777

Rob Austein's avatar
regen    
Rob Austein committed
778
779
780
1856.	[doc]		Switch Docbook toolchain from DSSSL to XSL.
			[RT #11398]

781
782
783
1855.	[bug]		ixfr-from-differences was failing to detect changes
			of ttl due to dns_diff_subtract() was ignoring the ttl
			of records.  [RT #14616]
Mark Andrews's avatar
Mark Andrews committed
784

785
786
787
1854.	[bug]		lwres also needs to know the print format for
			(long long).  [RT #13754]

788
789
790
1853.	[bug]		Rework how DLV interacts with proveunsecure().
			[RT #13605]

791
792
793
1852.	[cleanup]	Remove last vestiges of dnssec-signkey and
			dnssec-makekeyset (removed from Makefile years ago).

794
795
1851.	[doc]		Doxygen comment markup. [RT #11398]

796
797
1850.	[bug]		Memory leak in lwres_getipnodebyaddr(). [RT #14591]

798
799
800
1849.	[doc]		All forms of the man pages (docbook, man, html) should
			have consistant copyright dates.

801
802
1848.	[bug]		Improve SMF integration. [RT #13238]

803
1847.	[bug]		isc_ondestroy_init() is called too late in
Mark Andrews's avatar
Mark Andrews committed
804
			dns_rbtdb_create()/dns_rbtdb64_create(). 
805
806
			[RT #13661]
			
807
808
809
1846.	[contrib]	query-loc-0.3.0 from Stephane Bortzmeyer
			<bortzmeyer@nic.fr>.

810
811
812
1845.	[bug]		Improve error reporting to distingish between
			accept()/fcntl() and socket()/fcntl() errors.
			[RT #13745]
Mark Andrews's avatar
Mark Andrews committed
813

814
815
816
817
818
819
1844.	[bug]		inet_pton() accepted more that 4 hexadecimal digits
			for each 16 bit piece of the IPv6 address.  The text
			representation of a IPv6 address has been tighted
			to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
			[RT #5662]

820
821
822
823
824
1843.	[cleanup]	CINCLUDES takes precedence over CFLAGS.  This helps
			when CFLAGS contains "-I /usr/local/include"
			resulting in old header files being used.

1842.	[port]		cmsg_len() could produce incorrect results on
825
826
			some platform. [RT #13744]

827
828
1841.	[bug]		"dig +nssearch" now makes a recursive query to
			find the list of nameservers to query. [RT #13694]
Mark Andrews's avatar
Mark Andrews committed
829

Mark Andrews's avatar
Mark Andrews committed
830
1840.	[func]		dnssec-signzone can now randomize signature end times
831
832
			(dnssec-signzone -j jitter). [RT #13609]

833
834
1839.	[bug]		<isc/hash.h> was not being installed.

835
836
1838.	[cleanup]	Don't allow Linux capabilities to be inherited.
			[RT #13707]
Mark Andrews's avatar
Mark Andrews committed
837

838
839
1837.	[bug]		Compile time option ISC_FACILITY was not effective
			for 'named -u <user>'.  [RT #13714]
Mark Andrews's avatar
Mark Andrews committed
840

841
842
1836.	[cleanup]	Silence compiler warnings in hash_test.c.

843
844
1835.	[bug]		Update dnssec-signzone's usage message. [RT #13657]

845
846
1834.	[bug]		Bad memset in rdata_test.c. [RT #13658]

847
848
1833.	[bug]		Race condition in isc_mutex_lock_profile(). [RT #13660]

849
850
851
1832.	[bug]		named fails to return BADKEY on unknown TSIG algorithm.
			[RT #13620]

852
853
1831.	[doc]		Update named-checkzone documentation. [RT#13604]

854
855
1830.	[bug]		adb lame cache has sence of test reversed. [RT #13600]

856
857
1829.	[bug]		win32: "pid-file none;" broken. [RT #13563]

858
859
860
1828.	[bug]		isc_rwlock_init() failed to properly cleanup if it
			encountered a error. [RT #13549]

861
862
1827.	[bug]		host: update usage message for '-a'. [RT #37116]

863
864
865
866
867
1826.	[bug]		Missing DESTROYLOCK() in isc_mem_createx() on out
			of memory error. [RT #13537]

1825.	[bug]		Missing UNLOCK() on out of memory error from in
			rbtdb.c:subtractrdataset(). [RT #13519]
868

869
870
871
1824.	[bug]		Memory leak on dns_zone_setdbtype() failure.
			[RT #13510]

872
873
874
1823.	[bug]		Wrong macro used to check for point to point interface.
			[RT#13418]

875
876
1822.	[bug]		check-names test for RT was reversed. [RT #13382]

Mark Andrews's avatar
Mark Andrews committed
877
878
1821.	[placeholder]

879
1820.	[bug]		Gracefully handle acl loops. [RT #13659]
Mark Andrews's avatar
Mark Andrews committed
880

881
882
883
884
1819.	[bug]		The validator needed to check both the algorithm and
			digest types of the DS to determine if it could be
			used to introduce a secure zone. [RT #13593]

885
886
1818.	[bug]		'named-checkconf -z' triggered an INSIST. [RT #13599]

887
1817.	[func]		Add support for additional zone file formats for
888
889
			improving loading performance.  The masterfile-format
			option in named.conf can be used to specify a
890
			non-default format.  A separate command
891
			named-compilezone was provided to generate zone files
892
893
894
			in the new format.  Additionally, the -I and -O options
			for dnssec-signzone specify the input and output
			formats.
895

896
897
1816.	[port]		UnixWare: failed to compile lib/isc/unix/net.c.
			[RT #13597]
Mark Andrews's avatar
Mark Andrews committed
898

899
900
901
1815.	[bug]		nsupdate triggered a REQUIRE if the server was set
			without also setting the zone and it encountered
			a CNAME and was using TSIG.  [RT #13086]
Mark Andrews's avatar
Mark Andrews committed
902

903
1814.	[func]		UNIX domain controls are now supported.
Mark Andrews's avatar
Mark Andrews committed
904

905
906
907
908
1813.	[func]		Restructured the data locking framework using
			architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
909
			x86, x86_64, alpha, powerpc, and mips are currently
910
			supported.
911

912
913
914
1812.	[port]		win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
			[RT #13453]

915
916
1811.	[func]		Preserve the case of domain names in rdata during
			zone transfers. [RT #13547]
Mark Andrews's avatar
Mark Andrews committed
917

918
919
920
1810.	[bug]		configure, lib/bind/configure make different default
			decisions about whether to do a threaded build.
			[RT #13212]
Mark Andrews's avatar
Mark Andrews committed
921

922
923
1809.	[bug]		"make distclean" failed for libbind if the platform
			is not supported.
Mark Andrews's avatar
Mark Andrews committed
924

925
926
1808.	[bug]		zone.c:notify_zone() contained a race condition,
			zone->db could change underneath it.  [RT #13511]
Mark Andrews's avatar
Mark Andrews committed
927

928
929
1807.	[bug]		When forwarding (forward only) set the active domain
			from the forward zone name. [RT #13526]
Mark Andrews's avatar
Mark Andrews committed
930

931
932
933
1806.	[bug]		The resolver returned the wrong result when a CNAME /
			DNAME was encountered when fetching glue from a
			secure namespace. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
934

935
936
1805.	[bug]		Pending status was not being cleared when DLV was
			active. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
937

938
939
940
1804.	[bug]		Ensure that if we are queried for glue that it fits
			in the additional section or TC is set to tell the
			client to retry using TCP. [RT #10114]
Mark Andrews's avatar
Mark Andrews committed
941

942
943
1803.	[bug]		dnssec-signzone sometimes failed to remove old
			RRSIGs. [RT #13483]
Mark Andrews's avatar
Mark Andrews committed
944

945
1802.	[bug]		Handle connection resets better. [RT #11280]
Mark Andrews's avatar
Mark Andrews committed
946

947
948
1801.	[func]		Report differences between hints and real NS rrset
			and associated address records.
Mark Andrews's avatar
Mark Andrews committed
949

950
951
952
1800.	[bug]		Changes #1719 allowed a INSIST to be triggered.
			[RT #13428]

953
954
1799.	[bug]		'rndc flushname' failed to flush negative cache
			entries. [RT #13438]
Mark Andrews's avatar
Mark Andrews committed
955

956
957
1798.	[func]		The server syntax has been extended to support a
			range of servers.  [RT #11132]
Mark Andrews's avatar
Mark Andrews committed
958

959
960
961
1797.	[func]		named-checkconf now check acls to verify that they
			only refer to existing acls. [RT #13101]

962
1796.	[func]		"rndc freeze/thaw" now freezes/thaws all zones.
Mark Andrews's avatar
Mark Andrews committed
963

Mark Andrews's avatar
Mark Andrews committed
964
1795.	[bug]		"rndc dumpdb" was not fully documented.  Minor
965
			formating issues with "rndc dumpdb -all".  [RT #13396]
Mark Andrews's avatar
Mark Andrews committed
966

967
968
1794.	[func]		Named and named-checkzone can now both check for
			non-terminal wildcard records.
Mark Andrews's avatar
Mark Andrews committed
969

970
1793.	[func]		Extend adjusting TTL warning messages. [RT #13378]
Mark Andrews's avatar
Mark Andrews committed
971

972
973
1792.	[func]		New zone option "notify-delay".  Specify a minimum
			delay between sets of NOTIFY messages.
Mark Andrews's avatar
Mark Andrews committed
974

975
976
1791.	[bug]		'host -t a' still printed out AAAA and MX records.
			[RT #13230]
Mark Andrews's avatar
Mark Andrews committed
977

978
979
980
1790.	[cleanup]	Move lib/dns/sec/dst up into lib/dns.  This should
			allow parallel make to succeed.

981
982
983
1789.	[bug]		Prerequisite test for tkey and dnssec could fail
			with "configure --with-libtool".

984
985
986
1788.	[bug]		libbind9.la/libbind9.so needs to link against
			libisccfg.la/libisccfg.so.

987
988
1787.	[port]		HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.

989
990
991
992
1786.	[port]		AIX: libt_api needs to be taught to look for
			T_testlist in the main executable (--with-libtool).
			[RT #13239]

993
994
995
1785.	[bug]		libbind9.la/libbind9.so needs to link against
			libisc.la/libisc.so.

996
997
998
999
1784.	[cleanup]	"libtool -allow-undefined" is the default.
			Leave hooks in configure to allow it to be set
			if needed in the future.

1000
1001
1002
1783.	[cleanup]	We only need one copy of libtool.m4, ltmain.sh in the
			source tree.

1003
1004
1782.	[port]		OSX: --with-libtool + --enable-libbind broke on
			__evOptMonoTime.  [RT #13219]
Mark Andrews's avatar
Mark Andrews committed
1005

1006
1781.	[port]		FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
Mark Andrews's avatar
Mark Andrews committed
1007

1008
1009
1780.	[bug]		Update libtool to 1.5.10.

1010
1011
1779.	[port]		OSF 5.1: libtool didn't handle -pthread correctly.

1012
1778.	[port]		HUX 11.11: fix broken IN6ADDR_ANY_INIT and
1013
1014
			IN6ADDR_LOOPBACK_INIT macros.

1015
1777.	[port]		OSF 5.1: fix broken IN6ADDR_ANY_INIT and
1016
			IN6ADDR_LOOPBACK_INIT macros.
1017

1018
1019
1776.	[port]		Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
			IN6ADDR_LOOPBACK_INIT macros.
Mark Andrews's avatar
Mark Andrews committed
1020

1021
1022
1775.	[bug]		Only compile getnetent_r.c when threaded. [RT #13205]

1023
1024
1774.	[port]		Aix: Silence compiler warnings / build failures.
			[RT #13154]
Mark Andrews's avatar
Mark Andrews committed
1025

1026
1773.	[bug]		Fast retry on host / net unreachable. [RT #13153]
Mark Andrews's avatar
Mark Andrews committed
1027

Mark Andrews's avatar
Mark Andrews committed
1028
1029
1772.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
1030
1031
1771.	[placeholder]

1032
1033
1034
1770.	[bug]		named-checkconf failed to report missing a missing
			file clause for rbt{64} master/hint zones. [RT#13009]

1035
1036
1037
1769.	[port]		win32: change compiler flags /MTd ==> /MDd,
			/MT ==> /MD.

1038
1039
1040
1768.	[bug]		nsecnoexistnodata() could be called with a non-NSEC
			rdataset. [RT #12907]

1041
1042
1767.	[port]		Builds on IPv6 platforms without IPv6 Advanced API
			support for (struct in6_pktinfo) failed.  [RT #13077]
Mark Andrews's avatar
Mark Andrews committed
1043

1044
1045
1766.	[bug]		Update the master file timestamp on successful refresh
			as well as the journal's timestamp. [RT# 13062]
Mark Andrews's avatar
Mark Andrews committed
1046

1047
1048
1765.	[bug]		configure --with-openssl=auto failed. [RT #12937]

1049
1050
1051
1764.	[bug]		dns_zone_replacedb failed to emit a error message
			if there was no SOA record in the replacment db.
			[RT #13016]
Mark Andrews's avatar
Mark Andrews committed
1052

1053
1054
1763.	[func]		Perform sanity checks on NS records which refer to
			'in zone' names. [RT #13002]
Mark Andrews's avatar
Mark Andrews committed
1055

1056
1057
1762.	[bug]		isc_interfaceiter_create() could return ISC_R_SUCCESS
			even when it failed. [RT #12995]
Mark Andrews's avatar
Mark Andrews committed
1058

1059
1060
1761.	[bug]		'rndc dumpdb' didn't report unassociated entries.
			[RT #12971]
Mark Andrews's avatar
Mark Andrews committed
1061

1062
1063
1760.	[bug]		Host / net unreachable was not penalising rtt
			estimates. [RT #12970]
Mark Andrews's avatar
Mark Andrews committed
1064

1065
1066
1759.	[bug]		Named failed to startup if the OS supported IPv6
			but had no IPv6 interfaces configured. [RT #12942]
Mark Andrews's avatar
Mark Andrews committed
1067

1068
1758.	[func]		Don't send notify messages to self. [RT #12933]
Mark Andrews's avatar
Mark Andrews committed
1069

1070
1757.	[func]		host now can turn on memory debugging flags with '-m'.
Mark Andrews's avatar
Mark Andrews committed
1071

1072
1073
1756.	[func]		named-checkconf now checks the logging configuration.
			[RT #12352]
Mark Andrews's avatar
Mark Andrews committed
1074

1075
1076
1755.	[func]		allow-update is now settable at the options / view
			level. [RT #6636]
Mark Andrews's avatar
Mark Andrews committed
1077

1078
1079
1080
1754.	[bug]		We wern't always attempting to query the parent
			server for the DS records at the zone cut.
			[RT #12774]
Mark Andrews's avatar
Mark Andrews committed
1081

1082
1083
1084
1753.	[bug]		Don't serve a slave zone which has no NS records.
			[RT #12894]

1085
1086
1087
1088
1752.	[port]		Move isc_app_start() to after ns_os_daemonise()
			as some fork() implementations unblock the signals
			that are blocked by isc_app_start(). [RT #12810]

1089
1090
1751.	[bug]		--enable-getifaddrs failed under linux. [RT #12867]

1091
1092
1093
1750.	[port]		lib/bind/make/rules.in:subdirs was not bash friendly.
			[RT #12864]

1094
1095
1749.	[bug]		'check-names response ignore;' failed to ignore.
			[RT #12866]
Mark Andrews's avatar
Mark Andrews committed
1096