GitLab

                        in a optout, delegation only zone with no secure
                        delegations. [RT #22007]

                        falling back to TCP on UDP timeouts when
                        ixfr-from-differences was set. [RT #21595]

                        it was called multiple times. [RT #21942]

                        interfaces at reboot. See bin/tests/system/README
                        for details.

2946.   [doc]           Document the default values for the minimum and maximum                         zone refresh and retry values in the ARM. [RT #21886]

2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]

                        without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]

                        [RT #21610]

                        DNAME at the zone apex.  [RT #21610]

                        that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]

                        current NSEC3PARAM record in use for zone named
                        could dereference a uninitialised pointer attempting
                        to obtain a lock. [RT# 21868]

			memory conditions.  Without this fix a DNS cache DB or
			ADB could incorrectly stay in an over memory state,
			effectively refusing further caching, which
			subsequently made a BIND 9 caching server unworkable.
			This fix prevents this problem from happening by
			polling the state of the memory context, rather than
			making a copy of the state, which appeared to cause
			a race.  This is a "workaround" in that it doesn't
			solve the possible race per se, but several experiments
			proved this change solves the symptom.  Also, the
			polling overhead hasn't been reported to be an issue.
			This bug should only affect a caching server that
			specifies a finite max-cache-size.  It's also quite
			likely that the bug happens only when enabling threads,
			but it's not confirmed yet. [RT #21818]

			support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]

                        [RT #21871]

2934.   [bug]           Use ANSI C compliant shift range in lib/isc/entropy.c.                        [RT #21871]

                        scope.  This could potentially result in a unknown,
                        potentially malformed, EDNS option being sent instead
                        of the desired NSID option. [RT #21781]

			[RT #21597]

			because it would cause inifinite attempts of RRSIG
			queries.  This is an urgent care fix; we'll
			revisit the issue and complete the fix later.
			[RT #21710]

			allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]

			 - added LRU expiration for generated TSIGs
			 - added the ability to use a non-default realm
                         - added new "realm" keyword in nsupdate
			 - limited lifetime of generated keys to 1 hour
			   or the lifetime of the context (whichever is
			   smaller)
			[RT #19737]

                        answer we apply change 2748 to. [RT #21594]

                        from insecure zones. [RT# 21555]

                        current managed keys combined with trusted keys.
                        [RT #20904]

                        timeout". [RT #21514]

                        to soon.  [RT #19878]

                        to IPv4 clients.  New acl 'filter-aaaa' (default any).

                        [RT #20840]

                        fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7

                        based on configure options. [RT #21444]