GitLab

                        temporarily.

			zones are loaded asynchronously and the loading does
			not block the server. [RT #41934]

4361.	[cleanup]	Where supported, file modification times returned
			by isc_file_getmodtime() are now accurate to the
			nanosecond. [RT #41968]

                        a existing TSIG key. [RT #42195]

                        by named-checkconf. [RT #42174]

			feeding fuzzed packets into BIND.
			[RT #41723]

                        nameserver addresses to be looked up or not to
                        rpz with a new modifying directive 'nsip-wait-recurse'.                         [RT #35009]

4354.	[func]		"pkcs11-list" now displays the extractability
			attribute of private or secret keys stored in
			an HSM, as either "true", "false", or "never"
			Thanks to Daniel Stirnimann. [RT #36557]

                        expected length prior to check the contents on the
                        control channel.  This prevents a OOB read error.
                        [RT #42215]

4353.	[cleanup]	Update PKCS#11 header files. [RT #42175]

4352.	[cleanup]	The ISC DNSSEC Lookaside Validation (DLV) service
			is scheduled to be disabled in 2017.  A warning is
			now logged when named is configured to use it,
			either explicitly or via "dnssec-lookaside auto;"
			[RT #42207]

(cherry picked from commit 5b291f61)