GitLab

3947.	[cleanup]	Set the executable bit on libraries when using
			libtool. [RT #36786]

                        accepted by the validator. [RT #37093]

3943.	[func]		SERVFAIL responses can now be cached for a
			limited time (configured by "servfail-ttl",
			default 10 seconds, limit 30). This can reduce
			the frequency of retries when an authoritative
			server is known to be failing, e.g., due to
			ongoing DNSSEC validation problems. [RT #21347]

                        marked as insecure. [RT #37072]

                        connections to be shared. [RT #37039]

3937.	[func]		Added some debug logging to better indicate the
			conditions causing SERVFAILs when resolving.
			[RT #35538]

3936.	[func]		Added authoritative support for the EDNS Client
			Subnet (ECS) option.

			ACLs can now include "ecs" elements which specify
			an address or network prefix; if an ECS option is
			included in a DNS query, then the address encoded
			in the option will be matched against "ecs" ACL
			elements.

			Also, if an ECS address is included in a query,
			then it will be used instead of the client source
			address when matching "geoip" ACL elements.  This
			behavior can be overridden with "geoip-use-ecs no;".

			When "ecs" or "geoip" ACL elements are used to
			select a view for a query, the response will include
			an ECS option to indicate which client network the
			answer is valid for.

			(Thanks to Vincent Bernat.) [RT #36781]

3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]

3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]

- don't use fwdname in dns_view_findzonecut()

3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]

Patch contributed by yhu2 <yadi.hu@windriver.com>.

                        acl count_acl_elements could have a short count leading
                        to a assertion failure.  Also zero out new acl elements
                        in dns_acl_merge.  [RT #36675]

                        views and a zone that doesn't exist at all. [RT #36691]

3906.	[protocol]	Update URI record format to comply with
			draft-faltstrom-uri-08. [RT #36642]

3905.   [bug]           Address deadlock between view.c and adb.c. [RT #36341]

3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]

                        [RT #36598]

                        after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]

                        [RT #36538]

                        at start up where not being correctly added to
                        re-signing heaps.  [RT #36302]

(cherry picked from commit d956d9689c13b093fff5faf6b10f06338354dcfc)