GitLab

4973.	[func]		verifyzone() and the functions it uses were moved to
			libdns and refactored to prevent exit() from being
			called upon failure.  A side effect of that is that
			dnssec-signzone and dnssec-verify now check for memory
			leaks upon shutdown. [GL #266]

4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

4969.	[cleanup]	Refactor zone logging functions. [GL #269]

4952.   [protocol]      Remove support for ECC-GOST (GOST R 34.11-94).
			[GL #295]

Tony Finch authored May 31, 2018 and Mark Andrews committed Jun 05, 2018

4957.	[func]		NSID logging (enabled by the "request-nsid" option)
			now has its own "nsid" category, instead of using the
			"resolver" category. [GL !331]

4956.   [func]          Change isc_random() to be just PRNG using xoshiro128**,
                        and add isc_nonce_buf() that uses CSPRNG. [GL #289]

- tidy up release notes, removing the existing "security fixes" and
  "bug fixes" sections
- add a section in the release notes to discuss the new version
  numbering
- update version, CHANGES, api, and mapapi files

4948.	[bug]		When request-nsid is turned on, EDNS NSID options
			should be logged at level info. Since change 3741
			they have been logged at debug(3) by mistake.
			[GL !290]

Ondřej Surý authored May 14, 2018 and Witold Krecicki committed May 16, 2018

4947.   [func]          Replace all random functions with isc_random(),
                        isc_random_buf() and isc_random_uniform() API.
                        [GL #221]

Silence clang static analyzer warnings; Consolidate multiple instances of splitting of batchline in dig into a single function.

4940.	[cleanup]	Extract the loop in dns__zone_updatesigs() into
			separate functions to improve code readability.
			[GL #135]

4939.	[test]		Add basic unit tests for update_sigs(). [GL #135]

4937.   [func]          Remove support for OpenSSL < 1.0.0 [GL #191]