GitLab

                        into the DNSKEY management framework.  A new tool
                        dnssec-importkey is used to this. [RT #34698]

                        better. [RT #34625]

                        in a key zone. [RT #34238]

                        encountered. [RT #34668]

                        only KSK keys for a algorithm. [RT #24439]

                        removed.  [RT #32178]

3630.	[bug]		Ensure correct ID computation for MD5 keys. [RT #33033]

                        records by dig to be suppressed (dig +nocrypto).
                        [RT #34534]

                        [RT #34533]

3626.	[func]		dig: NSID output now easier to read. [RT #21160]

3622.	[tuning]	Eliminate an unnecessary lock when incrementing
			cache statistics. [RT #34339]

                        can lead to a remotely triggerable REQUIRE failure
                        (CVE-2013-4854). [RT #34238]

3620.	[func]		Added "rpz-client-ip" policy triggers, enabling
			RPZ responses to be configured on the basis of
			the client IP address; this can be used, for
			example, to blacklist misbehaving recursive
			or stub resolvers. [RT #33605]

3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
			[RT #33776]

3618.	[func]		"rndc reload" now checks modification times of
			include files as well as master files to determine
			whether to skip reloading a zone. [RT #33936]

3616.	[bug]		Change #3613 was incomplete. [RT #34177]

3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]

3512.	[port]		Check whether to use -ljson or -ljson-c. [RT #34115]

3611.	[bug]		Improved resistance to a theoretical authentication
			attack based on differential timing.  [RT #33939]

3609.	[bug]		Corrected a possible deadlock in applications using
			the export version of the isc_app API. [RT #33967]