bind - Upgraded vendor branch to 9.5.2-P1
[dragonfly.git] / contrib / bind-9.5.2 / CHANGES
CommitLineData
c4067435
JL
1 --- 9.5.2-P1 released ---
2
32772. [security] When validating, track whether pending data was from
4 the additional section or not and only return it if
5 validates as secure. [RT #20438]
bbbf71a3
JL
6
7 --- 9.5.2 released ---
8
92681. [bug] IPSECKEY RR of gateway type 3 was not correctly
10 decoded. [RT #20269]
11
122678. [func] Treat DS queries as if "minimal-response yes;"
13 was set. [RT #20258]
14
152427. [func] Treat DNSKEY queries as if "minimal-response yes;"
16 was set. [RT #18528]
17
18 --- 9.5.2rc1 released ---
19
202672. [bug] Don't enable searching in 'host' when doing reverse
21 lookups. [RT #20218]
22
232670. [bug] Unexpected connect failures failed to log enough
24 information to be useful. [RT #20205]
25
262663. [func] win32: allow named to run as a service using
27 "NT AUTHORITY\LocalService" as the account. [RT #19977]
28
292656. [func] win32: add a "tools only" check box to the installer
30 which causes it to only install dig, host, nslookup,
31 nsupdate and relevent dlls. [RT #19998]
32
332655. [doc] Document that key-directory does not affect
34 rndc.key. [RT #20155]
35
36 --- 9.5.2b1 released ---
37
382649. [bug] Set the domain for forward only zones. [RT #19944]
39
402648. [port] win32: isc_time_seconds() was broken. [RT #19900]
41
422646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
43
442645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
45 which default to 64 bits. [RT #19927]
46
472642. [bug] nsupdate could dump core on solaris when reading
48 improperly formatted key files. [RT #20015]
49
502640. [security] A specially crafted update packet will cause named
51 to exit. [RT #20000]
52
532637. [func] Rationalize dnssec-signzone's signwithkey() calling.
54 [RT #19959]
55
562635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
57 [RT #19716]
58
592633. [bug] Handle 15 bit rand() functions. [RT #19783]
60
612632. [func] util/kit.sh: warn if documentation appears to be out of
62 date. [RT #19922]
63
642623. [bug] Named started seaches for DS non-optimally. [RT #19915]
65
662621. [doc] Made copyright boilterplate consistent. [RT #19833]
67
682920. [bug] Delay thawing the zone until the reload of it has
69 completed successfully. [RT #19750]
70
712618. [bug] The sdb and sdlz db_interator_seek() methods could
72 loop infinitely. [RT #19847]
73
742617. [bug] ifconfig.sh failed to emit an error message when
75 run from the wrong location. [RT #19375]
76
772616. [bug] 'host' used the nameservers from resolv.conf even
78 when a explicit nameserver was specified. [RT #19852]
79
802615. [bug] "__attribute__((unused))" was in the wrong place
81 for ia64 gcc builds. [RT #19854]
82
832614. [port] win32: 'named -v' should automatically be executed
84 in the foreground. [RT #19844]
85
862610. [port] sunos: Change #2363 was not complete. [RT #19796]
87
882606. [bug] "delegation-only" was not being accepted in
89 delegation-only type zones. [RT #19717]
90
912605. [bug] Accept DS responses from delegation only zones.
92 [RT # 19296]
93
942603. [port] win32: handle .exe extension of named-checkzone and
95 named-comilezone argv[0] names under windows.
96 [RT #19767]
97
982602. [port] win32: fix debugging command line build of libisccfg.
99 [RT #19767]
100
1012599. [bug] Address rapid memory growth when validation fails.
102 [RT #19654]
103
1042596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
105 long, leading to inefficient memory usage or rejecting
106 newer cache entries in the worst case. [RT #19563]
107
1082595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
109
1102592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
111
1122591. [bug] named could die when processing a update in
113 removed_orphaned_ds(). [RT #19507]
114
1152589. [bug] dns_db_unregister() failed to clear '*dbimp'.
116 [RT #19626]
117
1182586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
119 or SDB. [RT #19577]
120
1212585. [bug] Uninitialized socket name could be referenced via a
122 statistics channel, triggering an assertion failure in
123 XML rendering. [RT #19427]
124
1252584. [bug] alpha: gcc optimization could break atomic operations.
126 [RT #19227]
127
1282583. [port] netbsd: provide a control to not add the compile
129 date to the version string, -DNO_VERSION_DATE.
130
1312582. [bug] Don't emit warning log message when we attempt to
132 remove non-existant journal. [RT #19516]
133
1342581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
135 Requires MySQL 5.0.19 or later. [RT #19084]
136
1372580. [bug] UpdateRej statistics counter could be incremented twice
138 for one rejection. [RT #19476]
139
1402579. [bug] DNSSEC lookaside validation failed to handle unknown
141 algorithms. [RT #19479]
142
1432577. [doc] Clarified some statistics counters. [RT #19454]
144
1452573. [bug] Replacing a non-CNAME record with a CNAME record in a
146 single transaction in a signed zone failed. [RT #19397]
147
1482568. [bug] Report when the write to indicate a otherwise
149 successful start fails. [RT #19360]
150
1512567. [bug] dst__privstruct_writefile() could miss write errors.
152 write_public_key() could miss write errors.
153 [RT #19360]
154
1552564. [bug] Only take EDNS fallback steps when processing timeouts.
156 [RT #19405]
157
1582563. [bug] Dig could leak a socket causing it to wait forever
159 to exit. [RT #19359]
160
1612562. [doc] ARM: miscellaneous improvements, reorganization,
162 and some new content.
163
1642561. [doc] Add isc-config.sh(1) man page. [RT #16378]
165
1662560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
167
1682557. [cleanup] PCI compliance:
169 * new libisc log module file
170 * isc_dir_chroot() now also changes the working
171 directory to "/".
172 * additional INSISTs
173 * additional logging when files can't be removed.
174
1752553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
176
1772552. [bug] zero-no-soa-ttl-cache was not being honoured.
178 [RT #19340]
179
1802551. [bug] Potential Reference leak on return. [RT #19341]
181
1822550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
183 [RT #19343]
184
1852549. [port] linux: define NR_OPEN if not currently defined.
186 [RT #19344]
187
1882547. [bug] openssl_link.c:mem_realloc() could reference an
189 out-of-range area of the source buffer. New public
190 function isc_mem_reallocate() was introduced to address
191 this bug. [RT #19313]
192
1932545. [doc] ARM: Legal hostname checking (check-names) is
194 for SRV RDATA too. [RT #19304]
195
1962544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
197
1982542. [doc] Update the description of dig +adflag. [RT #19290]
199
2002541. [bug] Conditionally update dispatch manager statistics.
201 [RT #19247]
202
2032539. [security] Update the interaction between recursion, allow-query,
204 allow-query-cache and allow-recursion. [RT #19198]
205
2062538. [bug] cache/ADB memory could grow over max-cache-size,
207 especially with threads and smaller max-cache-size
208 values. [RT #19240]
209
2102537. [experimental] Added more statistics counters including those on socket
211 I/O events and query RTT histograms. [RT #18802]
212
2132536. [cleanup] Silence some warnings when -Werror=format-security is
214 specified. [RT #19083]
215
2162535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
217
2182532. [bug] dig: check the question section of the response to
219 see if it matches the asked question. [RT #18495]
220
2212531. [bug] Change #2207 was incomplete. [RT #19098]
222
2232529. [cleanup] Upgrade libtool to silence complaints from recent
224 version of autoconf. [RT #18657]
225
2262528. [cleanup] Silence spurious configure warning about
227 --datarootdir [RT #19096]
228
2292527. [bug] named could reuse cache on reload with
230 enabling/disabling validation. [RT #19119]
231
2322525. [experimental] New logging category "query-errors" to provide detailed
233 internal information about query failures, especially
234 about server failures. [RT #19027]
235
2362523. [bug] Random type rdata freed by dns_nsec_typepresent().
237 [RT #19112]
238
2392522. [security] Handle -1 from DSA_do_verify().
240
2412521. [bug] Improve epoll cross compilation support. [RT #19047]
242
2432519. [bug] dig/host with -4 or -6 didn't work if more than two
244 nameserver addresses of the excluded address family
245 preceded in resolv.conf. [RT #19081]
246
2472517. [bug] dig +trace with -4 or -6 failed when it chose a
248 nameserver address of the excluded address type.
249 [RT #18843]
250
2512516. [bug] glue sort for responses was performed even when not
252 needed. [RT #19039]
253
2542514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
255 a nameserver of the excluded address family.
256 [RT #18848]
257
2582511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
259 [RT #18885]
260
2612506. [port] solaris: Check at configure time if
262 hack_shutup_pthreadonceinit is needed. [RT #19037]
263
2642505. [port] Treat amd64 similarly to x86_64 when determining
265 atomic operation support. [RT #19031]
266
2672503. [port] linux: improve compatibility with Linux Standard
268 Base. [RT #18793]
269
2702502. [cleanup] isc_radix: Improve compliance with coding style,
271 document function in <isc/radix.h>. [RT #18534]
272
2732500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
274 function. [RT #18582]
275
2762499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
277 [RT #18837]
278
279 --- 9.5.1 released ---
280
2812520. [bug] Update xml statistics version number to 2.0 as change
282 #2388 made the schema incompatible to the previous
283 version. [RT #19080]
284
285 --- 9.5.1rc2 released ---
286
2872513 [bug] Fix windows cli build. [RT #19062]
288
2892510. [bug] "dig +sigchase" could trigger REQUIRE failures.
290 [RT #19033]
291
2922509. [bug] Specifying a fixed query source port was broken.
293 [RT #19051]
294
2952504. [bug] Address race condition in the socket code. [RT #18899]
296
297 --- 9.5.1rc1 released ---
298
2992498. [bug] Removed a bogus function argument used with
300 ISC_SOCKET_USE_POLLWATCH: it could cause compiler
301 warning or crash named with the debug 1 level
302 of logging. [RT #18917]
303
3042496. [bug] Add sanity length checks to NSID option. [RT #18813]
305
3062495. [bug] Tighten RRSIG checks. [RT #18795]
307
3082494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
309 installed. [RT #18826]
310
3112493. [bug] The linux capabilites code was not correctly cleaning
312 up after itself. [RT #18767]
313
3142490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
315 is cleared when IPV6_V6ONLY is set. [RT #18785]
316
3172489. [port] solaris: Workaround Solaris's kernel bug about
318 /dev/poll:
319 http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
320 Define ISC_SOCKET_USE_POLLWATCH at build time to enable
321 this workaround. [RT #18870]
322
3232487. [bug] Give TCP connections longer to complete. [RT #18675]
324
3252485. [bug] Change update's the handling of obscured RRSIG
326 records. Not all orphand DS records were being
327 removed. [RT #18828]
328
3292482. [port] libxml2: support versions 2.7.* in addition
330 to 2.6.*. [RT #18806]
331
3322479. [bug] xfrout:covers was not properly initalized. [RT #18801]
333
3342478. [bug] 'addresses' could be used uninitalized in
335 configure_forward(). [RT #18800]
336
3372476. [doc] ARM: improve documentation for max-journal-size and
338 ixfr-from-differences. [RT #15909] [RT #18541]
339
340 --- 9.5.1b3 released ---
341
3422475. [bug] LRU cache cleanup under overmem condition could purge
343 particular entries more aggressively. [RT #17628]
344
3452474. [bug] ACL structures could be allocated with insufficient
346 space, causing an array overrun. [RT #18765]
347
3482473. [port] linux: raise the limit on open files to the possible
349 maximum value before spawning threads; 'files'
350 specified in named.conf doesn't seem to work with
351 threads as expected. [RT #18784]
352
3532472. [port] linux: check the number of available cpu's before
354 calling chroot as it depends on "/proc". [RT #16923]
355
3562471. [bug] named-checkzone was not reporting missing mandatory
357 glue when sibling checks were disabled. [RT #18768]
358
3592470. [bug] Elements of the isc_radix_node_t could be incorrectly
360 overwritten. [RT# 18719]
361
3622469. [port] solaris: Work around Solaris's select() limitations.
363 [RT #18769]
364
3652468. [bug] Resolver could try unreachable servers multiple times.
366 [RT #18739]
367
3682467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
369
3702466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
371 [RT #18302]
372
3732465. [bug] Adb's handling of lame addresses was different
374 for IPv4 and IPv6. [RT #18738]
375
3762464. [port] linux: check that a capability is present before
377 trying to set it. [RT #18135]
378
3792463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
380 API and glibc hides parts of the IPv6 Advanced Socket
381 API as a result. This is stupid as it breaks how the
382 two halves (Basic and Advanced) of the IPv6 Socket API
383 were designed to be used but we have to live with it.
384 Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
385 API. [RT #18388]
386
3872462. [doc] Document -m (enable memory usage debugging)
388 option for dig. [RT #18757]
389
3902461. [port] sunos: Change #2363 was not complete. [RT #17513]
391
3922458. [doc] ARM: update and correction for max-cache-size.
393 [RT #18294]
394
3952457. [tuning] max-cache-size is reverted to 0, the previous
396 default. It should be safe because expired cache
397 entries are also purged. [RT #18684]
398
3992456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
400 address, regardless of family. They now correctly
401 distinguish IPv4 from IPv6. [RT #18559]
402
4032455. [bug] Stop metadata being transferred via axfr/ixfr.
404 [RT #18639]
405
4062453. [bug] Remove NULL pointer dereference in dns_journal_print().
407 [RT #18316]
408
4092451. [port] solaris: handle runtime linking better. [RT #18356]
410
4112449. [bug] libbind: Out of bounds reference in dns_ho.c:addrsort.
412 [RT #18044]
413
4142445. [doc] ARM out-of-date on empty reverse zones (list includes
415 RFC1918 address, but these are not yet compiled in).
416 [RT #18578]
417
4182444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
419 (clear DF) for UDP responses and requests.
420
4212387. [bug] Silence compiler warnings in lib/isc/radix.c.
422 [RT #18147] [RT #18258]
423
4242369. [bug] libbind: Array bounds overrun on read in bitncmp().
425 [RT #18054]
426
427 --- 9.5.1b2 released ---
428
4292443. [bug] win32: UDP connect() would not generate an event,
430 and so connected UDP sockets would never clean up.
431 Fix this by doing an immediate WSAConnect() rather
432 than an io completion port type for UDP.
433
4342442. [bug] A lock could be destroyed twice. [RT# 18626]
435
4362441. [bug] isc_radix_insert() could copy radix tree nodes
437 incompletely. [RT #18573]
438
4392440. [bug] named-checkconf used an incorrect test to determine
440 if an ACL was set to none.
441
4422439. [bug] Potential NULL dereference in dns_acl_isanyornone().
443 [RT #18559]
444
4452438. [bug] Timeouts could be logged incorrectly under win32.
446 [RT #18617]
447
4482437. [bug] Sockets could be closed too early, leading to
449 inconsistent states in the socket module. [RT #18298]
450
4512436. [security] win32: UDP client handler can be shutdown. [RT #18576]
452
4532435. [bug] Fixed an ACL memory leak affecting win32.
454
4552434. [bug] Fixed a minor error-reporting bug in
456 lib/isc/win32/socket.c.
457
4582433. [tuning] Set initial timeout to 800ms.
459
4602432. [bug] More Windows socket handling improvements. Stop
461 using I/O events and use IO Completion Ports
462 throughout. Rewrite the receive path logic to make
463 it easier to support multiple simultaneous
464 requesters in the future. Add stricter consistency
465 checking as a compile-time option (define
466 ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
467
4682431. [bug] Acl processing could leak memory. [RT #18323]
469
4702430. [bug] win32: isc_interval_set() could round down to
471 zero if the input was less than NS_INTERVAL
472 nanoseconds. Round up instead. [RT #18549]
473
4742429. [doc] nsupdate should be in section 1 of the man pages.
475 [RT #18283]
476
4772428. [bug] dns_iptable_merge() mishandled merges of negative
478 tables. [RT #18409]
479
4802426. [bug] libbind: inet_net_pton() can sometimes return the
481 wrong value if excessively large net masks are
482 supplied. [RT #18512]
483
4842425. [bug] named didn't detect unavailable query source addresses
485 at load time. [RT #18536]
486
4872424. [port] configure now probes for a working epoll
488 implementation. Allow the use of kqueue,
489 epoll and /dev/poll to be selected at compile
490 time. [RT #18277]
491
4922422. [bug] Handle the special return value of a empty node as
493 if it was a NXRRSET in the validator. [RT #18447]
494
4952421. [func] Add new command line option '-S' for named to specify
496 the max number of sockets. [RT #18493]
497 Use caution: this option may not work for some
498 operating systems without rebuilding named.
499
5002420. [bug] Windows socket handling cleanup. Let the io
501 completion event send out cancelled read/write
502 done events, which keeps us from writing to memory
503 we no longer have ownership of. Add debugging
504 socket_log() function. Rework TCP socket handling
505 to not leak sockets.
506
5072419. [cleanup] Document that isc_socket_create() and isc_socket_open()
508 should not be used for isc_sockettype_fdwatch sockets.
509 [RT #18521]
510
5112418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
512 [RT #18430]
513
5142417. [bug] Connecting UDP sockets for outgoing queries could
515 unexpectedly fail with an 'address already in use'
516 error. [RT #18411]
517
5182416. [func] Log file descriptors that cause exceeding the
519 internal maximum. [RT #18460]
520
5212415. [bug] 'rndc dumpdb' could trigger various assertion failures
522 in rbtdb.c. [RT #18455]
523
5242414. [bug] A masterdump context held the database lock too long,
525 causing various troubles such as dead lock and
526 recursive lock acquisition. [RT #18311, #18456]
527
5282413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
529
5302412. [bug] win32: address a resourse leak. [RT #18374]
531
5322411. [bug] Allow using a larger number of sockets than FD_SETSIZE
533 for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
534 at compilation time. [RT #18433]
535
536 Note: with changes #2469 and #2421 above, there is no
537 need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
538 any more.
539
5402410. [bug] Correctly delete m_versionInfo. [RT #18432]
541
5422409. [bug] Only log that we disabled EDNS processing if we were
543 subsequently successful. [RT #18029]
544
5452408. [bug] A duplicate TCP dispatch event could be sent, which
546 could then trigger an assertion failure in
547 resquery_response(). [RT #18275]
548
5492407. [port] hpux: test for sys/dyntune.h. [RT #18421]
550
5512405. [cleanup] The default value for dnssec-validation was changed to
552 "yes" in 9.5.0-P1 and all subsequent releases; this
553 was inadvertently omitted from CHANGES at the time.
554
5552404. [port] hpux: files unlimited support.
556
5572403. [bug] TSIG context leak. [RT #18341]
558
5592402. [port] Support Solaris 2.11 and over. [RT #18362]
560
5612401. [bug] Expect to get E[MN]FILE errno internal_accept()
562 (from accept() or fcntl() system calls). [RT #18358]
563
5642400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
565 [RT #18297]
566
5672398. [bug] Improve file descriptor management. New,
568 temporary, named.conf option reserved-sockets,
569 default 512. [RT #18344]
570
5712397. [bug] gssapi_functions bad declaration. [RT #18355]
572
5732396. [bug] Don't set SO_REUSEADDR for randomized ports.
574 [RT #18336]
575
5762395. [port] Avoid warning and no effect from "files unlimited"
577 on Linux when running as root. [RT #18335]
578
5792394. [bug] Default configuration options set the limit for
580 open files to 'unlimited' as described in the
581 documentation. [RT #18331]
582
5832393. [bug] nested acls containing keys could trigger an
584 assertion in acl.c. [RT #18166]
585
5862392. [bug] remove 'grep -q' from acl test script, some platforms
587 don't support it. [RT #18253]
588
5892391. [port] hpux: cover additional recvmsg() error codes.
590 [RT #18301]
591
5922390. [bug] dispatch.c could make a false warning on 'odd socket'.
593 [RT #18301].
594
5952389. [bug] Move the "working directory writable" check to after
596 the ns_os_changeuser() call. [RT #18326]
597
5982388. [bug] Avoid using tables for layout purposes in
599 statistics XSL [RT #18159].
600
6012386. [func] Add warning about too small 'open files' limit.
602 [RT #18269]
603
604 --- 9.5.1b1 released ---
605
6062385. [bug] A condition variable in socket.c could leak in
607 rare error handling [RT #17968].
608
6092384. [security] Additional support for query port randomization (change
610 #2375) including performance improvement and port range
611 specification. [RT #17949, #18098]
612
6132383. [bug] named could double queries when they resulted in
614 SERVFAIL due to overkilling EDNS0 failure detection.
615 [RT #18182]
616
6172382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
618 to ARM.
619
6202381. [port] dlz/mysql: support multiple install layouts for
621 mysql. <prefix>/include/{,mysql/}mysql.h and
622 <prefix>/lib/{,mysql/}. [RT #18152]
623
6242380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
625 proofs which, in turn, caused validation failures
626 for insecure zones immediately below a secure zone
627 the server was authoritative for. [RT #18112]
628
6292379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
630 TLDs and supported RRs with TTLs [RT #17972]
631
6322378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
633 [RT #18169]
634
6352377. [bug] Address race condition in dnssec-signzone. [RT #18142]
636
6372376. [bug] Change #2144 was not complete.
638
6392375. [security] Fully randomize UDP query ports to improve
640 forgery resilience. [RT #17949]
641
6422373. [bug] Default values of zone ACLs were re-parsed each time a
643 new zone was configured, causing an overconsumption
644 of memory. [RT #18092]
645
646 --- 9.5.0 released ---
647
6482374. [bug] "blackhole" ACLs could cause named to segfault due
649 to some uninitialized memory. [RT #18095]
650
6512372. [bug] fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
652
6532371. [doc] add +nsid option to dig man page. [RT #18039]
654
6552370. [bug] "rndc freeze" could trigger an assertion in named
656 when called on a nonexistent zone. [RT #18050]
657
658 --- 9.5.0rc1 released ---
659
6602368. [port] Linux: use libcap for capability management if
661 possible. [RT# 18026]
662
6632367. [bug] Improve counting of dns_resstatscounter_retry
664 [RT #18030]
665
6662366. [bug] Adb shutdown race. [RT #18021]
667
6682365. [bug] Fix a bug that caused dns_acl_isany() to return
669 spurious results. [RT #18000]
670
6712364. [bug] named could trigger an assertion when serving a
672 malformed signed zone. [RT #17828]
673
6742363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
675 [RT #17513]
676
6772362. [cleanup] Make "rrset-order fixed" a compile-time option.
678 settable by "./configure --enable-fixed-rrset".
679 Disabled by default. [RT #17977]
680
6812361. [bug] "recursion" statistics counter could be counted
682 multiple times for a single query. [RT #17990]
683
684 --- 9.5.0b3 released ---
685
6862360. [bug] Fix a condition where we release a database version
687 (which may acquire a lock) while holding the lock.
688
6892359. [bug] Fix NSID bug. [RT #17942]
690
6912358. [doc] Update host's default query description. [RT #17934]
692
6932356. [bug] Built in mutex profiler was not scalable enough.
694 [RT #17436]
695
6962355. [func] Extend the number statistics counters available.
697 [RT #17590]
698
6992354. [bug] Failed to initialize some rdatasetheader_t elements.
700 [RT #17927]
701
7022353. [func] Add support for Name Server ID (RFC 5001).
703 'dig +nsid' requests NSID from server.
704 'request-nsid yes;' causes recursive server to send
705 NSID requests to upstream servers. Server responds
706 to NSID requests with the string configured by
707 'server-id' option. [RT #17091]
708
7092352. [bug] Various GSS_API fixups. [RT #17729]
710
7112351. [bug] convertxsl.pl generated very long lines. [RT #17906]
712
7132350. [port] win32: IPv6 support. [RT #17797]
714
7152347. [bug] Delete now traverses the RB tree in the canonical
716 order. [RT #17451]
717
7182346. [func] Memory statistics now cover all active memory contexts
719 in increased detail. [RT #17580]
720
7212345. [bug] named-checkconf failed to detect when forwarders
722 were set at both the options/view level and in
723 a root zone. [RT #17671]
724
7252344. [bug] Improve "logging{ file ...; };" documentation.
726 [RT #17888]
727
7282343. [bug] (Seemingly) duplicate IPv6 entries could be
729 created in ADB. [RT #17837]
730
7312341. [bug] libbind: add missing -I../include for off source
732 tree builds. [RT #17606]
733
7342340. [port] openbsd: interface configuration. [RT #17700]
735
7362339. [port] tru64: support for libbind. [RT #17589]
737
7382338. [bug] check_ds() could be called with a non DS rdataset.
739 [RT #17598]
740
7412337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
742
7432335. [port] sunos: libbind and *printf() support for long long.
744 [RT #17513]
745
7462334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
747 bug in fromstruct_txt(). [RT #17609]
748
7492333. [bug] Fix off by one error in isc_time_nowplusinterval().
750 [RT #17608]
751
7522332. [contrib] query-loc-0.4.0. [RT #17602]
753
7542331. [bug] Failure to regenerate any signatures was not being
755 reported nor being past back to the UPDATE client.
756 [RT #17570]
757
7582330. [bug] Remove potential race condition when handling
759 over memory events. [RT #17572]
760
761 WARNING: API CHANGE: over memory callback
762 function now needs to call isc_mem_waterack().
763 See <isc/mem.h> for details.
764
7652329. [bug] Clearer help text for dig's '-x' and '-i' options.
766
7672328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
768 F.ROOT-SERVERS.NET, H.ROOT-SERVERS.NET,
769 J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
770 M.ROOT-SERVERS.NET.
771
7722327. [bug] It was possible to dereference a NULL pointer in
773 rbtdb.c. Implement dead node processing in zones as
774 we do for caches. [RT #17312]
775
7762326. [bug] It was possible to trigger a INSIST in the acache
777 processing.
778
7792325. [port] Linux: use capset() function if available. [RT #17557]
780
781 --- 9.5.0b2 released ---
782
7832324. [bug] Fix IPv6 matching against "any;". [RT #17533]
784
7852323. [port] tru64: namespace clash. [RT #17547]
786
7872322. [port] MacOS: work around the limitation of setrlimit()
788 for RLIMIT_NOFILE. [RT #17526]
789
7902320. [func] Make statistics counters thread-safe for platforms
791 that support certain atomic operations. [RT #17466]
792
7932319. [bug] Silence Coverity warnings in
794 lib/dns/rdata/in_1/apl_42.c. [RT #17469]
795
7962318. [port] sunos fixes for libbind. [RT #17514]
797
7982317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
799
8002316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
801 [RT #17513]
802
8032315. [bug] Used incorrect address family for mapped IPv4
804 addresses in acl.c. [RT #17519]
805
8062314. [bug] Uninitialized memory use on error path in
807 bin/named/lwdnoop.c. [RT #17476]
808
8092313. [cleanup] Silence Coverity warnings. Handle private stacks.
810 [RT #17447] [RT #17478]
811
8122312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
813 [RT #17458]
814
8152311. [bug] IPv6 addresses could match IPv4 ACL entries and
816 vice versa. [RT #17462]
817
8182310. [bug] dig, host, nslookup: flush stdout before emitting
819 debug/fatal messages. [RT #17501]
820
8212309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
822 [RT #17455]
823
8242308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
825 [RT #17495]
826
8272307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
828
8292306. [bug] Remove potential race from lib/dns/resolver.c.
830 [RT #17470]
831
8322305. [security] inet_network() buffer overflow. CVE-2008-0122.
833
8342304. [bug] Check returns from all dns_rdata_tostruct() calls.
835 [RT #17460]
836
8372303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
838 [RT #17471]
839
8402302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
841
8422301. [bug] Remove resource leak and fix error messages in
843 bin/tests/system/lwresd/lwtest.c. [RT #17474]
844
8452300. [bug] Fixed failure to close open file in
846 bin/tests/names/t_names.c. [RT #17473]
847
8482299. [bug] Remove unnecessary NULL check in
849 bin/nsupdate/nsupdate.c. [RT #17475]
850
8512298. [bug] isc_mutex_lock() failure not caught in
852 bin/tests/timers/t_timers.c. [RT #17468]
853
8542297. [bug] isc_entropy_createfilesource() failure not caught in
855 bin/tests/dst/t_dst.c. [RT #17467]
856
8572296. [port] Allow docbook stylesheet location to be specified to
858 configure. [RT #17457]
859
8602295. [bug] Silence static overrun error in bin/named/lwaddr.c.
861 [RT #17459]
862
8632294. [func] Allow the experimental statistics channels to have
864 multiple connections and ACL.
865 Note: the stats-server and stats-server-v6 options
866 available in the previous beta releases are replaced
867 with the generic statistics-channels statement.
868
8692293. [func] Add ACL regression test. [RT #17375]
870
8712292. [bug] Log if the working directory is not writable.
872 [RT #17312]
873
8742291. [bug] PR_SET_DUMPABLE may be set too late. Also report
875 failure to set PR_SET_DUMPABLE. [RT #17312]
876
8772290. [bug] Let AD in the query signal that the client wants AD
878 set in the response. [RT #17301]
879
8802288. [port] win32: mark service as running when we have finished
881 loading. [RT #17441]
882
8832287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
884
8852284. [bug] Memory leak in UPDATE prerequisite processing.
886 [RT #17377]
887
8882283. [bug] TSIG keys were not attaching to the memory
889 context. TSIG keys should use the rings
890 memory context rather than the clients memory
891 context. [RT #17377]
892
8932282. [bug] Acl code fixups. [RT #17346] [RT #17374]
894
8952281. [bug] Attempts to use undefined acls were not being logged.
896 [RT #17307]
897
8982280. [func] Allow the experimental http server to be reached
899 over IPv6 as well as IPv4. [RT #17332]
900
9012279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
902 to protect applications from receiving spurious
903 SIGPIPE signals when using the resolver.
904
9052278. [bug] win32: handle the case where Windows returns no
906 search list or DNS suffix. [RT #17354]
907
9082277. [bug] Empty zone names were not correctly being caught at
909 in the post parse checks. [RT #17357]
910
9112276. [bug] Install <dst/gssapi.h>. [RT# 17359]
912
9132275. [func] Add support to dig to perform IXFR queries over UDP.
914 [RT #17235]
915
9162274. [func] Log zone transfer statistics. [RT #17336]
917
9182273. [bug] Adjust log level to WARNING when saving inconsistent
919 stub/slave master and journal files. [RT# 17279]
920
9212272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
922 [RT #17262]
923
9242271. [bug] Fix a memory leak in http server code [RT #17100]
925
9262270. [bug] dns_db_closeversion() version->writer could be reset
927 before it is tested. [RT #17290]
928
9292269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
930
9312268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
932 list.
933
934 --- 9.5.0b1 released ---
935
9362267. [bug] Radix tree node_num value could be set incorrectly,
937 causing positive ACL matches to look like negative
938 ones. [RT #17311]
939
9402266. [bug] client.c:get_clientmctx() returned the same mctx
941 once the pool of mctx's was filled. [RT #17218]
942
9432265. [bug] Test that the memory context's basic_table is non NULL
944 before freeing. [RT #17265]
945
9462264. [bug] Server prefix length was being ignored. [RT #17308]
947
9482263. [bug] "named-checkconf -z" failed to set default value
949 for "check-integrity". [RT #17306]
950
9512262. [bug] Error status from all but the last view could be
952 lost. [RT #17292]
953
9542261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
955
9562260. [bug] Reported wrong clients-per-query when increasing the
957 value. [RT #17236]
958
9592259. [placeholder]
960
961 --- 9.5.0a7 released ---
962
9632258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
964 [RT #17241]
965
9662257. [bug] win32: Use the full path to vcredist_x86.exe when
967 calling it. [RT #17222]
968
9692256. [bug] win32: Correctly register the installation location of
970 bindevt.dll. [RT #17159]
971
9722255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
973
9742254. [bug] timer.c:dispatch() failed to lock timer->lock
975 when reading timer->idle allowing it to see
976 intermediate values as timer->idle was reset by
977 isc_timer_touch(). [RT #17243]
978
9792253. [func] "max-cache-size" defaults to 32M.
980 "max-acache-size" defaults to 16M.
981
9822252. [bug] Fixed errors in sortlist code [RT #17216]
983
9842251. [placeholder]
985
9862250. [func] New flag 'memstatistics' to state whether the
987 memory statistics file should be written or not.
988 Additionally named's -m option will cause the
989 statistics file to be written. [RT #17113]
990
9912249. [bug] Only set Authentic Data bit if client requested
992 DNSSEC, per RFC 3655 [RT #17175]
993
9942248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
995
9962247. [doc] Sort doc/misc/options. [RT #17067]
997
9982246. [bug] Make the startup of test servers (ans.pl) more
999 robust. [RT #17147]
1000
10012245. [bug] Validating lack of DS records at trust anchors wasn't
1002 working. [RT #17151]
1003
10042244. [func] Allow the check of nameserver names against the
1005 SOA MNAME field to be disabled by specifying
1006 'notify-to-soa yes;'. [RT #17073]
1007
10082243. [func] Configuration files without a newline at the end now
1009 parse without error. [RT #17120]
1010
10112242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
1012 library could require a source of random data.
1013 [RT #17127]
1014
10152241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
1016
10172240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
1018 a number of INSIST()s into plain fatal() errors
1019 which report the triggering result code.
1020 The 'key' command wasn't disabling GSS-TSIG.
1021 [RT #17099]
1022
10232239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
1024
10252238. [bug] It was possible to trigger a REQUIRE when a
1026 validation was canceled. [RT #17106]
1027
10282237. [bug] libbind: res_init() was not thread aware. [RT #17123]
1029
10302236. [bug] dnssec-signzone failed to preserve the case of
1031 of wildcard owner names. [RT #17085]
1032
10332235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
1034
10352234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
1036
10372233. [func] Add support for O(1) ACL processing, based on
1038 radix tree code originally written by Kevin
1039 Brintnall. [RT #16288]
1040
10412232. [bug] dns_adb_findaddrinfo() could fail and return
1042 ISC_R_SUCCESS. [RT #17137]
1043
10442231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
1045 [RT #17088]
1046
10472230. [bug] We could INSIST reading a corrupted journal.
1048 [RT #17132]
1049
10502229. [bug] Null pointer dereference on query pool creation
1051 failure. [RT #17133]
1052
10532228. [contrib] contrib: Change 2188 was incomplete.
1054
10552227. [cleanup] Tidied up the FAQ. [RT #17121]
1056
10572226. [placeholder]
1058
10592225. [bug] More support for systems with no IPv4 addresses.
1060 [RT #17111]
1061
10622224. [bug] Defer journal compaction if a xfrin is in progress.
1063 [RT #17119]
1064
10652223. [bug] Make a new journal when compacting. [RT #17119]
1066
10672222. [func] named-checkconf now checks server key references.
1068 [RT #17097]
1069
10702221. [bug] Set the event result code to reflect the actual
1071 record turned to caller when a cache update is
1072 rejected due to a more credible answer existing.
1073 [RT #17017]
1074
10752220. [bug] win32: Address a race condition in final shutdown of
1076 the Windows socket code. [RT #17028]
1077
10782219. [bug] Apply zone consistency checks to additions, not
1079 removals, when updating. [RT #17049]
1080
10812218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
1082 [RT #16976]
1083
10842217. [func] Adjust update log levels. [RT #17092]
1085
10862216. [cleanup] Fix a number of errors reported by Coverity.
1087 [RT #17094]
1088
10892215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
1090
10912214. [bug] Deregister OpenSSL lock callback when cleaning
1092 up. Reorder OpenSSL cleanup so that RAND_cleanup()
1093 is called before the locks are destroyed. [RT #17098]
1094
10952213. [bug] SIG0 diagnostic failure messages were looking at the
1096 wrong status code. [RT #17101]
1097
10982212. [func] 'host -m' now causes memory statistics and active
1099 memory to be printed at exit. [RT 17028]
1100
11012211. [func] Update "dynamic update temporarily disabled" message.
1102 [RT #17065]
1103
11042210. [bug] Deleting class specific records via UPDATE could
1105 fail. [RT #17074]
1106
11072209. [port] osx: linking against user supplied static OpenSSL
1108 libraries failed as the system ones were still being
1109 found. [RT #17078]
1110
11112208. [port] win32: make sure both build methods produce the
1112 same output. [RT #17058]
1113
11142207. [port] Some implementations of getaddrinfo() fail to set
1115 ai_canonname correctly. [RT #17061]
1116
1117 --- 9.5.0a6 released ---
1118
11192206. [security] "allow-query-cache" and "allow-recursion" now
1120 cross inherit from each other.
1121
1122 If allow-query-cache is not set in named.conf then
1123 allow-recursion is used if set, otherwise allow-query
1124 is used if set, otherwise the default (localnets;
1125 localhost;) is used.
1126
1127 If allow-recursion is not set in named.conf then
1128 allow-query-cache is used if set, otherwise allow-query
1129 is used if set, otherwise the default (localnets;
1130 localhost;) is used.
1131
1132 [RT #16987]
1133
11342205. [bug] libbind: change #2119 broke thread support. [RT #16982]
1135
11362204. [bug] "rndc flushanme name unknown-view" caused named
1137 to crash. [RT #16984]
1138
11392203. [security] Query id generation was cryptographically weak.
1140 [RT # 16915]
1141
11422202. [security] The default acls for allow-query-cache and
1143 allow-recursion were not being applied. [RT #16960]
1144
11452201. [bug] The build failed in a separate object directory.
1146 [RT #16943]
1147
11482200. [bug] The search for cached NSEC records was stopping to
1149 early leading to excessive DLV queries. [RT #16930]
1150
11512199. [bug] win32: don't call WSAStartup() while loading dlls.
1152 [RT #16911]
1153
11542198. [bug] win32: RegCloseKey() could be called when
1155 RegOpenKeyEx() failed. [RT #16911]
1156
11572197. [bug] Add INSIST to catch negative responses which are
1158 not setting the event result code appropriately.
1159 [RT #16909]
1160
11612196. [port] win32: yield processor while waiting for once to
1162 to complete. [RT #16958]
1163
11642195. [func] dnssec-keygen now defaults to nametype "ZONE"
1165 when generating DNSKEYs. [RT #16954]
1166
11672194. [bug] Close journal before calling 'done' in xfrin.c.
1168
1169 --- 9.5.0a5 released ---
1170
11712193. [port] win32: BINDInstall.exe is now linked statically.
1172 [RT #16906]
1173
11742192. [port] win32: use vcredist_x86.exe to install Visual
1175 Studio's redistributable dlls if building with
1176 Visual Stdio 2005 or later.
1177
11782191. [func] named-checkzone now allows dumping to stdout (-).
1179 named-checkconf now has -h for help.
1180 named-checkzone now has -h for help.
1181 rndc now has -h for help.
1182 Better handling of '-?' for usage summaries.
1183 [RT #16707]
1184
11852190. [func] Make fallback to plain DNS from EDNS due to timeouts
1186 more visible. New logging category "edns-disabled".
1187 [RT #16871]
1188
11892189. [bug] Handle socket() returning EINTR. [RT #15949]
1190
11912188. [contrib] queryperf: autoconf changes to make the search for
1192 libresolv or libbind more robust. [RT #16299]
1193
11942187. [bug] query_addds(), query_addwildcardproof() and
1195 query_addnxrrsetnsec() should take a version
1196 argument. [RT #16368]
1197
11982186. [port] cygwin: libbind: check for struct sockaddr_storage
1199 independently of IPv6. [RT #16482]
1200
12012185. [port] sunos: libbind: check for ssize_t, memmove() and
1202 memchr(). [RT #16463]
1203
12042184. [bug] bind9.xsl.h didn't build out of the source tree.
1205 [RT #16830]
1206
12072183. [bug] dnssec-signzone didn't handle offline private keys
1208 well. [RT #16832]
1209
12102182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
1211 could return ISC_R_SUCCESS when they ran out of
1212 memory. [RT #16365]
1213
12142181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
1215
12162180. [cleanup] Remove bit test from 'compress_test' as they
1217 are no longer needed. [RT #16497]
1218
12192179. [func] 'rndc command zone' will now find 'zone' if it is
1220 unique to all the views. [RT #16821]
1221
12222178. [bug] 'rndc reload' of a slave or stub zone resulted in
1223 a reference leak. [RT #16867]
1224
12252177. [bug] Array bounds overrun on read (rcodetext) at
1226 debug level 10+. [RT #16798]
1227
12282176. [contrib] dbus update to handle race condition during
1229 initialization (Bugzilla 235809). [RT #16842]
1230
12312175. [bug] win32: windows broadcast condition variable support
1232 was broken. [RT #16592]
1233
12342174. [bug] I/O errors should always be fatal when reading
1235 master files. [RT #16825]
1236
12372173. [port] win32: When compiling with MSVS 2005 SP1 we also
1238 need to ship Microsoft.VC80.MFCLOC.
1239
1240 --- 9.5.0a4 released ---
1241
12422172. [bug] query_addsoa() was being called with a non zone db.
1243 [RT #16834]
1244
12452171. [bug] Handle breaks in DNSSEC trust chains where the parent
1246 servers are not DS aware (DS queries to the parent
1247 return a referral to the child).
1248
12492170. [func] Add acache processing to test suite. [RT #16711]
1250
12512169. [bug] host, nslookup: when reporting NXDOMAIN report the
1252 given name and not the last name searched for.
1253 [RT #16763]
1254
12552168. [bug] nsupdate: in non-interactive mode treat syntax errors
1256 as fatal errors. [RT #16785]
1257
12582167. [bug] When re-using a automatic zone named failed to
1259 attach it to the new view. [RT #16786]
1260
1261 --- 9.5.0a3 released ---
1262
12632166. [bug] When running in batch mode, dig could misinterpret
1264 a server address as a name to be looked up, causing
1265 unexpected output. [RT #16743]
1266
12672165. [func] Allow the destination address of a query to determine
1268 if we will answer the query or recurse.
1269 allow-query-on, allow-recursion-on and
1270 allow-query-cache-on. [RT #16291]
1271
12722164. [bug] The code to determine how named-checkzone /
1273 named-compilezone was called failed under windows.
1274 [RT #16764]
1275
12762163. [bug] If only one of query-source and query-source-v6
1277 specified a port the query pools code broke (change
1278 2129). [RT #16768]
1279
12802162. [func] Allow "rrset-order fixed" to be disabled at compile
1281 time. [RT #16665]
1282
12832161. [bug] Fix which log messages are emitted for 'rndc flush'.
1284 [RT #16698]
1285
12862160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
1287 from getifaddrs(). [RT #16708]
1288
1289 --- 9.5.0a2 released ---
1290
12912159. [bug] Array bounds overrun in acache processing. [RT #16710]
1292
12932158. [bug] ns_client_isself() failed to initialize key
1294 leading to a REQUIRE failure. [RT #16688]
1295
12962157. [func] dns_db_transfernode() created. [RT #16685]
1297
12982156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
1299 resolver.c:validated() and resolver.c:cache_name().
1300 Fix a memory leak in rbtdb.c:free_noqname().
1301 Make lookup.c:lookup_find() robust against
1302 event leaks. [RT #16685]
1303
13042155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
1305 [RT #16694]
1306
13072154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
1308 matched in acls by omitting the scope. [RT #16599]
1309
13102153. [bug] nsupdate could leak memory. [RT #16691]
1311
13122152. [cleanup] Use sizeof(buf) instead of fixed number in
1313 dighost.c:get_trusted_key(). [RT #16678]
1314
13152151. [bug] Missing newline in usage message for journalprint.
1316 [RT #16679]
1317
13182150. [bug] 'rrset-order cyclic' uniformly distribute the
1319 starting point for the first response for a given
1320 RRset. [RT #16655]
1321
13222149. [bug] isc_mem_checkdestroyed() failed to abort on
1323 if there were still active memory contexts.
1324 [RT #16672]
1325
13262148. [func] Add positive logging for rndc commands. [RT #14623]
1327
13282147. [bug] libbind: remove potential buffer overflow from
1329 hmac_link.c. [RT #16437]
1330
13312146. [cleanup] Silence Linux's spurious "obsolete setsockopt
1332 SO_BSDCOMPAT" message. [RT #16641]
1333
13342145. [bug] Check DS/DLV digest lengths for known digests.
1335 [RT #16622]
1336
13372144. [cleanup] Suppress logging of SERVFAIL from forwarders.
1338 [RT #16619]
1339
13402143. [bug] We failed to restart the IPv6 client when the
1341 kernel failed to return the destination the
1342 packet was sent to. [RT #16613]
1343
13442142. [bug] Handle master files with a modification time that
1345 matches the epoch. [RT# 16612]
1346
13472141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
1348 equivalent of LDH checks). [RT #16609]
1349
13502140. [bug] libbind: missing unlock on pthread_key_create()
1351 failures. [RT #16654]
1352
13532139. [bug] dns_view_find() was being called with wrong type
1354 in adb.c. [RT #16670]
1355
13562138. [bug] Lock order reversal in resolver.c. [RT #16653]
1357
13582137. [port] Mips little endian and/or mips 64 bit are now
1359 supported for atomic operations. [RT#16648]
1360
13612136. [bug] nslookup/host looped if there was no search list
1362 and the host didn't exist. [RT #16657]
1363
13642135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
1365
13662134. [func] Additional statistics support. [RT #16666]
1367
13682133. [port] powerpc: Support both IBM and MacOS Power PC
1369 assembler syntaxes. [RT #16647]
1370
13712132. [bug] Missing unlock on out of memory in
1372 dns_dispatchmgr_setudp().
1373
13742131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
1375
13762130. [func] Log if CD or DO were set. [RT #16640]
1377
13782129. [func] Provide a pool of UDP sockets for queries to be
1379 made over. See use-queryport-pool, queryport-pool-ports
1380 and queryport-pool-updateinterval. [RT #16415]
1381
13822128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
1383
13842127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
1385
13862126. [security] Serialize validation of type ANY responses. [RT #16555]
1387
13882125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
1389 was defined. [RT #16574]
1390
13912124. [security] It was possible to dereference a freed fetch
1392 context. [RT #16584]
1393
1394 --- 9.5.0a1 released ---
1395
13962123. [func] Use Doxygen to generate internal documentation.
1397 [RT #11398]
1398
13992122. [func] Experimental http server and statistics support
1400 for named via xml.
1401
14022121. [func] Add a 10 slot dead masters cache (LRU) with a 600
1403 second timeout. [RT #16553]
1404
14052120. [doc] Fix markup on nsupdate man page. [RT #16556]
1406
14072119. [compat] libbind: allow res_init() to succeed enough to
1408 return the default domain even if it was unable
1409 to allocate memory.
1410
14112118. [bug] Handle response with long chains of domain name
1412 compression pointers which point to other compression
1413 pointers. [RT #16427]
1414
14152117. [bug] DNSSEC fixes: named could fail to cache NSEC records
1416 which could lead to validation failures. named didn't
1417 handle negative DS responses that were in the process
1418 of being validated. Check CNAME bit before accepting
1419 NODATA proof. To be able to ignore a child NSEC there
1420 must be SOA (and NS) set in the bitmap. [RT #16399]
1421
14222116. [bug] 'rndc reload' could cause the cache to continually
1423 be cleaned. [RT #16401]
1424
14252115. [bug] 'rndc reconfig' could trigger a INSIST if the
1426 number of masters for a zone was reduced. [RT #16444]
1427
14282114. [bug] dig/host/nslookup: searches for names with multiple
1429 labels were failing. [RT #16447]
1430
14312113. [bug] nsupdate: if a zone is specified it should be used
1432 for server discover. [RT# 16455]
1433
14342112. [security] Warn if weak RSA exponent is used. [RT #16460]
1435
14362111. [bug] Fix a number of errors reported by Coverity.
1437 [RT #16507]
1438
14392110. [bug] "minimal-responses yes;" interacted badly with BIND 8
1440 priming queries. [RT #16491]
1441
14422109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
1443
14442108. [func] DHCID support. [RT #16456]
1445
14462107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
1447
14482106. [func] 'rndc status' now reports named's version. [RT #16426]
1449
14502105. [func] GSS-TSIG support (RFC 3645).
1451
14522104. [port] Fix Solaris SMF error message.
1453
14542103. [port] Add /usr/sfw to list of locations for OpenSSL
1455 under Solaris.
1456
14572102. [port] Silence Solaris 10 warnings.
1458
14592101. [bug] OpenSSL version checks were not quite right.
1460 [RT #16476]
1461
14622100. [port] win32: copy libeay32.dll to Build\Debug.
1463 Copy Debug\named-checkzone to Debug\named-compilezone.
1464
14652099. [port] win32: more manifest issues.
1466
14672098. [bug] Race in rbtdb.c:no_references(), which occasionally
1468 triggered an INSIST failure about the node lock
1469 reference. [RT #16411]
1470
14712097. [bug] named could reference a destroyed memory context
1472 after being reloaded / reconfigured. [RT #16428]
1473
14742096. [bug] libbind: handle applications that fail to detect
1475 res_init() failures better.
1476
14772095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
1478 net_cidr_ntop_ipv6(). [RT #16388]
1479
14802094. [contrib] Update named-bootconf. [RT# 16404]
1481
14822093. [bug] named-checkzone -s was broken.
1483
14842092. [bug] win32: dig, host, nslookup. Use registry config
1485 if resolv.conf does not exist or no nameservers
1486 listed. [RT #15877]
1487
14882091. [port] dighost.c: race condition on cleanup. [RT #16417]
1489
14902090. [port] win32: Visual C++ 2005 command line manifest support.
1491 [RT #16417]
1492
14932089. [security] Raise the minimum safe OpenSSL versions to
1494 OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
1495 prior to these have known security flaws which
1496 are (potentially) exploitable in named. [RT #16391]
1497
14982088. [security] Change the default RSA exponent from 3 to 65537.
1499 [RT #16391]
1500
15012087. [port] libisc failed to compile on OS's w/o a vsnprintf.
1502 [RT #16382]
1503
15042086. [port] libbind: FreeBSD now has get*by*_r() functions.
1505 [RT #16403]
1506
15072085. [doc] win32: added index.html and README to zip. [RT #16201]
1508
15092084. [contrib] dbus update for 9.3.3rc2.
1510
15112083. [port] win32: Visual C++ 2005 support.
1512
15132082. [doc] Document 'cache-file' as a test only option.
1514
15152081. [port] libbind: minor 64-bit portability fix in memcluster.c.
1516 [RT #16360]
1517
15182080. [port] libbind: res_init.c did not compile on older versions
1519 of Solaris. [RT #16363]
1520
15212079. [bug] The lame cache was not handling multiple types
1522 correctly. [RT #16361]
1523
15242078. [bug] dnssec-checkzone output style "default" was badly
1525 named. It is now called "relative". [RT #16326]
1526
15272077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
1528 complete signed zone. [RT #16326]
1529
15302076. [bug] Several files were missing #include <config.h>
1531 causing build failures on OSF. [RT #16341]
1532
15332075. [bug] The spillat timer event hander could leak memory.
1534 [RT #16357]
1535
15362074. [bug] dns_request_createvia2(), dns_request_createvia3(),
1537 dns_request_createraw2() and dns_request_createraw3()
1538 failed to send multiple UDP requests. [RT #16349]
1539
15402073. [bug] Incorrect semantics check for update policy "wildcard".
1541 [RT #16353]
1542
15432072. [bug] We were not generating valid HMAC SHA digests.
1544 [RT #16320]
1545
15462071. [port] Test whether gcc accepts -fno-strict-aliasing.
1547 [RT #16324]
1548
15492070. [bug] The remote address was not always displayed when
1550 reporting dispatch failures. [RT #16315]
1551
15522069. [bug] Cross compiling was not working. [RT #16330]
1553
15542068. [cleanup] Lower incremental tuning message to debug 1.
1555 [RT #16319]
1556
15572067. [bug] 'rndc' could close the socket too early triggering
1558 a INSIST under Windows. [RT #16317]
1559
15602066. [security] Handle SIG queries gracefully. [RT #16300]
1561
15622065. [bug] libbind: probe for HPUX prototypes for
1563 endprotoent_r() and endservent_r(). [RT 16313]
1564
15652064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
1566
15672063. [bug] Change #1955 introduced a bug which caused the first
1568 'rndc flush' call to not free memory. [RT #16244]
1569
15702062. [bug] 'dig +nssearch' was reusing a buffer before it had
1571 been returned by the socket code. [RT #16307]
1572
15732061. [bug] Accept expired wildcard message reversed. [RT #16296]
1574
15752060. [bug] Enabling DLZ support could leave views partially
1576 configured. [RT #16295]
1577
15782059. [bug] Search into cache rbtdb could trigger an INSIST
1579 failure while cleaning up a stale rdataset.
1580 [RT #16292]
1581
15822058. [bug] Adjust how we calculate rtt estimates in the presence
1583 of authoritative servers that drop EDNS and/or CD
1584 requests. Also fallback to EDNS/512 and plain DNS
1585 faster for zones with less than 3 servers. [RT #16187]
1586
15872057. [bug] Make setting "ra" dependent on both allow-query-cache
1588 and allow-recursion. [RT #16290]
1589
15902056. [bug] dig: ixfr= was not being treated case insensitively
1591 at all times. [RT #15955]
1592
15932055. [bug] Missing goto after dropping multicast query.
1594 [RT #15944]
1595
15962054. [port] freebsd: do not explicitly link against -lpthread.
1597 [RT #16170]
1598
15992053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
1600
16012052. [bug] 'rndc' improve connect failed message to report
1602 the failing address. [RT #15978]
1603
16042051. [port] More strtol() fixes. [RT #16249]
1605
16062050. [bug] Parsing of NSAP records was not case insensitive.
1607 [RT #16287]
1608
16092049. [bug] Restore SOA before AXFR when falling back from
1610 a attempted IXFR when transferring in a zone.
1611 Allow a initial SOA query before attempting
1612 a AXFR to be requested. [RT #16156]
1613
16142048. [bug] It was possible to loop forever when using
1615 avoid-v4-udp-ports / avoid-v6-udp-ports when
1616 the OS always returned the same local port.
1617 [RT #16182]
1618
16192047. [bug] Failed to initialize the interface flags to zero.
1620 [RT #16245]
1621
16222046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
1623 cleanup [RT #16247].
1624
16252045. [func] Use lock buckets for acache entries to limit memory
1626 consumption. [RT #16183]
1627
16282044. [port] Add support for atomic operations for Itanium.
1629 [RT #16179]
1630
16312043. [port] nsupdate/nslookup: Force the flushing of the prompt
1632 for interactive sessions. [RT#16148]
1633
16342042. [bug] named-checkconf was incorrectly rejecting the
1635 logging category "config". [RT #16117]
1636
16372041. [bug] "configure --with-dlz-bdb=yes" produced a bad
1638 set of libraries to be linked. [RT #16129]
1639
16402040. [bug] rbtdb no_references() could trigger an INSIST
1641 failure with --enable-atomic. [RT #16022]
1642
16432039. [func] Check that all buffers passed to the socket code
1644 have been retrieved when the socket event is freed.
1645 [RT #16122]
1646
16472038. [bug] dig/nslookup/host was unlinking from wrong list
1648 when handling errors. [RT #16122]
1649
16502037. [func] When unlinking the first or last element in a list
1651 check that the list head points to the element to
1652 be unlinked. [RT #15959]
1653
16542036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
1655 [RT #16075]
1656
16572035. [func] Make falling back to TCP on UDP refresh failure
1658 optional. Default "try-tcp-refresh yes;" for BIND 8
1659 compatibility. [RT #16123]
1660
16612034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
1662
16632033. [bug] We weren't creating multiple client memory contexts
1664 on demand as expected. [RT #16095]
1665
16662032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
1667
16682031. [bug] Emit a error message when "rndc refresh" is called on
1669 a non slave/stub zone. [RT # 16073]
1670
16712030. [bug] We were being overly conservative when disabling
1672 openssl engine support. [RT #16030]
1673
16742029. [bug] host printed out the server multiple times when
1675 specified on the command line. [RT #15992]
1676
16772028. [port] linux: socket.c compatibility for old systems.
1678 [RT #16015]
1679
16802027. [port] libbind: Solaris x86 support. [RT #16020]
1681
16822026. [bug] Rate limit the two recursive client exceeded messages.
1683 [RT #16044]
1684
16852025. [func] Update "zone serial unchanged" message. [RT #16026]
1686
16872024. [bug] named emitted spurious "zone serial unchanged"
1688 messages on reload. [RT #16027]
1689
16902023. [bug] "make install" should create ${localstatedir}/run and
1691 ${sysconfdir} if they do not exist. [RT #16033]
1692
16932022. [bug] If dnssec validation is disabled only assert CD if
1694 CD was requested. [RT #16037]
1695
16962021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
1697
16982020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
1699
17002019. [tuning] Reduce the amount of work performed per quantum
1701 when cleaning the cache. [RT #15986]
1702
17032018. [bug] Checking if the HMAC MD5 private file was broken.
1704 [RT #15960]
1705
17062017. [bug] allow-query default was not correct. [RT #15946]
1707
17082016. [bug] Return a partial answer if recursion is not
1709 allowed but requested and we had the answer
1710 to the original qname. [RT #15945]
1711
17122015. [cleanup] use-additional-cache is now acache-enable for
1713 consistency. Default acache-enable off in BIND 9.4
1714 as it requires memory usage to be configured.
1715 It may be enabled by default in BIND 9.5 once we
1716 have more experience with it.
1717
17182014. [func] Statistics about acache now recorded and sent
1719 to log. [RT #15976]
1720
17212013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
1722 responses more gracefully. [RT #15941]
1723
17242012. [func] Don't insert new acache entries if acache is full.
1725 [RT #15970]
1726
17272011. [func] dnssec-signzone can now update the SOA record of
1728 the signed zone, either as an increment or as the
1729 system time(). [RT #15633]
1730
17312010. [placeholder] rt15958
1732
17332009. [bug] libbind: Coverity fixes. [RT #15808]
1734
17352008. [func] It is now possible to enable/disable DNSSEC
1736 validation from rndc. This is useful for the
1737 mobile hosts where the current connection point
1738 breaks DNSSEC (firewall/proxy). [RT #15592]
1739
1740 rndc validation newstate [view]
1741
17422007. [func] It is now possible to explicitly enable DNSSEC
1743 validation. default dnssec-validation no; to
1744 be changed to yes in 9.5.0. [RT #15674]
1745
17462006. [security] Allow-query-cache and allow-recursion now default
1747 to the built in acls "localnets" and "localhost".
1748
1749 This is being done to make caching servers less
1750 attractive as reflective amplifying targets for
1751 spoofed traffic. This still leave authoritative
1752 servers exposed.
1753
1754 The best fix is for full BCP 38 deployment to
1755 remove spoofed traffic.
1756
17572005. [bug] libbind: Retransmission timeouts should be
1758 based on which attempt it is to the nameserver
1759 and not the nameserver itself. [RT #13548]
1760
17612004. [bug] dns_tsig_sign() could pass a NULL pointer to
1762 dst_context_destroy() when cleaning up after a
1763 error. [RT #15835]
1764
17652003. [bug] libbind: The DNS name/address lookup functions could
1766 occasionally follow a random pointer due to
1767 structures not being completely zeroed. [RT #15806]
1768
17692002. [bug] libbind: tighten the constraints on when
1770 struct addrinfo._ai_pad exists. [RT #15783]
1771
17722001. [func] Check the KSK flag when updating a secure dynamic zone.
1773 New zone option "update-check-ksk yes;". [RT #15817]
1774
17752000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
1776
17771999. [func] Implement "rrset-order fixed". [RT #13662]
1778
17791998. [bug] Restrict handling of fifos as sockets to just SunOS.
1780 This allows named to connect to entropy gathering
1781 daemons that use fifos instead of sockets. [RT #15840]
1782
17831997. [bug] Named was failing to replace negative cache entries
1784 when a positive one for the type was learnt.
1785 [RT #15818]
1786
17871996. [bug] nsupdate: if a zone has been specified it should
1788 appear in the output of 'show'. [RT #15797]
1789
17901995. [bug] 'host' was reporting multiple "is an alias" messages.
1791 [RT #15702]
1792
17931994. [port] OpenSSL 0.9.8 support. [RT #15694]
1794
17951993. [bug] Log messages, via syslog, were missing the space
1796 after the timestamp if "print-time yes" was specified.
1797 [RT #15844]
1798
17991992. [bug] Not all incoming zone transfer messages included the
1800 view. [RT #15825]
1801
18021991. [cleanup] The configuration data, once read, should be treated
1803 as read only. Expand the use of const to enforce this
1804 at compile time. [RT #15813]
1805
18061990. [bug] libbind: isc's override of broken gettimeofday()
1807 implementations was not always effective.
1808 [RT #15709]
1809
18101989. [bug] win32: don't check the service password when
1811 re-installing. [RT #15882]
1812
18131988. [bug] Remove a bus error from the SHA256/SHA512 support.
1814 [RT #15878]
1815
18161987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1817
18181986. [func] Report when a zone is removed. [RT #15849]
1819
18201985. [protocol] DLV has now been assigned a official type code of
1821 32769. [RT #15807]
1822
1823 Note: care should be taken to ensure you upgrade
1824 both named and dnssec-signzone at the same time for
1825 zones with DLV records where named is the master
1826 server for the zone. Also any zones that contain
1827 DLV records should be removed when upgrading a slave
1828 zone. You do not however have to upgrade all
1829 servers for a zone with DLV records simultaneously.
1830
18311984. [func] dig, nslookup and host now advertise a 4096 byte
1832 EDNS UDP buffer size by default. [RT #15855]
1833
18341983. [func] Two new update policies. "selfsub" and "selfwild".
1835 [RT #12895]
1836
18371982. [bug] DNSKEY was being accepted on the parent side of
1838 a delegation. KEY is still accepted there for
1839 RFC 3007 validated updates. [RT #15620]
1840
18411981. [bug] win32: condition.c:wait() could fail to reattain
1842 the mutex lock.
1843
18441980. [func] dnssec-signzone: output the SOA record as the
1845 first record in the signed zone. [RT #15758]
1846
18471979. [port] linux: allow named to drop core after changing
1848 user ids. [RT #15753]
1849
18501978. [port] Handle systems which have a broken recvmsg().
1851 [RT #15742]
1852
18531977. [bug] Silence noisy log message. [RT #15704]
1854
18551976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
1856
18571975. [bug] libbind: isc_gethexstring() could misparse multi-line
1858 hex strings with comments. [RT #15814]
1859
18601974. [doc] List each of the zone types and associated zone
1861 options separately in the ARM.
1862
18631973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
1864 HMACSHA512 support. [RT #13606]
1865
18661972. [contrib] DBUS dynamic forwarders integration from
1867 Jason Vas Dias <jvdias@redhat.com>.
1868
18691971. [port] linux: make detection of missing IF_NAMESIZE more
1870 robust. [RT #15443]
1871
18721970. [bug] nsupdate: adjust UDP timeout when falling back to
1873 unsigned SOA query. [RT #15775]
1874
18751969. [bug] win32: the socket code was freeing the socket
1876 structure too early. [RT #15776]
1877
18781968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1879
18801967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
1881
18821966. [bug] Don't set CD when we have fallen back to plain DNS.
1883 [RT #15727]
1884
18851965. [func] Suppress spurious "recusion requested but not
1886 available" warning with 'dig +qr'. [RT #15780].
1887
18881964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
1889
18901963. [port] Tru64 4.0E doesn't support send() and recv().
1891 [RT #15586]
1892
18931962. [bug] Named failed to clear old update-policy when it
1894 was removed. [RT #15491]
1895
18961961. [bug] Check the port and address of responses forwarded
1897 to dispatch. [RT #15474]
1898
18991960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
1900 [RT #15465]
1901
19021959. [func] Control the zeroing of the negative response TTL to
1903 a soa query. Defaults "zero-no-soa-ttl yes;" and
1904 "zero-no-soa-ttl-cache no;". [RT #15460]
1905
19061958. [bug] Named failed to update the zone's secure state
1907 until the zone was reloaded. [RT #15412]
1908
19091957. [bug] Dig mishandled responses to class ANY queries.
1910 [RT #15402]
1911
19121956. [bug] Improve cross compile support, 'gen' is now built
1913 by native compiler. See README for additional
1914 cross compile support information. [RT #15148]
1915
19161955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
1917
19181954. [func] Named now falls back to advertising EDNS with a
1919 512 byte receive buffer if the initial EDNS queries
1920 fail. [RT #14852]
1921
19221953. [func] The maximum EDNS UDP response named will send can
1923 now be set in named.conf (max-udp-size). This is
1924 independent of the advertised receive buffer
1925 (edns-udp-size). [RT #14852]
1926
19271952. [port] hpux: tell the linker to build a runtime link
1928 path "-Wl,+b:". [RT #14816].
1929
19301951. [security] Drop queries from particular well known ports.
1931 Don't return FORMERR to queries from particular
1932 well known ports. [RT #15636]
1933
19341950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
1935 a TCP socket. This prevents the source address being
1936 set for TCP connections. [RT #15628]
1937
19381949. [func] Addition memory leakage checks. [RT #15544]
1939
19401948. [bug] If was possible to trigger a REQUIRE failure in
1941 xfrin.c:maybe_free() if named ran out of memory.
1942 [RT #15568]
1943
19441947. [func] It is now possible to configure named to accept
1945 expired RRSIGs. Default "dnssec-accept-expired no;".
1946 Setting "dnssec-accept-expired yes;" leaves named
1947 vulnerable to replay attacks. [RT #14685]
1948
19491946. [bug] resume_dslookup() could trigger a REQUIRE failure
1950 when using forwarders. [RT #15549]
1951
19521945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
1953 To generate a RSAMD5 key you must explicitly request
1954 RSAMD5. [RT #13780]
1955
19561944. [cleanup] isc_hash_create() does not need a read/write lock.
1957 [RT #15522]
1958
19591943. [bug] Set the loadtime after rolling forward the journal.
1960 [RT #15647]
1961
19621942. [bug] If the name of a DNSKEY match that of one in
1963 trusted-keys do not attempt to validate the DNSKEY
1964 using the parents DS RRset. [RT #15649]
1965
19661941. [bug] ncache_adderesult() should set eresult even if no
1967 rdataset is passed to it. [RT #15642]
1968
19691940. [bug] Fixed a number of error conditions reported by
1970 Coverity.
1971
19721939. [bug] The resolver could dereference a null pointer after
1973 validation if all the queries have timed out.
1974 [RT #15528]
1975
19761938. [bug] The validator was not correctly handling unsecure
1977 negative responses at or below a SEP. [RT #15528]
1978
19791937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
1980
19811936. [bug] The validator could leak memory. [RT #15544]
1982
19831935. [bug] 'acache' was DO sensitive. [RT #15430]
1984
19851934. [func] Validate pending NS RRsets, in the authority section,
1986 prior to returning them if it can be done without
1987 requiring DNSKEYs to be fetched. [RT #15430]
1988
19891933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
1990
19911932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
1992
19931931. [bug] Per-client mctx could require a huge amount of memory,
1994 particularly for a busy caching server. [RT #15519]
1995
19961930. [port] HPUX: ia64 support. [RT #15473]
1997
19981929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
1999
20001928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
2001
20021927. [bug] Access to soanode or nsnode in rbtdb violated the
2003 lock order rule and could cause a dead lock.
2004 [RT# 15518]
2005
20061926. [bug] The Windows installer did not check for empty
2007 passwords. BINDinstall was being installed in
2008 the wrong place. [RT #15483]
2009
20101925. [port] All outer level AC_TRY_RUNs need cross compiling
2011 defaults. [RT #15469]
2012
20131924. [port] libbind: hpux ia64 support. [RT #15473]
2014
20151923. [bug] ns_client_detach() called too early. [RT #15499]
2016
20171922. [bug] check-tool.c:setup_logging() missing call to
2018 dns_log_setcontext().
2019
20201921. [bug] Client memory contexts were not using internal
2021 malloc. [RT# 15434]
2022
20231920. [bug] The cache rbtdb lock array was too small to
2024 have the desired performance characteristics.
2025 [RT #15454]
2026
20271919. [contrib] queryperf: a set of new features: collecting/printing
2028 response delays, printing intermediate results, and
2029 adjusting query rate for the "target" qps.
2030
20311918. [bug] Memory leak when checking acls. [RT #15391]
2032
20331917. [doc] funcsynopsisinfo wasn't being treated as verbatim
2034 when generating man pages. [RT #15385]
2035
20361916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
2037
20381915. [bug] dig +ndots was broken. [RT #15215]
2039
20401914. [protocol] DS is required to accept mnemonic algorithms
2041 (RFC 4034). Still emit numeric algorithms for
2042 compatibility with RFC 3658. [RT #15354]
2043
20441913. [func] Integrate contributed DLZ code into named. [RT #11382]
2045
20461912. [port] aix: atomic locking for powerpc. [RT #15020]
2047
20481911. [bug] Update windows socket code. [RT #14965]
2049
20501910. [bug] dig's +sigchase code overhauled. [RT #14933]
2051
20521909. [bug] The DLV code has been re-worked to make no longer
2053 query order sensitive. [RT #14933]
2054
20551908. [func] dig now warns if 'RA' is not set in the answer when
2056 'RD' was set in the query. host/nslookup skip servers
2057 that fail to set 'RA' when 'RD' is set unless a server
2058 is explicitly set. [RT #15005]
2059
20601907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
2061 [RT #15006]
2062
20631906. [func] dig now has a '-q queryname' and '+showsearch' options.
2064 [RT #15034]
2065
20661905. [bug] Strings returned from cfg_obj_asstring() should be
2067 treated as read-only. The prototype for
2068 cfg_obj_asstring() has been updated to reflect this.
2069 [RT #15256]
2070
20711904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
2072 friends. Note: RFC 1918 zones are not yet covered by
2073 this but are likely to be in a future release.
2074
2075 New options: empty-server, empty-contact,
2076 empty-zones-enable and disable-empty-zone.
2077
20781903. [func] ISC string copy API.
2079
20801902. [func] Attempt to make the amount of work performed in a
2081 iteration self tuning. The covers nodes clean from
2082 the cache per iteration, nodes written to disk when
2083 rewriting a master file and nodes destroyed per
2084 iteration when destroying a zone or a cache.
2085 [RT #14996]
2086
20871901. [cleanup] Don't add DNSKEY records to the additional section.
2088
20891900. [bug] ixfr-from-differences failed to ensure that the
2090 serial number increased. [RT #15036]
2091
20921899. [func] named-checkconf now validates update-policy entries.
2093 [RT #14963]
2094
20951898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
2096 ISC_NETADDR_FORMATSIZE to allow for scope details.
2097
20981897. [func] x86 and x86_64 now have separate atomic locking
2099 implementations.
2100
21011896. [bug] Recursive clients soft quota support wasn't working
2102 as expected. [RT #15103]
2103
21041895. [bug] A escaped character is, potentially, converted to
2105 the output character set too early. [RT #14666]
2106
21071894. [doc] Review ARM for BIND 9.4.
2108
21091893. [port] Use uintptr_t if available. [RT #14606]
2110
21111892. [func] Support for SPF rdata type. [RT #15033]
2112
21131891. [port] freebsd: pthread_mutex_init can fail if it runs out
2114 of memory. [RT #14995]
2115
21161890. [func] Raise the UDP receive buffer size to 32k if it is
2117 less than 32k. [RT #14953]
2118
21191889. [port] sunos: non blocking i/o support. [RT #14951]
2120
21211888. [func] Support for IPSECKEY rdata type. [RT #14967]
2122
21231887. [bug] The cache could delete expired records too fast for
2124 clients with a virtual time in the past. [RT #14991]
2125
21261886. [bug] fctx_create() could return success even though it
2127 failed. [RT #14993]
2128
21291885. [func] dig: report the number of extra bytes still left in
2130 the packet after processing all the records.
2131
21321884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
2133
21341883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
2135 levels. [RT #14962]
2136
21371882. [func] Limit the number of recursive clients that can be
2138 waiting for a single query (<qname,qtype,qclass>) to
2139 resolve. New options clients-per-query and
2140 max-clients-per-query.
2141
21421881. [func] Add a system test for named-checkconf. [RT #14931]
2143
21441880. [func] The lame cache is now done on a <qname,qclass,qtype>
2145 basis as some servers only appear to be lame for
2146 certain query types. [RT #14916]
2147
21481879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
2149 [RT #14892]
2150
21511878. [func] Detect duplicates of UDP queries we are recursing on
2152 and drop them. New stats category "duplicate".
2153 [RT #2471]
2154
21551877. [bug] Fix unreasonably low quantum on call to
2156 dns_rbt_destroy2(). Remove unnecessary unhash_node()
2157 call. [RT #14919]
2158
21591876. [func] Additional memory debugging support to track size
2160 and mctx arguments. [RT #14814]
2161
21621875. [bug] process_dhtkey() was using the wrong memory context
2163 to free some memory. [RT #14890]
2164
21651874. [port] sunos: portability fixes. [RT #14814]
2166
21671873. [port] win32: isc__errno2result() now reports its caller.
2168 [RT #13753]
2169
21701872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
2171
21721871. [placeholder]
2173
21741870. [func] Added framework for handling multiple EDNS versions.
2175 [RT #14873]
2176
21771869. [func] dig can now specify the EDNS version when making
2178 a query. [RT #14873]
2179
21801868. [func] edns-udp-size can now be overridden on a per
2181 server basis. [RT #14851]
2182
21831867. [bug] It was possible to trigger a INSIST in
2184 dlv_validatezonekey(). [RT #14846]
2185
21861866. [bug] resolv.conf parse errors were being ignored by
2187 dig/host/nslookup. [RT #14841]
2188
21891865. [bug] Silently ignore nameservers in /etc/resolv.conf with
2190 bad addresses. [RT #14841]
2191
21921864. [bug] Don't try the alternative transfer source if you
2193 got a answer / transfer with the main source
2194 address. [RT #14802]
2195
21961863. [bug] rrset-order "fixed" error messages not complete.
2197
21981862. [func] Add additional zone data constancy checks.
2199 named-checkzone has extended checking of NS, MX and
2200 SRV record and the hosts they reference.
2201 named has extended post zone load checks.
2202 New zone options: check-mx and integrity-check.
2203 [RT #4940]
2204
22051861. [bug] dig could trigger a INSIST on certain malformed
2206 responses. [RT #14801]
2207
22081860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
2209 incorrectly set. [RT #14775]
2210
22111859. [func] Add support for CH A record. [RT #14695]
2212
22131858. [bug] The flush-zones-on-shutdown option wasn't being
2214 parsed. [RT #14686]
2215
22161857. [bug] named could trigger a INSIST() if reconfigured /
2217 reloaded too fast. [RT #14673]
2218
22191856. [doc] Switch Docbook toolchain from DSSSL to XSL.
2220 [RT #11398]
2221
22221855. [bug] ixfr-from-differences was failing to detect changes
2223 of ttl due to dns_diff_subtract() was ignoring the ttl
2224 of records. [RT #14616]
2225
22261854. [bug] lwres also needs to know the print format for
2227 (long long). [RT #13754]
2228
22291853. [bug] Rework how DLV interacts with proveunsecure().
2230 [RT #13605]
2231
22321852. [cleanup] Remove last vestiges of dnssec-signkey and
2233 dnssec-makekeyset (removed from Makefile years ago).
2234
22351851. [doc] Doxygen comment markup. [RT #11398]
2236
22371850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
2238
22391849. [doc] All forms of the man pages (docbook, man, html) should
2240 have consistent copyright dates.
2241
22421848. [bug] Improve SMF integration. [RT #13238]
2243
22441847. [bug] isc_ondestroy_init() is called too late in
2245 dns_rbtdb_create()/dns_rbtdb64_create().
2246 [RT #13661]
2247
22481846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
2249 <bortzmeyer@nic.fr>.
2250
22511845. [bug] Improve error reporting to distinguish between
2252 accept()/fcntl() and socket()/fcntl() errors.
2253 [RT #13745]
2254
22551844. [bug] inet_pton() accepted more that 4 hexadecimal digits
2256 for each 16 bit piece of the IPv6 address. The text
2257 representation of a IPv6 address has been tightened
2258 to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
2259 [RT #5662]
2260
22611843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
2262 when CFLAGS contains "-I /usr/local/include"
2263 resulting in old header files being used.
2264
22651842. [port] cmsg_len() could produce incorrect results on
2266 some platform. [RT #13744]
2267
22681841. [bug] "dig +nssearch" now makes a recursive query to
2269 find the list of nameservers to query. [RT #13694]
2270
22711840. [func] dnssec-signzone can now randomize signature end times
2272 (dnssec-signzone -j jitter). [RT #13609]
2273
22741839. [bug] <isc/hash.h> was not being installed.
2275
22761838. [cleanup] Don't allow Linux capabilities to be inherited.
2277 [RT #13707]
2278
22791837. [bug] Compile time option ISC_FACILITY was not effective
2280 for 'named -u <user>'. [RT #13714]
2281
22821836. [cleanup] Silence compiler warnings in hash_test.c.
2283
22841835. [bug] Update dnssec-signzone's usage message. [RT #13657]
2285
22861834. [bug] Bad memset in rdata_test.c. [RT #13658]
2287
22881833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
2289
22901832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
2291 [RT #13620]
2292
22931831. [doc] Update named-checkzone documentation. [RT#13604]
2294
22951830. [bug] adb lame cache has sence of test reversed. [RT #13600]
2296
22971829. [bug] win32: "pid-file none;" broken. [RT #13563]
2298
22991828. [bug] isc_rwlock_init() failed to properly cleanup if it
2300 encountered a error. [RT #13549]
2301
23021827. [bug] host: update usage message for '-a'. [RT #37116]
2303
23041826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
2305 of memory error. [RT #13537]
2306
23071825. [bug] Missing UNLOCK() on out of memory error from in
2308 rbtdb.c:subtractrdataset(). [RT #13519]
2309
23101824. [bug] Memory leak on dns_zone_setdbtype() failure.
2311 [RT #13510]
2312
23131823. [bug] Wrong macro used to check for point to point interface.
2314 [RT#13418]
2315
23161822. [bug] check-names test for RT was reversed. [RT #13382]
2317
23181821. [placeholder]
2319
23201820. [bug] Gracefully handle acl loops. [RT #13659]
2321
23221819. [bug] The validator needed to check both the algorithm and
2323 digest types of the DS to determine if it could be
2324 used to introduce a secure zone. [RT #13593]
2325
23261818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
2327
23281817. [func] Add support for additional zone file formats for
2329 improving loading performance. The masterfile-format
2330 option in named.conf can be used to specify a
2331 non-default format. A separate command
2332 named-compilezone was provided to generate zone files
2333 in the new format. Additionally, the -I and -O options
2334 for dnssec-signzone specify the input and output
2335 formats.
2336
23371816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
2338 [RT #13597]
2339
23401815. [bug] nsupdate triggered a REQUIRE if the server was set
2341 without also setting the zone and it encountered
2342 a CNAME and was using TSIG. [RT #13086]
2343
23441814. [func] UNIX domain controls are now supported.
2345
23461813. [func] Restructured the data locking framework using
2347 architecture dependent atomic operations (when
2348 available), improving response performance on
2349 multi-processor machines significantly.
2350 x86, x86_64, alpha, powerpc, and mips are currently
2351 supported.
2352
23531812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
2354 [RT #13453]
2355
23561811. [func] Preserve the case of domain names in rdata during
2357 zone transfers. [RT #13547]
2358
23591810. [bug] configure, lib/bind/configure make different default
2360 decisions about whether to do a threaded build.
2361 [RT #13212]
2362
23631809. [bug] "make distclean" failed for libbind if the platform
2364 is not supported.
2365
23661808. [bug] zone.c:notify_zone() contained a race condition,
2367 zone->db could change underneath it. [RT #13511]
2368
23691807. [bug] When forwarding (forward only) set the active domain
2370 from the forward zone name. [RT #13526]
2371
23721806. [bug] The resolver returned the wrong result when a CNAME /
2373 DNAME was encountered when fetching glue from a
2374 secure namespace. [RT #13501]
2375
23761805. [bug] Pending status was not being cleared when DLV was
2377 active. [RT #13501]
2378
23791804. [bug] Ensure that if we are queried for glue that it fits
2380 in the additional section or TC is set to tell the
2381 client to retry using TCP. [RT #10114]
2382
23831803. [bug] dnssec-signzone sometimes failed to remove old
2384 RRSIGs. [RT #13483]
2385
23861802. [bug] Handle connection resets better. [RT #11280]
2387
23881801. [func] Report differences between hints and real NS rrset
2389 and associated address records.
2390
23911800. [bug] Changes #1719 allowed a INSIST to be triggered.
2392 [RT #13428]
2393
23941799. [bug] 'rndc flushname' failed to flush negative cache
2395 entries. [RT #13438]
2396
23971798. [func] The server syntax has been extended to support a
2398 range of servers. [RT #11132]
2399
24001797. [func] named-checkconf now check acls to verify that they
2401 only refer to existing acls. [RT #13101]
2402
24031796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
2404
24051795. [bug] "rndc dumpdb" was not fully documented. Minor
2406 formating issues with "rndc dumpdb -all". [RT #13396]
2407
24081794. [func] Named and named-checkzone can now both check for
2409 non-terminal wildcard records.
2410
24111793. [func] Extend adjusting TTL warning messages. [RT #13378]
2412
24131792. [func] New zone option "notify-delay". Specify a minimum
2414 delay between sets of NOTIFY messages.
2415
24161791. [bug] 'host -t a' still printed out AAAA and MX records.
2417 [RT #13230]
2418
24191790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
2420 allow parallel make to succeed.
2421
24221789. [bug] Prerequisite test for tkey and dnssec could fail
2423 with "configure --with-libtool".
2424
24251788. [bug] libbind9.la/libbind9.so needs to link against
2426 libisccfg.la/libisccfg.so.
2427
24281787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
2429
24301786. [port] AIX: libt_api needs to be taught to look for
2431 T_testlist in the main executable (--with-libtool).
2432 [RT #13239]
2433
24341785. [bug] libbind9.la/libbind9.so needs to link against
2435 libisc.la/libisc.so.
2436
24371784. [cleanup] "libtool -allow-undefined" is the default.
2438 Leave hooks in configure to allow it to be set
2439 if needed in the future.
2440
24411783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
2442 source tree.
2443
24441782. [port] OSX: --with-libtool + --enable-libbind broke on
2445 __evOptMonoTime. [RT #13219]
2446
24471781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
2448
24491780. [bug] Update libtool to 1.5.10.
2450
24511779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
2452
24531778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
2454 IN6ADDR_LOOPBACK_INIT macros.
2455
24561777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
2457 IN6ADDR_LOOPBACK_INIT macros.
2458
24591776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
2460 IN6ADDR_LOOPBACK_INIT macros.
2461
24621775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
2463
24641774. [port] Aix: Silence compiler warnings / build failures.
2465 [RT #13154]
2466
24671773. [bug] Fast retry on host / net unreachable. [RT #13153]
2468
24691772. [placeholder]
2470
24711771. [placeholder]
2472
24731770. [bug] named-checkconf failed to report missing a missing
2474 file clause for rbt{64} master/hint zones. [RT#13009]
2475
24761769. [port] win32: change compiler flags /MTd ==> /MDd,
2477 /MT ==> /MD.
2478
24791768. [bug] nsecnoexistnodata() could be called with a non-NSEC
2480 rdataset. [RT #12907]
2481
24821767. [port] Builds on IPv6 platforms without IPv6 Advanced API
2483 support for (struct in6_pktinfo) failed. [RT #13077]
2484
24851766. [bug] Update the master file timestamp on successful refresh
2486 as well as the journal's timestamp. [RT# 13062]
2487
24881765. [bug] configure --with-openssl=auto failed. [RT #12937]
2489
24901764. [bug] dns_zone_replacedb failed to emit a error message
2491 if there was no SOA record in the replacement db.
2492 [RT #13016]
2493
24941763. [func] Perform sanity checks on NS records which refer to
2495 'in zone' names. [RT #13002]
2496
24971762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
2498 even when it failed. [RT #12995]
2499
25001761. [bug] 'rndc dumpdb' didn't report unassociated entries.
2501 [RT #12971]
2502
25031760. [bug] Host / net unreachable was not penalising rtt
2504 estimates. [RT #12970]
2505
25061759. [bug] Named failed to startup if the OS supported IPv6
2507 but had no IPv6 interfaces configured. [RT #12942]
2508
25091758. [func] Don't send notify messages to self. [RT #12933]
2510
25111757. [func] host now can turn on memory debugging flags with '-m'.
2512
25131756. [func] named-checkconf now checks the logging configuration.
2514 [RT #12352]
2515
25161755. [func] allow-update is now settable at the options / view
2517 level. [RT #6636]
2518
25191754. [bug] We weren't always attempting to query the parent
2520 server for the DS records at the zone cut.
2521 [RT #12774]
2522
25231753. [bug] Don't serve a slave zone which has no NS records.
2524 [RT #12894]
2525
25261752. [port] Move isc_app_start() to after ns_os_daemonise()
2527 as some fork() implementations unblock the signals
2528 that are blocked by isc_app_start(). [RT #12810]
2529
25301751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
2531
25321750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
2533 [RT #12864]
2534
25351749. [bug] 'check-names response ignore;' failed to ignore.
2536 [RT #12866]
2537
25381748. [func] dig now returns the byte count for axfr/ixfr.
2539
25401747. [bug] BIND 8 compatibility: named/named-checkconf failed
2541 to parse "host-statistics-max" in named.conf.
2542
25431746. [func] Make public the function to read a key file,
2544 dst_key_read_public(). [RT #12450]
2545
25461745. [bug] Dig/host/nslookup accept replies from link locals
2547 regardless of scope if no scope was specified when
2548 query was sent. [RT #12745]
2549
25501744. [bug] If tuple2msgname() failed to convert a tuple to
2551 a name a REQUIRE could be triggered. [RT #12796]
2552
25531743. [bug] If isc_taskmgr_create() was not able to create the
2554 requested number of worker threads then destruction
2555 of the manager would trigger an INSIST() failure.
2556 [RT #12790]
2557
25581742. [bug] Deleting all records at a node then adding a
2559 previously existing record, in a single UPDATE
2560 transaction, failed to leave / regenerate the
2561 associated RRSIG records. [RT #12788]
2562
25631741. [bug] Deleting all records at a node in a secure zone
2564 using a update-policy grant failed. [RT #12787]
2565
25661740. [bug] Replace rbt's hash algorithm as it performed badly
2567 with certain zones. [RT #12729]
2568
2569 NOTE: a hash context now needs to be established
2570 via isc_hash_create() if the application was not
2571 already doing this.
2572
25731739. [bug] dns_rbt_deletetree() could incorrectly return
2574 ISC_R_QUOTA. [RT #12695]
2575
25761738. [bug] Enable overrun checking by default. [RT #12695]
2577
25781737. [bug] named failed if more than 16 masters were specified.
2579 [RT #12627]
2580
25811736. [bug] dst_key_fromnamedfile() could fail to read a
2582 public key. [RT #12687]
2583
25841735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
2585 [RE #12688]
2586
25871734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
2588 [RT #12588]
2589
25901733. [bug] Return non-zero exit status on initial load failure.
2591 [RT #12658]
2592
25931732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
2594 [RT #12467]
2595
25961731. [port] darwin: relax version test in ifconfig.sh.
2597 [RT #12581]
2598
25991730. [port] Determine the length type used by the socket API.
2600 [RT #12581]
2601
26021729. [func] Improve check-names error messages.
2603
26041728. [doc] Update check-names documentation.
2605
26061727. [bug] named-checkzone: check-names support didn't match
2607 documentation.
2608
26091726. [port] aix5: add support for aix5.
2610
26111725. [port] linux: update error message on interaction of threads,
2612 capabilities and setuid support (named -u). [RT #12541]
2613
26141724. [bug] Look for DNSKEY records with "dig +sigtrace".
2615 [RT #12557]
2616
26171723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
2618
26191722. [bug] Don't commit the journal on malformed ixfr streams.
2620 [RT #12519]
2621
26221721. [bug] Error message from the journal processing were not
2623 always identifying the relevant journal. [RT #12519]
2624
26251720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
2626 negative response. [RT #12506]
2627
26281719. [bug] named was not correctly caching a RFC 2308 Type 1
2629 negative response. [RT #12506]
2630
26311718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
2632 responses when looking for the zone / master server.
2633 [RT #12506]
2634
26351717. [port] solaris: ifconfig.sh did not support Solaris 10.
2636 "ifconfig.sh down" didn't work for Solaris 9.
2637
26381716. [doc] named.conf(5) was being installed in the wrong
2639 location. [RT# 12441]
2640
26411715. [func] 'dig +trace' now randomly selects the next servers
2642 to try. Report if there is a bad delegation.
2643
26441714. [bug] dig/host/nslookup were only trying the first
2645 address when a nameserver was specified by name.
2646 [RT #12286]
2647
26481713. [port] linux: extend capset failure message to say:
2649 please ensure that the capset kernel module is
2650 loaded. see insmod(8)
2651
26521712. [bug] Missing FULLCHECK for "trusted-key" in dig.
2653
26541711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
2655
26561710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
2657 messages for the specified zone. [RT #9479]
2658
26591709. [port] solaris: add SMF support from Sun.
2660
26611708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
2662 for conformance to the name space convention. Binary
2663 backward compatibility to the old function name is
2664 provided. [RT #12376]
2665
26661707. [contrib] sdb/ldap updated to version 1.0-beta.
2667
26681706. [bug] 'rndc stop' failed to cause zones to be flushed
2669 sometimes. [RT #12328]
2670
26711705. [func] Allow the journal's name to be changed via named.conf.
2672
26731704. [port] lwres needed a snprintf() implementation for
2674 platforms without snprintf(). Add missing
2675 "#include <isc/print.h>". [RT #12321]
2676
26771703. [bug] named would loop sending NOTIFY messages when it
2678 failed to receive a response. [RT #12322]
2679
26801702. [bug] also-notify should not be applied to built in zones.
2681 [RT #12323]
2682
26831701. [doc] A minimal named.conf man page.
2684
26851700. [func] nslookup is no longer to be treated as deprecated.
2686 Remove "deprecated" warning message. Add man page.
2687
26881699. [bug] dnssec-signzone can generate "not exact" errors
2689 when resigning. [RT #12281]
2690
26911698. [doc] Use reserved IPv6 documentation prefix.
2692
26931697. [bug] xxx-source{,-v6} was not effective when it
2694 specified one of listening addresses and a
2695 different port than the listening port. [RT #12257]
2696
26971696. [bug] dnssec-signzone failed to clean out nodes that
2698 consisted of only NSEC and RRSIG records.
2699 [RT #12154]
2700
27011695. [bug] DS records when forwarding require special handling.
2702 [RT #12133]
2703
27041694. [bug] Report if the builtin views of "_default" / "_bind"
2705 are defined in named.conf. [RT #12023]
2706
27071693. [bug] max-journal-size was not effective for master zones
2708 with ixfr-from-differences set. [RT# 12024]
2709
27101692. [bug] Don't set -I, -L and -R flags when libcrypto is in
2711 /usr/lib. [RT #11971]
2712
27131691. [bug] sdb's attachversion was not complete. [RT #11990]
2714
27151690. [bug] Delay detaching view from the client until UPDATE
2716 processing completes when shutting down. [RT #11714]
2717
27181689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
2719 contained gratuitous semicolons. [RT #11707]
2720
27211688. [bug] LDFLAGS was not supported.
2722
27231687. [bug] Race condition in dispatch. [RT #10272]
2724
27251686. [bug] Named sent a extraneous NOTIFY when it received a
2726 redundant UPDATE request. [RT #11943]
2727
27281685. [bug] Change #1679 loop tests weren't quite right.
2729
27301684. [func] ixfr-from-differences now takes master and slave in
2731 addition to yes and no at the options and view levels.
2732
27331683. [bug] dig +sigchase could leak memory. [RT #11445]
2734
27351682. [port] Update configure test for (long long) printf format.
2736 [RT #5066]
2737
27381681. [bug] Only set SO_REUSEADDR when a port is specified in
2739 isc_socket_bind(). [RT #11742]
2740
27411680. [func] rndc: the source address can now be specified.
2742
27431679. [bug] When there was a single nameserver with multiple
2744 addresses for a zone not all addresses were tried.
2745 [RT #11706]
2746
27471678. [bug] RRSIG should use TYPEXXXXX for unknown types.
2748
27491677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
2750
27511676. [func] New option "allow-query-cache". This lets
2752 allow-query be used to specify the default zone
2753 access level rather than having to have every
2754 zone override the global value. allow-query-cache
2755 can be set at both the options and view levels.
2756 If allow-query-cache is not set allow-query applies.
2757
27581675. [bug] named would sometimes add extra NSEC records to
2759 the authority section.
2760
27611674. [port] linux: increase buffer size used to scan
2762 /proc/net/if_inet6.
2763
27641673. [port] linux: issue a error messages if IPv6 interface
2765 scans fails.
2766
27671672. [cleanup] Tests which only function in a threaded build
2768 now return R:THREADONLY (rather than R:UNTESTED)
2769 in a non-threaded build.
2770
27711671. [contrib] queryperf: add NAPTR to the list of known types.
2772
27731670. [func] Log UPDATE requests to slave zones without an acl as
2774 "disabled" at debug level 3. [RT# 11657]
2775
27761669. [placeholder]
2777
27781668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
2779
27801667. [port] linux: not all versions have IF_NAMESIZE.
2781
27821666. [bug] The optional port on hostnames in dual-stack-servers
2783 was being ignored.
2784
27851665. [func] rndc now allows addresses to be set in the
2786 server clauses.
2787
27881664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
2789
27901663. [func] Look for OpenSSL by default.
2791
27921662. [bug] Change #1658 failed to change one use of 'type'
2793 to 'keytype'.
2794
27951661. [bug] Restore dns_name_concatenate() call in
2796 adb.c:set_target(). [RT #11582]
2797
27981660. [bug] win32: connection_reset_fix() was being called
2799 unconditionally. [RT #11595]
2800
28011659. [cleanup] Cleanup some messages that were referring to KEY vs
2802 DNSKEY, NXT vs NSEC and SIG vs RRSIG.
2803
28041658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
2805 and DH. Tighten which options apply to KEY and
2806 DNSKEY records.
2807
28081657. [doc] ARM: document query log output.
2809
28101656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
2811 DNSKEY and RRSIG. [RT #11542]
2812
28131655. [bug] Logging multiple versions w/o a size was broken.
2814 [RT #11446]
2815
28161654. [bug] isc_result_totext() contained array bounds read
2817 error.
2818
28191653. [func] Add key type checking to dst_key_fromfilename(),
2820 DST_TYPE_KEY should be used to read TSIG, TKEY and
2821 SIG(0) keys.
2822
28231652. [bug] TKEY still uses KEY.
2824
28251651. [bug] dig: process multiple dash options.
2826
28271650. [bug] dig, nslookup: flush standard out after each command.
2828
28291649. [bug] Silence "unexpected non-minimal diff" message.
2830 [RT #11206]
2831
28321648. [func] Update dnssec-lookaside named.conf syntax to support
2833 multiple dnssec-lookaside namespaces (not yet
2834 implemented).
2835
28361647. [bug] It was possible trigger a INSIST when chasing a DS
2837 record that required walking back over a empty node.
2838 [RT #11445]
2839
28401646. [bug] win32: logging file versions didn't work with
2841 non-UNC filenames. [RT#11486]
2842
28431645. [bug] named could trigger a REQUIRE failure if multiple
2844 masters with keys are specified.
2845
28461644. [bug] Update the journal modification time after a
2847 successful refresh query. [RT #11436]
2848
28491643. [bug] dns_db_closeversion() could leak memory / node
2850 references. [RT #11163]
2851
28521642. [port] Support OpenSSL implementations which don't have
2853 DSA support. [RT #11360]
2854
28551641. [bug] Update the check-names description in ARM. [RT #11389]
2856
28571640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
2858 incorrectly closing the socket. [RT #11291]
2859
28601639. [func] Initial dlv system test.
2861
28621638. [bug] "ixfr-from-differences" could generate a REQUIRE
2863 failure if the journal open failed. [RT #11347]
2864
28651637. [bug] Node reference leak on error in addnoqname().
2866
28671636. [bug] The dump done callback could get ISC_R_SUCCESS even if
2868 a error had occurred. The database version no longer
2869 matched the version of the database that was dumped.
2870
28711635. [bug] Memory leak on error in query_addds().
2872
28731634. [bug] named didn't supply a useful error message when it
2874 detected duplicate views. [RT #11208]
2875
28761633. [bug] named should return NOTIMP to update requests to a
2877 slaves without a allow-update-forwarding acl specified.
2878 [RT #11331]
2879
28801632. [bug] nsupdate failed to send prerequisite only UPDATE
2881 messages. [RT #11288]
2882
28831631. [bug] dns_journal_compact() could sometimes corrupt the
2884 journal. [RT #11124]
2885
28861630. [contrib] queryperf: add support for IPv6 transport.
2887
28881629. [func] dig now supports IPv6 scoped addresses with the
2889 extended format in the local-server part. [RT #8753]
2890
28911628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
2892
28931627. [bug] win32: sockets were not being closed when the
2894 last external reference was removed. [RT# 11179]
2895
28961626. [bug] --enable-getifaddrs was broken. [RT#11259]
2897
28981625. [bug] named failed to load/transfer RFC2535 signed zones
2899 which contained CNAMES. [RT# 11237]
2900
29011624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
2902
29031623. [bug] A serial number of zero was being displayed in the
2904 "sending notifies" log message when also-notify was
2905 used. [RT #11177]
2906
29071622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
2908 available, and suppress wildcard binding if not.
2909
29101621. [bug] match-destinations did not work for IPv6 TCP queries.
2911 [RT# 11156]
2912
29131620. [func] When loading a zone report if it is signed. [RT #11149]
2914
29151619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
2916 [RT# 11118]
2917
29181618. [bug] Fencepost errors in dns_name_ishostname() and
2919 dns_name_ismailbox() could trigger a INSIST().
2920
29211617. [port] win32: VC++ 6.0 support.
2922
29231616. [compat] Ensure that named's version is visible in the core
2924 dump. [RT #11127]
2925
29261615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
2927 it is defined.
2928
29291614. [port] win32: silence resource limit messages. [RT# 11101]
2930
29311613. [bug] Builds would fail on machines w/o a if_nametoindex().
2932 Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
2933 [RT #11119]
2934
29351612. [bug] check-names at the option/view level could trigger
2936 an INSIST. [RT# 11116]
2937
29381611. [bug] solaris: IPv6 interface scanning failed to cope with
2939 no active IPv6 interfaces.
2940
29411610. [bug] On dual stack machines "dig -b" failed to set the
2942 address type to be looked up with "@server".
2943 [RT #11069]
2944
29451609. [func] dig now has support to chase DNSSEC signature chains.
2946 Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
2947
2948 DNSSEC validation code in dig coded by Olivier Courtay
2949 (olivier.courtay@irisa.fr) for the IDsA project
2950 (http://idsa.irisa.fr).
2951
29521608. [func] dig and host now accept -4/-6 to select IP transport
2953 to use when making queries.
2954
29551607. [bug] dig, host and nslookup were still using random()
2956 to generate query ids. [RT# 11013]
2957
29581606. [bug] DLV insecurity proof was failing.
2959
29601605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
2961
29621604. [bug] A xfrout_ctx_create() failure would result in
2963 xfrout_ctx_destroy() being called with a
2964 partially initialized structure.
2965
29661603. [bug] nsupdate: set interactive based on isatty().
2967 [RT# 10929]
2968
29691602. [bug] Logging to a file failed unless a size was specified.
2970 [RT# 10925]
2971
29721601. [bug] Silence spurious warning 'both "recursion no;" and
2973 "allow-recursion" active' warning from view "_bind".
2974 [RT# 10920]
2975
29761600. [bug] Duplicate zone pre-load checks were not case
2977 insensitive.
2978
29791599. [bug] Fix memory leak on error path when checking named.conf.
2980
29811598. [func] Specify that certain parts of the namespace must
2982 be secure (dnssec-must-be-secure).
2983
29841597. [func] Allow notify-source and query-source to be specified
2985 on a per server basis similar to transfer-source.
2986 [RT #6496]
2987
29881596. [func] Accept 'notify-source' style syntax for query-source.
2989
29901595. [func] New notify type 'master-only'. Enable notify for
2991 master zones only.
2992
29931594. [bug] 'rndc dumpdb' could prevent named from answering
2994 queries while the dump was in progress. [RT #10565]
2995
29961593. [bug] rndc should return "unknown command" to unknown
2997 commands. [RT# 10642]
2998
29991592. [bug] configure_view() could leak a dispatch. [RT# 10675]
3000
30011591. [bug] libbind: updated to BIND 8.4.5.
3002
30031590. [port] netbsd: update thread support.
3004
30051589. [func] DNSSEC lookaside validation.
3006
30071588. [bug] win32: TCP sockets could become blocked. [RT #10115]
3008
30091587. [bug] dns_message_settsigkey() failed to clear existing key.
3010 [RT #10590]
3011
30121586. [func] "check-names" is now implemented.
3013
30141585. [placeholder]
3015
30161584. [bug] "make test" failed with a read only source tree.
3017 [RT #10461]
3018
30191583. [bug] Records add via UPDATE failed to get the correct trust
3020 level. [RT #10452]
3021
30221582. [bug] rrset-order failed to work on RRsets with more
3023 than 32 elements. [RT #10381]
3024
30251581. [func] Disable DNSSEC support by default. To enable
3026 DNSSEC specify "dnssec-enable yes;" in named.conf.
3027
30281580. [bug] Zone destruction on final detach takes a long time.
3029 [RT #3746]
3030
30311579. [bug] Multiple task managers could not be created.
3032
30331578. [bug] Don't use CLASS E IPv4 addresses when resolving.
3034 [RT #10346]
3035
30361577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
3037 workaround code. [RT #10331]
3038
30391576. [bug] Race condition in dns_dispatch_addresponse().
3040 [RT# 10272]
3041
30421575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
3043
30441574. [bug] Don't attempt to open the controls socket(s) when
3045 running tests. [RT #9091]
3046
30471573. [port] linux: update to libtool 1.5.2 so that
3048 "make install DESTDIR=/xx" works with
3049 "configure --with-libtool". [RT #9941]
3050
30511572. [bug] nsupdate: sign the soa query to find the enclosing
3052 zone if the server is specified. [RT #10148]
3053
30541571. [bug] rbt:hash_node() could fail leaving the hash table
3055 in an inconsistent state. [RT #10208]
3056
30571570. [bug] nsupdate failed to handle classes other than IN.
3058 New keyword 'class' which sets the default class.
3059 [RT #10202]
3060
30611569. [func] nsupdate new command 'answer' which displays the
3062 complete answer message to the last update.
3063
30641568. [bug] nsupdate now reports that the update failed in
3065 interactive mode. [RT# 10236]
3066
30671567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
3068
30691566. [port] Support for the cmsg framework on Solaris and HP/UX.
3070 This also solved the problem that match-destinations
3071 for IPv6 addresses did not work on these systems.
3072 [RT #10221]
3073
30741565. [bug] CD flag should be copied to outgoing queries unless
3075 the query is under a secure entry point in which case
3076 CD should be set.
3077
30781564. [func] Attempt to provide a fallback entropy source to be
3079 used if named is running chrooted and named is unable
3080 to open entropy source within the chroot area.
3081 [RT #10133]
3082
30831563. [bug] Gracefully fail when unable to obtain neither an IPv4
3084 nor an IPv6 dispatch. [RT #10230]
3085
30861562. [bug] isc_socket_create() and isc_socket_accept() could
3087 leak memory under error conditions. [RT #10230]
3088
30891561. [bug] It was possible to release the same name twice if
3090 named ran out of memory. [RT #10197]
3091
30921560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
3093 and EAI_NONAME to the same value.
3094
30951559. [port] named should ignore SIGFSZ.
3096
30971558. [func] New DNSSEC 'disable-algorithms'. Support entry into
3098 child zones for which we don't have a supported
3099 algorithm. Such child zones are treated as unsigned.
3100
31011557. [func] Implement missing DNSSEC tests for
3102 * NOQNAME proof with wildcard answers.
3103 * NOWILDARD proof with NXDOMAIN.
3104 Cache and return NOQNAME with wildcard answers.
3105
31061556. [bug] nsupdate now treats all names as fully qualified.
3107 [RT #6427]
3108
31091555. [func] 'rrset-order cyclic' no longer has a random starting
3110 point per query. [RT #7572]
3111
31121554. [bug] dig, host, nslookup failed when no nameservers
3113 were specified in /etc/resolv.conf. [RT #8232]
3114
31151553. [bug] The windows socket code could stop accepting
3116 connections. [RT#10115]
3117
31181552. [bug] Accept NOTIFY requests from mapped masters if
3119 matched-mapped is set. [RT #10049]
3120
31211551. [port] Open "/dev/null" before calling chroot().
3122
31231550. [port] Call tzset(), if available, before calling chroot().
3124
31251549. [func] named-checkzone can now write out the zone contents
3126 in a easily parsable format (-D and -o).
3127
31281548. [bug] When parsing APL records it was possible to silently
3129 accept out of range ADDRESSFAMILY values. [RT# 9979]
3130
31311547. [bug] Named wasted memory recording duplicate lame zone
3132 entries. [RT #9341]
3133
31341546. [bug] We were rejecting valid secure CNAME to negative
3135 answers.
3136
31371545. [bug] It was possible to leak memory if named was unable to
3138 bind to the specified transfer source and TSIG was
3139 being used. [RT #10120]
3140
31411544. [bug] Named would logged a single entry to a file despite it
3142 being over the specified size limit.
3143
31441543. [bug] Logging using "versions unlimited" did not work.
3145
31461542. [placeholder]
3147
31481541. [func] NSEC now uses new bitmap format.
3149
31501540. [bug] "rndc reload <dynamiczone>" was silently accepted.
3151 [RT #8934]
3152
31531539. [bug] Open UDP sockets for notify-source and transfer-source
3154 that use reserved ports at startup. [RT #9475]
3155
31561538. [placeholder] rt9997
3157
31581537. [func] New option "querylog". If set specify whether query
3159 logging is to be enabled or disabled at startup.
3160
31611536. [bug] Windows socket code failed to log a error description
3162 when returning ISC_R_UNEXPECTED. [RT #9998]
3163
31641535. [placeholder]
3165
31661534. [bug] Race condition when priming cache. [RT# 9940]
3167
31681533. [func] Warn if both "recursion no;" and "allow-recursion"
3169 are active. [RT# 4389]
3170
31711532. [port] netbsd: the configure test for <sys/sysctl.h>
3172 requires <sys/param.h>.
3173
31741531. [port] AIX more libtool fixes.
3175
31761530. [bug] It was possible to trigger a INSIST() failure if a
3177 slave master file was removed at just the correct
3178 moment. [RT #9462]
3179
31801529. [bug] "notify explicit;" failed to log that NOTIFY messages
3181 were being sent for the zone. [RT# 9442]
3182
31831528. [cleanup] Simplify some dns_name_ functions based on the
3184 deprecation of bitstring labels.
3185
31861527. [cleanup] Reduce the number of gettimeofday() calls without
3187 losing necessary timer granularity.
3188
31891526. [func] Implemented "additional section caching (or acache)",
3190 an internal cache framework for additional section
3191 content to improve response performance. Several
3192 configuration options were provided to control the
3193 behavior.
3194
31951525. [bug] dns_cache_create() could trigger a REQUIRE
3196 failure in isc_mem_put() during error cleanup.
3197 [RT# 9360]
3198
31991524. [port] AIX needs to be able to resolve all symbols when
3200 creating shared libraries (--with-libtool).
3201
32021523. [bug] Fix race condition in rbtdb. [RT# 9189]
3203
32041522. [bug] dns_db_findnode() relax the requirements on 'name'.
3205 [RT# 9286]
3206
32071521. [bug] dns_view_createresolver() failed to check the
3208 result from isc_mem_create(). [RT# 9294]
3209
32101520. [protocol] Add SSHFP (SSH Finger Print) type.
3211
32121519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
3213 length of the new bitmap.
3214
32151518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
3216 contained a off-by-one error when working out the
3217 number of octets in the bitmap.
3218
32191517. [port] Support for IPv6 interface scanning on HP/UX and
3220 TrueUNIX 5.1.
3221
32221516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
3223
32241515. [func] Allow transfer source to be set in a server statement.
3225 [RT #6496]
3226
32271514. [bug] named: isc_hash_destroy() was being called too early.
3228 [RT #9160]
3229
32301513. [doc] Add "US" to root-delegation-only exclude list.
3231
32321512. [bug] Extend the delegation-only logging to return query
3233 type, class and responding nameserver.
3234
32351511. [bug] delegation-only was generating false positives
3236 on negative answers from sub-zones.
3237
32381510. [func] New view option "root-delegation-only". Apply
3239 delegation-only check to all TLDs and root.
3240 Note there are some TLDs that are NOT delegation
3241 only (e.g. DE, LV, US and MUSEUM) these can be excluded
3242 from the checks by using exclude.
3243
3244 root-delegation-only exclude {
3245 "DE"; "LV"; "US"; "MUSEUM";
3246 };
3247
32481509. [bug] Hint zones should accept delegation-only. Forward
3249 zone should not accept delegation-only.
3250
32511508. [bug] Don't apply delegation-only checks to answers from
3252 forwarders.
3253
32541507. [bug] Handle BIND 8 style returns to NS queries to parents
3255 when making delegation-only checks.
3256
32571506. [bug] Wrong return type for dns_view_isdelegationonly().
3258
32591505. [bug] Uninitialized rdataset in sdb. [RT #8750]
3260
32611504. [func] New zone type "delegation-only".
3262
32631503. [port] win32: install libeay32.dll outside of system32.
3264
32651502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
3266
32671501. [func] Allow TCP queue length to be specified via
3268 named.conf, tcp-listen-queue.
3269
32701500. [bug] host failed to lookup MX records. Also look up
3271 AAAA records.
3272
32731499. [bug] isc_random need to be seeded better if arc4random()
3274 is not used.
3275
32761498. [port] bsdos: 5.x support.
3277
32781497. [placeholder]
3279
32801496. [port] test for pthread_attr_setstacksize().
3281
32821495. [cleanup] Replace hash functions with universal hash.
3283
32841494. [security] Turn on RSA BLINDING as a precaution.
3285
32861493. [placeholder]
3287
32881492. [cleanup] Preserve rwlock quota context when upgrading /
3289 downgrading. [RT #5599]
3290
32911491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
3292 lines. [RT #6206]
3293
32941490. [bug] Accept reading state as well as working state in
3295 ns_client_next(). [RT #6813]
3296
32971489. [compat] Treat 'allow-update' on slave zones as a warning.
3298 [RT #3469]
3299
33001488. [bug] Don't override trust levels for glue addresses.
3301 [RT #5764]
3302
33031487. [bug] A REQUIRE() failure could be triggered if a zone was
3304 queued for transfer and the zone was then removed.
3305 [RT #6189]
3306
33071486. [bug] isc_print_snprintf() '%%' consumed one too many format
3308 characters. [RT# 8230]
3309
33101485. [bug] gen failed to handle high type values. [RT #6225]
3311
33121484. [bug] The number of records reported after a AXFR was wrong.
3313 [RT #6229]
3314
33151483. [bug] dig axfr failed if the message id in the answer failed
3316 to match that in the request. Only the id in the first
3317 message is required to match. [RT #8138]
3318
33191482. [bug] named could fail to start if the kernel supports
3320 IPv6 but no interfaces are configured. Similarly
3321 for IPv4. [RT #6229]
3322
33231481. [bug] Refresh and stub queries failed to use masters keys
3324 if specified. [RT #7391]
3325
33261480. [bug] Provide replay protection for rndc commands. Full
3327 replay protection requires both rndc and named to
3328 be updated. Partial replay protection (limited
3329 exposure after restart) is provided if just named
3330 is updated.
3331
33321479. [bug] cfg_create_tuple() failed to handle out of
3333 memory cleanup. parse_list() would leak memory
3334 on syntax errors.
3335
33361478. [port] ifconfig.sh didn't account for other virtual
3337 interfaces. It now takes a optional argument
3338 to specify the first interface number. [RT #3907]
3339
33401477. [bug] memory leak using stub zones and TSIG.
3341
33421476. [placeholder]
3343
33441475. [port] Probe for old sprintf().
3345
33461474. [port] Provide strtoul() and memmove() for platforms
3347 without them.
3348
33491473. [bug] create_map() and create_string() failed to handle out
3350 of memory cleanup. [RT #6813]
3351
33521472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
3353
33541471. [bug] libbind: updated to BIND 8.4.0.
3355
33561470. [bug] Incorrect length passed to snprintf. [RT #5966]
3357
33581469. [func] Log end of outgoing zone transfer at same level
3359 as the start of transfer is logged. [RT #4441]
3360
33611468. [func] Internal zones are no longer counted for
3362 'rndc status'. [RT #4706]
3363
33641467. [func] $GENERATES now supports optional class and ttl.
3365
33661466. [bug] lwresd configuration errors resulted in memory
3367 and lock leaks. [RT #5228]
3368
33691465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
3370 failed to check that trailing bits were zero allowing
3371 some invalid base64 strings to be accepted. [RT #5397]
3372
33731464. [bug] Preserve "out of zone" data for outgoing zone
3374 transfers. [RT #5192]
3375
33761463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
3377 NXT bit maps. [RT #5577]
3378
33791462. [bug] parse_sizeval() failed to check the token type.
3380 [RT #5586]
3381
33821461. [bug] Remove deadlock from rbtdb code. [RT #5599]
3383
33841460. [bug] inet_pton() failed to reject certain malformed
3385 IPv6 literals.
3386
33871459. [placeholder]
3388
33891458. [cleanup] sprintf() -> snprintf().
3390
33911457. [port] Provide strlcat() and strlcpy() for platforms without
3392 them.
3393
33941456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
3395
33961455. [bug] <netaddr> missing from server grammar in
3397 doc/misc/options. [RT #5616]
3398
33991454. [port] Use getifaddrs() if available for interface scanning.
3400 --disable-getifaddrs to override. Glibc currently
3401 has a getifaddrs() that does not support IPv6.
3402 Use --enable-getifaddrs=glibc to force the use of
3403 this version under linux machines.
3404
34051453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
3406
34071452. [placeholder]
3408
34091451. [bug] rndc-confgen didn't exit with a error code for all
3410 failures. [RT #5209]
3411
34121450. [bug] Fetching expired glue failed under certain
3413 circumstances. [RT #5124]
3414
34151449. [bug] query_addbestns() didn't handle running out of memory
3416 gracefully.
3417
34181448. [bug] Handle empty wildcards labels.
3419
34201447. [bug] We were casting (unsigned int) to and from (void *).
3421 rdataset->private4 is now rdataset->privateuint4
3422 to reflect a type change.
3423
34241446. [func] Implemented undocumented alternate transfer sources
3425 from BIND 8. See use-alt-transfer-source,
3426 alt-transfer-source and alt-transfer-source-v6.
3427
3428 SECURITY: use-alt-transfer-source is ENABLED unless
3429 you are using views. This may cause a security risk
3430 resulting in accidental disclosure of wrong zone
3431 content if the master supplying different source
3432 content based on IP address. If you are not certain
3433 ISC recommends setting use-alt-transfer-source no;
3434
34351445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
3436 been replaced with DNS_ADBFIND_STARTATZONE which
3437 causes the search to start using the closest zone.
3438
34391444. [func] dns_view_findzonecut2() allows you to specify if the
3440 cache should be searched for zone cuts.
3441
34421443. [func] Masters lists can now be specified and referenced
3443 in zone masters clauses and other masters lists.
3444
34451442. [func] New functions for manipulating port lists:
3446 dns_portlist_create(), dns_portlist_add(),
3447 dns_portlist_remove(), dns_portlist_match(),
3448 dns_portlist_attach() and dns_portlist_detach().
3449
34501441. [func] It is now possible to tell dig to bind to a specific
3451 source port.
3452
34531440. [func] It is now possible to tell named to avoid using
3454 certain source ports (avoid-v4-udp-ports,
3455 avoid-v6-udp-ports).
3456
34571439. [bug] Named could return NOERROR with certain NOTIFY
3458 failures. Return NOTAUTH if the NOTIFY zone is
3459 not being served.
3460
34611438. [func] Log TSIG (if any) when logging NOTIFY requests.
3462
34631437. [bug] Leave space for stdio to work in. [RT #5033]
3464
34651436. [func] dns_zonemgr_resumexfrs() can be used to restart
3466 stalled transfers.
3467
34681435. [bug] zmgr_resume_xfrs() was being called read locked
3469 rather than write locked. zmgr_resume_xfrs()
3470 was not being called if the zone was being
3471 shutdown.
3472
34731434. [bug] "rndc reconfig" failed to initiate the initial
3474 zone transfer of new slave zones.
3475
34761433. [bug] named could trigger a REQUIRE failure if it could
3477 not get a file descriptor when attempting to write
3478 a master file. [RT #4347]
3479
34801432. [func] The advertised EDNS UDP buffer size can now be set
3481 via named.conf (edns-udp-size).
3482
34831431. [bug] isc_print_snprintf() "%s" with precision could walk off
3484 end of argument. [RT #5191]
3485
34861430. [port] linux: IPv6 interface scanning support.
3487
34881429. [bug] Prevent the cache getting locked to old servers.
3489
34901428. [placeholder]
3491
34921427. [bug] Race condition in adb with threaded build.
3493
34941426. [placeholder]
3495
34961425. [port] linux/libbind: define __USE_MISC when testing *_r()
3497 function prototypes in netdb.h. [RT #4921]
3498
34991424. [bug] EDNS version not being correctly printed.
3500
35011423. [contrib] queryperf: added A6 and SRV.
3502
35031422. [func] Log name/type/class when denying a query. [RT #4663]
3504
35051421. [func] Differentiate updates that don't succeed due to
3506 prerequisites (unsuccessful) vs other reasons
3507 (failed).
3508
35091420. [port] solaris: work around gcc optimizer bug.
3510
35111419. [port] openbsd: use /dev/arandom. [RT #4950]
3512
35131418. [bug] 'rndc reconfig' did not cause new slaves to load.
3514
35151417. [func] ID.SERVER/CHAOS is now a built in zone.
3516 See "server-id" for how to configure.
3517
35181416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
3519 [RT #4715]
3520
35211415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
3522 from SOA MINIMUM.
3523
35241414. [func] Support for KSK flag.
3525
35261413. [func] Explicitly request the (re-)generation of DS records
3527 from keysets (dnssec-signzone -g).
3528
35291412. [func] You can now specify servers to be tried if a nameserver
3530 has IPv6 address and you only support IPv4 or the
3531 reverse. See dual-stack-servers.
3532
35331411. [bug] empty nodes should stop wildcard matches. [RT #4802]
3534
35351410. [func] Handle records that live in the parent zone, e.g. DS.
3536
35371409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
3538
35391408. [bug] "make distclean" was not complete. [RT #4700]
3540
35411407. [bug] lfsr incorrectly implements the shift register.
3542 [RT #4617]
3543
35441406. [bug] dispatch initializes one of the LFSR's with a incorrect
3545 polynomial. [RT #4617]
3546
35471405. [func] Use arc4random() if available.
3548
35491404. [bug] libbind: ns_name_ntol() could overwrite a zero length
3550 buffer.
3551
35521403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
3553 dnssec-signkey now report their version in the
3554 usage message.
3555
35561402. [cleanup] A6 has been moved to experimental and is no longer
3557 fully supported.
3558
35591401. [bug] adb wasn't clearing state when the timer expired.
3560
35611400. [bug] Block the addition of wildcard NS records by IXFR
3562 or UPDATE. [RT #3502]
3563
35641399. [bug] Use serial number arithmetic when testing SIG
3565 timestamps. [RT #4268]
3566
35671398. [doc] ARM: notify-also should have been also-notify.
3568 [RT #4345]
3569
35701397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
3571
35721396. [func] dnssec-signzone: adjust the default signing time by
3573 1 hour to allow for clock skew.
3574
35751395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
3576 have a working implementation. [RT #4079]
3577
35781394. [func] It is now possible to check if a particular element is
3579 in a acl. Remove duplicate entries from the localnets
3580 acl.
3581
35821393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
3583 is not available in the kernel to prevent accidently
3584 listening on IPv4 interfaces.
3585
35861392. [bug] named-checkzone: update usage.
3587
35881391. [func] Add support for IPv6 scoped addresses in named.
3589
35901390. [func] host now supports ixfr.
3591
35921389. [bug] named could fail to rotate long log files. [RT #3666]
3593
35941388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
3595 defining HAVE_IFLIST_SYSCTL. [RT #3770]
3596
35971387. [bug] named could crash due to an access to invalid memory
3598 space (which caused an assertion failure) in
3599 incremental cleaning. [RT #3588]
3600
36011386. [bug] named-checkzone -z stopped on errors in a zone.
3602 [RT #3653]
3603
36041385. [bug] Setting serial-query-rate to 10 would trigger a
3605 REQUIRE failure.
3606
36071384. [bug] host was incompatible with BIND 8 in its exit code and
3608 in the output with the -l option. [RT #3536]
3609
36101383. [func] Track the serial number in a IXFR response and log if
3611 a mismatch occurs. This is a more specific error than
3612 "not exact". [RT #3445]
3613
36141382. [bug] make install failed with --enable-libbind. [RT #3656]
3615
36161381. [bug] named failed to correctly process answers that
3617 contained DNAME records where the resulting CNAME
3618 resulted in a negative answer.
3619
36201380. [func] 'rndc recursing' dump recursing queries to
3621 'recursing-file = "named.recursing";'.
3622
36231379. [func] 'rndc status' now reports tcp and recursion quota
3624 states.
3625
36261378. [func] Improved positive feedback for 'rndc {reload|refresh}.
3627
36281377. [func] dns_zone_load{new}() now reports if the zone was
3629 loaded, queued for loading to up to date.
3630
36311376. [func] New function dns_zone_logc() to log to specified
3632 category.
3633
36341375. [func] 'rndc dumpdb' now dumps the adb cache along with the
3635 data cache.
3636
36371374. [func] dns_adb_dump() now logs the lame zones associated
3638 with each server.
3639
36401373. [bug] Recovery from expired glue failed under certain
3641 circumstances.
3642
36431372. [bug] named crashes with an assertion failure on exit when
3644 sharing the same port for listening and querying, and
3645 changing listening addresses several times. [RT# 3509]
3646
36471371. [bug] notify-source-v6, transfer-source-v6 and
3648 query-source-v6 with explicit addresses and using the
3649 same ports as named was listening on could interfere
3650 with named's ability to answer queries sent to those
3651 addresses.
3652
36531370. [bug] dig '+[no]recurse' was incorrectly documented.
3654
36551369. [bug] Adding an NS record as the lexicographically last
3656 record in a secure zone didn't work.
3657
36581368. [func] remove support for bitstring labels.
3659
36601367. [func] Use response times to select forwarders.
3661
36621366. [contrib] queryperf usage was incomplete. Add '-h' for help.
3663
36641365. [func] "localhost" and "localnets" acls now include IPv6
3665 addresses / prefixes.
3666
36671364. [func] Log file name when unable to open memory statistics
3668 and dump database files. [RT# 3437]
3669
36701363. [func] Listen-on-v6 now supports specific addresses.
3671
36721362. [bug] remove IFF_RUNNING test when scanning interfaces.
3673
36741361. [func] log the reason for rejecting a server when resolving
3675 queries.
3676
36771360. [bug] --enable-libbind would fail when not built in the
3678 source tree for certain OS's.
3679
36801359. [security] Support patches OpenSSL libraries.
3681 http://www.cert.org/advisories/CA-2002-23.html
3682
36831358. [bug] It was possible to trigger a INSIST when debugging
3684 large dynamic updates. [RT #3390]
3685
36861357. [bug] nsupdate was extremely wasteful of memory.
3687
36881356. [tuning] Reduce the number of events / quantum for zone tasks.
3689
36901355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
3691
36921354. [doc] lwres man pages had illegal nroff.
3693
36941353. [contrib] sdb/ldap to version 0.9.
3695
36961352. [bug] dig, host, nslookup when falling back to TCP use the
3697 current search entry (if any). [RT #3374]
3698
36991351. [bug] lwres_getipnodebyname() returned the wrong name
3700 when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
3701 was set.
3702
37031350. [bug] dns_name_fromtext() failed to handle too many labels
3704 gracefully.
3705
37061349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
3707 http://www.cert.org/advisories/CA-2002-23.html
3708
37091348. [port] win32: Rewrote code to use I/O Completion Ports
3710 in socket.c and eliminating a host of socket
3711 errors. Performance is enhanced.
3712
37131347. [placeholder]
3714
37151346. [placeholder]
3716
37171345. [port] Use a explicit -Wformat with gcc. Not all versions
3718 include it in -Wall.
3719
37201344. [func] Log if the serial number on the master has gone
3721 backwards.
3722 If you have multiple machines specified in the masters
3723 clause you may want to set 'multi-master yes;' to
3724 suppress this warning.
3725
37261343. [func] Log successful notifies received (info). Adjust log
3727 level for failed notifies to notice.
3728
37291342. [func] Log remote address with TCP dispatch failures.
3730
37311341. [func] Allow a rate limiter to be stalled.
3732
37331340. [bug] Delay and spread out the startup refresh load.
3734
37351339. [func] dig, host and nslookup now use IP6.ARPA for nibble
3736 lookups. Bit string lookups are no longer attempted.
3737
37381338. [placeholder]
3739
37401337. [placeholder]
3741
37421336. [func] Nibble lookups under IP6.ARPA are now supported by
3743 dns_byaddr_create(). dns_byaddr_createptrname() is
3744 deprecated, use dns_byaddr_createptrname2() instead.
3745
37461335. [bug] When performing a nonexistence proof, the validator
3747 should discard parent NXTs from higher in the DNS.
3748
37491334. [bug] When signing/verifying rdatasets, duplicate rdatas
3750 need to be suppressed.
3751
37521333. [contrib] queryperf now reports a summary of returned
3753 rcodes (-c), rcodes are printed in mnemonic form (-v).
3754
37551332. [func] Report the current serial with periodic commits when
3756 rolling forward the journal.
3757
37581331. [func] Generate DNSSEC wildcard proofs.
3759
37601330. [bug] When processing events (non-threaded) only allow
3761 the task one chance to use to use its quantum.
3762
37631329. [func] named-checkzone will now check if nameservers that
3764 appear to be IP addresses. Available modes "fail",
3765 "warn" (default) and "ignore" the results of the
3766 check.
3767
37681328. [bug] The validator could incorrectly verify an invalid
3769 negative proof.
3770
37711327. [bug] The validator would incorrectly mark data as insecure
3772 when seeing a bogus signature before a correct
3773 signature.
3774
37751326. [bug] DNAME/CNAME signatures were not being cached when
3776 validation was not being performed. [RT #3284]
3777
37781325. [bug] If the tcpquota was exhausted it was possible to
3779 to trigger a INSIST() failure.
3780
37811324. [port] darwin: ifconfig.sh now supports darwin.
3782
37831323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
3784
37851322. [bug] dnssec-signzone usage message was misleading.
3786
37871321. [bug] If the last RRset in a zone is glue, dnssec-signzone
3788 would incorrectly duplicate its output and sign it.
3789
37901320. [doc] query-source-v6 was missing from options section.
3791 [RT #3218]
3792
37931319. [func] libbind: log attempts to exploit #1318.
3794
37951318. [bug] libbind: Remote buffer overrun.
3796
37971317. [port] libbind: TrueUNIX 5.1 does not like __align as a
3798 element name.
3799
38001316. [bug] libbind: gethostans() could get out of sync parsing
3801 the response if there was a very long CNAME chain.
3802
38031315. [bug] Options should apply to the internal _bind view.
3804
38051314. [port] Handle ECONNRESET from sendmsg() [unix].
3806
38071313. [func] Query log now says if the query was signed (S) or
3808 if EDNS was used (E).
3809
38101312. [func] Log TSIG key used w/ outgoing zone transfers.
3811
38121311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
3813
38141310. [bug] 'rndc stop' failed to cause zones to be flushed
3815 sometimes. [RT #3157]
3816
38171309. [func] Log that a zone transfer was covered by a TSIG.
3818
38191308. [func] DS (delegation signer) support.
3820
38211307. [bug] nsupdate: allow white space base64 key data.
3822
38231306. [bug] Badly encoded LOC record when the size, horizontal
3824 precision or vertical precision was 0.1m.
3825
38261305. [bug] Document that internal zones are included in the
3827 rndc status results.
3828
38291304. [func] New function: dns_zone_name().
3830
38311303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
3832
38331302. [func] Extended rndc dumpdb to support dumping of zones and
3834 view selection: 'dumpdb [-all|-zones|-cache] [view]'.
3835
38361301. [func] New category 'update-security'.
3837
38381300. [port] Compaq Trucluster support.
3839
38401299. [bug] Set AI_ADDRCONFIG when looking up addresses
3841 via getaddrinfo() (affects dig, host, nslookup, rndc
3842 and nsupdate).
3843
38441298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
3845 could be left with a trailing "\" after configure
3846 has been run.
3847
38481297. [port] linux: make handling EINVAL from socket() no longer
3849 conditional on #ifdef LINUX.
3850
38511296. [bug] isc_log_closefilelogs() needed to lock the log
3852 context.
3853
38541295. [bug] isc_log_setdebuglevel() needed to lock the log
3855 context.
3856
38571294. [func] libbind: no longer attempts bit string labels for
3858 IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
3859 for nibble style resolution.
3860
38611293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
3862
38631292. [func] Enable IPv6 support when using ioctl style interface
3864 scanning and OS supports SIOCGLIFADDR using struct
3865 if_laddrreq.
3866
38671291. [func] Enable IPv6 support when using sysctl style interface
3868 scanning.
3869
38701290. [func] "dig axfr" now reports the number of messages
3871 as well as the number of records.
3872
38731289. [port] See if -ldl is required for OpenSSL? [RT #2672]
3874
38751288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
3876 reflect written requirements.
3877
38781287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
3879 a rdataset to a zone db in the rbtdb implementation of
3880 addrdataset.
3881
38821286. [bug] dns_name_downcase() enforce requirement that
3883 target != NULL or name->buffer != NULL.
3884
38851285. [func] lwres: probe the system to see what address families
3886 are currently in use.
3887
38881284. [bug] The RTT estimate on unused servers was not aged.
3889 [RT #2569]
3890
38911283. [func] Use "dataready" accept filter if available.
3892
38931282. [port] libbind: hpux 11.11 interface scanning.
3894
38951281. [func] Log zone when unable to get private keys to update
3896 zone. Log zone when NXT records are missing from
3897 secure zone.
3898
38991280. [bug] libbind: escape '(' and ')' when converting to
3900 presentation form.
3901
39021279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
3903
39041278. [func] dig: now supports +[no]cl +[no]ttlid.
3905
39061277. [func] You can now create your own customized printing
3907 styles: dns_master_stylecreate() and
3908 dns_master_styledestroy().
3909
39101276. [bug] libbind: const pointer conflicts in res_debug.c.
3911
39121275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
3913
39141274. [bug] Memory leak in lwres_gnbarequest_parse().
3915
39161273. [port] libbind: solaris: 64 bit binary compatibility.
3917
39181272. [contrib] Berkeley DB 4.0 sdb implementation from
3919 Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
3920
39211271. [bug] "recursion available: {denied,approved}" was too
3922 confusing.
3923
39241270. [bug] Check that system inet_pton() and inet_ntop() support
3925 AF_INET6.
3926
39271269. [port] Openserver: ifconfig.sh support.
3928
39291268. [port] Openserver: the value FD_SETSIZE depends on whether
3930 <sys/param.h> is included or not. Be consistent.
3931
39321267. [func] isc_file_openunique() now creates file using mode
3933 0666 rather than 0600.
3934
39351266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
3936 __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
3937 are not C++ compatible, use *_TYPE versions instead.
3938
39391265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
3940 C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
3941
39421264. [placeholder]
3943
39441263. [bug] Reference after free error if dns_dispatchmgr_create()
3945 failed.
3946
39471262. [bug] ns_server_destroy() failed to set *serverp to NULL.
3948
39491261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
3950 support for compressed TSIG owner names.
3951
39521260. [func] libbind: res_update can now update IPv6 servers,
3953 new function res_findzonecut2().
3954
39551259. [bug] libbind: get_salen() IPv6 support was broken for OSs
3956 w/o sa_len.
3957
39581258. [bug] libbind: res_nametotype() and res_nametoclass() were
3959 broken.
3960
39611257. [bug] Failure to write pid-file should not be fatal on
3962 reload. [RT #2861]
3963
39641256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
3965
39661255. [bug] When verifying that an NXT proves nonexistence, check
3967 the rcode of the message and only do the matching NXT
3968 check. That is, for NXDOMAIN responses, check that
3969 the name is in the range between the NXT owner and
3970 next name, and for NOERROR NODATA responses, check
3971 that the type is not present in the NXT bitmap.
3972
39731254. [func] preferred-glue option from BIND 8.3.
3974
39751253. [bug] The dnssec system test failed to remove the correct
3976 files.
3977
39781252. [bug] Dig, host and nslookup were not checking the address
3979 the answer was coming from against the address it was
3980 sent to. [RT# 2692]
3981
39821251. [port] win32: a make file contained absolute version specific
3983 references.
3984
39851250. [func] Nsupdate will report the address the update was
3986 sent to.
3987
39881249. [bug] Missing masters clause was not handled gracefully.
3989 [RT #2703]
3990
39911248. [bug] DESTDIR was not being propagated between makes.
3992
39931247. [bug] Don't reset the interface index for link/site local
3994 addresses. [RT #2576]
3995
39961246. [func] New functions isc_sockaddr_issitelocal(),
3997 isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
3998 and isc_netaddr_islinklocal().
3999
40001245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
4001 accept().
4002
40031244. [bug] Receiving a TCP message from a blackhole address would
4004 prevent further messages being received over that
4005 interface.
4006
40071243. [bug] It was possible to trigger a REQUIRE() in
4008 dns_message_findtype(). [RT #2659]
4009
40101242. [bug] named-checkzone failed if a journal existed. [RT #2657]
4011
40121241. [bug] Drop received UDP messages with a zero source port
4013 as these are invariably forged. [RT #2621]
4014
40151240. [bug] It was possible to leak zone references by
4016 specifying an incorrect zone to rndc.
4017
40181239. [bug] Under certain circumstances named could continue to
4019 use a name after it had been freed triggering
4020 INSIST() failures. [RT #2614]
4021
40221238. [bug] It is possible to lockup the server when shutting down
4023 if notifies were being processed. [RT #2591]
4024
40251237. [bug] nslookup: "set q=type" failed.
4026
40271236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
4028 NULL terminated text regions. [RT #2588]
4029
40301235. [func] Report 'out of memory' errors from openssl.
4031
40321234. [bug] contrib/sdb: 'zonetodb' failed to call
4033 dns_result_register(). DNS_R_SEENINCLUDE should not
4034 be fatal.
4035
40361233. [bug] The flags field of a KEY record can be expressed in
4037 hex as well as decimal.
4038
40391232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
4040
40411231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
4042
40431230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
4044
40451229. [bug] named would crash if it received a TSIG signed
4046 query as part of an AXFR response. [RT #2570]
4047
40481228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
4049
40501227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
4051 if a number was expected and some other token was
4052 found. [RT#2532]
4053
40541226. [func] Use EDNS for zone refresh queries. [RT #2551]
4055
40561225. [func] dns_message_setopt() no longer requires that
4057 dns_message_renderbegin() to have been called.
4058
40591224. [bug] 'rrset-order' and 'sortlist' should be additive
4060 not exclusive.
4061
40621223. [func] 'rrset-order' partially works 'cyclic' and 'random'
4063 are supported.
4064
40651222. [bug] Specifying 'port *' did not always result in a system
4066 selected (non-reserved) port being used. [RT #2537]
4067
40681221. [bug] Zone types 'master', 'slave' and 'stub' were not being
4069 compared case insensitively. [RT #2542]
4070
40711220. [func] Support for APL rdata type.
4072
40731219. [func] Named now reports the TSIG extended error code when
4074 signature verification fails. [RT #1651]
4075
40761218. [bug] Named incorrectly returned SERVFAIL rather than
4077 NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
4078
40791217. [func] Report locations of previous key definition when a
4080 duplicate is detected.
4081
40821216. [bug] Multiple server clauses for the same server were not
4083 reported. [RT #2514]
4084
40851215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
4086
40871214. [bug] Win32: isc_file_renameunique() could leave zero length
4088 files behind.
4089
40901213. [func] Report view associated with client if it is not a
4091 standard view (_default or _bind).
4092
40931212. [port] libbind: 64k answer buffers were causing stack space
4094 to be exceeded for certain OS. Use heap space instead.
4095
40961211. [bug] dns_name_fromtext() incorrectly handled certain
4097 valid octal bitlabels. [RT #2483]
4098
40991210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
4100 compatible addresses. [RT #2461]
4101
41021209. [bug] Dig, host, nslookup were not checking the message ids
4103 on the responses. [RT #2454]
4104
41051208. [bug] dns_master_load*() failed to log a error message if
4106</