+ --- 9.7.7rc1 released ---
+
3369. [bug] nsupdate terminated unexpectedly in interactive mode
if built with readline support. [RT #29550]
3367. [bug] dns_dnsseckey_create() result was not being checked.
[RT #30685]
-3366. [bug] Fixed Read-After-Write dependency violation for IA64
+3366. [bug] Fixed Read-After-Write dependency violation for IA64
atomic operations. [RT #25181]
3365. [bug] Removed spurious newlines from log messages in
3360. [bug] 'host -w' could die. [RT #18723]
3359. [bug] An improperly-formed TSIG secret could cause a
- memory leak. [RT #30607]
+ memory leak. [RT #30607]
3357. [port] Add support for libxml2-2.8.x [RT #30440]
-3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
+3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
in caches after expiry. [RT #26429]
ISC_MEM_DEBUGCTX memory debugging flag is set.
[RT #30240]
-3348. [bug] Prevent RRSIG data from being cached if a negative
- record matching the covering type exists at a higher
- trust level. Such data already can't be retrieved from
- the cache since change 3218 -- this prevents it
+3348. [bug] Prevent RRSIG data from being cached if a negative
+ record matching the covering type exists at a higher
+ trust level. Such data already can't be retrieved from
+ the cache since change 3218 -- this prevents it
being inserted into the cache as well. [RT #26809]
-
-3347. [bug] dnssec-settime: Issue a warning when writing a new
- private key file would cause a change in the
+
+3347. [bug] dnssec-settime: Issue a warning when writing a new
+ private key file would cause a change in the
permissions of the existing file. [RT #27724]
3346. [security] Bad-cache data could be used before it was
they fail to validate, we try again in lower case.
[RT #27451]
-3328. [bug] Fixed inconsistent data checking in dst_parse.c.
- [RT #29401]
+3328. [bug] Fixed inconsistent data checking in dst_parse.c.
+ [RT #29401]
--- 9.7.6 released ---
+3370. [bug] Address use after free while shutting down. [RT #30241]
+
+3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
+ were not C++ safe.
+
+3363. [bug] Need to allow "forward" and "fowarders" options
+ in static-stub zones; this had been overlooked.
+ [RT #30482]
+
+3361. [bug] "rndc signing -nsec3param" didn't work correctly
+ when salt was set to '-' (no salt). [RT #30099]
+
+3355. [port] Use more portable awk in verify system test.
+
+3353. [bug] Use a single task for task exclusive operations.
+ [RT #29872]
+
+3349. [bug] Change #3345 was incomplete. [RT #30233]
+
+3345. [bug] Addressed race condition when removing the last item
+ or inserting the first item in an ISC_QUEUE.
+ [RT #29539]
+
+3338. [bug] Address race condition in units tests: asyncload_zone
+ and asyncload_zt. [RT #26100]
+
+3334. [bug] Hold a zone table reference while performing a
+ asyncronous load of a zone. [RT #28326]
+
+3333. [bug] Setting resolver-query-timeout too low can cause
+ named to not recover if it loses connectivity.
+ [RT #29623]
+
+3324. [test] Add better tests for ADB stats [RT #27057]
+
+3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918]
+
+3316. [tuning] Improved locking performance when recursing.
+ [RT #28836]
+
+3315. [tuning] Use multiple dispatch objects for sending upstream
+ queries; this can improve performance on busy
+ multiprocessor systems by reducing lock contention.
+ [RT #28605]
+
3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
[RT #27631]