+ --- 9.6-ESV-R10rc2 released ---
+
3637. [bug] 'allow-query-on' was checking the source address
rather than the destination address. [RT #34590]
+3635. [bug] Signatures were not being removed from a zone with
+ only KSK keys for a algorithm. [RT #24439]
+
+3632. [bug] Signature from newly inactive keys were not being
+ removed. [RT #32178]
+
+3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
+
+3624. [bug] Look for 'json_object_new_int64' when looking for a
+ the json library. [RT #34449]
+
+3622. [tuning] Eliminate an unnecessary lock when incrementing
+ cache statistics. [RT #34339]
+
+3621. [security] Incorrect bounds checking on private type 'keydata'
+ can lead to a remotely triggerable REQUIRE failure
+ (CVE-2013-4854). [RT #34238]
+
3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
[RT #33776]