+ --- 9.15.3 released ---
+
5277. [bug] Cache DB statistics could underflow when serve-stale
was in use, because of a bug in counter maintenance
when RRsets become stale.
as a result of a zone update. [GL #513]
</para>
</listitem>
+ <listitem>
+ <para>
+ Statistics channel groups are now toggleable. [GL #1030]
+ </para>
+ </listitem>
</itemizedlist>
</section>
made default. Old non-default HMAC-SHA based DNS Cookie algorithms
have been removed, and only the default AES algorithm is being kept
for legacy reasons. This changes doesn't have any operational impact
- in most common scenarios.
+ in most common scenarios. [GL #605]
</para>
<para>
If you are running multiple DNS Servers (different versions of BIND 9
or stale and marked for deletion. [GL #602]
</para>
</listitem>
+ <listitem>
+ <para>
+ Interaction between DNS64 and RPZ No Data rule (CNAME *.) could
+ cause unexpected results; this has been fixed. [GL #1106]
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ <command>named-checkconf</command> now checks DNS64 prefixes
+ to ensure bits 64-71 are zero. [GL #1159]
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ <command>named-checkconf</command> now correctly reports missing
+ <command>dnstap-output</command> option when
+ <command>dnstap</command> is set. [GL #1136]
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Handle ETIMEDOUT error on connect() with a non-blocking
+ socket. [GL #1133]
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ <command>dig</command> now correctly expands the IPv6 address
+ when run with <command>+expandaaaa +short</command>. [GL #1152]
+ </para>
+ </listitem>
</itemizedlist>
</section>