+ --- 9.9.2rc1 released ---
+
3370. [bug] Address use after free while shutting down. [RT #30241]
3369. [bug] nsupdate terminated unexpectedly in interactive mode
3367. [bug] dns_dnsseckey_create() result was not being checked.
[RT #30685]
-3366. [bug] Fixed Read-After-Write dependency violation for IA64
+3366. [bug] Fixed Read-After-Write dependency violation for IA64
atomic operations. [RT #25181]
3365. [bug] Removed spurious newlines from log messages in
3361. [bug] "rndc signing -nsec3param" didn't work correctly
when salt was set to '-' (no salt). [RT #30099]
-
+
3360. [bug] 'host -w' could die. [RT #18723]
3359. [bug] An improperly-formed TSIG secret could cause a
- memory leak. [RT #30607]
+ memory leak. [RT #30607]
3357. [port] Add support for libxml2-2.8.x [RT #30440]
-3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
+3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
approaching their expiry, so they don't remain
in caches after expiry. [RT #26429]
3349. [bug] Change #3345 was incomplete. [RT #30233]
-3348. [bug] Prevent RRSIG data from being cached if a negative
- record matching the covering type exists at a higher
- trust level. Such data already can't be retrieved from
- the cache since change 3218 -- this prevents it
+3348. [bug] Prevent RRSIG data from being cached if a negative
+ record matching the covering type exists at a higher
+ trust level. Such data already can't be retrieved from
+ the cache since change 3218 -- this prevents it
being inserted into the cache as well. [RT #26809]
-
-3347. [bug] dnssec-settime: Issue a warning when writing a new
- private key file would cause a change in the
+
+3347. [bug] dnssec-settime: Issue a warning when writing a new
+ private key file would cause a change in the
permissions of the existing file. [RT #27724]
3346. [security] Bad-cache data could be used before it was
rdataslabs. [RT #29644]
3330. [func] Fix missing signatures on NOERROR results despite
- RPZ rewriting. Also
+ RPZ rewriting. Also
- add optional "recursive-only yes|no" to the
response-policy statement
- add optional "max-policy-ttl" to the response-policy
they fail to validate, we try again in lower case.
[RT #27451]
-3328. [bug] Fixed inconsistent data checking in dst_parse.c.
- [RT #29401]
+3328. [bug] Fixed inconsistent data checking in dst_parse.c.
+ [RT #29401]
3317. [func] Add ECDSA support (RFC 6605). [RT #21918]