Changes prior to 9.20.0
-----------------------
-::
+.. code-block:: none
--- 9.20.0 released ---
6382. [bug] Fix RPZ response's SOA record TTL, which was incorrectly
set to 1 if 'add-soa' is used. [GL #3323]
+.. code-block:: none
+
--- 9.19.24 released ---
6381. [bug] dns_qp_lookup() could position the iterator at the
6370. [bug] Wrong source address used for IPv6 notify messages.
[GL #4669]
+.. code-block:: none
+
--- 9.19.23 released ---
6369. [func] The 'fixed' value for the 'rrset-order' option has
6359. [bug] Fix bug in Depends (keymgr_dep) function. [GL #4552]
+.. code-block:: none
+
--- 9.19.22 released ---
6358. [bug] Fix validate_dnskey_dsset when KSK is not signing,
'host -C' commands when one of the name servers returns
SERVFAIL. [GL #4508]
+.. code-block:: none
+
--- 9.19.21 released ---
6323. [placeholder]
6320. [placeholder]
+.. code-block:: none
+
--- 9.19.20 released ---
6319. [func] Limit isc_async_run() overhead for RBTDB tree pruning.
6298. [bug] Fix dns_qp_lookup bugs related to the iterator.
[GL !8558]
+.. code-block:: none
+
--- 9.19.19 released ---
6297. [bug] Improve LRU cleaning behaviour. [GL #4448]
6281. [bug] Fix a data race in dns_tsigkeyring_dump(). [GL #4328]
+.. code-block:: none
+
--- 9.19.18 released ---
6280. [bug] Fix missing newlines in the output of "rndc nta -dump".
6247. [func] Implement incremental hashing in both isc_siphash
and isc_hash units. [GL #4306]
+.. code-block:: none
+
--- 9.19.17 released ---
6246. [placeholder]
6222. [func] Fixes to provider/engine based ECDSA key handling.
[GL !8152]
+.. code-block:: none
+
--- 9.19.16 released ---
6221. [cleanup] Refactor dns_rdataset internals, move rdatasetheader
6208. [func] Return BADCOOKIE for out-of-date or otherwise bad, well
formed DNS SERVER COOKIES. [GL #4194]
+.. code-block:: none
+
--- 9.19.15 released ---
6207. [cleanup] The code implementing TSIG/TKEY support has been cleaned
process of the catalog zone was already running.
[GL #4136]
+.. code-block:: none
+
--- 9.19.14 released ---
6192. [placeholder]
dighost_shutdown() callback twice and cause problems
if the callback function was not idempotent. [GL #4039]
+.. code-block:: none
+
--- 9.19.13 released ---
6164. [bug] Set the rndc idle read timeout back to 60 seconds,
6147. [performance] Fix the TCP server parent quota use. [GL #3985]
+.. code-block:: none
+
--- 9.19.12 released ---
6146. [performance] Replace the zone table red-black tree and associated
6121. [cleanup] Remove support for TKEY Mode 2 (Diffie-Hellman Exchanged
Keying). [GL #3905]
+.. code-block:: none
+
--- 9.19.11 released ---
6120. [bug] Use two pairs of dns_db_t and dns_dbversion_t in a
6084. [bug] When BIND was built without jemalloc, the allocator flag
ISC_MEM_ZERO could return non-zero memory. [GL #3845]
+.. code-block:: none
+
--- 9.19.10 released ---
6083. [bug] Fix DNSRPS-enabled builds as they were inadvertently
not negotiate "dot" ALPN token could crash BIND
on shutdown. That has been fixed. [GL #3767]
+.. code-block:: none
+
--- 9.19.9 released ---
6067. [security] Fix serve-stale crash when recursive clients soft quota
6044. [bug] There was an "RSASHA236" typo in a log message.
[GL !7206]
+.. code-block:: none
+
--- 9.19.8 released ---
6043. [bug] The key file IO locks objects would never get
Robin Hood hashing. The API requires the keys to
be stored with the stored value. [GL !6790]
+.. code-block:: none
+
--- 9.19.7 released ---
6013. [bug] Fix a crash that could happen when you change
the structure. Remove DNS_NAMEATTR_* macros.
Fix latent attribute handling bug in RBT. [GL !6902]
+.. code-block:: none
+
--- 9.19.6 released ---
5992. [func] Introduce the new isc_mem_*x() APIs that takes extra
5963. [bug] Ensure struct named_server is properly initialized.
[GL #6531]
+.. code-block:: none
+
--- 9.19.5 released ---
5962. [security] Fix memory leak in EdDSA verify processing.
5935. [bug] Fix DiG lookup reference counting bug, which could
be observed in NSSEARCH mode. [GL #3478]
+.. code-block:: none
+
--- 9.19.4 released ---
5934. [func] Improve fetches-per-zone fetch limit logging to log
compression is disabled in the non-improving case.
[GL #3423]
+.. code-block:: none
+
--- 9.19.3 released ---
5919. [func] The "rndc fetchlimit" command lists name servers
5900. [placeholder]
+.. code-block:: none
+
--- 9.19.2 released ---
5899. [func] Don't try to process DNSSEC-related and ZONEMD records
Replace it by isc_task_send() when we are shutting
down. [GL !6275]
+.. code-block:: none
+
--- 9.19.1 released ---
5886. [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by
entries being unlinked from the hash table too
soon. [GL #3256]
+.. code-block:: none
+
--- 9.19.0 released ---
5856. [bug] The "starting maxtime timer" message related to outgoing
channel code to use ISC_R_SHUTTINGDOWN result
code to detect named being shut down. [GL #3079]
+.. code-block:: none
+
--- 9.17.22 released ---
5789. [bug] Allow replacing expired zone signatures with
condition variable and add missing isc_mutex_destroy()
for nmworker lock. [GL #3051]
+.. code-block:: none
+
--- 9.17.21 released ---
5775. [bug] Added a timer in the resolver to kill fetches that
via DNS-over-HTTPS, according to the recommendations
given in RFC 8484. [GL #2854]
+.. code-block:: none
+
--- 9.17.20 released ---
5755. [bug] The statistics channel wasn't correctly handling
5737. [bug] Address Coverity warning in lib/dns/dnssec.c.
[GL #2935]
+.. code-block:: none
+
--- 9.17.19 released ---
5736. [security] The "lame-ttl" option is now forcibly set to 0. This
5712. [func] Remove native PKCS#11 support in favor of engine_pkcs11
from the OpenSC project. [GL #2691]
+.. code-block:: none
+
--- 9.17.18 released ---
5711. [bug] "map" files exceeding 2GB in size failed to load due to
successor key. This enables dnssec-signzone to gradually
replace RRSIGs during a ZSK rollover. [GL #1551]
+.. code-block:: none
+
--- 9.17.17 released ---
5689. [security] An assertion failure occurred when named attempted to
algorithms for the same listener. This has been fixed.
[GL #2756]
+.. code-block:: none
+
--- 9.17.16 released ---
5671. [bug] A race condition could occur where two threads were
5653. [bug] A bug that caused the NSEC3 salt to be changed on every
restart for zones using KASP has been fixed. [GL #2725]
+.. code-block:: none
+
--- 9.17.14 released ---
5652. [bug] A copy-and-paste error in change 5584 caused the
5639. [bug] Check that the first and last SOA record of an AXFR are
consistent. [GL #2528]
+.. code-block:: none
+
--- 9.17.13 released ---
5638. [bug] Improvements related to network manager/task manager
inconsistencies have been eliminated. [GL #389]
[GL #2289]
+.. code-block:: none
+
--- 9.17.12 released ---
5617. [placeholder]
functions declared in the <ctype.h> header with
arguments of type char. [GL #2567]
+.. code-block:: none
+
--- 9.17.11 released ---
5597. [bug] When serve-stale was enabled and starting the recursive
put on the wrong free list. This prevented named from
starting up. [GL #2460]
+.. code-block:: none
+
--- 9.17.10 released ---
5578. [protocol] Make "check-names" accept A records below "_spf",
"stale-answer-ttl" has been changed from 1 second to 30
seconds, following RFC 8767 recommendations. [GL #2248]
+.. code-block:: none
+
--- 9.17.9 released ---
5559. [bug] The --with-maxminddb=PATH form of the build-time option
5547. [placeholder]
+.. code-block:: none
+
--- 9.17.8 released ---
5546. [placeholder]
5534. [bug] The CNAME synthesized from a DNAME was incorrectly
followed when the QTYPE was CNAME or ANY. [GL #2280]
+.. code-block:: none
+
--- 9.17.7 released ---
5533. [func] Add the "stale-refresh-time" option, a time window that
5517. [bug] Do not treat UV_EOF as a TCP4RecvErr or a TCP6RecvErr.
[GL #2208]
+.. code-block:: none
+
--- 9.17.6 released ---
5516. [func] The default EDNS buffer size has been changed from 4096
handles, now using isc_nmhandle_attach() and _detach()
instead of _ref() and _unref(). [GL #2122]
+.. code-block:: none
+
--- 9.17.5 released ---
5502. [func] 'dig +bufsize=0' no longer disables EDNS. [GL #2054]
named that the DS record for a given zone or key has
been updated in the parent zone. [GL #1613]
+.. code-block:: none
+
--- 9.17.4 released ---
5485. [placeholder]
5459. [bug] Fixed bad isc_mem_put() size when an invalid type was
specified in an "update-policy" rule. [GL #1990]
+.. code-block:: none
+
--- 9.17.3 released ---
5458. [bug] Prevent a theoretically possible NULL dereference caused
5439. [bug] The DS RRset returned by dns_keynode_dsset() was used in
a non-thread-safe manner. [GL #1926]
+.. code-block:: none
+
--- 9.17.2 released ---
5438. [bug] Fix a race in TCP accepting code. [GL #1930]
implicitly set to "yes". Now "inline-signing" is only
set to "yes" if the zone is not dynamic. [GL #1709]
+.. code-block:: none
+
--- 9.17.1 released ---
5383. [func] Add a quota attach function with a callback and clean up
5367. [placeholder]
+.. code-block:: none
+
--- 9.17.0 released ---
5366. [bug] Fix a race condition with the keymgr when the same
5348. [bug] dnssec-settime -Psync was not being honoured.
Thanks to Tony Finch. [GL !2893]
+.. code-block:: none
+
--- 9.15.8 released ---
5347. [bug] Fixed a bug that could cause an intermittent crash
5337. [func] 'named -V' now reports maxminddb and protobuf-c
versions. [GL !2686]
+.. code-block:: none
+
--- 9.15.7 released ---
5336. [bug] The TCP high-water statistic could report an
5320. [cleanup] Silence TSAN on header->count. [GL #1344]
+.. code-block:: none
+
--- 9.15.6 released ---
5319. [func] Trust anchors can now be configured using DS
readability and allow correct parsing of YAML
output. [GL #1226]
+.. code-block:: none
+
--- 9.15.5 released ---
5299. [security] A flaw in DNSSEC verification when transferring
5292. [bug] Queue 'rndc nsec3param' requests while signing inline
zone changes. [GL #1205]
+.. code-block:: none
+
--- 9.15.4 released ---
5291. [placeholder]
5278. [func] Add YAML output formats for dig, mdig and delv;
use the "+yaml" option to enable. [GL #1145]
+.. code-block:: none
+
--- 9.15.3 released ---
5277. [bug] Cache DB statistics could underflow when serve-stale
to BIND 9, and the old HMAC-SHA DNS Cookie algorithms
have been removed. [GL #605]
+.. code-block:: none
+
--- 9.15.2 released ---
5263. [cleanup] Use atomics and isc_refcount_t wherever possible.
statistics when hitting recursive clients
soft quota. [GL #1067]
+.. code-block:: none
+
--- 9.15.1 released ---
5248. [func] To clarify the configuration of DNSSEC keys,
5234. [port] arm: just use the compiler's default support for
yield. [GL #981]
+.. code-block:: none
+
--- 9.15.0 released ---
5233. [bug] Negative trust anchors did not work with "forward only;"
5109. [cleanup] Remove support for RSAMD5 algorithm. [GL #628]
+.. code-block:: none
+
--- 9.13.5 released ---
5108. [bug] Named could fail to determine bottom of zone when
5099. [func] Failed mutex and conditional creations are always
fatal. [GL #674]
+.. code-block:: none
+
--- 9.13.4 released ---
5098. [func] Failed memory allocations are now fatal. [GL #674]
5030. [bug] Align CMSG buffers to a 64-bit boundary, fixes crash
on architectures with strict alignment. [GL #521]
+.. code-block:: none
+
--- 9.13.3 released ---
5029. [func] Workarounds for servers that misbehave when queried
4988. [bug] Don't synthesize NXDOMAIN from NSEC for records under
a DNAME.
+.. code-block:: none
+
--- 9.13.2 released ---
4987. [cleanup] dns_rdataslab_tordataset() and its related
4969. [cleanup] Refactor zone logging functions. [GL #269]
+.. code-block:: none
+
--- 9.13.1 released ---
4968. [bug] If glue records are signed, attempt to validate them.
4951. [protocol] Add "HOME.ARPA" to list of built in empty zones as
per RFC 8375. [GL #273]
+.. code-block:: none
+
--- 9.13.0 released ---
4950. [bug] ISC_SOCKEVENTATTR_TRUNC was not be set. [GL #238]
4842. [bug] Conditionally compile opensslecdsa_link.c to avoid
warnings about unused function. [RT #46790]
+.. code-block:: none
+
--- 9.12.0rc1 released ---
4841. [bug] Address -fsanitize=undefined warnings. [RT #46786]
4810. [test] The chain system test failed if the IPv6 interfaces
were not configured. [RT #46508]
+.. code-block:: none
+
--- 9.12.0b2 released ---
4809. [port] Check at configure time whether -latomic is needed
annotated using certain macros. Miscellaneous
Doxygen-related cleanups. [RT #46276]
+.. code-block:: none
+
--- 9.12.0b1 released ---
4772. [test] Expanded unit testing framework for libns, using
4716. [placeholder]
+.. code-block:: none
+
--- 9.12.0a1 released ---
4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax
looking for the NSEC3 records proving nonexistence
of the answer. [RT #43247]
+.. code-block:: none
+
--- 9.11.0 released ---
+.. code-block:: none
+
--- 9.11.0rc3 released ---
4471. [cleanup] Render client/query logging format consistent for
4469. [placeholder]
+.. code-block:: none
+
--- 9.11.0rc2 released ---
4468. [bug] Address ECS option handling issues. [RT #43191]
4461. [bug] win32: not all external data was properly marked
as external data for windows dll. [RT #43161]
+.. code-block:: none
+
--- 9.11.0rc1 released ---
4460. [test] Add system test for dnstap using unix domain sockets.
4427. [bug] The "query" and "response" parameters to the
"dnstap" option had their functions reversed.
+.. code-block:: none
+
--- 9.11.0b3 released ---
4426. [bug] Addressed Coverity warnings. [RT #42908]
4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
was returned. [RT #42733]
+.. code-block:: none
+
--- 9.11.0b2 released ---
4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
+.. code-block:: none
+
--- 9.11.0b1 released ---
4401. [misc] Change LICENSE to MPL 2.0.
4381. [bug] Missing "zone-directory" option in catalog zone
definition caused BIND to crash. [RT #42579]
+.. code-block:: none
+
--- 9.11.0a3 released ---
4380. [experimental] Added a "zone-directory" option to "catalog-zones"
4370. [bug] Address python3 compatibility issues with RNDC module.
[RT #42499] [RT #42506]
+.. code-block:: none
+
--- 9.11.0a2 released ---
4369. [bug] Fix 'make' and 'make install' out-of-tree python
4342. [bug] 'rndc flushtree' could fail to clean the tree if there
wasn't a node at the specified name. [RT #41846]
+.. code-block:: none
+
--- 9.11.0a1 released ---
4341. [bug] Correct the handling of ECS options with
4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
from the redirect zone. [RT #37722]
+.. code-block:: none
+
3999. [func] "mkeys" and "nzf" files are now named after
their corresponding views, unless the view name
contains characters that would be incompatible
3805. [contrib] Added contrib/perftcpdns, a performance testing tool
for DNS over TCP. [RT #35710]
+.. code-block:: none
+
--- 9.10.0rc1 released ---
3804. [bug] Corrected a race condition in dispatch.c in which
3788. [bug] dns_peer_getrequestsit was returning request_nsid by
mistake.
+.. code-block:: none
+
--- 9.10.0b2 released ---
3787. [bug] The code that checks whether "auto-dnssec" is
check_config leading to spurious messages being
logged. [RT #35443]
+.. code-block:: none
+
--- 9.10.0b1 released ---
3755. [func] Add stats counters for known EDNS options + others.
cleaned up and rearranged the contrib
directory, and added a README.
+.. code-block:: none
+
--- 9.10.0a2 released ---
3724. [bug] win32: Fixed a bug that prevented dig and
information for their extensions in the version
file by setting the EXTENSIONS variable.
+.. code-block:: none
+
--- 9.10.0a1 released ---
3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
can be vulnerable to memory exhaustion attack
(CVE-2013-2266). [RT #32688]
+.. code-block:: none
+
3499. [doc] Corrected ARM documentation of built-in zones.
[RT #32694]
times before giving up. mksymtbl was using non
portable perl to covert 64 bit hex strings. [RT #27653]
+.. code-block:: none
+
--- 9.9.0rc2 released ---
3270. [bug] "rndc reload" didn't reuse existing zones correctly
3260. [bug] "rrset-order cyclic" could appear not to rotate
for some query patterns. [RT #27170/27185]
+.. code-block:: none
+
--- 9.9.0rc1 released ---
3259. [bug] named-compilezone: Suppress "dump zone to <file>"
referencing fetch context after it's been freed.
[RT #26720]
+.. code-block:: none
+
--- 9.9.0b2 released ---
3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
3187. [port] win32: support for Visual Studio 2008. [RT #26356]
+.. code-block:: none
+
--- 9.9.0b1 released ---
3186. [bug] Version/db mismatch in rpz code. [RT #26180]
3171. [bug] Exclusively lock the task when adding a zone using
'rndc addzone'. [RT #25600]
+.. code-block:: none
+
--- 9.9.0a3 released ---
3170. [func] RPZ update:
3156. [placeholder]
+.. code-block:: none
+
--- 9.9.0a2 released ---
3155. [bug] Fixed a build failure when using contrib DLZ
3147. [func] Initial inline signing support. [RT #23657]
+.. code-block:: none
+
--- 9.9.0a1 released ---
3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
+.. code-block:: none
+
--- 9.8.0b1 released ---
3008. [func] Response policy zones (RPZ) support. [RT #21726]
2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
+.. code-block:: none
+
--- 9.8.0a1 released ---
2982. [bug] Reference count dst keys. dst_key_attach() can be used
2807. [bug] Fixed a possible ASSERT when reconfiguring zone
keys. [RT #20720]
+.. code-block:: none
+
--- 9.7.0rc1 released ---
2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
2786. [bug] Additional could be promoted to answer. [RT #20663]
+.. code-block:: none
+
--- 9.7.0b3 released ---
2785. [bug] Revoked keys could fail to self-sign [RT #20652]
2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
for a insecure delegation.
+.. code-block:: none
+
--- 9.7.0b2 released ---
2742. [cleanup] Clarify some DNSSEC-related log messages in
2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
+.. code-block:: none
+
--- 9.7.0b1 released ---
2715. [bug] Require OpenSSL support to be explicitly disabled.
2675. [bug] dnssec-signzone could crash if the key directory
did not exist. [RT #20232]
+.. code-block:: none
+
--- 9.7.0a3 released ---
2674. [bug] "dnssec-lookaside auto;" crashed if named was built
2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
which default to 64 bits. [RT #19927]
+.. code-block:: none
+
--- 9.7.0a2 released ---
2644. [bug] Change #2628 caused a regression on some systems;
2613. [placeholder]
+.. code-block:: none
+
--- 9.7.0a1 released ---
2612. [func] Add default values for the arguments to
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
[RT #18837]
+.. code-block:: none
+
--- 9.6.0rc1 released ---
2498. [bug] Removed a bogus function argument used with
2482. [port] libxml2: support versions 2.7.* in addition
to 2.6.*. [RT #18806]
+.. code-block:: none
+
--- 9.6.0b1 released ---
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
2461. [port] sunos: Change #2363 was not complete. [RT #17513]
+.. code-block:: none
+
--- 9.6.0a1 released ---
2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
list.
+.. code-block:: none
+
--- 9.5.0b1 released ---
2267. [bug] Radix tree node_num value could be set incorrectly,
2259. [placeholder]
+.. code-block:: none
+
--- 9.5.0a7 released ---
2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
2207. [port] Some implementations of getaddrinfo() fail to set
ai_canonname correctly. [RT #17061]
+.. code-block:: none
+
--- 9.5.0a6 released ---
2206. [security] "allow-query-cache" and "allow-recursion" now
2194. [bug] Close journal before calling 'done' in xfrin.c.
+.. code-block:: none
+
--- 9.5.0a5 released ---
2193. [port] win32: BINDInstall.exe is now linked statically.
2173. [port] win32: When compiling with MSVS 2005 SP1 we also
need to ship Microsoft.VC80.MFCLOC.
+.. code-block:: none
+
--- 9.5.0a4 released ---
2172. [bug] query_addsoa() was being called with a non zone db.
2167. [bug] When re-using a automatic zone named failed to
attach it to the new view. [RT #16786]
+.. code-block:: none
+
--- 9.5.0a3 released ---
2166. [bug] When running in batch mode, dig could misinterpret
2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
from getifaddrs(). [RT #16708]
+.. code-block:: none
+
--- 9.5.0a2 released ---
2159. [bug] Array bounds overrun in acache processing. [RT #16710]
2124. [security] It was possible to dereference a freed fetch
context. [RT #16584]
+.. code-block:: none
+
--- 9.5.0a1 released ---
2123. [func] Use Doxygen to generate internal documentation.
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
[RT #12864]
+.. code-block:: none
+
1749. [bug] 'check-names response ignore;' failed to ignore.
[RT #12866]
1500. [bug] host failed to lookup MX records. Also look up
AAAA records.
+.. code-block:: none
+
1499. [bug] isc_random need to be seeded better if arc4random()
is not used.
1250. [func] Nsupdate will report the address the update was
sent to.
+.. code-block:: none
+
1249. [bug] Missing masters clause was not handled gracefully.
[RT #2703]
change #953. win32 .make file for rndc-confgen
updated to add include path for os.h header.
+.. code-block:: none
+
--- 9.2.0rc1 released ---
955. [bug] When using views, the zone's class was not being
949. [bug] host was unable to print records larger than 512
bytes. [RT #1557]
+.. code-block:: none
+
--- 9.2.0b2 released ---
948. [port] Integrated support for building on Windows NT /
940. [bug] Double zone locking failure on error path. [RT #1510]
+.. code-block:: none
+
--- 9.2.0b1 released ---
939. [port] Add the --disable-linux-caps option to configure for
933. [bug] configure failed doing libbind on platforms not
supported by BIND 8. [RT #1496]
+.. code-block:: none
+
--- 9.2.0a3 released ---
932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
bin/tests/system/ifconfig.sh now recognize the new
string.
+.. code-block:: none
+
--- 9.2.0a2 released ---
899. [bug] lib/dns/soa.c failed to compile on many platforms
851. [cleanup] The obsolete support-ixfr option was not properly
ignored.
+.. code-block:: none
+
--- 9.2.0a1 released ---
850. [bug] dns_rbt_findnode() would not find nodes that were
642. [bug] Break the exit_check() race in the zone module.
[RT #598]
+.. code-block:: none
+
--- 9.1.0b2 released ---
641. [bug] $GENERATE caused a uninitialized link to be used.
number of days, not seconds. This matches the
documentation. [RT #529]
+.. code-block:: none
+
--- 9.1.0b1 released ---
591. [bug] Work around non-reentrancy in openssl by disabling
400. [bug] SIG(0) signing and verifying was done incorrectly.
[RT #249]
+.. code-block:: none
+
399. [bug] When reloading the server with a config file
containing a syntax error, it could catch an
assertion failure trying to perform zone
254. [bug] Suppress "query denied" messages on additional data
lookups.
+.. code-block:: none
+
--- 9.0.0b4 released ---
253. [func] resolv.conf parser now recognizes ';' and '#' as
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
+.. code-block:: none
+
--- 9.0.0b3 released ---
200. [bug] Failures in sending query responses to clients
prevented the isc directory from being created if it
didn't exist.
+.. code-block:: none
+
--- 9.0.0b2 released ---
+