9.6-ESV-R8rc1

diff --git a/CHANGES b/CHANGES
index 703ebb910236393d02e4d3627ee451c0dd252b9d..beee63a2fe2d2bc80f87a30b34e2b471748348c4 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,9 +1,11 @@
+       --- 9.6-ESV-R8rc1 released ---
+
 3369.  [bug]           nsupdate terminated unexpectedly in interactive mode
                        if built with readline support. [RT #29550]
 
 3368.  [bug]           <dns/iptable.h> and <dns/zone.h> were not C++ safe.
 
-3366.  [bug]           Fixed Read-After-Write dependency violation for IA64 
+3366.  [bug]           Fixed Read-After-Write dependency violation for IA64
                        atomic operations. [RT #25181]
 
 3365.  [bug]           Removed spurious newlines from log messages in
@@ -16,7 +18,7 @@
 3360.  [bug]           'host -w' could die.  [RT #18723]
 
 3359.  [bug]           An improperly-formed TSIG secret could cause a
-                        memory leak. [RT #30607]
+                       memory leak. [RT #30607]
 
 3358.  [bug]           Fix declaration of fatal in bin/named/server.c
                        and bin/nsupdate/main.c. [RT #30522]
@@ -34,16 +36,16 @@
                        ISC_MEM_DEBUGCTX memory debugging flag is set.
                        [RT #30240]
 
-3348.  [bug]           Prevent RRSIG data from being cached if a negative 
-                       record matching the covering type exists at a higher 
-                       trust level. Such data already can't be retrieved from 
-                       the cache since change 3218 -- this prevents it 
+3348.  [bug]           Prevent RRSIG data from being cached if a negative
+                       record matching the covering type exists at a higher
+                       trust level. Such data already can't be retrieved from
+                       the cache since change 3218 -- this prevents it
                        being inserted into the cache as well. [RT #26809]
 
 3346.  [security]      Bad-cache data could be used before it was
                        initialized, causing an assert. [RT #30025]
 
-3343.   [bug]          Relax isc_random_jitter() REQUIRE tests. [RT #29821]
+3343.  [bug]           Relax isc_random_jitter() REQUIRE tests. [RT #29821]
 
 3342.  [bug]           Change #3314 broke saving of stub zones to disk
                        resulting in excessive cpu usage in some cases.
@@ -66,8 +68,8 @@
                        they fail to validate, we try again in lower case.
                        [RT #27451]
 
-3328.   [bug]           Fixed inconsistent data checking in dst_parse.c.
-                        [RT #29401]
+3328.  [bug]           Fixed inconsistent data checking in dst_parse.c.
+                       [RT #29401]
 
        --- 9.6-ESV-R7 released ---
 

diff --git a/EXCLUDED b/EXCLUDED
index 07ae697796ca42823076f3b0f8283866682987db..57ad897c3675148348ec68bc116d5763ff406b15 100644 (file)
--- a/EXCLUDED
+++ b/EXCLUDED
@@ -1,3 +1,55 @@
+3370.  [bug]           Address use after free while shutting down. [RT #30241]
+
+3368.  [bug]           <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
+                       were not C++ safe.
+
+3367.  [bug]           dns_dnsseckey_create() result was not being checked.
+                       [RT #30685]
+
+3363.   [bug]           Need to allow "forward" and "fowarders" options
+                        in static-stub zones; this had been overlooked.
+                        [RT #30482]
+ 
+3361.   [bug]           "rndc signing -nsec3param" didn't work correctly
+                        when salt was set to '-' (no salt). [RT #30099]
+
+3355.   [port]          Use more portable awk in verify system test.
+
+3353.   [bug]           Use a single task for task exclusive operations.
+                        [RT #29872]
+
+3351.   [bug]           isc_mem_put and isc_mem_putanddetach didn't report
+                        caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
+                        memory debugging flags are set. [RT #30243]
+
+3349.   [bug]           Change #3345 was incomplete. [RT #30233]
+
+3347.   [bug]           dnssec-settime: Issue a warning when writing a new
+                        private key file would cause a change in the
+                        permissions of the existing file. [RT #27724]
+
+3345.   [bug]           Addressed race condition when removing the last item
+                        or inserting the first item in an ISC_QUEUE.
+                        [RT #29539]
+
+3338.   [bug]           Address race condition in units tests: asyncload_zone
+                        and asyncload_zt. [RT #26100]
+
+3334.   [bug]           Hold a zone table reference while performing a
+                        asyncronous load of a zone. [RT #28326]
+
+3324.   [test]          Add better tests for ADB stats [RT #27057]
+
+3317.   [protocol]      Add ECDSA support (RFC 6605). [RT #21918]
+
+3316.   [tuning]        Improved locking performance when recursing.
+                        [RT #28836]
+
+3315.   [tuning]        Use multiple dispatch objects for sending upstream
+                        queries; this can improve performance on busy
+                        multiprocessor systems by reducing lock contention.
+                        [RT #28605]
+
 3312.  [bug]           named-checkconf didn't detect a bad dns64 clients acl.
                        [RT #27631]
 
@@ -156,6 +208,9 @@
                        sample external DLZ module in contrib/dlz/example.
                        [RT #26215]
 
+3174.   [bug]           Always compute to revoked key tag from scratch.
+                        [RT #26186]
+
 3172.  [port]          darwin 10.* and freebsd [89] are now built threaded by
                        default.
 
@@ -239,6 +294,9 @@
                        instead of in the options statement could trigger
                        an assertion failure in named-checkconf. [RT #24382]
 
+3101.   [bug]           Zones using automatic key maintenance could fail
+                        to check the key repository for updates. [RT #23744]
+
 3100.  [security]      Certain response policy zone configurations could
                        trigger an INSIST when receiving a query of type
                        RRSIG. [RT #24280]
@@ -496,6 +554,12 @@
 2832.  [bug]           Modify "struct stat" in lib/export/samples/nsprobe.c
                        to avoid redefinition in some OSs [RT 20831]
 
+2829.   [bug]           Fixed potential node inconsistency in rbtdb.c.
+                        [RT #20808]
+
+2826.   [bug]           NSEC3->NSEC transitions could fail due to a lock not
+                        being released.  [RT #20740]
+
 2824.  [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
 
@@ -508,6 +572,9 @@
 2816.  [bug]           previous_closest_nsec() could fail to return
                        data for NSEC3 nodes [RT #29730]
 
+2813.   [bug]           Better handling of unreadable DNSSEC key files.
+                        [RT #20710]
+
 2812.  [bug]           Make sure updates can't result in a zone with
                        NSEC-only keys and NSEC3 records. [RT #20748]
 

diff --git a/lib/bind9/api b/lib/bind9/api
index c3870c538f60660143cd967cb48cd7b6ef700f23..8361ce630bd3b72f18a8f21d4c31fa17c12b741d 100644 (file)
--- a/lib/bind9/api
+++ b/lib/bind9/api
@@ -4,5 +4,5 @@
 # 9.8: 80-89
 # 9.9: 90-109
 LIBINTERFACE = 50
-LIBREVISION = 8
+LIBREVISION = 9
 LIBAGE = 0

diff --git a/lib/dns/api b/lib/dns/api
index 47be5b08d1f80d1b10a2802ffc0c1ddf8592de90..0e0a371458f27a464ab051b5c1cf8e637f95743b 100644 (file)
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -4,5 +4,5 @@
 # 9.8: 80-89
 # 9.9: 90-109
 LIBINTERFACE = 111
-LIBREVISION = 0
+LIBREVISION = 1
 LIBAGE = 1

diff --git a/lib/isc/api b/lib/isc/api
index 1ecd83d56472b36a39462958c451ff7bb7651875..7423d66f128bf46455029fdd98b63385fef5874e 100644 (file)
--- a/lib/isc/api
+++ b/lib/isc/api
@@ -4,5 +4,5 @@
 # 9.8: 80-89
 # 9.9: 90-109
 LIBINTERFACE = 57
-LIBREVISION = 3
+LIBREVISION = 4
 LIBAGE = 0

diff --git a/version b/version
index 6ab22adff33928a50241c6bcca1248ff24eae973..3cd8dcae5a9367efd81286130271ad2b2d718874 100644 (file)
--- a/version
+++ b/version
@@ -7,4 +7,4 @@ MAJORVER=9
 MINORVER=6
 PATCHVER=
 RELEASETYPE=-ESV
-RELEASEVER=-R8b1
+RELEASEVER=-R8rc1