From 32a8e2bcd83cebda0e3b3aec54402c247946c8ed Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Wed, 7 Aug 2024 12:39:23 +0200 Subject: [PATCH] Split up changelog into per-release code blocks LaTeX in CI and on ReadTheDocs fails to render a PDF version of ARM if the Changelog section is included. The running theory is that the verbatim section of more than twenty thousand lines is too big to meet LaTeX self-imposed constraints, and it fails with: ! TeX capacity exceeded, sorry [main memory size=5000000]. Or it just hangs if extra_mem_bot=30000000 is set in /etc/texmf/texmf.d/01main_memory_bump.cnf: ! Dimension too large. \fb@put@frame ...p \ifdim \dimen@ >\ht \@tempboxa \fb@putboxa #1\fb@afterfra... l.56913 \end{sphinxVerbatim} Make each BIND 9 release a separate code block to work around the issue. Further split up the sections for some exceptionally large releases, for the same reason. (cherry picked from commit bc802359b05deb7a4b14eeb7eaca9e26bdb6b97f) --- doc/arm/changelog.rst | 253 +++++++++++++++++++++++++++++++++++++++++- 1 file changed, 252 insertions(+), 1 deletion(-) diff --git a/doc/arm/changelog.rst b/doc/arm/changelog.rst index 813dd3cb8c..0696b9c9ba 100644 --- a/doc/arm/changelog.rst +++ b/doc/arm/changelog.rst @@ -21,7 +21,7 @@ Changelog Changes prior to 9.20.0 ----------------------- -:: +.. code-block:: none --- 9.20.0 released --- @@ -119,6 +119,8 @@ Changes prior to 9.20.0 6382. [bug] Fix RPZ response's SOA record TTL, which was incorrectly set to 1 if 'add-soa' is used. [GL #3323] +.. code-block:: none + --- 9.19.24 released --- 6381. [bug] dns_qp_lookup() could position the iterator at the @@ -161,6 +163,8 @@ Changes prior to 9.20.0 6370. [bug] Wrong source address used for IPv6 notify messages. [GL #4669] +.. code-block:: none + --- 9.19.23 released --- 6369. [func] The 'fixed' value for the 'rrset-order' option has @@ -198,6 +202,8 @@ Changes prior to 9.20.0 6359. [bug] Fix bug in Depends (keymgr_dep) function. [GL #4552] +.. code-block:: none + --- 9.19.22 released --- 6358. [bug] Fix validate_dnskey_dsset when KSK is not signing, @@ -355,6 +361,8 @@ Changes prior to 9.20.0 'host -C' commands when one of the name servers returns SERVFAIL. [GL #4508] +.. code-block:: none + --- 9.19.21 released --- 6323. [placeholder] @@ -372,6 +380,8 @@ Changes prior to 9.20.0 6320. [placeholder] +.. code-block:: none + --- 9.19.20 released --- 6319. [func] Limit isc_async_run() overhead for RBTDB tree pruning. @@ -457,6 +467,8 @@ Changes prior to 9.20.0 6298. [bug] Fix dns_qp_lookup bugs related to the iterator. [GL !8558] +.. code-block:: none + --- 9.19.19 released --- 6297. [bug] Improve LRU cleaning behaviour. [GL #4448] @@ -521,6 +533,8 @@ Changes prior to 9.20.0 6281. [bug] Fix a data race in dns_tsigkeyring_dump(). [GL #4328] +.. code-block:: none + --- 9.19.18 released --- 6280. [bug] Fix missing newlines in the output of "rndc nta -dump". @@ -655,6 +669,8 @@ Changes prior to 9.20.0 6247. [func] Implement incremental hashing in both isc_siphash and isc_hash units. [GL #4306] +.. code-block:: none + --- 9.19.17 released --- 6246. [placeholder] @@ -740,6 +756,8 @@ Changes prior to 9.20.0 6222. [func] Fixes to provider/engine based ECDSA key handling. [GL !8152] +.. code-block:: none + --- 9.19.16 released --- 6221. [cleanup] Refactor dns_rdataset internals, move rdatasetheader @@ -789,6 +807,8 @@ Changes prior to 9.20.0 6208. [func] Return BADCOOKIE for out-of-date or otherwise bad, well formed DNS SERVER COOKIES. [GL #4194] +.. code-block:: none + --- 9.19.15 released --- 6207. [cleanup] The code implementing TSIG/TKEY support has been cleaned @@ -847,6 +867,8 @@ Changes prior to 9.20.0 process of the catalog zone was already running. [GL #4136] +.. code-block:: none + --- 9.19.14 released --- 6192. [placeholder] @@ -948,6 +970,8 @@ Changes prior to 9.20.0 dighost_shutdown() callback twice and cause problems if the callback function was not idempotent. [GL #4039] +.. code-block:: none + --- 9.19.13 released --- 6164. [bug] Set the rndc idle read timeout back to 60 seconds, @@ -1027,6 +1051,8 @@ Changes prior to 9.20.0 6147. [performance] Fix the TCP server parent quota use. [GL #3985] +.. code-block:: none + --- 9.19.12 released --- 6146. [performance] Replace the zone table red-black tree and associated @@ -1132,6 +1158,8 @@ Changes prior to 9.20.0 6121. [cleanup] Remove support for TKEY Mode 2 (Diffie-Hellman Exchanged Keying). [GL #3905] +.. code-block:: none + --- 9.19.11 released --- 6120. [bug] Use two pairs of dns_db_t and dns_dbversion_t in a @@ -1266,6 +1294,8 @@ Changes prior to 9.20.0 6084. [bug] When BIND was built without jemalloc, the allocator flag ISC_MEM_ZERO could return non-zero memory. [GL #3845] +.. code-block:: none + --- 9.19.10 released --- 6083. [bug] Fix DNSRPS-enabled builds as they were inadvertently @@ -1325,6 +1355,8 @@ Changes prior to 9.20.0 not negotiate "dot" ALPN token could crash BIND on shutdown. That has been fixed. [GL #3767] +.. code-block:: none + --- 9.19.9 released --- 6067. [security] Fix serve-stale crash when recursive clients soft quota @@ -1426,6 +1458,8 @@ Changes prior to 9.20.0 6044. [bug] There was an "RSASHA236" typo in a log message. [GL !7206] +.. code-block:: none + --- 9.19.8 released --- 6043. [bug] The key file IO locks objects would never get @@ -1538,6 +1572,8 @@ Changes prior to 9.20.0 Robin Hood hashing. The API requires the keys to be stored with the stored value. [GL !6790] +.. code-block:: none + --- 9.19.7 released --- 6013. [bug] Fix a crash that could happen when you change @@ -1624,6 +1660,8 @@ Changes prior to 9.20.0 the structure. Remove DNS_NAMEATTR_* macros. Fix latent attribute handling bug in RBT. [GL !6902] +.. code-block:: none + --- 9.19.6 released --- 5992. [func] Introduce the new isc_mem_*x() APIs that takes extra @@ -1739,6 +1777,8 @@ Changes prior to 9.20.0 5963. [bug] Ensure struct named_server is properly initialized. [GL #6531] +.. code-block:: none + --- 9.19.5 released --- 5962. [security] Fix memory leak in EdDSA verify processing. @@ -1846,6 +1886,8 @@ Changes prior to 9.20.0 5935. [bug] Fix DiG lookup reference counting bug, which could be observed in NSSEARCH mode. [GL #3478] +.. code-block:: none + --- 9.19.4 released --- 5934. [func] Improve fetches-per-zone fetch limit logging to log @@ -1919,6 +1961,8 @@ Changes prior to 9.20.0 compression is disabled in the non-improving case. [GL #3423] +.. code-block:: none + --- 9.19.3 released --- 5919. [func] The "rndc fetchlimit" command lists name servers @@ -1994,6 +2038,8 @@ Changes prior to 9.20.0 5900. [placeholder] +.. code-block:: none + --- 9.19.2 released --- 5899. [func] Don't try to process DNSSEC-related and ZONEMD records @@ -2049,6 +2095,8 @@ Changes prior to 9.20.0 Replace it by isc_task_send() when we are shutting down. [GL !6275] +.. code-block:: none + --- 9.19.1 released --- 5886. [security] Fix a crash in DNS-over-HTTPS (DoH) code caused by @@ -2164,6 +2212,8 @@ Changes prior to 9.20.0 entries being unlinked from the hash table too soon. [GL #3256] +.. code-block:: none + --- 9.19.0 released --- 5856. [bug] The "starting maxtime timer" message related to outgoing @@ -2437,6 +2487,8 @@ Changes prior to 9.20.0 channel code to use ISC_R_SHUTTINGDOWN result code to detect named being shut down. [GL #3079] +.. code-block:: none + --- 9.17.22 released --- 5789. [bug] Allow replacing expired zone signatures with @@ -2499,6 +2551,8 @@ Changes prior to 9.20.0 condition variable and add missing isc_mutex_destroy() for nmworker lock. [GL #3051] +.. code-block:: none + --- 9.17.21 released --- 5775. [bug] Added a timer in the resolver to kill fetches that @@ -2581,6 +2635,8 @@ Changes prior to 9.20.0 via DNS-over-HTTPS, according to the recommendations given in RFC 8484. [GL #2854] +.. code-block:: none + --- 9.17.20 released --- 5755. [bug] The statistics channel wasn't correctly handling @@ -2663,6 +2719,8 @@ Changes prior to 9.20.0 5737. [bug] Address Coverity warning in lib/dns/dnssec.c. [GL #2935] +.. code-block:: none + --- 9.17.19 released --- 5736. [security] The "lame-ttl" option is now forcibly set to 0. This @@ -2772,6 +2830,8 @@ Changes prior to 9.20.0 5712. [func] Remove native PKCS#11 support in favor of engine_pkcs11 from the OpenSC project. [GL #2691] +.. code-block:: none + --- 9.17.18 released --- 5711. [bug] "map" files exceeding 2GB in size failed to load due to @@ -2879,6 +2939,8 @@ Changes prior to 9.20.0 successor key. This enables dnssec-signzone to gradually replace RRSIGs during a ZSK rollover. [GL #1551] +.. code-block:: none + --- 9.17.17 released --- 5689. [security] An assertion failure occurred when named attempted to @@ -2971,6 +3033,8 @@ Changes prior to 9.20.0 algorithms for the same listener. This has been fixed. [GL #2756] +.. code-block:: none + --- 9.17.16 released --- 5671. [bug] A race condition could occur where two threads were @@ -3058,6 +3122,8 @@ Changes prior to 9.20.0 5653. [bug] A bug that caused the NSEC3 salt to be changed on every restart for zones using KASP has been fixed. [GL #2725] +.. code-block:: none + --- 9.17.14 released --- 5652. [bug] A copy-and-paste error in change 5584 caused the @@ -3115,6 +3181,8 @@ Changes prior to 9.20.0 5639. [bug] Check that the first and last SOA record of an AXFR are consistent. [GL #2528] +.. code-block:: none + --- 9.17.13 released --- 5638. [bug] Improvements related to network manager/task manager @@ -3217,6 +3285,8 @@ Changes prior to 9.20.0 inconsistencies have been eliminated. [GL #389] [GL #2289] +.. code-block:: none + --- 9.17.12 released --- 5617. [placeholder] @@ -3309,6 +3379,8 @@ Changes prior to 9.20.0 functions declared in the header with arguments of type char. [GL #2567] +.. code-block:: none + --- 9.17.11 released --- 5597. [bug] When serve-stale was enabled and starting the recursive @@ -3413,6 +3485,8 @@ Changes prior to 9.20.0 put on the wrong free list. This prevented named from starting up. [GL #2460] +.. code-block:: none + --- 9.17.10 released --- 5578. [protocol] Make "check-names" accept A records below "_spf", @@ -3498,6 +3572,8 @@ Changes prior to 9.20.0 "stale-answer-ttl" has been changed from 1 second to 30 seconds, following RFC 8767 recommendations. [GL #2248] +.. code-block:: none + --- 9.17.9 released --- 5559. [bug] The --with-maxminddb=PATH form of the build-time option @@ -3541,6 +3617,8 @@ Changes prior to 9.20.0 5547. [placeholder] +.. code-block:: none + --- 9.17.8 released --- 5546. [placeholder] @@ -3589,6 +3667,8 @@ Changes prior to 9.20.0 5534. [bug] The CNAME synthesized from a DNAME was incorrectly followed when the QTYPE was CNAME or ANY. [GL #2280] +.. code-block:: none + --- 9.17.7 released --- 5533. [func] Add the "stale-refresh-time" option, a time window that @@ -3650,6 +3730,8 @@ Changes prior to 9.20.0 5517. [bug] Do not treat UV_EOF as a TCP4RecvErr or a TCP6RecvErr. [GL #2208] +.. code-block:: none + --- 9.17.6 released --- 5516. [func] The default EDNS buffer size has been changed from 4096 @@ -3702,6 +3784,8 @@ Changes prior to 9.20.0 handles, now using isc_nmhandle_attach() and _detach() instead of _ref() and _unref(). [GL #2122] +.. code-block:: none + --- 9.17.5 released --- 5502. [func] 'dig +bufsize=0' no longer disables EDNS. [GL #2054] @@ -3760,6 +3844,8 @@ Changes prior to 9.20.0 named that the DS record for a given zone or key has been updated in the parent zone. [GL #1613] +.. code-block:: none + --- 9.17.4 released --- 5485. [placeholder] @@ -3881,6 +3967,8 @@ Changes prior to 9.20.0 5459. [bug] Fixed bad isc_mem_put() size when an invalid type was specified in an "update-policy" rule. [GL #1990] +.. code-block:: none + --- 9.17.3 released --- 5458. [bug] Prevent a theoretically possible NULL dereference caused @@ -3946,6 +4034,8 @@ Changes prior to 9.20.0 5439. [bug] The DS RRset returned by dns_keynode_dsset() was used in a non-thread-safe manner. [GL #1926] +.. code-block:: none + --- 9.17.2 released --- 5438. [bug] Fix a race in TCP accepting code. [GL #1930] @@ -4146,6 +4236,8 @@ Changes prior to 9.20.0 implicitly set to "yes". Now "inline-signing" is only set to "yes" if the zone is not dynamic. [GL #1709] +.. code-block:: none + --- 9.17.1 released --- 5383. [func] Add a quota attach function with a callback and clean up @@ -4211,6 +4303,8 @@ Changes prior to 9.20.0 5367. [placeholder] +.. code-block:: none + --- 9.17.0 released --- 5366. [bug] Fix a race condition with the keymgr when the same @@ -4304,6 +4398,8 @@ Changes prior to 9.20.0 5348. [bug] dnssec-settime -Psync was not being honoured. Thanks to Tony Finch. [GL !2893] +.. code-block:: none + --- 9.15.8 released --- 5347. [bug] Fixed a bug that could cause an intermittent crash @@ -4343,6 +4439,8 @@ Changes prior to 9.20.0 5337. [func] 'named -V' now reports maxminddb and protobuf-c versions. [GL !2686] +.. code-block:: none + --- 9.15.7 released --- 5336. [bug] The TCP high-water statistic could report an @@ -4398,6 +4496,8 @@ Changes prior to 9.20.0 5320. [cleanup] Silence TSAN on header->count. [GL #1344] +.. code-block:: none + --- 9.15.6 released --- 5319. [func] Trust anchors can now be configured using DS @@ -4488,6 +4588,8 @@ Changes prior to 9.20.0 readability and allow correct parsing of YAML output. [GL #1226] +.. code-block:: none + --- 9.15.5 released --- 5299. [security] A flaw in DNSSEC verification when transferring @@ -4518,6 +4620,8 @@ Changes prior to 9.20.0 5292. [bug] Queue 'rndc nsec3param' requests while signing inline zone changes. [GL #1205] +.. code-block:: none + --- 9.15.4 released --- 5291. [placeholder] @@ -4563,6 +4667,8 @@ Changes prior to 9.20.0 5278. [func] Add YAML output formats for dig, mdig and delv; use the "+yaml" option to enable. [GL #1145] +.. code-block:: none + --- 9.15.3 released --- 5277. [bug] Cache DB statistics could underflow when serve-stale @@ -4618,6 +4724,8 @@ Changes prior to 9.20.0 to BIND 9, and the old HMAC-SHA DNS Cookie algorithms have been removed. [GL #605] +.. code-block:: none + --- 9.15.2 released --- 5263. [cleanup] Use atomics and isc_refcount_t wherever possible. @@ -4675,6 +4783,8 @@ Changes prior to 9.20.0 statistics when hitting recursive clients soft quota. [GL #1067] +.. code-block:: none + --- 9.15.1 released --- 5248. [func] To clarify the configuration of DNSSEC keys, @@ -4741,6 +4851,8 @@ Changes prior to 9.20.0 5234. [port] arm: just use the compiler's default support for yield. [GL #981] +.. code-block:: none + --- 9.15.0 released --- 5233. [bug] Negative trust anchors did not work with "forward only;" @@ -5141,6 +5253,8 @@ Changes prior to 9.20.0 5109. [cleanup] Remove support for RSAMD5 algorithm. [GL #628] +.. code-block:: none + --- 9.13.5 released --- 5108. [bug] Named could fail to determine bottom of zone when @@ -5189,6 +5303,8 @@ Changes prior to 9.20.0 5099. [func] Failed mutex and conditional creations are always fatal. [GL #674] +.. code-block:: none + --- 9.13.4 released --- 5098. [func] Failed memory allocations are now fatal. [GL #674] @@ -5427,6 +5543,8 @@ Changes prior to 9.20.0 5030. [bug] Align CMSG buffers to a 64-bit boundary, fixes crash on architectures with strict alignment. [GL #521] +.. code-block:: none + --- 9.13.3 released --- 5029. [func] Workarounds for servers that misbehave when queried @@ -5567,6 +5685,8 @@ Changes prior to 9.20.0 4988. [bug] Don't synthesize NXDOMAIN from NSEC for records under a DNAME. +.. code-block:: none + --- 9.13.2 released --- 4987. [cleanup] dns_rdataslab_tordataset() and its related @@ -5635,6 +5755,8 @@ Changes prior to 9.20.0 4969. [cleanup] Refactor zone logging functions. [GL #269] +.. code-block:: none + --- 9.13.1 released --- 4968. [bug] If glue records are signed, attempt to validate them. @@ -5712,6 +5834,8 @@ Changes prior to 9.20.0 4951. [protocol] Add "HOME.ARPA" to list of built in empty zones as per RFC 8375. [GL #273] +.. code-block:: none + --- 9.13.0 released --- 4950. [bug] ISC_SOCKEVENTATTR_TRUNC was not be set. [GL #238] @@ -6087,6 +6211,8 @@ Changes prior to 9.20.0 4842. [bug] Conditionally compile opensslecdsa_link.c to avoid warnings about unused function. [RT #46790] +.. code-block:: none + --- 9.12.0rc1 released --- 4841. [bug] Address -fsanitize=undefined warnings. [RT #46786] @@ -6196,6 +6322,8 @@ Changes prior to 9.20.0 4810. [test] The chain system test failed if the IPv6 interfaces were not configured. [RT #46508] +.. code-block:: none + --- 9.12.0b2 released --- 4809. [port] Check at configure time whether -latomic is needed @@ -6323,6 +6451,8 @@ Changes prior to 9.20.0 annotated using certain macros. Miscellaneous Doxygen-related cleanups. [RT #46276] +.. code-block:: none + --- 9.12.0b1 released --- 4772. [test] Expanded unit testing framework for libns, using @@ -6558,6 +6688,8 @@ Changes prior to 9.20.0 4716. [placeholder] +.. code-block:: none + --- 9.12.0a1 released --- 4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax @@ -7385,8 +7517,12 @@ Changes prior to 9.20.0 looking for the NSEC3 records proving nonexistence of the answer. [RT #43247] +.. code-block:: none + --- 9.11.0 released --- +.. code-block:: none + --- 9.11.0rc3 released --- 4471. [cleanup] Render client/query logging format consistent for @@ -7399,6 +7535,8 @@ Changes prior to 9.20.0 4469. [placeholder] +.. code-block:: none + --- 9.11.0rc2 released --- 4468. [bug] Address ECS option handling issues. [RT #43191] @@ -7423,6 +7561,8 @@ Changes prior to 9.20.0 4461. [bug] win32: not all external data was properly marked as external data for windows dll. [RT #43161] +.. code-block:: none + --- 9.11.0rc1 released --- 4460. [test] Add system test for dnstap using unix domain sockets. @@ -7538,6 +7678,8 @@ Changes prior to 9.20.0 4427. [bug] The "query" and "response" parameters to the "dnstap" option had their functions reversed. +.. code-block:: none + --- 9.11.0b3 released --- 4426. [bug] Addressed Coverity warnings. [RT #42908] @@ -7595,6 +7737,8 @@ Changes prior to 9.20.0 4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED was returned. [RT #42733] +.. code-block:: none + --- 9.11.0b2 released --- 4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was @@ -7636,6 +7780,8 @@ Changes prior to 9.20.0 4402. [bug] protoc-c is now a hard requirement for --enable-dnstap. +.. code-block:: none + --- 9.11.0b1 released --- 4401. [misc] Change LICENSE to MPL 2.0. @@ -7698,6 +7844,8 @@ Changes prior to 9.20.0 4381. [bug] Missing "zone-directory" option in catalog zone definition caused BIND to crash. [RT #42579] +.. code-block:: none + --- 9.11.0a3 released --- 4380. [experimental] Added a "zone-directory" option to "catalog-zones" @@ -7741,6 +7889,8 @@ Changes prior to 9.20.0 4370. [bug] Address python3 compatibility issues with RNDC module. [RT #42499] [RT #42506] +.. code-block:: none + --- 9.11.0a2 released --- 4369. [bug] Fix 'make' and 'make install' out-of-tree python @@ -7840,6 +7990,8 @@ Changes prior to 9.20.0 4342. [bug] 'rndc flushtree' could fail to clean the tree if there wasn't a node at the specified name. [RT #41846] +.. code-block:: none + --- 9.11.0a1 released --- 4341. [bug] Correct the handling of ECS options with @@ -9023,6 +9175,8 @@ Changes prior to 9.20.0 4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET from the redirect zone. [RT #37722] +.. code-block:: none + 3999. [func] "mkeys" and "nzf" files are now named after their corresponding views, unless the view name contains characters that would be incompatible @@ -9695,6 +9849,8 @@ Changes prior to 9.20.0 3805. [contrib] Added contrib/perftcpdns, a performance testing tool for DNS over TCP. [RT #35710] +.. code-block:: none + --- 9.10.0rc1 released --- 3804. [bug] Corrected a race condition in dispatch.c in which @@ -9746,6 +9902,8 @@ Changes prior to 9.20.0 3788. [bug] dns_peer_getrequestsit was returning request_nsid by mistake. +.. code-block:: none + --- 9.10.0b2 released --- 3787. [bug] The code that checks whether "auto-dnssec" is @@ -9860,6 +10018,8 @@ Changes prior to 9.20.0 check_config leading to spurious messages being logged. [RT #35443] +.. code-block:: none + --- 9.10.0b1 released --- 3755. [func] Add stats counters for known EDNS options + others. @@ -10007,6 +10167,8 @@ Changes prior to 9.20.0 cleaned up and rearranged the contrib directory, and added a README. +.. code-block:: none + --- 9.10.0a2 released --- 3724. [bug] win32: Fixed a bug that prevented dig and @@ -10210,6 +10372,8 @@ Changes prior to 9.20.0 information for their extensions in the version file by setting the EXTENSIONS variable. +.. code-block:: none + --- 9.10.0a1 released --- 3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026] @@ -10762,6 +10926,8 @@ Changes prior to 9.20.0 can be vulnerable to memory exhaustion attack (CVE-2013-2266). [RT #32688] +.. code-block:: none + 3499. [doc] Corrected ARM documentation of built-in zones. [RT #32694] @@ -11494,6 +11660,8 @@ Changes prior to 9.20.0 times before giving up. mksymtbl was using non portable perl to covert 64 bit hex strings. [RT #27653] +.. code-block:: none + --- 9.9.0rc2 released --- 3270. [bug] "rndc reload" didn't reuse existing zones correctly @@ -11530,6 +11698,8 @@ Changes prior to 9.20.0 3260. [bug] "rrset-order cyclic" could appear not to rotate for some query patterns. [RT #27170/27185] +.. code-block:: none + --- 9.9.0rc1 released --- 3259. [bug] named-compilezone: Suppress "dump zone to " @@ -11666,6 +11836,8 @@ Changes prior to 9.20.0 referencing fetch context after it's been freed. [RT #26720] +.. code-block:: none + --- 9.9.0b2 released --- 3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips() @@ -11767,6 +11939,8 @@ Changes prior to 9.20.0 3187. [port] win32: support for Visual Studio 2008. [RT #26356] +.. code-block:: none + --- 9.9.0b1 released --- 3186. [bug] Version/db mismatch in rpz code. [RT #26180] @@ -11827,6 +12001,8 @@ Changes prior to 9.20.0 3171. [bug] Exclusively lock the task when adding a zone using 'rndc addzone'. [RT #25600] +.. code-block:: none + --- 9.9.0a3 released --- 3170. [func] RPZ update: @@ -11889,6 +12065,8 @@ Changes prior to 9.20.0 3156. [placeholder] +.. code-block:: none + --- 9.9.0a2 released --- 3155. [bug] Fixed a build failure when using contrib DLZ @@ -11916,6 +12094,8 @@ Changes prior to 9.20.0 3147. [func] Initial inline signing support. [RT #23657] +.. code-block:: none + --- 9.9.0a1 released --- 3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598] @@ -12389,6 +12569,8 @@ Changes prior to 9.20.0 3009. [bug] clients-per-query code didn't work as expected with particular query patterns. [RT #22972] +.. code-block:: none + --- 9.8.0b1 released --- 3008. [func] Response policy zones (RPZ) support. [RT #21726] @@ -12492,6 +12674,8 @@ Changes prior to 9.20.0 2983. [bug] Include "loadkeys" in rndc help output. [RT #22493] +.. code-block:: none + --- 9.8.0a1 released --- 2982. [bug] Reference count dst keys. dst_key_attach() can be used @@ -13097,6 +13281,8 @@ Changes prior to 9.20.0 2807. [bug] Fixed a possible ASSERT when reconfiguring zone keys. [RT #20720] +.. code-block:: none + --- 9.7.0rc1 released --- 2806. [bug] "rdnc sign" could delay re-signing the DNSKEY @@ -13170,6 +13356,8 @@ Changes prior to 9.20.0 2786. [bug] Additional could be promoted to answer. [RT #20663] +.. code-block:: none + --- 9.7.0b3 released --- 2785. [bug] Revoked keys could fail to self-sign [RT #20652] @@ -13291,6 +13479,8 @@ Changes prior to 9.20.0 2743. [bug] RRSIG could be incorrectly set in the NSEC3 record for a insecure delegation. +.. code-block:: none + --- 9.7.0b2 released --- 2742. [cleanup] Clarify some DNSSEC-related log messages in @@ -13390,6 +13580,8 @@ Changes prior to 9.20.0 2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414] +.. code-block:: none + --- 9.7.0b1 released --- 2715. [bug] Require OpenSSL support to be explicitly disabled. @@ -13551,6 +13743,8 @@ Changes prior to 9.20.0 2675. [bug] dnssec-signzone could crash if the key directory did not exist. [RT #20232] +.. code-block:: none + --- 9.7.0a3 released --- 2674. [bug] "dnssec-lookaside auto;" crashed if named was built @@ -13654,6 +13848,8 @@ Changes prior to 9.20.0 2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms which default to 64 bits. [RT #19927] +.. code-block:: none + --- 9.7.0a2 released --- 2644. [bug] Change #2628 caused a regression on some systems; @@ -13764,6 +13960,8 @@ Changes prior to 9.20.0 2613. [placeholder] +.. code-block:: none + --- 9.7.0a1 released --- 2612. [func] Add default values for the arguments to @@ -14148,6 +14346,8 @@ Changes prior to 9.20.0 2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash. [RT #18837] +.. code-block:: none + --- 9.6.0rc1 released --- 2498. [bug] Removed a bogus function argument used with @@ -14211,6 +14411,8 @@ Changes prior to 9.20.0 2482. [port] libxml2: support versions 2.7.* in addition to 2.6.*. [RT #18806] +.. code-block:: none + --- 9.6.0b1 released --- 2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain @@ -14281,6 +14483,8 @@ Changes prior to 9.20.0 2461. [port] sunos: Change #2363 was not complete. [RT #17513] +.. code-block:: none + --- 9.6.0a1 released --- 2460. [bug] Don't call dns_db_getnsec3parameters() on the cache. @@ -14874,6 +15078,8 @@ Changes prior to 9.20.0 2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones list. +.. code-block:: none + --- 9.5.0b1 released --- 2267. [bug] Radix tree node_num value could be set incorrectly, @@ -14901,6 +15107,8 @@ Changes prior to 9.20.0 2259. [placeholder] +.. code-block:: none + --- 9.5.0a7 released --- 2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken. @@ -15057,6 +15265,8 @@ Changes prior to 9.20.0 2207. [port] Some implementations of getaddrinfo() fail to set ai_canonname correctly. [RT #17061] +.. code-block:: none + --- 9.5.0a6 released --- 2206. [security] "allow-query-cache" and "allow-recursion" now @@ -15109,6 +15319,8 @@ Changes prior to 9.20.0 2194. [bug] Close journal before calling 'done' in xfrin.c. +.. code-block:: none + --- 9.5.0a5 released --- 2193. [port] win32: BINDInstall.exe is now linked statically. @@ -15180,6 +15392,8 @@ Changes prior to 9.20.0 2173. [port] win32: When compiling with MSVS 2005 SP1 we also need to ship Microsoft.VC80.MFCLOC. +.. code-block:: none + --- 9.5.0a4 released --- 2172. [bug] query_addsoa() was being called with a non zone db. @@ -15201,6 +15415,8 @@ Changes prior to 9.20.0 2167. [bug] When re-using a automatic zone named failed to attach it to the new view. [RT #16786] +.. code-block:: none + --- 9.5.0a3 released --- 2166. [bug] When running in batch mode, dig could misinterpret @@ -15229,6 +15445,8 @@ Changes prior to 9.20.0 2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned from getifaddrs(). [RT #16708] +.. code-block:: none + --- 9.5.0a2 released --- 2159. [bug] Array bounds overrun in acache processing. [RT #16710] @@ -15334,6 +15552,8 @@ Changes prior to 9.20.0 2124. [security] It was possible to dereference a freed fetch context. [RT #16584] +.. code-block:: none + --- 9.5.0a1 released --- 2123. [func] Use Doxygen to generate internal documentation. @@ -16475,6 +16695,8 @@ Changes prior to 9.20.0 1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly. [RT #12864] +.. code-block:: none + 1749. [bug] 'check-names response ignore;' failed to ignore. [RT #12866] @@ -17213,6 +17435,8 @@ Changes prior to 9.20.0 1500. [bug] host failed to lookup MX records. Also look up AAAA records. +.. code-block:: none + 1499. [bug] isc_random need to be seeded better if arc4random() is not used. @@ -17928,6 +18152,8 @@ Changes prior to 9.20.0 1250. [func] Nsupdate will report the address the update was sent to. +.. code-block:: none + 1249. [bug] Missing masters clause was not handled gracefully. [RT #2703] @@ -18850,6 +19076,8 @@ Changes prior to 9.20.0 change #953. win32 .make file for rndc-confgen updated to add include path for os.h header. +.. code-block:: none + --- 9.2.0rc1 released --- 955. [bug] When using views, the zone's class was not being @@ -18883,6 +19111,8 @@ Changes prior to 9.20.0 949. [bug] host was unable to print records larger than 512 bytes. [RT #1557] +.. code-block:: none + --- 9.2.0b2 released --- 948. [port] Integrated support for building on Windows NT / @@ -18916,6 +19146,8 @@ Changes prior to 9.20.0 940. [bug] Double zone locking failure on error path. [RT #1510] +.. code-block:: none + --- 9.2.0b1 released --- 939. [port] Add the --disable-linux-caps option to configure for @@ -18938,6 +19170,8 @@ Changes prior to 9.20.0 933. [bug] configure failed doing libbind on platforms not supported by BIND 8. [RT #1496] +.. code-block:: none + --- 9.2.0a3 released --- 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM, @@ -19050,6 +19284,8 @@ Changes prior to 9.20.0 bin/tests/system/ifconfig.sh now recognize the new string. +.. code-block:: none + --- 9.2.0a2 released --- 899. [bug] lib/dns/soa.c failed to compile on many platforms @@ -19201,6 +19437,8 @@ Changes prior to 9.20.0 851. [cleanup] The obsolete support-ixfr option was not properly ignored. +.. code-block:: none + --- 9.2.0a1 released --- 850. [bug] dns_rbt_findnode() would not find nodes that were @@ -19872,6 +20110,8 @@ Changes prior to 9.20.0 642. [bug] Break the exit_check() race in the zone module. [RT #598] +.. code-block:: none + --- 9.1.0b2 released --- 641. [bug] $GENERATE caused a uninitialized link to be used. @@ -20043,6 +20283,8 @@ Changes prior to 9.20.0 number of days, not seconds. This matches the documentation. [RT #529] +.. code-block:: none + --- 9.1.0b1 released --- 591. [bug] Work around non-reentrancy in openssl by disabling @@ -20667,6 +20909,8 @@ Changes prior to 9.20.0 400. [bug] SIG(0) signing and verifying was done incorrectly. [RT #249] +.. code-block:: none + 399. [bug] When reloading the server with a config file containing a syntax error, it could catch an assertion failure trying to perform zone @@ -21211,6 +21455,8 @@ Changes prior to 9.20.0 254. [bug] Suppress "query denied" messages on additional data lookups. +.. code-block:: none + --- 9.0.0b4 released --- 253. [func] resolv.conf parser now recognizes ';' and '#' as @@ -21398,6 +21644,8 @@ Changes prior to 9.20.0 201. [cleanup] Removed the test/sdig program, it has been replaced by bin/dig/dig. +.. code-block:: none + --- 9.0.0b3 released --- 200. [bug] Failures in sending query responses to clients @@ -22122,4 +22370,7 @@ Changes prior to 9.20.0 prevented the isc directory from being created if it didn't exist. +.. code-block:: none + --- 9.0.0b2 released --- +