From 91d9a51e44ddd16a170f0af89a09762a84a4d182 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Mon, 19 Aug 2013 12:03:21 +1000
Subject: [PATCH] 9.6-ESV-R10rc2

---
 CHANGES     |  2 ++
 EXCLUDED    | 18 ++++++++++++++++++
 lib/dns/api |  2 +-
 version     |  2 +-
 4 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index acdf55cbdc..f30e08c9af 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+	--- 9.6-ESV-R10rc2 released ---
+
 3637.	[bug]		'allow-query-on' was checking the source address
 			rather than the destination address. [RT #34590]
 
diff --git a/EXCLUDED b/EXCLUDED
index f64f41e4ba..3546df1829 100644
--- a/EXCLUDED
+++ b/EXCLUDED
@@ -1,3 +1,21 @@
+3635.	[bug]		Signatures were not being removed from a zone with
+			only KSK keys for a algorithm. [RT #24439]
+
+3632.	[bug]		Signature from newly inactive keys were not being
+			removed. [RT #32178]
+
+3627.	[bug]		RPZ changes were not effective on slaves. [RT #34450]
+
+3624.	[bug]		Look for 'json_object_new_int64' when looking for a
+			the json library. [RT #34449]
+
+3622.	[tuning]	Eliminate an unnecessary lock when incrementing
+			cache statistics. [RT #34339]
+
+3621.	[security]	Incorrect bounds checking on private type 'keydata'
+			can lead to a remotely triggerable REQUIRE failure
+			(CVE-2013-4854). [RT #34238]
+
 3619.	[bug]		Fixed a bug in RPZ with "recursive-only no;"
 			[RT #33776]
 
diff --git a/lib/dns/api b/lib/dns/api
index 125362a14b..4ba31b9476 100644
--- a/lib/dns/api
+++ b/lib/dns/api
@@ -5,5 +5,5 @@
 # 9.9: 90-109
 # 9.9-sub: 130-139
 LIBINTERFACE = 113
-LIBREVISION = 3
+LIBREVISION = 4
 LIBAGE = 0
diff --git a/version b/version
index ccfe634360..27b716bd77 100644
--- a/version
+++ b/version
@@ -9,4 +9,4 @@ MAJORVER=9
 MINORVER=6
 PATCHVER=
 RELEASETYPE=-ESV
-RELEASEVER=-R10rc1
+RELEASEVER=-R10rc2