Log message:
Changes since 9.5.0-P1:

	--- 9.5.0-P2 released ---

2406.   [bug]           Some operating systems have FD_SETSIZE set to a
			low value by default, which can cause resource
			exhaustion when many simultaneous connections are
			open.  Linux in particular makes it difficult to
			increase this value.  To use more sockets with
			select(), set ISC_SOCKET_FDSETSIZE.  Example:
			STD_CDEFINES="-DISC_SOCKET_FDSETSIZE=4096" ./configure
			(This should not be necessary in most cases, and
			never for an authoritative-only server.) [RT #18328]

2405.   [cleanup]       The default value for dnssec-validation was changed to
			"yes" in 9.5.0-P1 and all subsequent releases; this
			was inadvertently omitted from CHANGES at the time.

2404.	[port]		hpux: files unlimited support.

2403.	[bug]		TSIG context leak. [RT #18341]

2402.	[port]		Support Solaris 2.11 and over. [RT #18362]

2401.	[bug]		Expect to get E[MN]FILE errno internal_accept()
			(from accept() or fcntl() system calls). [RT #18358]

2399.	[bug]		Abort timeout queries to reduce the number of open
			UDP sockets. [RT #18367]

2398.	[bug]           Improve file descriptor management.  New,
			temporary, named.conf option reserved-sockets,
			default 512. [RT #18344]

2397.	[bug]		gssapi_functions had too many elements. [RT #18355]

2396.	[bug]		Don't set SO_REUSEADDR for randomized ports.
			[RT #18336]

2395.	[port]		Avoid warning and no effect from "files unlimited"
			on Linux when running as root. [RT #18335]

2394.	[bug]		Default configuration options set the limit for
			open files to 'unlimited' as described in the
			documentation. [RT #18331]

2393.   [bug]           nested acls containing keys could trigger an
			assertion in acl.c. [RT #18166]

2392.	[bug]		remove 'grep -q' from acl test script, some platforms
			don't support it. [RT #18253]

2387.	[bug]		Silence compiler warnings in lib/isc/radix.c.
			[RT #18147] [RT #18258]

Log message:
Changes since 9.5.0:

--- 9.5.0-P1 released ---

2375.   [security]      Fully randomize UDP query ports to improve
			forgery resilience. [RT #17949]

Log message:
BIND 9.5.0

BIND 9.5.0 has a number of new features over 9.4, including:

- GSS-TSIG support (RFC 3645).
- DHCID support.
- Experimental http server and statistics support for named via xml.
- More detailed statistics counters including those supported in BIND 8.
- Faster ACL processing.
- Internal documentation generated by Doxygen.
- Efficient LRU cache-cleaning mechanism.
- NSID support (RFC 5001).