security release 1.5.2

diff --git a/NEWS b/NEWS
index c375ed0b0e01ded6b4b4eb45001bcb130a646aa9..b44f6c906e73f877291619e06c1e51f32ce04d2d 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,18 @@
+Knot Resolver 1.5.2 (2017-01-22)
+================================
+
+Security
+--------
+- fix CVE-2018-1000002: insufficient DNSSEC validation, allowing
+  attackers to deny existence of some data by forging packets.
+  Some combinations pointed out in RFC 6840 sections 4.1 and 4.3
+  were not taken into account.
+
+Bugfixes
+--------
+- memcached: fix fallout from module rename in 1.5.1
+
+
 Knot Resolver 1.5.1 (2017-12-12)
 ================================
 

diff --git a/config.mk b/config.mk
index 3bdb65f182393dbf684d3374c8dc8cc6bcae77a6..a708c24bd0584caa3aa85a169040a6605fe18c19 100644 (file)
--- a/config.mk
+++ b/config.mk
@@ -1,7 +1,7 @@
 # Project
 MAJOR := 1
 MINOR := 5
-PATCH := 1
+PATCH := 2
 EXTRA :=
 ABIVER := 4
 BUILDMODE := dynamic