recursor 4.1.7: changelog and secpoll

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 68065873adf5a2fee6ae790d3cb584b3d69559f5..e0c15ec6d7cd8aef2910b8f4ffeeed46f4d91798 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2018110801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2018110901 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 ; Auth
@@ -164,6 +164,7 @@ recursor-4.1.3.security-status                          60 IN TXT "3 Upgrade now
 recursor-4.1.4.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-04.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-06.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-07.html"
 recursor-4.1.5.security-status                          60 IN TXT "1 OK"
 recursor-4.1.6.security-status                          60 IN TXT "1 OK"
+recursor-4.1.7.security-status                          60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/"

diff --git a/pdns/recursordist/docs/changelog/4.1.rst b/pdns/recursordist/docs/changelog/4.1.rst
index 90be1cb166b57f7f8ebdd6930f0cfa787fd796c3..0bf1f438f0aa6e181c60b02f4101c29850e2cd2c 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.1.rst
+++ b/pdns/recursordist/docs/changelog/4.1.rst
@@ -1,6 +1,24 @@
 Changelogs for 4.1.x
 ====================
 
+.. changelog::
+  :version: 4.1.7
+  :released: 9th of November 2018
+
+  This release updates the mitigation for :doc:`Security Advisory 2018-07 <../security-advisories/powerdns-advisory-2018-07>`, reverting the EDNS fallback strictness increase. This is necessary because there are a lot of broken name servers on the Internet.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7172
+
+    Revert 'Keep the EDNS status of a server on FormErr with EDNS'
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7174
+
+    Refuse queries for all meta-types
+
 .. changelog::
   :version: 4.1.6
   :released: 7th of November 2018