auth-4.5.0: secpoll and docs

diff --git a/docs/changelog/4.5.rst b/docs/changelog/4.5.rst
index 0426e932327a7f96f71833a6fe9e18dd5997aaa5..52be9a80c97a85e57ce85730002361720bb50145 100644 (file)
--- a/docs/changelog/4.5.rst
+++ b/docs/changelog/4.5.rst
@@ -1,6 +1,37 @@
 Changelogs for 4.5.x
 ====================
 
+.. changelog::
+  :version: 4.5.0
+  :released: 13th of July 2021
+
+  This is release 4.5.0 of the Authoritative Server.
+  This release contains a ton of improvements and bug fixes compared to 4.4, but very few user visible changes.
+
+  There are two notable new features:
+
+  * The "zone cache", which allows PowerDNS to keep a list of zones in memory, updated periodically.
+    With this cache, PowerDNS can avoid hitting the database with queries for unknown domains.
+    In some setups, and some attack scenarios, this can make a serious performance difference.
+    Users of backends with dynamically generated zones may want to disable this or at least read the upgrade notes extremely carefully.
+    Many thanks to Chris Hofstaedtler for implementing this.
+    This work by Chris was supported by RcodeZero DNS.
+  * Priority ordering in the AXFR queue in PowerDNS running as a secondary.
+    Some users with a lot of domains (>100k) sometimes found real changes waiting behind signature refreshes on Thursdays.
+    With the new ordering, those real changes can "skip the line" and get deployed on your secondaries faster.
+    Many thanks to Robin Geuze of TransIP for implementing this.
+
+  Since 4.5.0-beta1, the zone cache is enabled by default.
+
+  Please make sure to read the :doc:`upgrade notes <../upgrading>` before upgrading.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10579
+
+    fix building without sqlite (this got broken between RC1 and RC2).
+    Thanks to our trusty FreeBSD port maintainer Ralf van der Enden for noticing and reporting this.
+
 .. changelog::
   :version: 4.5.0-rc2
   :released: 6th of July 2021
@@ -10,13 +41,13 @@ Changelogs for 4.5.x
 
   There are two notable new features:
 
-  * The 'zone cache', which allows PowerDNS to keep a list of zones in memory, updated periodically.
+  * The "zone cache", which allows PowerDNS to keep a list of zones in memory, updated periodically.
     With this cache, PowerDNS can avoid hitting the database with queries for unknown domains.
     In some setups, and some attack scenarios, this can make a serious performance difference.
     Many thanks to Chris Hofstaedtler for implementing this.
   * Priority ordering in the AXFR queue in PowerDNS running as a secondary.
     Some users with a lot of domains (>100k) sometimes found real changes waiting behind signature refreshes on Thursdays.
-    With the new ordering, those real changes can 'skip the line' and get deployed on your secondaries faster.
+    With the new ordering, those real changes can "skip the line" and get deployed on your secondaries faster.
     Many thanks to Robin Geuze for implementing this.
 
   Since 4.5.0-beta1, the zone cache is enabled by default.
@@ -42,7 +73,7 @@ Changelogs for 4.5.x
   This is the first release candidate for version 4.5.0 of the Authoritative Server.
   This release contains a ton of improvements and bug fixes compared to 4.4, but very few user visible changes.
 
-  The one notable feature is the 'zone cache', which allows PowerDNS to keep a list of zones in memory, updated periodically.
+  The one notable feature is the "zone cache", which allows PowerDNS to keep a list of zones in memory, updated periodically.
   With this cache, PowerDNS can avoid hitting the database with queries for unknown domains.
   In some setups, and some attack scenarios, this can make a serious performance difference.
 
@@ -111,7 +142,7 @@ Changelogs for 4.5.x
   This is version 4.5.0-beta1 of the Authoritative Server.
   This release contains a ton of improvements and bug fixes compared to 4.4, but very few user visible changes.
 
-  The one notable feature is the 'zone cache', which allows PowerDNS to keep a list of zones in memory, updated periodically.
+  The one notable feature is the "zone cache", which allows PowerDNS to keep a list of zones in memory, updated periodically.
   With this cache, PowerDNS can avoid hitting the database with queries for unknown domains.
   In some setups, and some attack scenarios, this can make a serious performance difference.
 
@@ -150,7 +181,7 @@ Changelogs for 4.5.x
   This is version 4.5.0-alpha1 of the Authoritative Server.
   This release contains a ton of improvements and bug fixes compared to 4.4, but very few user visible changes.
 
-  The one notable feature is the 'zone cache', which allows PowerDNS to keep a list of zones in memory, updated periodically.
+  The one notable feature is the "zone cache", which allows PowerDNS to keep a list of zones in memory, updated periodically.
   With this cache, PowerDNS can avoid hitting the database with queries for unknown domains.
   In some setups, and some attack scenarios, this can make a serious performance difference.
 

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 2904408b15705b77f3fc11ecdfdb49090371eb10..c5f253d1598c85d0ceb9d631425fa73e879a98c3 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021070600 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021071300 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -81,7 +81,8 @@ auth-4.4.1.security-status                              60 IN TXT "1 OK"
 auth-4.5.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.5.0-beta1.security-status                        60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.5.0-rc1.security-status                          60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
-auth-4.5.0-rc2.security-status                          60 IN TXT "1 OK"
+auth-4.5.0-rc2.security-status                          60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
+auth-4.5.0.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"