Prep for rec-4.4.5 and rec-4.5.5

Including a few 2->3 upgrades for known vulnerability status for auth

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 4f77db771bdc11ffad9c6f9aefc257a45879363f..acae0cd5a9d124d1d5285fa82bc79e4fe3ab6ce1 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021072600 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021073001 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -56,18 +56,18 @@ auth-4.1.13.security-status                             60 IN TXT "3 Upgrade now
 auth-4.1.14.security-status                             60 IN TXT "2 Unsupported release (EOL)"
 auth-4.2.0-alpha1.security-status                       60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html"
 auth-4.2.0-beta1.security-status                        60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html"
-auth-4.2.0-rc1.security-status                          60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.2.0-rc2.security-status                          60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.2.0-rc3.security-status                          60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
+auth-4.2.0-rc1.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.2.0-rc2.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.2.0-rc3.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.2.0.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html"
 auth-4.2.1.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html"
 auth-4.2.2.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html"
 auth-4.2.3.security-status                              60 IN TXT "1 OK"
-auth-4.3.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.3.0-beta1.security-status                        60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.3.0-beta2.security-status                        60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.3.0-rc1.security-status                          60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
-auth-4.3.0-rc2.security-status                          60 IN TXT "2 Unsupported pre-release (known vulnerabilities)"
+auth-4.3.0-alpha1.security-status                       60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.3.0-beta1.security-status                        60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.3.0-beta2.security-status                        60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.3.0-rc1.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-4.3.0-rc2.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.3.0.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html"
 auth-4.3.1.security-status                              60 IN TXT "1 OK"
 auth-4.3.2.security-status                              60 IN TXT "1 OK"
@@ -259,6 +259,7 @@ recursor-4.4.1.security-status                          60 IN TXT "1 OK"
 recursor-4.4.2.security-status                          60 IN TXT "1 OK"
 recursor-4.4.3.security-status                          60 IN TXT "1 OK"
 recursor-4.4.4.security-status                          60 IN TXT "1 OK"
+recursor-4.4.5.security-status                          60 IN TXT "1 OK"
 recursor-4.5.0-alpha1.security-status                   60 IN TXT "3 Unsupported pre-release"
 recursor-4.5.0-alpha2.security-status                   60 IN TXT "3 Unsupported pre-release"
 recursor-4.5.0-alpha3.security-status                   60 IN TXT "3 Unsupported pre-release"
@@ -270,6 +271,7 @@ recursor-4.5.1.security-status                          60 IN TXT "1 OK"
 recursor-4.5.2.security-status                          60 IN TXT "1 OK"
 recursor-4.5.3.security-status                          60 IN TXT "2 Unsupported pre-release"
 recursor-4.5.4.security-status                          60 IN TXT "1 OK"
+recursor-4.5.5.security-status                          60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/"

diff --git a/pdns/recursordist/docs/changelog/4.4.rst b/pdns/recursordist/docs/changelog/4.4.rst
index b6276f4abba59fb2ba67c0ce92551a3637bf45be..034ef86a368109104b3a7c5d608aa35e0037f483 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.4.rst
+++ b/pdns/recursordist/docs/changelog/4.4.rst
@@ -1,6 +1,17 @@
 Changelogs for 4.4.x
 ====================
 
+.. changelog::
+  :version: 4.4.5
+  :released: 30th of July 2021
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10580
+    :tickets: 10555
+
+    Work around clueless servers sending AA=0 answers.
+
 .. changelog::
   :version: 4.4.4
   :released: 9th of June 2021

diff --git a/pdns/recursordist/docs/changelog/4.5.rst b/pdns/recursordist/docs/changelog/4.5.rst
index 043dd5fe8e79415a5221f13766b135090613f98d..f674fa78d19d6f2bc0ebd789d4140771317ad7e9 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.5.rst
+++ b/pdns/recursordist/docs/changelog/4.5.rst
@@ -1,6 +1,38 @@
 Changelogs for 4.5.X
 ====================
 
+.. changelog::
+  :version: 4.5.5
+  :released: 30th of July 2021
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10593
+    :tickets: 10587
+
+    Ancestor NSEC3s can only deny the existence of a DS.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10575
+    :tickets: 10570
+
+    Make really sure we did not miss a cut on validation failure.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10564
+    :tickets: 10555
+
+    Work around clueless servers sending AA=0 answers.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10573
+    :tickets: 10515
+
+    Clear the current proxy protocol values each iteration.
+
 .. changelog::
   :version: 4.5.4
   :released: 2nd of July 2021, 4.5.3 was never released publicly.