auth-4.6.0-beta1: secpoll&docs

diff --git a/docs/changelog/4.6.rst b/docs/changelog/4.6.rst
index 1e00dec2ecdb3d899b2c5425caf3277ad3807c4e..d0f2483cdc6c4b21108ddfca7d6bce4e74a190e4 100644 (file)
--- a/docs/changelog/4.6.rst
+++ b/docs/changelog/4.6.rst
@@ -1,6 +1,108 @@
 Changelogs for 4.6.x
 ====================
 
+.. changelog::
+  :version: 4.6.0-beta1
+  :released: 9th of December 2021
+
+  This is version 4.6.0-beta1 of the Authoritative Server.
+  This release contains a ton of improvements and bug fixes compared to 4.5, and a couple of user visible changes.
+
+  New features:
+
+  * support for incoming PROXY headers
+  * support for EDNS Cookies
+
+  Please make sure to read the :doc:`upgrade notes <../upgrading>` before upgrading.
+
+  Compared to 4.6.0-alpha1, the major user visible change is the new NSEC3PARAM settings (again, see the upgrade docs).
+  Besides that, see below for various fixes.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 11068
+
+    prevent bind-hybrid+zone-cache
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11067
+
+    pdnsutil: skip SHA1 DSes except in verbose mode
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11066
+
+    add zone to zone cache on flush API endpoint
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10982
+
+    Condition to HAVE_SYSTEMD_WITH_RUNTIME_DIR_ENV is reversed.
+    During build, the runtime directory in the service files for virtual-hosting are now correctly generated.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 11012
+
+    new default nsec3param settings
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10981
+
+    dnsupdate/2136: apply new TTL to whole RRset, not only to the added record
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10941
+
+    bindbackend: skip rejected zones during list and search
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10963
+
+    make the zone cache more robust for bad data and save some SOA queries for DNSSEC zones (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10959
+
+    api, check qtype location (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10865
+
+    put some json on /api/v1
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10951
+
+    improve dnsname exception handling for SOA records (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10919
+
+    Add more UDP error metrics (checksum, IPv6)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10901
+
+    ZoneParserTNG: Stricter checks when loading a zone file
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 10891
+
+    Implement fd-usage metric for OpenBSD
+
 .. changelog::
   :version: 4.6.0-alpha1
   :released: 7th of October 2021

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 6379723abf7c277802e59b6b33a75bc7e43d5224..061405e1b8b5a66225f7dd354341e1b7a4da2897 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021120304 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021120901 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -98,7 +98,8 @@ auth-4.5.0-rc2.security-status                          60 IN TXT "3 Unsupported
 auth-4.5.0.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2021-01.html"
 auth-4.5.1.security-status                              60 IN TXT "1 OK"
 auth-4.5.2.security-status                              60 IN TXT "1 OK"
-auth-4.6.0-alpha1.security-status                       60 IN TXT "1 Unsupported pre-release"
+auth-4.6.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release, superseded by 4.6.0-beta1"
+auth-4.6.0-beta1.security-status                        60 IN TXT "1 Unsupported pre-release"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"