From: Peter van Dijk Date: Mon, 23 Nov 2020 08:07:01 +0000 (+0100) Subject: auth: changelog&secpoll for auth-4.4.0-beta1 X-Git-Tag: auth-4.5.0-alpha0~13^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=22693ea8840215a3030daa2cf11a99e741ce4abe;p=thirdparty%2Fpdns.git auth: changelog&secpoll for auth-4.4.0-beta1 --- diff --git a/docs/changelog/4.4.rst b/docs/changelog/4.4.rst index e8414d71f5..a3acdb86b5 100644 --- a/docs/changelog/4.4.rst +++ b/docs/changelog/4.4.rst @@ -1,6 +1,118 @@ Changelogs for 4.4.x ==================== +.. changelog:: + :version: 4.4.0-beta1 + :released: 23rd of November 2020 + + This is version 4.4.0-beta1 of the Authoritative Server. + + This release drops GSS/TSIG support, please see :doc:`PowerDNS Security Advisory 2020-06 <../security-advisories/powerdns-advisory-2020-06>`. + + Version 4.4.0 brings a bunch of exciting changes: + + * the LMDB backend now supports long record content, making it production ready for everybody + * the SVCB and HTTPS record types are supported, with limited additional processing + * transaction handling in the 2136 handler and the HTTP API was again improved a lot, avoiding various spurious issues users may have noticed if they do a lot of changes + * a new setting (:ref:`setting-consistent-backends`) offers a roughly 30% speedup, subject to conditions + * we finally emit Prometheus metrics! + + We want to specifically thank Robin Geuze, Kees Monshouwer, Mischan Toosarani-Hausberger, Chris Hofstaedtler, and Kevin Fleming for their contributions to this release. + We are also grateful to all other reporters of bugs, issues, feature requests, and submitters of smaller fixes and features. + + Please make sure to read the :doc:`upgrade notes <../upgrading>` before upgrading. + + .. change:: + :tags: Bug Fixes + :pullreq: 9735 + + pdnsutil check-zone: DNAME fixes + + .. change:: + :tags: Improvements + :pullreq: 9704 + + nxdomain performance (Kees Monshouwer) + + .. change:: + :tags: Improvements + :pullreq: 9731 + + logging: put quotes around some IPs to make messages easier to read + + .. change:: + :tags: New Features + :pullreq: 9713 + + allow ip ranges as trusted-notification-proxy + + .. change:: + :tags: Bug Fixes + :pullreq: 8707 + + lmdb: fill di.serial (this fixes the 'serial=0' API bug) + + .. change:: + :tags: Bug Fixes + :pullreq: 9714 + + disable mysql automatic charset detection (see :doc:`upgrade notes <../upgrading>`) + + .. change:: + :tags: Improvements + :pullreq: 9712 + + Use Python 3 in build system (Kevin Fleming) + + .. change:: + :tags: New Features + :pullreq: 8911 + + Add '/api/docs' endpoint to Auth server (Kevin Fleming) + + .. change:: + :tags: Improvements + :pullreq: 9688 + + adjust AXFR, IXFR events loglevels (Kees Monshouwer) + + .. change:: + :tags: New Features + :pullreq: 8608 + + geoipbackend: accept custom lookup mapping (criteo-forks) + + .. change:: + :tags: Improvements + :pullreq: 9692 + + pdnsutil zone key improvements (Chris Hofstaedtler) + + .. change:: + :tags: New Features + :pullreq: 9693 + + make it possible to replace now supported TYPExx records (Kees Monshouwer) + + .. change:: + :tags: Bug Fixes + :pullreq: 9174 + + tinydnsbackend: Ignore duplicate SOA in getAllDomains() + + .. change:: + :tags: Improvements + :pullreq: 9685 + :issues: 9675 + + add some missing counters. Fixes #9675 + + .. change:: + :tags: New Features + :pullreq: 9239 + + Add pdns_control command to the the list of XFR domains in queue + .. changelog:: :version: 4.4.0-alpha3 :released: 5th of November 2020 diff --git a/docs/secpoll.zone b/docs/secpoll.zone index c90b11f849..07932af240 100644 --- a/docs/secpoll.zone +++ b/docs/secpoll.zone @@ -1,4 +1,4 @@ -@ 86400 IN SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020110501 10800 3600 604800 10800 +@ 86400 IN SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020112301 10800 3600 604800 10800 @ 3600 IN NS pdns-public-ns1.powerdns.com. @ 3600 IN NS pdns-public-ns2.powerdns.com. @@ -72,7 +72,8 @@ auth-4.3.0.security-status 60 IN TXT "3 Upgrade now auth-4.3.1.security-status 60 IN TXT "1 OK" auth-4.4.0-alpha1.security-status 60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)" auth-4.4.0-alpha2.security-status 60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)" -auth-4.4.0-alpha3.security-status 60 IN TXT "1 OK" +auth-4.4.0-alpha3.security-status 60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)" +auth-4.4.0-beta1.security-status 60 IN TXT "1 OK" ; Auth Debian auth-3.4.1-2.debian.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"