From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Fri, 9 Nov 2018 10:28:13 +0000 (+0100)
Subject: recursor 4.1.7: changelog and secpoll
X-Git-Tag: auth-4.2.0-alpha1~60^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d5603336044e8df4b9310f43ecbb23192521c72c;p=thirdparty%2Fpdns.git

recursor 4.1.7: changelog and secpoll
---

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 68065873ad..e0c15ec6d7 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2018110801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2018110901 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 ; Auth
@@ -164,6 +164,7 @@ recursor-4.1.3.security-status                          60 IN TXT "3 Upgrade now
 recursor-4.1.4.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-04.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-06.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-07.html"
 recursor-4.1.5.security-status                          60 IN TXT "1 OK"
 recursor-4.1.6.security-status                          60 IN TXT "1 OK"
+recursor-4.1.7.security-status                          60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/"
diff --git a/pdns/recursordist/docs/changelog/4.1.rst b/pdns/recursordist/docs/changelog/4.1.rst
index 90be1cb166..0bf1f438f0 100644
--- a/pdns/recursordist/docs/changelog/4.1.rst
+++ b/pdns/recursordist/docs/changelog/4.1.rst
@@ -1,6 +1,24 @@
 Changelogs for 4.1.x
 ====================
 
+.. changelog::
+  :version: 4.1.7
+  :released: 9th of November 2018
+
+  This release updates the mitigation for :doc:`Security Advisory 2018-07 <../security-advisories/powerdns-advisory-2018-07>`, reverting the EDNS fallback strictness increase. This is necessary because there are a lot of broken name servers on the Internet.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7172
+
+    Revert 'Keep the EDNS status of a server on FormErr with EDNS'
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7174
+
+    Refuse queries for all meta-types
+
 .. changelog::
   :version: 4.1.6
   :released: 7th of November 2018