From dc1b6b543af8dc6a827936e14849325b8b24cc66 Mon Sep 17 00:00:00 2001 From: Otto Date: Wed, 28 Jul 2021 13:16:23 +0200 Subject: [PATCH] Prep for rec-4.4.5 and rec-4.5.5 Including a few 2->3 upgrades for known vulnerability status for auth --- docs/secpoll.zone | 20 ++++++++------- pdns/recursordist/docs/changelog/4.4.rst | 11 ++++++++ pdns/recursordist/docs/changelog/4.5.rst | 32 ++++++++++++++++++++++++ 3 files changed, 54 insertions(+), 9 deletions(-) diff --git a/docs/secpoll.zone b/docs/secpoll.zone index 4f77db771b..acae0cd5a9 100644 --- a/docs/secpoll.zone +++ b/docs/secpoll.zone @@ -1,4 +1,4 @@ -@ 86400 IN SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021072600 10800 3600 604800 10800 +@ 86400 IN SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021073001 10800 3600 604800 10800 @ 3600 IN NS pdns-public-ns1.powerdns.com. @ 3600 IN NS pdns-public-ns2.powerdns.com. @@ -56,18 +56,18 @@ auth-4.1.13.security-status 60 IN TXT "3 Upgrade now auth-4.1.14.security-status 60 IN TXT "2 Unsupported release (EOL)" auth-4.2.0-alpha1.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html" auth-4.2.0-beta1.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html" -auth-4.2.0-rc1.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.2.0-rc2.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.2.0-rc3.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" +auth-4.2.0-rc1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.2.0-rc2.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.2.0-rc3.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" auth-4.2.0.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html" auth-4.2.1.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html" auth-4.2.2.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html" auth-4.2.3.security-status 60 IN TXT "1 OK" -auth-4.3.0-alpha1.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.3.0-beta1.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.3.0-beta2.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.3.0-rc1.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" -auth-4.3.0-rc2.security-status 60 IN TXT "2 Unsupported pre-release (known vulnerabilities)" +auth-4.3.0-alpha1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.3.0-beta1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.3.0-beta2.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.3.0-rc1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +auth-4.3.0-rc2.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" auth-4.3.0.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html" auth-4.3.1.security-status 60 IN TXT "1 OK" auth-4.3.2.security-status 60 IN TXT "1 OK" @@ -259,6 +259,7 @@ recursor-4.4.1.security-status 60 IN TXT "1 OK" recursor-4.4.2.security-status 60 IN TXT "1 OK" recursor-4.4.3.security-status 60 IN TXT "1 OK" recursor-4.4.4.security-status 60 IN TXT "1 OK" +recursor-4.4.5.security-status 60 IN TXT "1 OK" recursor-4.5.0-alpha1.security-status 60 IN TXT "3 Unsupported pre-release" recursor-4.5.0-alpha2.security-status 60 IN TXT "3 Unsupported pre-release" recursor-4.5.0-alpha3.security-status 60 IN TXT "3 Unsupported pre-release" @@ -270,6 +271,7 @@ recursor-4.5.1.security-status 60 IN TXT "1 OK" recursor-4.5.2.security-status 60 IN TXT "1 OK" recursor-4.5.3.security-status 60 IN TXT "2 Unsupported pre-release" recursor-4.5.4.security-status 60 IN TXT "1 OK" +recursor-4.5.5.security-status 60 IN TXT "1 OK" ; Recursor Debian recursor-3.6.2-2.debian.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/" diff --git a/pdns/recursordist/docs/changelog/4.4.rst b/pdns/recursordist/docs/changelog/4.4.rst index b6276f4abb..034ef86a36 100644 --- a/pdns/recursordist/docs/changelog/4.4.rst +++ b/pdns/recursordist/docs/changelog/4.4.rst @@ -1,6 +1,17 @@ Changelogs for 4.4.x ==================== +.. changelog:: + :version: 4.4.5 + :released: 30th of July 2021 + + .. change:: + :tags: Improvements + :pullreq: 10580 + :tickets: 10555 + + Work around clueless servers sending AA=0 answers. + .. changelog:: :version: 4.4.4 :released: 9th of June 2021 diff --git a/pdns/recursordist/docs/changelog/4.5.rst b/pdns/recursordist/docs/changelog/4.5.rst index 043dd5fe8e..f674fa78d1 100644 --- a/pdns/recursordist/docs/changelog/4.5.rst +++ b/pdns/recursordist/docs/changelog/4.5.rst @@ -1,6 +1,38 @@ Changelogs for 4.5.X ==================== +.. changelog:: + :version: 4.5.5 + :released: 30th of July 2021 + + .. change:: + :tags: Bug Fixes + :pullreq: 10593 + :tickets: 10587 + + Ancestor NSEC3s can only deny the existence of a DS. + + .. change:: + :tags: Bug Fixes + :pullreq: 10575 + :tickets: 10570 + + Make really sure we did not miss a cut on validation failure. + + .. change:: + :tags: Improvements + :pullreq: 10564 + :tickets: 10555 + + Work around clueless servers sending AA=0 answers. + + .. change:: + :tags: Bug Fixes + :pullreq: 10573 + :tickets: 10515 + + Clear the current proxy protocol values each iteration. + .. changelog:: :version: 4.5.4 :released: 2nd of July 2021, 4.5.3 was never released publicly. -- 2.47.2