changelog and secpoll for auth 4.2.0-rc3

diff --git a/docs/changelog/4.2.rst b/docs/changelog/4.2.rst
index 72d0bac475799e1de13f3c0ecf22f1e38a407bb9..805c3dcc26f88500ee52d0d6de8486347a01c7ae 100644 (file)
--- a/docs/changelog/4.2.rst
+++ b/docs/changelog/4.2.rst
@@ -1,6 +1,176 @@
 Changelogs for 4.2.x
 ====================
 
+.. changelog::
+  :version: 4.2.0-rc3
+  :released: 29th of July 2019
+
+  Thanks to an overwhelming amount of testing by our fabulous user community, this release candidate contains a ton of bug fixes (and a few improvements) compared to the previous one. We hope this has shaken out all of the important bugs, so that we can release 4.2.0 soon!
+
+  This release, sadly, cripples the LMDB backend somewhat, due to `transaction-related fixes for the SQL backends <https://github.com/PowerDNS/pdns/pull/7891>`__. We hope to fix `this issue <https://github.com/PowerDNS/pdns/issues/8134>`__ before 4.2.0, or otherwise, early in 4.2.x.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8168
+
+    packethandler: Compare TSIG key name using DNSName
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 8172, 8173
+
+    boost.m4 improvements
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8169
+
+    Make sure we always compile with BOOST_CB_ENABLE_DEBUG set to 0
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8058
+
+    Fix SERVFAIL when backend returns empty DNSName
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 8126
+
+    add metric for open TCP connections
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8149
+
+    stop using select() in places where FDs can be >1023
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8166
+
+    pdnsutil increase-serial: set right ordername
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8097
+
+    use BIGINT for notified_serial in pg schema (Klaus Darilion)
+
+  .. change::
+    :tags: Improvements, Robustness, Performance
+    :pullreq: 8092
+
+    Various robustness and performance improvements around domain IDs (Kees Monshouwer)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8056
+
+    Fix the accounting of servfail-queries in the distributor
+
+  .. change::
+    :tags: Improvements, Build
+    :pullreq: 8064
+
+    remove unused import to enable compile on illumos (Thomas Mieslinger)
+
+  .. change::
+    :tags: Improvements, Performance
+    :pullreq: 8051
+
+    ixfrdist: limit XFR chunk size to 16k
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8028
+
+    limit compression pointers to 14 bits
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8037
+
+    catch name & IP parse errors during outgoing notify preparations
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7998
+
+    Fix a memory leak when sqlite3_exec() fails
+
+  .. change::
+    :tags: Improvements, Build
+    :pullreq: 8019, 7980
+
+    don't enable the tbhandler when libc only pretends to be glibc (James Taylor)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 8006
+
+    Fix a leak on 'Backend reported permanent error which prevented lookup' error
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7996
+
+    Clear CMSG_SPACE(sizeof(data)) in cmsghdr to appease valgrind
+
+  .. change::
+    :tags: New Features
+    :pullreq: 7550
+
+    web: make max request/response body size configurable
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7918
+
+    deprecate SOA autocomplete in pdnsutil check-zone (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements, Packaging
+    :pullreq: 7889
+
+    move /var/lib/pdns to pdns-server debian package
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7890
+
+    Show newer features in configure output and --version
+
+  .. change::
+    :tags: Improvements, Performance
+    :pullreq: 7910
+
+    completely disable the packet when cache-ttl=0 (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7943
+
+    Improve error when notification comes in for non-slave zone
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 7962
+
+    web: add edited_serial to Zone object
+
+  .. change::
+    :tags: Improvements, Build
+    :pullreq: 7871
+
+    Adapt calidns for openbsd and other systems without rcvmmsg(2)
+
+  .. change::
+    :tags: Improvements, Performance
+    :pullreq: 7699
+
+    DNSName, speed up toString() conversion
+
 .. changelog::
   :version: 4.2.0-rc2
   :released: 14th of June 2019

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 93fa2e1f51c49a6ba103ce12cfe5ed02cb468f8d..d953176b90b3e8da32b263737822ca0936a80fd2 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,5 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2019080901 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2019080902 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2019072901 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 @       3600    IN  NS  tmpdns.powerdns.com.
@@ -57,6 +58,7 @@ auth-4.2.0-alpha1.security-status                       60 IN TXT "3 Upgrade now
 auth-4.2.0-beta1.security-status                        60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html"
 auth-4.2.0-rc1.security-status                          60 IN TXT "1 OK"
 auth-4.2.0-rc2.security-status                          60 IN TXT "1 OK"
+auth-4.2.0-rc3.security-status                          60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"