release 2.4.1

(cherry picked from commit 54797e88b144345c6c530731ff2e1b8d659ff5a3)

diff --git a/NEWS b/NEWS
index 40ba26ff42e690000b2184fc21532365ec68919f..751bd72ae1eca6b64014e5ef209e0290985ac433 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,9 +1,19 @@
+Knot Resolver 2.4.1 (2018-08-02)
+================================
+
+Security
+--------
+- fix CVE-2018-10920: Improper input validation bug in DNS resolver component
+  (security!7, security!9)
+
 Bugfixes
 --------
+- cache: fix TTL overflow in packet due to min_ttl (#388, security!8)
 - TLS session resumption: avoid bad scheduling of rotation (#385)
 - HTTP module: fix a regression in 2.4.0 which broke custom certs (!632)
 - cache: NSEC3 negative cache even without NS record (#384)
   This fixes lower hit rate in NSEC3 zones (since 2.4.0).
+- minor TCP and TLS fixes (!623, !624, !626)
 
 
 Knot Resolver 2.4.0 (2018-07-03)

diff --git a/config.mk b/config.mk
index fb28be39a459801e089aab3b978b167934d76286..0f98542eb7e22474c70a0e37a69a03a00669adca 100644 (file)
--- a/config.mk
+++ b/config.mk
@@ -1,7 +1,7 @@
 # Project
 MAJOR := 2
 MINOR := 4
-PATCH := 0
+PATCH := 1
 EXTRA ?=
 ABIVER := 7
 BUILDMODE := dynamic