Prep for upcoming July 17th 2020 release.

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index e334e4bd8d8a6a6a2471717e7aedde8312f7d70a..bd89e5d9d20394f9e49f230a54d45697c66c5e8c 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020070701 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020071701 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -212,6 +212,7 @@ recursor-4.2.0.security-status                          60 IN TXT "3 Upgrade now
 recursor-4.2.1.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html"
 recursor-4.2.2.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html"
 recursor-4.2.3.security-status                          60 IN TXT "1 OK"
+recursor-4.2.4.security-status                          60 IN TXT "1 OK"
 recursor-4.3.0-alpha1.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 recursor-4.3.0-alpha2.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 recursor-4.3.0-alpha3.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
@@ -222,6 +223,7 @@ recursor-4.3.0-rc2.security-status                      60 IN TXT "3 Unsupported
 recursor-4.3.0.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html"
 recursor-4.3.1.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html"
 recursor-4.3.2.security-status                          60 IN TXT "1 OK"
+recursor-4.3.3.security-status                          60 IN TXT "1 OK"
 recursor-4.4.0-alpha1.security-status                   60 IN TXT "1 OK"
 
 ; Recursor Debian

diff --git a/pdns/recursordist/docs/changelog/4.2.rst b/pdns/recursordist/docs/changelog/4.2.rst
index 3122f63cf528b533f1fe24fcd369e71f5f94603a..c92986639f2de765dc8e39403591bd36df312692 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.2.rst
+++ b/pdns/recursordist/docs/changelog/4.2.rst
@@ -1,5 +1,44 @@
 Changelogs for 4.2.x
 ====================
+.. changelog::
+  :version: 4.2.4
+  :released: 17th of July 2020
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9334
+    :tickets: 9309
+
+    Validate cached dnskeys against the dss, not the rrsigs only.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9333
+    :tickets: 9297
+
+    Ignore cache-only for dnskeys/ds retrieval.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9332
+    :tickets: 9292
+
+    A servfail while retrieving ds/dnskey records is just that.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9331
+    :tickets: 9188
+
+    Refuse ds records received from child zones.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9306
+    :tickets: 9268
+
+    Better exception handling in housekeeping / handlepolicyhit.
+
 .. changelog::
   :version: 4.2.3
   :released: 1st of July 2020

diff --git a/pdns/recursordist/docs/changelog/4.3.rst b/pdns/recursordist/docs/changelog/4.3.rst
index bc8e0cce189113be3b6f48385461f85d11fd287e..2b29d87a00ad6fc9174be478ad4acc1c4a93d4e1 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.3.rst
+++ b/pdns/recursordist/docs/changelog/4.3.rst
@@ -1,5 +1,51 @@
 Changelogs for 4.3.x
 ====================
+.. changelog::
+  :version: 4.3.3
+  :released: 17th of July 2020
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9330
+    :tickets: 9309
+
+    Validate cached DNSKEYs against the DSs, not the RRSIGs only.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9329
+    :tickets: 9297
+
+    Ignore cache-only for DNSKEYs and DS retrieval.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9328
+    :tickets: 9292
+
+    A ServFail while retrieving DS/DNSKEY records is just that.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9327
+    :tickets: 9188
+
+    Refuse DS records received from child zones 
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9305
+    :tickets: 9268
+
+    Better exception handling in houseKeeping / handlePolicyHit.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9304
+    :tickets: 9299, 9301
+
+    Take initial refresh time from loaded zone.
+
 .. changelog::
   :version: 4.3.2
   :released: 1st of July 2020