-@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026022301 10800 3600 604800 10800
+@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026030901 10800 3600 604800 10800
@ 3600 IN NS pdns-public-ns1.powerdns.com.
@ 3600 IN NS pdns-public-ns2.powerdns.com.
recursor-5.3.5.security-status 60 IN TXT "1 OK"
recursor-5.4.0-alpha1.security-status 60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
recursor-5.4.0-beta1.security-status 60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
-recursor-5.4.0-rc1.security-status 60 IN TXT "1 Unsupported pre-release"
+recursor-5.4.0-rc1.security-status 60 IN TXT "2 Superseded pre-release"
+recursor-5.4.0.security-status 60 IN TXT "1 OK"
; Recursor Debian
recursor-3.6.2-2.debian.security-status 60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/recursor/appendices/EOL.html"
Older releases are marked end of life and receive no updates at all.
Pre-releases do not receive immediate security updates.
-The currently supported release train of the PowerDNS Recursor is 5.3.
+The currently supported release train of the PowerDNS Recursor is 5.4.
-PowerDNS Recursor 5.2 will only receive critical updates and will be End of Life one year after PowerDNS Recursor 5.3 was released.
+PowerDNS Recursor 5.3 will only receive critical updates and will be End of Life one year after PowerDNS Recursor 5.4 was released.
-PowerDNS Recursor 5.1 will only receive critical updates and will be End of Life one year after PowerDNS Recursor 5.2 was released.
+PowerDNS Recursor 5.2 will only receive critical updates and will be End of Life one year after PowerDNS Recursor 5.3 was released.
-PowerDNS Recursor 5.0, 4.x, 3.x, and 2.x are End of Life.
+PowerDNS Recursor 5.1, 5.0, 4.x, 3.x, and 2.x are End of Life.
Please refer to the support `commitment <https://www.powerdns.com/support-commitment>`_ for details on which versions are supported.
Before upgrading, it is advised to read the :doc:`../upgrade`.
+.. changelog::
+ :version: 5.4.0
+ :released: 9th of March 2026 with no changes since 5.4.0-rc1 except the version.
+
.. changelog::
:version: 5.4.0-rc1
:released: 17th of February 2026
Base64 tidy and unit test fix.
+ .. change::
+ :tags: Bug Fixes
+ :pullreq: 16810
+
+ Correctly compute DNSSEC public key exponent lengths when larger than 255.
+
.. change::
:tags: Improvements
:pullreq: 16826
Limit packet and record cache entry size (SA 2026-01).
-
-
.. changelog::
:version: 5.4.0-beta1
:released: 27th of January 2026