Prep for rec-4.5.6

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 9e928b6db3440453fc11d2a9f0dabb17a49689f3..a59e0f9ad8e3b0acf54ead3714127e1e6f46a0f6 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021100801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021101101 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -274,6 +274,7 @@ recursor-4.5.2.security-status                          60 IN TXT "1 OK"
 recursor-4.5.3.security-status                          60 IN TXT "2 Unsupported pre-release"
 recursor-4.5.4.security-status                          60 IN TXT "1 OK"
 recursor-4.5.5.security-status                          60 IN TXT "1 OK"
+recursor-4.5.6.security-status                          60 IN TXT "1 OK"
 recursor-4.6.0-alpha1.security-status                   60 IN TXT "1 OK"
 
 ; Recursor Debian

diff --git a/pdns/recursordist/docs/changelog/4.5.rst b/pdns/recursordist/docs/changelog/4.5.rst
index f674fa78d19d6f2bc0ebd789d4140771317ad7e9..c448c60a9041eaf44be1d907afda380f083fc55d 100644 (file)
--- a/pdns/recursordist/docs/changelog/4.5.rst
+++ b/pdns/recursordist/docs/changelog/4.5.rst
@@ -1,6 +1,73 @@
 Changelogs for 4.5.X
 ====================
 
+.. changelog::
+  :version: 4.5.6
+  :released: 11th of October 2021
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10806
+    :tickets: 10565
+
+    Do not use DNSKEYs found below an apex for validation.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10807
+    :tickets: 10622
+
+    Detect a loop when the denial of the DS comes from the child zone.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10809
+    :tickets: 10632
+
+    Match ordering of PacketID using the Birthday vs non-Birthday comparator used to detect spoofing attempts.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10811
+    :tickets: 10633
+
+    Pass the Lua context to follow up queries (follow CNAME, dns64).
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10813
+    :tickets: 10718
+
+    Only the DNAME records are authoritative in DNAME answers.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10803
+    :tickets: 10768
+
+    Use the correct RPZ policy name for statistics when loading via XFR.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10717
+    :tickets: 10701
+
+    Fix the aggressive cache returning duplicated NSEC3 records.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10655
+    :tickets: 10643
+
+    NS from the cache could be a forwarder, take that into account for throttling decision.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10629
+    :tickets: 10627
+
+    Check in more places if the policy has been updated before using or modifying it.
+
 .. changelog::
   :version: 4.5.5
   :released: 30th of July 2021