From: Oto Šťáva Date: Tue, 16 Apr 2024 11:58:31 +0000 (+0200) Subject: NEWS: reword of Prometheus changes X-Git-Tag: v6.0.8~27^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=06fe0f7061ca7dff3ab2caaa932ca1f4bc845af7;p=thirdparty%2Fknot-resolver.git NEWS: reword of Prometheus changes --- diff --git a/NEWS b/NEWS index 5760aa03a..539148f16 100644 --- a/NEWS +++ b/NEWS @@ -4,8 +4,11 @@ Knot Resolver 6.0.8 (2024-0m-dd) Improvements ------------ - TLS (DoT, DoH): respect crypto policy overrides in OS (!1526) -- manager: export metrics to JSON format (default) via management HTTP API (!1527) - * export metrics to Prometheus format is optional feature +- manager: export metrics to JSON via management HTTP API (!1527) + + * JSON is the new default metrics output format + * the ``prometheus-client`` Python package is now an optional dependency, + required only for Prometheus export to work Knot Resolver 6.0.7 (2024-03-27) @@ -40,6 +43,7 @@ Knot Resolver 6.0.6 (2024-02-13) Security -------- - CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU + * validator: lower the NSEC3 iteration limit (150 -> 50) * validator: similarly also limit excessive NSEC3 salt length * cache: limit the amount of work on SHA1 in NSEC3 aggressive cache