From: Otto Moerbeek Date: Wed, 6 Mar 2024 13:11:16 +0000 (+0100) Subject: rec: prep for 5.0.3, 4.9.4 and 4.8.7 X-Git-Tag: dnsdist-1.10.0-alpha0~13^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=19fcc924614ac3bc27d90be59647a5dbff94ac46;p=thirdparty%2Fpdns.git rec: prep for 5.0.3, 4.9.4 and 4.8.7 --- diff --git a/docs/secpoll.zone b/docs/secpoll.zone index 50ae02b78c..f189d819c5 100644 --- a/docs/secpoll.zone +++ b/docs/secpoll.zone @@ -1,4 +1,4 @@ -@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024021601 10800 3600 604800 10800 +@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2024030700 10800 3600 604800 10800 @ 3600 IN NS pdns-public-ns1.powerdns.com. @ 3600 IN NS pdns-public-ns2.powerdns.com. @@ -358,6 +358,7 @@ recursor-4.8.3.security-status 60 IN TXT "3 Upgrade now recursor-4.8.4.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html" recursor-4.8.5.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html" recursor-4.8.6.security-status 60 IN TXT "1 OK" +recursor-4.8.7.security-status 60 IN TXT "1 OK" recursor-4.9.0-alpha1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" recursor-4.9.0-beta1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" recursor-4.9.0-rc1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" @@ -365,6 +366,7 @@ recursor-4.9.0.security-status 60 IN TXT "3 Upgrade now recursor-4.9.1.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html" recursor-4.9.2.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html" recursor-4.9.3.security-status 60 IN TXT "1 OK" +recursor-4.9.4.security-status 60 IN TXT "1 OK" recursor-5.0.0-alpha1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" recursor-5.0.0-alpha2.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" recursor-5.0.0-beta1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" @@ -373,6 +375,7 @@ recursor-5.0.0-rc2.security-status 60 IN TXT "3 Unsupported recursor-5.0.0.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" recursor-5.0.1.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html" recursor-5.0.2.security-status 60 IN TXT "1 OK" +recursor-5.0.3.security-status 60 IN TXT "1 OK" ; Recursor Debian recursor-3.6.2-2.debian.security-status 60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/" diff --git a/pdns/recursordist/docs/changelog/4.8.rst b/pdns/recursordist/docs/changelog/4.8.rst index dfc66fd634..a09aab1680 100644 --- a/pdns/recursordist/docs/changelog/4.8.rst +++ b/pdns/recursordist/docs/changelog/4.8.rst @@ -1,5 +1,35 @@ Changelogs for 4.8.X ==================== +.. changelog:: + :version: 4.8.7 + :released: 7th of March 2024 + + .. change:: + :tags: Bug Fixes + :pullreq: 13797 + :tickets: 13353 + + If serving stale, wipe CNAME records from cache when we get a NODATA negative response for them. + + .. change:: + :tags: Bug Fixes + :pullreq: 13799 + + Fix the zoneToCache regression introduced by SA 2024-01. + + .. change:: + :tags: Bug Fixes + :pullreq: 13854 + :tickets: 13847 + + Fix gathering of denial of existence proof for wildcard-expanded names. + + .. change:: + :tags: Improvements + :pullreq: 13796 + :tickets: 13387 + + Update new b-root-server.net addresses in built-in hints. .. changelog:: :version: 4.8.6 diff --git a/pdns/recursordist/docs/changelog/4.9.rst b/pdns/recursordist/docs/changelog/4.9.rst index 40d819f987..ac93382f90 100644 --- a/pdns/recursordist/docs/changelog/4.9.rst +++ b/pdns/recursordist/docs/changelog/4.9.rst @@ -1,6 +1,37 @@ Changelogs for 4.9.X ==================== +.. changelog:: + :version: 4.9.4 + :released: 7th of March 2024 + + .. change:: + :tags: Bug Fixes + :pullreq: 13853 + + Fix gathering of denial of existence proof for wildcard-expanded names. + + .. change:: + :tags: Bug Fixes + :pullreq: 13795 + :tickets: 13788 + + Fix the zoneToCache regression introduced by SA 2024-01. + + .. change:: + :tags: Improvements + :pullreq: 13793 + :tickets: 13387, 12897 + + Update new b-root-server.net addresses in built-in hints. + + .. change:: + :tags: Bug Fixes + :pullreq: 13792 + :tickets: 13543 + + A single NSEC3 record covering everything is a special case. + .. changelog:: :version: 4.9.3 :released: 13th of February 2024 diff --git a/pdns/recursordist/docs/changelog/5.0.rst b/pdns/recursordist/docs/changelog/5.0.rst index 000d37e9a5..7b495c8a65 100644 --- a/pdns/recursordist/docs/changelog/5.0.rst +++ b/pdns/recursordist/docs/changelog/5.0.rst @@ -3,6 +3,38 @@ Changelogs for 5.0.X Before upgrading, it is advised to read the :doc:`../upgrade`. +.. changelog:: + :version: 5.0.3 + :released: 7th of March 2024 + + .. change:: + :tags: Improvements + :pullreq: 13845 + :tickets: 13824 + + Log if a DNSSEC related limit was hit if log_bogus is set. + + .. change:: + :tags: Improvements + :pullreq: 13846 + :tickets: 13830 + + Reduce RPZ memory usage by not keeping the initially loaded RPZs in memory. + + .. change:: + :tags: Bug Fixes + :pullreq: 13852 + :tickets: 13847 + + Fix gathering of denial of existence proof for wildcard-expanded names. + + .. change:: + :tags: Bug Fixes + :pullreq: 13791 + :tickets: 13788 + + Fix the zoneToCache regression introduced by SA 2024-01. + .. changelog:: :version: 5.0.2 :released: 13th of February 2024 diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst index da559a483f..8b5164e1d9 100644 --- a/pdns/recursordist/docs/upgrade.rst +++ b/pdns/recursordist/docs/upgrade.rst @@ -4,7 +4,14 @@ Upgrade Guide Before upgrading, it is advised to read the :doc:`changelog/index`. When upgrading several versions, please read **all** notes applying to the upgrade. -5.0.1 to 5.0.2 and master, 4.9.2 to 4.9.3 and 4.8.5 to 4.8.6 +5.0.2 to 5.0.3 and master, 4.9.3 to 4.9.4 and 4.8.6 to 4.8.7 +------------------------------------------------------------ + +Known Issue Solved +^^^^^^^^^^^^^^^^^^ +The DNSSEC validation issue with the :func:`zoneToCache` function has been resolved and workarounds can be removed. + +5.0.1 to 5.0.2, 4.9.2 to 4.9.3 and 4.8.5 to 4.8.6 ------------------------------------------------------------ Known Issues