From: Otto Moerbeek <otto.moerbeek@open-xchange.com>
Date: Tue, 14 Jul 2020 11:45:50 +0000 (+0200)
Subject: Prep for upcoming July 17th 2020 release.
X-Git-Tag: dnsdist-1.5.0~13^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=81bacff198a88d5c1100029ec8f2f8856cba9186;p=thirdparty%2Fpdns.git

Prep for upcoming July 17th 2020 release.
---

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index e334e4bd8d..bd89e5d9d2 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020070701 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020071701 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -212,6 +212,7 @@ recursor-4.2.0.security-status                          60 IN TXT "3 Upgrade now
 recursor-4.2.1.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html"
 recursor-4.2.2.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html"
 recursor-4.2.3.security-status                          60 IN TXT "1 OK"
+recursor-4.2.4.security-status                          60 IN TXT "1 OK"
 recursor-4.3.0-alpha1.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 recursor-4.3.0-alpha2.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 recursor-4.3.0-alpha3.security-status                   60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
@@ -222,6 +223,7 @@ recursor-4.3.0-rc2.security-status                      60 IN TXT "3 Unsupported
 recursor-4.3.0.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html"
 recursor-4.3.1.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html"
 recursor-4.3.2.security-status                          60 IN TXT "1 OK"
+recursor-4.3.3.security-status                          60 IN TXT "1 OK"
 recursor-4.4.0-alpha1.security-status                   60 IN TXT "1 OK"
 
 ; Recursor Debian
diff --git a/pdns/recursordist/docs/changelog/4.2.rst b/pdns/recursordist/docs/changelog/4.2.rst
index 3122f63cf5..c92986639f 100644
--- a/pdns/recursordist/docs/changelog/4.2.rst
+++ b/pdns/recursordist/docs/changelog/4.2.rst
@@ -1,5 +1,44 @@
 Changelogs for 4.2.x
 ====================
+.. changelog::
+  :version: 4.2.4
+  :released: 17th of July 2020
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9334
+    :tickets: 9309
+
+    Validate cached dnskeys against the dss, not the rrsigs only.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9333
+    :tickets: 9297
+
+    Ignore cache-only for dnskeys/ds retrieval.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9332
+    :tickets: 9292
+
+    A servfail while retrieving ds/dnskey records is just that.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9331
+    :tickets: 9188
+
+    Refuse ds records received from child zones.
+
+  .. change::
+    :tags: XXXXXX
+    :pullreq: 9306
+    :tickets: 9268
+
+    Better exception handling in housekeeping / handlepolicyhit.
+
 .. changelog::
   :version: 4.2.3
   :released: 1st of July 2020
diff --git a/pdns/recursordist/docs/changelog/4.3.rst b/pdns/recursordist/docs/changelog/4.3.rst
index bc8e0cce18..2b29d87a00 100644
--- a/pdns/recursordist/docs/changelog/4.3.rst
+++ b/pdns/recursordist/docs/changelog/4.3.rst
@@ -1,5 +1,51 @@
 Changelogs for 4.3.x
 ====================
+.. changelog::
+  :version: 4.3.3
+  :released: 17th of July 2020
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9330
+    :tickets: 9309
+
+    Validate cached DNSKEYs against the DSs, not the RRSIGs only.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9329
+    :tickets: 9297
+
+    Ignore cache-only for DNSKEYs and DS retrieval.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9328
+    :tickets: 9292
+
+    A ServFail while retrieving DS/DNSKEY records is just that.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9327
+    :tickets: 9188
+
+    Refuse DS records received from child zones 
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9305
+    :tickets: 9268
+
+    Better exception handling in houseKeeping / handlePolicyHit.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9304
+    :tickets: 9299, 9301
+
+    Take initial refresh time from loaded zone.
+
 .. changelog::
   :version: 4.3.2
   :released: 1st of July 2020