From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 21 May 2026 08:50:01 +0000 (+0200)
Subject: dnsdist: Update ChangeLog and security polling zone for 2.0.6
X-Git-Tag: auth-5.1.0~32^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d2c3b1b34a03aa8f6dfcf2f51bba90d8a44f2b52;p=thirdparty%2Fpdns.git

dnsdist: Update ChangeLog and security polling zone for 2.0.6

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
---

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 6c4cbbf5a4..6451994033 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026052001 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026052101 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -656,6 +656,7 @@ dnsdist-2.0.2.security-status                              60 IN TXT "3 Upgrade
 dnsdist-2.0.3.security-status                              60 IN TXT "3 Upgrade now, see https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html"
 dnsdist-2.0.4.security-status                              60 IN TXT "1 OK"
 dnsdist-2.0.5.security-status                              60 IN TXT "1 OK"
+dnsdist-2.0.6.security-status                              60 IN TXT "1 OK"
 dnsdist-2.1.0-alpha1.security-status                       60 IN TXT "2 Superseded pre-release"
 dnsdist-2.1.0-beta1.security-status                        60 IN TXT "2 Superseded pre-release"
 dnsdist-2.1.0-beta2.security-status                        60 IN TXT "1 Unsupported pre-release"
diff --git a/pdns/dnsdistdist/docs/changelog.rst b/pdns/dnsdistdist/docs/changelog.rst
index af557bb910..8ceb9a1c05 100644
--- a/pdns/dnsdistdist/docs/changelog.rst
+++ b/pdns/dnsdistdist/docs/changelog.rst
@@ -1,6 +1,142 @@
 Changelog
 =========
 
+.. changelog::
+  :version: 2.0.6
+  :released: 21st of May 2026
+
+ .. change::
+    :tags: Bug Fixes
+    :pullreq: 17336
+
+    Fix invalid TCP rate limiting computation
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17338
+
+    Bail out when a ``NULL`` pointer is passed to ``dnsdist_ffi_dnsquestion_get_proxy_protocol_values``
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17340
+
+    Fix ``BPFFilter::addRangeRule``
+
+  .. change::
+    :tags: Bug Fixes, Webserver
+    :pullreq: 17343
+
+    Maintain a "current size of received body" counter.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17345
+
+    Fix clang-tidy warnings
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17346
+
+    Also apply UDP socket buffer sizes to backend sockets
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17349
+
+    Make code boost-1.91 compatible
+
+  .. change::
+    :tags: Bug Fixes, YAML
+    :pullreq: 17404
+
+    Fix XSK configuration via YAML
+
+  .. change::
+    :tags: Bug Fixes, DNS over TLS, DNS over HTTPS
+    :pullreq: 17407
+
+   Fix outgoing TLS session cache cleanup
+
+  .. change::
+    :tags: Bug Fixes, Metrics
+    :pullreq: 17409
+
+    Fix the dynamic block top suffixes counters computation
+
+  .. change::
+    :tags: Bug Fixes, Performance
+    :pullreq: 17411
+
+    Compute a less inaccurate number of DNS records to pass to ``reserve()``
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17412
+
+    Fix DownstreamState::setHealthCheckParams
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17415
+
+    Fix a data race on concurrent CDB KVS lookups
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17416
+
+    Fix a few issues in our AF_XDP/XSK code
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17419
+
+    Fixes several eBPF issues
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17420
+
+    Better handling of exceptions
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17423
+
+    Fix two small EDNS addition related bugs
+
+  .. change::
+    :tags: Bug Fixes, Metrics
+    :pullreq: 17425
+
+    snmp-agent: Fix a memory leak
+
+  .. change::
+    :tags: Bug Fixes, DNS over QUIC
+    :pullreq: 17427
+
+    Check the DoQ query size against the received size
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17429
+
+    More minor fixes
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17432
+
+    Keep concurrent connection entries for live connections
+
+  .. change::
+    :tags: Bug Fixes, YAML
+    :pullreq: 17434
+
+    Ignore invalid backend weight coming from YAML
+
 .. changelog::
   :version: 2.0.5
   :released: 23rd of April 2026