From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Mon, 4 Feb 2013 07:50:03 +0000 (+0000)
Subject: update docs for 3.5-rc2
X-Git-Tag: rec-3.5-rc3~38
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ed03a3756baef081332c31ed999fd76fe9c3ebf6;p=thirdparty%2Fpdns.git

update docs for 3.5-rc2

git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@3094 d19b8d6e-7fed-0310-83ef-9ca221ded41b
---

diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml
index c7677f07ca..4b8a5cbafe 100644
--- a/pdns/docs/pdns.xml
+++ b/pdns/docs/pdns.xml
@@ -132,6 +132,28 @@
         3.4, we are skipping an actual 3.4 release to avoid confusion.
       </para>
       </note></para>
+      <para>
+        Changes between RC1 and RC2:
+        <itemizedlist>
+          <listitem>
+            <para>
+              While Recursor 3.3 was not vulnerable to the specific attack noted in
+              <ulink url="https://www.isc.org/files/imce/ghostdomain_camera.pdf">'Ghost Domain Names: Revoked Yet Still Resolvable'</ulink>,
+              further investigation showed that a variant of the attack could work. This was fixed in r3085.
+            </para>
+          </listitem>
+          <listitem>
+            <para>
+              The auth-can-lower-ttl flag was removed, as it did not have any effect in most situations, and thus
+              did not operate as advertised. We now always comply with the related parts of RFC2181. Change in
+              r3092, closing t88.
+            </para>
+          </listitem>
+        </itemizedlist>
+      </para>
+      <para>
+        Changes below are in RC1 (and up).
+      </para>
       <para>
       New features:
       <itemizedlist>