From 53179a1e3845133eb659130464097221436799fa Mon Sep 17 00:00:00 2001 From: Remi Gacogne Date: Thu, 22 May 2025 12:07:50 +0200 Subject: [PATCH] dnsdist: Add ChangeLog and update security polling zone for 2.0.0-alpha2 --- docs/secpoll.zone | 5 +- pdns/dnsdistdist/docs/changelog.rst | 297 ++++++++++++++++++++++++++++ pdns/dnsdistdist/docs/conf.py | 2 +- 3 files changed, 301 insertions(+), 3 deletions(-) diff --git a/docs/secpoll.zone b/docs/secpoll.zone index 3d02742579..2c65b39e4b 100644 --- a/docs/secpoll.zone +++ b/docs/secpoll.zone @@ -1,4 +1,4 @@ -@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025052000 10800 3600 604800 10800 +@ 86400 IN SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025052300 10800 3600 604800 10800 @ 3600 IN NS pdns-public-ns1.powerdns.com. @ 3600 IN NS pdns-public-ns2.powerdns.com. @@ -589,4 +589,5 @@ dnsdist-1.9.7.security-status 60 IN TXT "3 Upgrade dnsdist-1.9.8.security-status 60 IN TXT "3 Upgrade now, see https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-02.html" dnsdist-1.9.9.security-status 60 IN TXT "3 Upgrade now, see https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2025-03.html" dnsdist-1.9.10.security-status 60 IN TXT "1 OK" -dnsdist-2.0.0-alpha1.security-status 60 IN TXT "1 Unsupported pre-release (no known vulnerabilities)" +dnsdist-2.0.0-alpha1.security-status 60 IN TXT "3 Unsupported pre-release (known vulnerabilities)" +dnsdist-2.0.0-alpha2.security-status 60 IN TXT "1 Unsupported pre-release (no known vulnerabilities)" diff --git a/pdns/dnsdistdist/docs/changelog.rst b/pdns/dnsdistdist/docs/changelog.rst index 7caabb1bc6..8fb15463d1 100644 --- a/pdns/dnsdistdist/docs/changelog.rst +++ b/pdns/dnsdistdist/docs/changelog.rst @@ -1,6 +1,303 @@ Changelog ========= +.. changelog:: + :version: 2.0.0-alpha2 + :released: 23rd of May 2025 + + .. change:: + :tags: New Features + :pullreq: 15306 + + Add support for calling Lua methods when exiting + + .. change:: + :tags: Improvements, DNS over QUIC, DNS over HTTP3 + :pullreq: 15328 + + Upgrade Quiche to 0.23.4 in our packages + + .. change:: + :tags: Improvements + :pullreq: 15329 + + Upgrade Rust to 1.85.0 in our packages + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15330 + + Fix YAML configuration failure to build without CDB/LMDB + + .. change:: + :tags: Bug Fixes, Meson + :pullreq: 15331 + + Do not auto-enable disabled features when building with meson + + .. change:: + :tags: Bug Fixes + :pullreq: 15333 + + Fix version number in our Docker image + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15338 + + Better handling of the `dlsym` missing symbol in our Rust lib + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15351 + + Load Lua bindings before parsing YAML configuration + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15355 + + Better handling of exceptions raised during YAML parsing + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15356 + + Better handling of non-existent Lua function name in YAML + + .. change:: + :tags: Bug Fixes + :pullreq: 15362 + + Do not register Xsk sockets on configuration check or client mode + + .. change:: + :tags: New Features + :pullreq: 15376 + + Add mitigations against misbehaving TCP/TLS clients + + .. change:: + :tags: Improvements, Meson + :pullreq: 15377 + + Allow alternate location for libssl + + .. change:: + :tags: New Features, DNS over TLS, DNS over HTTPS, Performance + :pullreq: 15387 + + Share tickets key between identical frontends created via YAML + + .. change:: + :tags: New Features + :pullreq: 15388 + + Enhancement to support rule action for query timeout case (@pacnal) + + .. change:: + :tags: Bug Fixes, Meson + :pullreq: 15392 + + Do not try to get the version/path of Python if not found + + .. change:: + :tags: Bug Fixes + :pullreq: 15407 + + Fix compilation with DoH3 enabled and DoH disabled + + .. change:: + :tags: New Features, DNS over TLS, DNS over HTTPS + :pullreq: 15409 + + Add support for switching certificates based on SNI with OpenSSL + + .. change:: + :tags: Bug Fixes, Meson + :pullreq: 15416 + + Fix two issues when building with meson + + .. change:: + :tags: Improvements + :pullreq: 15419 + + Refactor the packet cache settings + + .. change:: + :tags: Improvements + :pullreq: 15423 + + Add an option to cache truncated answers + + .. change:: + :tags: Improvements + :pullreq: 15431 + + Be consistent with regard to health-check modes transition + + .. change:: + :tags: Improvements + :pullreq: 15436 + + Fix a few more cases of potentially unused arguments + + .. change:: + :tags: New Features + :pullreq: 15439 + + Support DSCP marking towards downstream server (@pacnal) + + .. change:: + :tags: Bug Fixes, DNS over QUIC, DNS over HTTP3 + :pullreq: 15440 + :tickets: 15427 + + If SONAME is present in the generated Quiche lib set it to the correct value + + .. change:: + :tags: Bug Fixes, DNSCrypt + :pullreq: 15463 + + Fix a confusion about contexts/frontends in :func:`getDNSCryptBind` + + .. change:: + :tags: Improvements + :pullreq: 15467 + + Add indicator for cache hit rules to know if hit a stale entry (@pacnal) + + .. change:: + :tags: Bug Fixes + :pullreq: 15471 + + Fix an iterator out-of-bound read when removing a TCP-only server + + .. change:: + :tags: Improvements + :pullreq: 15472 + + Reduce memory usage with fast-changing dynamic backends + + .. change:: + :tags: Bug Fixes, DNS over HTTPS, Security + :pullreq: 15480 + :tickets: 15475 + + Fix a crash when processing timeouts for incoming DoH queries + + .. change:: + :tags: Bug Fixes, DNS over HTTPS + :pullreq: 15481 + + Gracefully handle timeout/response for a closed HTTP stream + + .. change:: + :tags: Bug Fixes, YAML + :pullreq: 15496 + + Fix building with YAML enabled but without TLS support + + .. change:: + :tags: Bug Fixes + :pullreq: 15514 + + Fix memory corruption when using `getAddressInfo` + + .. change:: + :tags: Improvements + :pullreq: 15477 + + Provide runtime update API for some health check params (@pacnal) + + .. change:: + :tags: Bug Fixes + :pullreq: 15520 + + Fix building with GCC 15.1: missing ``cstdint`` include + + .. change:: + :tags: Bug Fixes, Meson + :pullreq: 15521 + :tickets: 15516 + + Don't build with ``libedit`` if disabled via meson + + .. change:: + :tags: Improvements, Metrics + :pullreq: 15524 + + Improve scalability of custom metrics + + .. change:: + :tags: Improvements + :pullreq: 15525 + + Upgrade to protozero 1.8.0 + + .. change:: + :tags: Improvements, DNS over HTTPS + :pullreq: 15526 + :tickets: 14791 + + Deprecate the ``options`` parameter of :func:`HTTPStatusAction` + + .. change:: + :tags: Bug Fixes + :pullreq: 15534 + :tickets: 15529 + + Only set the proxy protocol payload size when actually added + + .. change:: + :tags: Bug Fixes + :pullreq: 15539 + + The second parameter to :func:`setAPIWritable` is optional + + .. change:: + :tags: Bug Fixes + :pullreq: 15554 + + Fix a crash in the TCP concurrent connections map + + .. change:: + :tags: Improvements, Meson + :pullreq: 15558 + + Switch ``eBPF`` support to `auto` when building with meson + + .. change:: + :tags: Bug Fixes + :pullreq: 15563 + + Suppress a warning on macOS + + .. change:: + :tags: Bug Fixes, DNS over QUIC, DNS over HTTP3 + :pullreq: 15564 + + Two fixes to enable building on OpenBSD with QUIC enabled + + .. change:: + :tags: Bug Fixes, Meson + :pullreq: 15565 + + Fix our meson build not reaching a stable state + + .. change:: + :tags: Bug Fixes, Security + :pullreq: 15571 + + Fix a crash when TCP queries and responses keep coming + + .. change:: + :tags: Bug Fixes + :pullreq: 15573 + + Fix one potential issue and several false positives reported by Coverity + .. changelog:: :version: 1.9.10 :released: 20th of May 2025 diff --git a/pdns/dnsdistdist/docs/conf.py b/pdns/dnsdistdist/docs/conf.py index a137e14707..fe342f01e3 100644 --- a/pdns/dnsdistdist/docs/conf.py +++ b/pdns/dnsdistdist/docs/conf.py @@ -96,7 +96,7 @@ changelog_render_pullreq = "https://github.com/PowerDNS/pdns/pull/%s" changelog_render_changeset = "https://github.com/PowerDNS/pdns/commit/%s" changelog_sections = ['New Features', 'Improvements', 'Bug Fixes', 'Removals'] -changelog_inner_tag_sort = ['Security', 'DNS over QUIC', 'DNS over HTTP3', 'DNS over HTTPS', 'DNS over TLS', 'DNSCrypt', 'DNSTAP', 'Protobuf', 'Performance', 'Webserver', 'Metrics'] +changelog_inner_tag_sort = ['Security', 'DNS over QUIC', 'DNS over HTTP3', 'DNS over HTTPS', 'DNS over TLS', 'DNSCrypt', 'DNSTAP', 'Protobuf', 'Performance', 'Webserver', 'Metrics', 'Meson', 'YAML'] changelog_hide_tags_in_entry = True -- 2.47.2