From 06fe0f7061ca7dff3ab2caaa932ca1f4bc845af7 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Oto=20=C5=A0=C5=A5=C3=A1va?= Date: Tue, 16 Apr 2024 13:58:31 +0200 Subject: [PATCH] NEWS: reword of Prometheus changes --- NEWS | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index 5760aa03a..539148f16 100644 --- a/NEWS +++ b/NEWS @@ -4,8 +4,11 @@ Knot Resolver 6.0.8 (2024-0m-dd) Improvements ------------ - TLS (DoT, DoH): respect crypto policy overrides in OS (!1526) -- manager: export metrics to JSON format (default) via management HTTP API (!1527) - * export metrics to Prometheus format is optional feature +- manager: export metrics to JSON via management HTTP API (!1527) + + * JSON is the new default metrics output format + * the ``prometheus-client`` Python package is now an optional dependency, + required only for Prometheus export to work Knot Resolver 6.0.7 (2024-03-27) @@ -40,6 +43,7 @@ Knot Resolver 6.0.6 (2024-02-13) Security -------- - CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU + * validator: lower the NSEC3 iteration limit (150 -> 50) * validator: similarly also limit excessive NSEC3 salt length * cache: limit the amount of work on SHA1 in NSEC3 aggressive cache -- 2.47.2