9559837fb3
Changelog for 4.4.0:
Released: 19th of October 2020
Bug Fixes
- Backport of CVE-2020-25829: Cache pollution.
Changelog for 4.4.0-rc2:
Released: 6th of October 2020
Improvements:
- Don’t parse any config with –version.
- Expose typed cache flush via Web API.
- Log when going Bogus because of a missing SOA in authority.
- Raise an exception on invalid content in unknown record.
Bug Fixes:
- When deciding if we are auth in the local auth or forwarding case, DS is
special.
- Fix wipe-cache-typed.
- Watch the descriptor again after an out-of-order read timeout.
Changelog for 4.4.0-rc1:
Released: 21st of September 2020
Bug Fixes:
- Only do QName Minimization for the names inside a forwarded domain.
- Fix the parsing of dont-throttle-netmasks in the presence of
dont-throttle-names.
Changelog for 4.4.0-beta1:
Released: 31st of August 2020
Improvements:
- Store RPZ trigger and hit in appliedPolicy and protobuf message and log
them in the trace log.
- Apply filtering policies (RPZ) on CNAME chains as well.
- Fix warning: initialized lambda captures are a C++14 extension.
- Clean some coverity reported cases of exceptions thrown but not caught.
- Export record cache lock (contention) stats via the various channels.
- Allow multiple local data records when doing RPZ IP matching.
- Replace the use of ‘1’ by QClass::IN to improve readability.
- Avoid name clashes on Solaris derived systems.
Bug Fixes:
- Allow some more depth headroom for the no-qname-minimization fallback case.
- If we have an NS in cache, use it in the forwarder case.
- Disable outgoing v4 when query-local-address has no v4 addresses.
- Resize hostname to final size in getCarbonHostname() (Aki Tuomi).
Changelog for 4.4.0-alpha2:
Released: 20th of July 2020
Improvements:
- Check that DNSKEYs have the zone flag set.
- Remove redundant toLogString() calls (Chris Hofstaedtler).
- Stop cluttering the global namespace with validation states.
- Use explicit flag for the specific version of c++ we’re targeting.
- Use new operator to print states.
- Refuse QType 0 right away, based on rfc6895 section 3.1.
- Specify a storage type for validation states.
- Common TCP write problems should only be logged if wanted.
- Dump the authority records of a negative cache entry as well.
- Alternative way to do “skip cname check” for DS and DNSKEY records
- Control stack depth when priming.
- Add version ‘statistic’ to prometheus.
- Cleanup cache cleaner pruneCollection function.
- RPZ policy should override gettag_ffi answer by default.
- Don’t copy the records when scanning for CNAME loops.
- Do not use using namespace std; .
- More sophisticated CNAME loop detection.
- Use std::string_view when available (Rosen Penev).
- Make sure we can install unsigned packages.
- Clarify docs (Josh Soref).
- Ensure runtime dirs for virtual services differ.
- Builder: improve shipped config files (Chris Hofstaedtler).
- Less negatives in error messages improves readability.
- Boost 1.73 moved boost::bind placeholders to the placeholders namespace.
- Fix useless copies in loop reported by clang++ 10.
- NetmaskTree: do not test node for null, the loop guarantees node is not
null.
- Wrap pthread objects
- Get rid of a naked pointer in the /dev/poll event multiplexer.
- Random engine.
Bug Fixes:
- Update proxy-protocol.cc (ihsinme).
- Kill an signed vs unsigned warning on OpenBSD.
- Don’t validate a NXD with a NSEC proving that the name is an ENT.
- Fix three shared cache issues.
- Limit the TTL of RRSIG records as well.
- Avoid throwing an exception in Logger::log().
Changelog for 4.4.0-alpha1:
Released: 22th of April 2020
New Features:
- Implement native DNS64 support, without Lua.
- Add custom tags to RPZ hits.
- Allow attaching a ‘routing’ tag string to a query in lua code and use that
tag in the record cache when appropriate.
- Share record cache between threads.
- Add support for Proxy Protocol between dnsdist and the recursor.
Improvements:
- Fix warnings with llvm10 and -Wrange-loop-construct (Kirill Ponomarev).
- Fix compilation without deprecated OpenSSL APIs (Rosen Penev).
- Detect {Libre,Open}SSL functions availability during configure.
- Better handling of reconnections in Remote Logger.
- Add ‘queue full’ metrics for our remote logger, log at debug only.
- Update boost.m4
- Keep a masked network in the Netmask class.
- Replace include guard ifdef/define with pragma once (Chris Hofstaedtler).
- YaHTTP: Support bracketed IPv6 addresses
- Rework NetmaskTree for better CPU and memory efficiency (Stephan Bosch).
- RPZ dumpFile/seedFile: store/get SOA refresh on dump/load.
- Add ‘IO wait’ and ‘steal’ metrics on Linux.
- DNSName: Don’t call strlen() when the length is already known.
- Fix build with gcc-10 (Sander Hoentjen).
Bug Fixes
- Fix compilation of the ports event multiplexer.
- Init zone’s d_priority field.
- QName Minimization sometimes uses 1 label too many.
11 lines
774 B
Text
11 lines
774 B
Text
$NetBSD: distinfo,v 1.35 2020/10/19 14:36:56 otis Exp $
|
|
|
|
SHA1 (pdns-recursor-4.4.0.tar.bz2) = a53e23891110ac646249ec03f0571a693c730e9e
|
|
RMD160 (pdns-recursor-4.4.0.tar.bz2) = 3cb8c711628c26519a6031f42f53a878c61d3401
|
|
SHA512 (pdns-recursor-4.4.0.tar.bz2) = 06ec7788510b656ee8e08e54d989d8789685a3acb8b11172aff5de21bff493227368bbfca8203c56853da97d209facc4d88005b4b565a5986788a1b5f16a9fb6
|
|
Size (pdns-recursor-4.4.0.tar.bz2) = 1395544 bytes
|
|
SHA1 (patch-dns.hh) = 7e9c1b10a066a605b74ebdbee2d894aed50f6c68
|
|
SHA1 (patch-ext_json11_json11.cpp) = 2de8ea8b51556bd3e3c1a88f681697eff239ab1a
|
|
SHA1 (patch-iputils.cc) = a7a25d76293bc2e68efc749c661ae1595167fab7
|
|
SHA1 (patch-qtype.hh) = f14eb9ad7efc7dd4a0ce220c1f93044ef69e99c2
|
|
SHA1 (patch-version.cc) = 26226a02198edd9d8890a5199ee5a8051334fe41
|