Changelogs for 4.6.x

4.6.4

Released: 9th of December 2022

This is release 4.6.4 of the Authoritative Server. It contains various small fixes.

Improvements

• docker: upgrade to bullseye

  References: pull request 11978

Bug Fixes

• pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records

  References: pull request 12303

• initialize zone cache after dropping privileges; Detect invalid bytes in makeBytesFromHex() (Kees Monshouwer)

  References: pull request 11945

• Log “NULL” for nullptr-bound properties instead of dereferencing

  References: pull request 12035

• LUA records: we only need one IsUpOracle checker thread

  References: pull request 12033

• axfr-retriever: abort on chunk with TC set

  References: pull request 12031

• use getInnerRemote() for the remotes ring

  References: pull request 11871

4.6.3

Released: 13th of July 2022

This is version 4.6.3 of the Authoritative Server. It contains a few bug fixes, and marks the appearance of Ubuntu Jammy packages for the 4.6 branch.

Bug Fixes

• fix deleteDomain() in lmdb backend (Kees Monshouwer)

  References: pull request 11765

• RFC2136: match autosplit TXT correctly

  References: pull request 11746

4.6.2

Released: 12th of April 2022

This is version 4.6.2 of the Authoritative Server. It contains a carefully selected set of new features, plus a few bug fixes.

New Features

• API: fetch individual rrsets

  References: pull request 11409

• LUA: add ifurlextup function

  References: pull request 11408

Improvements

• LMDB backports:

  • each LMDB database now gets a UUID
  • lmdbbackend can now (optionally: lmdb-random-ids) use random IDs instead of incremental IDs for objects
  • LMDB map size is now configurable (lmdb-map-size)
  • one uninitialised memory issue that was fixed

  References: pull request 11406

Bug Fixes

• fix proxy protocol query statistics and add more detailed latency metrics

  References: pull request 11407

4.6.1

Released: 25th of March 2022

This is a security fix release for PowerDNS Security Advisory 2022-01. Additionally, because CentOS 8 is End Of Life now, we have switched those builds to Oracle Linux 8. The resulting packages are compatible with RHEL and all derivatives.

Bug Fixes

• Fix validation of incremental zone transfers (IXFRs).

  References: pull request 11455

4.6.0

Released: 25th of January 2022

This is version 4.6.0 of the Authoritative Server.

This release contains a ton of improvements and bug fixes compared to 4.5, and a couple of user visible changes.

New features:

• support for incoming PROXY headers
• support for EDNS Cookies
• autoprimary management via pdnsutil and the API

Please make sure to read the upgrade notes before upgrading.

Compared to 4.6.0-rc1, this release contains a couple bug fixes and a small improvement.

Improvements

• show QType by name in log message (Chris Hofstaedtler)

  References: pull request 11206

Bug Fixes

• Fix swagger/openapi spec for new autoprimary management interface

  References: pull request 11205

• fix multiple CDS records in an AXFR (Kees Monshouwer)

  References: pull request 11220

4.6.0-rc1

Released: 14th of January 2022

This is version 4.6.0-rc1 of the Authoritative Server. This release contains a ton of improvements and bug fixes compared to 4.5, and a couple of user visible changes.

New features:

• support for incoming PROXY headers
• support for EDNS Cookies
• autoprimary management via pdnsutil and the API

Please make sure to read the upgrade notes before upgrading.

Compared to 4.6.0-beta1, this release contains one new feature (autoprimary management via API and pdnsutil) and a bunch of bug fixes.

New Features

• add autoprimary management in API & pdnsutil

  References: pull request 11161

Improvements

• add zone removal to the zone cache (Kees Monshouwer)

  References: pull request 11160

• docker images: Remove capability requirements

  References: pull request 11093

Bug Fixes

• pdnsutil edit-zone: fix n and e behaviour on increase-serial prompt

  References: pull request 11145

• lmdb: check if the lookup name is part of the zone (Kees Monshouwer)

  References: pull request 11159

• lmdb: fix records removal in deleteDomain(); improve tcp exception handling

  References: pull request 11139

4.6.0-beta1

Released: 9th of December 2021

This is version 4.6.0-beta1 of the Authoritative Server. This release contains a ton of improvements and bug fixes compared to 4.5, and a couple of user visible changes.

New features:

• support for incoming PROXY headers
• support for EDNS Cookies

Please make sure to read the upgrade notes before upgrading.

Compared to 4.6.0-alpha1, the major user visible change is the new NSEC3PARAM settings (again, see the upgrade docs). Besides that, see below for various fixes.

Improvements

• pdnsutil: skip SHA1 DSes except in verbose mode

  References: pull request 11067

• add zone to zone cache on flush API endpoint

  References: pull request 11066

• new default nsec3param settings

  References: pull request 11012

• api, check qtype location (Kees Monshouwer)

  References: pull request 10959

• put some json on /api/v1

  References: pull request 10865

• Add more UDP error metrics (checksum, IPv6)

  References: pull request 10919

• ZoneParserTNG: Stricter checks when loading a zone file

  References: pull request 10901

• Implement fd-usage metric for OpenBSD

  References: pull request 10891

Bug Fixes

• prevent bind-hybrid+zone-cache

  References: pull request 11068

• Condition to HAVE_SYSTEMD_WITH_RUNTIME_DIR_ENV is reversed. During build, the runtime directory in the service files for virtual-hosting are now correctly generated.

  References: pull request 10982

• dnsupdate/2136: apply new TTL to whole RRset, not only to the added record

  References: pull request 10981

• bindbackend: skip rejected zones during list and search

  References: pull request 10941

• make the zone cache more robust for bad data and save some SOA queries for DNSSEC zones (Kees Monshouwer)

  References: pull request 10963

• improve dnsname exception handling for SOA records (Kees Monshouwer)

  References: pull request 10951

4.6.0-alpha1

Released: 7th of October 2021

This is version 4.6.0-alpha1 of the Authoritative Server. This release contains a ton of improvements and bug fixes compared to 4.5, and a couple of user visible changes.

New features:

• support for incoming PROXY headers
• support for EDNS Cookies

Please make sure to read the upgrade notes before upgrading.

New Features

• Implement EDNS cookies

  References: pull request 10289

• incoming PROXY support

  References: pull request 10660

Improvements

• SVCB: Accept known SVCParams in generic format

  References: pull request 10727

• Convert locks to LockGuarded

  References: pull request 10653

• Move to hashed passwords for the web interface

  References: pull request 10157

• remove randombackend (Kees Monshouwer)

  References: pull request 10484

• remove attodot feature; fixes #10254

  References: pull request 10780

• auth NOTIFY: log names of NSes we could not resolve

  References: pull request 10562

• pdns_control man page: fix copy+paste for decrypt (Josh Soref)

  References: pull request 10779

• Gracefully handle uncaught exceptions in the UDP path

  References: pull request 10770

• add cookie counters (Kees Monshouwer)

  References: pull request 10749

Bug Fixes

• lmdb-safe: resizing while there might be open transactions is unsafe

  References: pull request 10672

• checkKey: handle NULL error string from OpenSSL more gracefully

  References: pull request 10642

• improve SOA parse exception handling (Kees Monshouwer)

  References: pull request 10788

• try to reload rejected zones in bind-backend (Kees Monshouwer)

  References: pull request 10748

• send YXDOMAIN for too long DNAME synth

  References: pull request 10231