Changelogs for 5.0.x

5.0.2

Released: 11th of December 2025

This is release 5.0.2 of the Authoritative Server. It contains bug fixes and a minor feature.

Please review the Upgrade Notes before upgrading from versions < 5.0.x.

New Features

• allow finer-grained rrset changes through the API

  References: #16589, pull request 16599

Bug Fixes

• m4/pdns_check_libcrypto: fix ecdsa/eddsa includedir (famfo)

  References: #16538, pull request 16603

• add missing catch block for STL exceptions in createForward

  References: #16564, pull request 16566

• REST API: bring back 404 errors

  References: #16059, pull request 16532

• Give backends the ability to perform extra actions during zone rectify

  References: #15894, #16499, pull request 16512

• meson build: restore original binary names

  References: #16401, pull request 16486

• sdist: copy files as files, not as new dirs

  References: #16398, pull request 16466

5.0.1

Released: 30th of October 2025

This is release 5.0.1 of the Authoritative Server. It contains minor bugfixes and improvements over the 5.0.0 release, and one new feature for LMDB users.

Please review the Upgrade Notes before upgrading from versions < 5.0.x.

New Features

• lmdb: optional memory-only freshness check and notification timestamps

  References: pull request 16147, pull request 16355

Improvements

• Allow selecting a specific version of Lua with meson

  References: pull request 16358

• add missing meson build machinery files to auth source tarballs

  References: pull request 16211, pull request 16357

• Fix Boost system lib dependency: it is no longer available since 1.89

  References: pull request 16143

Bug Fixes

• api: relax zone name check in view removal

  References: pull request 16360

• Prevent a potential race condition in cache cleaning

  References: pull request 16359

• pdnsutil: fix b2b-migrate from sql to non-sql

  References: pull request 16356

• LUA shared exec: reset exec limit for every invocation

  References: pull request 16354

• Fix EDNS Cookie & Proxy protocol

  References: pull request 16353

• auth views: perform character set validation of view names

  References: pull request 16210

5.0.0

Released: 22nd of August 2025

This is release 5.0.0 of the Authoritative Server. It contains minor bugfixes and improvements over the 5.0.0-beta1 release.

New Features

• Auth: random edns cookies

  References: #15941, pull request 15948

Improvements

• Update pdnsutil.bash_completion.d (Cybertinus)

  References: pull request 14927

• SVCB: allow parsing keys in generic format without value (Chris Hofstaedtler)

  References: pull request 15603

5.0.0-beta1

Released: 24th of July 2025

This is release 5.0.0-beta1 of the Authoritative Server. It contains various bugfixes and improvements over the 5.0.0-alpha1 release, as well as RFC2136 support for the LMDB backend.

New Features

• Provide record timestamps in the API

  References: pull request 15867

• Add record search capability to the LMDB backend

  References: #14079, pull request 15827

• Rework pdnsutil command syntax for more consistency and future flexibility

  References: pull request 15704

• Delete existing matching zones during (re)import (Jamie (Bear) Murphy )

  References: pull request 15855

• Pdnsutil {add-record,delete-rrset}: require NAME to be absolute (Uwe Kleine-König)

  References: pull request 14984, pull request 15849

• Auth feature: RFC9615 (authenticated DNSSEC bootstrapping) (Peter Thomassen)

  References: pull request 14074, pull request 15863

• Lmdb rfc2136 support

  References: #11611, #11612, pull request 15786

• Rec and auth: implement stop command as alias for quit(-nicely)

  References: #15674, pull request 15686

Improvements

• Auth: Use arc4random in TSIG generation

  References: pull request 15763

• Auth LMDB: attempt to have predictable IDs

  References: pull request 15698

• [tools] Let pdnsutil always set up a SOA-EDIT-API metadata when creating zones

  References: #9096, pull request 15417

• Increase zone serial number after zone key operations

  References: #11733, pull request 15669

• Do not use system(3) in pdnsutil

  References: pull request 15581

• Suggest create-zone after view-add-zone of a nonexisting zone

  References: pull request 15604

• Compute LOC text representation without using floating point for latitude and longitude

  References: #10558, pull request 15221

Bug Fixes

• LMDB: honour map-size for all files

  References: #12901, pull request 15677

• Provide an IP_OFFMASK value for systems lacking it

  References: #8060, pull request 15679

• Packet Cache fixes for views

  References: pull request 15609

• Fixes zone2sql include with a comment (replacement PR) (Jamie (Bear) Murphy )

  References: pull request 15854

• Pdnsutil: clarify provenance of default TTL (Jan-Piet Mens)

  References: pull request 15665

• [tools] Honour default-ttl in pdnsutil load-zone

  References: #8494, pull request 15389

• Remove old FSF address (Chris Hofstaedtler)

  References: pull request 15865

• Fix INCEPTION-INCREMENT documentation to match code behavior (@Darwin4053)

  References: pull request 15834

• Docs: zone: modified_at is a separate property when updating RRSets (Uwe Kleine-König)

  References: pull request 15836

• Lmdb NSEC3 record handling hygiene bugfixes

  References: #11611, #11612, #15767, pull request 15767, pull request 15791, pull request 15798

• Pdns: Fix pdnsutil cross-references (Bagas Sanjaya)

  References: pull request 15793

• Auth docker: avoid crash on –version caused by doubly loaded modules

  References: pull request 15594

5.0.0-alpha1

Released: 27th of May 2025

This is release 5.0.0-alpha1 of the Authoritative Server. The major new feature in 5.0.0 is Views support. Besides that, this release also contains a long list of other improvements.

New Features

• new feature: Views

  References: pull request 15393, pull request 15421, pull request 15441, pull request 15470, pull request 15512

• webserver Unix socket support (tacerus)

  References: pull request 15265

• sdig: implement cookie support

  References: pull request 15140

• lua records: new option to set the http status code to match in ifurlup function

  References: pull request 15127

• Add a “failOnIncompleteCheck” option to if*up Lua functions

  References: pull request 15098

• Provide additional answers in NAPTR queries

  References: pull request 15083, pull request 15253

• allow turning off across-zone resolving (zeha)

  References: pull request 14604

• added a new config for direct queries of dnskey signature (d-wibowo)

  References: pull request 14581

• pdnsutil: Add backend-lookup subcommand

  References: pull request 14505

• Add setting to make TSIG required for DNS updates (Assumeru)

  References: pull request 13770

• Lua global include (cmouse)

  References: pull request 11678

• added self weighted lua function (n0tlu5)

  References: pull request 10692

Removed Features

• [feature] remove support for libdecaf

  References: pull request 14926

Improvements

• Fix building with GCC 15.1: missing cstdint include

  References: pull request 15520

• Use a unique type for domain ids

  References: pull request 15474

• Better behaviour with non-working DNSSEC configurations

  References: pull request 15451

• Add a quiet option to pdnsutil

  References: pull request 15443

• Log DNS packet parse errors

  References: pull request 15390

• fix log string in case there are notifies needed

  References: pull request 15353

• [geoip] Try and be more helpful in YAML error exceptions

  References: pull request 15334

• API: allow fetching disabled RRsets

  References: pull request 15299

• Damage control in Lua createForward()

  References: pull request 15222

• [pdnsutil] Command aliases

  References: pull request 15207

• [pdnsutil] Suggest increase-serial after create-zone

  References: pull request 15197

• lmdb-safe: add prefix() cursor; use it in list/lookup/get

  References: pull request 15176

• [pdnsutil] dedup in add-record

  References: pull request 15170

• [pdnsutil] Better error message when disk full

  References: pull request 15160

• Make the record representation of ALIAS match CNAME

  References: pull request 15152

• Low-hanging LMDB fruits

  References: pull request 15147

• [pdnsutil] Let add-zone-key use defaults from pdns.conf

  References: pull request 15131

• Let pdnsutil warn when creating local files

  References: pull request 15105

• Grow tinydnsbackend capabilities a bit

  References: pull request 15103

• try to find ldap libs in case pkg-config is missing (happens on debian11)

  References: pull request 15086

• More helpful pdnsutil help output

  References: pull request 15082

• pdnsutil: check for key presence after import

  References: pull request 15080

• Adjust Content-Type header for Prometheus endpoint to include version (Woutifier)

  References: pull request 15072

• Include cstdint to get uint64_t

  References: pull request 15063

• Correctly report SQL insertion errors

  References: pull request 15049

• Exit gracefully on ^D on control-console

  References: pull request 15041

• [lmdb] Ignore unreachable TSIG keys in getTSIGKeys

  References: pull request 15004

• Lua up checks: finer control

  References: pull request 14996

• createForward and createForward6 will use the zone_record as base (BozhanL)

  References: pull request 14993

• prevent createReverse6 from generating illegal IDN record (BozhanL)

  References: pull request 14975

• pdnsutil edit-zone: Emit the updated SOA serial (ukleinek)

  References: pull request 14900

• Rework MDBIn/OutVal

  References: pull request 14782

• pdns: allow empty string in version-string (Bertrand Jacquin)

  References: pull request 14781

• webserver.cc: try to pass exception text with 500 errors

  References: pull request 14670

• sdig: some improvements for stdin mode

  References: pull request 14665

• more and better thread names

  References: pull request 14642

• dnsproxy: make local port range configurable (zeha)

  References: pull request 14591

• ssqlite3: use “begin immediate” to avoid later fights over upgrading to write

  References: pull request 14576

• Add doc reference to oversized chunk message (Josh Soref)

  References: pull request 14561

• allow -lodbc in a non-standard location

  References: pull request 14368

• web: make request/response timeout configurable (Samir Aguiar)

  References: pull request 14218

• Do shuffle TCP responses except *XFRs (Karel Bilek)

  References: pull request 13980

• Add Meson as a build system for auth

  References: pull request 13959

• deprecate output of SHA1, GOST hashes

  References: pull request 13951

• sdig: remove xpf handling

  References: pull request 13930

• LUA: support returning empty set in filterForward

  References: pull request 13879

• on OpenBSD, try harder to send on a non-blocking socket

  References: pull request 13867

• gmysql: modernise implementation of gmysql-ssl flag

  References: pull request 13060

Bug Fixes

• Trust inet_pton to validate IPv6 addresses and nothing more

  References: pull request 15570

• Fix list-all-zones in multi-backend configuration involving LMDB

  References: pull request 15238

• Improve LMDBBackend reliability

  References: pull request 15175

• [pdnsutil] Do not allow increase-serial on secondary zones

  References: pull request 15133

• Avoid LMDB exception during recursive lookup

  References: pull request 15090

• Fix ipv*hint=auto on lmdb backend

  References: pull request 14931

• [bugfix] Reject hexadecimal blobs with odd number of characters

  References: pull request 14913

• fix register type race

  References: pull request 14897

• don’t log absence of GSS-TSIG functionality at such a high level, use DEBUG

  References: pull request 14842

• SVCB parser: allow quotes around port=

  References: pull request 14823

• don’t build .so for non-dyn modules

  References: pull request 14676

• Fix leak of MDB_env object

  References: pull request 14625

• fix domain ordering in query for mysql and odbc-sqlite, and test it

  References: pull request 14500

• catalogs SQL: force order of domains to avoid spurious rehashes

  References: pull request 14454

• Fix compile error on OPENSSL_VERSION_MAJOR < 3

  References: pull request 14419

• ixfrdist: use IPV6_V6ONLY on listening sockets, closes #13878

  References: pull request 13949