[Pdns-announce] PowerDNS Authoritative Server 4.0.1 released

[Pieter Lexis]

Hello everybody,

We're happy to announce the release of the PowerDNS Authoritative Server 4.0.1. The first bugfix release for the 4.0 series.

This release fixes several small issues and adds a setting to limit AXFR and IXFR sizes, in response to CVE-2016-6172.

The clickable changelog is available[1].

Bug fixes
 - #4126 Wait for the connection to the carbon server to be established
 - #4206 Don't try to deallocate empty PG statements
 - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
 - #4252 Don't include bind files if length <= 2 or > sizeof(filename)
 - #4255 Catch runtime_error when parsing a broken MNAME

Improvements
 - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
 - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
 - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
 - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
 - #4192 dnsreplay: Only add Client Subnet stamp when asked
 - #4250 Use toLogString() for ringAccount (Kees Monshouwer)

Additions
 - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
 - #4142 Add used filedescriptor statistic (Kees Monshouwer)

The sources are on the downloads site[2](sig[3]). Packages for several distributions are available from our repositories[4].

Best regards,

Pieter and the PowerDNS team.

1 - https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401
2 - https://downloads.powerdns.com/releases/pdns-4.0.1.tar.bz2
3 - https://downloads.powerdns.com/releases/pdns-4.0.1.tar.bz2.sig
4 - https://repo.powerdns.com

-- 
Pieter Lexis
PowerDNS.COM BV -- https://www.powerdns.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-announce/attachments/20160729/7290f628/attachment.sig>