[Pdns-announce] Authoritative Server 3.4.10

[Peter van Dijk]

Hi everybody,

We're pleased to announce version 3.4.10 of our Authoritative Server.

This release fixes several bugs, decreases CPU usage and allows better
interoperability with PowerDNS 4.0.X databases. It also adds a feature to
limit AXFR sizes in response to CVE-2016-6172.

Tar.gz and packages are available on:

* https://downloads.powerdns.com/releases/
* Soon: https://www.monshouwer.eu/download/3rd_party/pdns/
   (RHEL/CentOS, with the usual huge thanks to Kees Monshouwer).

Warning: Version 3.4.10 of the PowerDNS Authoritative Server is a major upgrade
if you are coming from 2.9.x. Additionally, if you are coming from any 3.x
version (including 3.3.1), there is a mandatory SQL schema upgrade. Please
refer to the Upgrade documentation for important information on correct and
stable operation, as well as notes on performance and memory use.

Find the downloads on our download page,
https://www.powerdns.com/downloads.html

Changes since 3.4.9:

- [commit 1f8078c](https://github.com/PowerDNS/pdns/commit/1f8078c): Enable mbedtls threading abstraction layer (Kees Monshouwer)
- [commit 63a6800](https://github.com/PowerDNS/pdns/commit/63a6800): Update polarssl 1.3.9 to mbedtls 1.3.17 (Kees Monshouwer)
- [commit dc73734](https://github.com/PowerDNS/pdns/commit/dc73734): Report DHCID type (Kees Monshouwer)
- [commit 2c6e628](https://github.com/PowerDNS/pdns/commit/2c6e628): Fix TSIG for single thread distributor (Kees Monshouwer)
- [commit 09bdd9f](https://github.com/PowerDNS/pdns/commit/09bdd9f): Don't send covering nsec records for direct nsec queries (Kees Monshouwer)
- [commit da231a4](https://github.com/PowerDNS/pdns/commit/da231a4): Ignore trailing dot in signer name (Kees Monshouwer)
- [commit a014f4c](https://github.com/PowerDNS/pdns/commit/a014f4c): Add limits to the size of received AXFR, in megabytes
- [commit 881b5b0](https://github.com/PowerDNS/pdns/commit/881b5b0): Reject qnames with wirelength > 255, `chopOff()` handle dot inside labels
- [commit 210fb15](https://github.com/PowerDNS/pdns/commit/210fb15): Gmysql get-order-after-query was slow (Kees Monshouwer)
- [commit 7bab770](https://github.com/PowerDNS/pdns/commit/7bab770): Sync boost.m4 with upstream (Kees Monshouwer)
- [commit 9740371](https://github.com/PowerDNS/pdns/commit/9740371): Fix shorter best matching names in getAuth() (Kees Monshouwer)
- [commit 991528c](https://github.com/PowerDNS/pdns/commit/991528c): change default for any-to-tcp to yes (Kees Monshouwer)

Kind regards,
-- 
Peter van Dijk
PowerDNS.COM BV - https://www.powerdns.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-announce/attachments/20160902/82f157dc/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-announce/attachments/20160902/82f157dc/attachment.sig>