[Pdns-dev] PowerDNS Authoritative Server 4.0.1 released

Pieter Lexis pieter.lexis at powerdns.com
Fri Jul 29 17:35:02 UTC 2016


Hello everybody,

We're happy to announce the release of the PowerDNS Authoritative Server 4.0.1. The first bugfix release for the 4.0 series.

This release fixes several small issues and adds a setting to limit AXFR and IXFR sizes, in response to CVE-2016-6172.

The clickable changelog is available[1].

Bug fixes
 - #4126 Wait for the connection to the carbon server to be established
 - #4206 Don't try to deallocate empty PG statements
 - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
 - #4252 Don't include bind files if length <= 2 or > sizeof(filename)
 - #4255 Catch runtime_error when parsing a broken MNAME

Improvements
 - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
 - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
 - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
 - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
 - #4192 dnsreplay: Only add Client Subnet stamp when asked
 - #4250 Use toLogString() for ringAccount (Kees Monshouwer)

Additions
 - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
 - #4142 Add used filedescriptor statistic (Kees Monshouwer)

The sources are on the downloads site[2](sig[3]). Packages for several distributions are available from our repositories[4].

Best regards,

Pieter and the PowerDNS team.

1 - https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401
2 - https://downloads.powerdns.com/releases/pdns-4.0.1.tar.bz2
3 - https://downloads.powerdns.com/releases/pdns-4.0.1.tar.bz2.sig
4 - https://repo.powerdns.com

-- 
Pieter Lexis
PowerDNS.COM BV -- https://www.powerdns.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.powerdns.com/pipermail/pdns-dev/attachments/20160729/7290f628/attachment.sig>


More information about the Pdns-dev mailing list