-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi everybody,
PowerDNS Authoritative Server 3.3 is now available!
3.3 is the best version of the PowerDNS Authoratitive Server currently
available, and we recommend upgrading to it. Please read
http://doc.powerdns.com/from3.2to3.3.html before you do, however!
Please see http://doc.powerdns.com/changelog.html#changelog-auth-3-3 for full
release notes and all download links.
You can get PowerDNS 3.3 from:
http://downloads.powerdns.com/releases/pdns-3.3.tar.gz
http://downloads.powerdns.com/releases/deb/pdns-static_3.3-1_i386.deb
http://downloads.powerdns.com/releases/deb/pdns-static_3.3-1_amd64.deb
http://downloads.powerdns.com/releases/rpm/pdns-static-3.3-1.i386.rpm
http://downloads.powerdns.com/releases/rpm/pdns-static-3.3-1.x86_64.rpm
These files also come with GPG signatures (append .sig).
Additionaly, Kees Monshouwer has kindly provided native builds for RHEL/CentOS
5 and 6 at http://www.monshouwer.eu/download/3rd_party/pdns-server/
This a stability, bugfix and conformity update to 3.2. It improves
interoperability with various validators, either through bugfixes or by
catering to their needs beyond the specifications.
Changes between RC2 and final:
* pdnssec rectify-zone now refuses to operate on presigned zones, as
rectification already happens during incoming transfer. Patch by Kees
Monshouwer in commit 9bd211e.
* We now handle zones with a mix of NSEC3 opt-out and non-opt-out ranges
correctly during inbound and outbound AXFR. Many thanks to Kees Monshouwer.
Code in commit 5aa7003 and commit d3e7b17.
* More remotebackend fixes (commit 32d4f44, commit 44c2ee8, commit 1fcc7b7,
commit 0b1a3b2, commit 9a319b1), thanks Aki Tuomi.
* Some compiler warnings were squashed (commit ed554db), thanks Morten
Stevens.
* Fix broken memory access in LOC parser (commit 4eec51b, commit bea513c),
thanks Aki Tuomi.
* DNSSEC: DS queries at the apex of a zone for which we are not hosting the
parent, would wrongly get an 'unauth NOERROR'. Fixed by Kees Monshouwer in
commit 34479a6.
Changes between RC1 and RC2:
* Added dnstcpbench tool, by popular demand.
* We always shipped a static tools RPM; we now have a similar Debian package.
All packages have been cleaned up a bit, and the binary collections are now
consistent between RPM and Deb. New: pass --enable-tools to configure to
have the tools included in 'make all' and 'make install'.
* commit 4d2e3f5: add selinux policy files
* We would sometimes send a single NULL byte, or nothing at all, instead of
an OPT record. Fixed in commit bf7f822, commit 063076b, commit 90d361d.
* commit 2ee9ba2: expand any-to-tcp to direct RRSIG queries
* commit 5fff084, commit e38ef51: drop no-op flag strict-rfc-axfrs, thanks
Jelte Jansen.
* commit f3d8902, commit 7c0b859, commit 5eea730: Implement MINFO qtype for
better interaction when slaving zones from NSD (that contain MINFO). Thanks
to Jelte Jansen.
* commit 8655a42, commit bf79c6a, commit 38c941b: SRV record can have a '.'
as final field, from which we would dutifully strip the trailing ., leaving
void, confusing everything. We now remove the trailing . in the right
place, and not if we are trying to server '.'. Again thanks to Jelte & SIDN
for catching this.
* commit 70d5a66: improve error message in ill formed unknown record type,
thanks Jelte Jansen for reporting.
* commit 3640473: Built in webserver can now listen on IPv6, fixes ticket 843
. Also silences some useless messages about timeouts.
* commit 7db735c, commit d72166c: CHANGES BEHAVIOUR: before we launch, check
if we can connect to the controlsocket we are about to obliterate. If it
works, abort. Fixes ticket 841 and changes standing behaviour. There might
be circumstances where PowerDNS now refuses to start, where it previously
would. However, starting and making our previous instance mute wasn't good.
* commit 9130f9e: correctly refuse out-of-zone data in bindbackend, closes
ticket 845
* commit 3363ef7: initialise server-id after all parsing is done, instead of
half way through. Fixes situations where server-id was emptied explicitly.
Reported by Wouter de Jong
* commit cd4f253: bump boost requirement, thanks Wouter de Jong
* commit 58cad74: Update pdns auth init script so it works on wheezy
* commit 8714c9c: clang fixes by Aki Tuomi, thanks!
* commit 146601d: stretch supermasters.ip for IPv6, thanks Dennis Krul
* commit 1a5c5f9: various remotebackend improvements by Aki Tuomi
* commit 6ab1a11: make sure systemd starts PowerDNS after relevant databases
have been started, thanks Morten Stevens.
* commit 606018f, commit ee5e175, commit c76f6f4: check scopeMask of answer
packet, not of query packet!
* commit 2b18bcf: Added warning if trailing dot is used, thanks Aki Tuomi.
* commit 16cf913: make superfluous 'bind' NSEC3
