Download PowerDNS Authoritative Server 3.4.7

PowerDNS is a dns server with a database as back-end, which makes it easy to manage a large number of dns entries. The developers previously decided to release the two parts that make up PowerDNS, a recursor and an authoritative name server, so that a new version can be released more quickly and in a more targeted way, the developers say. The authoritative name server will only respond to a dns lookup if it pertains to the domains for which this server is responsible. The developers have released PowerDNS Authoritative Server 3.4.7. The announcement of this release looks like this:

PowerDNS Authoritative Server 3.4.7 released!

We’re pleased to announce the release of the PowerDNS Authoritative Server version 3.4.7. This release fixes several bugs and has a bunch of improvements onboard.

The biggest fixes are improved negative caching and preventing a crash that could happen during the AXFR of a zone with many MX records of different priorities.

Tarballs and packages are available on:

• soon: https://www.monshouwer.eu/download/3rd_party/pdns/
  (RHEL/CentOS, with the usual huge thanks to Kees Monshouwer).

The changelog is produced below, a version with clickable links can be found at [1].

Bug fixes:

• Ignore invalid/empty TKEY and TSIG records (Christian Hofstaedtler)
• Don’t reply to truncated queries (Christian Hofstaedtler)
• don’t log out-of-zone ents during AXFR in (Kees Monshouwer)
• Prevent XSS by escaping user input. Thanks to Pierre Jaury and Damien Cauquil at Sysdream for pointing this out.
• Handle NULL and boolean properly in gPGSql (Aki Tuomi)
• Improve negative caching (Kees Monshouwer)
• Don’t divide timeout twice (Aki Tuomi)
• Correctly sort records with a priority.

Improvements:

• Direct query answers and correct zone-rectification in the GeoIP backend (Aki Tuomi)
• Use token names to identify PKCS#11 keys (Aki Tuomi)
• Fix typo in an error message (Arjen Zonneveld)
• limit NSEC3 iterations in bindbackend (Kees Monshouwer)
• Initialize minbody (Aki Tuomi)

New features:

• OPENPGPKEY record type (James Cloos and Kees Monshouwer)
• add global STD-edit settings (Kees Monshouwer)

1 –