Knot Resolver 1.2.3 (2017-02-23)
================================

Bugfixes
——–
– Disable storing GLUE records into the cache even in the
(non-default) QUERY_PERMISSIVE mode
– iterate: skip answer RRs that don’t match the query
– layer/iterate: some additional processing for referrals
– lib/resolve: zonecut fetching error was fixed

Knot Resolver 1.2.2 (2017-02-10)
================================

Bugfixes:
———
– Fix -k argument processing to avoid out-of-bounds memory accesses
– lib/resolve: fix zonecut fetching for explicit DS queries
– hints: more NULL checks
– Fix TA bootstrapping for multiple TAs in the IANA XML file

Testing:
——–
– Update tests to run tests with and without QNAME minimization

Knot Resolver 1.2.1 (2017-02-01)
====================================

Security:
———
– Under certain conditions, a cached negative answer from a CD query
would be reused to construct response for non-CD queries, resulting
in Insecure status instead of Bogus. Only 1.2.0 release was affected.

Documentation
————-
– Update the typo in the documentation: The query trace policy is
named policy.QTRACE (and not policy.TRACE)

Bugfixes:
———
– lua: make the map command check its arguments

Knot DNS 2.4.1 (2017-02-10)
===========================

Bugfixes:
——–
– Transfer of a huge rrset goes into an infinite loop
– Huge response over TCP contains useless TC bit instead of SERVFAIL
– Failed to build utilities with disabled daemon
– Memory leaks during keys removal
– Rough TSIG packet reservation causes early truncation
– Minor out-of-bounds string termination write in rrset dump
– Server crash during stop if failed to open timers DB
– Poor minimum UDP-max-size configuration check
– Failed to receive one-record-per-message IXFR-style AXFR
– Kdig timeouts when receiving RCODE != NOERROR on subsequent transfer message

Improvements:
————-
– Speed-up of rdata addition into a huge rrset
– Introduce check of minumum timeout for next refresh
– Dnsproxy module can forward all queries without local resolving

—-

Latest upstream release. Includes bugfixes for DNSSEC key management.

—-

Latest upstream versions with bunch of impotant bugfixes.