Dear Knot Resolver users,
Knot Resolver 5.5.1 has been released!
Improvements
- daemon/tls: disable TLS resumption via tickets for TLS <= 1.2 (#742,
!1295)
- daemon/http: DoH now responds with proper HTTP codes (#728, !1279)
- renumber module: allow rewriting subnet to a single IP (!1302)
- renumber module: allow arbitrary netmask (!1306)
- nameserver selection algorithm: improve IPv6 avoidance if broken (!1298)
Bugfixes
- modules/dns64: fix incorrect packet writes for cached packets (#727,
!1275)
- xdp: make it work also with libknot 3.1 (#735, !1276)
- prefill module: fix lockup when starting multiple idle instances (!1285)
- validator: fix some failing negative NSEC proofs (!1294, #738, #443)
Full changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.5.1/NEWS
Sources:
https://secure.nic.cz/files/knot-resolver/knot-resolver-5.5.1.tar.xz
GPG signature:
https://secure.nic.cz/files/knot-resolver/knot-resolver-5.5.1.tar.xz.asc
Documentation:
https://knot-resolver.readthedocs.io/en/v5.5.1/
Donation:
https://donations.nic.cz/en/donate/?project=knot-resolver
--
Ales Mrazek
PGP: 3057 EE9A 448F 362D 7420 5A77 9AB1 20DA 0A76 F6DE