Knot Resolver

Bugfixes cache: avoid excessive logging introduced in the last release (!1869) /options/serve-stale: avoid SIGSEGV from a LuaJIT bug (#957) Improvements DoH: add unencrypted mode for reverese proxies (alpha, !1877 …

Security DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us. DNSSEC correctness issues, acting mainly through the aggressive cache: * dealing with Labels …

Improvements packaging: rpm: require python3-setuptools (!1830, #952) packaging: rpm: provide user/group (!1837) controller: improved error handling when sending commands to workers (!1834) Bugfixes dns64: fix CNAME problems again (#797 …

Improvements: /local-data/rpz: support *.some.name. CNAME block.page. (!1808) /local-data/rpz: print line number in the RPZ on error (!1823) /local-data/nodata: also apply to rpz: and records: (!1812 …

Improvements DNS-over-QUIC (DoQ) is available for serving (beta, !1747) Bugfixes fix UDP answers without sendmmsg, e.g. on non-Linux (!1795) fix /logging/groups in python 3.8 (!1799)

6.1.0 is the first officially stable release of version 6. As of this release, version 6 is preferred over version 5. Improvements: logging: improved logging groups (!1768) support …

Security DoS: fix a rare segfault in resolve function (!1720) Someone controlling the DNS traffic might be able to trigger this crash intentionally and too often. DoS: drop a wrong …

Security DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl Improvements tests: disable problematic config.http test (#925, !1678) validator …

Security DoS: fix unconfirmed crashes with the line below (!1683) [system] requirement "h && h->end > h->begin" failed in queue_pop_impl Improvements tests: disable problematic config.http test (#925 …

Security reduce buffering of transmitted data, especially TCP-based in userspace Also expose some of the new tweaks in lua: (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000 (require 'ffi' …