We have just released the PowerDNS Recursor 4.1.6. This release fixes an issue with DNSSEC validation introduced in Recursor 4.1.5 by reverting a code-change related to the acceptation of ADDITIONAL records. We will investigate this issue in detail the coming days, but found it necessary to issue an update with a fix early.
The full changelog is very short:
- Revert “rec: Authority records in AA=1 CNAME answer are authoritative”. References: #7158, pull request 7159