Today we are releasing PowerDNS Recursor 4.4.2.
This release fixes a bug where the wrong type could be used while verifying DNSSEC signatures, causing domains to be incorrectly marked as Bogus. Additionally, the recursor no longer resolves unneeded names when chasing CNAME records if QName Minimization is enabled. The recursor now also logs more detailed information if a name is found to be Bogus during DNSSEC validation.
As usual, there were also other smaller enhancements and bugfixes. Please refer to the 4.4.2 changelog for details.
The 4.4.2 tarball (signature) is available at downloads.powerdns.com and packages for CentOS 7 and 8, Debian Stretch and Buster, Ubuntu Xenial, Bionic and Focal are available from repo.powerdns.com.
4.1 and older releases are EOL, refer to the documentation for details about our release cycles.
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.