Today we have released PowerDNS Recursor 5.0.10, 5.1.4 and 5.2.2.
These releases are maintenance releases that fix a few bugs and have a few improvements. The most important ones are:
- When an authoritative server supplies both an answer and a CNAME, follow the CNAME and discard the answer.
- Include the new root trust anchor in the built-in root trust anchors. The key corresponding to the new trust anchor will start getting used for DNSSEC signing in October 2026. This applies to the 5.0.10 and 5.1.4 versions, the 5.2.0 release already included the new trust anchor.
There are also a few other bug fixes and improvements, please refer to the changelogs (5.0.10 and 5.1.4 and 5.2.2) for additional details.
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.
The tarballs (5.0.10, 5.1.4, 5.2.2) (with signature files 5.0.10, 5.1.4, 5.2.2) are available from our download server and packages for several distributions are available from our repository.
Recently we made changes to our Open Source End of Life policy. Older release trains are now supported for one year after the following major release. Consult the EOL policy for more details.
We would also like to mention that with the 4.5 release we stopped supporting systems using 32-bit time. This includes many 32-bit Linux platforms.
We are grateful to the PowerDNS community for the reporting of bugs, issues, feature requests, and especially to the submitters of fixes and implementations of features.