Today we released DNSdist 2.1.2 and 2.0.9, fixing several issues. The notable ones are:
-
dropping a response to a query received over DoQ or DoH3 was silently ignored
-
Intel Quick Assist Technology (QAT) support for DNS over HTTPS was not working properly
-
backends automatically upgraded to DoT/DoH were not advertising the proper ALPN during the TLS handshake
-
parsing an invalid YAML configuration could sometimes lead to a crash, as some exceptions were not properly handled
-
DoH3 latency metrics were missing from Prometheus
-
timeouts were not reported properly in the web dashboard (Ersin Gündem)
-
the Quiche library has been upgraded to 0.29.3 in our packages, fixing several security issues of low severity
-
calling the getPool and getCache Lua bindings from inside a custom Lua selector or action could trigger a use-after-free leading to a crash (2.1.x only)
-
using dots in a carbon host name was no longer working properly (2.1.x only)
-
fix naming And, Or and Not selectors, Continue action from YAML (2.0.x only)
-
don't close outgoing DoH connections on timeout, do on release (Karel Bilek, 2.0.x only)
-
fix build error on 32 bits systems (Hector Cao, 2.0.x only)
Please see the DNSdist website for the more complete changelogs (2.1.2, 2.0.9) and the current documentation. The upgrade guide is also available there.
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.
The release tarballs (2.1.2, 2.0.9) and their signatures (2.1.2, 2.0.9) are available on the downloads website, and packages for several distributions are available from our repository.
