Today we released DNSdist 2.1.3 and 2.0.11, fixing several issues. The notable one fixes an issue where incoming DNS over TLS and DNS over HTTPS connections could have been wrongly terminated early, when the OpenSSL provider is in use. We advise all users providing DNS over TLS or DNS over HTTPS to upgrade, but to be clear this is NOT a security issue.
In addition to this issue, these releases address a use-after-free that could have caused a crash in some cases when adding a new rule, either via the initial configuration or at runtime via the console. In 2.1.3 we also fixed a few bugs in the AF_XDP / XSK feature, and tightened access to the metrics when the dashboard has been configured to be accessible without a password.
Please see the DNSdist website for the more complete changelogs (2.1.3, 2.0.11) and the current documentation. The upgrade guide is also available there.
Please send us all feedback and issues you might have via the mailing list, or in case of a bug, via GitHub.
The release tarballs (2.1.3, 2.0.11) and their signatures (2.1.3, 2.0.11) are available on the downloads website, and packages for several distributions are available from our repository.
