Vladimír Čunát authored 5 years ago and Tomas Krizek committed 5 years ago

I think it's safer to block it by default.  For developer convenience,
let's allow pre-release variants of one further minor version.

Vladimír Čunát authored 5 years ago and Tomas Krizek committed 5 years ago

It's fairly easy to keep keep compatible with both 2.8 and 2.9,
so I'd go for that for now, as it may be practical.

prefill module: allow a different module-loading style

Closes #506

See merge request !863

Otherwise plain `modules = { 'prefill' }` will error out,
which is surprising wrt. to style used/allowed by other modules.

ci updates

See merge request !865

Leap15 box was (allegedly temporarily) removed from vagrantcloud.
This is official upstream box generated by openSUSE that should be the
same as the one that used to be available on vagrantcloud.

Fixes #496

Fixes: #496

lib/resolve answer_finalize: don't SERVFAIL bogus +cd

See merge request !860

As kresd works now, typically we do not know whether these records are
bogus, as with +cd we do not attempt validation.  Still, it's possible
that we have those records in cache from an occasion without +cd, in
which case we know they're bogus and this regression happened.

The potential impact of this issue seems minimal.

Rebinding fixes

See merge request !859

Vladimír Čunát authored 5 years ago and Tomas Krizek committed 5 years ago

This avoids getting into an inconsistent state of the request (assert),
and it also allows some real-life cases to succeed without using
a forbidden address in any way (even though they *are* weird).

I can still imagine weird setups where a request gets failed even
though it would be resolvable without *using* a forbidden address,
but none of these seem reasonable anyway (or common in practice).

Vladimír Čunát authored 5 years ago and Tomas Krizek committed 5 years ago

Some people might want the rebinding module generally but still use
policy to allow local addresses in some specific cases.

distro/deb: generate *-dbg symbols package explicitly

See merge request !858

Related #496

ci: fix obs:release job

See merge request !857

Release 4.2.0

See merge request !856

Vladimír Čunát authored 5 years ago and Tomas Krizek committed 5 years ago

Most users probably aren't much interested in slight reduction of CPU
usage, and we want to give it some more testing before enabling.

Refusing to answer queries without RD bit makes it harder
to read what data is present in resolver's cache.

avoid a false-positive assert from rebinding module

See merge request !851