Skip to content

v4.2.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 03:12
· 1 commit to release/4.2.x since this release
v4.2.7
d2997b8

✨ Highlights

A patch release for sign-in, password reset, record validation, zone search and zone ownership. No database migration.

🐛 Fixes

  • Sign-in - the second factor is verified against the account logging in, every login starts from a clean session, and MFA no longer asks again right after setup (#1737).
  • Password reset - matches the exact email and mails the address on file.
  • Disabled accounts are refused at OIDC and SAML login.
  • Record types - unknown types and malformed RFC 3597 data, which make PowerDNS fail the zone, are refused.
  • Zone search - paging no longer repeats zones, and filters and sorting are kept.
  • Zone list - sorting by owner or record count works on PostgreSQL (#1618).
  • Zone owners - removing the last owner is refused, and assigning a new zone to another user needs zone_content_edit_others (#1558).
  • Mail refuses line breaks in the recipient, subject and headers.
  • New users can't be given a permission template with rights their creator doesn't have.
  • Zone creation refuses a zone inside a zone owned by another user.
  • Record comments are copied to the matching A or PTR record only in zones the user can edit.
  • Installer IP allow-list handles IPv6 clients and plain addresses correctly.
  • Dynamic DNS returns a normal error instead of a server error when the IP is sent in an unexpected format.
  • Username rename compares names as plain text when checking for duplicates.

📦 Upgrading

Drop-in replacement for v4.2.6. Check these before rolling out:

  • Unknown record types are refused on save.
  • Zone owners - add another owner before removing the last one.
  • Global zone templates can only be created by administrators.
  • LUA records can no longer be changed by client-level editors (the shipped Editor template).
  • Self-edit of your own username, LDAP flag or active state needs user_edit_others (#1327).
  • Password reset is declined for an email shared by several accounts.
  • parent_zone_ownership_check is on by default: users can no longer create a zone inside another user's zone. Set it to false for the old behaviour.

PHP 8.2+.

Full changelog: v4.2.6...v4.2.7

Assets 3
Loading