Version 3.5.8

Friday, September 4, 2026

Improvements:

  • knotc: better compatibility with SmartOS #979
  • knotd: added a check for possible errors while reading a backup label file
  • knotd: more robust parsing of data stored in LMDB (Thanks to Jim Alves-Foss)

Bugfixes:

  • knotd: unauthenticated TSIG chosen-prefix signing that enables DDNS forgery (Thanks to Gia Bui)
  • knotd: server crash due to a missing check for malformed TCP packet in XDP mode (Thanks to Kushal Das)
  • kzonecheck: defective zone origin detection if the file name is too short (Thanks to Kushal Das)