Hello,
I forgot to thank Yann Lorwyn for the excellent security bug report!
Daniel
On 7/20/26 15:17, Daniel Salzman via knot-dns-users wrote:
Hello Knot DNS users,
CZ.NIC has released Knot DNS 3.5.6.
This is a bug-fix release with a security fix for ACL evaluation.
Upgrade is recommended if certificate hostname verification is enabled.
Note that Knot DNS 3.5 is not compatible with LMDB 1.x. The upcoming Knot DNS version
3.6,
which is expected to be released in two months, will support automatic migration of LMDB
databases to version 1.x.
Changelogs:
https://gitlab.labs.nic.cz/knot/knot-dns/raw/v3.5.6/NEWS
Download:
https://www.knot-dns.cz/download/
Documentation:
https://www.knot-dns.cz/documentation/
Support:
https://www.knot-dns.cz/support/
Regards,
Daniel
--