PowerDNS Authoritative Server 4.0.5
-----------------------------------
-Unreleased
+Released 27th of November 2017
+
+This release fixes PowerDNS Security Advisory
+:doc:`2017-04 <../security-advisories/powerdns-advisory-2017-04>`: Missing check on API operations (CVE-2017-15091).
Bug fixes
~~~~~~~~~
- `#5777 <https://github.com/PowerDNS/pdns/pull/5777>`__: Handle a signing pipe worker dying with work still pending
- `#5815 <https://github.com/PowerDNS/pdns/pull/5815>`__: Ignore SOA-EDIT for PRESIGNED zones. Fixes #5814
- `#5933 <https://github.com/PowerDNS/pdns/pull/5933>`__: Check return value for all getTSIGKey calls. Fixes #5931
+- `#5996 <https://github.com/PowerDNS/pdns/pull/5996>`__: Deny cache flush, zone retrieve and notify if the API is RO (Security Advisory
+ :doc:`2017-04 <../security-advisories/powerdns-advisory-2017-04>`)
Improvements
~~~~~~~~~~~~
PowerDNS Recursor 4.0.7
-----------------------
-Unreleased
+Released 27th of November 2017
+
+This release fixes PowerDNS Security Advisories :doc:`2017-03 <../security-advisories/powerdns-advisory-2017-03>`,
+doc:`2017-05 <../security-advisories/powerdns-advisory-2017-05>`, doc:`2017-06 <../security-advisories/powerdns-advisory-2017-06>`
+an ddoc:`2017-07 <../security-advisories/powerdns-advisory-2017-07>`.
Bug fixes
^^^^^^^^^
- `#5740 <https://github.com/PowerDNS/pdns/pull/5740>`__: Lowercase all outgoing qnames when lowercase-outgoing is set
- `#5599 <https://github.com/PowerDNS/pdns/pull/5599>`__: Fix libatomic detection on ppc64
- `#5961 <https://github.com/PowerDNS/pdns/pull/5961>`__: Edit configname definition to include the 'config-name' argument (Jake Reynolds)
+- `#5995 <https://github.com/PowerDNS/pdns/pull/5995>`__: Security Advisories :doc:`2017-03 <../security-advisories/powerdns-advisory-2017-03>`,
+ :doc:`2017-05 <../security-advisories/powerdns-advisory-2017-05>`, :doc:`2017-06 <../security-advisories/powerdns-advisory-2017-06>` and
+ :doc:`2017-07 <../security-advisories/powerdns-advisory-2017-07>`.
Improvements
^^^^^^^^^^^^