Source tarball available at: https://github.com/gdnsd/gdnsd/releases/
1.11.4 - 2014-07-18
Major bugfix: The SOA record returned in the auth section of
negative responses (NXDOMAIN and NODATA) had an incorrect TTL.
RFC 2308 says that auth servers should set the SOA record's
own TTL to the minimum of the real SOA TTL and the SOA
"minimum" field (aka ncache field), but gdnsd was simply using
the real SOA TTL and assuming caches looked at the
minimum/ncache field directly (which they do not).
The fallout is that if you specified a minimum/ncache
value of 3H but the TTL of the SOA record itself
was 24H, your negative answers to caches would indicate
that the answer should be cached for 24H. Luckily
many caches limit ncache durations (e.g. BIND9 defaults to
a limit of 3H), mitigating the issue somewhat, but
it's still a pretty big deal.
Bugfix: plugin_geoip was not correctly runtime-reloading
geoip databases from geoip_db_v4_overlay due to a simple
code error, which is now fixed.