v2.0.0

Note this is major release to keep the version aligned with netavark. There are no breaking changes in aardvark-dns however.

• The MSRV has been bumped to v1.88.
• Dependency updates.

v1.17.1

• This release fixes a security issue (CVE-2026-35406) where tcp connections where not handled correctly when receiving a malformed packet which causes aardvark-dns to enter a infinite loop at 100% cpu usage which can lead to a DOS attack. Versions before v1.16.0 are unaffected.

v1.17.0

• Aardvark-dns now updates the upstream nameservers from /etc/resolv.conf when the file content changes using inotify. This means a container restart is no longer required to re-read resolv.conf.
• Dependency updates.

v1.16.0

• Allow more than one DNS message per tcp socket. (#605)
• Dependency updates.

v1.15.0

• Dependency updates.

v1.14.0

• Dependency updates.

v1.13.1

• Fix parsing of ipv6 link local addresses in resolv.conf (#535)

v1.13.0

• Set TTL to 0 for container names
• Allow forwarding of names with no ndots
• DNS: limit to 3 resolvers and use better timeout for them
• Ignore unknown resolv.conf options

v1.10.1-rhel

• Don't tear down all server threads on SIGHUP (#513)

v1.12.2

• This release fixes a security issue (CVE-2024-8418) where tcp connections where not handled correctly which allowed a container to block dns queries for other clients on the same network #500. Versions before v1.12.0 are unaffected as they do not have tcp support.