Bump version 2.5.2, update NEWSv2.5.2

1 files changed, 28 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index 93af4c37e..6ff6754f6 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,31 @@
+Knot DNS 2.5.2 (2017-06-23)
+===========================
+
+Security:
+---------
+ - Improper TSIG validity period check can allow TSIG forgery (Thanks to Synacktiv!)
+
+Improvements:
+-------------
+ - Extended debug logging for TSIG errors
+ - Better error message for unknown module section in the configuration
+ - Module documentation compilation no longer depends on module configuration
+ - Extended policy section configuration semantic checks
+ - Improved python version compatibility in pykeymgr
+ - Extended migration section in the documentation
+ - Improved DNSSEC event timing on 32-bit systems
+ - New KSK rollover start log info message
+ - NULL qtype support in kdig
+
+Bugfixes:
+---------
+ - Failed to process included configuration
+ - dnskey_ttl policy option in the configuration has no effect on DNSKEY TTL
+ - Corner case journal fixes (huge changesets, OpenWRT operation)
+ - Confusing event timestamps in knotc zone-status output
+ - NSEC/NSEC3 bitmap not updated for CDS/CDNSKEY
+ - CDS/CDNSKEY RRSIG not updated
+
 Knot DNS 2.5.1 (2017-06-07)
 ===========================