Dear Turris users,
we just deployed Turris OS 3.7.4.
It fixes a critical DNSSEC flaw in knot resolver. Signatures might be accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it, assuming the trust chain to that DNSKEY was valid.
The whole Turris team wishes you happy weekend and we are looking forward to reading your feedback!