-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Feb 2024 12:21:56 +0100 Source: pdns-recursor Binary: pdns-recursor pdns-recursor-dbgsym Architecture: ppc64el Version: 4.8.6-1 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Chris Hofstaedtler Description: pdns-recursor - PowerDNS Recursor Changes: pdns-recursor (4.8.6-1) bookworm-security; urgency=medium . * New upstream version 4.8.6 * Fixes CVE-2023-50387 and CVE-2023-50868, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Introduces new configuration settings: * aggressive-cache-max-nsec3-hash-cost * max-dnskeys * max-ds-per-zone * max-nsec3-hash-computations-per-query * max-nsec3s-per-record * max-rrsigs-per-record * max-signature-validations-per-query * Fixes integer overflow in yahttp (webserver) * Fixes partial reads in ixfrdist * Fixes setting of policy tags for packet cache hits * Setup gbp.conf for Debian bookworm * d/watch: set to 4.8 branch Checksums-Sha1: 8be3c0ff703becb66a86b7fb84c3c4641b42950c 41597860 pdns-recursor-dbgsym_4.8.6-1_ppc64el.deb 25ca39f464272e634a2b4cf6c1e5646003f79adc 9313 pdns-recursor_4.8.6-1_ppc64el-buildd.buildinfo f1642b224192ec4328e17e459e400a7cd8b50087 1863404 pdns-recursor_4.8.6-1_ppc64el.deb Checksums-Sha256: b7b592f68cc42039171386e620f484a9b498379edde698c39aa6a68f01cf5e0a 41597860 pdns-recursor-dbgsym_4.8.6-1_ppc64el.deb 6ff3058141fbebf4c307d8afec9dc1ef155d81b9dbe165a9d8fbdf44282d9c04 9313 pdns-recursor_4.8.6-1_ppc64el-buildd.buildinfo 41ea4fb7e11deaec95e3f22b08479901ceffd8c1615d6ce0be81465467c51a9b 1863404 pdns-recursor_4.8.6-1_ppc64el.deb Files: 53b7a2b28dd6177b0952941ff59e2842 41597860 debug optional pdns-recursor-dbgsym_4.8.6-1_ppc64el.deb d6bf634eef97dcf58fdc6026bef88ae6 9313 net optional pdns-recursor_4.8.6-1_ppc64el-buildd.buildinfo 99b747107bca27982ea843a9bb8e5a26 1863404 net optional pdns-recursor_4.8.6-1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHDNCkvGgp2XShfnByW8ECaj2byoFAmXP/DYACgkQyW8ECaj2 byq3dA//d0sZWTlM5V7+TmFrIAZyI9M8c1NAcxY7tlp2oizzKs7HMd/ap+tDOxDq mCLe9ggv/aLUCpu8I27fRz7q/kFqNgqt+R4+Am+fBnPwENOyeOjqhAXOrD3PHHSp ve0GpMFRibtxs4V06Qsp1PwODml9JdnD3dGgjRpSxmhGX+5wFD22tdB5u+zolIAh 8+iKN7BrZQ3augbyfGc5/0g0NeURf/4n+4szOLhn5znI4/nDbPOORyxKGdTCN+cz GcmZlHy3Tc6Zxc1u6FvUN8lwCKGnzq5B/BobNpnNtb4X6nYjzJ2rffnuqYVoXNoe 1DKJrEPwEpor/6+LQTi9dg1FTWQW/DJIJOxKAJgKlEtU940uogrRo516MLbGmoC7 JKQtzwXfngSO7cNbYYOD1+N4ebk2bIgkl9atH7pPvQgfApij0YAXelWTweY7klVV Ge/RWws/flcvt/wuW/QkUyxPsIuWaWp1EwgUfzpac8yZ3k4eIIZ9shJstbePRZC7 xkPHNkylsNaoeAwonmIofcQU4uqycbsyodtltI7mCGzhg1Ys16PwsXVwudaLAlWf fRUH5I0nO0c7I53DhyUhR5cdLWkr/INU7nRocED1vSd07QkTJZg89vSsTxKnCJka Z/P5CCiEEdhUXMq5wcngRAZC5X6B2f7Cj8UXpf4HJqeInPpPhWs= =nQ/Z -----END PGP SIGNATURE-----