-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Feb 2024 12:21:56 +0100 Source: pdns-recursor Binary: pdns-recursor pdns-recursor-dbgsym Architecture: mips64el Version: 4.8.6-1 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Chris Hofstaedtler Description: pdns-recursor - PowerDNS Recursor Changes: pdns-recursor (4.8.6-1) bookworm-security; urgency=medium . * New upstream version 4.8.6 * Fixes CVE-2023-50387 and CVE-2023-50868, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Introduces new configuration settings: * aggressive-cache-max-nsec3-hash-cost * max-dnskeys * max-ds-per-zone * max-nsec3-hash-computations-per-query * max-nsec3s-per-record * max-rrsigs-per-record * max-signature-validations-per-query * Fixes integer overflow in yahttp (webserver) * Fixes partial reads in ixfrdist * Fixes setting of policy tags for packet cache hits * Setup gbp.conf for Debian bookworm * d/watch: set to 4.8 branch Checksums-Sha1: 24303caa07f7f0e08f1b182e79249adbe3a50947 41703932 pdns-recursor-dbgsym_4.8.6-1_mips64el.deb 1d88ceb75329992a8eb1e720d62e72d5a1f1d985 9045 pdns-recursor_4.8.6-1_mips64el-buildd.buildinfo 620c876de822f1e6e12fe90d8ca4708bf9a4df98 1515428 pdns-recursor_4.8.6-1_mips64el.deb Checksums-Sha256: 4cc041d81687f8c42d44c41a7cb3fe4fab931d5c542ad4fd281d1f9dc221160b 41703932 pdns-recursor-dbgsym_4.8.6-1_mips64el.deb 3097b0a052d86c14941c2b0e527f31b2c8d0fd9d9436e311a2eb2ae80df53d21 9045 pdns-recursor_4.8.6-1_mips64el-buildd.buildinfo d3746d246024971da54ca15c1c378de6d8bb6af4885a8555bb56d4c237801c19 1515428 pdns-recursor_4.8.6-1_mips64el.deb Files: 8d555b4ab2ae30ddf549cb77058d8ca2 41703932 debug optional pdns-recursor-dbgsym_4.8.6-1_mips64el.deb 949ee7825e549148ee60b7955459a104 9045 net optional pdns-recursor_4.8.6-1_mips64el-buildd.buildinfo 58fba72da0c5db41d34651c4eabab93c 1515428 net optional pdns-recursor_4.8.6-1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXUZVEjohYGA7PDpMojl408mCs9YFAmXP/6MACgkQojl408mC s9YhXg/9Hgw6idYIYzA831WUtzlTFel4n0MdrxGXqVX0ot/bkk7dVlw6jVSODHVq aWSDUnncgePhyfhKJM8zHtyDQJuIkpzP3BUDPStYGHexUNahYHFbnyJHzd/RUX0K xqOW7X9EltJ6a2L+YdiD6qyltrjFUtQkbVf1cJZVN0CloY7e84GjdeGYmVVRceNB EzQHxCeQSmAx0rapGQG5yMm/RJHHjNW42/GU6Kan2uAISFAFEQx62oqZCBY9Yd+8 Vu/7IvGHihBSUqEa6RW/rjCCSemv3CQsVQ7h+b1rqHudu8wb0R+nHJ7PC+OPva3U WpwauAechvICl6K772dgkmh4BNRloDI5fPkyOxSXtjM/tDtVAUXKUyYi2bSFzU9/ sUEAKtb7Ax0x+8UKRTrLzuN5/qQeFwKF1jF607w03FBUZJa0gpHTrPoAPaqben79 pGdFRWFIqtNKkxp0WzuAM4loir4zn4bPf44TP0P0HnEpQT0/KsOxOMStRHSvfmpP FHQyXTP+RqHCqHdR0ejQURMihjEzsaj+xtRZgVJCzUnEsdkvXOQDIKy6Tf/xmI5b ml9hXyO454dPpWD8Eya2sdVtzX44ynJEU1OYL8EQvLKFx26hRSgcen9CScpdtEp8 oeMtQLZAlpxhrUKRlLfA+k/6XbwRYC6Ed/Hko/A7kLxg239FhsA= =H0Dn -----END PGP SIGNATURE-----