-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Feb 2024 12:21:56 +0100 Source: pdns-recursor Binary: pdns-recursor pdns-recursor-dbgsym Architecture: arm64 Version: 4.8.6-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Chris Hofstaedtler Description: pdns-recursor - PowerDNS Recursor Changes: pdns-recursor (4.8.6-1) bookworm-security; urgency=medium . * New upstream version 4.8.6 * Fixes CVE-2023-50387 and CVE-2023-50868, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Introduces new configuration settings: * aggressive-cache-max-nsec3-hash-cost * max-dnskeys * max-ds-per-zone * max-nsec3-hash-computations-per-query * max-nsec3s-per-record * max-rrsigs-per-record * max-signature-validations-per-query * Fixes integer overflow in yahttp (webserver) * Fixes partial reads in ixfrdist * Fixes setting of policy tags for packet cache hits * Setup gbp.conf for Debian bookworm * d/watch: set to 4.8 branch Checksums-Sha1: c7972374347ae797f89939e4b2381cccbd6cab70 40853828 pdns-recursor-dbgsym_4.8.6-1_arm64.deb dd18259fe2740108c1d03908b9afb9c9317cec6c 9296 pdns-recursor_4.8.6-1_arm64-buildd.buildinfo 51fab12b8cd7217ba7410815231856f214b4e43f 1688512 pdns-recursor_4.8.6-1_arm64.deb Checksums-Sha256: f808771d21b9adf9f2661548fe40f09eb7f79ed26409b4c173110a1458afe9f2 40853828 pdns-recursor-dbgsym_4.8.6-1_arm64.deb 1d108ba05cf86dae9be000fc5109865380a2ce43419c4cf100731fa6c5f29c47 9296 pdns-recursor_4.8.6-1_arm64-buildd.buildinfo ca5ad4843d84c60455831fea24e1fd0f996a3d71ca723b4cad2b73e13b0fabdf 1688512 pdns-recursor_4.8.6-1_arm64.deb Files: 9822929d9087adc86f290fb922ce71b4 40853828 debug optional pdns-recursor-dbgsym_4.8.6-1_arm64.deb 2fa3c72e28ce5e45dc726db486c75260 9296 net optional pdns-recursor_4.8.6-1_arm64-buildd.buildinfo 762ff30e385885c26c393ff9fc7e7474 1688512 net optional pdns-recursor_4.8.6-1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvH8AOGUMuGQ9yWfAdEqOeknEYfEFAmXP/2cACgkQdEqOeknE YfEkmRAArQiPDsPZC0lGe+eUT559+Whyn4HBER5wyvVv7Thaw/kYyamEOLSRM/dv zvk1xkHNgOybPg5nqDa1+wp+vSRDlR7xafkLCKAXFMf5Pagtb3hjg4wSSBdZEXTh Ij/9fuuI0gGUD/VjuWLC+UzyvxdExi1I9d3ooQ1HhSifXmhfxjNPQvyuGiVAcbn4 S7m2eBsO/Op5OYYXi4IQrmTYkKXh91rNw3wh/7J5xE7K6ZrpfRJ+8KZ7HeiGN1o3 YT8QqWzZGhXUGNbMuqJnZYN4TbgP3NUBjj4ntbKYoLraie2L5adLtSuUo8dgD64/ X6AgXWc5iu09DJ0OSWAp/saQOf6E1e6Db4U27PSMWgVA2ee3ZCuTB3EUswfi3eWa DckErv+wkpTU1lSv0yFXfjNbuS0P6X0G2Mr7GUxpAZeybGedDRX52cpITrJg7URt Ijwkzn3eafLgGP3ORO3Mg0Wjf9f4BSgORXcEE+zh5uZuk0DY7TyA/pUAXM32l9Iz 3w5mqCRHeRM7Yboj1656MZYFDZKW3ZDezmldk9VAeJyly5604XssyB4ea78OkSFy q2jt9YGd1qhz89LBXFD0cOfKuXU6SDI3FYVCaOv5rj45wSR1BhlqhLeM4WUD+Bvi 96mtVUGkUOehAr2EhmgEyvvwlo7QytOJ6V4Zvm1NBQsFXggLhLA= =2Z7Y -----END PGP SIGNATURE-----