-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Feb 2024 12:21:56 +0100 Source: pdns-recursor Binary: pdns-recursor pdns-recursor-dbgsym Architecture: s390x Version: 4.8.6-1 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Chris Hofstaedtler Description: pdns-recursor - PowerDNS Recursor Changes: pdns-recursor (4.8.6-1) bookworm-security; urgency=medium . * New upstream version 4.8.6 * Fixes CVE-2023-50387 and CVE-2023-50868, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Introduces new configuration settings: * aggressive-cache-max-nsec3-hash-cost * max-dnskeys * max-ds-per-zone * max-nsec3-hash-computations-per-query * max-nsec3s-per-record * max-rrsigs-per-record * max-signature-validations-per-query * Fixes integer overflow in yahttp (webserver) * Fixes partial reads in ixfrdist * Fixes setting of policy tags for packet cache hits * Setup gbp.conf for Debian bookworm * d/watch: set to 4.8 branch Checksums-Sha1: 7def1ce944856928ef343e1523535b47ec3ad604 40962672 pdns-recursor-dbgsym_4.8.6-1_s390x.deb a6fe2a30f96d4615bc77e42614c84d463540f0ff 9104 pdns-recursor_4.8.6-1_s390x-buildd.buildinfo 78a5f6888492217f86fce4d8cc4fdf26af273284 1715852 pdns-recursor_4.8.6-1_s390x.deb Checksums-Sha256: 8b7a5d442ae5208b0b66116a82932bfbc2d6f53187a50dc1854e9c5abd82735f 40962672 pdns-recursor-dbgsym_4.8.6-1_s390x.deb 49d69374039f8e9354a7ee7bd28855779d960a3a2a02c977520f236e2a66b105 9104 pdns-recursor_4.8.6-1_s390x-buildd.buildinfo d58f6ef1b0741a787a1d6514f4b31e8f1b4987da73b0ff11fa2ada4b97a6a21d 1715852 pdns-recursor_4.8.6-1_s390x.deb Files: 7e25cf0aba81c918e2eef253865d0876 40962672 debug optional pdns-recursor-dbgsym_4.8.6-1_s390x.deb 5b11073b9301bdba36567a6fc5c14afc 9104 net optional pdns-recursor_4.8.6-1_s390x-buildd.buildinfo 78fcd72cd937ade05874fe37e0b8606d 1715852 net optional pdns-recursor_4.8.6-1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETdQgQHyJW2hcXsTC6b+AMjGgQHgFAmXP/IQACgkQ6b+AMjGg QHjuhRAAhs9tbwhzAzVujNn/QoeY/+juLu+Ek/1KTwUcGGi982VJb3BUaXQfjWCf vcrBt1bqKgYBsJnI091HUewJi4MLXvZ6v5H8rw5cvuNqAGoyqPU4obMkVL4z2w7B NYnvzXVnAP+1mq2rX4SzdSTxFhQ9bZS5tNsZND/HoKwVk4RBoaCPm0V6yBFSEUU+ 8lWmPDy/1/ve8V0pJzjgOhVaHejwSzH2gZI1fLKk4+8Ip5+szOvKHQW5spiUwkR7 rlZGX9bzLcJsh7PQI7+xM3U3/dIuA7GWz3CvDmSKraGr7vjrmOvoIp0wGw2n3jWW 9QVjpVviv6R6ltKg/LNa4BAwAmzVyFWFiEABkl7n/+8s0JfTtp0xkNccUovuse79 jrqMigD8ZgHTSSe1zVJWt+GBAjG4GbxIImJFtOAHUMxogIhlGHIUg69EHAgGRHwG zim+zYGi3MWHb0X2EDrC1T4IPpTpiZS8WxZAgskM5bv0GhjTwgNvfTz/wLBn6/MF m5T62YAEnCygtUs74PlIu2XEDeZUzQBkyQd7GdO7qKoSICOkc+bZ7fbB5jnBJmGW qHhzy9U/CQmZOhkdwgrTtNQLMI2+YX3bzcAiYMv0Fk+3fS4OrVbqPnZvUUzOWMXa 7qgv3y1YVpE+uETN+VDe5EKm53iFoundY4TmHoCDSYz+E8kP1RU= =wio4 -----END PGP SIGNATURE-----