-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Feb 2024 12:21:56 +0100
Source: pdns-recursor
Binary: pdns-recursor pdns-recursor-dbgsym
Architecture: amd64
Version: 4.8.6-1
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Chris Hofstaedtler <zeha@debian.org>
Description:
 pdns-recursor - PowerDNS Recursor
Changes:
 pdns-recursor (4.8.6-1) bookworm-security; urgency=medium
 .
   * New upstream version 4.8.6
     * Fixes CVE-2023-50387 and CVE-2023-50868, see
       https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
       Introduces new configuration settings:
       * aggressive-cache-max-nsec3-hash-cost
       * max-dnskeys
       * max-ds-per-zone
       * max-nsec3-hash-computations-per-query
       * max-nsec3s-per-record
       * max-rrsigs-per-record
       * max-signature-validations-per-query
     * Fixes integer overflow in yahttp (webserver)
     * Fixes partial reads in ixfrdist
     * Fixes setting of policy tags for packet cache hits
   * Setup gbp.conf for Debian bookworm
   * d/watch: set to 4.8 branch
Checksums-Sha1:
 fc22c91fdc30fd8d0bcad1c5a48f24bd6852fdf6 41740700 pdns-recursor-dbgsym_4.8.6-1_amd64.deb
 3858cab84b64f058eccd6a6286950fe1c686a8a9 9297 pdns-recursor_4.8.6-1_amd64-buildd.buildinfo
 1059ef76292030c2ac77ba22ff2c2e1bf8e18968 1964644 pdns-recursor_4.8.6-1_amd64.deb
Checksums-Sha256:
 18200d2b4017bd81a2899ca200303bf6258fa3a88fd7b28dab73fb1ef8972e8e 41740700 pdns-recursor-dbgsym_4.8.6-1_amd64.deb
 417a1fd4d1540f953f929300b0c379526609f7f5f72b38770931bcc30d48aedb 9297 pdns-recursor_4.8.6-1_amd64-buildd.buildinfo
 e4e767e53f2ecbd6dd4a3c9a9e2c9e2b7f8d25b694be0c242cd44b816667554f 1964644 pdns-recursor_4.8.6-1_amd64.deb
Files:
 1e7e2c27fd151384d5c37704e8b27571 41740700 debug optional pdns-recursor-dbgsym_4.8.6-1_amd64.deb
 23544ea81a104d6017c770e06f8ae7e2 9297 net optional pdns-recursor_4.8.6-1_amd64-buildd.buildinfo
 e056bec777822216395187f1713a61fe 1964644 net optional pdns-recursor_4.8.6-1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfSHphWe6nwpTFrNNZXl/6h5+iU4FAmXP/IsACgkQZXl/6h5+
iU75bRAAkp+/Jz31YUYps2QGrOpUxR0h2nDF6dRkT5UMJH3kSx030QJIvJxay+Yn
RBKC9ghsia03s4YujsMYVa6S64n50QwvCzOfWICF+pSR/dviRXXyBXk1n7+pXVLp
XI4jMItIGNYFhcjAL3+/xWm6S5L+x9kn/x1IEIa98FsQTeOGC6K/I4MMKAg/jlXO
jUtSKUgDh9V4Rl+jBae2PpQcfrZcpL72dh5O33Mhy8huwHgKETp8YffRddXzckBB
foXEt7LlNGnMABMJcQb/Q3KP1cL0QQRqIdKuXUYo8rS7zPtcHh5x3plxpfysiuf2
EIxfrYSU92OJcZ0kJytExNl44f6op0dyarUbvWyPR0B0ET8Co15ONIyeXYULvbIX
WjRgCQ61S6nbVL4Rub2wV5mfquBYNTm1ZDd7MXEpb5IMabBRLbDSnRZEpt6H/WoD
KiEBlh1Q17JwnXHNIWk5IM4uEa0klm5drpKTFFtoRqZBO4jwdXM4wl3yiefmK0OL
BaJWljCsUSqNKur5dT1gncnM/ilAsh0F5bo1SKbwlTm2fk9ZjDwMZ/zifOOjvwGh
6oZMQkavNNvbzTkKTwNet20ufTTzeQMfShSPmNQ8021v+elHyhP0Udw6Ms6iRk7M
jLAzR4P6eegk+UT59Ic1YKt4gHvJL0YtAtszwViAmLb8mB8Ci34=
=nuxm
-----END PGP SIGNATURE-----