pdns-recursor (4.8.8-1devuan1) daedalus-security; urgency=medium * Merge tag debian/4.8.8-1. -- Mark Hindley Fri, 26 Apr 2024 07:31:58 +0100 pdns-recursor (4.8.8-1) bookworm-security; urgency=medium * New upstream version 4.8.8 * Fixes CVE-2024-25583, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html -- Chris Hofstaedtler Thu, 25 Apr 2024 08:22:09 +0200 pdns-recursor (4.8.7-1devuan1) daedalus-security; urgency=medium * Merge tag debian/4.8.7-1. -- Mark Hindley Wed, 27 Mar 2024 11:46:46 +0000 pdns-recursor (4.8.7-1) bookworm-security; urgency=medium * New upstream version 4.8.7 * Fixes regression introduced in the fixes for CVE-2023-50387 and CVE-2023-50868 -- Chris Hofstaedtler Sun, 17 Mar 2024 17:21:52 +0100 pdns-recursor (4.8.6-1devuan1) daedalus-security; urgency=medium * Merge branch debian/bookworm. -- Mark Hindley Tue, 27 Feb 2024 15:26:16 +0000 pdns-recursor (4.8.6-1) stable-security; urgency=medium * New upstream version 4.8.6 * Fixes CVE-2023-50387 and CVE-2023-50868, see https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html Introduces new configuration settings: * aggressive-cache-max-nsec3-hash-cost * max-dnskeys * max-ds-per-zone * max-nsec3-hash-computations-per-query * max-nsec3s-per-record * max-rrsigs-per-record * max-signature-validations-per-query * Fixes integer overflow in yahttp (webserver) * Fixes partial reads in ixfrdist * Fixes setting of policy tags for packet cache hits * Setup gbp.conf for Debian bookworm * d/watch: set to 4.8 branch -- Chris Hofstaedtler Fri, 16 Feb 2024 12:21:56 +0100 pdns-recursor (4.8.4-1devuan1) unstable; urgency=medium * Merge tag debian/4.8.4-1. -- Mark Hindley Wed, 05 Apr 2023 17:21:53 +0100 pdns-recursor (4.8.4-1) unstable; urgency=medium * New upstream version 4.8.4 * Fixes CVE-2023-26437, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html (Closes: #1033941) * Fixes high CPU usage caused by serve-stale logic. * Fixes DNSSEC validation issues for some domains served by popular DNS software by F5. * Downgrades severity for a few log messages. -- Chris Hofstaedtler Tue, 04 Apr 2023 11:10:26 +0000 pdns-recursor (4.8.2-1devuan1) unstable; urgency=medium * Merge tag debian/4.8.2-1. -- Mark Hindley Tue, 31 Jan 2023 21:11:40 +0000 pdns-recursor (4.8.2-1) unstable; urgency=medium * New upstream version 4.8.2 -- Chris Hofstaedtler Tue, 31 Jan 2023 16:46:42 +0000 pdns-recursor (4.8.1-1devuan1) unstable; urgency=medium * Merge tag debian/4.8.1-1. -- Mark Hindley Sun, 22 Jan 2023 06:35:35 +0000 pdns-recursor (4.8.1-1) unstable; urgency=medium * New upstream version 4.8.1 Fixes CVE-2023-22617 -- Chris Hofstaedtler Sat, 21 Jan 2023 14:46:48 +0000 pdns-recursor (4.8.0-2devuan1) unstable; urgency=medium * Merge tag debian/4.8.0-2. -- Mark Hindley Sun, 25 Dec 2022 15:19:44 +0000 pdns-recursor (4.8.0-2) unstable; urgency=medium * Build-Depend on architecture-is-64-bit (for time_t) (Closes: #1023277) -- Chris Hofstaedtler Sun, 25 Dec 2022 11:01:09 +0000 pdns-recursor (4.8.0-1devuan1) unstable; urgency=medium * Merge tag debian/4.8.0-1. * Drop 32bit archs as workaround no longer sufficient. -- Mark Hindley Tue, 13 Dec 2022 16:30:43 +0000 pdns-recursor (4.8.0-1) unstable; urgency=medium [ Manuel A. Fernandez Montecelo ] * Add support for riscv64 arch (Closes: #1025040) [ Chris Hofstaedtler ] * New upstream version 4.8.0 * Refresh patches -- Chris Hofstaedtler Tue, 13 Dec 2022 08:20:45 +0000 pdns-recursor (4.7.4-1devuan1) unstable; urgency=medium * Merge tag debian/4.7.4-1. -- Mark Hindley Sat, 26 Nov 2022 13:40:21 +0000 pdns-recursor (4.7.4-1) unstable; urgency=medium * New upstream version 4.7.4 -- Chris Hofstaedtler Fri, 25 Nov 2022 13:16:18 +0000 pdns-recursor (4.7.3-2devuan2) UNRELEASED; urgency=medium * d/changelog: reword last entry. -- Mark Hindley Fri, 25 Nov 2022 17:31:18 +0000 pdns-recursor (4.7.3-2devuan1) unstable; urgency=medium * Merge Debian 4.7.3-2. * Revert "Set explicit architecture list". 32bit builds are still supported in Devuan (with warning). -- Mark Hindley Wed, 02 Nov 2022 07:08:16 +0000 pdns-recursor (4.7.3-2) unstable; urgency=medium * Set explicit architecture list. A better solution than hard-coded lists or letting builds fail would be much welcome. -- Chris Hofstaedtler Tue, 01 Nov 2022 16:50:18 +0000 pdns-recursor (4.7.3-1devuan1) unstable; urgency=medium * Merge tag debian/4.7.3-1. -- Mark Hindley Sun, 09 Oct 2022 07:22:11 +0100 pdns-recursor (4.7.3-1) unstable; urgency=medium * New upstream version 4.7.3 -- Chris Hofstaedtler Sat, 08 Oct 2022 12:15:07 +0000 pdns-recursor (4.7.2-1devuan1) unstable; urgency=medium * Merge tag debian/4.7.2-1. -- Mark Hindley Thu, 25 Aug 2022 07:00:28 +0100 pdns-recursor (4.7.2-1) unstable; urgency=medium * New upstream version 4.7.2 -- Chris Hofstaedtler Wed, 24 Aug 2022 07:05:24 +0000 pdns-recursor (4.7.1-1devuan1) unstable; urgency=medium * Merge tag debian/4.7.1-1. -- Mark Hindley Fri, 15 Jul 2022 07:12:13 +0100 pdns-recursor (4.7.1-1) unstable; urgency=medium * New upstream version 4.7.1 -- Chris Hofstaedtler Thu, 14 Jul 2022 09:22:38 +0000 pdns-recursor (4.6.2-1devuan1) unstable; urgency=medium * Merge tag debian/4.6.2-1. -- Mark Hindley Fri, 15 Apr 2022 19:05:09 +0100 pdns-recursor (4.6.2-1) unstable; urgency=medium * New upstream version 4.6.2 * Remove no longer necessary path for OpenSSL 3.0 -- Chris Hofstaedtler Thu, 14 Apr 2022 20:23:45 +0000 pdns-recursor (4.6.1-1devuan1) unstable; urgency=medium * Merge tag debian/4.6.1-1. -- Mark Hindley Tue, 29 Mar 2022 07:34:20 +0100 pdns-recursor (4.6.1-1) unstable; urgency=medium * New upstream version 4.6.1, fixing CVE-2022-27227 * Fix build with OpenSSL 3.0. Thanks to Steve Langasek (Closes: #1006520) -- Chris Hofstaedtler Mon, 28 Mar 2022 11:03:20 +0000 pdns-recursor (4.6.0-1+devuan1) unstable; urgency=medium * Merge Debian 4.6.0-1. -- Mark Hindley Mon, 20 Dec 2021 11:44:02 +0000 pdns-recursor (4.6.0-1) unstable; urgency=medium * New upstream version 4.6.0 * Enable DNS-over-TLS, adding libcurl dependency * d/watch: Release version constraint -- Chris Hofstaedtler Fri, 17 Dec 2021 12:07:54 +0000 pdns-recursor (4.5.7-1+devuan1) unstable; urgency=medium * Merge Debian 4.5.7-1. * Restore builds on 32 bit architectures: only warn if time_t is 32 bit. -- Mark Hindley Mon, 15 Nov 2021 20:04:31 +0000 pdns-recursor (4.5.7-1) unstable; urgency=medium * New upstream version 4.5.7 -- Chris Hofstaedtler Fri, 05 Nov 2021 10:47:46 +0000 pdns-recursor (4.5.6-1+devuan1) unstable; urgency=medium * Merge debian/4.5.6-1. -- Mark Hindley Tue, 02 Nov 2021 12:27:26 +0000 pdns-recursor (4.5.6-1) unstable; urgency=medium * New upstream version 4.5.6 -- Chris Hofstaedtler Sat, 30 Oct 2021 18:23:55 +0000 pdns-recursor (4.5.5-1+devuan1) unstable; urgency=medium * Merge debian/4.5.5-1 * Only build for 64-bit architectures. Upstream has dropped 32-bit support -- Mark Hindley Tue, 19 Oct 2021 15:14:17 +0100 pdns-recursor (4.5.5-1) unstable; urgency=medium * New upstream version 4.5.5 * Refresh patches * Upstream dropped support for archs with 32bit time_t values * Unconditionally enable libcap * Build with fixed luajit on arm64 * d/watch: Update for 4.5 branch -- Chris Hofstaedtler Fri, 20 Aug 2021 17:00:03 +0000 pdns-recursor (4.4.2-3+devuan1) unstable; urgency=medium * Merge Debian 4.4.2-3. * autopkgtest: protect against journalctl not being available. -- Mark Hindley Wed, 24 Feb 2021 17:13:24 +0000 pdns-recursor (4.4.2-3) unstable; urgency=medium * autopkgtest: show journal on service restart failure -- Chris Hofstaedtler Sun, 24 Jan 2021 21:28:21 +0000 pdns-recursor (4.4.2-2+devuan1) unstable; urgency=medium * Merge debian/4.4.2-2. -- Mark Hindley Mon, 21 Dec 2020 16:59:56 +0000 pdns-recursor (4.4.2-2) unstable; urgency=medium * Bump Standards-Version to 4.5.1 * Build with luajit on amd64, and Lua 5.1 on other archs. Once #908137 is fixed, we should enable luajit on arm64 too. Unfortunately we were building with Lua 5.2 earlier, so this is a feature "regression" of sorts - but it can be much faster. * Solely rely on publicsuffix at runtime for current data. If public-suffix-list-file gets disabled in the runtime config, fall back to the upstream-supplied copy of the public suffix list, instead of what gets shipped in the publicsuffix package at build time. This spares us from declaing a Built-Using relation, which is annoying for security updates. When running with the suggested configuration, there are no changes to behaviour. -- Chris Hofstaedtler Thu, 17 Dec 2020 21:02:37 +0000 pdns-recursor (4.4.2-1) unstable; urgency=medium * New upstream version 4.4.2 * Drop upstream applied patches -- Chris Hofstaedtler Mon, 14 Dec 2020 12:26:33 +0000 pdns-recursor (4.4.1-1+devuan1) unstable; urgency=medium * Merge Debian 4.4.1-1. -- Mark Hindley Mon, 30 Nov 2020 17:02:46 +0000 pdns-recursor (4.4.1-1) unstable; urgency=medium * New upstream version 4.4.1 -- Chris Hofstaedtler Wed, 25 Nov 2020 21:12:52 +0000 pdns-recursor (4.4.0-2) unstable; urgency=medium * Add upstream patch to fix APL tests on big endian -- Chris Hofstaedtler Tue, 24 Nov 2020 15:38:21 +0000 pdns-recursor (4.4.0-1) unstable; urgency=medium * Update d/watch for 4.4.x series * New upstream version 4.4.0 (Closes: #975592) -- Chris Hofstaedtler Mon, 23 Nov 2020 22:17:50 +0000 pdns-recursor (4.3.5-1+devuan1) unstable; urgency=medium * Merge Debian 4.3.5-1. -- Mark Hindley Sat, 24 Oct 2020 11:44:57 +0100 pdns-recursor (4.3.5-1) unstable; urgency=medium * New upstream version 4.3.5 -- Chris Hofstaedtler Mon, 19 Oct 2020 07:55:50 +0000 pdns-recursor (4.3.4-1+devuan1) unstable; urgency=medium * Merge Debian 4.3.4-1. -- Mark Hindley Wed, 09 Sep 2020 18:02:00 +0100 pdns-recursor (4.3.4-1) unstable; urgency=medium * New upstream version 4.3.4 -- Chris Hofstaedtler Tue, 08 Sep 2020 20:50:53 +0000 pdns-recursor (4.3.3-1+devuan1) unstable; urgency=medium * Merge Debian 4.3.3-1. -- Mark Hindley Sat, 18 Jul 2020 15:21:39 +0100 pdns-recursor (4.3.3-1) unstable; urgency=medium * New upstream version 4.3.3 -- Chris Hofstaedtler Fri, 17 Jul 2020 09:53:55 +0000 pdns-recursor (4.3.2-1+devuan1) unstable; urgency=medium * Merge Debian version 4.3.2-1. * d/control: update Vcs-* urls following Gitea migration. -- Mark Hindley Wed, 08 Jul 2020 12:12:28 +0100 pdns-recursor (4.3.2-1) unstable; urgency=medium * d/upstream/metadata: add Bug-Submit URL * New upstream version 4.3.2 -- Chris Hofstaedtler Tue, 07 Jul 2020 17:28:15 +0000 pdns-recursor (4.3.1-1+devuan2) unstable; urgency=medium * Remove preinst script which was removing initscript on upgrades. * Fix autopkgtest: shutdown test instance after use. -- Mark Hindley Mon, 25 May 2020 10:11:32 +0100 pdns-recursor (4.3.1-1+devuan1) unstable; urgency=medium * Merge Debian version 4.3.1-1. -- Mark Hindley Sun, 24 May 2020 10:42:59 +0100 pdns-recursor (4.3.1-1) unstable; urgency=medium * New upstream version 4.3.1, includes fixes for security issues CVE-2020-10995, CVE-2020-12244, CVE-2020-10030. -- Chris Hofstaedtler Tue, 19 May 2020 16:14:57 +0000 pdns-recursor (4.3.0-2+devuan2) unstable; urgency=medium * d/control: remove Built-Using field. * d/rules: disable unit-tests (armel runs out of memory under qemu). -- Mark Hindley Tue, 19 May 2020 10:13:05 +0100 pdns-recursor (4.3.0-2+devuan1) unstable; urgency=medium * Initial fork for Devuan (Closes: #439) - Build without systemd - Reinstate init file - Fix run dir creation and pidfile location * No longer use START=yes|no in /etc/default/pdns-recursor. * Run daemon as pdns:pdns. -- Mark Hindley Thu, 14 May 2020 10:20:25 +0100 pdns-recursor (4.3.0-2) unstable; urgency=medium * Stop embedding version in shipped config file * Stop embedding a timestamp in shipped config file -- Chris Hofstaedtler Fri, 01 May 2020 21:54:26 +0000 pdns-recursor (4.3.0-1) unstable; urgency=medium * New upstream version 4.3.0, drop upstream applied patches (Closes: #957674) * Use debhelper v13, bump Standards-Version to 4.5.0 * Enable Dnstap feature * Follow upstream socket-dir path and service user change. This also drops the init script: the socket-dir is now in a dynamically created path, and pdns-recursor expects to be started as non-root already. Both changes are unfeasible to support under a legacy init. -- Chris Hofstaedtler Wed, 29 Apr 2020 18:20:05 +0000 pdns-recursor (4.2.1-1) unstable; urgency=medium [ Debian Janitor ] * Set fields Upstream-Contact in debian/copyright. * Remove obsolete fields Name, Contact from debian/upstream/metadata. [ Chris Hofstaedtler ] * rootkeys.lua: remove superfluous clearTA and add comment about refresh time. Thanks to Pieter Lexis * Bump Standards-Version to 4.4.1 * Restrict d/watch to 4.2 releases * New upstream version 4.2.1 * Refresh testrunner verbosity patch * Remove patches merged upstream -- Chris Hofstaedtler Mon, 09 Dec 2019 19:26:00 +0000 pdns-recursor (4.2.0-6) unstable; urgency=medium * Improve test reliability using patch from upstream. Hopefully fixes FTBFS on mipsel once more, in test_dnssec_secure_various_algos. -- Chris Hofstaedtler Tue, 23 Jul 2019 00:05:05 +0000 pdns-recursor (4.2.0-5) unstable; urgency=medium * Improve test reliability using patch from upstream. Hopefully fixes FTBFS on mips, in test_auth_zone_delegation. -- Chris Hofstaedtler Mon, 22 Jul 2019 15:26:07 +0000 pdns-recursor (4.2.0-4) unstable; urgency=medium * d/rules: make lintian happy about override_dh_auto_test * Build with libcap only on Linux archs * d/control, d/rules: sync with dnsdist, pdns * Filter net-snmp-config flags, see #870734 -- Chris Hofstaedtler Sun, 21 Jul 2019 21:39:31 +0000 pdns-recursor (4.2.0-3) unstable; urgency=medium * Ship DEP12 UpstreamMetadata per user request -- Chris Hofstaedtler Sun, 21 Jul 2019 13:23:57 +0000 pdns-recursor (4.2.0-2) unstable; urgency=medium * Apply patch from upstream to fix FTBFS on platforms not having boost-context * Build with libboost-context-dev on ppc64el -- Chris Hofstaedtler Tue, 16 Jul 2019 12:28:49 +0000 pdns-recursor (4.2.0-1) unstable; urgency=medium * New upstream version 4.2.0 * Patch testrunner-log-verbosity: refresh. * Patch stack-size: refresh. * d/rules: update configure args for libsodium * Ignore lintian error about pdns-recursor@.service * New required build-dependencies: libboost-system-dev, libboost-thread-dev, systemd. * Load data from publicsuffix package at startup * Remove deprecated, sysvinit-only resolvconf integration * Build with SNMP support (again) * Build with libcap * Update rootkeys.lua to use new built-in functionality * Use debhelper-compat 12 * Bump Standards-Version to 4.4.0 -- Chris Hofstaedtler Mon, 15 Jul 2019 17:23:47 +0000 pdns-recursor (4.1.11-1) unstable; urgency=medium * New upstream version 4.1.11 * Upstream has applied the patch introduced in 4.1.10-2, remove it. -- Chris Hofstaedtler Sun, 03 Feb 2019 15:02:43 +0000 pdns-recursor (4.1.10-2) unstable; urgency=high * Apply patch from upstream to avoid timing issue in tests * Keeping urgency=high to allow migration of the security fix in 4.1.9-1 after the mipsel build failure. -- Chris Hofstaedtler Thu, 24 Jan 2019 16:19:32 +0000 pdns-recursor (4.1.10-1) unstable; urgency=high * New upstream version 4.1.10, fixing build without protobuf, which is not a problem in Debian. * Re-add stack-size patch, hoping it fixes the mipsel build failure * Keeping urgency=high to allow migration of the security fix in 4.1.9-1 after the mipsel build failure. -- Chris Hofstaedtler Thu, 24 Jan 2019 14:53:59 +0000 pdns-recursor (4.1.9-1) unstable; urgency=high * New upstream version 4.1.9, including fixes for: CVE-2019-3806 CVE-2019-3807. * Remove upstream applied patches. -- Chris Hofstaedtler Mon, 21 Jan 2019 13:08:42 +0000 pdns-recursor (4.1.8-2) unstable; urgency=medium * Apply patch from upstream to avoid transient test failure on slow archs -- Chris Hofstaedtler Wed, 28 Nov 2018 12:32:23 +0000 pdns-recursor (4.1.8-1) unstable; urgency=medium * New upstream version 4.1.8, including fix for CVE-2018-16855. -- Chris Hofstaedtler Mon, 26 Nov 2018 15:22:39 +0000 pdns-recursor (4.1.7-1) unstable; urgency=medium * New upstream version 4.1.7, including fixes for: CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 (Closes: #913162). * Remove upstream applied patch. -- Chris Hofstaedtler Fri, 09 Nov 2018 19:44:44 +0000 pdns-recursor (4.1.4-3) unstable; urgency=medium * Run MTasker test with the stack-size pdns_recursor would use -- Chris Hofstaedtler Sun, 09 Sep 2018 19:29:51 +0000 pdns-recursor (4.1.4-2) unstable; urgency=medium * Show results of make check in build logs * Remove override_dh_strip, ddeb migration is complete * Move lintian source overrides to non-deprecated location * Use debhelper compat level 11 -- Chris Hofstaedtler Sun, 09 Sep 2018 16:11:21 +0000 pdns-recursor (4.1.4-1) unstable; urgency=medium * Bump Standards-Version to 4.2.1 * New upstream version 4.1.4 * Load DNSSEC root keys from dns-root-data package (Closes: #760470) -- Chris Hofstaedtler Mon, 03 Sep 2018 07:55:52 +0000 pdns-recursor (4.1.3-2) unstable; urgency=medium * d/rules: sync build options from pdns package. Includes: hardening=+all instead of +bindnow,+pie. Use dpkg make macros to derive current version and vendor. Force enable -Wall. * Update copyright format URL and years -- Chris Hofstaedtler Thu, 26 Jul 2018 11:31:22 +0000 pdns-recursor (4.1.3-1) unstable; urgency=medium * New upstream version 4.1.3 * Remove upstream applied patches (all) * Bump Standards-Version to 4.1.5 -- Chris Hofstaedtler Mon, 23 Jul 2018 06:56:51 +0000 pdns-recursor (4.1.2-1) unstable; urgency=medium * New upstream version 4.1.2, remove upstream applied patches. -- Chris Hofstaedtler Thu, 29 Mar 2018 17:18:23 +0000 pdns-recursor (4.1.1-2) unstable; urgency=medium * Replace obsolete priority extra with optional * Add a default include-dir= setting -- Chris Hofstaedtler Fri, 23 Feb 2018 10:41:09 +0000 pdns-recursor (4.1.1-1) unstable; urgency=medium * New upstream version 4.1.1 * Drop upstream applied, refresh other patches -- Chris Hofstaedtler Mon, 22 Jan 2018 19:03:19 +0000 pdns-recursor (4.1.0-5) unstable; urgency=medium * Avoid boost-context on platforms where it is broken -- Chris Hofstaedtler Fri, 19 Jan 2018 22:12:09 +0000 pdns-recursor (4.1.0-4) unstable; urgency=medium * Update Maintainer: as alioth is going away * Update Vcs-* URLs to point to salsa.debian.org * Bump Standards-Version to 4.1.3 (no changes) -- Chris Hofstaedtler Thu, 18 Jan 2018 20:46:32 +0000 pdns-recursor (4.1.0-3) unstable; urgency=medium * Add patch from James Cowgill to fix crashes on mips64el. Thanks for analysis and the patch! (Closes: #887034) -- Chris Hofstaedtler Fri, 12 Jan 2018 21:11:55 +0000 pdns-recursor (4.1.0-2) unstable; urgency=medium * Add patches from upstream improving test reliability. * Bump Standards-Version to 4.1.2 (no changes). -- Chris Hofstaedtler Tue, 12 Dec 2017 09:51:18 +0000 pdns-recursor (4.1.0-1) unstable; urgency=medium * New upstream version 4.1.0, upload to unstable. * Build with libsodium for DNSSEC algo 15 support. * Enable unit tests during build time. -- Chris Hofstaedtler Mon, 04 Dec 2017 15:20:54 +0000 pdns-recursor (4.1.0~rc3-1) experimental; urgency=medium * New upstream version 4.1.0~rc3 * Update upstream signing key -- Christian Hofstaedtler Mon, 27 Nov 2017 21:02:42 +0000 pdns-recursor (4.1.0~alpha1-1) experimental; urgency=medium * New upstream version 4.1.0~alpha1 * Bump Standards-Version to 4.1.1 (no changes) * Remove Build-Depends: satisfied by debhelper >= 10 -- Christian Hofstaedtler Tue, 10 Oct 2017 05:46:20 +0000 pdns-recursor (4.0.7-1) unstable; urgency=medium * New upstream version 4.0.7, fixes CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094. * Update upstream signing key -- Christian Hofstaedtler Mon, 27 Nov 2017 21:05:16 +0000 pdns-recursor (4.0.6-1) unstable; urgency=medium * New upstream version 4.0.6 * Drop upstream applied patches * Drop RestrictAddressFamilies workaround for 32bit hosts, relevant only for some versions of systemd in stretch. -- Christian Hofstaedtler Tue, 11 Jul 2017 17:56:13 +0000 pdns-recursor (4.0.5-2) unstable; urgency=medium * Move -latomic handling into upstream hands, including a patch from upstream to fix FTBFS on ppc64el. -- Christian Hofstaedtler Tue, 04 Jul 2017 13:07:56 +0000 pdns-recursor (4.0.5-1) unstable; urgency=medium * New upstream version 4.0.5. * Drop upstream applied patches. * Bump Standards-Version to 4.0.0. -- Christian Hofstaedtler Tue, 04 Jul 2017 10:50:08 +0000 pdns-recursor (4.0.4-2) unstable; urgency=medium * Add new root trust anchor KSK-2017 to embedded root trust list. (Closes: #866112) -- Christian Hofstaedtler Tue, 27 Jun 2017 12:31:08 +0000 pdns-recursor (4.0.4-1) unstable; urgency=medium * New upstream version, fixing security issues CVE-2016-7068 and CVE-2016-7073 CVE-2016-7074. * Also includes DNSSEC improvements, parts of which we carried as patches already. * Drop upstream applied patches. -- Christian Hofstaedtler Sat, 14 Jan 2017 03:03:18 +0000 pdns-recursor (4.0.3-6) unstable; urgency=medium * Upload to unstable again. * Import further patches from upstream to fix DNSSEC and RPZ issues. -- Christian Hofstaedtler Mon, 02 Jan 2017 22:15:58 +0000 pdns-recursor (4.0.3-5+exp3) experimental; urgency=medium * Add file missing from dist tarball so pubsuffix.cc can be rebuilt -- Christian Hofstaedtler Mon, 02 Jan 2017 14:41:26 +0000 pdns-recursor (4.0.3-5+exp2) experimental; urgency=medium * Build-Depend on ragel to ensure dnslabeltext.cc is rebuilt. * Take public suffix list from publicsuffix package at build time. * Bump dh compat to 10, remove now obsolete extra args/build-depends. -- Christian Hofstaedtler Mon, 02 Jan 2017 10:54:55 +0000 pdns-recursor (4.0.3-5+exp1) experimental; urgency=medium * Allow building with boost::fcontext again, by importing more patches from upstream. * Target experimental, but hope that fcontext works on all architectures anyway. -- Christian Hofstaedtler Mon, 02 Jan 2017 09:59:15 +0000 pdns-recursor (4.0.3-5) unstable; urgency=medium * Drop RestrictAddressFamilies from .service file on 32bit. This feature is broken in systemd before v233. (See also #849817) * Add patches from upstream 4.0 series branch. Fixes a crash in DNSSEC validation (in getZoneCuts) and in statistics code. -- Christian Hofstaedtler Sat, 31 Dec 2016 15:37:18 +0000 pdns-recursor (4.0.3-4) unstable; urgency=medium * Add patches from upstream fixing DNSSEC, RPZ issues -- Christian Hofstaedtler Sun, 11 Dec 2016 11:50:37 +0000 pdns-recursor (4.0.3-3) unstable; urgency=medium * Drop our lsb-base dependency to avoid versioning it -- Christian Hofstaedtler Tue, 11 Oct 2016 03:08:20 +0000 pdns-recursor (4.0.3-2) unstable; urgency=medium * Disable systemd integration on non-Linux archs. Patch from Pino Toscano . (Closes: #834235) -- Christian Hofstaedtler Mon, 10 Oct 2016 14:30:03 +0000 pdns-recursor (4.0.3-1) unstable; urgency=medium * New upstream version 4.0.3. * Drop upstream applied patches. * Disable check for boost fcontext, as its API has changed in boost 1.61. -- Christian Hofstaedtler Wed, 07 Sep 2016 08:39:15 +0000 pdns-recursor (4.0.2-1) unstable; urgency=medium * New upstream version 4.0.2 * Add patches from upstream to fix build with OpenSSL 1.1.0 final (again) -- Christian Hofstaedtler Mon, 05 Sep 2016 19:00:33 +0000 pdns-recursor (4.0.1-1) unstable; urgency=medium * New upstream version. (Closes: #828491) -- Christian Hofstaedtler Sat, 30 Jul 2016 20:44:16 +0000 pdns-recursor (4.0.0-3) unstable; urgency=medium * postinst: Remove redundant guard around addgroup/adduser * debian/watch: Fix versionmangle for rc releases -- Christian Hofstaedtler Mon, 18 Jul 2016 07:31:27 +0000 pdns-recursor (4.0.0-2) unstable; urgency=medium * Drop --retry in initscript stop action (Closes: #768078) * Drop initscript force-stop action. Which would use killall and as such not be safe on a container host. * Deprecate resolvconf integration and flip default to off * Drop "Replaces: pdns" which has not been needed since wheezy * Drop version on Depends: lsb-base, which is already fulfilled in oldstable * Drop upgrade code from versions before oldoldstable * Ensure daemon startup errors do not cause dpkg to fail * Update package description * Drop unused lintian overrides * Drop unused update-rc.d parameters -- Christian Hofstaedtler Wed, 13 Jul 2016 11:22:54 +0200 pdns-recursor (4.0.0-1) unstable; urgency=medium * New upstream release. -- Christian Hofstaedtler Mon, 11 Jul 2016 11:35:46 +0200 pdns-recursor (4.0.0~rc1-2) unstable; urgency=medium * Move package to pkg-dns team * Update debhelper dependency for dbgsym options * Improve reproducibility by sorting included files * Inform lintian about OpenSSL Exception * Remove unused license from debian/copyright -- Christian Hofstaedtler Sun, 03 Jul 2016 11:19:38 +0200 pdns-recursor (4.0.0~rc1-1) unstable; urgency=medium * New upstream version. -- Christian Hofstaedtler Fri, 10 Jun 2016 21:58:56 +0000 pdns-recursor (4.0.0~beta1-2) unstable; urgency=medium * Update debian/copyright. * Build with upstreams systemd support and use it. * Raise LimitNOFILE to match default mthread setting (again). -- Christian Hofstaedtler Sun, 29 May 2016 21:05:49 +0000 pdns-recursor (4.0.0~beta1-1) unstable; urgency=medium * New upstream version. * debian/watch: fix missing versionmangle setting * Drop DNSSEC disabling patch, in favor of upstreams new process-no-validate default. -- Christian Hofstaedtler Sat, 28 May 2016 18:24:02 +0000 pdns-recursor (4.0.0~alpha3-1) unstable; urgency=medium * New upstream version. * Drop upstream applied patch for boost detection. * Bump Standards-Version to 3.9.8 (no changes needed) -- Christian Hofstaedtler Thu, 12 May 2016 20:35:07 +0000 pdns-recursor (4.0.0~alpha2-2) unstable; urgency=medium * Apply patch from upstream to fix build without boost::context, hopefully fixing missing builds on arm64, s390x. -- Christian Hofstaedtler Mon, 28 Mar 2016 12:15:09 +0000 pdns-recursor (4.0.0~alpha2-1) unstable; urgency=medium * New Upstream version 4.0.0~alpha2, with autotools build system. (Closes: #809091) * Disable DNSSEC processing for this release, per upstream recommendation. -- Christian Hofstaedtler Wed, 09 Mar 2016 15:22:59 +0000 pdns-recursor (4.0.0~alpha1-3) unstable; urgency=medium * Update systemd unit file from upstream * Drop pdns-recursor-dbg in favor of automated dbgsym packages * Disable secpoll by default * Use root hints from dns-root-data package (Closes: #760470) * Drop Build-Depends: quilt, as we just rely on dpkg-source * Increase LimitNOFILE to a size suitable for default mthreads -- Christian Hofstaedtler Thu, 25 Feb 2016 00:02:07 +0000 pdns-recursor (4.0.0~alpha1-2) unstable; urgency=medium * Manage daemon flag in init script, not in config file. For users that get this wrong in their recursor.conf. -- Christian Hofstaedtler Sat, 26 Dec 2015 23:25:30 +0000 pdns-recursor (4.0.0~alpha1-1) unstable; urgency=medium * Imported Upstream version 4.0.0~alpha1 * debian/watch: Add upstream signature check * Update debian/copyright * Generate recursor.conf during build * Install example files * Enable reproducible build -- Christian Hofstaedtler Fri, 25 Dec 2015 17:47:26 +0000 pdns-recursor (3.7.3-1) unstable; urgency=medium * Imported Upstream version 3.7.3 (prevent short bursts of high resource usage with malformed qnames). -- Christian Hofstaedtler Sun, 14 Jun 2015 21:18:28 +0200 pdns-recursor (3.7.2-1) unstable; urgency=medium * Stop recommending long gone pdns-doc package * Imported Upstream version 3.7.2 (Fixes CVE-2015-1868) -- Christian Hofstaedtler Tue, 21 Apr 2015 19:13:05 +0200 pdns-recursor (3.7.1-1) unstable; urgency=medium * Imported Upstream version 3.7.1 -- Christian Hofstaedtler Tue, 14 Apr 2015 22:30:54 +0200 pdns-recursor (3.6.2-2) unstable; urgency=medium * Set package vendor for security status polling. Requires directly including buildflags.mk so d/rules can modify CXXFLAGS. (Closes: #767701) * d/control: Update Vcs-Git and Vcs-Browser * Fix "smoke" autopkgtest. The test definition was incorrectly copied from the pdns-server package. -- Christian Hofstaedtler Sat, 15 Nov 2014 17:42:26 +0100 pdns-recursor (3.6.2-1) unstable; urgency=high * Imported Upstream version 3.6.2, a bugfix release (Closes: #767368) * Remove API key patch, which has been incorporated upstream. -- Christian Hofstaedtler Thu, 30 Oct 2014 17:22:19 +0100 pdns-recursor (3.6.1-3) unstable; urgency=medium * Apply API key patch from upstream * Bump Standards-Version to 3.9.6 (no further changes) -- Christian Hofstaedtler Tue, 21 Oct 2014 21:31:43 +0200 pdns-recursor (3.6.1-2) unstable; urgency=medium * Drop patch 'pdns-recursor-less-chatty' * Ship native systemd unit file * Enable extra hardening flags (PIE, bindnow) * Add smoke test, testing example.org resolution -- Christian Hofstaedtler Sat, 13 Sep 2014 19:21:43 +0200 pdns-recursor (3.6.1-1) unstable; urgency=high * Imported Upstream version 3.6.1 Fixes security issue: CVE-2014-3614 -- Christian Hofstaedtler Tue, 09 Sep 2014 22:55:49 +0200 pdns-recursor (3.6.0-2) unstable; urgency=medium [ Christian Hofstaedtler ] * Update debian/copyright file * Remove boilerplate from debian/watch * Update init script options: Removed X-Start-After and X-Stop-Before, which were sent to irrelevant services, and updated Description fields. * Add status target to init script. Thanks to Iain Georgeson (Closes: #730684) [ SATOH Fumiyasu ] * Enable resolvconf hooks only when $RESOLVCONF is set to 'yes' (Closes: #722659) -- Christian Hofstaedtler Tue, 24 Jun 2014 13:27:38 +0200 pdns-recursor (3.6.0-1) unstable; urgency=medium * Imported Upstream version 3.6.0 * Drop upstream applied patches 1443, 1444, 1445 -- Christian Hofstaedtler Fri, 20 Jun 2014 12:34:10 +0200 pdns-recursor (3.6.0~rc1-2) unstable; urgency=medium * Switch to Lua 5.2 -- Christian Hofstaedtler Mon, 09 Jun 2014 20:12:24 +0200 pdns-recursor (3.6.0~rc1-1) unstable; urgency=medium * Imported Upstream version 3.6.0~rc1 * Replace local patches with upstream PRs do-not-strip-binaries, hurd-ftbfs-patch, kfreebsd-ftbfs-patch and remove-pdns_hw-patch are now pending upstream approval and merge. * Add myself to Uploaders * Bump Standards-Version to 3.9.5 -- Christian Hofstaedtler Sun, 01 Jun 2014 17:39:35 +0200 pdns-recursor (3.5.3-1) unstable; urgency=low * New upstream version -- Matthijs Möhlmann Sun, 22 Sep 2013 14:45:58 +0200 pdns-recursor (3.5.2-2) unstable; urgency=low * Enable on all architectures (Closes: #579194) -- Matthijs Möhlmann Sat, 24 Aug 2013 16:13:37 +0200 pdns-recursor (3.5.2-1) unstable; urgency=low * New upstream version (Closes: #710048, #682851, #671592, #697355, #649724) - Refresh patches * Improve the patch to make pdns-recursor less chatty * Standards-Version: 3.9.4 (no changes necessary) * Remove pdns_hw on cleanup (Closes: #652833) -- Matthijs Möhlmann Tue, 06 Aug 2013 21:43:01 +0200 pdns-recursor (3.3-3) unstable; urgency=low * new maintainer team * new Vcs links * add Homepage * debhelper 9 (enable hardening) (Closes: 656859) * prepare new version * set unapply-patches * set Architecture to "all but arm{el,hf}" (Closes: 661959) * Standards-Version: 3.9.3 (no changes necessary) -- Marc Haber Mon, 18 Jun 2012 14:45:50 +0000 pdns-recursor (3.3-2) unstable; urgency=low * Fix my name in the init script and debian/control too. * Update Standards-Version to 3.9.2 * Use new build system dh instead of individual dh_* commands. -- Matthijs Möhlmann Mon, 08 Aug 2011 11:56:58 +0200 pdns-recursor (3.3-1) unstable; urgency=low * New upstream release. (Closes: #565052) * Init loop is fixed in pdns (Closes: #594805) * Now my name is spelled correctly. * Update Standards-Version to 3.9.1 * Update the recursor.conf and include new configuration parameters. * Add debug package (Closes: #594243) -- Matthijs Möhlmann Sat, 22 Jan 2011 16:39:02 +0100 pdns-recursor (3.2-4) unstable; urgency=high * Upgrading from a previous version fails when the pdns-recursor isn't started, this is RC bug hence urgency high. (Closes: #565415) * Fix watch file * Fix FTBFS on hurd again. -- Matthijs Mohlmann Tue, 20 Jul 2010 13:42:45 +0200 pdns-recursor (3.2-3) unstable; urgency=low * Add watch file * Switch to dpkg-source 3.0 (quilt) format * Fix FTBFS on hurd * Update logcheck rules. (Closes: #588135) * Update Standards-Version to 3.9.0 * Use dh_installinit instead of the pdns-recursor.install file. -- Matthijs Mohlmann Mon, 19 Jul 2010 14:39:02 +0200 pdns-recursor (3.2-2) unstable; urgency=low * Remove Christoph Haas from Uploaders. Thanks for the great work! * Add fix for FTBFS thanks to Petr Salinger (Closes: #575006) * Make pdns-recursor on startup less chatty (Closes: #438469) -- Matthijs Mohlmann Sat, 03 Apr 2010 13:46:23 +0200 pdns-recursor (3.2-1) unstable; urgency=low * New upstream version. * Update Standards-Version to 3.8.4 * Fix boot order, thanks to Petter Reinholdtsen (Closes: #566877) * All architectures enabled, needs testing (Closes: #489925) -- Matthijs Mohlmann Wed, 17 Mar 2010 10:59:28 +0100 pdns-recursor (3.1.7.2-1) unstable; urgency=high * New upstream version. (CVE-2009-4009 and CVE-2009-4010) (Closes: #564145) * Make lintian happy. * Now really add sh4 to the architecture list. (Closes: #551153) -- Matthijs Mohlmann Fri, 08 Jan 2010 18:14:44 +0100 pdns-recursor (3.1.7.1-4) unstable; urgency=low * Add mips, mipsel and sh4 to the supported list of architectures, only arm, armel and armeb are missing. See #369453 (Closes: #551153) -- Matthijs Mohlmann Fri, 06 Nov 2009 18:09:29 +0100 pdns-recursor (3.1.7.1-3) unstable; urgency=low * Update incorrect dependencies in the init.d script. (Closes: #547033) -- Matthijs Mohlmann Sun, 11 Oct 2009 18:46:58 +0200 pdns-recursor (3.1.7.1-2) unstable; urgency=low * Fixing FTBFS on several archs (Closes: #540867, #541689) * Added hppa and sparc architectures. See #489925, leaving open because of more unsupported architectures. -- Matthijs Mohlmann Sun, 16 Aug 2009 15:39:54 +0200 pdns-recursor (3.1.7.1-1) unstable; urgency=low * New upstream release (Closes: #497920) * Using new patch system quilt. * Updated Standards-Version to 3.8.2 * Enable lua scripting support (Closes: #534893) -- Matthijs Mohlmann Sun, 09 Aug 2009 12:58:06 +0200 pdns-recursor (3.1.7-5) unstable; urgency=low * Fix FTBFS bug with GCC 4.4 (closes: #506003) * Make pdns-recursor available on hppa and sparc (closes: #489925) by adding libc6-dev in a recent version to debian/control -- Christoph Haas Wed, 13 May 2009 21:36:55 +0200 pdns-recursor (3.1.7-4) unstable; urgency=low * Fix FTBFS bug (closes: #528164) -- Christoph Haas Mon, 11 May 2009 22:24:44 +0200 pdns-recursor (3.1.7-3) unstable; urgency=low * Fixed repository URL (SVN->Git) * Increased policy version to 3.8.0 (lintian warning) * Added proper description for gcc-4.2-ftbfs-fix.dpatch dpatch (lintian warning) * Fixed PIDFILE setting in init.d script (thanks to Serge Belyshev) -- Christoph Haas Sun, 14 Sep 2008 22:48:59 +0200 pdns-recursor (3.1.7-2) unstable; urgency=low * Regard return code from stopping pdns in init.d script (Closes: #478593) * Fixed init.d script's force-stop function. -- Christoph Haas Sun, 14 Sep 2008 17:36:42 +0200 pdns-recursor (3.1.7-1) unstable; urgency=low * New upstream version (Closes: #490069) (Closes: #477130) * init.d scripts gets socket-dir information from recursor.conf (Closes: #471568) * Added config file directives * Set dont-query to nothing so it won't break pre-3.1.7 configs. (Closes: #476841) -- Christoph Haas Mon, 31 Mar 2008 21:51:59 +0200 pdns-recursor (3.1.4-6) unstable; urgency=low * Standards-Version 3.7.3.0 * Remove pdns_hw too on cleanup. * Fix for truncating long TXT queries (Closes: #462114) * Don't ignore build errors (Closes: #462128) * Build option noopt was inoperative (Closes: #462126) * Added gcc 4.3 fixes from upstream (Closes: #455631) -- Matthijs Mohlmann Wed, 13 Feb 2008 22:49:08 +0100 pdns-recursor (3.1.4-5) unstable; urgency=low * daemon=no is now working if used in /etc/powerdns/recursor.conf (Closes: #440020) * patch added to reflect change of L root server (Closes: #449483) * Makefile patched to prevent stripping of binaries (Closes: #437765) -- Christoph Haas Fri, 09 Nov 2007 21:57:58 +0100 pdns-recursor (3.1.4-4) unstable; urgency=low * Update to debhelper 5. * Fix lintian warning: debian-rules-sets-DH_COMPAT. * Restore the changelog, it was partly removed by accident. (Closes: #421393) * Fix FTBFS with gcc-4.2 (Closes: #387113) -- Matthijs Mohlmann Sun, 03 Jun 2007 15:11:22 +0200 pdns-recursor (3.1.4-3) unstable; urgency=low * Stop/stop script does not return an error code when being called as 'stop' when the service is actually not running. (Closes: #406428) -- Debian PowerDNS Maintainers Wed, 21 Feb 2007 23:10:00 +0200 pdns-recursor (3.1.4-2) unstable; urgency=medium * Run pdns-recursor by default as non-privileged user. (Closes: #399669) * swapcontext is supported by kfreebsd (Fixes a FTBFS) (Closes: #403746) * Added lsb-base to the dependencies. (Closes: #402732) -- Matthijs Mohlmann Mon, 25 Dec 2006 14:00:10 +0100 pdns-recursor (3.1.4-1) unstable; urgency=medium * New upstream release. -- Matthijs Mohlmann Sun, 12 Nov 2006 23:52:20 +0100 pdns-recursor (3.1.3-3) unstable; urgency=low [ Matthijs Mohlmann ] * Don't build pdns-recursor for the following architectures: arm, mips, mipsel, hppa and sparc. No support for swapcontext system call. (Closes: #395801) * Fix a big endian problem with TCP processing large answers. * Fix a crash on any record we couldn't properly print for whatever reason. -- Matthijs Mohlmann Sun, 29 Oct 2006 17:50:34 +0100 pdns-recursor (3.1.3-2) unstable; urgency=low * Added patch to close a connectionless socket on an error. * Added patch to fix a FD leak. * Added missing lsb keyword Short-Description. -- Debian PowerDNS Maintainers Sun, 1 Oct 2006 14:52:46 +0200 pdns-recursor (3.1.3-1) unstable; urgency=low * New upstream release. * Make a lsb compliant init script, fixes a lintian warning. -- Debian PowerDNS Maintainers Thu, 14 Sep 2006 21:20:56 +0200 pdns-recursor (3.1.2-2) unstable; urgency=low * Added patch to fix crashes on 64bit platforms (Closes: #380403) * Added patch to prevent overwriting of auth data by unauth data. * Fix a small memleak. -- Debian PowerDNS Maintainers Sun, 6 Aug 2006 13:20:45 +0200 pdns-recursor (3.1.2-1) unstable; urgency=low * New upstream release. * Drop build-with-g++-4.1 patch. g++ 4.1 is default now. (Closes: #376696) * Fixed minor typo in recursor.conf (Closes: #369957) * Add logcheck rule for pdns-recursor to suppress logcheck warnings. (Closes: #367702) -- Debian PowerDNS Maintainers Tue, 4 Jul 2006 19:16:19 +0200 pdns-recursor (3.1.1-1) unstable; urgency=low * New upstream version. -- Debian PowerDNS Maintainers Wed, 24 May 2006 19:41:09 +0200 pdns-recursor (3.0.1-1) unstable; urgency=low * New upstream release (Closes: #366681) -- Debian PowerDNS Maintainers Tue, 25 Apr 2006 21:27:26 +0200