Change log for pdns package in Debian

175 of 145 results
Published in sid-release
pdns (4.9.1-3) unstable; urgency=medium

  * Apply workaround for finding libcrypto (Closes: #1078413)

 -- Chris Hofstaedtler <email address hidden>  Sun, 11 Aug 2024 14:25:46 +0200

Available diffs

Superseded in sid-release
pdns (4.9.1-2) unstable; urgency=medium

  * tests: depend on default-mysql-server (Closes: #1074780)
  * Set pdns.conf permissions only at install time (Closes: #1074076)

 -- Chris Hofstaedtler <email address hidden>  Wed, 17 Jul 2024 07:07:36 +0200

Available diffs

Superseded in sid-release
pdns (4.9.1-1) unstable; urgency=medium

  * New upstream version 4.9.1
  * Drop upstream applied patches

 -- Chris Hofstaedtler <email address hidden>  Thu, 13 Jun 2024 02:14:24 +0200

Available diffs

Superseded in sid-release
pdns (4.9.0-2) unstable; urgency=medium

  * Apply upstream patch to fix build on big-endian archs

 -- Chris Hofstaedtler <email address hidden>  Thu, 11 Apr 2024 10:42:34 +0200
Superseded in sid-release
pdns (4.9.0-1) unstable; urgency=medium

  * New upstream version 4.9.0
  * Follow supermaster option rename in default config files

 -- Chris Hofstaedtler <email address hidden>  Fri, 05 Apr 2024 14:54:01 +0200
Superseded in sid-release
pdns (4.8.3-4) unstable; urgency=medium

  * tests: mark tests as skippable for exit code 77 (Closes: #1059995)

 -- Chris Hofstaedtler <email address hidden>  Mon, 26 Feb 2024 02:41:58 +0100

Available diffs

Superseded in sid-release
pdns (4.8.3-3) unstable; urgency=medium

  * tests: Abort if IPC namespaces do not work (Closes: #1059995)

 -- Chris Hofstaedtler <email address hidden>  Sun, 21 Jan 2024 12:11:54 +0100
Superseded in sid-release
pdns (4.8.3-2) unstable; urgency=medium

  * Automatically discover systemdsystemunitdir
  * Switch from pkg-config to pkgconf

 -- Chris Hofstaedtler <email address hidden>  Sat, 21 Oct 2023 19:14:52 +0200
Superseded in sid-release
pdns (4.8.3-1) unstable; urgency=medium

  * New upstream version 4.8.3

 -- Chris Hofstaedtler <email address hidden>  Fri, 06 Oct 2023 03:32:43 +0200
Superseded in sid-release
pdns (4.8.2-2) unstable; urgency=medium

  * Drop debci workaround introduced in 4.8.1-2.
    Mitigated in debci.

 -- Chris Hofstaedtler <email address hidden>  Mon, 11 Sep 2023 15:54:49 +0200
Superseded in sid-release
pdns (4.8.2-1) unstable; urgency=medium

  * New upstream version 4.8.2
  * Apply wrap-and-sort -kas
  * Update Vcs-* headers for move to debian namespace

 -- Chris Hofstaedtler <email address hidden>  Thu, 07 Sep 2023 12:17:24 +0200
Superseded in sid-release
pdns (4.8.1-2) unstable; urgency=medium

  [ Andreas Jakum ]
  * Add missing tools to pdns-tools package description

  [ Chris Hofstaedtler ]
  * Properly cleanup after tests-source/smoke-lmdb (Closes: #1048680)
  * tests: add autopkgtest for lmdbbackend
  * autopkgtest: Improve error reporting
  * autopkgtest: Workaround ownership issue for LMDB files

 -- Chris Hofstaedtler <email address hidden>  Thu, 24 Aug 2023 17:46:32 +0200
Superseded in sid-release
pdns (4.8.1-1) unstable; urgency=medium

  * autopkgtest: try to workaround isolation restrictions in debci
  * New upstream version 4.8.1

 -- Chris Hofstaedtler <email address hidden>  Sun, 09 Jul 2023 20:50:25 +0200

Available diffs

Superseded in sid-release
pdns (4.8.0-2) unstable; urgency=medium

  [ Peter van Dijk ]
  * Use sdig for smoke tests. Avoids errors from dig with certain
    /etc/resolv.conf content.

 -- Chris Hofstaedtler <email address hidden>  Tue, 04 Jul 2023 10:42:01 +0200

Available diffs

Superseded in sid-release
pdns (4.8.0-1) unstable; urgency=medium

  * New upstream version 4.8.0
  * Lessen lintian override restrictions

 -- Chris Hofstaedtler <email address hidden>  Tue, 27 Jun 2023 16:42:28 +0200

Available diffs

Published in bookworm-release
Superseded in sid-release
pdns (4.7.3-2) unstable; urgency=medium

  * Build-Depend on architecture-is-64-bit (for time_t) (Closes: #1011259)

 -- Chris Hofstaedtler <email address hidden>  Sun, 25 Dec 2022 10:43:16 +0000

Available diffs

Superseded in sid-release
pdns (4.7.3-1) unstable; urgency=medium

  [ Manuel A. Fernandez Montecelo ]
  * Add support for riscv64 arch (Closes: #1025039)

  [ Chris Hofstaedtler ]
  * New upstream version 4.7.3

 -- Chris Hofstaedtler <email address hidden>  Fri, 09 Dec 2022 15:56:00 +0000

Available diffs

Superseded in sid-release
pdns (4.7.2-1) unstable; urgency=medium

  * New upstream version 4.7.2
  * Set explicit architecture list, to 64bit-time_t architectures.
    A better way of restricting where to build would be very welcome.

 -- Chris Hofstaedtler <email address hidden>  Tue, 01 Nov 2022 14:24:15 +0000
Superseded in sid-release
pdns (4.7.1-1) unstable; urgency=medium

  * New upstream version 4.7.1
  * Update (and trim) NEWS

 -- Chris Hofstaedtler <email address hidden>  Sat, 29 Oct 2022 18:34:58 +0000
Superseded in sid-release
pdns (4.6.3-1) unstable; urgency=medium

  * New upstream version 4.6.3

 -- Chris Hofstaedtler <email address hidden>  Thu, 14 Jul 2022 09:20:27 +0000

Available diffs

Superseded in sid-release
pdns (4.6.2-1) unstable; urgency=medium

  * New upstream version 4.6.2

 -- Chris Hofstaedtler <email address hidden>  Thu, 14 Apr 2022 20:06:44 +0000

Available diffs

Superseded in sid-release
pdns (4.6.1-1) unstable; urgency=medium

  * New upstream version 4.6.1, fixes CVE-2022-27227

 -- Chris Hofstaedtler <email address hidden>  Mon, 28 Mar 2022 16:48:27 +0000
Superseded in sid-release
pdns (4.5.3-1) unstable; urgency=medium

  * New upstream version 4.5.3

 -- Chris Hofstaedtler <email address hidden>  Sun, 23 Jan 2022 15:01:20 +0000
Superseded in sid-release
pdns (4.5.2-1) unstable; urgency=medium

  * New upstream version 4.5.2

 -- Chris Hofstaedtler <email address hidden>  Wed, 10 Nov 2021 09:56:06 +0000

Available diffs

Superseded in sid-release
pdns (4.5.1-1) unstable; urgency=medium

  * New upstream version 4.5.1
    Note: requires 64bit time_t support, thus not all current
    Debian architectures are supported.
  * NEWS: remove outdated words
  * NEWS: Note that lots of config parameters have changed names
  * Remove upstream-metadata-field-unknown Homepage
  * Update debian/copyright
  * Update gsqlite3, lua2 example config files

 -- Chris Hofstaedtler <email address hidden>  Sun, 07 Nov 2021 17:27:59 +0000

Available diffs

Superseded in sid-release
pdns (4.4.1-4) unstable; urgency=medium

  * Disable "random" backend.
    Removed upstream in 4.6.0.
  * tests-source: improve waiting for pdns to start and give it more time.
    This hopefully fixes the reported FTBFS on loaded machines.
    (Closes: #998547)

 -- Chris Hofstaedtler <email address hidden>  Sun, 07 Nov 2021 16:31:30 +0000

Available diffs

Superseded in sid-release
pdns (4.4.1-3) unstable; urgency=medium

  * Upload to unstable.
  * Unconditionally depend on libsystemd-dev.
    Already was required by d/rules.

 -- Chris Hofstaedtler <email address hidden>  Fri, 20 Aug 2021 16:33:09 +0000
Deleted in experimental-release (Reason: None provided.)
pdns (4.4.1-2) experimental; urgency=medium

  * Build with fixed luajit on arm64

 -- Chris Hofstaedtler <email address hidden>  Wed, 17 Feb 2021 16:29:25 +0000
Published in bullseye-release
Superseded in sid-release
pdns (4.4.1-1) unstable; urgency=medium

  * New upstream version 4.4.1 with important bugfixes
    * Drop upstream-applied patches
  * pdns-backend-odbc: remove duplicate schema file
  * Use Lua 5.3 again on platforms not having luajit
  * Remove outdated comment about make test
  * supported-algos test: add ED448
  * Enable PKCS11
  * I have re-synced our and upstreams packaging, so they are now
    as similar as possible.

 -- Chris Hofstaedtler <email address hidden>  Sun, 07 Feb 2021 15:01:51 +0000

Available diffs

Published in buster-release
pdns (4.1.6-3+deb10u1) buster; urgency=medium

  * Apply upstream patches to fix CVE-2019-10203.
    To actually fix this problem in existing installations, the newly
    supplied schema file 4.1.10_to_4.1.11.schema.pgsql.sql has to be
    manually applied to the backing PostgreSQL database. (Closes: #970729)
  * Apply upstream patches to fix CVE-2020-17482 (Closes: #970737)

 -- Chris Hofstaedtler <email address hidden>  Mon, 12 Oct 2020 12:42:43 +0000
Superseded in sid-release
pdns (4.4.0-3) unstable; urgency=medium

  * Build new pdns-backend-{lua2,lmdb} packages

 -- Chris Hofstaedtler <email address hidden>  Tue, 05 Jan 2021 09:08:55 +0000

Available diffs

Deleted in experimental-release (Reason: None provided.)
pdns (4.4.0-2+exp1) experimental; urgency=medium

  * Upload to experimental
  * Build new pdns-backend-{lua2,lmdb} packages

 -- Chris Hofstaedtler <email address hidden>  Mon, 28 Dec 2020 03:23:00 +0000
Superseded in sid-release
pdns (4.4.0-2) unstable; urgency=medium

  * ixfrdist: comment out default values
  * Update example config files for shipped backends
  * d/copyright: update
  * d/README.source: update, note upstream alignment
  * Add patch for future gcc-11 build failure

 -- Chris Hofstaedtler <email address hidden>  Mon, 28 Dec 2020 02:12:28 +0000

Available diffs

Superseded in sid-release
pdns (4.4.0-1) unstable; urgency=medium

  * New upstream version 4.4.0 (Closes: #975590)
  * Remove upstream-applied patches
  * Bump Standards-Version to 4.5.1
  * Build with luajit on amd64, and Lua 5.1 on other archs.
    Once #908137 is fixed, we should enable luajit on arm64 too.
    Unfortunately we were building with Lua 5.3 earlier, so this
    is a feature "regression" of sorts - but it can be much faster.

 -- Chris Hofstaedtler <email address hidden>  Thu, 17 Dec 2020 20:51:32 +0000
Deleted in experimental-release (Reason: None provided.)
pdns (4.4.0~rc1-1) experimental; urgency=medium

  * New upstream version 4.4.0~rc1 (Closes: #975590)
  * Remove upstream applied patches

 -- Chris Hofstaedtler <email address hidden>  Mon, 07 Dec 2020 11:46:07 +0000
Deleted in experimental-release (Reason: None provided.)
pdns (4.4.0~beta1-2) experimental; urgency=medium

  * Better no-venv patch from upstream
  * Add upstream bugfixes

 -- Chris Hofstaedtler <email address hidden>  Wed, 02 Dec 2020 11:34:51 +0000
Superseded in experimental-release
pdns (4.4.0~beta1-1) experimental; urgency=medium

  * New upstream version 4.4.0~beta1
  * Remove upstream applied patches

 -- Chris Hofstaedtler <email address hidden>  Tue, 01 Dec 2020 09:23:28 +0000
Superseded in sid-release
pdns (4.3.1-2) unstable; urgency=medium

  * Apply upstream patch to improve MySQL 8 character handling

 -- Chris Hofstaedtler <email address hidden>  Wed, 25 Nov 2020 21:16:04 +0000

Available diffs

Superseded in sid-release
pdns (4.3.1-1) unstable; urgency=medium

  * New upstream version 4.3.1
    Fixes CVE-2020-17482 (Closes: #970737)
  * Remove upstream-applied patch for MySQL stored procedures.

 -- Chris Hofstaedtler <email address hidden>  Tue, 22 Sep 2020 20:25:52 +0000
Superseded in sid-release
pdns (4.3.0-5) unstable; urgency=medium

  * postinst: remove user/group existence checks
  * geoip: update config example.
    Thanks to Remi Gacogne <email address hidden>
  * Add test for mysql with stored procedures
  * Fix mysql stored procedures using upstream patch (Closes: #969091)

 -- Chris Hofstaedtler <email address hidden>  Thu, 03 Sep 2020 16:08:42 +0000
Superseded in sid-release
pdns (4.3.0-4) unstable; urgency=medium

  * Update READMEs and tests to include chgrp as needed

 -- Chris Hofstaedtler <email address hidden>  Mon, 04 May 2020 11:07:59 +0000
Superseded in sid-release
pdns (4.3.0-3) unstable; urgency=medium

  * Fix build failure on !amd64

 -- Chris Hofstaedtler <email address hidden>  Sun, 03 May 2020 21:53:07 +0000
Superseded in sid-release
pdns (4.2.1-1) unstable; urgency=medium

  * New upstream version 4.2.1

 -- Chris Hofstaedtler <email address hidden>  Mon, 02 Dec 2019 22:47:13 +0000

Available diffs

Published in stretch-release
pdns (4.0.3-1+deb9u5) stretch-security; urgency=medium

  * Fix CVE-2019-10162 and CVE-2019-10163 both in MASTER operation.
    Patches supplied by upstream and backported by Debian.

 -- Christian Hofstaedtler <email address hidden>  Tue, 18 Jun 2019 22:48:06 +0000
Superseded in sid-release
pdns (4.2.0-1) unstable; urgency=medium

  * New upstream version 4.2.0, upload to unstable.
  * pdns-backend-sqlite3: ensure default database path is writable.
    Needed for WAL mode.
  * d/copyright: Update
  * Build, but do not actually ship new LMDB backend
  * Qualify built binaries at build time

 -- Chris Hofstaedtler <email address hidden>  Fri, 30 Aug 2019 10:53:16 +0000
Deleted in experimental-release (Reason: None provided.)
pdns (4.2.0~rc2-1) experimental; urgency=medium

  * New upstream version 4.2.0~rc2 (Closes: #918661, #916408)
  * Bump Standards-Version to 4.4.0
  * Use debhelper-compat v12
  * Revert "Link with libatomic.so to fix build failure on armel"
  * Ship DEP12 UpstreamMetadata per user request
  * Remove pdns-backend-opendbx.
    OpenDBX is unmaintained in Debian and possibly upstream, too.
  * Use pdns_control rping in init script.
    Makes the init script useful on systemd systems, too. (Closes: #876775)
  * autopkgtests: add more guessed workarounds for debci
  * Build-Depend on systemd for proper version detection
  * Remove preinst code for upgrades from before 4.0.0-3
  * Remove ddeb/dbgsym breaks, from before 4.0.0
  * d/control: simplify Build-Depends and remove old Breaks/Replaces
  * d/rules: simplify and sync with dnsdist, pdns-recursor
  * pdns-ixfrdist: Add ixfrdist init script
  * backends: take schema files from `make install` location
  * pdns-tools: install dnspcap2calidns, stubquery

 -- Chris Hofstaedtler <email address hidden>  Sun, 21 Jul 2019 20:59:16 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.6-3) unstable; urgency=medium

  * Fix Denial of service via crafted zone records (CVE-2019-10162)
    using patch from upstream.
  * Fix Denial of service via NOTIFY packets (CVE-2019-10163)
    using patch from upstream.

 -- Chris Hofstaedtler <email address hidden>  Fri, 21 Jun 2019 19:07:07 +0000

Available diffs

Superseded in experimental-release
pdns (4.2.0~rc1-2) experimental; urgency=medium

  * Link with libatomic.so to fix build failure on armel
  * Build with protobuf support

 -- Chris Hofstaedtler <email address hidden>  Tue, 07 May 2019 09:29:57 +0000
Superseded in experimental-release
pdns (4.2.0~rc1-1) experimental; urgency=medium

  * New upstream version 4.2.0~rc1
  * Ship upstream-supplied LDAP schema instead of our copy
  * Add new ixfrdist binary package

 -- Chris Hofstaedtler <email address hidden>  Sat, 27 Apr 2019 23:55:14 +0000
Superseded in stretch-release
pdns (4.0.3-1+deb9u4) stretch-security; urgency=medium

  * Insufficient validation in the HTTP remote backend (CVE-2019-3871)
    Thanks to Salvatore Bonaccorso <email address hidden> (Closes: #924966)

 -- Christian Hofstaedtler <email address hidden>  Sun, 31 Mar 2019 13:28:32 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.6-2) unstable; urgency=high

  [ Salvatore Bonaccorso ]
  * Insufficient validation in the HTTP remote backend (CVE-2019-3871)
    (Closes: #924966)

 -- Chris Hofstaedtler <email address hidden>  Sun, 31 Mar 2019 12:48:59 +0000
Superseded in stretch-release
pdns (4.0.3-1+deb9u3) stretch; urgency=medium

  * Fix (security) bugs, partially using upstream patches:
    * CVE-2018-1046 in dnsreplay (Closes: #898255)
    * CVE-2018-10851 (Closes: #913163)
    * MySQL queries with stored procedures (Closes: #889798)
    * ldap, lua, opendbx backend not finding domains (Closes: #911659)

 -- Christian Hofstaedtler <email address hidden>  Sat, 10 Nov 2018 13:36:22 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.6-1) unstable; urgency=medium

  * New upstream version 4.1.6

 -- Chris Hofstaedtler <email address hidden>  Sun, 03 Feb 2019 14:20:23 +0000
Superseded in experimental-release
pdns (4.2.0~alpha1-1) experimental; urgency=medium

  * New upstream version 4.2.0~alpha1
  * Depend: libmaxminddb-dev for geoip backend
  * Depend: libcurl4-openssl-dev for LUA record type
  * configure: drop --enable-libsodium in favor of autodetection

 -- Chris Hofstaedtler <email address hidden>  Mon, 14 Jan 2019 14:51:37 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.5-1) unstable; urgency=medium

  * Cleanup insserv.d and resolvconf hooks that we used to install
  * New upstream version 4.1.5 including fixes for CVE-2018-10851,
    CVE-2018-14626 (Closes: #913163).

 -- Chris Hofstaedtler <email address hidden>  Fri, 09 Nov 2018 18:42:11 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.1.4-1) unstable; urgency=medium

  * New upstream version 4.1.4

 -- Chris Hofstaedtler <email address hidden>  Wed, 29 Aug 2018 18:21:52 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.1.3-5) unstable; urgency=medium

  * Tests: cleanup leftovers

 -- Chris Hofstaedtler <email address hidden>  Wed, 01 Aug 2018 19:49:32 +0000

Available diffs

Superseded in sid-release
pdns (4.1.3-4) unstable; urgency=medium

  * Remove automatic database configuration.
    Some database backends previously used dbconfig-common as a convenient
    way of setting up the respective database server automatically,
    including upgrades of the database schema. This has caused numerous
    issues over the years, and has now been removed.
    As we no longer know the database server credentials, drop generation
    of configuration files.
    Closer to the upstream packages, too.
  * Reenable RestrictAddressFamilies on all architectures
  * Tests: Disable ipv6-requiring tests.
    The docker runners on salsa.d.o do not have working ::1.
  * Tests: Remove check for ECC-GOST

 -- Chris Hofstaedtler <email address hidden>  Tue, 31 Jul 2018 07:42:26 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.1.3-3) unstable; urgency=medium

  * d/rules: print make check logfile on failure
  * d/rules: Reenable -Wall
  * d/rules: turn on all hardening flags

 -- Chris Hofstaedtler <email address hidden>  Thu, 26 Jul 2018 10:06:56 +0000

Available diffs

Superseded in sid-release
pdns (4.1.3-2) unstable; urgency=medium

  The yearly packaging cleanup release, from DebConf18.

  * Bump Standards-Version to 4.1.5
  * Use dh compat level 10, drop B-D on dh-autoreconf, dh-systemd,
    autotools-dev
  * d/rules: avoid directly calling $(shell ...)
  * Set Rules-Requires-Root: no
  * Honor nocheck build option

 -- Chris Hofstaedtler <email address hidden>  Thu, 26 Jul 2018 06:51:59 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.3-1) unstable; urgency=medium

  * New upstream version 4.1.3

 -- Chris Hofstaedtler <email address hidden>  Sun, 17 Jun 2018 12:25:15 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.1.2-1) unstable; urgency=medium

  * New upstream version 4.1.2
  * Includes fix for CVE-2018-1046 in dnsreplay. (Closes: #898255)

 -- Chris Hofstaedtler <email address hidden>  Mon, 14 May 2018 11:17:08 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.1.1-1) unstable; urgency=medium

  * Replace obsolete priority extra with optional
  * New upstream version 4.1.1

 -- Chris Hofstaedtler <email address hidden>  Fri, 16 Feb 2018 10:49:37 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.0-2) unstable; urgency=medium

  * Update Maintainer: as alioth is going away
  * Update Vcs-* URLs to point to salsa.debian.org
  * Bump Standards-Version to 4.1.3 (no changes)

 -- Chris Hofstaedtler <email address hidden>  Thu, 18 Jan 2018 20:44:07 +0000
Published in jessie-release
pdns (3.4.1-4+deb8u8) jessie; urgency=medium

  * Add patch fixing security issue:
  * Missing check on API operations: CVE-2017-15091

 -- Christian Hofstaedtler <email address hidden>  Mon, 27 Nov 2017 21:19:19 +0000
Superseded in stretch-release
pdns (4.0.3-1+deb9u2) stretch; urgency=medium

  * Add upstream patch fixing security issue:
  * Missing check on API operations. CVE-2017-15091

 -- Christian Hofstaedtler <email address hidden>  Mon, 27 Nov 2017 22:02:24 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.1.0-1) unstable; urgency=medium

  * New upstream version 4.1.0, upload to unstable.
  * Update dbconfig-common schema definitions.
  * Remove libbotan1.10-dev dependency, upstream has dropped support.
  * Remove obsolete --with-pgsql-includes configure argument.
  * Run make check at build time.

 -- Chris Hofstaedtler <email address hidden>  Sat, 02 Dec 2017 20:51:27 +0000

Available diffs

Superseded in sid-release
pdns (4.0.5-1) unstable; urgency=medium

  * New upstream version 4.0.5, fixes CVE-2017-15091
  * Update upsteam signing key

 -- Chris Hofstaedtler <email address hidden>  Mon, 27 Nov 2017 21:40:00 +0000
Deleted in experimental-release (Reason: None provided.)
pdns (4.1.0~rc3-1) experimental; urgency=medium

  * New upstream version 4.1.0~rc3
  * Update upsteam signing key
  * Bump Standards-Version to 4.1.1 (no changes)

 -- Christian Hofstaedtler <email address hidden>  Mon, 27 Nov 2017 18:24:16 +0000
Superseded in experimental-release
pdns (4.1.0~rc1-1) experimental; urgency=medium

  * New upstream version 4.1.0~rc1

 -- Christian Hofstaedtler <email address hidden>  Wed, 06 Sep 2017 18:54:41 +0000
Superseded in buster-release
Superseded in sid-release
pdns (4.0.4-2) unstable; urgency=medium

  * Build with libsodium to support DNSSEC algo 15 (Closes: #867517)

 -- Christian Hofstaedtler <email address hidden>  Mon, 17 Jul 2017 11:10:12 +0000

Available diffs

Superseded in buster-release
Superseded in sid-release
pdns (4.0.4-1) unstable; urgency=medium

  * New upstream version 4.0.4.
  * Bump Standards-Version to 4.0.0.

 -- Christian Hofstaedtler <email address hidden>  Tue, 04 Jul 2017 10:45:55 +0000

Available diffs

Superseded in jessie-release
pdns (3.4.1-4+deb8u7) jessie-security; urgency=high

  * Security upload.
  * Improve TSIG signature check to avoid MITM attacks on AXFR inbound
    AXFR transfers. CVE-2016-7073 and CVE-2016-7074.
  * Handle all possible exceptions in webserver thread, avoiding crash
    of main process when an attacker exhausts file descriptors on the
    webserver thread. CVE-2016-7072
  * Drop incoming queries that contain more than one record, avoiding
    extra CPU usage. CVE-2016-7068
  * Improve validation of unhandled record types, avoiding a crash
    on outbound query processing. CVE-2016-2120
  * Improve handling of invalid TSIG records in packets. (Required
    prerequisite patch for the above.)

 -- Christian Hofstaedtler <email address hidden>  Sat, 07 Jan 2017 00:45:53 +0000
Superseded in stretch-release
Superseded in sid-release
pdns (4.0.3-1) unstable; urgency=medium

  * New upstream version 4.0.3, fixing bug when running bindbackend
    mixed with other backends.
  * Fix mysql-5.6 schema incompatibility (Closes: #851586)

 -- Christian Hofstaedtler <email address hidden>  Thu, 19 Jan 2017 23:05:09 +0000

Available diffs

Superseded in sid-release
pdns (4.0.2-1) unstable; urgency=medium

  * New upstream version, fixing security issues: CVE-2016-7068 CVE-2016-7072
    CVE-2016-7073 CVE-2016-7074 CVE-2016-2120.
  * Also includes previous patches applied in Debian, esp. the libssl
    1.1 fixes.
  * Drop upstream applied patches.

 -- Christian Hofstaedtler <email address hidden>  Fri, 13 Jan 2017 14:20:11 +0000

Available diffs

175 of 145 results