pdns-recursor (4.9.3-1build3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- William Grant <wgrant@ubuntu.com>  Mon, 01 Apr 2024 18:11:01 +1100

pdns-recursor (4.9.3-1build2) noble; urgency=medium

  * No-change rebuild against libcurl4t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 16 Mar 2024 06:52:04 +0000

pdns-recursor (4.9.3-1build1) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 20:35:18 +0000

pdns-recursor (4.9.3-1) unstable; urgency=medium

  * New upstream version 4.9.3, including fixes for
    CVE-2023-50387 and CVE-2023-50868. (Closes: #1063852)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 14 Feb 2024 17:18:22 +0100

pdns-recursor (4.9.2-2) unstable; urgency=medium

  * Add Build-Depends systemd-dev | systemd (Closes: #1060615)
    We need all of libsystemd-dev, systemd.pc, and systemctl.

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 12 Jan 2024 12:42:34 +0100

pdns-recursor (4.9.2-1) unstable; urgency=medium

  * New upstream version 4.9.2
  * Drop upstream applied patches

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 10 Nov 2023 23:17:09 +0100

pdns-recursor (4.9.1-4) unstable; urgency=medium

  * Switch from pkg-config to pkgconf
  * Automatically discover systemdsystemunitdir

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 21 Oct 2023 16:57:04 +0200

pdns-recursor (4.9.1-3) unstable; urgency=medium

  * Build-Depend on libboost-filesystem-dev
  * Apply wrap-and-sort -kas
  * Update Vcs-* headers for move to debian namespace
  * Remove debci workaround introduced in 4.9.0-2,
    mitigated in debci.

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 11 Sep 2023 16:09:17 +0200

pdns-recursor (4.9.1-2) unstable; urgency=medium

  * Build with libboost-context-dev on more architectures
  * Apply upstream patch to fix building with ucontext and gcc-13

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Aug 2023 23:11:22 +0200

pdns-recursor (4.9.1-1) unstable; urgency=medium

  * New upstream version 4.9.1

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Aug 2023 11:09:13 +0200

pdns-recursor (4.9.0-2) unstable; urgency=medium

  * autopkgtest: workaround debci isolation problems

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 10 Jul 2023 16:54:50 +0200

pdns-recursor (4.9.0-1) unstable; urgency=medium

  * New upstream version 4.9.0

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 04 Jul 2023 10:56:03 +0200

pdns-recursor (4.8.4-1) unstable; urgency=medium

  * New upstream version 4.8.4
    * Fixes CVE-2023-26437, see
      https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html
      (Closes: #1033941)
    * Fixes high CPU usage caused by serve-stale logic.
    * Fixes DNSSEC validation issues for some domains served by popular
      DNS software by F5.
    * Downgrades severity for a few log messages.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 04 Apr 2023 11:10:26 +0000

pdns-recursor (4.8.2-1) unstable; urgency=medium

  * New upstream version 4.8.2

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 31 Jan 2023 16:46:42 +0000

pdns-recursor (4.8.1-1) unstable; urgency=medium

  * New upstream version 4.8.1
    Fixes CVE-2023-22617

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 21 Jan 2023 14:46:48 +0000

pdns-recursor (4.8.0-2) unstable; urgency=medium

  * Build-Depend on architecture-is-64-bit (for time_t) (Closes: #1023277)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 25 Dec 2022 11:01:09 +0000

pdns-recursor (4.8.0-1) unstable; urgency=medium

  [ Manuel A. Fernandez Montecelo ]
  * Add support for riscv64 arch (Closes: #1025040)

  [ Chris Hofstaedtler ]
  * New upstream version 4.8.0
  * Refresh patches

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 13 Dec 2022 08:20:45 +0000

pdns-recursor (4.7.4-1) unstable; urgency=medium

  * New upstream version 4.7.4

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Nov 2022 13:16:18 +0000

pdns-recursor (4.7.3-2) unstable; urgency=medium

  * Set explicit architecture list.
    A better solution than hard-coded lists or letting builds fail would be
    much welcome.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 01 Nov 2022 16:50:18 +0000

pdns-recursor (4.7.3-1) unstable; urgency=medium

  * New upstream version 4.7.3

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 08 Oct 2022 12:15:07 +0000

pdns-recursor (4.7.2-1) unstable; urgency=medium

  * New upstream version 4.7.2

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 24 Aug 2022 07:05:24 +0000

pdns-recursor (4.7.1-1) unstable; urgency=medium

  * New upstream version 4.7.1

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 14 Jul 2022 09:22:38 +0000

pdns-recursor (4.6.2-1) unstable; urgency=medium

  * New upstream version 4.6.2
  * Remove no longer necessary path for OpenSSL 3.0

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 14 Apr 2022 20:23:45 +0000

pdns-recursor (4.6.1-1) unstable; urgency=medium

  * New upstream version 4.6.1, fixing CVE-2022-27227
  * Fix build with OpenSSL 3.0.
    Thanks to Steve Langasek <steve.langasek@canonical.com> (Closes: #1006520)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 28 Mar 2022 11:03:20 +0000

pdns-recursor (4.6.0-1) unstable; urgency=medium

  * New upstream version 4.6.0
  * Enable DNS-over-TLS, adding libcurl dependency
  * d/watch: Release version constraint

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 17 Dec 2021 12:07:54 +0000

pdns-recursor (4.5.7-1) unstable; urgency=medium

  * New upstream version 4.5.7

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 05 Nov 2021 10:47:46 +0000

pdns-recursor (4.5.6-1) unstable; urgency=medium

  * New upstream version 4.5.6

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 30 Oct 2021 18:23:55 +0000

pdns-recursor (4.5.5-1) unstable; urgency=medium

  * New upstream version 4.5.5
    * Refresh patches
    * Upstream dropped support for archs with 32bit time_t values
  * Unconditionally enable libcap
  * Build with fixed luajit on arm64
  * d/watch: Update for 4.5 branch

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 20 Aug 2021 17:00:03 +0000

pdns-recursor (4.4.2-3) unstable; urgency=medium

  * autopkgtest: show journal on service restart failure

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 24 Jan 2021 21:28:21 +0000

pdns-recursor (4.4.2-2) unstable; urgency=medium

  * Bump Standards-Version to 4.5.1
  * Build with luajit on amd64, and Lua 5.1 on other archs.
    Once #908137 is fixed, we should enable luajit on arm64 too.
    Unfortunately we were building with Lua 5.2 earlier, so this
    is a feature "regression" of sorts - but it can be much faster.
  * Solely rely on publicsuffix at runtime for current data.
    If public-suffix-list-file gets disabled in the runtime config, fall
    back to the upstream-supplied copy of the public suffix list, instead
    of what gets shipped in the publicsuffix package at build time.
    This spares us from declaing a Built-Using relation, which is annoying
    for security updates. When running with the suggested configuration,
    there are no changes to behaviour.

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 17 Dec 2020 21:02:37 +0000

pdns-recursor (4.4.2-1) unstable; urgency=medium

  * New upstream version 4.4.2
  * Drop upstream applied patches

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 14 Dec 2020 12:26:33 +0000

pdns-recursor (4.4.1-1) unstable; urgency=medium

  * New upstream version 4.4.1

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 25 Nov 2020 21:12:52 +0000

pdns-recursor (4.4.0-2) unstable; urgency=medium

  * Add upstream patch to fix APL tests on big endian

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 24 Nov 2020 15:38:21 +0000

pdns-recursor (4.4.0-1) unstable; urgency=medium

  * Update d/watch for 4.4.x series
  * New upstream version 4.4.0 (Closes: #975592)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 23 Nov 2020 22:17:50 +0000

pdns-recursor (4.3.5-1) unstable; urgency=medium

  * New upstream version 4.3.5

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 19 Oct 2020 07:55:50 +0000

pdns-recursor (4.3.4-1) unstable; urgency=medium

  * New upstream version 4.3.4

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 08 Sep 2020 20:50:53 +0000

pdns-recursor (4.3.3-1) unstable; urgency=medium

  * New upstream version 4.3.3

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 17 Jul 2020 09:53:55 +0000

pdns-recursor (4.3.2-1) unstable; urgency=medium

  * d/upstream/metadata: add Bug-Submit URL
  * New upstream version 4.3.2

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 07 Jul 2020 17:28:15 +0000

pdns-recursor (4.3.1-1) unstable; urgency=medium

  * New upstream version 4.3.1, includes fixes for security issues
    CVE-2020-10995, CVE-2020-12244, CVE-2020-10030.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 19 May 2020 16:14:57 +0000

pdns-recursor (4.3.0-2) unstable; urgency=medium

  * Stop embedding version in shipped config file
  * Stop embedding a timestamp in shipped config file

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 01 May 2020 21:54:26 +0000

pdns-recursor (4.3.0-1) unstable; urgency=medium

  * New upstream version 4.3.0, drop upstream applied patches
    (Closes: #957674)
  * Use debhelper v13, bump Standards-Version to 4.5.0
  * Enable Dnstap feature
  * Follow upstream socket-dir path and service user change.
    This also drops the init script: the socket-dir is now in a dynamically
    created path, and pdns-recursor expects to be started as non-root already.
    Both changes are unfeasible to support under a legacy init.

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 29 Apr 2020 18:20:05 +0000

pdns-recursor (4.2.1-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Set fields Upstream-Contact in debian/copyright.
  * Remove obsolete fields Name, Contact from debian/upstream/metadata.

  [ Chris Hofstaedtler ]
  * rootkeys.lua: remove superfluous clearTA and add comment about refresh time.
    Thanks to Pieter Lexis <pieter.lexis@powerdns.com>
  * Bump Standards-Version to 4.4.1
  * Restrict d/watch to 4.2 releases
  * New upstream version 4.2.1
    * Refresh testrunner verbosity patch
    * Remove patches merged upstream

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 09 Dec 2019 19:26:00 +0000

pdns-recursor (4.2.0-6) unstable; urgency=medium

  * Improve test reliability using patch from upstream.
    Hopefully fixes FTBFS on mipsel once more, in test_dnssec_secure_various_algos.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 23 Jul 2019 00:05:05 +0000

pdns-recursor (4.2.0-5) unstable; urgency=medium

  * Improve test reliability using patch from upstream.
    Hopefully fixes FTBFS on mips, in test_auth_zone_delegation.

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 22 Jul 2019 15:26:07 +0000

pdns-recursor (4.2.0-4) unstable; urgency=medium

  * d/rules: make lintian happy about override_dh_auto_test
  * Build with libcap only on Linux archs
  * d/control, d/rules: sync with dnsdist, pdns
  * Filter net-snmp-config flags, see #870734

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Jul 2019 21:39:31 +0000

pdns-recursor (4.2.0-3) unstable; urgency=medium

  * Ship DEP12 UpstreamMetadata per user request

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Jul 2019 13:23:57 +0000

pdns-recursor (4.2.0-2) unstable; urgency=medium

  * Apply patch from upstream to fix FTBFS on platforms not having boost-context
  * Build with libboost-context-dev on ppc64el

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 16 Jul 2019 12:28:49 +0000

pdns-recursor (4.2.0-1) unstable; urgency=medium

  * New upstream version 4.2.0
    * Patch testrunner-log-verbosity: refresh.
    * Patch stack-size: refresh.
    * d/rules: update configure args for libsodium
    * Ignore lintian error about pdns-recursor@.service
    * New required build-dependencies: libboost-system-dev,
      libboost-thread-dev, systemd.
  * Load data from publicsuffix package at startup
  * Remove deprecated, sysvinit-only resolvconf integration
  * Build with SNMP support (again)
  * Build with libcap
  * Update rootkeys.lua to use new built-in functionality
  * Use debhelper-compat 12
  * Bump Standards-Version to 4.4.0

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 15 Jul 2019 17:23:47 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog pdns-recursor`.
