pdns-recursor (5.3.5-1) unstable; urgency=medium

  * New upstream version 5.3.5
    Fixes CVE-2026-24027, CVE-2026-0398 (Closes: #1127490)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 11 Feb 2026 15:13:35 +0100

pdns-recursor (5.3.4-2) unstable; urgency=medium

  * Drop Build-Depends: libboost-system-dev

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 05 Feb 2026 23:34:17 +0100

pdns-recursor (5.3.4-1) unstable; urgency=medium

  * New upstream version 5.3.4
  * Rebase patches

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 14 Jan 2026 12:32:52 +0100

pdns-recursor (5.3.3-1) unstable; urgency=medium

  * New upstream version 5.3.3
    Fixes CVE-2025-59029 (Closes: #1122196),
    Fixes CVE-2025-59030 (Closes: #1122197).
  * Preserve recursor.lua on upgrades, but not as conffile

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 09 Dec 2025 11:01:36 +0100

pdns-recursor (5.3.1-1) unstable; urgency=medium

  * New upstream version 5.3.1, fixes CVE-2025-59023 and CVE-2025-59024.
    (Closes: #1118751)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 22 Oct 2025 18:01:37 +0200

pdns-recursor (5.3.0-5) unstable; urgency=medium

  * Fix endian issue in tests on s390x
  * d/copyright: Remove old FSF address

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 07 Sep 2025 14:17:42 +0200

pdns-recursor (5.3.0-4) unstable; urgency=medium

  * Fix incorrectly applied rust-fix-build-with-multiple-available-cargos patch.
    Causes startup failure while reading the YAML config.

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 06 Sep 2025 21:53:52 +0200

pdns-recursor (5.3.0-3) unstable; urgency=medium

  * d/rules: stop setting CARGO_REGISTRY, fixes Static-Built-Using
  * Build with meson instead of autotools
  * Remove obsolete lintian overrides

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 06 Sep 2025 18:43:24 +0200

pdns-recursor (5.3.0-2) unstable; urgency=medium

  * d/rules: fix DEB_VERSION/DEB_VENDOR being empty.
    Thanks to Steve Mokris <steve@kosada.com>

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 02 Sep 2025 23:06:05 +0200

pdns-recursor (5.3.0-1) unstable; urgency=medium

  * d/watch: update upstream URL (xz)
  * New upstream version 5.3.0
  * Relax crate requirements
  * Update crate dependencies
  * Update path to internal rust crate

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 28 Aug 2025 20:32:46 +0200

pdns-recursor (5.2.5-1) unstable; urgency=medium

  * New upstream version 5.2.5

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 26 Aug 2025 19:44:06 +0200

pdns-recursor (5.2.4-2) unstable; urgency=medium

  * Upload to unstable.

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Jul 2025 03:03:18 +0200

pdns-recursor (5.2.4-1) experimental; urgency=medium

  * New upstream version 5.2.4, fixing CVE-2025-30192.
    (Closes: #1109808)
  * Upload to experimental.

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 24 Jul 2025 10:18:06 +0200

pdns-recursor (5.2.2-2) unstable; urgency=medium

  * Really emit (X-Cargo-|Static-)Built-Using fields (Closes: #1109579)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 20 Jul 2025 12:57:46 +0200

pdns-recursor (5.2.2-1) unstable; urgency=medium

  * New upstream version 5.2.2
  * Drop upstream applied patch

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 09 Apr 2025 23:19:32 +0200

pdns-recursor (5.2.1-1) unstable; urgency=high

  * New upstream version 5.2.1
    Includes fix for CVE-2025-30195

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 07 Apr 2025 14:53:24 +0200

pdns-recursor (5.2.0-5) unstable; urgency=medium

  * Add NEWS about the configuration format change (Closes: #1100582)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 16 Mar 2025 13:07:57 +0100

pdns-recursor (5.2.0-4) unstable; urgency=medium

  * Use serde-yaml again, to allow testing migration
  * Ship default configuration as a file in source (Closes: #1098691)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 24 Feb 2025 11:54:35 +0100

pdns-recursor (5.2.0-3) unstable; urgency=medium

  * d/control: set X-Style: black
  * d/tests: set isolation-container for smoke test
  * Correctly install default config file, remove old recursor.lua
  * d/tests/smoke: fix config patching (Closes: #1098302)

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 21 Feb 2025 15:28:33 +0100

pdns-recursor (5.2.0-2) unstable; urgency=medium

  * d/control: drop mips, mipsel workarounds (Closes: #1096172)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 17 Feb 2025 11:01:29 +0100

pdns-recursor (5.2.0-1) unstable; urgency=medium

  * New upstream version 5.2.0
  * Drop debian/upstream/signing-key.asc
  * Rebase patches
  * Update rust dependencies

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 10 Feb 2025 23:59:00 +0100

pdns-recursor (5.1.3-2) unstable; urgency=medium

  * Drop obsolete upgrade code from 4.3.0-1
  * Use rust crates from debian
  * tests: follow rename of dnsutils to bind9-dnsutils

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 10 Feb 2025 16:24:35 +0100

pdns-recursor (5.1.3-1) unstable; urgency=medium

  * New upstream version 5.1.3
  * Add tool for updating vendor patch
  * Refresh patches
  * Update vendored crates

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 13 Nov 2024 11:29:16 +0100

pdns-recursor (5.0.9-1) unstable; urgency=medium

  * New upstream version 5.0.9, fixing CVE-2024-25590
    (Closes: #1083285)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 07 Oct 2024 10:43:00 +0200

pdns-recursor (5.0.7-2) unstable; urgency=medium

  * Apply workaround for finding libcrypto (Closes: #1078387)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 11 Aug 2024 14:39:49 +0200

pdns-recursor (5.0.7-1) unstable; urgency=medium

  * New upstream version 5.0.7 (Closes: #1060733)
  * Drop upstream-applied patches

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 06 Jul 2024 18:57:10 +0200

pdns-recursor (5.0.5-1) unstable; urgency=medium

  * d/watch: switch to 5.x branch
  * New upstream version 5.0.5
  * Refresh testrunner-log-verbosity patch
  * Vendor required rust crates
  * Build-Depend on cargo
  * Add patch to fix systemd version detection
  * Install recursor.yml-dist into /usr/share/doc

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 25 May 2024 18:02:13 +0200

pdns-recursor (4.9.5-1) unstable; urgency=medium

  * New upstream version 4.9.5, including fix for CVE-2024-25583
    (Closes: #1069762)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 24 Apr 2024 14:19:26 +0200

pdns-recursor (4.9.4-1) unstable; urgency=medium

  * New upstream version 4.9.4

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 15 Apr 2024 13:46:50 +0200

pdns-recursor (4.9.3-1) unstable; urgency=medium

  * New upstream version 4.9.3, including fixes for
    CVE-2023-50387 and CVE-2023-50868. (Closes: #1063852)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 14 Feb 2024 17:18:22 +0100

pdns-recursor (4.9.2-2) unstable; urgency=medium

  * Add Build-Depends systemd-dev | systemd (Closes: #1060615)
    We need all of libsystemd-dev, systemd.pc, and systemctl.

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 12 Jan 2024 12:42:34 +0100

pdns-recursor (4.9.2-1) unstable; urgency=medium

  * New upstream version 4.9.2
  * Drop upstream applied patches

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 10 Nov 2023 23:17:09 +0100

pdns-recursor (4.9.1-4) unstable; urgency=medium

  * Switch from pkg-config to pkgconf
  * Automatically discover systemdsystemunitdir

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 21 Oct 2023 16:57:04 +0200

pdns-recursor (4.9.1-3) unstable; urgency=medium

  * Build-Depend on libboost-filesystem-dev
  * Apply wrap-and-sort -kas
  * Update Vcs-* headers for move to debian namespace
  * Remove debci workaround introduced in 4.9.0-2,
    mitigated in debci.

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 11 Sep 2023 16:09:17 +0200

pdns-recursor (4.9.1-2) unstable; urgency=medium

  * Build with libboost-context-dev on more architectures
  * Apply upstream patch to fix building with ucontext and gcc-13

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Aug 2023 23:11:22 +0200

pdns-recursor (4.9.1-1) unstable; urgency=medium

  * New upstream version 4.9.1

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Aug 2023 11:09:13 +0200

pdns-recursor (4.9.0-2) unstable; urgency=medium

  * autopkgtest: workaround debci isolation problems

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 10 Jul 2023 16:54:50 +0200

pdns-recursor (4.9.0-1) unstable; urgency=medium

  * New upstream version 4.9.0

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 04 Jul 2023 10:56:03 +0200

pdns-recursor (4.8.4-1) unstable; urgency=medium

  * New upstream version 4.8.4
    * Fixes CVE-2023-26437, see
      https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html
      (Closes: #1033941)
    * Fixes high CPU usage caused by serve-stale logic.
    * Fixes DNSSEC validation issues for some domains served by popular
      DNS software by F5.
    * Downgrades severity for a few log messages.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 04 Apr 2023 11:10:26 +0000

pdns-recursor (4.8.2-1) unstable; urgency=medium

  * New upstream version 4.8.2

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 31 Jan 2023 16:46:42 +0000

pdns-recursor (4.8.1-1) unstable; urgency=medium

  * New upstream version 4.8.1
    Fixes CVE-2023-22617

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 21 Jan 2023 14:46:48 +0000

pdns-recursor (4.8.0-2) unstable; urgency=medium

  * Build-Depend on architecture-is-64-bit (for time_t) (Closes: #1023277)

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 25 Dec 2022 11:01:09 +0000

pdns-recursor (4.8.0-1) unstable; urgency=medium

  [ Manuel A. Fernandez Montecelo ]
  * Add support for riscv64 arch (Closes: #1025040)

  [ Chris Hofstaedtler ]
  * New upstream version 4.8.0
  * Refresh patches

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 13 Dec 2022 08:20:45 +0000

pdns-recursor (4.7.4-1) unstable; urgency=medium

  * New upstream version 4.7.4

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 25 Nov 2022 13:16:18 +0000

pdns-recursor (4.7.3-2) unstable; urgency=medium

  * Set explicit architecture list.
    A better solution than hard-coded lists or letting builds fail would be
    much welcome.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 01 Nov 2022 16:50:18 +0000

pdns-recursor (4.7.3-1) unstable; urgency=medium

  * New upstream version 4.7.3

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 08 Oct 2022 12:15:07 +0000

pdns-recursor (4.7.2-1) unstable; urgency=medium

  * New upstream version 4.7.2

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 24 Aug 2022 07:05:24 +0000

pdns-recursor (4.7.1-1) unstable; urgency=medium

  * New upstream version 4.7.1

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 14 Jul 2022 09:22:38 +0000

pdns-recursor (4.6.2-1) unstable; urgency=medium

  * New upstream version 4.6.2
  * Remove no longer necessary path for OpenSSL 3.0

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 14 Apr 2022 20:23:45 +0000

pdns-recursor (4.6.1-1) unstable; urgency=medium

  * New upstream version 4.6.1, fixing CVE-2022-27227
  * Fix build with OpenSSL 3.0.
    Thanks to Steve Langasek <steve.langasek@canonical.com> (Closes: #1006520)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 28 Mar 2022 11:03:20 +0000

pdns-recursor (4.6.0-1) unstable; urgency=medium

  * New upstream version 4.6.0
  * Enable DNS-over-TLS, adding libcurl dependency
  * d/watch: Release version constraint

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 17 Dec 2021 12:07:54 +0000

pdns-recursor (4.5.7-1) unstable; urgency=medium

  * New upstream version 4.5.7

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 05 Nov 2021 10:47:46 +0000

pdns-recursor (4.5.6-1) unstable; urgency=medium

  * New upstream version 4.5.6

 -- Chris Hofstaedtler <zeha@debian.org>  Sat, 30 Oct 2021 18:23:55 +0000

pdns-recursor (4.5.5-1) unstable; urgency=medium

  * New upstream version 4.5.5
    * Refresh patches
    * Upstream dropped support for archs with 32bit time_t values
  * Unconditionally enable libcap
  * Build with fixed luajit on arm64
  * d/watch: Update for 4.5 branch

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 20 Aug 2021 17:00:03 +0000

pdns-recursor (4.4.2-3) unstable; urgency=medium

  * autopkgtest: show journal on service restart failure

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 24 Jan 2021 21:28:21 +0000

pdns-recursor (4.4.2-2) unstable; urgency=medium

  * Bump Standards-Version to 4.5.1
  * Build with luajit on amd64, and Lua 5.1 on other archs.
    Once #908137 is fixed, we should enable luajit on arm64 too.
    Unfortunately we were building with Lua 5.2 earlier, so this
    is a feature "regression" of sorts - but it can be much faster.
  * Solely rely on publicsuffix at runtime for current data.
    If public-suffix-list-file gets disabled in the runtime config, fall
    back to the upstream-supplied copy of the public suffix list, instead
    of what gets shipped in the publicsuffix package at build time.
    This spares us from declaing a Built-Using relation, which is annoying
    for security updates. When running with the suggested configuration,
    there are no changes to behaviour.

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 17 Dec 2020 21:02:37 +0000

pdns-recursor (4.4.2-1) unstable; urgency=medium

  * New upstream version 4.4.2
  * Drop upstream applied patches

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 14 Dec 2020 12:26:33 +0000

pdns-recursor (4.4.1-1) unstable; urgency=medium

  * New upstream version 4.4.1

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 25 Nov 2020 21:12:52 +0000

pdns-recursor (4.4.0-2) unstable; urgency=medium

  * Add upstream patch to fix APL tests on big endian

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 24 Nov 2020 15:38:21 +0000

pdns-recursor (4.4.0-1) unstable; urgency=medium

  * Update d/watch for 4.4.x series
  * New upstream version 4.4.0 (Closes: #975592)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 23 Nov 2020 22:17:50 +0000

pdns-recursor (4.3.5-1) unstable; urgency=medium

  * New upstream version 4.3.5

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 19 Oct 2020 07:55:50 +0000

pdns-recursor (4.3.4-1) unstable; urgency=medium

  * New upstream version 4.3.4

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 08 Sep 2020 20:50:53 +0000

pdns-recursor (4.3.3-1) unstable; urgency=medium

  * New upstream version 4.3.3

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 17 Jul 2020 09:53:55 +0000

pdns-recursor (4.3.2-1) unstable; urgency=medium

  * d/upstream/metadata: add Bug-Submit URL
  * New upstream version 4.3.2

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 07 Jul 2020 17:28:15 +0000

pdns-recursor (4.3.1-1) unstable; urgency=medium

  * New upstream version 4.3.1, includes fixes for security issues
    CVE-2020-10995, CVE-2020-12244, CVE-2020-10030.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 19 May 2020 16:14:57 +0000

pdns-recursor (4.3.0-2) unstable; urgency=medium

  * Stop embedding version in shipped config file
  * Stop embedding a timestamp in shipped config file

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 01 May 2020 21:54:26 +0000

pdns-recursor (4.3.0-1) unstable; urgency=medium

  * New upstream version 4.3.0, drop upstream applied patches
    (Closes: #957674)
  * Use debhelper v13, bump Standards-Version to 4.5.0
  * Enable Dnstap feature
  * Follow upstream socket-dir path and service user change.
    This also drops the init script: the socket-dir is now in a dynamically
    created path, and pdns-recursor expects to be started as non-root already.
    Both changes are unfeasible to support under a legacy init.

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 29 Apr 2020 18:20:05 +0000

pdns-recursor (4.2.1-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Set fields Upstream-Contact in debian/copyright.
  * Remove obsolete fields Name, Contact from debian/upstream/metadata.

  [ Chris Hofstaedtler ]
  * rootkeys.lua: remove superfluous clearTA and add comment about refresh time.
    Thanks to Pieter Lexis <pieter.lexis@powerdns.com>
  * Bump Standards-Version to 4.4.1
  * Restrict d/watch to 4.2 releases
  * New upstream version 4.2.1
    * Refresh testrunner verbosity patch
    * Remove patches merged upstream

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 09 Dec 2019 19:26:00 +0000

pdns-recursor (4.2.0-6) unstable; urgency=medium

  * Improve test reliability using patch from upstream.
    Hopefully fixes FTBFS on mipsel once more, in test_dnssec_secure_various_algos.

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 23 Jul 2019 00:05:05 +0000

pdns-recursor (4.2.0-5) unstable; urgency=medium

  * Improve test reliability using patch from upstream.
    Hopefully fixes FTBFS on mips, in test_auth_zone_delegation.

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 22 Jul 2019 15:26:07 +0000

pdns-recursor (4.2.0-4) unstable; urgency=medium

  * d/rules: make lintian happy about override_dh_auto_test
  * Build with libcap only on Linux archs
  * d/control, d/rules: sync with dnsdist, pdns
  * Filter net-snmp-config flags, see #870734

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Jul 2019 21:39:31 +0000

pdns-recursor (4.2.0-3) unstable; urgency=medium

  * Ship DEP12 UpstreamMetadata per user request

 -- Chris Hofstaedtler <zeha@debian.org>  Sun, 21 Jul 2019 13:23:57 +0000

pdns-recursor (4.2.0-2) unstable; urgency=medium

  * Apply patch from upstream to fix FTBFS on platforms not having boost-context
  * Build with libboost-context-dev on ppc64el

 -- Chris Hofstaedtler <zeha@debian.org>  Tue, 16 Jul 2019 12:28:49 +0000

pdns-recursor (4.2.0-1) unstable; urgency=medium

  * New upstream version 4.2.0
    * Patch testrunner-log-verbosity: refresh.
    * Patch stack-size: refresh.
    * d/rules: update configure args for libsodium
    * Ignore lintian error about pdns-recursor@.service
    * New required build-dependencies: libboost-system-dev,
      libboost-thread-dev, systemd.
  * Load data from publicsuffix package at startup
  * Remove deprecated, sysvinit-only resolvconf integration
  * Build with SNMP support (again)
  * Build with libcap
  * Update rootkeys.lua to use new built-in functionality
  * Use debhelper-compat 12
  * Bump Standards-Version to 4.4.0

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 15 Jul 2019 17:23:47 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog pdns-recursor`.
