File _patchinfo of Package patchinfo

<patchinfo incident="19003">
  <issue tracker="bnc" id="1231292">VUL-0: CVE-2024-25590: pdns-recursor: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor</issue>
  <issue tracker="cve" id="2024-25590"/>
  <packager>adamm</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for pdns-recursor</summary>
  <description>This update for pdns-recursor fixes the following issues:

- update to 5.1.3:
  * Implement rfc6303 special zones (mostly v6 reverse mappings)
  * Distinguish OS imposed limits from app imposed limits,
    specifically on chains.

- update to 5.1.2 (boo#1231292 CVE-2024-25590)
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.2

- update to 5.1.1
  https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.1
  https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.8

- update to 5.0.5:
  * Do not count RRSIGs using unsupported algorithms toward RRSIGs
    limit
  * Correctly count NSEC3s considered when chasing the closest
    encloser.
  * Let NetmaskGroup parse dont-throttle-netmasks, allowing
    negations.
  * Fix types of two YAML settings (incoming.edns_padding_from,
    incoming.proxy_protocol_from) that should be sequences of
    subnets
  * Fix trace=fail regression and add regression test for it
</description>
</patchinfo>
openSUSE Build Service is sponsored by