| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pdns-recursor | Distribution: openSUSE Tumbleweed |
| Version: 5.4.8 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Oct 23 11:22:05 2026 |
| Group: Productivity/Networking/DNS/Servers | Build host: reproducible |
| Size: 21843972 | Source RPM: pdns-recursor-5.4.8-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://www.powerdns.com/ | |
| Summary: Modern, advanced and high performance recursing/non authoritative nameserver | |
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this
package if you need a dns cache for your network.
Authors:
--------
http://www.powerdns.com
GPL-2.0-or-later
* Fri Oct 23 2026 Fridrich Strba <fstrba@suse.com>
- Update to 5.4.8
* Security fixes:
+ PowerDNS Advisory 2025-06:
CVE-2025-59023, bsc#1252650
CVE-2025-59024, bsc#1252651
+ PowerDNS Advisory 2025-07:
CVE-2025-59029, bsc#1254881
+ PowerDNS Advisory 2025-08:
CVE-2025-59030, bsc#1254877
+ PowerDNS Advisory 2026-01:
CVE-2026-0398, bsc#1257957
CVE-2026-24027, bsc#1257956
+ PowerDNS Advisory 2026-03:
CVE-2026-33256, bsc#1262557
CVE-2026-33257, bsc#1262536
CVE-2026-33258, bsc#1262558
CVE-2026-33259, bsc#1262559
CVE-2026-33260, bsc#1262537
CVE-2026-33261, bsc#1262560
CVE-2026-33262, bsc#1262561
CVE-2026-33600, bsc#1262563
CVE-2026-33601, bsc#1262562
+ PowerDNS Advisory 2026-08:
CVE-2026-33612, bsc#1269208
CVE-2026-40012, bsc#1269212
CVE-2026-42005, bsc#1269201
CVE-2026-42387, bsc#1269213
CVE-2026-42388, bsc#1269214
CVE-2026-42389, bsc#1269215
CVE-2026-42390, bsc#1269216
CVE-2026-52690, bsc#1269211
+ PowerDNS Advisory 2026-10:
CVE-2026-52686, bsc#1272395
CVE-2026-52688, bsc#1272396
+ PowerDNS Advisory 2026-11:
CVE-2026-52682
+ PowerDNS Advisory 2026-12:
CVE-2026-73205, bsc#1286603
CVE-2026-73206, bsc#1286604
CVE-2026-85555, bsc#1286605
CVE-2026-85556, bsc#1286606
CVE-2026-85557, bsc#1286607
CVE-2026-85558, bsc#1286608
CVE-2026-85559, bsc#1286609
* Full changelogs:
https://doc.powerdns.com/recursor/changelog/5.3.html
https://doc.powerdns.com/recursor/changelog/5.4.html
- Upstream tarball is now xz compressed
- Rust code moved from settings/rust to rec-rust-lib/rust; the
settings code generator now runs from make, and
effective_tld_names.dat is no longer shipped
- Regenerate vendor.tar.zst; adapt _service to current
obs-service-cargo (src is the tarball, custom-root)
- Added patch:
* CVE-2026-52684.patch (bsc#1272421)
+ backport of upstream PR#17748: do not refresh NS records in
refresh-almost-expired; not in 5.4.8
- Modified patch:
* cargo_build_fix.patch
+ rediff for the rec-rust-lib/rust location
+ build cargo C/C++ glue with -fno-lto: rustc cannot index
slim LTO objects in librecrust.a, cxxbridge symbols end up
undefined at link time
- Removed patch:
* boost-m4-39.patch
+ integrated upstream
* Sun Oct 26 2025 Arjen de Korte <suse+build@de-korte.org>
- Boost.System is headers only since 1.69 and stub library removed in
1.89. Change to new boost.m4 from upstream project.
+ Add boost-m4-39.patch
* Thu Aug 14 2025 Marcus Rueckert <mrueckert@suse.de>
- update to 5.2.5 (CVE-2025-30192 boo#246841)
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-04.html
https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.4
https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.6
https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.7
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.0
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.1
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.2
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.3
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.4
https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.5
- reenable snmp support ( we had the BR but not the configure flag)
- add missing BR for fstrm and libcurl
- enable NOD support (new BR libboost_filesystem-devel)
- enable luajit where possible
* Sat Mar 22 2025 Andreas Stieger <andreas.stieger@gmx.de>
- update to 5.1.3:
* Implement rfc6303 special zones (mostly v6 reverse mappings)
* Distinguish OS imposed limits from app imposed limits,
specifically on chains.
* Tue Nov 05 2024 Marcus Rueckert <mrueckert@suse.de>
- update to 5.1.2 (boo#1231292 CVE-2024-25590)
https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.2
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
in update
* Sun Sep 29 2024 Marcus Rueckert <mrueckert@suse.de>
- update to 5.1.1
https://doc.powerdns.com/recursor/changelog/5.1.html#change-5.1.1
https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.8
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from arch
linux to fix building with boost 1.86
- refreshed cargo_build_fix.patch
- track series file for easier patching
- no more conf.dist file. I think we should switch the default
config in the package to the yaml format maybe
* Sat May 25 2024 Andreas Stieger <andreas.stieger@gmx.de>
- update to 5.0.5:
* Do not count RRSIGs using unsupported algorithms toward RRSIGs
limit
* Correctly count NSEC3s considered when chasing the closest
encloser.
* Let NetmaskGroup parse dont-throttle-netmasks, allowing
negations.
* Fix types of two YAML settings (incoming.edns_padding_from,
incoming.proxy_protocol_from) that should be sequences of
subnets
* Fix trace=fail regression and add regression test for it
* Wed Apr 24 2024 Adam Majer <adam.majer@suse.de>
- update to 5.0.4:
* fixes a case when a crafted responses can lead to a denial of
service in Recursor if recursive forwarding is configured
(bsc#1223262, CVE-2024-25583)
- changes in 5.0.3
* Log if a DNSSEC related limit was hit if log_bogus is set
* Reduce RPZ memory usage by not keeping the initially loaded
RPZs in memory
* Fix the zoneToCache regression introduced by 5.0.2 security
update
* Tue Feb 13 2024 Adam Majer <adam.majer@suse.de>
- update to 5.0.2
* fixes crafted DNSSEC records in a zone can lead to a denial
of service in Recursor
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
(bsc#1219823, bsc#1219826, CVE-2023-50387, CVE-2023-50868)
* Fri Feb 09 2024 Adam Majer <adam.majer@suse.de> 5.0.1
- update to 5.0.1
https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.1
For upgrade from 4.9.x, see
https://doc.powerdns.com/recursor/upgrade.html#to-5-0-0-and-master
- cargo_build_fix.patch: add cargo_build parameters to Makefile...
* Fri Aug 25 2023 Adam Majer <adam.majer@suse.de> 4.9.1
- update to 4.9.1
* The setting of policy tags for packet cache hist has been fixed.
Previously, packet cache hits would not contain policy tags set in
the Lua gettags(-ffi) intercept functions.
* The retrieval of RPZ zones could fail in situations where a read of
the chunk length from the IXFR TCP stream would produce an
incomplete result.
- enable DSN-over-TLS (DoT) via OpenSSL
For complete list of changes, see
https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.1
For upgrades since 4.8.x and earlier, see
https://doc.powerdns.com/recursor/upgrade.html
* Tue Apr 04 2023 Adam Majer <adam.majer@suse.de>
- update to 4.8.4
* Deterred spoofing attempts can lead to authoritative servers
being marked unavailable (bsc#1209897, CVE-2023-26437)
* Tue Mar 07 2023 Adam Majer <adam.majer@suse.de> 4.8.3
- update to 4.8.3
* Fix serve-stale logic to not cause intermittent high CPU load by:
+ correcting the removal of a negative cache entry,
+ correcting the serve-stale main loop regarding exception handling,
+ correctly handle negcache entries with serve-state status.
- changes in version 4.8.2
* Make cache cleaning of record an negative cache more fair
* Do not report “not decreasing socket buf size” as an error
* Do not use “message” as key, it has a special meaning to systemd-journal
* Add the ‘parse packet from auth’ error message to structured logging
* Refresh of negcache stale entry might use wrong qtype
* Do not chain ECS enabled queries
* Properly encode json string containing binary data
* Fri Jan 20 2023 Adam Majer <adam.majer@suse.de>
- update to 4.8.1
* Avoid unbounded recursion when retrieving DS records from some
misconfigured domains. (bsc#1207342, CVE-2023-22617)
/etc/pdns/recursor.conf /etc/pdns/recursor.yml-dist /usr/lib/systemd/system/pdns-recursor.service /usr/lib/systemd/system/pdns-recursor@.service /usr/sbin/pdns_recursor /usr/sbin/rcpdns-recursor /usr/sbin/rec_control /usr/share/doc/packages/pdns-recursor /usr/share/doc/packages/pdns-recursor/README /usr/share/licenses/pdns-recursor /usr/share/licenses/pdns-recursor/COPYING /usr/share/man/man1/pdns_recursor.1.gz /usr/share/man/man1/rec_control.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Nov 12 22:37:20 2026