[Pkg-dns-devel] Bug#866112: pdns-recursor: Embedded "root" DNSSEC Trust Anchor will expire in 2017

[Christian Hofstaedtler]

Package: pdns-recursor
Version: 4.0.4-1
Severity: important
Tags: upstream fixed-upstream

pdns-recursor embeds the "root" DNSSEC Trust Anchor in its source code,
and the currently in use KSK-2010 will soon be replaced by KSK-2017. The
former is embedded, the latter is not.

Upstream has fixed this already:
https://github.com/PowerDNS/pdns/commit/d5037c4d34ffbc89ca5d4f79554dd87aa49fdbc8