This update for pdns-recursor fixes the following issues:

- update to 4.8.8:
  * fixes a case when a crafted responses can lead to a denial of
    service in Recursor if recursive forwarding is configured
    (boo#1223262, CVE-2024-25583)

- changes in 4.8.7:
  * If serving stale, wipe CNAME records from cache when we get
    a NODATA negative response for them
  * Fix the zoneToCache regression introduced by last security
    update