Multiple vulnerabilities (CVE-2026-33257 through CVE-2026-33261, CVE-2026-33600, CVE-2026-33601) in the PowerDNS Recursor could lead to denial of service. Affected versions include PowerDNS Recursor 5.2.0 through 5.2.8 and 5.3.0 through 5.3.5, as well as version 5.4.0. The fixed versions are 5.2.9, 5.3.6, and for Debian stable (trixie), version 5.2.9-0+deb13u1.
[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6234-1] pdns-recursor security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6234-1] pdns-recursor security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Tue, 28 Apr 2026 19:03:26 +0000 Message-id: <[🔎] afEEfu4C_Bfi--TH@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6234-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff April 28, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : pdns-recursor CVE ID : CVE-2026-33257 CVE-2026-33258 CVE-2026-33259 CVE-2026-33260 CVE-2026-33261 CVE-2026-33600 CVE-2026-33601 Multiple vulnerabiliites have been discovered in PDNS Recursor, a resolving name server, which could result in denial of service. For the stable distribution (trixie), these problems have been fixed in version 5.2.9-0+deb13u1. We recommend that you upgrade your pdns-recursor packages. For the detailed security status of pdns-recursor please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pdns-recursor Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmnxAawACgkQEMKTtsN8 TjaYRg//azJrKe83xL4hyGHymPyd+Y2Huz2C1xMj9oSls/0oglgWwBZzSEveIhix 23Xgnkz5HqG1gO0pZkwQ/+DNPWn6KVfjVk1AP8EBqo16rUVDYa41WnLwG24tqkds m2WOBocm5IrHkAOZKK412mhGfOxBdZv896WGeTkQfe2xw7HtYErKqbhgqcSqth12 5VofXfMRDO+SubBgrykgI6lwrdoXdKRL9ODj8wUouHo85J0XQys523WYRVexiDHU K8Vh4n/mz1cIbmt4TZJas00xvNX048a2xLW16QhgvvjF36oYr3SovYrIHeIY3Lzc uHmtwAERxFUPfsJvY9BoPxIMvK0DU0Qkojq/+uy06pcbdl6/qEzDA5N5vxw9aKO/ rVBPAtZxNH46Y34Gkpz6PYICCFUs3ioECNMMAnzTe5X+/H4/GUMfXER4W5p7l6nL Vt3V8nhv6WhGy/1H7XLhmnt3hww7HqNbvlGuCR9uRsyzfY9zTwqVf/V/JGX1V7ca S17KKwoy1ZIFLQRG7uWjTiLQKAJjozmw/4KuTqpuCfpwOlEHPSV/8hXKmNm4Hx6d M4y9vQWUGw26/SadLe/hwGEftZ7TdDljn+IF6bTLdOg6OCLnUAUCxoMBhP0a0QRB pZ1r93AyyEcMcnkzzsMlqjFHVQ4gyniF59jcmaX8wxZ67paC/to= =sQ2g -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6233-1] pdns security update Next by Date: [SECURITY] [DSA 6235-1] dnsdist security update Previous by thread: [SECURITY] [DSA 6233-1] pdns security update Next by thread: [SECURITY] [DSA 6235-1] dnsdist security update Index(es): Date Thread