[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6397-1] pdns-recursor security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6397-1] pdns-recursor security update From: Salvatore Bonaccorso <carnil@debian.org> Date: Thu, 23 Jul 2026 06:03:38 +0000 Message-id: <[🔎] E1wmmWw-00000002T0b-3MGN@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6397-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : pdns-recursor CVE ID : CVE-2026-52686 CVE-2026-52688 Multiple vulnerabilities have been discovered in PDNS Recursor, a resolving name server, which could result in cache poisoning or DNSSEC validation bypass. For the stable distribution (trixie), these problems have been fixed in version 5.2.12-0+deb13u1. We recommend that you upgrade your pdns-recursor packages. For the detailed security status of pdns-recursor please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pdns-recursor Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmphrptfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QUHw/8DpjKiwudPW1y/8qYhIuTkLF+LnTXMEYDY5nZK1iGWYzOfjOTkH+5Scaj rrhwJKbG29lQNzQ1gvXssRBFjzoIMwqXTgT9jnotMk3tsgAa+f1qmTDI6WuvAkL9 TR/9dK8yZRXQ5na1Bp6h1o9xBGEI6t34h270nm25sTQTPjl6lBsq1r5ZaI3svDiX kXm81g7p/3nl/ARFrmTcsCVvW1Q6jeubSC6+dijCZa/s5vemn2NQLxoqBXx5mXQm Xtz/tnMnb0bulZ8UcGXfVxzb4amO1EiZOPKu7GheE9ke5DLOTbs4faY2BUadvUM1 rb79HVxP03m5Zb78zcoJJW5xHflUFFqEKGLtCBjukZMtI7UlA3FvtarC6AJX4y/h 3OWbM5JQxk7x8gcV33wGw+hyU89h9JcP7QO03qhKuEoE1UHasZyzz1ofm4fM9fJB kkCtx/jyQaKZnjvjdcM9KzDYvVJLHomt5Oaz5v3Y0Y++MLCUz8UeD2X4R0jYoVE0 0zsxPhaFnsphsw8NeAS/203mZUtpXkSbZqkdeNKRLmumaObAXJoxOIJdAKen4Q51 SNzdWy/aQUhMtUHYnjpZMobLnrwp32vQsFFXukYL5sR+aOhQwYiYjL2ky3yB2NnN wHTTJ084eLuOlWXex1Fg+vMQ9jjU/hGXLxApfL4/NEr64yBr46E= =qYtE -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Salvatore Bonaccorso (on-list) Salvatore Bonaccorso (off-list) Prev by Date: [SECURITY] [DSA 6396-1] chromium security update Previous by thread: [SECURITY] [DSA 6396-1] chromium security update Index(es): Date Thread