Debian alert DSA-6234-1 (pdns-recursor)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6234-1] pdns-recursor security update
Date:
             
 
Tue, 28 Apr 2026 19:03:26 +0000
Message-ID:
             
 
<afEEfu4C_Bfi--TH@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6234-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 28, 2026                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pdns-recursor
CVE ID         : CVE-2026-33257 CVE-2026-33258 CVE-2026-33259
                 CVE-2026-33260 CVE-2026-33261 CVE-2026-33600
		 CVE-2026-33601

Multiple vulnerabiliites have been discovered in PDNS Recursor, a
resolving name server, which could result in denial of service.

For the stable distribution (trixie), these problems have been fixed in
version 5.2.9-0+deb13u1.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmnxAawACgkQEMKTtsN8
TjaYRg//azJrKe83xL4hyGHymPyd+Y2Huz2C1xMj9oSls/0oglgWwBZzSEveIhix
23Xgnkz5HqG1gO0pZkwQ/+DNPWn6KVfjVk1AP8EBqo16rUVDYa41WnLwG24tqkds
m2WOBocm5IrHkAOZKK412mhGfOxBdZv896WGeTkQfe2xw7HtYErKqbhgqcSqth12
5VofXfMRDO+SubBgrykgI6lwrdoXdKRL9ODj8wUouHo85J0XQys523WYRVexiDHU
K8Vh4n/mz1cIbmt4TZJas00xvNX048a2xLW16QhgvvjF36oYr3SovYrIHeIY3Lzc
uHmtwAERxFUPfsJvY9BoPxIMvK0DU0Qkojq/+uy06pcbdl6/qEzDA5N5vxw9aKO/
rVBPAtZxNH46Y34Gkpz6PYICCFUs3ioECNMMAnzTe5X+/H4/GUMfXER4W5p7l6nL
Vt3V8nhv6WhGy/1H7XLhmnt3hww7HqNbvlGuCR9uRsyzfY9zTwqVf/V/JGX1V7ca
S17KKwoy1ZIFLQRG7uWjTiLQKAJjozmw/4KuTqpuCfpwOlEHPSV/8hXKmNm4Hx6d
M4y9vQWUGw26/SadLe/hwGEftZ7TdDljn+IF6bTLdOg6OCLnUAUCxoMBhP0a0QRB
pZ1r93AyyEcMcnkzzsMlqjFHVQ4gyniF59jcmaX8wxZ67paC/to=
=sQ2g
-----END PGP SIGNATURE-----