[DSA 6369-1] pdns-recursor security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6369-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
June 25, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pdns-recursor
CVE ID         : CVE-2026-33612 CVE-2026-40012 CVE-2026-42005
                 CVE-2026-42387 CVE-2026-42388 CVE-2026-42390
		 CVE-2026-52690

Multiple vulnerabiliites have been discovered in PDNS Recursor, a
resolving name server which could result in denial of service, cache
poisoning or information disclosure.

For the stable distribution (trixie), these problems have been fixed in
version 5.2.11-0+deb13u1.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=KsbT
-----END PGP SIGNATURE-----