[DSA 6397-1] pdns-recursor security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6397-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
July 23, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pdns-recursor
CVE ID         : CVE-2026-52686 CVE-2026-52688

Multiple vulnerabilities have been discovered in PDNS Recursor, a
resolving name server, which could result in cache poisoning or DNSSEC
validation bypass.

For the stable distribution (trixie), these problems have been fixed in
version 5.2.12-0+deb13u1.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=qYtE
-----END PGP SIGNATURE-----