[DSA 6421-1] pdns-recursor security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6421-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
August 08, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pdns-recursor
CVE ID         : CVE-2026-52682

A vulnerability was discovered in PowerDNS Recursor ("pdns-recursor"), a
resolving name server, which may result in denial of service (increased
memory and CPU usage) when processing a specially crafted DNS packet.

For the stable distribution (trixie), this problem has been fixed in
version 5.2.13-0+deb13u1.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=8J/E
-----END PGP SIGNATURE-----