Zum Inhalt springen.
Sympa Menü

it-securitynotifies - [IT-SecNots] [SECURITY] [DSA 5674-1] pdns-recursor security update

it-securitynotifies AT lists.piratenpartei.de

Betreff: Sicherheitsankündigungen

Listenarchiv

[IT-SecNots] [SECURITY] [DSA 5674-1] pdns-recursor security update


Chronologisch Thread  
  • From: Moritz Muehlenhoff <jmm AT debian.org>
  • To: debian-security-announce AT lists.debian.org
  • Subject: [IT-SecNots] [SECURITY] [DSA 5674-1] pdns-recursor security update
  • Date: Thu, 25 Apr 2024 19:28:07 +0000
  • List-archive: https://lists.debian.org/msgid-search/Ziqux0MeK86kIqyl AT seger.debian.org
  • List-id: <debian-security-announce.lists.debian.org>
  • List-url: <http://lists.debian.org/debian-security-announce/>
  • Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=CuEAHPm/CciuZI1UmyrTo9iK9nHvMyLrxOqV0ZZ+EOY=; b=LK Z2dkVwmCAgVtcxcv1BFiSL128GQBqi3U7R2brJ36InIvWgdQkZkiTqCE5zCvPWoSjuNgLc1axPrlZ hTHKcx3LS3Zq33CBDveLLn0IRttLaYaCJYAllZ9wz5L2SZHFeclPK1jJ0U9QdDCXyYfF/fXCmeHwP 8wcEEuMnIbtcwvStmYqRL+RI/vdhk2uCmRwUg9NcSGo92ZQph0PfaUuiwoarCmVx4+DhLoYBtTXUX +xJfuOYT3zJJJUigVSxr88d9YVPE03nW1gyfP0CyJcW4Urnh3yiSaaJkHLrjOy2BX42Y4fCvpUTrI 0ZrPAxA+43A2vjFVe8QmOFftp2OTJfiQ==;
  • Old-return-path: <jmm AT seger.debian.org>
  • Priority: urgent
  • Resent-date: Thu, 25 Apr 2024 19:28:36 +0000 (UTC)
  • Resent-from: debian-security-announce AT lists.debian.org
  • Resent-message-id: <B4M5N_GHTVO.A.kwG.j7qKmB@bendel>
  • Resent-sender: debian-security-announce-request AT lists.debian.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5674-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
April 25, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : pdns-recursor
CVE ID : CVE-2024-25583

It was discovered that PDNS Recursor, a resolving name server, was
susceptible to denial of service if recursive forwarding is configured.

For the stable distribution (bookworm), this problem has been fixed in
version 4.8.8-1.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pdns-recursor

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=PwIZ
-----END PGP SIGNATURE-----



  • [IT-SecNots] [SECURITY] [DSA 5674-1] pdns-recursor security update, Moritz Muehlenhoff, 25.04.2024

Archiv bereitgestellt durch MHonArc 2.6.19+.

Seitenanfang