Home / mailingsPDF  

[SECURITY] [DSA 6233-1] pdns security update

Posted on 28 April 2026
Debian Security Advisory

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6233-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
April 28, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : pdns
CVE ID : CVE-2026-33257 CVE-2026-33260 CVE-2026-33608
CVE-2026-33609 CVE-2026-33610 CVE-2026-33611

Multiple security vulnerabilities were discovered in the dnsdist DNS
loadbalancer, which could result in denial of service, information
disclosure or ACL bypass.

For the stable distribution (trixie), these problems have been fixed in
version 4.9.14-0+deb13u1.

We recommend that you upgrade your pdns packages.

For the detailed security status of pdns please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pdns

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

 

TOP