Two vulnerabiliites have been discovered in PDNS Recursor, a resolving name server: Delegation information was insufficiently validated, which could result in cache pollution.
These changes are too intrusive to be backported to the version of the PDNS recursor in the oldstable distribution (bookworm). For affected setups an update to Debian stable/trixie is recommended, no further security updates for pdns-recursor in Bookworm will be issued.
https://security-tracker.debian.org/tracker/DSA-6045-1
Continue reading...
These changes are too intrusive to be backported to the version of the PDNS recursor in the oldstable distribution (bookworm). For affected setups an update to Debian stable/trixie is recommended, no further security updates for pdns-recursor in Bookworm will be issued.
https://security-tracker.debian.org/tracker/DSA-6045-1
Continue reading...

