Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
73988402 by Moritz Muehlenhoff at 2026-07-02T16:21:27+02:00
dnsdist fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5336,37 +5336,37 @@ CVE-2026-12844 (List::SomeUtils::XS versions before
0.59 for Perl have a heap bu
NOTE: Fixed by:
https://github.com/houseabsolute/List-SomeUtils-XS/commit/22549f78669b780d6aa338a2d2e49a3dedfffaa6
(v0.59)
CVE-2026-40211 (An attacker can send crafted DNS over HTTP/3 queries,
triggering an ex ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40211-denial-of-service-via-crafted-doh3-queries
CVE-2026-40210 (An out-of-bounds read might happen when SetMacAddrAction is
used, pote ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40210-out-of-bounds-read-in-setmacaddraction
CVE-2026-40209 (An attacker might be able to cause outgoing TCP connections to
backend ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40209-denial-of-service-via-ixfr-queries
CVE-2026-40208 (An attacker might be able to delay the processing of DoH3
queries by s ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40208-denial-of-service-via-doh3-queries
CVE-2026-42004 (An attacker can send a crafted EDNS OPT record that will be
ignored by ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-42004-edns-options-smuggling
CVE-2026-40011 (An attacker sending a large number of crafted DNS queries
might be abl ...)
{DSA-6367-1}
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40011-prometheus-denial-of-service-via-crafted-dns-queries
@@ -5408,7 +5408,7 @@ CVE-2026-42005 (An attacker can send a web request that
causes unlimited memory
- pdns 5.1.2-1
[bookworm] - pdns <end-of-life> (See #1119290)
[bullseye] - pdns <end-of-life> (see DLA 4471)
- - dnsdist <unfixed>
+ - dnsdist 2.1.0-1
[bookworm] - dnsdist <end-of-life> (See #1119290)
[bullseye] - dnsdist <end-of-life> (see #1119290)
NOTE:
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html#cve-2026-42005-unbounded-resource-consumption-in-internal-webserver
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73988402cfddf0039f0be7f2fbf68e5aa3830f84
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73988402cfddf0039f0be7f2fbf68e5aa3830f84
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
