-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-34cca3d390 2026-07-04 01:06:18.979284+00:00 --------------------------------------------------------------------------------
Name : pdns-recursor Product : Fedora 43 Version : 5.2.11 Release : 1.fc43 URL : https://powerdns.com Summary : Modern, advanced and high performance recursing/non authoritative name server Description : PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network.
-------------------------------------------------------------------------------- Update Information:
update to latest upstream release to fix CVEs -------------------------------------------------------------------------------- ChangeLog:
* Thu Jun 25 2026 Filipe Rosset filiperosset@fedoraproject.org - 5.2.11-1 - update to 5.2.11 fixes rhbz#2492868 - a bunch of other bugs were fixed and will be backported to all supported Fedora / EPEL versions -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2438157 - CVE-2025-59023 pdns-recursor: crafted delegations or IP fragments can poison cached delegations [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438157 [ 2 ] Bug #2438176 - CVE-2025-59024 pdns-recursor: crafted delegations or IP fragments can poison cached delegations [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438176 [ 3 ] Bug #2438180 - CVE-2026-0398 pdns-recursor: crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2438180 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-34cca3d390' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------