[Git][security-tracker-team/security-tracker][master] dnsdist fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
73988402 by Moritz Muehlenhoff at 2026-07-02T16:21:27+02:00
dnsdist fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5336,37 +5336,37 @@ CVE-2026-12844 (List::SomeUtils::XS versions before 0.59 for Perl have a heap bu
 	NOTE: Fixed by: https://github.com/houseabsolute/List-SomeUtils-XS/commit/22549f78669b780d6aa338a2d2e49a3dedfffaa6 (v0.59)
 CVE-2026-40211 (An attacker can send crafted DNS over HTTP/3 queries, triggering an ex ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40211-denial-of-service-via-crafted-doh3-queries
 CVE-2026-40210 (An out-of-bounds read might happen when SetMacAddrAction is used, pote ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40210-out-of-bounds-read-in-setmacaddraction
 CVE-2026-40209 (An attacker might be able to cause outgoing TCP connections to backend ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40209-denial-of-service-via-ixfr-queries
 CVE-2026-40208 (An attacker might be able to delay the processing of DoH3 queries by s ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40208-denial-of-service-via-doh3-queries
 CVE-2026-42004 (An attacker can send a crafted EDNS OPT record that will be ignored by ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-42004-edns-options-smuggling
 CVE-2026-40011 (An attacker sending a large number of crafted DNS queries might be abl ...)
 	{DSA-6367-1}
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html#cve-2026-40011-prometheus-denial-of-service-via-crafted-dns-queries
@@ -5408,7 +5408,7 @@ CVE-2026-42005 (An attacker can send a web request that causes unlimited memory
 	- pdns 5.1.2-1
 	[bookworm] - pdns <end-of-life> (See #1119290)
 	[bullseye] - pdns <end-of-life> (see DLA 4471)
-	- dnsdist <unfixed>
+	- dnsdist 2.1.0-1
 	[bookworm] - dnsdist <end-of-life> (See #1119290)
 	[bullseye] - dnsdist <end-of-life> (see #1119290)
 	NOTE: https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html#cve-2026-42005-unbounded-resource-consumption-in-internal-webserver



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73988402cfddf0039f0be7f2fbf68e5aa3830f84

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/73988402cfddf0039f0be7f2fbf68e5aa3830f84
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/d2aa4c67/attachment-0001.htm>