[Git][security-tracker-team/security-tracker][master] Add new pdns-recursor issue unfixed in last round of updates

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b6bf0b8e by Salvatore Bonaccorso at 2026-07-23T22:58:18+02:00
Add new pdns-recursor issue unfixed in last round of updates

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -456,7 +456,12 @@ CVE-2026-57370 (Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Re
 CVE-2026-57367 (Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versi ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-52684 (If the auth responds very slowly and the records expire in between, th ...)
-	TODO: check
+	- pdns-recursor <unfixed>
+	[trixie] - pdns-recursor <no-dsa> (Minor issue)
+	[bookworm] - pdns-recursor <end-of-life> (see DSA 6045)
+	[bullseye] - pdns-recursor <end-of-life> (see DSA 6045)
+	NOTE: https://github.com/PowerDNS/pdns/pull/17748
+	NOTE: Fixed by: https://github.com/PowerDNS/pdns/commit/63f480d2072d85ff5cd6eeb324bd52bf5debd4f7
 CVE-2026-48539 (GFI Archiver before 15.13 contains a stored cross-site scripting vulne ...)
 	NOT-FOR-US: GFI Archiver
 CVE-2026-48538 (GFI Archiver before 15.13 contains a stored cross-site scripting vulne ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6bf0b8e96bfcc6b282872e2a908131e1a69a7e9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b6bf0b8e96bfcc6b282872e2a908131e1a69a7e9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260723/7bf3984e/attachment.htm>