Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-42389

Fixed in a distro release EPSS <1%CVSS 5.3

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers.

Published 2026-06-25 · CVE record · OSV

Products: powerdns recursor

Distro releases

ReleasePackageFixed in
Debian 14pdns-recursor5.4.3-1
Ubuntu 24.04 LTSpdns-recursorno fix
Ubuntu 25.10pdns-recursorno fix
Ubuntu 26.04 LTSpdns-recursorno fix
Ubuntu 26.10pdns-recursorno fix
Ubuntu Pro 16.04 LTSpdns-recursorno fix
Ubuntu Pro 18.04 LTSpdns-recursorno fix
Ubuntu Pro 20.04 LTSpdns-recursorno fix
Ubuntu Pro 22.04 LTSpdns-recursorno fix