Today we have released PowerDNS Authoritative Server 4.9.17, 5.0.7, 5.1.4, Recursor 5.2.13, 5.3.10, 5.4.5, and dnsdist 1.9.16, 2.0.8, 2.1.1.
These releases provide fixes for PowerDNS Security Advisory
2026-11 for PowerDNS Authoritative Server, Recursor and dnsdist: A crafted DNS packet can cause increased memory and CPU consumption
The CVE associated with this advisory is of severity High.
CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption
Please refer to the changelogs for Authoritative Server ([1]4.9.17, [2]5.0.7, [3]5.1.4), Recursor ([4]5.2.13, [5]5.3.10 and [6]5.4.5) and dnsdist ([7]1.9.16, [8]2.0.8, [9]2.1.1) and the full [10]security advisory for additional details.
Please send us all feedback and issues you might have via the [11]mailing list, or in case of a bug, via [12]GitHub.
The tarballs for Authoritative Server ([13]4.9.17, [14]5.0.7, [15]5.1.4 with signature files [16]4.9.17, [17]5.0.7, [18]5.1.4), Recursor ([19]5.2.13, [20]5.3.10, [21]5.4.5 with signature files [22]5.2.13, [23]5.3.10, [24]5.4.5) and dnsdist ([25]1.9.16, [26]2.0.8, [27]2.1.1 with signature files [28]1.9.16, [29]2.0.8, [30]2.1.1) are available from our download [31]server and packages for several distributions are available from our [32]repository.
Recently we made changes to our Open Source End of Life policy. Older release trains are now supported for one year after the following major release. Consult the EOL [33]policy for more details.
We are grateful to the PowerDNS community for the reporting of bugs, issues, feature requests, and especially to the submitters of fixes and implementations of features.
References
1. https://docs.powerdns.com/authoritative/changelog/4.9.html#change-4.9.17 2. https://docs.powerdns.com/authoritative/changelog/5.0.html#change-5.0.7 3. https://docs.powerdns.com/authoritative/changelog/5.1.html#change-5.1.4 4. https://doc.powerdns.com/recursor/changelog/5.2.html#change-5.2.13 5. https://doc.powerdns.com/recursor/changelog/5.3.html#change-5.3.10 6. https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.5 7. https://www.dnsdist.org/changelog.html#change-1.9.16 8. https://www.dnsdist.org/changelog.html#change-2.0.8 9. https://www.dnsdist.org/changelog.html#change-2.1.1 10. https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-11.html 11. https://mailman.powerdns.com/mailman/listinfo/pdns-users 12. https://github.com/PowerDNS/pdns/issues/new/choose 13. https://downloads.powerdns.com/releases/pdns-4.9.17.tar.bz2 14. https://downloads.powerdns.com/releases/pdns-5.0.7.tar.bz2 15. https://downloads.powerdns.com/releases/pdns-5.1.4.tar.bz2 16. https://downloads.powerdns.com/releases/pdns-4.9.17.tar.bz2.sig 17. https://downloads.powerdns.com/releases/pdns-5.0.7.tar.bz2.sig 18. https://downloads.powerdns.com/releases/pdns-5.1.4.tar.bz2.sig 19. https://downloads.powerdns.com/releases/pdns-recursor-5.2.13.tar.bz2 20. https://downloads.powerdns.com/releases/pdns-recursor-5.3.10.tar.xz 21. https://downloads.powerdns.com/releases/pdns-recursor-5.4.5.tar.xz 22. https://downloads.powerdns.com/releases/pdns-recursor-5.2.13.tar.bz2.sig 23. https://downloads.powerdns.com/releases/pdns-recursor-5.3.10.tar.xz.sig 24. https://downloads.powerdns.com/releases/pdns-recursor-5.4.5.tar.xz.sig 25. https://downloads.powerdns.com/releases/dnsdist-1.9.16.tar.bz2 26. https://downloads.powerdns.com/releases/dnsdist-2.0.8.tar.xz 27. https://downloads.powerdns.com/releases/dnsdist-2.1.1.tar.xz 28. https://downloads.powerdns.com/releases/dnsdist-1.9.16.tar.bz2.sig 29. https://downloads.powerdns.com/releases/dnsdist-2.0.8.tar.xz.sig 30. https://downloads.powerdns.com/releases/dnsdist-2.1.1.tar.xz.sig 31. https://downloads.powerdns.com/releases/ 32. https://repo.powerdns.com/ 33. https://docs.powerdns.com/recursor/appendices/EOL.html
--
kind regards, Otto Moerbeek Developer PowerDNS
Phone: +49 2761 75252 00 Fax: +49 2761 75252 30 Email: otto.moerbeek () powerdns com
------------------------------------------------------------------------------------- Open-Xchange AG, Hohenzollernring 72, 50672 Cologne, District Court Cologne HRB 95366 Managing Board: Andreas Gauger, Dirk Valbert Chairman of the Board: Dr. Paul-Josef Patt
PowerDNS.com B.V., Koninginnegracht 5, 2514 AA Den Haag, The Netherlands Managing Director: Robert Brandt -------------------------------------------------------------------------------------
Today, we are releasing three new versions of the PowerDNS Authoritative Server. These 4.9.16, 5.0.6 and 5.1.2 versions provide fixes for the following PowerDNS Security Advisory: [1]PowerDNS Security Advisory 2026-07: Insufficient input validation of internal web server
Please make sure to read the [2]Upgrade Notes before upgrading.
The tarballs ([3]4.9.16, [4]5.0.6), [5]5.1.2) and their signatures ([6]4.9.16, [7]5.0.6), [8]5.1.2) are available at [9]downloads.powerdns.com. Packages for various distributions are available from [10]repo.powerdns.com.
Please send us all feedback and issues you might have via the [11]mailing list, or in case of a bug, via [12]GitHub.
References 2. https://doc.powerdns.com/authoritative/upgrading.html 3. https://downloads.powerdns.com/releases/pdns-4.9.16.tar.bz2 4. https://downloads.powerdns.com/releases/pdns-5.0.6.tar.bz2 5. https://downloads.powerdns.com/releases/pdns-5.1.2.tar.bz2 6. https://downloads.powerdns.com/releases/pdns-4.9.16.tar.bz2.sig 7. https://downloads.powerdns.com/releases/pdns-5.0.6.tar.bz2.sig 8. https://downloads.powerdns.com/releases/pdns-5.1.2.tar.bz2.sig 9. https://downloads.powerdns.com/releases/ 10. https://repo.powerdns.com/ 11. https://mailman.powerdns.com/mailman/listinfo/pdns-users 12. https://github.com/PowerDNS/pdns/issues/new/choose
Today, we are releasing two new versions of the PowerDNS Authoritative Server. These 4.9.15 and 5.0.5 versions provide fixes for the following PowerDNS Security Advisory: [1]PowerDNS Security Advisory 2026-06: Multiple Issues
The security issues being fixed with these releases are low or medium-severity, and most of them involve specific backends and/or configurations. They are: CVE-2026-41999 (only concerns 5.0.x) When using views, queries sent using TCP Proxy Protocol will select the view according to the address of the proxy, rather than the address of the initial query. This can lead to wrong data being returned. CVE-2026-42000 Missing escaping of special characters (such as $ or @) in DNS names received during an AXFR operation can lead to an incorrect (non-parseable) Bind backend configuration to be written, causing this backend to fail until manual operation is performed to fix the configuration. CVE-2026-42001 Missing sanity checks of the answer to the initial SOA query, when running in autosecondary mode and receiving a notification for an not-yet-known domain may cause the server to crash. CVE-2026-42002 Multiple concurrency and locking defects in the GSS-TSIG code can lead to memory corruption due to accidental data structure sharing, which can in turn lead to a program crash. Moreover, the lack of bounds on the number of in-flight GSS-TSIG contexts can lead to unbounded memory consumption in case of an excessive number of requests at a given time. A limit of 1000 contexts is now enforced, and can be modified with the “gss-max-contexts” parameter in server configuration. CVE-2026-42396 Missing proper escaping of double-quote characters when computing labels will cause AXFR of a catalog zone with a member whose producer group option contains such a character to fail.
Please make sure to read the [2]Upgrade Notes before upgrading.
The tarballs ([3]4.9.15, [4]5.0.5) and their signatures ([5]4.9.15, [6]5.0.5) are available at [7]downloads.powerdns.com. Packages for various distributions are available from [8]repo.powerdns.com.
Please send us all feedback and issues you might have via the [9]mailing list, or in case of a bug, via [10]GitHub.
References 2. https://doc.powerdns.com/authoritative/upgrading.html 3. https://downloads.powerdns.com/releases/pdns-4.9.15.tar.bz2 4. https://downloads.powerdns.com/releases/pdns-5.0.5.tar.bz2 5. https://downloads.powerdns.com/releases/pdns-4.9.15.tar.bz2.sig 6. https://downloads.powerdns.com/releases/pdns-5.0.5.tar.bz2.sig 7. https://downloads.powerdns.com/releases/ 8. https://repo.powerdns.com/ 9. https://mailman.powerdns.com/mailman/listinfo/pdns-users 10. https://github.com/PowerDNS/pdns/issues/new/choose
Today, we are releasing two new versions of the PowerDNS Authoritative Server. These 4.9.14 and 5.0.4 versions provide fixes for the following PowerDNS Security Advisory: [1]PowerDNS Security Advisory 2026-05: Multiple Issues
The security issues being fixed with these releases are low or medium-severity, and most of them involve specific backends and/or configurations. They are: CVE-2026-33257 An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The web server is disabled and restricted by an ACL by default. CVE-2026-33260 An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The web server is disabled and restricted by an ACL by default. CVE-2026-33608 Incomplete domain name sanitization may cause the bind backend to be rendered unusable when running in autosecondary mode. CVE-2026-33609 Incomplete escaping of LDAP queries when running with 8bit-dns may cause wrong results to be returned. CVE-2026-33610 A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it. CVE-2026-33611 Adding ill-formed HTTP or SVCB records from the API or through pdnsutil can lead to permanent LMDB database corruption.
Please make sure to read the [2]Upgrade Notes before upgrading.
The tarballs ([3]4.9.14, [4]5.0.4) and their signatures ([5]4.9.14, [6]5.0.4) are available at [7]downloads.powerdns.com. Packages for various distributions are available from [8]repo.powerdns.com.
Please send us all feedback and issues you might have via the [9]mailing list, or in case of a bug, via [10]GitHub.
References 2. https://doc.powerdns.com/authoritative/upgrading.html 3. https://downloads.powerdns.com/releases/pdns-4.9.14.tar.bz2 4. https://downloads.powerdns.com/releases/pdns-5.0.4.tar.bz2 5. https://downloads.powerdns.com/releases/pdns-4.9.14.tar.bz2.sig 6. https://downloads.powerdns.com/releases/pdns-5.0.4.tar.bz2.sig 7. https://downloads.powerdns.com/releases/ 8. https://repo.powerdns.com/ 9. https://mailman.powerdns.com/mailman/listinfo/pdns-users 10. https://github.com/PowerDNS/pdns/issues/new/choose
A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.