Debian/knot: medium 6.5
Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denia
Action: Upgrade knot to 3.5.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.4-1 | - |
Fixed versions
| 3.5.4-1 |
Sources
- osv: DEBIAN-CVE-2026-39155#Debian:14/knot
- https://security-tracker.debian.org/tracker/CVE-2026-39155
published · modified · JSON