---
title: PowerDNS Recursor 4.3.5, 4.2.5 and 4.1.18 Released | PowerDNS Blog
description: Hello!, Today we are releasing PowerDNS Recursor 4.3.5, 4.2.5. and 4.1.18, containing a security fix for CVE-2020-25829.
---

[PowerDNS Blog ](https://blog.powerdns.com)

# [PowerDNS Recursor 4.3.5, 4.2.5 and 4.1.18 Released | PowerDNS Blog](https://blog.powerdns.com/2020/10/13/powerdns-recursor-4-3-5-4-2-5-and-4-1-18-released)

 Written by [Otto Moerbeek](https://blog.powerdns.com/author/otto-moerbeek) | Oct 13, 2020 4:00:00 AM

Hello!,

Today we are releasing PowerDNS Recursor 4.3.5, 4.2.5. and 4.1.18, containing a security fix for [CVE-2020-25829:](https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html)

An issue has been found in PowerDNS Recursor where a remote attacker can cause the cached records for a given name to be updated to the `Bogus` DNSSEC validation state, instead of their actual DNSSEC `Secure` state, via a DNS ANY query. This results in a denial of service for installations that always validate (`dnssec=validate`) and for clients requesting validation when on-demand validation is enabled (`dnssec=process`). The severity is high for these cases.

As usual, there were also other smaller enhancements and bugfixes. Please refer to the [4.3.5 changelog](https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.5), [4.2.5 changelog](https://doc.powerdns.com/recursor/changelog/4.2.html#change-4.2.5) and [4.1.18 changelog](https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.18) for details.

The [4.3.5 tarball](https://downloads.powerdns.com/releases/pdns-recursor-4.3.5.tar.bz2) ([signature](https://downloads.powerdns.com/releases/pdns-recursor-4.3.5.tar.bz2.sig)), [4.2.5 tarball](https://downloads.powerdns.com/releases/pdns-recursor-4.2.5.tar.bz2) ([signature](https://downloads.powerdns.com/releases/pdns-recursor-4.2.5.tar.bz2.sig)) and [4.1.18 tarball](https://downloads.powerdns.com/releases/pdns-recursor-4.1.18.tar.bz2) ([signature](https://downloads.powerdns.com/releases/pdns-recursor-4.1.18.tar.bz2.sig)) are available at [downloads.powerdns.com](https://downloads.powerdns.com/releases/) and packages for CentOS 6, 7 and 8, Debian Stretch and Buster, Ubuntu Xenial and Bionic are available from [repo.powerdns.com](https://repo.powerdns.com/).

4.0 and older releases are EOL, refer to the [documentation](https://docs.powerdns.com/recursor/appendices/EOL.html) for details about our release cycles.

Please send us all feedback and issues you might have via the [mailing list](https://mailman.powerdns.com/mailman/listinfo/pdns-users), or in case of a bug, via [GitHub](https://github.com/PowerDNS/pdns/issues/new/choose).

 

[View full post](https://blog.powerdns.com/2020/10/13/powerdns-recursor-4-3-5-4-2-5-and-4-1-18-released)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Otto Moerbeek"
  },
  "dateModified" : "2023-04-20T17:00:44.691Z",
  "datePublished" : "2020-10-13T04:00:00Z",
  "headline" : "PowerDNS Recursor 4.3.5, 4.2.5 and 4.1.18 Released",
  "image" : {
    "@type" : "ImageObject",
    "height" : 540,
    "url" : "https://20334960.fs1.hubspotusercontent-na1.net/hubfs/20334960/PowerDNS_recursor_release_blog.png",
    "width" : 934
  },
  "mainEntityOfPage" : "https://blog.powerdns.com/2020/10/13/powerdns-recursor-4-3-5-4-2-5-and-4-1-18-released",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "PowerDNS Blog"
  }
}
```