---
title: Debian, Slackware and Apple Are Posting Security Advisories to Bugtraq Again
description: Bugtraq went silent in January 2021. Its public archive now shows Debian, Slackware and Apple posting security advisories, with 19 people across 25 threads.
author: Darie Nani (Editor-in-Chief)
updated: 2026-08-08T19:24:03.743Z
canonical: https://www.sovereignmagazine.com/article/bugtraq-relaunch-debian-apple-advisories
image: https://cdn.nanimediahouse.com/bugtraq-mailing-list-relaunch-121013.webp
categories: Science & Tech
content_type: News
region: Global
publication: Sovereign Magazine
access: members
schema_type: Article
---

Bugtraq, the public mailing list where security researchers published vulnerability details for more than two decades, is carrying live traffic again after going silent on 17 January 2021. Its own public archive, read on 8 August 2026, shows Debian's security team posting three advisories in a single day: DSA-6421-1 for pdns-recursor and DSA-6420-1 for pdns, both covering CVE-2026-52682, a flaw that can drive up memory and CPU use when PowerDNS processes a specially crafted DNS packet, plus DSA-6419-1 for the related dnsdist software. Salvatore Bonaccorso posted all three. The fix for pdns-recursor on Debian's stable release, trixie, is version 5.2.13-0+deb13u1.

## Slackware and Apple Have Posted to the List as Well

August 2026 is the only month this year with traffic on the list, and January through July carry none. [Nineteen participants have posted across 25 discussions](https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/2026/8/), and the threads run wider than the PowerDNS advisories. Debian also posted DSA-6418-1 for Thunderbird, DSA-6417-1 for libheif and DSA-6416-1 for jq. Slackware posted SSA:2026-218-02 for p11-kit and SSA:2026-218-01 for libXfont2. Apple posted APPLE-SA-08-06-2026-3, covering macOS Sonoma 14.8.9. One thread, titled "Bugtraq is back", carries the list's own discussion of its return. The archive needs no login to read.

---

*This article is only available to registered readers. Visit the article URL to read the full piece.*