git: 7a952b28dc2a - 2026Q2 - dns/powerdns-recursor: Security update 5.4.2 => 5.4.3
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 29 Jun 2026 11:01:59 UTC
The branch 2026Q2 has been updated by nxjoseph:
URL: https://cgit.FreeBSD.org/ports/commit/?id=7a952b28dc2ab33965816494c4b62de103a5b1da
commit 7a952b28dc2ab33965816494c4b62de103a5b1da
Author: Ralf van der Enden <tremere@cainites.net>
AuthorDate: 2026-06-18 07:36:43 +0000
Commit: Yusuf Yaman <nxjoseph@FreeBSD.org>
CommitDate: 2026-06-29 11:01:36 +0000
dns/powerdns-recursor: Security update 5.4.2 => 5.4.3
Port changes:
- Add NOD option for upstream new feature support
- Set C++17 standard
- Use '+=' instead of '=' for DISTFILES to reduce portlint warnings
Changelog:
https://doc.powerdns.com/recursor/changelog/5.4.html#change-5.4.3
Security Advisory:
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-08.html
PR: 296313
Reported by: Jordan Ostreff <jordan@ostreff.info>
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
Security: CVE-2026-3361
Security: CVE-2026-40012
Security: CVE-2026-42005
Security: CVE-2026-42387
Security: CVE-2026-42388
Security: CVE-2026-42389
Security: CVE-2026-42390
Security: CVE-2026-52690
(cherry picked from commit 82534ef917657af7d32031669a67da015950d9b9)
---
dns/powerdns-recursor/Makefile | 14 ++++++++------
dns/powerdns-recursor/distinfo | 6 +++---
2 files changed, 11 insertions(+), 9 deletions(-)
diff --git a/dns/powerdns-recursor/Makefile b/dns/powerdns-recursor/Makefile
index a8541f162668..2bddd1f4c267 100644
--- a/dns/powerdns-recursor/Makefile
+++ b/dns/powerdns-recursor/Makefile
@@ -1,11 +1,10 @@
PORTNAME= recursor
-DISTVERSION= 5.4.2
-PORTREVISION= 0
+DISTVERSION= 5.4.3
CATEGORIES= dns
MASTER_SITES= https://downloads.powerdns.com/releases/
PKGNAMEPREFIX= powerdns-
DISTNAME= pdns-${PORTNAME}-${DISTVERSION}
-DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
+DISTFILES+= ${DISTNAME}${EXTRACT_SUFX}
MAINTAINER= tremere@cainites.net
COMMENT= Advanced DNS recursor
@@ -22,7 +21,7 @@ LIB_DEPENDS= libboost_context.so:devel/boost-libs \
libcurl.so:ftp/curl \
libsodium.so:security/libsodium
-USES= cargo compiler:c++11-lib cpe localbase meson pkgconfig \
+USES= cargo compiler:c++17-lang cpe localbase meson pkgconfig \
python:build ssl tar:xz
CPE_VENDOR= powerdns
@@ -47,14 +46,15 @@ TARGET_ORDER_OVERRIDE= 750:cargo-configure
USERS= pdns_recursor
GROUPS= pdns
-OPTIONS_DEFINE= DNSTAP GNUTLS SNMP
-OPTIONS_DEFAULT= LUA
+OPTIONS_DEFINE= DNSTAP GNUTLS NOD SNMP
+OPTIONS_DEFAULT= LUA NOD
OPTIONS_SINGLE= EXTLUA
OPTIONS_SINGLE_EXTLUA= LUA LUAJIT
DNSTAP_DESC= dnstap support (see dnstap.info)
LUAJIT_DESC= Use luajit
LUA_DESC= Use lang/lua
+NOD_DESC= Newly Observed Domain Tracking support
DNSTAP_LIB_DEPENDS= libfstrm.so:devel/fstrm
DNSTAP_MESON_ENABLED= dnstap
@@ -68,6 +68,8 @@ LUAJIT_MESON_ON= -Dlua=luajit
LUA_USES= lua
LUA_MESON_ON= -Dlua=lua
+NOD_MESON_ENABLED= nod
+
SNMP_LIB_DEPENDS= libnetsnmp.so:net-mgmt/net-snmp
SNMP_MESON_ENABLED= snmp
diff --git a/dns/powerdns-recursor/distinfo b/dns/powerdns-recursor/distinfo
index e5df2e2715c5..b057c77063ee 100644
--- a/dns/powerdns-recursor/distinfo
+++ b/dns/powerdns-recursor/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1780682774
-SHA256 (pdns-recursor-5.4.2.tar.xz) = a4cea2981dc78b394999fffe28eff9096e214d5e4229c5c2ec07bff3efd02d59
-SIZE (pdns-recursor-5.4.2.tar.xz) = 1394108
+TIMESTAMP = 1782459035
+SHA256 (pdns-recursor-5.4.3.tar.xz) = a292029c543ac4538ca57628b8142c9edca9b283a3a80cb393ed947e0584f00f
+SIZE (pdns-recursor-5.4.3.tar.xz) = 1394600
SHA256 (rust/crates/anstyle-1.0.13.crate) = 5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78
SIZE (rust/crates/anstyle-1.0.13.crate) = 17651
SHA256 (rust/crates/atomic-waker-1.1.2.crate) = 1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0