[Bug 294225] dns/dnsdist: update to 2.0.3 (security)

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 05 Apr 2026 16:16:13 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294225

Yusuf Yaman <nxjoseph@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://blog.powerdns.com/2
                   |                            |026/03/31/powerdns-dnsdist-
                   |                            |1.9.12-and-2.0.3-released
             Status|New                         |In Progress
              Flags|                            |maintainer-feedback?(vvd@Fr
                   |                            |eeBSD.org),
                   |                            |merge-quarterly?
                 CC|                            |nxjoseph@freebsd.org,
                   |                            |vvd@FreeBSD.org
            Summary|dns/dnsdist upgrade to      |dns/dnsdist: update to
                   |2.0.3 fix CVE-2026-0396,    |2.0.3 (security)
                   |CVE-2026-0397,              |
                   |CVE-2026-24028,             |
                   |CVE-2026-24029,             |
                   |CVE-2026-24030,             |
                   |CVE-2026-27853,             |
                   |CVE-2026-27854              |
           Assignee|ports-bugs@FreeBSD.org      |nxjoseph@freebsd.org

--- Comment #6 from Yusuf Yaman <nxjoseph@freebsd.org> ---
Hi,

Thank you for the collaboration!

I have tested the patch (not runtime, but build) in Poudriere (14.3-RELEASE-p9,
amd64, main(c927d063a7ee)) and it seems OK.

However, hopefully I did a bit of improvement to Makefile over the maintainer's
patch.

```
-DISTFILES=     ${DISTNAME}${EXTRACT_SUFX}
+DISTFILES+=    ${DISTNAME}${EXTRACT_SUFX}
...
-.include <bsd.port.pre.mk>
+.include <bsd.port.options.mk>
...
-.include <bsd.port.post.mk>
+.include <bsd.port.mk>
```

1. regarding distfiles= => distfiles+= change reduces portlint warnings from 4
to just 2. I'd like to also solve the warning about IPCIPHER but could not
figure it out, harmless i guess.

BEFORE:
```
$ portlint -AC
WARN: /home/yusuf/doc/git/ports/dns/dnsdist/pkg-descr: exceeds 24 lines, make
it shorter if possible.(currently 27 lines)
WARN: Makefile: IPCIPHER is listed in OPTIONS_DEFINE, but no
PORT_OPTIONS:MIPCIPHER appears.
WARN: Makefile: use of DISTFILES with single file is discouraged. distribution
filename should be set by DISTNAME and EXTRACT_SUFX.
WARN: Makefile: DISTFILES/DISTNAME affects WRKSRC. take caution when changing
them.
0 fatal errors and 4 warnings found.
```

AFTER:
```
$ portlint -AC
WARN: /home/yusuf/doc/git/ports/dns/dnsdist/pkg-descr: exceeds 24 lines, make
it shorter if possible.(currently 27 lines)
WARN: Makefile: IPCIPHER is listed in OPTIONS_DEFINE, but no
PORT_OPTIONS:MIPCIPHER appears.
0 fatal errors and 2 warnings found.
```

2. I think it is advised to use <bsd.port.options.mk> rather than
<bsd.port.pre.mk> and <bsd.port.post.mk>.

I need to ask for approval from my mentors first.

Thanks.

-- 
You are receiving this mail because:
You are the assignee for the bug.