[Bug 291543] dns/powerdns-recursor: update to 5.3.4 (fixes CVE-2025-59029 and CVE-2025-59030)
Date: Wed, 11 Feb 2026 13:25:42 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291543
--- Comment #18 from Jordan Ostreff <jordan@ostreff.info> ---
Comment on attachment 267673
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=267673
Update PowerDNS Recursor to 5.3.4 (fixes 2 CVE's; updated after PORTREVISION
bump)
>From decbbe7f8c2ad4e3a5fd25005d6181e1d7e9ed9a Mon Sep 17 00:00:00 2001
>From: Ralf van der Enden <tremere@cainites.net>
>Date: Fri, 23 Jan 2026 12:05:29 +0100
>Subject: [PATCH] dns/powerdns-recursor: update to 5.3.4 & fix CVEs
>
>---
> dns/powerdns-recursor/Makefile | 8 ++---
> dns/powerdns-recursor/Makefile.crates | 22 ++++++------
> dns/powerdns-recursor/distinfo | 50 ++++++++++++---------------
> 3 files changed, 37 insertions(+), 43 deletions(-)
>
>diff --git a/dns/powerdns-recursor/Makefile b/dns/powerdns-recursor/Makefile
>index e166182108..525ae4465a 100644
>--- a/dns/powerdns-recursor/Makefile
>+++ b/dns/powerdns-recursor/Makefile
>@@ -1,6 +1,5 @@
> PORTNAME= recursor
>-DISTVERSION= 5.3.1
>-PORTREVISION= 3
>+DISTVERSION= 5.3.5
> CATEGORIES= dns
> MASTER_SITES= https://downloads.powerdns.com/releases/
> PKGNAMEPREFIX= powerdns-
>@@ -19,7 +18,8 @@ NOT_FOR_ARCHS_REASON= archs with 32-bits time_t are no longer supported by upstr
>
> BUILD_DEPENDS= ${LOCALBASE}/include/boost/shared_ptr.hpp:devel/boost-libs
> LIB_DEPENDS= libboost_context.so:devel/boost-libs \
>- libcurl.so:ftp/curl
>+ libcurl.so:ftp/curl \
>+ libsodium.so:security/libsodium
>
> USES= cargo compiler:c++11-lib cpe localbase meson pkgconfig \
> python:build tar:xz
>@@ -30,7 +30,7 @@ USE_RC_SUBR= pdns_recursor
> MESON_ARGS= --sysconfdir=${PREFIX}/etc/pdns \
> -Dhardening=disabled \
> -Dlibcap=disabled \
>- -Dsigners-libsodium=disabled \
>+ -Dsigners-libsodium=enabled \
> -Dsystemd-service=disabled
>
> CARGO_CARGOLOCK= ${WRKSRC}/rec-rust-lib/rust/Cargo.lock
>diff --git a/dns/powerdns-recursor/Makefile.crates b/dns/powerdns-recursor/Makefile.crates
>index b328bcc157..2c18fdcde6 100644
>--- a/dns/powerdns-recursor/Makefile.crates
>+++ b/dns/powerdns-recursor/Makefile.crates
>@@ -9,15 +9,15 @@ CARGO_CRATES= addr2line-0.24.2 \
> clap-4.5.27 \
> clap_builder-4.5.27 \
> clap_lex-0.7.4 \
>- codespan-reporting-0.11.1 \
>- cxx-1.0.137 \
>- cxx-build-1.0.137 \
>- cxxbridge-cmd-1.0.137 \
>- cxxbridge-flags-1.0.137 \
>- cxxbridge-macro-1.0.137 \
>+ codespan-reporting-0.13.1 \
>+ cxx-1.0.192 \
>+ cxx-build-1.0.192 \
>+ cxxbridge-cmd-1.0.192 \
>+ cxxbridge-flags-1.0.192 \
>+ cxxbridge-macro-1.0.192 \
> equivalent-1.0.1 \
> fnv-1.0.7 \
>- foldhash-0.1.4 \
>+ foldhash-0.2.0 \
> form_urlencoded-1.2.1 \
> futures-channel-0.3.31 \
> futures-core-0.3.31 \
>@@ -25,7 +25,7 @@ CARGO_CRATES= addr2line-0.24.2 \
> futures-util-0.3.31 \
> getrandom-0.2.15 \
> gimli-0.31.1 \
>- hashbrown-0.15.2 \
>+ hashbrown-0.16.1 \
> http-1.2.0 \
> http-body-1.0.1 \
> http-body-util-0.1.2 \
>@@ -34,11 +34,11 @@ CARGO_CRATES= addr2line-0.24.2 \
> hyper-1.6.0 \
> hyper-rustls-0.27.5 \
> hyper-util-0.1.10 \
>- indexmap-2.7.1 \
>+ indexmap-2.12.1 \
> ipnet-2.11.0 \
> itoa-1.0.14 \
> libc-0.2.169 \
>- link-cplusplus-1.0.9 \
>+ link-cplusplus-1.0.12 \
> memchr-2.7.4 \
> miniz_oxide-0.8.3 \
> mio-1.0.3 \
>@@ -55,7 +55,6 @@ CARGO_CRATES= addr2line-0.24.2 \
> rustls-pemfile-2.2.0 \
> rustls-pki-types-1.11.0 \
> rustls-webpki-0.102.8 \
>- rustversion-1.0.19 \
> ryu-1.0.19 \
> scratch-1.0.7 \
> serde-1.0.217 \
>@@ -78,7 +77,6 @@ CARGO_CRATES= addr2line-0.24.2 \
> unicode-width-0.1.14 \
> unsafe-libyaml-0.2.11 \
> untrusted-0.9.0 \
>- uuid-1.12.1 \
> want-0.3.1 \
> wasi-0.11.0+wasi-snapshot-preview1 \
> winapi-util-0.1.9 \
>diff --git a/dns/powerdns-recursor/distinfo b/dns/powerdns-recursor/distinfo
>index f0c9e11e30..5b3d03a490 100644
>--- a/dns/powerdns-recursor/distinfo
>+++ b/dns/powerdns-recursor/distinfo
>@@ -1,6 +1,6 @@
>-TIMESTAMP = 1761153397
>-SHA256 (pdns-recursor-5.3.1.tar.xz) = a7b633d4b5da3b5f14d51a78e21e17f1334c828ce96fcccdd97cd7aaaf14cbd5
>-SIZE (pdns-recursor-5.3.1.tar.xz) = 1362088
>+TIMESTAMP = 1768428113
>+SHA256 (pdns-recursor-5.3.4.tar.xz) = fb50a8587f4b3d57f88dcacc226a64c5154992b0dafd20f5bb034355e3624524
>+SIZE (pdns-recursor-5.3.4.tar.xz) = 1366588
> SHA256 (rust/crates/addr2line-0.24.2.crate) = dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1
> SIZE (rust/crates/addr2line-0.24.2.crate) = 39015
> SHA256 (rust/crates/adler2-2.0.0.crate) = 512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627
>@@ -23,24 +23,24 @@ SHA256 (rust/crates/clap_builder-4.5.27.crate) = 1b26884eb4b57140e4d2d93652abfa4
> SIZE (rust/crates/clap_builder-4.5.27.crate) = 168024
> SHA256 (rust/crates/clap_lex-0.7.4.crate) = f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6
> SIZE (rust/crates/clap_lex-0.7.4.crate) = 12858
>-SHA256 (rust/crates/codespan-reporting-0.11.1.crate) = 3538270d33cc669650c4b093848450d380def10c331d38c768e34cac80576e6e
>-SIZE (rust/crates/codespan-reporting-0.11.1.crate) = 48963
>-SHA256 (rust/crates/cxx-1.0.137.crate) = 0fc894913dccfed0f84106062c284fa021c3ba70cb1d78797d6f5165d4492e45
>-SIZE (rust/crates/cxx-1.0.137.crate) = 234864
>-SHA256 (rust/crates/cxx-build-1.0.137.crate) = 503b2bfb6b3e8ce7f95d865a67419451832083d3186958290cee6c53e39dfcfe
>-SIZE (rust/crates/cxx-build-1.0.137.crate) = 89255
>-SHA256 (rust/crates/cxxbridge-cmd-1.0.137.crate) = e0d2cb64a95b4b5a381971482235c4db2e0208302a962acdbe314db03cbbe2fb
>-SIZE (rust/crates/cxxbridge-cmd-1.0.137.crate) = 76905
>-SHA256 (rust/crates/cxxbridge-flags-1.0.137.crate) = 5f797b0206463c9c2a68ed605ab28892cca784f1ef066050f4942e3de26ad885
>-SIZE (rust/crates/cxxbridge-flags-1.0.137.crate) = 5361
>-SHA256 (rust/crates/cxxbridge-macro-1.0.137.crate) = e79010a2093848e65a3e0f7062d3f02fb2ef27f866416dfe436fccfa73d3bb59
>-SIZE (rust/crates/cxxbridge-macro-1.0.137.crate) = 64045
>+SHA256 (rust/crates/codespan-reporting-0.13.1.crate) = af491d569909a7e4dee0ad7db7f5341fef5c614d5b8ec8cf765732aba3cff681
>+SIZE (rust/crates/codespan-reporting-0.13.1.crate) = 57424
>+SHA256 (rust/crates/cxx-1.0.192.crate) = bbda285ba6e5866529faf76352bdf73801d9b44a6308d7cd58ca2379f378e994
>+SIZE (rust/crates/cxx-1.0.192.crate) = 233787
>+SHA256 (rust/crates/cxx-build-1.0.192.crate) = af9efde466c5d532d57efd92f861da3bdb7f61e369128ce8b4c3fe0c9de4fa4d
>+SIZE (rust/crates/cxx-build-1.0.192.crate) = 99947
>+SHA256 (rust/crates/cxxbridge-cmd-1.0.192.crate) = 3efb93799095bccd4f763ca07997dc39a69e5e61ab52d2c407d4988d21ce144d
>+SIZE (rust/crates/cxxbridge-cmd-1.0.192.crate) = 87055
>+SHA256 (rust/crates/cxxbridge-flags-1.0.192.crate) = 3092010228026e143b32a4463ed9fa8f86dca266af4bf5f3b2a26e113dbe4e45
>+SIZE (rust/crates/cxxbridge-flags-1.0.192.crate) = 5429
>+SHA256 (rust/crates/cxxbridge-macro-1.0.192.crate) = 31d72ebfcd351ae404fb00ff378dfc9571827a00722c9e735c9181aec320ba0a
>+SIZE (rust/crates/cxxbridge-macro-1.0.192.crate) = 71999
> SHA256 (rust/crates/equivalent-1.0.1.crate) = 5443807d6dff69373d433ab9ef5378ad8df50ca6298caf15de6e52e24aaf54d5
> SIZE (rust/crates/equivalent-1.0.1.crate) = 6615
> SHA256 (rust/crates/fnv-1.0.7.crate) = 3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1
> SIZE (rust/crates/fnv-1.0.7.crate) = 11266
>-SHA256 (rust/crates/foldhash-0.1.4.crate) = a0d2fde1f7b3d48b8395d5f2de76c18a528bd6a9cdde438df747bfcba3e05d6f
>-SIZE (rust/crates/foldhash-0.1.4.crate) = 13764
>+SHA256 (rust/crates/foldhash-0.2.0.crate) = 77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb
>+SIZE (rust/crates/foldhash-0.2.0.crate) = 23329
> SHA256 (rust/crates/form_urlencoded-1.2.1.crate) = e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456
> SIZE (rust/crates/form_urlencoded-1.2.1.crate) = 8969
> SHA256 (rust/crates/futures-channel-0.3.31.crate) = 2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10
>@@ -55,8 +55,8 @@ SHA256 (rust/crates/getrandom-0.2.15.crate) = c4567c8db10ae91089c99af84c68c38da3
> SIZE (rust/crates/getrandom-0.2.15.crate) = 37163
> SHA256 (rust/crates/gimli-0.31.1.crate) = 07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f
> SIZE (rust/crates/gimli-0.31.1.crate) = 279515
>-SHA256 (rust/crates/hashbrown-0.15.2.crate) = bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289
>-SIZE (rust/crates/hashbrown-0.15.2.crate) = 138478
>+SHA256 (rust/crates/hashbrown-0.16.1.crate) = 841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100
>+SIZE (rust/crates/hashbrown-0.16.1.crate) = 147785
> SHA256 (rust/crates/http-1.2.0.crate) = f16ca2af56261c99fba8bac40a10251ce8188205a4c448fbb745a2e4daa76fea
> SIZE (rust/crates/http-1.2.0.crate) = 105932
> SHA256 (rust/crates/http-body-1.0.1.crate) = 1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184
>@@ -73,16 +73,16 @@ SHA256 (rust/crates/hyper-rustls-0.27.5.crate) = 2d191583f3da1305256f22463b9bb04
> SIZE (rust/crates/hyper-rustls-0.27.5.crate) = 34660
> SHA256 (rust/crates/hyper-util-0.1.10.crate) = df2dcfbe0677734ab2f3ffa7fa7bfd4706bfdc1ef393f2ee30184aed67e631b4
> SIZE (rust/crates/hyper-util-0.1.10.crate) = 72887
>-SHA256 (rust/crates/indexmap-2.7.1.crate) = 8c9c992b02b5b4c94ea26e32fe5bccb7aa7d9f390ab5c1221ff895bc7ea8b652
>-SIZE (rust/crates/indexmap-2.7.1.crate) = 88644
>+SHA256 (rust/crates/indexmap-2.12.1.crate) = 0ad4bb2b565bca0645f4d68c5c9af97fba094e9791da685bf83cb5f3ce74acf2
>+SIZE (rust/crates/indexmap-2.12.1.crate) = 100184
> SHA256 (rust/crates/ipnet-2.11.0.crate) = 469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130
> SIZE (rust/crates/ipnet-2.11.0.crate) = 29718
> SHA256 (rust/crates/itoa-1.0.14.crate) = d75a2a4b1b190afb6f5425f10f6a8f959d2ea0b9c2b1d79553551850539e4674
> SIZE (rust/crates/itoa-1.0.14.crate) = 11210
> SHA256 (rust/crates/libc-0.2.169.crate) = b5aba8db14291edd000dfcc4d620c7ebfb122c613afb886ca8803fa4e128a20a
> SIZE (rust/crates/libc-0.2.169.crate) = 757901
>-SHA256 (rust/crates/link-cplusplus-1.0.9.crate) = 9d240c6f7e1ba3a28b0249f774e6a9dd0175054b52dfbb61b16eb8505c3785c9
>-SIZE (rust/crates/link-cplusplus-1.0.9.crate) = 7484
>+SHA256 (rust/crates/link-cplusplus-1.0.12.crate) = 7f78c730aaa7d0b9336a299029ea49f9ee53b0ed06e9202e8cb7db9bae7b8c82
>+SIZE (rust/crates/link-cplusplus-1.0.12.crate) = 8178
> SHA256 (rust/crates/memchr-2.7.4.crate) = 78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3
> SIZE (rust/crates/memchr-2.7.4.crate) = 96670
> SHA256 (rust/crates/miniz_oxide-0.8.3.crate) = b8402cab7aefae129c6977bb0ff1b8fd9a04eb5b51efc50a70bea51cda0c7924
>@@ -115,8 +115,6 @@ SHA256 (rust/crates/rustls-pki-types-1.11.0.crate) = 917ce264624a4b4db1c364dcc35
> SIZE (rust/crates/rustls-pki-types-1.11.0.crate) = 63933
> SHA256 (rust/crates/rustls-webpki-0.102.8.crate) = 64ca1bc8749bd4cf37b5ce386cc146580777b4e8572c7b97baf22c83f444bee9
> SIZE (rust/crates/rustls-webpki-0.102.8.crate) = 204327
>-SHA256 (rust/crates/rustversion-1.0.19.crate) = f7c45b9784283f1b2e7fb61b42047c2fd678ef0960d4f6f1eba131594cc369d4
>-SIZE (rust/crates/rustversion-1.0.19.crate) = 20616
> SHA256 (rust/crates/ryu-1.0.19.crate) = 6ea1a2d0a644769cc99faa24c3ad26b379b786fe7c36fd3c546254801650e6dd
> SIZE (rust/crates/ryu-1.0.19.crate) = 48770
> SHA256 (rust/crates/scratch-1.0.7.crate) = a3cf7c11c38cb994f3d40e8a8cde3bbd1f72a435e4c49e85d6553d8312306152
>@@ -161,8 +159,6 @@ SHA256 (rust/crates/unsafe-libyaml-0.2.11.crate) = 673aac59facbab8a9007c7f6108d1
> SIZE (rust/crates/unsafe-libyaml-0.2.11.crate) = 62101
> SHA256 (rust/crates/untrusted-0.9.0.crate) = 8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1
> SIZE (rust/crates/untrusted-0.9.0.crate) = 14447
>-SHA256 (rust/crates/uuid-1.12.1.crate) = b3758f5e68192bb96cc8f9b7e2c2cfdabb435499a28499a42f8f984092adad4b
>-SIZE (rust/crates/uuid-1.12.1.crate) = 48851
> SHA256 (rust/crates/want-0.3.1.crate) = bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e
> SIZE (rust/crates/want-0.3.1.crate) = 6398
> SHA256 (rust/crates/wasi-0.11.0+wasi-snapshot-preview1.crate) = 9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423
>--
>2.52.0
>
--
You are receiving this mail because:
You are the assignee for the bug.