[Bug 296313] dns/powerdns-recursor: Update to 5.4.3 (fixes multiple CVE)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296313

            Bug ID: 296313
           Summary: dns/powerdns-recursor: Update to 5.4.3 (fixes multiple
                    CVE)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: jordan@ostreff.info
                CC: tremere@cainites.net
             Flags: maintainer-feedback?(tremere@cainites.net)
                CC: tremere@cainites.net

Created attachment 272173
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=272173&action=edit
dns/powerdns-recursor upgrade to 5.4.3

These releases provide fixes for PowerDNS Security Advisory

2026-08 for PowerDNS Recursor: Multiple issues
There are several CVEs associated with this advisory, the first with severity
High (but only applicable to specific configurations), the rest of severity
Medium.

CVE-2026-33612: ZoneToCache can poison the cache
CVE-2026-40012: Information about ECS zero scoped answers might leak to clients
that use a specific ECS
CVE-2026-42005: Unbounded resource consumption in internal webserver
CVE-2026-42390: ZONEMD validation can be bypassed
CVE-2026-42389: Reject more queries with invalid header values
CVE-2026-42388: Missing input validation for catalog zones
CVE-2026-42387: Insufficient input validation in ZoneToCache
CVE-2026-52690: Spoofed answers can mark an authoritative non-EDNS capable

-- 
You are receiving this mail because:
You are the assignee for the bug.