[Bug 296312] dns/powerdns update to 5.1.2 CVE-2026-42005 PowerDNS Security Advisory 2026-07: Insufficient input validation of internal web server
Date: Mon, 29 Jun 2026 12:16:37 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296312
--- Comment #2 from commit-hook@FreeBSD.org ---
A commit in branch main references this bug:
URL:
https://cgit.FreeBSD.org/ports/commit/?id=287c9e637e7f0baa9a44f51e56308036925f13e3
commit 287c9e637e7f0baa9a44f51e56308036925f13e3
Author: Ralf van der Enden <tremere@cainites.net>
AuthorDate: 2026-06-07 20:34:01 +0000
Commit: Yusuf Yaman <nxjoseph@FreeBSD.org>
CommitDate: 2026-06-29 12:15:18 +0000
dns/powerdns: Security update 5.0.5 => 5.1.2
Port changes:
- Switch from Autotools to Meson.
- Add new GNUTLS option.
- Fix build with OPENLDAP option by adding dependency on security/krb5.
Upgrade Notes (from 5.0.0 to 5.1.0):
- https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
Changelogs:
- https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
- https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
Security Advisories:
-
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
-
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html
PR: 296312
Reported by: Jordan Ostreff <jordan@ostreff.info>
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
Security: CVE-2026-33257
Security: CVE-2026-33260
Security: CVE-2026-33608
Security: CVE-2026-33609
Security: CVE-2026-33610
Security: CVE-2026-33611
Security: CVE-2026-42005
dns/powerdns/Makefile | 96 +++++++++++++---------
dns/powerdns/distinfo | 6 +-
dns/powerdns/files/patch-fix_missing_symbols (new) | 68 +++++++++++++++
.../patch-m4_pdns__check__libcrypto.m4 (gone) | 15 ----
.../files/patch-m4_pdns__with__lua.m4 (gone) | 11 ---
5 files changed, 126 insertions(+), 70 deletions(-)
--
You are receiving this mail because:
You are the assignee for the bug.