[Bug 296312] dns/powerdns update to 5.1.2 CVE-2026-42005 PowerDNS Security Advisory 2026-07: Insufficient input validation of internal web server

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 29 Jun 2026 12:16:37 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296312

--- Comment #2 from commit-hook@FreeBSD.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=287c9e637e7f0baa9a44f51e56308036925f13e3

commit 287c9e637e7f0baa9a44f51e56308036925f13e3
Author:     Ralf van der Enden <tremere@cainites.net>
AuthorDate: 2026-06-07 20:34:01 +0000
Commit:     Yusuf Yaman <nxjoseph@FreeBSD.org>
CommitDate: 2026-06-29 12:15:18 +0000

    dns/powerdns: Security update 5.0.5 => 5.1.2

    Port changes:
    - Switch from Autotools to Meson.
    - Add new GNUTLS option.
    - Fix build with OPENLDAP option by adding dependency on security/krb5.

    Upgrade Notes (from 5.0.0 to 5.1.0):
    - https://doc.powerdns.com/authoritative/upgrading.html#to-5-1-0
    Changelogs:
    - https://doc.powerdns.com/authoritative/changelog/5.0.html#change-5.0.6
    - https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.2
    Security Advisories:
    -
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
    -
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-07.html

    PR:             296312
    Reported by:    Jordan Ostreff <jordan@ostreff.info>
    Approved by:    osa, vvd (Mentors, implicit)
    MFH:            2026Q2
    Security:       CVE-2026-33257
    Security:       CVE-2026-33260
    Security:       CVE-2026-33608
    Security:       CVE-2026-33609
    Security:       CVE-2026-33610
    Security:       CVE-2026-33611
    Security:       CVE-2026-42005

 dns/powerdns/Makefile                              | 96 +++++++++++++---------
 dns/powerdns/distinfo                              |  6 +-
 dns/powerdns/files/patch-fix_missing_symbols (new) | 68 +++++++++++++++
 .../patch-m4_pdns__check__libcrypto.m4 (gone)      | 15 ----
 .../files/patch-m4_pdns__with__lua.m4 (gone)       | 11 ---
 5 files changed, 126 insertions(+), 70 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.