CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

dns/dnscrypt-wrapper 0.4.2_5

Adds dnscrypt support to any name resolver

Port info

Maintainer
freebsd@toyingwithfate.com
Packages
latest: 0.4.2_5
Upstream
up to date
Last update
to 0.4.2_5 · 42b95df84d
Quarterly
2026Q4: 0.4.2_5
WWW
https://github.com/cofyc/dnscrypt-wrapper
Links
cgit · VuXML

Install

Package
# pkg install dnscrypt-wrapper
installs 0.4.2_5 from latest; from quarterly (2026Q4) 0.4.2_5
Port
# cd /usr/ports/dns/dnscrypt-wrapper && make install clean
Size
31 KiB download · 69 KiB installed
Depends on
devel/libevent 2.1.13, security/libsodium 1.0.22
License
ISCL
Creates
user _dnscrypt-wrapper

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.4.2_50.4.2_5–
FreeBSD 150.4.2_50.4.2_5–
FreeBSD 140.4.2_50.4.2_50.4.2_5

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.4.2_50.4.2_5–
FreeBSD 140.4.2_50.4.2_50.4.2_5

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.4.2_5.

Fixed (0)

No VuXML entries for this package.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
279627dns/dnscrypt-wrapper: make the rc script service jails awareNew2026-05-25

Commits (28)

Daniel Engberg (diizzy) · 0.4.2_5
*/*: Bump PORTREVISION for libsodium consumers after version bump

Bump consumers of libsodium
42b95df84d
Vsevolod Stakhov (vsevolod) · 0.4.2_4
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Vsevolod Stakhov (vsevolod) · 0.4.2_3
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Stefan Eßer (se) · 0.4.2_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.4.2_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Mathieu Arnold (mat) · 0.4.2_2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.4.2_2
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 0.4.2_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Luca Pizzamiglio (pizzamig) · 0.4.2_2
dns/dnscrypt-wrapper: enable xchacha20 detection

Detect and enable xchacha20 via autoconf.

PR:		249506
Submitted by:	Felix Hanley <felix@userspace.com.au>
Approved by:	Will <freebsd@toyingwithfate.com> (maintainer)
04acdd7f40
Jan Beich (jbeich) · 0.4.2_1
devel/libevent2: update to 2.1.11

Changes:	https://github.com/libevent/libevent/releases/tag/release-2.1.11-stable
ABI:		https://abi-laboratory.pro/tracker/timeline/libevent/
PR:		239599
Reported by:	GitHub (watch releases)
Approved by:	zeising (maintainer)
MFH:		2019Q3 (maybe security, partially restores 2.1.8 ABI)
Differential Revision:	https://reviews.freebsd.org/D21133
f18538b989
Steve Wills (swills) · 0.4.2
dns/dnscrypt-wrapper: Update to 0.4.2

PR:		233915
Submitted by:	Will <freebsd@toyingwithfate.com> (maintainer)
d2811eb982
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.4.1
Update to 0.4.1

Changes:	https://github.com/cofyc/dnscrypt-wrapper/releases
		https://github.com/cofyc/dnscrypt-wrapper/blob/master/CHANGELOG.md
PR:		225967
Submitted by:	<freebsd@seby.io>
Approved by:	Will <freebsd@toyingwithfate.com> (maintainer)
f9faa4873d
Vsevolod Stakhov (vsevolod) · 0.3_1
- Update libsodium to 1.0.15 [1] - Bump revisions for all dependent ports

PR:		223147 [1]
Submitted by:	Greg V [1]
f191a0244b
Danilo G. Baio (dbaio) · 0.3
dns/dnscrypt-wrapper: Update to 0.3

Changes: https://github.com/cofyc/dnscrypt-wrapper/releases/tag/v0.3

PR:		220213
Submitted by:	freebsd@toyingwithfate.com (maintainer)
Approved by:	garga (mentor)
Differential Revision:	https://reviews.freebsd.org/D11342
1b9d97d846
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.2_1
Fix WWW

Approved by:	portmgr (blanket)
c6faa96cf4
Jan Beich (jbeich) · 0.2.2_1
devel/libevent2: drop historical suffix after r362796

PR:		216777
Approved by:	mm (maintainer)
a9425224f1
Kirill Ponomarev (krion) · 0.2.2
Update dns/dnscrypt-wrapper to 0.2.2

PR:		216899
Submitted by:	freebsd@toyingwithfate.com
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D9482
7a5fb5edb7
Jan Beich (jbeich) · 0.2.1_4
devel/libevent2: update to 2.1.8 and cleanup

- DEFAULT_VERSIONS += ssl=openssl-devel is now supported
- devel/py-event and devel/p5-Event-Lib are marked BROKEN

Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/whatsnew-2.1.txt
Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/ChangeLog
PR:		216527
Exp-run by:	antoine
Approved by:	mm (maintainer)
21a7215c9a
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.2.1_3
Remove BROKEN_FreeBSD_9

Approved by:	portmgr (blanket)
e0b379fa6f
Tijl Coosemans (tijl) · 0.2.1_3
Let USES=localbase add -L${LOCALBASE}/lib to LIBS instead of LDFLAGS. USES=localbase:ldflags can be used to set LDFLAGS.  Normally LDFLAGS appears too early on the command line causing some ports to link with their own libraries in LOCALBASE (if installed) instead of WRKSRC.

Also make use of _USES_POST so -L${LOCALBASE}/lib is added as late as
possible after anything a port Makefile might set.  Use _USES_POST
instead of .include in libedit.mk and libarchive.mk so things like
'USES=libedit localbase:ldflags' work correctly.

Fix some issues with LIBS in some ports.

Switch ports that don't support LIBS to localbase:ldflags.

PR:		212987
Exp-run by:	antoine
Approved by:	portmgr (antoine)
1ee4da6dd1
Dmitry Marakasov (amdmi3) · 0.2.1_3
- Update to 0.2.1 - Properly respect ${CC} - Cosmetic fixes - Mark broken on 9.x due to too long username

PR:		210885
Submitted by:	freebsd@toyingwithfate.com (maintainer)
1eaad99d72
John Marino (marino) · 0.2_3
security/libsodium: Upgrade version 1.0.8 => 1.0.10

Also bump all ports that depend on libsodium.

PR:		210999
Submitted by:	manu
Approved by:	vsevolod (maintainer)
2e94d74398
Dmitry Marakasov (amdmi3) · 0.2_2
- Fix trailing whitespace in pkg-descrs, categories [a-f]*

Approved by:	portmgr blanket
1d1f878054
Mathieu Arnold (mat) · 0.2_2
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Vsevolod Stakhov (vsevolod) · 0.2_2
- Update libsodium to 1.0.8 - Bump revisions of all dependant ports

PR:		206482
Submitted by:	lev, w.schwarzenfeld@aon.at
7349ed49cd
Mathieu Arnold (mat) · 0.2_1
Don't use GH_TAGNAME when DISTVERSION* variables can be used.

With hat:	portmgr
Sponsored by:	Absolight
faaac0db42
Baptiste Daroussin (bapt) · 0.2_1
Bump portrevision of ports that might have been built with a broken post-install script due to fallouts of r399992
7c1b4544c3
Jason Unovitch (junovitch) · 0.2
New Port: dns/dnscrypt-wrapper

This is a port of dnscrypt-wrapper, which adds dnscrypt support to any name
resolver. It is the server-side counterpart of dnscrypt-proxy, and is in
fact derived from its source.

PR:		200015
Submitted by:	freebsd@toyingwithfate.com
Approved by:	feld (mentor)
Differential Revision:	https://reviews.freebsd.org/D3535
c017caeb38