CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

dns/dnsdist2.1.2_2

Highly DNS-, DoS- and abuse-aware loadbalancer

Maintainer
tremere@cainites.net
Packages
dnsdist 2.1.2_2
Upstream
Higher version available: 2.1.3
CPE
powerdns:dnsdist from the port
WWW
https://dnsdist.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range this version has left.

Commits (146)

Baptiste Daroussin (bapt) · 2.1.2_2
databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.

Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
  liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc

A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.

Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.

Approved by:	mat (portmgr)
Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D60741
85ba298b7e
Mikael Urankar (mikael) · 2.1.2_1
lang/rust: Bump revisions after 1.99.0

PR:		299016
9c878207a1
Yusuf Yaman (nxjoseph) · 2.1.2
dns/dnsdist: Update 2.1.1 => 2.1.2

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.2

PR:		298309
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q3
ad7aa83df1
Mikael Urankar (mikael) · 2.1.1_1
lang/rust: Bump revisions after 1.98.1

PR:		298139
7316461925
Yusuf Yaman (nxjoseph) · 2.1.1
dns/dnsdist: Update 2.1.0 => 2.1.1

Changelog:
https://www.dnsdist.org/changelog.html#change-2.1.1

PR:		297320
Reported by:	Jordan Ostreff <jordan@ostreff.info> (author)
Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
Approved by:	osa, vvd (Mentors, implicit)
Security:	CVE-2026-52682
MFH:		2026Q3
90e1f4484a
Mikael Urankar (mikael) · 2.1.0_1
lang/rust: Bump revisions after 1.97.1

PR:		296645
9c892d2601
Hiroki Tagato (tagattie) · 2.1.0
dns/dnsdist: Update to 2.1.0

Changelog: https://www.dnsdist.org/changelog.html#change-2.1.0

PR:		296456
Reported by:	Jordan Ostreff <jordan@ostreff.info> (initial patch),
		Ralf van der Enden <tremere@cainites.net> (maintainer, committed patch)
d4dec80c2c
Xin LI (delphij) · 2.0.7_1
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530
5f9d389f29
Yusuf Yaman (nxjoseph) · 2.0.7
dns/dnsdist: Security update 2.0.6 => 2.0.7

While here, pet portfmt.

Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.7
Security Advisory:
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

PR:		296314
Reported by:	Jordan Ostreff <jordan@ostreff.info>
Approved by:	osa, vvd (Mentors, implicit)
MFH:		2026Q2
Security:	CVE-2026-40011
Security:	CVE-2026-42004
Security:	CVE-2026-42005
Security:	CVE-2026-40208
Security:	CVE-2026-40209
Security:	CVE-2026-40210
Security:	CVE-2026-40211
248c4f9e8f
Mikael Urankar (mikael) · 2.0.6_1
lang/rust: Bump revisions after 1.96.0

PR:		295694
e29b5eeec3
Jason Helfman (jgh) · 2.0.6
dns/dnsdist: update to v2.0.6

PR:	295515
Reported by:	Jordan Ostreff <jordan@ostreff.info>
Approved by:	tremere@cainites.net (maintainer)
9df447a2af
Daniel Engberg (diizzy) · 2.0.5_2
*/*: Bump PORTREVISION for libsodium consumers after version bump

Bump consumers of libsodium
42b95df84d
Rene Ladan (rene) · 2.0.5_1
all: drop support for FreeBSD 13, mips and risc64sf

Reviewed by:            many (*)
Differential Revision:  https://reviews.freebsd.org/D55624
Differential Revision:  https://reviews.freebsd.org/D55642 (merged in from bofh)

many (*)
  acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga
  jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka
  nobutaka pkubaj se tagattie thj

  Anton Saietskii
  GenericRikka
  Gert Doering
  Jan Bramkamp
  Oleh Hushchenkov
  Oleksandr Kryvulia
  Ralf van der Enden
  Yamagi

  desktop kde python tcltk office
2a7c056120
Mikael Urankar (mikael) · 2.0.5_1
lang/rust: Bump revisions after 1.95.0

PR:		294615
17bf498fd2
Robert Clausecker (fuz) · 2.0.5
dns/dnsdist: update to 2.0.5 (fixes multiple CVE's)

Changelog: https://www.dnsdist.org/changelog.html#change-2.0.5

PR:		294747
Event:		Wiesbaden Hackathon 202604
MFH:		2026Q2
2bb55586e4
Yusuf Yaman (nxjoseph) · 2.0.3
dns/dnsdist: Update 2.0.2 => 2.0.3 (security)

While here:
* Drop backported patch since they're in new release
* Reduce portlint warnings by using increment for DISTFILES
* Use <bsd.port.options.mk> instead of <bsd.port.{pre,post}.mk>

Release notes:
https://blog.powerdns.com/2026/03/31/powerdns-dnsdist-1.9.12-and-2.0.3-released
Changelog:
https://www.dnsdist.org/changelog.html#change-2.0.3

PR:		294225
Reported by:	Jordan Ostreff <jordan@ostreff.info>
Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
Approved by:	osa (mentor)
Security:	CVE-2026-0396
Security:	CVE-2026-0397
Security:	CVE-2026-24028
Security:	CVE-2026-24029
Security:	CVE-2026-24030
Security:	CVE-2026-27853
Security:	CVE-2026-27854
MFH:		2026Q2
0ad58b7e66
Mikael Urankar (mikael) · 2.0.2_2
lang/rust: Bump revisions after 1.94.0

PR:		293615
43f5b4a72f
Mikael Urankar (mikael) · 2.0.2_1
lang/rust: Bump revisions after 1.93.0

PR:		292360
3d631100e8
Hiroki Tagato (tagattie) · 2.0.2
dns/dnsdist: Update to 2.0.2

Release Announcement: https://blog.powerdns.com/2025/12/02/powerdns-dnsdist-2.0.2-released
Changelog: https://www.dnsdist.org/changelog.html#change-2.0.2

PR:		291365
Reported by:	Jordan Ostreff <jordan@ostreff.info>,
		Ralf van der Enden <tremere@cainites.net> (maintainer)
243d98e4f4
Vsevolod Stakhov (vsevolod) · 2.0.1_5
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Mikael Urankar (mikael) · 2.0.1_4
lang/rust: Bump revisions after 1.92.0

PR:		291582
5e496c7707
Mikael Urankar (mikael) · 2.0.1_3
lang/rust: Bump revisions after 1.91.1

PR:		290816
d6b6027df6
Robert Clausecker (fuz) · 2.0.1_2
dns/dnsdist: fix build on armv7

Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
PR:		290267
MFH:		2025Q4
8731382606
Robert Clausecker (fuz) · 2.0.1_2
dns/dnsdist: add upstream patch to fix QUIC connections

PR:		290267
Approved by:	Submitter is maintainer
MFH:		2025Q4
3db9b8cec3
Mikael Urankar (mikael) · 2.0.1_1
lang/rust: Bump revisions after 1.90.0

PR:		289709
97b5de4ffc
Florian Smeets (flo) · 2.0.1
dns/dnsdist: update to 2.0.1 (fixes CVE-2025-8671)

PR:		289811
Security:	c2253bff-9952-11f0-b6e2-6805ca2fa271
MFH:		2025Q3
72a8ce9283
Mikael Urankar (mikael) · 2.0.0_1
lang/rust: Bump revisions after 1.89.0

PR:		288923
b21956d7db
Juraj Lutter (otis) · 2.0.0
dns/dnsdist: Update to 2.0.0

Changelog:	https://www.dnsdist.org/changelog.html#change-2.0.0

PR:	288382
f930b6445a
Sergey A. Osokin (osa) · 1.9.10_1
lang/luajit: update to v2.1

Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.

Discussed with:	adamw
PR:		225342
0af0578acb
Vladimir Druzenko (vvd) · 1.9.10
dns/dnsdist: Update 1.9.9 => 1.9.10 (fix CVE-2025-30193)

Release notes:
https://blog.powerdns.com/2025/05/20/powerdns-dnsdist-1.9.10-released

Changelog:
https://www.dnsdist.org/changelog.html#change-1.9.10

PR:		286968
Security:	CVE-2025-30193
MFH:		2025Q2
b68a685375
Zsolt Udvari (uzsolt) · 1.9.9_1
dns/dnsdist: Bump portrevision

Because of net/quiche's update
(commit 05f632b7d2f04107f4e75f84ad89ea83b98ad26f).
a74abae102
Vladimir Druzenko (vvd) · 1.9.9
dns/dnsdist: Update 1.9.8 => 1.9.9 (fixes CVE-2025-30194)

Release notes:
https://blog.powerdns.com/2025/04/29/powerdns-dnsdist-1.9.9-released

Changelog:
https://www.dnsdist.org/changelog.html#change-1.9.9

PR:		286282
Security:	CVE-2025-30194
MFH:		2025Q2
75db4df283
Joel Bodenmann (jbo) · 1.9.8
dns/dnsdist: Update to 1.9.8

Changelog: https://bz-attachments.freebsd.org/attachment.cgi?id=255931

PR:	283396
457436dab3
Vladimir Druzenko (vvd) · 1.9.7
dns/dnsdist: Update 1.9.6 → 1.9.7

Changelog:
https://dnsdist.org/changelog.html#change-1.9.7

Move boost to BUILD_DEPENDS: not linked to any boost shared library, but
depends on boost includes.

PR:	281913
34a5a96e90
Dima Panov (fluffy) · 1.9.6_1
*/*: bump consumers after devel/boost* update

With hat:	office
Sponsored by:	Future Crew, LLC
55cfbcf56c
Zsolt Udvari (uzsolt) · 1.9.6
dns/dnsdist: update to 1.9.6

PR:		280360
Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
91edac3c56
Joel Bodenmann (jbo) · 1.9.5
dns/dnsdist: Update to 1.9.5

Changelog: https://blog.powerdns.com/2024/06/20/powerdns-dnsdist-1.9.5-released

PR:		279941
Approved by:	tcberner (mentor, implicit)
2bbcb45283
Vsevolod Stakhov (vsevolod) · 1.9.4_1
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Neel Chauhan (nc) · 1.9.4
dns/dnsdist: update to 1.9.4 (fixes CVE-2024-25581)

PR: 278954
Approved by: submitter is maintainer
9422b76b11
Vladimir Druzenko (vvd) · 1.9.3
dns/dnsdist: update to 1.9.3

Changelog:
https://dnsdist.org/changelog.html#change-1.9.3

PR:		278186
Approved by:	arrowd (mentor, implicit)
46afb701a0
Gabriel M. Dutra (dutra) · 1.9.0
dns/dnsdist: Update to 1.9.0

ChangeLog:
https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released

PR:		277176
Approved by:	garga (mentor)
Differential Revision: https://reviews.freebsd.org/D44085
74acf3311b
Gleb Popov (arrowd) · 1.8.3_1
*: Move man pages to share/man

Approved by:	portmgr (blanket)
bafc6672e6
Koichiro Iwao (meta) · 1.8.3
dns/dnsdist: update to 1.8.3

PR:		275894
Changes:	https://dnsdist.org/changelog.html#change-1.8.3
b87ea73042
Dave Cottlehuber (dch) · 1.8.2
dns/dnsdist: update to 1.8.2

https://dnsdist.org/changelog.html#change-1.8.2

This release fixes the HTTP2 rapid reset attack, and requires
the updated libh2o fix.

Security:	CVE-2023-44487
7710d75e67
Robert Clausecker (fuz) · 1.8.1
dns/dnsdist: update to 1.8.1

Changelog: https://blog.powerdns.com/powerdns-dnsdist-1.8.1-released

PR:		273708
595b030e0b
Po-Chuan Hsieh (sunpoet) · 1.8.0_2
devel/re2: Update to 20230801

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/google/re2/releases
0c509fb2dc
Po-Chuan Hsieh (sunpoet) · 1.8.0_1
devel/re2: Update to 20230301

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/google/re2/releases
94713bad76
Fernando Apesteguía (fernape) · 1.8.0
dns/dnsdist: update to 1.8.0

ChangeLog: https://blog.powerdns.com/2023/03/30/powerdns-dnsdist-1-8-0-released/

PR:		270612
Reported by:	tremere@cainites.net (maintainer)
1ad04ed2ae
Florian Smeets (flo) · 1.7.3
dns/dnsdist: Update to 1.7.3

PR:		267569
Relnotes:	https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/
803b163b55
Dave Cottlehuber (dch) · 1.7.2_2
dns/dnsdist: re-enable scrypt hashing

PR:		266722
42875692d7