CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

dns/nsd4.15.3

Authoritative only non-recursive name server

0
unaddressed
0
VuXML only, still affected
13
fixed
Maintainer
jaap@NLnetLabs.nl
Packages
nsd 4.15.3
Upstream
Higher version available: 4.15.4
CPE
nlnetlabs:nsd from the port
WWW
https://www.nlnetlabs.nl/projects/nsd/about/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (13)

Show 13 fixed
VuXML entries whose affected range this version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVE-2026-195388.22026-08-26The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TLS and sen…
CVE-2026-186648.22026-08-26When ranges are used for access control (i.e. of the form 1.2.3.4-1.2.3.25), because NSD wrongly compares the IP address with the range on little endian systems, IPs tha…
CVE-2026-194018.22026-08-26Any remote client can crash a (debugging/non-release build type) NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie opti…
CVE-2026-189166.92026-08-26Any remote client can crash a NSD serve child, by throttling the TCP receive window after a TCP query. By continuously crashing the serve childs, the remote client can d…

Commits (168)

Jeremy Messenger (mezz) · 2.1.2
-Update to 2.1.2.

NSD 2.1.2 release notes:

FEATURES:
	- NSD now fully supports unknown record types using the notation
	  specified in RFC3597.
	- Support for the following RR types has been added: WKS, X25, ISDN,
	  RT, NSAP, PX, NAPTR, KX, CERT, DNAME, and APL.  DNAME special
	  processing is not supported.

BUG FIXES:
	- Bug #84: NSD now uses SIGUSR1 instead of SIGILL to report stats.
        - Bug #85: Support for WKS records.
        - Bug #86: The characters "#%&^[]?" can now be used without backslash
	  in zone file domain names.
        - Plugin callback return type fixed.
        - The maximum message length for IPv6 UDP packets is now limited to
	  the IPv6 minimum MTU (1280) unless the IPV6_USE_MIN_MTU socket
	  option is supported.

PR:		ports/69914
Submitted by:	Olafur Osvaldsson <oli@isnic.is> (maintainer)
b0423c94d4
Volker Stolz (vs) · 2.1.1_1
- Fix signal-handling - Bump PORTREVISION

PR:		ports/69385
Submitted by:	Olafur Osvaldsson (maintainer)
4512611284
Pav Lucistnik (pav) · 2.1.1
- Update to 2.1.1

PR:		ports/68603
Submitted by:	Olafur Osvaldsson <oli@isnic.is> (maintainer)
7ca9095736
Pav Lucistnik (pav) · 2.1.0_1
- Rename knobs: ENABLE_* -> WITH_*, DISABLE_* -> WITHOUT_*

Submitted by:	Olafur Osvaldsson <oli@isnic.is> (maintainer)
Requested by:	kris
0a5854fd6d
Pav Lucistnik (pav) · 2.1.0_1
- Add rc script - Add a lot of knobs - Add second master site

PR:		ports/67297
Submitted by:	Olafur Osvaldsson <oli@isnic.is> (maintainer)
70807260be
Volker Stolz (vs) · 2.1.0
Volunteer Olafur Osvaldsson as maintainer since he submitted updates recently.
26876c0570
Volker Stolz (vs) · 2.1.0
Update to 2.1.0: New networking code allows a single server to handle both  UDP and TCP connections. (Remove cruft from pkg-descr while here)

PR:		ports/66651
Submitted by:	Olafur Osvaldsson
205ab130e6
Pav Lucistnik (pav) · 2.0.2
- Update to 2.0.2

PR:		ports/66519
Submitted by:	Olafur Osvaldsson <oli@isnic.is>
366b862c4c
Trevor Johnson (trevor) · 1.2.4
SIZEify.
0c881ba59c
Pav Lucistnik (pav) · 1.2.4
- Fix typo in comment
a06067f5b5
Pav Lucistnik (pav) · 1.2.4
- Update to 1.2.4

PR:		ports/61279
Submitted by:	Vincent Tantardini <vinc@FreeBSD-fr.org>
6b3e576ed3
Pav Lucistnik (pav) · 1.2.3
- Update to 1.2.3

PR:		ports/60784
Submitted by:	Vincent Tantardini <vinc@0x45.org>
2593bec07c
Edwin Groothuis (edwin) · 1.2.2
Massive repo-copies request: net->dns (partly devel->dns)

PR:		ports/56020
Submitted by:	Kimura Fuyuki <fuyuki@nigredo.org>
Approved by:	portmgr
fa1ac61168
Christian Weisgerber (naddy) · 1.2.2
* Update to 1.2.2

PR:		54474
Submitted by:	Nick Hilliard <nick@foobar.org>

* Reset MAINTAINER address that does not point to the FreeBSD port
  maintainer.
e94fb038bc
Norikatsu Shigemura (nork) · 1.0.2_1
Fix bugs.

PR:		ports/48421
Submitted by:	Olafur Osvaldsson <oli@isnic.is>
Approved by:	maintainer timeout (2 months)
b1706ea031
Akinori MUSHA (knu) · 1.0.2
De-pkg-comment.
4c2e4f1862
Edwin Groothuis (edwin) · 1.0.2
net/nsd Version update to verison 1.0.2 with fix

PR:		ports/47113
Submitted by:	Olafur Osvaldsson <oli@isnic.is>
Reviewed by:	Alexis Yushin <alexis@NLnetLabs.nl>
894968f308
Oliver Braun (obraun) · 1.0.1
Add nsd 1.0.1, an authoratative only non-recursive high performance name server.

PR:		ports/42368
Submitted by:	Alexis Yushin <alexis@forest.NLnetLabs.nl>
dad75dcff4
« newest← newerpage 4 of 4