CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

dns/p5-Net-DNS 1.57,1

Perl5 interface to the DNS resolver, and dynamic updates

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.57,1
Upstream
up to date
Last update
to 1.57,1 · 62f452e0c3
Quarterly
2026Q4: 1.57,1
Formerly
net/p5-Net-DNS until 2003-09-05
WWW
https://metacpan.org/release/Net-DNS
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install p5-Net-DNS
installs 1.57,1 from latest; from quarterly (2026Q4) 1.57,1
Port
# cd /usr/ports/dns/p5-Net-DNS && make install clean
# make -C /usr/ports/dns/p5-Net-DNS config  # change options first
Size
321 KiB download · 833 KiB installed
Depends on
lang/perl5.42 5.42.3, security/p5-Digest-HMAC 1.05
License
MIT
Options
2 of 5 on in the package: IPV6 TSIG
Show the 3 options that are off
IDN IDN2 SSHFP

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.57,11.57,1–
FreeBSD 151.57,11.57,1–
FreeBSD 141.57,11.57,11.57,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.57,11.57,1–
FreeBSD 141.57,11.57,11.57,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.57,1.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-819287.52026-09-01Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data sig…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (200)

Doug Barton (dougb) · 0.68
Convert to specifying the port name in _DEPENDS instead of ${SITE_PERL}/foo/bar/file.pm

http://wiki.freebsd.org/PortsLongtermTargets#Use_of_SITE_PERL_in_dependencies
249914eb08
Doug Barton (dougb) · 0.68
Restore support for ${PERL_LEVEL} < 501000

Feature safe:	yes
e346523d43
Doug Barton (dougb) · 0.68
Fix OPTIONS broken by the perl < 5.12 sweep [1]

While I'm here, reduce the number of docs variables.

PR:		ports/165930 [1]
Submitted by:	Alexey Markov <redrat@mail.ru> [1]

Feature safe:	yes
7c588a6b6d
Philip M. Gollucci (pgollucci) · 0.68
- Remove ports that only work with < perl 5.12 (devel/p5-B-Size, devel/p5-Devel-Arena) - Remove conditionals for PERL_LEVEL < 501200 - Remove regression-test targets b/c this will be centralized in Mk/bsd.perl.mk - Other minor cleanups   RUN_DEPENDS = ${BUILD_DEPENDS} -> RUN_DEPENDS:= ${BUILD_DEPENDS}

PR:             ports/165605
Submitted by:   pgollucci (myself)
Approved by:    portmgr (linimon)
Exp Run by:     linimon
Tested by:      make index
2cf4c1e2c8
Doug Barton (dougb) · 0.68
Update to version 0.68; Jan 30, 2012

Lots of fixes for older Perl versions, and several other bug fixes
The parse and data methods are renamed to decode and encode respectively
New feature: IDN query support, requires Net::LibIDN
New modules: Mailbox.pm, Text.pm

For the port:
* Add TEST_DEPENDS (probably won't work on its own due to CONFIGURE_ARGS)
* Add an OPTION for IDN support, off by default
* Use the PORTDOCS macro
* Move the OPTIONS= to the more standard location
b2f3cb124b
Doug Barton (dougb) · 0.67
**** 0.67 Nov 4, 2011

Fixes:
======

Suppress IO::Socket::INET(6)::peerhost usage with TCP. On some systems
it doesn't work after receiving data.

Prevent TCP accepts from blocking on unfinished 3-way handshakes.

Named nameserver should be reachable by IPv6 too.

Typo that prevented TCP traffic from being replied from the same
socket as it was received on.

Suppress warnings of the deprecated use of qw as parentheses in
perl 5.14.

Gracefully handle corrupted incoming packets in Net::DNS::Nameserver.

Make Net::DNS::Resolver load even if /etc/resolv.conf is unreadable.

Assembly of segmented TCP traffic.

Fix documentation to reflect code behaviour where on successful packet
creation, the error should be ignored.

A Net::DNS::Nameserver without a NotifyHandler now responds NOTIMP
to NOTIFY requests.

Documentation now reflects Net::DNS::Packet construction behaviour.

Replace TSIG key with the signature of the whole packet when signing
a packet, even when the TSIG key is not the first in the additional
section.

Various typo fixes.

Enhancements:
=============

Allow ReplyHandlers to indicate that no answer should be returned
by the Net::DNS::Nameserver.

Use a class method ReplyHandler for classes inheriting from
Net::DNS::Nameserver.

New improved version of the check_soa script in the contrib section.

Removed dependency on Net::IP

Perform presentation to wire format conversion more efficiently.

Manage serial numbers in SOA records in a modular and extensible way.
Three modules are provided. Strictly sequential, Date Encoded and
Time Encoded.  A contribution from Dick Franks.

Provide a configurable IdleTimeout for Net::DNS::Namserver.
de4dd2f62d
Doug Barton (dougb) · 0.66_1
Remove more tags from pkg-descr files fo the form:

- Name
em@i.l

or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
2b1dacc826
Doug Barton (dougb) · 0.66_1
Miscellaneous cleanups and fixes, some of the windowmaker stuff gracefully provided by danfe.
31ae302eb6
Martin Wilke (miwi) · 0.66_1
- Get Rid MD5 support
bb86cbe5d2
Martin Matuska (mm) · 0.66_1
Explicitly depend on p5-Digest-MD5 only if PERL_LEVEL < 500703 Explicitly depend on p5-Digest-SHA only if PERL_LEVEL < 501000
17e550ca2f
Tong LIU (nemoliu) · 0.66
- Rename net/p5-IO-INET6 to net/p5-IO-Socket-INET6.

PR:	ports/148309
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
738d612f2b
Doug Barton (dougb) · 0.66
Update to version 0.66, which is a major upgrade. Users are cautioned to thoroughly test this version before updating production systems.

For the port, introduce a new dependency, security/p5-Digest-SHA

Changes in this version, in addition to numerous minor bug fixes:

Feature: Truncation for Nameserver
    TAKE CARE:
    this feature may cause unexpected behavior for your nameservers

    Net::DNS::Packet::truncate is a new method that is called from
    within Net::DNS::Nameserver that truncates a packet according to
    the rules of RFC2181 section 9.

Feature: Added Net::DNS::Domain
    Net::DNS::Domain is an attemt to consistently approach the various
    ways we interface with what RFC 1035 calls <domain-name>.

Feature: KX RR
    Added support for the KX RR, RFC2230

Feature: HIP RR
    Added support for the HIP RR, RFC5205

Feature: DHCID RR
    Added rudimentary support for the DHCID RR.

Fix improved fuzzy matching of CLASS and TYPE in the Question
    constructor method.

Fix AAAA dynamic update
3bf3bb4653
Doug Barton (dougb) · 0.65
Where it matters, update regarding MAKE_JOBS_{UN}SAFE for my ports
d31cadffee
Doug Barton (dougb) · 0.65
Update to 0.65 which contains the following small fix:

When the AAAA object was constructed with new_from_hash with an
    address containing the "::" shorthand notation normalization was
    not done properly.
d39e7fabf9
Doug Barton (dougb) · 0.64
Update to version 0.64 which adds support for the APL record in addition to many bug fixes.
82e7db17e4
Doug Barton (dougb) · 0.63
Update to version 0.63, which has a couple of bug fixes, including:

Fix rt.cpan.org #30316  Security issue with Net::DNS Resolver.
  Net/DNS/RR/A.pm in Net::DNS 0.60 build 654 allows remote attackers
  to cause a denial of service (program "croak") via a crafted DNS
  response (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6341). Packet
  parsing routines are now enclosed in eval blocks to trap exception
  and avoid premature termination of user program.

Used ideas from:
PR:		ports/120702
Submitted by:	Felippe de Meirelles Motta <lippemail@gmail.com>
495d3d4601
Doug Barton (dougb) · 0.62
Remove the old bytes files for ancient Perl. These were behind a PLIST_SUB, so deleting them will not change the package. Therefore no PORTREVISION bump.

PR:		ports/119458
Submitted by:	Philippe Audeoud <jadawin@tuxaco.net>
2ff73e2a41
Doug Barton (dougb) · 0.62
1. Update to version 0.62. If you are doing uncommon things including directly frobbing packets or calling Net::DNS::RR->new_from_data() (which you should not be doing anyway) then you should read the changelog carefully and review/test your code before committing to this version.

2. Remove support for old Perl.
857fa6a287
Doug Barton (dougb) · 0.61
1. Upgrade to 0.61 which has a few small code cleanups. 2. --no-online-tests works now, so stop building them. 3. Remove support for prehistoric Perl.
abeae79dc5
Doug Barton (dougb) · 0.60
Update to 0.60, which includes some important security fixes:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3377
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3409

... as well as rudimentary support for IPSECKEY.
See /usr/local/share/doc/p5-Net-DNS/Changes for more details.

Prodded by:	Several, including ...
PR:		ports/114230
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp>
69f04a0bcb
Doug Barton (dougb) · 0.59
Update to 0.59, which mostly cleans up the PTR code.
44155cd19d
Doug Barton (dougb) · 0.58
1. Update to 0.58, which contains numerous small bug fixes, and new functionality for DLV/DNSSEC.

2. Add virtual category ipv6

3. Add OPTIONS for IPV6, enabled by default.

4. Fix the test for WITH_IPV6, and move it out of the test for
${PERL_LEVEL} < 500800. On my system, the IPv6 libraries are not
(any longer?) installed by default with Perl 5.8. The test is
harmless if the libraries are there in any case, so remove the
pointless micro-optiimiztion.
4ba23117b7
Doug Barton (dougb) · 0.57
Update to 0.57 (which contains no functional changes from 0.56), and reenable the cryptographic features on Perl 5.005.

PR:		ports/94770
Submitted by:	leeym (thanks!)
7d34f4a7ff
Doug Barton (dougb) · 0.56
Version 0.56, which contains a new method for the SPF RR, and various bug fixes.
497b01a297
Edwin Groothuis (edwin) · 0.55
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry

Approved by:    krion@
PR:             ports/88711 (related)
e33233f948
Doug Barton (dougb) · 0.55
Make the second RUN_DEPENDS +=

Pointy hat to:	me
Thanks to:	kris
b41c982f31
Doug Barton (dougb) · 0.55
Upgrade to 0.55, an emergency release to fix a problem with TCP sockets introduced in 0.54. Anyone who upgraded to 0.54 should upgrade to this version ASAP.
ec9bf19b91
Doug Barton (dougb) · 0.54
upgrade to 0.54, which contains many bug fixes

work around the fact that the crypto features of this library
require dependencies which are not available to Perl < 5.6.2.
055c8e918e
Doug Barton (dougb) · 0.53
Be more friendly to other ports that might leave files here
8258cee901
Doug Barton (dougb) · 0.53
Add SHA256 checksums to my ports
622fd39b2a
Doug Barton (dougb) · 0.53
Change to the standardized version of the CPAN URL

Submitted by:	fenner
11885ac901
Doug Barton (dougb) · 0.53
Update to 0.53, which fixes a stray AFINET_6, and a few other bugs.
f6854e0457
Doug Barton (dougb) · 0.52
Upgrade to the eagerly anticipated 0.52. If you are using a version of this module later than 0.49, you should definitely upgrade, as this version fixes several bugs in the new code.

If running Perl < 5.6, make addition of the IPv6 modules optional
as 0.52 of this module fixes the bugs that made it mandatory.
48c2b9e908
Doug Barton (dougb) · 0.51
Make this work on Perl 5.005.03 (ala RELENG_4) by installing the bytes.pm pragma, which is the only thing that the new version of Net::DNS needs from 5.6+ that isn't in 5.005.03.
4984b43ef1
Doug Barton (dougb) · 0.51
Upgrade to 0.51, which fixes extra debugging that should not have gone into the live version.

Also, 0.50 grew a dependency on Net-IP which was not recorded in the
Changes file, so add that explicitly. This was mentioned by several
people, including the current Net-DNS author, and the PR.

PR:		ports/82194
Submitted by:	Helge Oldach <p5netdnsjun05@oldach.net>
7bcac54531
Doug Barton (dougb) · 0.50
Upgrade to 0.50, the latest version. Usual assortment of bug fixes, plus experimental IPv6 support (not yet enabled).
5223f50a4f
Doug Barton (dougb) · 0.49
Update to the latest version, mostly bug fixes.
ce79355859
Doug Barton (dougb) · 0.48
Update to 0.48, a minor bugfix release.
3cc6907734
Doug Barton (dougb) · 0.47
Update to 0.47. The few small bug fixes can be found in the CHANGES file.

PR:		ports/66945
Submitted by:	Mark Foster <mark@foster.cc>
f329896e86
Bill Fumerola (billf) · 0.46
this perl module creates/parses 'dynamic' updates, not 'dymanic' ones.
ef78fdf6ad
Doug Barton (dougb) · 0.46
Update to 0.46, which has better IPv6 reverse DNS handling, and all known 'taint mode' problems fixed.

PR:		ports/63841
Submitted by:	Tim Bishop <tim@bishnet.net>
5ac398ba00
Doug Barton (dougb) · 0.45
Upgrade to 0.45. This version has major speed enhancements, better handling of classes, and other cleanups.
af7eeffdf1
Doug Barton (dougb) · 0.44
Fix duplicate %%PERL_ARCH%%'ification in one of the conditional rmdir lines. The error was masked by the conditionality, but mostly harmless due to the fact that the directory is incredibly likely to be populated anyway.

Submitted by:	tobez
d6426ee1f5
Doug Barton (dougb) · 0.44
Update to version 0.44, the latest available. Version 0.43 had the actual substantive changes, 0.44 has some non-user-visible changes to make CPAN.pm happy.

Power users of this module are encouraged to read the CHANGES file.
Most users shouldn't have problems with this upgrade.

Significant changes to the software:
1. Ongoing refinement of proper class inheritance/categorization.
2. Fix zone transfers with 'many-answer' format.
3. Finally "fixed" the .xs code, and accompanying Makefile.pl options
to work out of the box on both RELENG_4 and 5-current.
4. Added a Makefile.pl option to avoid the online tests.
5. Support for unknown RR types.

Changes to the port:
1. Take advantage of 3 and 4 above.
2. portlint doesn't like the word 'file' to appear in the Makefile, so
change it to 'doc' for the PORTDOCS install loop.
0d13b1177c
Doug Barton (dougb) · 0.42
* Update for version 0.44 * Use %%PERL_ARCH%% to accomodate new .xs code * Slightly improve the sorting, since it's majorly overhauled already
3fc7bee189
Doug Barton (dougb) · 0.42
This patch is no longer needed as of 0.44
19a8d7c89b
Doug Barton (dougb) · 0.42
Update to version 0.42. Fixes a bug in Net::DNS::Resolver::Recurse, and adds capability for a persistent UDP socket.
18ed008853
Ying-Chieh Liao (ijliao) · 0.41
utilize SITE_PERL

PR:		58166
Submitted by:	Cheng-Lung Sung <clsung@dragon2.net>
c634b4bb83
Doug Barton (dougb) · 0.41
Update to version 0.41, which contains several documentation and other cleanups. Also, the removal of the Net::DNS::Resolver::axfr_old() method.
7dd081a017
Edwin Groothuis (edwin) · as net/p5-Net-DNS
Massive repo-copies request: net->dns (partly devel->dns)

The category "dns" has been added, now is the time to move
	the dns-related ports to the new world. Is there anyone who
	is brave enough to complete this difficult job? ;)

PR:		ports/56020
Submitted by:	Kimura Fuyuki <fuyuki@nigredo.org>
Approved by:	portmgr
e1906e85ed