Convert to specifying the port name in _DEPENDS instead of ${SITE_PERL}/foo/bar/file.pm
http://wiki.freebsd.org/PortsLongtermTargets#Use_of_SITE_PERL_in_dependencies249914eb08p5-Net-DNS -- multiple Vulnerabilitiesentered 2007-07-28
Perl5 interface to the DNS resolver, and dynamic updates
# pkg install p5-Net-DNSinstalls 1.57,1 from latest; from quarterly (2026Q4) 1.57,1# cd /usr/ports/dns/p5-Net-DNS && make install clean# make -C /usr/ports/dns/p5-Net-DNS config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.57,1 | 1.57,1 | – |
| FreeBSD 15 | 1.57,1 | 1.57,1 | – |
| FreeBSD 14 | 1.57,1 | 1.57,1 | 1.57,1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.57,1 | 1.57,1 | – |
| FreeBSD 14 | 1.57,1 | 1.57,1 | 1.57,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 1.57,1.| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-81928 | 7.5 | 2026-09-01 | Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data sig… |
Convert to specifying the port name in _DEPENDS instead of ${SITE_PERL}/foo/bar/file.pm
http://wiki.freebsd.org/PortsLongtermTargets#Use_of_SITE_PERL_in_dependencies249914eb08Restore support for ${PERL_LEVEL} < 501000
Feature safe: yese346523d43Fix OPTIONS broken by the perl < 5.12 sweep [1] While I'm here, reduce the number of docs variables. PR: ports/165930 [1] Submitted by: Alexey Markov <redrat@mail.ru> [1] Feature safe: yes7c588a6b6d
- Remove ports that only work with < perl 5.12 (devel/p5-B-Size, devel/p5-Devel-Arena) - Remove conditionals for PERL_LEVEL < 501200 - Remove regression-test targets b/c this will be centralized in Mk/bsd.perl.mk - Other minor cleanups RUN_DEPENDS = ${BUILD_DEPENDS} -> RUN_DEPENDS:= ${BUILD_DEPENDS}
PR: ports/165605
Submitted by: pgollucci (myself)
Approved by: portmgr (linimon)
Exp Run by: linimon
Tested by: make index2cf4c1e2c8Update to version 0.68; Jan 30, 2012 Lots of fixes for older Perl versions, and several other bug fixes The parse and data methods are renamed to decode and encode respectively New feature: IDN query support, requires Net::LibIDN New modules: Mailbox.pm, Text.pm For the port: * Add TEST_DEPENDS (probably won't work on its own due to CONFIGURE_ARGS) * Add an OPTION for IDN support, off by default * Use the PORTDOCS macro * Move the OPTIONS= to the more standard locationb2f3cb124b
**** 0.67 Nov 4, 2011 Fixes: ====== Suppress IO::Socket::INET(6)::peerhost usage with TCP. On some systems it doesn't work after receiving data. Prevent TCP accepts from blocking on unfinished 3-way handshakes. Named nameserver should be reachable by IPv6 too. Typo that prevented TCP traffic from being replied from the same socket as it was received on. Suppress warnings of the deprecated use of qw as parentheses in perl 5.14. Gracefully handle corrupted incoming packets in Net::DNS::Nameserver. Make Net::DNS::Resolver load even if /etc/resolv.conf is unreadable. Assembly of segmented TCP traffic. Fix documentation to reflect code behaviour where on successful packet creation, the error should be ignored. A Net::DNS::Nameserver without a NotifyHandler now responds NOTIMP to NOTIFY requests. Documentation now reflects Net::DNS::Packet construction behaviour. Replace TSIG key with the signature of the whole packet when signing a packet, even when the TSIG key is not the first in the additional section. Various typo fixes. Enhancements: ============= Allow ReplyHandlers to indicate that no answer should be returned by the Net::DNS::Nameserver. Use a class method ReplyHandler for classes inheriting from Net::DNS::Nameserver. New improved version of the check_soa script in the contrib section. Removed dependency on Net::IP Perform presentation to wire format conversion more efficiently. Manage serial numbers in SOA records in a modular and extensible way. Three modules are provided. Strictly sequential, Date Encoded and Time Encoded. A contribution from Dick Franks. Provide a configurable IdleTimeout for Net::DNS::Namserver.de4dd2f62d
Remove more tags from pkg-descr files fo the form: - Name em@i.l or variations thereof. While I'm here also fix some whitespace and other formatting errors, including moving WWW: to the last line in the file.2b1dacc826
Miscellaneous cleanups and fixes, some of the windowmaker stuff gracefully provided by danfe.31ae302eb6
- Get Rid MD5 supportbb86cbe5d2
Explicitly depend on p5-Digest-MD5 only if PERL_LEVEL < 500703 Explicitly depend on p5-Digest-SHA only if PERL_LEVEL < 50100017e550ca2f
- Rename net/p5-IO-INET6 to net/p5-IO-Socket-INET6. PR: ports/148309 Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>738d612f2b
Update to version 0.66, which is a major upgrade. Users are cautioned to thoroughly test this version before updating production systems.
For the port, introduce a new dependency, security/p5-Digest-SHA
Changes in this version, in addition to numerous minor bug fixes:
Feature: Truncation for Nameserver
TAKE CARE:
this feature may cause unexpected behavior for your nameservers
Net::DNS::Packet::truncate is a new method that is called from
within Net::DNS::Nameserver that truncates a packet according to
the rules of RFC2181 section 9.
Feature: Added Net::DNS::Domain
Net::DNS::Domain is an attemt to consistently approach the various
ways we interface with what RFC 1035 calls <domain-name>.
Feature: KX RR
Added support for the KX RR, RFC2230
Feature: HIP RR
Added support for the HIP RR, RFC5205
Feature: DHCID RR
Added rudimentary support for the DHCID RR.
Fix improved fuzzy matching of CLASS and TYPE in the Question
constructor method.
Fix AAAA dynamic update3bf3bb4653Where it matters, update regarding MAKE_JOBS_{UN}SAFE for my portsd31cadffeeUpdate to 0.65 which contains the following small fix:
When the AAAA object was constructed with new_from_hash with an
address containing the "::" shorthand notation normalization was
not done properly.d39e7fabf9Update to version 0.64 which adds support for the APL record in addition to many bug fixes.82e7db17e4
Update to version 0.63, which has a couple of bug fixes, including: Fix rt.cpan.org #30316 Security issue with Net::DNS Resolver. Net/DNS/RR/A.pm in Net::DNS 0.60 build 654 allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-6341). Packet parsing routines are now enclosed in eval blocks to trap exception and avoid premature termination of user program. Used ideas from: PR: ports/120702 Submitted by: Felippe de Meirelles Motta <lippemail@gmail.com>495d3d4601
Remove the old bytes files for ancient Perl. These were behind a PLIST_SUB, so deleting them will not change the package. Therefore no PORTREVISION bump. PR: ports/119458 Submitted by: Philippe Audeoud <jadawin@tuxaco.net>2ff73e2a41
1. Update to version 0.62. If you are doing uncommon things including directly frobbing packets or calling Net::DNS::RR->new_from_data() (which you should not be doing anyway) then you should read the changelog carefully and review/test your code before committing to this version. 2. Remove support for old Perl.857fa6a287
1. Upgrade to 0.61 which has a few small code cleanups. 2. --no-online-tests works now, so stop building them. 3. Remove support for prehistoric Perl.abeae79dc5
Update to 0.60, which includes some important security fixes: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3377 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3409 ... as well as rudimentary support for IPSECKEY. See /usr/local/share/doc/p5-Net-DNS/Changes for more details. Prodded by: Several, including ... PR: ports/114230 Submitted by: Hirohisa Yamaguchi <umq@ueo.co.jp>69f04a0bcb
Update to 0.59, which mostly cleans up the PTR code.44155cd19d
1. Update to 0.58, which contains numerous small bug fixes, and new functionality for DLV/DNSSEC.
2. Add virtual category ipv6
3. Add OPTIONS for IPV6, enabled by default.
4. Fix the test for WITH_IPV6, and move it out of the test for
${PERL_LEVEL} < 500800. On my system, the IPv6 libraries are not
(any longer?) installed by default with Perl 5.8. The test is
harmless if the libraries are there in any case, so remove the
pointless micro-optiimiztion.4ba23117b7Update to 0.57 (which contains no functional changes from 0.56), and reenable the cryptographic features on Perl 5.005. PR: ports/94770 Submitted by: leeym (thanks!)7d34f4a7ff
Version 0.56, which contains a new method for the SPF RR, and various bug fixes.497b01a297
Replace ugly "@unexec rmdir %D... 2>/dev/null || true" with @dirrmtry Approved by: krion@ PR: ports/88711 (related)e33233f948
Make the second RUN_DEPENDS += Pointy hat to: me Thanks to: krisb41c982f31
Upgrade to 0.55, an emergency release to fix a problem with TCP sockets introduced in 0.54. Anyone who upgraded to 0.54 should upgrade to this version ASAP.ec9bf19b91
upgrade to 0.54, which contains many bug fixes work around the fact that the crypto features of this library require dependencies which are not available to Perl < 5.6.2.055c8e918e
Be more friendly to other ports that might leave files here8258cee901
Add SHA256 checksums to my ports622fd39b2a
Change to the standardized version of the CPAN URL Submitted by: fenner11885ac901
Update to 0.53, which fixes a stray AFINET_6, and a few other bugs.f6854e0457
Upgrade to the eagerly anticipated 0.52. If you are using a version of this module later than 0.49, you should definitely upgrade, as this version fixes several bugs in the new code. If running Perl < 5.6, make addition of the IPv6 modules optional as 0.52 of this module fixes the bugs that made it mandatory.48c2b9e908
Make this work on Perl 5.005.03 (ala RELENG_4) by installing the bytes.pm pragma, which is the only thing that the new version of Net::DNS needs from 5.6+ that isn't in 5.005.03.4984b43ef1
Upgrade to 0.51, which fixes extra debugging that should not have gone into the live version. Also, 0.50 grew a dependency on Net-IP which was not recorded in the Changes file, so add that explicitly. This was mentioned by several people, including the current Net-DNS author, and the PR. PR: ports/82194 Submitted by: Helge Oldach <p5netdnsjun05@oldach.net>7bcac54531
Upgrade to 0.50, the latest version. Usual assortment of bug fixes, plus experimental IPv6 support (not yet enabled).5223f50a4f
Update to the latest version, mostly bug fixes.ce79355859
Update to 0.48, a minor bugfix release.3cc6907734
Update to 0.47. The few small bug fixes can be found in the CHANGES file. PR: ports/66945 Submitted by: Mark Foster <mark@foster.cc>f329896e86
this perl module creates/parses 'dynamic' updates, not 'dymanic' ones.ef78fdf6ad
Update to 0.46, which has better IPv6 reverse DNS handling, and all known 'taint mode' problems fixed. PR: ports/63841 Submitted by: Tim Bishop <tim@bishnet.net>5ac398ba00
Upgrade to 0.45. This version has major speed enhancements, better handling of classes, and other cleanups.af7eeffdf1
Fix duplicate %%PERL_ARCH%%'ification in one of the conditional rmdir lines. The error was masked by the conditionality, but mostly harmless due to the fact that the directory is incredibly likely to be populated anyway. Submitted by: tobezd6426ee1f5
Update to version 0.44, the latest available. Version 0.43 had the actual substantive changes, 0.44 has some non-user-visible changes to make CPAN.pm happy. Power users of this module are encouraged to read the CHANGES file. Most users shouldn't have problems with this upgrade. Significant changes to the software: 1. Ongoing refinement of proper class inheritance/categorization. 2. Fix zone transfers with 'many-answer' format. 3. Finally "fixed" the .xs code, and accompanying Makefile.pl options to work out of the box on both RELENG_4 and 5-current. 4. Added a Makefile.pl option to avoid the online tests. 5. Support for unknown RR types. Changes to the port: 1. Take advantage of 3 and 4 above. 2. portlint doesn't like the word 'file' to appear in the Makefile, so change it to 'doc' for the PORTDOCS install loop.0d13b1177c
* Update for version 0.44 * Use %%PERL_ARCH%% to accomodate new .xs code * Slightly improve the sorting, since it's majorly overhauled already3fc7bee189
This patch is no longer needed as of 0.4419a8d7c89b
Update to version 0.42. Fixes a bug in Net::DNS::Resolver::Recurse, and adds capability for a persistent UDP socket.18ed008853
utilize SITE_PERL PR: 58166 Submitted by: Cheng-Lung Sung <clsung@dragon2.net>c634b4bb83
Update to version 0.41, which contains several documentation and other cleanups. Also, the removal of the Net::DNS::Resolver::axfr_old() method.7dd081a017
Massive repo-copies request: net->dns (partly devel->dns) The category "dns" has been added, now is the time to move the dns-related ports to the new world. Is there anyone who is brave enough to complete this difficult job? ;) PR: ports/56020 Submitted by: Kimura Fuyuki <fuyuki@nigredo.org> Approved by: portmgre1906e85ed