[Bug 297322] dns/powerdns-recursor: Update to 5.4.5 (fixes CVE-2026-52682 with score 7.5)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297322

            Bug ID: 297322
           Summary: dns/powerdns-recursor: Update to 5.4.5 (fixes
                    CVE-2026-52682 with score 7.5)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]
             Flags: maintainer-feedback?([email protected])
                CC: [email protected]

Created attachment 273513
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=273513&action=edit
dns/powerdns-recursor 5.4.5

Date: 2026-08-06T00:00:00+01:00
Discovery date: 2026-07-28T00:00:00+01:00
Affects: PowerDNS Authoritative Server 4.9.16, 5.0.6, 5.1.3, Recursor 5.2.12,
5.3.9, 5.4.4, and dnsdist 1.9.15, 2.0.7, 2.1.0
Not affected: PowerDNS Authoritative Server 4.9.17, 5.0.7, 5.1.4, Recursor
5.2.13, 5.3.10, 5.4.5, and dnsdist 1.9.16, 2.0.8, 2.1.1
Severity: High
Impact: Increased memory and CPU usage
Exploit: A crafted DNS packet can cause increased memory and CPU consumption
Risk of system compromise: None
Solution: Upgrade to patched version
CWE: CWE-400
CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Last affected: auth 5.1.3, 5.0.6, 4.9.16, recursor 5.2.12, 5.3.9, 5.4.4 dnsdist
1.9.15, 2.0.7, 2.1.0
First fixed: auth 5.1.4, 5.0.7, 4.9.17, recursor 5.2.13, 5.3.10, 5.4.5, dnsdist
1.9.16, 2.0.8, 2.1.1
Internal ID: 17796
A malicious server can send a crafted DNS packet that leads to increased memory
and CPU use.

CVSS Score: 7.5

-- 
You are receiving this mail because:
You are the assignee for the bug.