Bug 236634

Summary: dns/powerdns: Update to 4.1.7 (Fixes security vulnerabilities)
Product: Ports & Packages Reporter: Dani I. <i.dani>
Component: Individual Port(s)Assignee: Steve Wills <swills>
Status: Closed FIXED    
Severity: Affects Some People CC: ports-secteam, tremere
Priority: --- Keywords: security
Version: LatestFlags: tremere: maintainer-feedback+
i.dani: maintainer-feedback? (ports-secteam)
i.dani: merge-quarterly?
Hardware: Any   
OS: Any   
URL: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.7
Attachments:
Description Flags
Update to 4.1.7 none

Description Dani I. 2019-03-19 08:53:22 UTC 
Created attachment 202978 [details]
Update to 4.1.7

Update to PowerDNS Authoritative 4.1.7

This releases fixes the following security advisory:
- PowerDNS Security Advisory 2019-03 (CVE-2019-3871): Insufficient validation in the HTTP remote backend - https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html

Full changelog: https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.7

Builds fine on FBSD 11.2.
Comment 1 commit-hook freebsd_committer freebsd_triage 2019-03-19 14:51:21 UTC 
A commit references this bug:

Author: swills
Date: Tue Mar 19 14:51:04 UTC 2019
New revision: 496262
URL: https://svnweb.freebsd.org/changeset/ports/496262

Log:
  Document PowerDNS issue

  PR:		236634
  Reported by:	Dani <i.dani@outlook.com>

Changes:
  head/security/vuxml/vuln.xml
Comment 2 commit-hook freebsd_committer freebsd_triage 2019-03-19 14:52:24 UTC 
A commit references this bug:

Author: swills
Date: Tue Mar 19 14:51:28 UTC 2019
New revision: 496263
URL: https://svnweb.freebsd.org/changeset/ports/496263

Log:
  dns/powerdns: update to 4.1.7

  PR:		236634
  Submitted by:	Dani <i.dani@outlook.com>
  Approved by:	Ralf van der Enden <tremere@cainites.net> (maintainer)
  MFH:		2019Q1
  Security:	6001cfc6-9f0f-4fae-9b4f-9b8fae001425

Changes:
  head/dns/powerdns/Makefile
  head/dns/powerdns/distinfo
Comment 3 Steve Wills freebsd_committer freebsd_triage 2019-03-19 14:52:49 UTC 
Committed, thanks!