Bug 272343

Summary: dns/powerdns-recursor: update to 4.9.0
Product: Ports & Packages Reporter: Ralf van der Enden <tremere>
Component: Individual Port(s)Assignee: Fernando Apesteguía <fernape>
Status: Closed FIXED    
Severity: Affects Only Me CC: fernape
Priority: ---    
Version: Latest   
Hardware: Any   
OS: Any   
URL: https://blog.powerdns.com/2023/06/30/powerdns-recursor-4-9-0-released
Attachments:
Description Flags
Update to PowerDNS Recursor 4.9.0 tremere: maintainer-approval+

Description Ralf van der Enden 2023-07-03 12:29:35 UTC 
Created attachment 243177 [details]
Update to PowerDNS Recursor 4.9.0

Q&A:
poudriere: testport ok (13.2-RELEASE;amd64;)
Makefile portclippy/portmft processed

Full changelog: https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.0
Comment 1 Fernando Apesteguía freebsd_committer freebsd_triage 2023-07-04 15:13:34 UTC 
Committed,

Thanks!
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-07-04 15:14:29 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=bbf3f2110b24b17eb4531cf9a0e8522a68850a97

commit bbf3f2110b24b17eb4531cf9a0e8522a68850a97
Author:     Ralf van der Enden <tremere@cainites.net>
AuthorDate: 2023-07-04 06:19:42 +0000
Commit:     Fernando Apesteguía <fernape@FreeBSD.org>
CommitDate: 2023-07-04 15:13:10 +0000

    dns/powerdns-recursor: update to 4.9.0

    ChangeLog: https://blog.powerdns.com/2023/06/30/powerdns-recursor-4-9-0-released

     * The performance impact of metrics collection has been reduced by using
       lock-free non-atomic thread-local counters.
     * The packet cache is sharded and shared by all threads.
     * The TTL of negative answers in the packet cache can now be controlled
       separately from positive and failure answers.
     * The rec_control trace_regex command writes the generated trace information to
       a specified file instead of the general log. The trace information contains
       more precise timestamps and DNSSEC validation information.
     * If extended-resolution-errors is enabled EDNS errors are now generated in
       more cases, specifically when authoritative servers for a zone are
       unreachable or when synthesising answers by e.g. using the aggressive NSEC
       cache.
     * The aggressive NSEC cache has been changed not to store NSEC3 entries which
       cover only a small fraction of possible names. This also allows switching off
       the aggressive cache for NSEC3 only.
     * It is now possible to switch off root-refreshing completely.
     * Proper handling of security policies that restrict the use of specific DNSSEC
       algorithms on RHEL9 derived systems.

    PR:             272343
    Reported by:    tremere@cainites.net (maintainer)

 dns/powerdns-recursor/Makefile                |  3 +--
 dns/powerdns-recursor/distinfo                |  6 +++---
 dns/powerdns-recursor/files/patch-rec-main.cc | 28 +++++++++++++--------------
 3 files changed, 18 insertions(+), 19 deletions(-)