diff --git a/dns/knot3/Makefile b/dns/knot3/Makefile
index 446aee271bdd..1a7ffc1093e5 100644
--- a/dns/knot3/Makefile
+++ b/dns/knot3/Makefile
@@ -1,122 +1,122 @@
 PORTNAME=	knot
-DISTVERSION=	3.2.4
+DISTVERSION=	3.2.5
 CATEGORIES=	dns
 MASTER_SITES=	https://secure.nic.cz/files/knot-dns/ \
 		https://dns.company/downloads/knot-dns/
 PKGNAMESUFFIX?=	3
 
 MAINTAINER=	freebsd@dns.company
 COMMENT=	High performance authoritative-only DNS server
 WWW=		https://www.knot-dns.cz/
 
 LICENSE=	GPLv3
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BUILD_DEPENDS=	gsed:textproc/gsed
 LIB_DEPENDS=	libgnutls.so:security/gnutls \
 		liblmdb.so:databases/lmdb
 
 USES=		alias libtool localbase pkgconfig tar:xz
 USE_LDCONFIG=	yes
 
 HAS_CONFIGURE=	yes
 CONFIGURE_ARGS=	--enable-recvmmsg=no \
 		--mandir=${MANPREFIX}/man \
 		--with-pkgconfigdir=${PREFIX}/libdata/pkgconfig
 
 .if !defined(UTILS_ONLY) && !defined(LIB_ONLY)
 CONFIGURE_ARGS+=	--with-rundir=/var/run/knot \
 			--with-storage=/var/db/knot
 LIB_DEPENDS+=		liburcu.so:sysutils/liburcu
 USE_RC_SUBR=		${PORTNAME}
 SUB_FILES=		pkg-message
 USES+=			libedit
 .endif
 
 .if defined(UTILS_ONLY) || defined(LIB_ONLY)
 CONFIGURE_ARGS+=	--disable-daemon \
 			--disable-modules
 .endif
 
 .if defined(LIB_ONLY)
 CONFIGURE_ARGS+=	--disable-utilities
 .endif
 
 INSTALL_TARGET=	install-strip
 
 CONFLICTS=	knot-1.* knot1-[0-6].* knot2-[0-9].*
 
 BINARY_ALIAS=	sed=${LOCALBASE}/bin/gsed
 
 USERS=		knot
 GROUPS=		knot
 SUB_LIST+=	GROUPS="${GROUPS}" \
 		USERS="${USERS}"
 
 PORTDOCS=	COPYING NEWS
 
 OPTIONS_DEFINE=	DNSTAP DOCS
 
 .if !defined(LIB_ONLY)
 OPTIONS_DEFINE+=	DOH IDN
 OPTIONS_DEFAULT+=	DOH IDN
 .endif
 
 .if !defined(UTILS_ONLY) && !defined(LIB_ONLY)
 OPTIONS_DEFINE+=	FASTPARSER MAXMINDDB
 .endif
 
 DNSTAP_DESC=			dnstap support (see dnstap.info)
 DNSTAP_LIB_DEPENDS=		libfstrm.so:devel/fstrm \
 				libprotobuf-c.so:devel/protobuf-c
 DNSTAP_CONFIGURE_ENABLE=	dnstap
 DNSTAP_CONFIGURE_WITH=		module-dnstap=yes
 
 # XXX: because `kdig_CPPFLAGS += $(DNSTAP_CFLAGS)' line is missing from
 # `src/Makefile.am' file (and thus pre-generated `src/Makefile.in') which
 # should contain "$libfstrm_CFLAGS $libprotobuf_c_CFLAGS" set by configure
 # script, provide it here explicitly as patching those files would result
 # in higher line count.  Ideally this bug should be fixed upstream.
 DNSTAP_CPPFLAGS=	-I${LOCALBASE}/include
 
 DOCS_CONFIGURE_OFF=	--disable-documentation
 
 DOH_DESC=		DoH support in kdig
 DOH_LIB_DEPENDS=	libnghttp2.so:www/libnghttp2
 
 FASTPARSER_DESC=		Fast zone parser (demanding compilation)
 FASTPARSER_CONFIGURE_ENABLE=	fastparser
 
 IDN_LIB_DEPENDS=	libidn2.so:dns/libidn2
 IDN_CONFIGURE_OFF=	--without-libidn
 IDN_CONFIGURE_WITH=	libidn
 
 MAXMINDDB_DESC=			Enable MaxMind for geodb module
 MAXMINDDB_LIB_DEPENDS=		libmaxminddb.so:net/libmaxminddb
 MAXMINDDB_CONFIGURE_ENABLE=	maxminddb
 
 .include <bsd.port.options.mk>
 
 .if ${ARCH} == i386
 USES+=		autoreconf
 .endif
 
 post-patch:
 .if !defined(UTILS_ONLY) && !defined(LIB_ONLY)
 	@${REINPLACE_CMD} 's|$$(INSTALL) -d $$(DESTDIR)/\@run_dir\@|#$$(INSTALL) -d $$(DESTDIR)/\@run_dir\@|' \
 		${WRKSRC}/src/Makefile.in
 	@${REINPLACE_CMD} 's|$$(INSTALL) -d $$(DESTDIR)/\@storage_dir\@|#$$(INSTALL) -d $$(DESTDIR)/\@storage_dir\@|' \
 		${WRKSRC}/src/Makefile.in
 	@${RM} -r ${WRKSRC}/src/zscanner/scanner.c
 .endif
 
 post-install:
 .if !defined(UTILS_ONLY) && !defined(LIB_ONLY)
 	${MV} ${STAGEDIR}${ETCDIR}/knot.sample.conf \
 		${STAGEDIR}${ETCDIR}/knot.conf.sample
 	@${MKDIR} ${STAGEDIR}/var/run/knot ${STAGEDIR}/var/db/knot
 .endif
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}
 	${INSTALL_DATA} ${PORTDOCS:S,^,${WRKSRC}/,} ${STAGEDIR}${DOCSDIR}/
 
 .include <bsd.port.mk>
diff --git a/dns/knot3/distinfo b/dns/knot3/distinfo
index 02b967c50d12..018244db9ac8 100644
--- a/dns/knot3/distinfo
+++ b/dns/knot3/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1670829833
-SHA256 (knot-3.2.4.tar.xz) = 299e8de918f9fc7ecbe625b41cb085e47cdda542612efbd51cd5ec60deb9dd13
-SIZE (knot-3.2.4.tar.xz) = 1674532
+TIMESTAMP = 1675678618
+SHA256 (knot-3.2.5.tar.xz) = c6b122e92baa179d09ba4c8ce5b0d42fb7475805f4ff9c81d5036acfaa161820
+SIZE (knot-3.2.5.tar.xz) = 1676804