diff --git a/dev-python/dns-lexicon/Manifest b/dev-python/dns-lexicon/Manifest
index 58ea445733978..65efe553326ef 100644
--- a/dev-python/dns-lexicon/Manifest
+++ b/dev-python/dns-lexicon/Manifest
@@ -1,2 +1,3 @@
 DIST dns-lexicon-3.23.2.gh.tar.gz 5826336 BLAKE2B b4ec01ac220a4174753e35791eb7b46589e9f5bc866c51cf8473533ffdb929afa02ac9dffcd5d47fe82fa70133ff16a587098ccf7ee633187a79368ed96199f2 SHA512 9b9a3a4dc6811282c1016f38df2238e768887389ea1acc57b89374fe4d59456adddd1ae2ed772d9a519d87e3f27affddef95bf3cd8ed2e175da6e843f6d40453
 DIST dns-lexicon-3.25.1.gh.tar.gz 5897936 BLAKE2B 6ac1441199992e996dcf1454d0ceefdbfd1ceec8271f3398dcdd7d491bb8e77deb36ee39a5229e8a6c244af6bcd6774383c06112ca7850eef1afeb03eaf7b707 SHA512 bc19b64f2e1268993dff0755c29f026b76e660e06dbd15eea445911ad816cd671efb308a79d49e0d309c0d45e4f15d229a9759ec25c13b79e3288932da6a93a0
+DIST dns-lexicon-3.25.2.gh.tar.gz 5897582 BLAKE2B 453b81924ced8d82e2d489eb58386402e7292dec37fca15ba3412ae43bd299453cad118c3cd1defee47849ae9d0789f196e0a33e062a9a8afdf15f5639b2c8ce SHA512 79357a25420cfe9f3d8430a91371e1c6a742c962c09df0d280833e3cc1d11aaed883eb04e723d82ed17fbf955e166c93c1647d7bc78f47d47d1799b0bb462628
diff --git a/dev-python/dns-lexicon/dns-lexicon-3.25.2.ebuild b/dev-python/dns-lexicon/dns-lexicon-3.25.2.ebuild
new file mode 100644
index 0000000000000..a6432769650da
--- /dev/null
+++ b/dev-python/dns-lexicon/dns-lexicon-3.25.2.ebuild
@@ -0,0 +1,75 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DISTUTILS_USE_PEP517=hatchling
+PYTHON_COMPAT=( python3_{11..14} )
+
+inherit distutils-r1 optfeature
+
+DESCRIPTION="Manipulate DNS records on various DNS providers in a standardized/agnostic way"
+HOMEPAGE="
+	https://github.com/dns-lexicon/dns-lexicon/
+	https://pypi.org/project/dns-lexicon/
+"
+SRC_URI="
+	https://github.com/dns-lexicon/dns-lexicon/archive/v${PV}.tar.gz
+		-> ${P}.gh.tar.gz
+"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
+
+RDEPEND="
+	>=dev-python/beautifulsoup4-4[${PYTHON_USEDEP}]
+	>=dev-python/cryptography-2[${PYTHON_USEDEP}]
+	>=dev-python/dnspython-2[${PYTHON_USEDEP}]
+	>=dev-python/pyotp-2[${PYTHON_USEDEP}]
+	>=dev-python/pyyaml-3[${PYTHON_USEDEP}]
+	>=dev-python/requests-2[${PYTHON_USEDEP}]
+	>=dev-python/requests-unixsocket-0.4[${PYTHON_USEDEP}]
+	>=dev-python/tldextract-2[${PYTHON_USEDEP}]
+"
+BDEPEND="
+	test? (
+		>=dev-python/boto3-1.28[${PYTHON_USEDEP}]
+		>=dev-python/zeep-3[${PYTHON_USEDEP}]
+		dev-python/vcrpy[${PYTHON_USEDEP}]
+	)
+"
+
+EPYTEST_PLUGINS=()
+EPYTEST_XDIST=1
+distutils_enable_tests pytest
+
+EPYTEST_DESELECT=(
+	# TODO
+	tests/test_client.py::test_client_init_when_missing_action_should_fail
+)
+
+EPYTEST_IGNORE=(
+	# Requires the "localzone" module
+	tests/providers/test_localzone.py
+	# Requires the "softlayer" module
+	tests/providers/test_softlayer.py
+	# Requires the "transip" module
+	tests/providers/test_transip.py
+	# Requires the "oci" module
+	tests/providers/test_oci.py
+	# Uses tldextract which needs Internet access to download its database
+	tests/providers/test_auto.py
+	# Same (https://github.com/dns-lexicon/dns-lexicon/issues/61)
+	tests/providers/test_godaddy.py
+)
+
+pkg_postinst() {
+	if [[ -z ${REPLACING_VERSIONS} ]]; then
+		optfeature_header \
+			"Install the following packages to enable support for additional DNS providers:"
+		optfeature Gransy dev-python/zeep
+		optfeature Route53 dev-python/boto3
+		optfeature DDNS dev-python/dnspython
+	fi
+}