CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

dns/bind-tools 9.20.30

Command line tools from BIND: delv, dig, host, nslookup...

Port info

Maintainer
mat@FreeBSD.org
Packages
latest: 9.20.30
Upstream
up to date
Last update
to 9.20.30 · 07723370c8
Quarterly
2026Q4: 9.20.30 · last MFH 077013700a
WWW
https://www.isc.org/bind/
Links
cgit · VuXML

Install

Package
# pkg install bind-tools
installs 9.20.30 from latest; from quarterly (2026Q4) 9.20.30
Port
# cd /usr/ports/dns/bind-tools && make install clean
# make -C /usr/ports/dns/bind-tools config  # change options first
Size
1.5 MiB download · 8.1 MiB installed
Depends on
devel/fstrm 0.6.1_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, www/libnghttp2 1.70.0
License
MPL20
Options
3 of 8 on in the package: DNSTAP GSSAPI_BASE IDN
Show the 5 options that are off
FIXED_RRSET GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE LARGE_FILE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.20.309.20.29–
FreeBSD 159.20.309.20.29–
FreeBSD 149.20.309.20.299.20.30

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.20.309.20.29–
FreeBSD 149.20.309.20.299.20.30

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.20.30.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (143)

Mathieu Arnold (mat)
Update to latest commit.
63e7b6278b
Mathieu Arnold (mat)
Update to latest commit.
e30814efa0
Mathieu Arnold (mat)
Update to latest commit.
23d018c1d7
Mathieu Arnold (mat)
Update to latest commit.
9a0d39ef3e
Mathieu Arnold (mat)
Enabled DNSTAP by default.

The ISC recommends having it by default (it is in the packages they
distribute) and the footprint of the dependecies is very small.

While there, cleanup plists.

PR:		237861
Reported by:	Greg Rivers
54933d6c12
Mathieu Arnold (mat)
Update to latest commit.
840a4c40b5
Mathieu Arnold (mat)
Update to latest commit.

While there, move named-journalprint from bind-tools to bind9, it is
only useful on machines with BIND9 running, where journal files actually
exist.  The man page was already in the correct port.
bf3db438d8
Mathieu Arnold (mat)
Update to 9.16.5.

Changes:	https://downloads.isc.org/isc/bind9/9.16.5/doc/arm/html/notes.html#notes-for-bind-9-16-5
MFH:		2020Q3 (bug fixes)
9367e535db
Mathieu Arnold (mat)
Have portscout ignore the slave port.
211b706b0b
Mathieu Arnold (mat)
Update to latest commit.
5c77f25a9b
Philip Paeps (philip)
Update to 9.16.4.

MFH:		2020Q2
Security:	CVE-2020-8618 CVE-2020-8619
Submitted by:   mat (maintainer)
09cb3e5703
Mathieu Arnold (mat)
Update to latest commit.
236aa75c51
Mathieu Arnold (mat)
Fix QA (because I am stupid)

Reported by:	mfechner
ad2a4bf0d6
Mathieu Arnold (mat)
Add a hook to be able to build dns/bind-tools with dns/bind9-devel.

While there, fixup patches.
8f7615b355
Mathieu Arnold (mat)
Switch dns/bind-tools to the new dns/bind916.
089a592dc8
Mathieu Arnold (mat)
Remove conflicts from bind-tools and the server ports.

All servers now depend on the same bind-tools, from the latest BIND9
release.

Chase dependencies to make sure they now depend on the correct port.

Differential Revision:	https://reviews.freebsd.org/D19922
33634159f7
Mathieu Arnold (mat)
Move bind-tools from 9.12 to 9.14.

It was forgotten during the 9.14 release process.
935246f542
Mathieu Arnold (mat)
Update WWW.

PR:		236196
Submitted by:	Leonid Nevecherya
c517e3ebf0
Mathieu Arnold (mat)
Switch bind-tools to BIND9 9.12.

Sponsored by:	Absolight
b8a3fce896
Mathieu Arnold (mat)
Update to 9.9.10, 9.10.5, 9.11.1 and 9.12 to latest snapshot.

While there:

Make it more maintainable by sorting stuff in the Makefile and removing
vestigial pre 10.3 things.

Refresh the root zone hints.

"Fix" the configuration section telling you to get some top level
zones from f.root-servers.net, which does not allow axfr any more. [1]

PR:		218656 [1]
Reported by:	Thomas Steen Rasmussen / Tykling [1]
MFH:		2017Q2
Sponsored by:	Absolight
d4de1a5f8c
Mathieu Arnold (mat)
Switch bind-tools to BIND9 9.11.

Sponsored by:	Absolight
b49c617b79
Mathieu Arnold (mat)
Fix build on -CURRENT. [1]

- Force building with libedit
- Bump PORTREVISION to account for accidental succesful builds

PR:		203273 [1]
Sponsored by:	Absolight
5ed65050ac
Mathieu Arnold (mat)
Update the comment, forgotten in the previous commit.

Sponsored by:	Absolight
1d5c7e9284
Mathieu Arnold (mat)
Security update of BIND9 to 9.9.6-P1 and 9.10.1-P1.

Security:	CVE-2014-8500 CVE-2014-8680
Sponsored by:	Absolight
8a832ab6a4
Mathieu Arnold (mat)
Fix bind-tools PORTREVISION.

Noticed by:	Andrei Brezan
Sponsored by:	Absolight
73782b4e77
Mathieu Arnold (mat)
Don't install named rc script with bind-tools.

Sponsored by:	Absolight
f303c83fe8
Mathieu Arnold (mat)
Forgot to commit that with the latest 9.10 update.

Sponsored by:	Absolight
61d5c503b2
Mathieu Arnold (mat)
Add a PYTHON option to bind99 and bind910, it installs a couple of dnssec related utilities. Use bind's own Makefiles for installation in bind-tools.

Sponsored by:	Absolight
84296bece1
Mathieu Arnold (mat)
Fix plist.

Sponsored by:	Absolight
3e1c8457bc
Mathieu Arnold (mat)
Fix dns/bind-tools after the gssapi update.

Also, move it from BIND 9.9 to 9.10, and add delv and nsupdate.

Sponsored by:	Absolight
03cf7df719
Mathieu Arnold (mat)
- Add a patch to install missing man page - Add dnssec-* tools to bind-tools[1]

Requested by:	many [1]
Sponsored by:	Absolight
5bab5ca52b
Mathieu Arnold (mat)
Change the BIND ports to use PKGNAMESUFFIX.

Sponsored by:	Absolight
0014042ad5
Mathieu Arnold (mat)
Convert to staging and new options.
5d545c6f64
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: dns)
24a1652ff4
Niclas Zeising (zeising)
Readd dns/bind-tools. This is done in a similar manner as the old bind-tools, but uses bind99 instead of bind97 as master port. Change bind99 to facilitate the bind-tools slave, in a simlar way as was done for bind97.

Approved by:	erwin (maintainer)
f0886cc3f3
Erwin Lansing (erwin)
2013-04-12 dns/bind97: No longer supported by ISC, use Bind 9.8 or 9.9 2013-04-12 dns/bind97-sdb: No longer supported by ISC, use Bind 9.8 or 9.9 2013-04-12 dns/bind-tools: No longer supported by ISC, use Bind 9.8 or 9.9
7b2568a60f
Doug Barton (dougb)
Throw my ports back in the pool, and make my intentions clear for the various ports that I've created.

I bid fond fare well
A chapter closes for me
What opens for you?
deda664425
Doug Barton (dougb)
Remove more tags from pkg-descr files fo the form:

- Name
em@i.l

or variations thereof. While I'm here also fix some whitespace and other
formatting errors, including moving WWW: to the last line in the file.
2b1dacc826
Doug Barton (dougb)
Miscellaneous cleanups and fixes, some of the windowmaker stuff gracefully provided by danfe.
31ae302eb6
Doug Barton (dougb)
This is now a proper slave port to the latest version, atm ../bind97
eba4de052c
Doug Barton (dougb) · 9.7.1.1
Update to 9.7.1-P1, the latest version from ISC.
c30ea1e9df
Doug Barton (dougb) · 9.7.0.2
Update to the latest patch set from ISC, which addresses the following:

Named could return SERVFAIL for negative responses
   from unsigned zones.
7509c01a81
Doug Barton (dougb) · 9.7.0.1
Add bind-tools:

The user space command line tools from the latest version of BIND:
	dig, host, and nslookup

WWW: https://www.isc.org/software/bind
5e23e2bb05