dns/bind9-devel: update to 9.21.27 Changes: https://downloads.isc.org/isc/bind9/9.21.27/doc/arm/html/notes.html#notes-for-bind-9-21-27 Security: CVE-2026-19630 CVE-2026-94300 CVE-2026-96888 CVE-2026-9731307723370c8
Port details
dns/bind9-devel 9.21.27
BIND DNS suite with updated DNSSEC and DNS64
- Maintainer
- mat@FreeBSD.org
- Packages
- latest: 9.21.27
- Upstream
- up to date
- Last update
- to 9.21.27 · 07723370c8
- Quarterly
- 2026Q4: 9.21.27 · last MFH 077013700a
- Formerly
- dns/bind913 until 2019-05-16
- WWW
- https://www.isc.org/bind/
- Links
- cgit · VuXML
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 9.21.27.Fixed (11)
Show 11 fixed
VuXML entries whose affected range the packaged version has left.
BIND -- multiple vulnerabilitiesentered 2017-04-13
BIND -- multiple vulnerabilitiesentered 2017-01-12
BIND -- Remote Denial of Service vulnerabilityentered 2016-11-02
BIND -- Remote Denial of Service vulnerabilityentered 2016-09-28
bind -- denial of service vulnerabilityentered 2016-08-06
bind -- denial of service vulnerabilityentered 2016-03-28
bind -- denial of service vulnerabilityentered 2016-03-28
bind -- denial of service vulnerabilityentered 2016-03-28
bind -- multiple vulnerabilitiesentered 2015-12-16
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (403)
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D6074185ba298b7e*: pet portfmt0768760099
dns/bind9-devel: update to 9.21.26 Changes: https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html Security: CVE-2026-19668 CVE-2026-19033 CVE-2026-77119 CVE-2026-19941 CVE-2026-19666 CVE-2026-19667 CVE-2026-75029 CVE-2026-77692 CVE-2026-81736 CVE-2026-76163 CVE-2026-78301 CVE-2026-80274 CVE-2026-81563076689801f
dns/bind9*: building with heimdal is broken on 15+0760935063
dns/bind9-devel: update to 9.21.25 Changes: https://downloads.isc.org/isc/bind9/9.21.25/doc/arm/html/notes.html#notes-for-bind-9-21-2507609290d0
dns/bind9-devel: update to 9.21.24 Changes: https://downloads.isc.org/isc/bind9/9.21.24/doc/arm/html/notes.html#notes-for-bind-9-21-24 Security: CVE-2026-10723 CVE-2026-10822 CVE-2026-11331 CVE-2026-11605 CVE-2026-11622 CVE-2026-11721 CVE-2026-12617 CVE-2026-13204 CVE-2026-1332107582070cf
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI LMDB 1.0 introduced an incompatible on-disk format change and subtle API breakage: applications that compiled cleanly against 1.0 headers could fail silently at run time. Known affected ports include dns/knot3, mail/bogofilter, and mail/postfix; the postfix issue has been confirmed upstream. Linux distributions such as Arch Linux have observed the same breakage. Samba can also be affected in certain configurations. Because the regression is not detectable in an -exp build run -- the postfix failure only manifests at run time, and bogofilter was caught only because post-build self-tests happen to exercise this path -- we cannot rely on package builds to validate the 1.0 upgrade. This commit introduces databases/lmdb0 as a holding port for the 0.9.35 release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually conflicting with databases/lmdb, which retains 1.0. The two packages cannot be installed simultaneously, but having lmdb0 available means: * Ports known to require the 0.9 ABI can declare an explicit dependency on databases/lmdb0 until they are validated against 1.0. * Users with existing databases in the 0.9 format can still access the mdb_dump and mdb_load utilities to migrate data before upgrading. * The package conflict prevents accidental mixing. All 50 direct dependents of databases/lmdb are redirected to databases/lmdb0 for now with a PORTREVISION bump, effectively restoring the tree to the state prior to the LMDB 1.0 update. Once all dependent ports are validated against LMDB 1.0, they will be moved back to databases/lmdb and databases/lmdb0 will be removed. PR: ports/2965305f9d389f29
dns/bind9-devel: update to 9.21.23 Changes: https://downloads.isc.org/isc/bind9/9.21.23/doc/arm/html/notes.html#notes-for-bind-9-21-23075249300b
dns/bind9-devel: update to 9.21.22 Changes: https://downloads.isc.org/isc/bind9/9.21.22/doc/arm/html/notes.html#notes-for-bind-9-21-22 Security: CVE-2026-3592, CVE-2026-3039, CVE-2026-5946, CVE-2026-5950, CVE-2026-5947, CVE-2026-3593074766800a
dns/bind9-devel: update to 9.21.21 Changes: https://downloads.isc.org/isc/bind9/9.21.21/doc/arm/html/changelog.html073987603c
dns/bind9-devel: update to 9.21.20 Changes: https://downloads.isc.org/isc/bind9/9.21.20/doc/arm/html/notes.html#notes-for-bind-9-21-20 Security: CVE-2026-1519, CVE-2026-3104, CVE-2026-3119, CVE-2026-35910739235047
dns/bind9-devel: update to 9.21.19 Changes: https://downloads.isc.org/isc/bind9/9.21.19/doc/arm/html/notes.html#notes-for-bind-9-21-1907367970f5
dns/bind9-devel: update to 9.21.1807360520df
dns/bind9*: enable base GSSAPI on 15+ FreeBSD 15+ have MIT kerberos in the base system, and it fixes the problems BIND9 was having with Heimdal. PR: 2917800732837048
dns/bind9*: nsupdate works on 15+ with MIT kerberos from base FreeBSD 15+ have MIT kerberos in the base system, and it fixes the problems BIND9 was having with Heimdal. PR: 29177607328360c1
dns/bind9-devel: update to 9.21.17 Changes: https://downloads.isc.org/isc/bind9/9.21.17/doc/arm/html/notes.html#notes-for-bind-9-21-17 Security: CVE-2025-13878073271007f
dns/bind9*: move my regen-patches target from Makefile.local073270708d
dns/bind9-devel: update 9.21.16 Changes: https://downloads.isc.org/isc/bind9/9.21.16/doc/arm/html/notes.html#notes-for-bind-9-21-1607295850da
dns/bind9-devel: update to 9.21.15 Changes: https://downloads.isc.org/isc/bind9/9.21.15/doc/arm/html/notes.html#notes-for-bind-9-21-15072621202d
dns/bind9-devel: update to 9.21.14 Changes: https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html072263106b
*/*: Remove libtool dependency None of these ports utilizes libtool Build tested using Poudriere Approved by: blanket, build fix7f25f24de0
dns/bind9-devel: update to 9.21.12 Changes: https://downloads.isc.org/isc/bind9/9.21.12/doc/arm/html/notes.html#notes-for-bind-9-21-1207187300bd
dns/bind9-devel: update to 9.21.11 Changes: https://downloads.isc.org/isc/bind9/9.21.11/doc/arm/html/notes.html#notes-for-bind-9-21-1107166890a9
dns/bind9-devel: update to 9.21.100713260c7c
*/*: Bump PORTREVISION for devel/protobuf-c update libprotobuf-c.so once again has version info. Force a rebuild of its consumers. PR: 282060 MFH: 2025Q3 Sponsored by: <If the change was sponsored by an organization.>f0ba732a81
libxml2: chase libxml soversion bump3068854dd0
dns/bind9*: fixup option description Reported by: John W. O'Brien071054522a
dns/bind9*: move xml statistics in an option PR: 2756800710534916
dns/bind9*: pet portfmt and portclippy0710533b66
dns/bind9-devel: update to 9.21.90710356eed
dns/bind9-devel: update to 9.21.8 Changes: https://downloads.isc.org/isc/bind9/9.21.8/doc/arm/html/notes.html#notes-for-bind-9-21-8 Security: CVE-2025-407750706761b48
dns/bind9-devel: upgrade to 9.21.7 Changes: https://downloads.isc.org/isc/bind9/9.21.7/doc/arm/html/notes.html#notes-for-bind-9-21-70702695b8e
dns/bind9-devel: update to 9.21.6 Changes: https://downloads.isc.org/isc/bind9/9.20.7/doc/arm/html/notes.html0700367e02
dns/bind9-devel: update to 9.21.5 Changes: https://downloads.isc.org/isc/bind9/9.21.5/doc/arm/html/notes.html0697086149
dns/bind9-devel: upgrade to 9.21.4 Security: CVE-2024-11187, CVE-2024-12705069389781f
*/*: Use Gnome helper for defining libxml2 dependency Replace LIB_DEPENDS with USES= gnome, USE_GNOME= libxml2 Approved by: portmgr (blanket)3b3700f8f0
dns/bind9-devel: update to 9.21.3 Changes: https://downloads.isc.org/isc/bind9/9.21.3/doc/arm/html/notes.html0688680a26
dns/bind9-devel: update to 9.21.1 Changes: https://downloads.isc.org/isc/bind9/9.21.1/doc/arm/html/notes.html0679066586
dns/bind9*: fix WITH_DEBUG build
The READLINE_CFLAGS="-L${LOCALBASE}/lib" env came with bind 9.18 with no
explanation. With 9.20 it actually breaks the developer build:
cc: error: argument unused during compilation: '-L/usr/local/lib' [-Werror,-Wunused-command-line-argument]
The --enable-symtable configure option is no longer supported by bind and
just produces a warning.
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D4654032b3642216dns/bind9-devel: Update to 9.21.0 Changes: https://downloads.isc.org/isc/bind9/9.21.0/doc/arm/html/notes.html#notes-for-bind-9-21-0067485934e
dns/bind9-devel: fix build PR: 2800840670122ac1
dns/bind9*: mark named as "service jails" ready0666404f64
dns/bind9-devel: move dnstap-read to bind-tools PR: 279050 Reported by: freebsd rail eu org0663812b21
dns/bind9-devel: update to 9.19.240663769127
dns/bind9-devel: update to 9.19.230663768b19
dns/bind9-devel: update to 9.19.2206637671c3
dns/bind9-devel: update to 9.19.2106637669d3
dns/bind9-devel: update to 9.19.190663765e3e
dns/bind9-devel: update to 9.19.18 Switch from gitlab to official BIND9 development releases.0663764a49