CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

Maintainer
mat@FreeBSD.org
Packages
latest: 9.21.27
Upstream
up to date
Last update
to 9.21.27 · 07723370c8
Quarterly
2026Q4: 9.21.27 · last MFH 077013700a
Formerly
dns/bind913 until 2019-05-16
WWW
https://www.isc.org/bind/
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

Mathieu Arnold (mat) · 9.21.27 MFH 2026Q4 ✓
dns/bind9-devel: update to 9.21.27

Changes:	https://downloads.isc.org/isc/bind9/9.21.27/doc/arm/html/notes.html#notes-for-bind-9-21-27
Security:	CVE-2026-19630 CVE-2026-94300 CVE-2026-96888 CVE-2026-97313
07723370c8
Baptiste Daroussin (bapt) · 9.21.26_1
databases/lmdb: allow to install both 0.x and 1.x together

LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.

Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
  liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc

A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.

Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.

Approved by:	mat (portmgr)
Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D60741
85ba298b7e
Mathieu Arnold (mat) · 9.21.26
*: pet portfmt
0768760099
Mathieu Arnold (mat) · 9.21.26 MFH 2026Q3 ✓
dns/bind9-devel: update to 9.21.26

Changes:	https://downloads.isc.org/isc/bind9/9.21.26/doc/arm/html/notes.html
Security:	CVE-2026-19668 CVE-2026-19033 CVE-2026-77119
		CVE-2026-19941 CVE-2026-19666 CVE-2026-19667
		CVE-2026-75029 CVE-2026-77692 CVE-2026-81736
		CVE-2026-76163 CVE-2026-78301 CVE-2026-80274
		CVE-2026-81563
076689801f
Mathieu Arnold (mat) · 9.21.25 MFH 2026Q3 ✓
dns/bind9*: building with heimdal is broken on 15+
0760935063
Mathieu Arnold (mat) · 9.21.25 MFH 2026Q3 ✓
dns/bind9-devel: update to 9.21.25

Changes:	https://downloads.isc.org/isc/bind9/9.21.25/doc/arm/html/notes.html#notes-for-bind-9-21-25
07609290d0
Mathieu Arnold (mat) · 9.21.24 MFH 2026Q3 ✓
dns/bind9-devel: update to 9.21.24

Changes:	https://downloads.isc.org/isc/bind9/9.21.24/doc/arm/html/notes.html#notes-for-bind-9-21-24
Security:	CVE-2026-10723 CVE-2026-10822 CVE-2026-11331
		CVE-2026-11605 CVE-2026-11622 CVE-2026-11721
		CVE-2026-12617 CVE-2026-13204 CVE-2026-13321
07582070cf
Xin LI (delphij) · 9.21.23_1
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI

LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.

Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.

This commit introduces databases/lmdb0 as a holding port for the 0.9.35
release, pinned to the 0.x branch with PORTSCOUT=limit:^0. and mutually
conflicting with databases/lmdb, which retains 1.0. The two packages
cannot be installed simultaneously, but having lmdb0 available means:

* Ports known to require the 0.9 ABI can declare an explicit dependency
  on databases/lmdb0 until they are validated against 1.0.
* Users with existing databases in the 0.9 format can still access the
  mdb_dump and mdb_load utilities to migrate data before upgrading.
* The package conflict prevents accidental mixing.

All 50 direct dependents of databases/lmdb are redirected to
databases/lmdb0 for now with a PORTREVISION bump, effectively restoring
the tree to the state prior to the LMDB 1.0 update. Once all dependent
ports are validated against LMDB 1.0, they will be moved back to
databases/lmdb and databases/lmdb0 will be removed.

PR:             ports/296530
5f9d389f29
Mathieu Arnold (mat) · 9.21.23
dns/bind9-devel: update to 9.21.23

Changes:	https://downloads.isc.org/isc/bind9/9.21.23/doc/arm/html/notes.html#notes-for-bind-9-21-23
075249300b
Mathieu Arnold (mat) · 9.21.22
dns/bind9-devel: update to 9.21.22

Changes:	https://downloads.isc.org/isc/bind9/9.21.22/doc/arm/html/notes.html#notes-for-bind-9-21-22
Security:       CVE-2026-3592, CVE-2026-3039, CVE-2026-5946,
		CVE-2026-5950, CVE-2026-5947, CVE-2026-3593
074766800a
Mathieu Arnold (mat) · 9.21.21
dns/bind9-devel: update to 9.21.21

Changes:	https://downloads.isc.org/isc/bind9/9.21.21/doc/arm/html/changelog.html
073987603c
Mathieu Arnold (mat) · 9.21.20
dns/bind9-devel: update to 9.21.20

Changes:	https://downloads.isc.org/isc/bind9/9.21.20/doc/arm/html/notes.html#notes-for-bind-9-21-20
Security:	CVE-2026-1519, CVE-2026-3104, CVE-2026-3119, CVE-2026-3591
0739235047
Mathieu Arnold (mat) · 9.21.19
dns/bind9-devel: update to 9.21.19

Changes:	https://downloads.isc.org/isc/bind9/9.21.19/doc/arm/html/notes.html#notes-for-bind-9-21-19
07367970f5
Mathieu Arnold (mat) · 9.21.18
dns/bind9-devel: update to 9.21.18
07360520df
Mathieu Arnold (mat) · 9.21.17_2
dns/bind9*: enable base GSSAPI on 15+

FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.

PR:		291780
0732837048
Mathieu Arnold (mat) · 9.21.17_1
dns/bind9*: nsupdate works on 15+ with MIT kerberos from base

FreeBSD 15+ have MIT kerberos in the base system, and it fixes the
problems BIND9 was having with Heimdal.

PR:		291776
07328360c1
Mathieu Arnold (mat) · 9.21.17
dns/bind9-devel: update to 9.21.17

Changes:	https://downloads.isc.org/isc/bind9/9.21.17/doc/arm/html/notes.html#notes-for-bind-9-21-17
Security:	CVE-2025-13878
073271007f
Mathieu Arnold (mat) · 9.21.16
dns/bind9*: move my regen-patches target from Makefile.local
073270708d
Mathieu Arnold (mat) · 9.21.16
dns/bind9-devel: update 9.21.16

Changes:	https://downloads.isc.org/isc/bind9/9.21.16/doc/arm/html/notes.html#notes-for-bind-9-21-16
07295850da
Mathieu Arnold (mat) · 9.21.15
dns/bind9-devel: update to 9.21.15

Changes:	https://downloads.isc.org/isc/bind9/9.21.15/doc/arm/html/notes.html#notes-for-bind-9-21-15
072621202d
Mathieu Arnold (mat) · 9.21.14
dns/bind9-devel: update to 9.21.14

Changes:	https://downloads.isc.org/isc/bind9/9.21.14/doc/arm/html/notes.html
072263106b
Daniel Engberg (diizzy) · 9.21.12
*/*: Remove libtool dependency

None of these ports utilizes libtool
Build tested using Poudriere

Approved by:	blanket, build fix
7f25f24de0
Mathieu Arnold (mat) · 9.21.12
dns/bind9-devel: update to 9.21.12

Changes:	https://downloads.isc.org/isc/bind9/9.21.12/doc/arm/html/notes.html#notes-for-bind-9-21-12
07187300bd
Mathieu Arnold (mat) · 9.21.11
dns/bind9-devel: update to 9.21.11

Changes:	https://downloads.isc.org/isc/bind9/9.21.11/doc/arm/html/notes.html#notes-for-bind-9-21-11
07166890a9
Mathieu Arnold (mat) · 9.21.10
dns/bind9-devel: update to 9.21.10
0713260c7c
Don Lewis (truckman) · 9.21.9_2
*/*: Bump PORTREVISION for devel/protobuf-c update

libprotobuf-c.so once again has version info.  Force a rebuild of
its consumers.

PR:		282060
MFH:		2025Q3
Sponsored by:	<If the change was sponsored by an organization.>
f0ba732a81
Baptiste Daroussin (bapt) · 9.21.9_1
libxml2: chase libxml soversion bump
3068854dd0
Mathieu Arnold (mat) · 9.21.9
dns/bind9*: fixup option description

Reported by:	John W. O'Brien
071054522a
Mathieu Arnold (mat) · 9.21.9
dns/bind9*: move xml statistics in an option

PR:	275680
0710534916
Mathieu Arnold (mat) · 9.21.9
dns/bind9*: pet portfmt and portclippy
0710533b66
Mathieu Arnold (mat) · 9.21.9
dns/bind9-devel: update to 9.21.9
0710356eed
Mathieu Arnold (mat) · 9.21.8
dns/bind9-devel: update to 9.21.8

Changes:	https://downloads.isc.org/isc/bind9/9.21.8/doc/arm/html/notes.html#notes-for-bind-9-21-8
Security:	CVE-2025-40775
0706761b48
Mathieu Arnold (mat) · 9.21.7
dns/bind9-devel: upgrade to 9.21.7

Changes:	https://downloads.isc.org/isc/bind9/9.21.7/doc/arm/html/notes.html#notes-for-bind-9-21-7
0702695b8e
Mathieu Arnold (mat) · 9.21.6
dns/bind9-devel: update to 9.21.6

Changes:	https://downloads.isc.org/isc/bind9/9.20.7/doc/arm/html/notes.html
0700367e02
Mathieu Arnold (mat) · 9.21.5
dns/bind9-devel: update to 9.21.5

Changes:	https://downloads.isc.org/isc/bind9/9.21.5/doc/arm/html/notes.html
0697086149
Mathieu Arnold (mat) · 9.21.4
dns/bind9-devel: upgrade to 9.21.4

Security:	CVE-2024-11187, CVE-2024-12705
069389781f
Daniel Engberg (diizzy) · 9.21.3
*/*: Use Gnome helper for defining libxml2 dependency

Replace LIB_DEPENDS with USES= gnome, USE_GNOME= libxml2

Approved by:	portmgr (blanket)
3b3700f8f0
Mathieu Arnold (mat) · 9.21.3
dns/bind9-devel: update to 9.21.3

Changes:	https://downloads.isc.org/isc/bind9/9.21.3/doc/arm/html/notes.html
0688680a26
Mathieu Arnold (mat) · 9.21.1
dns/bind9-devel: update to 9.21.1

Changes:	https://downloads.isc.org/isc/bind9/9.21.1/doc/arm/html/notes.html
0679066586
Gleb Smirnoff (glebius) · 9.21.0
dns/bind9*: fix WITH_DEBUG build

The READLINE_CFLAGS="-L${LOCALBASE}/lib" env came with bind 9.18 with no
explanation.  With 9.20 it actually breaks the developer build:

cc: error: argument unused during compilation: '-L/usr/local/lib' [-Werror,-Wunused-command-line-argument]

The --enable-symtable configure option is no longer supported by bind and
just produces a warning.

Reviewed by:		mat
Differential Revision:	https://reviews.freebsd.org/D46540
32b3642216
Mathieu Arnold (mat) · 9.21.0
dns/bind9-devel: Update to 9.21.0

Changes:	https://downloads.isc.org/isc/bind9/9.21.0/doc/arm/html/notes.html#notes-for-bind-9-21-0
067485934e
Mathieu Arnold (mat) · 9.19.24_1
dns/bind9-devel: fix build

PR:		280084
0670122ac1
Mathieu Arnold (mat) · 9.19.24_1
dns/bind9*: mark named as "service jails" ready
0666404f64
Mathieu Arnold (mat) · 9.19.24_1
dns/bind9-devel: move dnstap-read to bind-tools

PR:		279050
Reported by:	freebsd rail eu org
0663812b21
Mathieu Arnold (mat) · 9.19.24
dns/bind9-devel: update to 9.19.24
0663769127
Mathieu Arnold (mat) · 9.19.23
dns/bind9-devel: update to 9.19.23
0663768b19
Mathieu Arnold (mat) · 9.19.22
dns/bind9-devel: update to 9.19.22
06637671c3
Mathieu Arnold (mat) · 9.19.21
dns/bind9-devel: update to 9.19.21
06637669d3
Mathieu Arnold (mat) · 9.19.19
dns/bind9-devel: update to 9.19.19
0663765e3e
Mathieu Arnold (mat) · 9.19.18
dns/bind9-devel: update to 9.19.18

Switch from gitlab to official BIND9 development releases.
0663764a49