Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: mat@FreeBSD.org
Packages: latest: 9.21.27
Upstream: up to date
Last update: 2026-10-21 to 9.21.27 · 07723370c8
Quarterly: 2026Q4: 9.21.27 · last MFH 2026-10-21 077013700a
Formerly: dns/bind913 until 2019-05-16
WWW: https://www.isc.org/bind/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install bind9-devel

installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27

Port

# cd /usr/ports/dns/bind9-devel && make install clean

# make -C /usr/ports/dns/bind9-devel config  # change options first

Size

9.5 MiB download · 27 MiB installed

Depends on

databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0

License

MPL20

Options

6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML

Show the 7 options that are off

GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE

pkg-message

Shown after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

Shown after upgrading

The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.

Shown always

+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	9.21.27	9.21.26	–
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed

VuXML entries whose affected range the packaged version has left.

DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilitiesentered 2024-02-13

CVE-2023-50387, CVE-2023-50868

BIND -- multiple vulnerabilitiesentered 2017-04-13

CVE-2017-3136, CVE-2017-3137, CVE-2017-3138

BIND -- multiple vulnerabilitiesentered 2017-01-12

CVE-2016-9131, CVE-2016-9147, CVE-2016-9444, CVE-2016-9778

BIND -- Remote Denial of Service vulnerabilityentered 2016-11-02

CVE-2016-8864

BIND -- Remote Denial of Service vulnerabilityentered 2016-09-28

CVE-2016-2776

BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfersentered 2016-08-10

CVE-2016-6170, CVE-2016-6171, CVE-2016-6172, CVE-2016-6173

bind -- denial of service vulnerabilityentered 2016-08-06

CVE-2016-2775

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1285

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1286

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-2088

bind -- multiple vulnerabilitiesentered 2015-12-16

CVE-2015-3193, CVE-2015-8000, CVE-2015-8461

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

2024-01-30 15:59Gleb Popov (arrowd)

*: Move manpages to share/man

Approved by:	portmgr (blanket)

4e63c267c1

2024-01-14 09:50Mathieu Arnold (mat)

dns/bind9*: add a comment about nsupdate being broken with heimdal

PR:	275241

0646643ef5

2023-12-01 22:12Mathieu Arnold (mat)

dns/bind9-devel: remove option as the man pages no longer need sphinx

0641829c26

2023-07-12 20:56Felix Palmen (zirias)

bsd.sites.mk: Update all ports using USE_GITLAB

Replace GL_COMMIT by GL_TAGNAME in all ports. The new GL_TAGNAME is
backwards-compatible (accepting any commit hash as before), but also
understands an actual tag name. Moving to tag names where appropriate is
left to individual ports' maintainers.

Approved by:		portmgr (tcberner, mentor)
Differential Revision:	https://reviews.freebsd.org/D37077

7d1faa7179

2022-09-28 16:19Mathieu Arnold (mat)

dns/bind9*: fix some race condition in rc script

PR:		265994
MFH:		yes

36ab384abd

2022-09-07 23:58Stefan Eßer (se)

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

fb16dfecae

2022-09-07 23:10Stefan Eßer (se)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)

b7f05445c0

2022-06-20 12:51Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

2327fe6477

2022-06-14 14:12Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

92436afa3d

2022-04-22 17:55Mathieu Arnold (mat)

dns/bind9-devel: upgrade to latest commit

7a9f416ffa

2022-04-11 10:21Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit

While there, remove PORTREVISION option, it has not worked in a long
time, and was never really useful.

9524f35705

2022-04-10 21:11Charlie Li (vishwin)

textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)

d63665f7cd

2022-04-04 09:05Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

df038f5132

2022-03-28 11:50Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

The ISC is doing new strange things in their Makefiles, so add back
gmake to the dependency chain when building DOCS or MANPAGES.

fd68b282ec

2022-02-10 16:35Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

Add back the Administrator Reference Manual in the DOCS option.

3f8d9dce08

2022-01-10 16:15Stefan Eßer (se)

Fix CONFLICTS entries of multiple ports

There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.

This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.

Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
cannot conflict with itself (due to logic in bsd.port.mk that
supresses the pattern match result in that case).

A few ports that set the conflicts variables depending on complex
conditions (e.g. port options), have been left unmodified, despite
probably containing outdated package names.

These changes should only affect the installation of locally built
ports, not the package building with poudriere. They should give an
early indication of the install conflict in cases where currently
the pkg command aborts an installation when it detects that an
existing file would be overwritten,

Approved by:	portmgr (implicit)

bcaf25a8c8

2021-10-12 17:01Tobias Kortkamp (tobik)

*: Clean up some things

- Fix typos
- Fix overwritten variables with focus on master/slave ports
- Remove unreferenced variables
- Sort categories
- Remove redundant option descriptions
- Clean up commented PORTREVISION
- Add missing USES

Reported by:	portscan

ae22a7846a

2021-10-11 17:09Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

be72428b1c

2021-09-27 15:14Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

0a3c220a10

2021-09-20 19:23Mathieu Arnold (mat)

dns/bind9-devel: update to latest commit

4a91cc902b

2021-07-07 16:40Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

8480d9c373

2021-06-28 17:10Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit

3bc35da302

2021-06-21 09:53Mathieu Arnold (mat)

dns/bind9-devel: Fix redirect in WWW

bef213d589

2021-06-21 09:53Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit

9913ea5a5c

2021-06-15 10:59Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

0384b3076f

2021-06-07 10:23Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

eefb2f5644

2021-05-31 19:43Don Lewis (truckman)

devel/protobuf-c: Bump PORTREVISION of dependent ports

Bump the PORTREVISION of ports that use protobuf-c and bake in the value
of PROTOBUF_C_VERSION*.
Sponsored by:	Farsight Security, Inc.

0926031bce

2021-05-31 08:43Mathieu Arnold (mat)

dns/bind9-devel: Update to latets commit.

1d328f5b43

2021-05-25 09:46Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

2fa1ab34a6

2021-05-17 10:51Mathieu Arnold (mat)

Update to latest commit.

98f6df463f

2021-05-10 09:49Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

4a025a9c50

2021-05-03 14:56Mathieu Arnold (mat)

Update to latest commit.

4eb3d4626a

2021-04-26 10:32Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

8778bf6cff

2021-04-19 11:54Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

33a9e212a9

2021-04-12 17:38Mathieu Arnold (mat)

Update to latest commit.

2d526e1882

2021-04-09 20:44Matthias Fechner (mfechner)

Regenerate all distfiles using gitlab as source.

This regeneration is required as the new gitlab version changed
the address and the directory the source files can be downloaded.

This commit also applies some small fixes to make sure all ports using
gitlab are buildable.

Reviewed by:	mat
Approved by:	portmgr
Differential Revision:	https://reviews.freebsd.org/D29628

911f04257e

2021-04-06 16:31Mathieu Arnold (mat)

all: Remove all other $FreeBSD keywords.

135fdeebb9

2021-04-06 16:31Mathieu Arnold (mat)

Remove # $FreeBSD$ from Makefiles.

305f148f48

2021-04-06 11:39Mathieu Arnold (mat)

dns/bind9-devel: Update to latest commit.

1023538d52

2021-03-29 11:03Mathieu Arnold (mat)

Update to latest commit.

75827bf750

2021-03-22 16:14Mathieu Arnold (mat)

Update to latest commit.

059d02cb67

2021-03-15 17:09Mathieu Arnold (mat)

Update to latest commit.

While there, transition from master/slave to primary/secondary in the
default configuration files.

PR:		253799

1357e5449c

2021-03-08 13:53Mathieu Arnold (mat)

Update to latest commit.

0dd98faa70

2021-03-01 18:17Mathieu Arnold (mat)

Update to latest commit.

104475eae0

2021-02-22 16:33Mathieu Arnold (mat)

Update to latest commit:

7ac64f7466

2021-02-15 14:02Mathieu Arnold (mat)

Update to latest commit.

0e302cfa7d

2021-02-01 16:44Mathieu Arnold (mat)

Update to latest commit.

7a846cc383

2021-01-04 14:55Mathieu Arnold (mat)

Update to latest commit.

63e7b6278b

2020-11-30 12:35Mathieu Arnold (mat)

Update to latest commit.

e30814efa0

2020-11-16 12:01Mathieu Arnold (mat)

Update to latest commit.

f1cb88df89

sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23
deskutils/xdg-desktop-portal 2 CVEs · 8.8 fixed 1.22.1	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21