CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

0
unaddressed
0
VuXML only
11
fixed
0
open problem reports

Port info

Maintainer
mat@FreeBSD.org
Packages
latest: 9.21.27
Upstream
up to date
Last update
to 9.21.27 · 07723370c8
Quarterly
2026Q4: 9.21.27 · last MFH 077013700a
Formerly
dns/bind913 until 2019-05-16
WWW
https://www.isc.org/bind/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install bind9-devel
installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27
Port
# cd /usr/ports/dns/bind9-devel && make install clean
# make -C /usr/ports/dns/bind9-devel config  # change options first
Size
9.5 MiB download · 27 MiB installed
Depends on
databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MPL20
Options
6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML
Show the 7 options that are off
GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE
pkg-message
Shown after installing
BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart
Shown after upgrading
The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.
Shown always
+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.21.279.21.26–
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

Mathieu Arnold (mat)
Update to latest commit.
a1ad131478
Mathieu Arnold (mat)
Update to latest commit.
23d018c1d7
Mathieu Arnold (mat)
Update to latest commit.
9a0d39ef3e
Mathieu Arnold (mat)
Update to latest commit.
b56b73af91
Mathieu Arnold (mat)
Update to latest commit.
f32e42fb8c
Mathieu Arnold (mat)
Update to latest commit.
7354fc1b89
Mathieu Arnold (mat)
Garbage collect the SIGCHASE option, it was removed in 9.12.

PR:		248938
Submitted by:	John Hein
ca0d9d2cd3
Mathieu Arnold (mat)
Package filter-aaaa.so again.
4839ccfdfa
Mathieu Arnold (mat)
Fix build with Heimdal.

PR:		246591
Submitted by:	epopen gmail com
52d22fbb05
Mathieu Arnold (mat)
Enabled DNSTAP by default.

The ISC recommends having it by default (it is in the packages they
distribute) and the footprint of the dependecies is very small.

While there, cleanup plists.

PR:		237861
Reported by:	Greg Rivers
54933d6c12
Mathieu Arnold (mat)
Remove the TUNING_LARGE option, it is now a no-op.

PR:		244391
Submitted by:	Leo Vandewoestijne
80600e0a2c
Mathieu Arnold (mat)
Update to latest commit.
840a4c40b5
Mathieu Arnold (mat)
Update to latest commit.
76070a7964
Mathieu Arnold (mat)
Update to latest commit.
a8c86f8465
Mathieu Arnold (mat)
Update to latest commit.

While there, move named-journalprint from bind-tools to bind9, it is
only useful on machines with BIND9 running, where journal files actually
exist.  The man page was already in the correct port.
bf3db438d8
Mathieu Arnold (mat)
Update to latest commit.
5c77f25a9b
Mathieu Arnold (mat)
Update to latest commit.
c03ddf9a14
Mathieu Arnold (mat)
Update to latest commit.
4968e43d9d
Mathieu Arnold (mat)
Update to latest commit.
236aa75c51
Mathieu Arnold (mat)
Update to latest commit.
bd53304587
Mathieu Arnold (mat)
Update to latest commit.

While here, fix the bind-min-override-ttl patch. [1]

Submitted by:	Andre Albsmeier [1]
e3fa3ab157
Sunpoet Po-Chuan Hsieh (sunpoet)
Bump PORTREVISION for devel/json-c json-c
aabbea4dfa
Mathieu Arnold (mat)
Add a hook to be able to build dns/bind-tools with dns/bind9-devel.

While there, fixup patches.
8f7615b355
Mathieu Arnold (mat)
Update to latest commits.

Man pages are back.
371cd8e920
Mathieu Arnold (mat)
Update to latest commit.

BIND9 switched to using autoconf, this broke a few things, for example,
man pages are not there any more, plugins are somehow missing too.
29d2ca2029
Mathieu Arnold (mat)
Update to latest commit.
ae928de41b
Mathieu Arnold (mat)
Update to latest commit.
1afaf8ac7c
Mathieu Arnold (mat)
Update to latest commit.
12b8caf42e
Mathieu Arnold (mat)
Remvoe the scary pkg-message from BIND9 9.16.

And make a note that it needs to be removed when a new release comes
along, so that I don't forget next year.

Reported by:	Matthias Fechner
55ac651a0d
Mathieu Arnold (mat)
Add forgotten CONFLICTS lines.
76be8b6ca0
Mathieu Arnold (mat)
Add a couple of things here to ease future new releases.
2d22c8eb70
Mathieu Arnold (mat)
Update to latest commit.
72cb4c9db4
Mathieu Arnold (mat)
Update to latest commit.

While there, run portfmt.
8f17b20df8
Mathieu Arnold (mat)
Update to latest commit.
ec925c83e1
Mathieu Arnold (mat)
Update to latest commit.
779c49db63
Mathieu Arnold (mat)
Update to latest commit.
4b20583ea5
Mathieu Arnold (mat)
Update to latest commit.

Fixes a startup issue.
0835ef5d05
Mathieu Arnold (mat)
Update to latest commit.
e095aaa075
Mathieu Arnold (mat)
Update to latest commit.
29c925447f
Mathieu Arnold (mat)
Update to latest commit.
3369a7ec55
Mathieu Arnold (mat)
Update to latest commit.
e27d8ba87e
Mathieu Arnold (mat)
Update to latest commit.
fcd4c49270
Mathieu Arnold (mat)
Update to latest commit.
6ea10085b9
Mathieu Arnold (mat)
Update to latest commit.
b17dd4ec69
Mathieu Arnold (mat)
Update to latest commit.

Security:	CVE-2019-6475, CVE-2019-6476
b8642346cb
Mathieu Arnold (mat)
Update to latest commit.
aaca021537
Baptiste Daroussin (bapt)
Drop the ipv6 virtual category for d* category as it is not relevant anymore
ebc87904a6
Mathieu Arnold (mat)
Update to latest commit.
9669546782
Mathieu Arnold (mat)
Update to latest commit.
513f52c162
Mathieu Arnold (mat)
Update ti latest commit.
211e42d231
« newest← newerpage 3 of 9older →oldest »