Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: mat@FreeBSD.org
Packages: latest: 9.21.27
Upstream: up to date
Last update: 2026-10-21 to 9.21.27 · 07723370c8
Quarterly: 2026Q4: 9.21.27 · last MFH 2026-10-21 077013700a
Formerly: dns/bind913 until 2019-05-16
WWW: https://www.isc.org/bind/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install bind9-devel

installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27

Port

# cd /usr/ports/dns/bind9-devel && make install clean

# make -C /usr/ports/dns/bind9-devel config  # change options first

Size

9.5 MiB download · 27 MiB installed

Depends on

databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0

License

MPL20

Options

6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML

Show the 7 options that are off

GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE

pkg-message

Shown after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

Shown after upgrading

The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.

Shown always

+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	9.21.27	9.21.26	–
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed

VuXML entries whose affected range the packaged version has left.

DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilitiesentered 2024-02-13

CVE-2023-50387, CVE-2023-50868

BIND -- multiple vulnerabilitiesentered 2017-04-13

CVE-2017-3136, CVE-2017-3137, CVE-2017-3138

BIND -- multiple vulnerabilitiesentered 2017-01-12

CVE-2016-9131, CVE-2016-9147, CVE-2016-9444, CVE-2016-9778

BIND -- Remote Denial of Service vulnerabilityentered 2016-11-02

CVE-2016-8864

BIND -- Remote Denial of Service vulnerabilityentered 2016-09-28

CVE-2016-2776

BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfersentered 2016-08-10

CVE-2016-6170, CVE-2016-6171, CVE-2016-6172, CVE-2016-6173

bind -- denial of service vulnerabilityentered 2016-08-06

CVE-2016-2775

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1285

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1286

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-2088

bind -- multiple vulnerabilitiesentered 2015-12-16

CVE-2015-3193, CVE-2015-8000, CVE-2015-8461

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

2019-09-19 00:35Mathieu Arnold (mat)

Add GEOIP back here too.

0d79c54a74

2019-09-16 23:10Mathieu Arnold (mat)

Update to latest commit.

22f149f3d1

2019-09-02 19:44Mathieu Arnold (mat)

Update to latest commit.

043e594f3f

2019-08-26 11:22Mathieu Arnold (mat)

Update to latest commit.

0c5e0fd5ea

2019-08-19 14:17Mathieu Arnold (mat)

Update to latest commit.

ef934afd92

2019-08-12 16:20Mathieu Arnold (mat)

Update to latest commit.

f3ecc71460

2019-08-06 15:25Mathieu Arnold (mat)

Update to latest commit.

d15714caa8

2019-07-30 19:27Mathieu Arnold (mat)

Update to latest commit.

451f5847ea

2019-07-22 16:14Mathieu Arnold (mat)

Update to latest commit.

5514cdf8bc

2019-07-15 15:01Mathieu Arnold (mat)

Update to latest commit.

c8858de1fa

2019-07-08 16:22Mathieu Arnold (mat)

Update to latest commit.

25fe681a30

2019-07-01 18:21Mathieu Arnold (mat)

Update to latest commit.

e6586f1b47

2019-06-25 14:52Mathieu Arnold (mat)

Update to latest commit.

9638a2aa62

2019-06-19 17:20Mathieu Arnold (mat)

Convert BIND9's pkg-message files to UCL.

bbee35283b

2019-06-17 23:52Mathieu Arnold (mat)

Update to latest commit.

12eba36807

2019-06-13 14:50Mathieu Arnold (mat)

Fix build when not using WITH_DEBUG.

Reported by:	pkg-fallout@

ff4b5fbe0f

2019-06-11 14:18Mathieu Arnold (mat)

Fix named when using plugins and chroot.

BIND9 introduced plugins and migrated the filter-aaaa feature to a
plugin.
As it loads its plugins late in the startup process (read after chroot),
the plugins need to be available in the chroot.

Also, refactor the code now that a second directory need to be handled.

PR:		238011
Reported by:	ryan@timewasted.me
MFH:		2019Q2

897ac70645

2019-06-10 14:30Mathieu Arnold (mat)

Update to latest commit.

8d842276fc

2019-06-04 23:24Mathieu Arnold (mat)

For some reason, this does not always get picked up correctly.

f160f37222

2019-06-03 14:43Mathieu Arnold (mat)

Update to latest commit.

aca6811141

2019-05-20 15:04Mathieu Arnold (mat)

Update to latest commit.

15cf8e19a4

2019-05-16 09:32Mathieu Arnold (mat) · as dns/bind913

Remove expired dns/bind913 port.

e332fa180e

2019-05-13 09:52Mathieu Arnold (mat)

Update to latest commit.

34240cdcda

2019-04-29 14:44Mathieu Arnold (mat)

Update to latest commit.

4687dd032a

2019-04-25 18:12Mathieu Arnold (mat)

Prevent bind-tools from inheriting CONFLICTS.

I don't see how this can be a problem as bind-tools is never built after
bind9*.

Reported by:	Matthew D. Fuller

c4002d9363

2019-04-25 16:54Mathieu Arnold (mat)

Switch to using OPTIONS_EXCLUDE to avoid picking up strays.

If you had things installed, say, lmdb, it would be picked up and linked
with.

Reported by:	sunpoet

efb644dc6c

2019-04-23 15:04Mathieu Arnold (mat)

Remove conflicts from bind-tools and the server ports.

All servers now depend on the same bind-tools, from the latest BIND9
release.

Chase dependencies to make sure they now depend on the correct port.

Differential Revision:	https://reviews.freebsd.org/D19922

33634159f7

2019-04-23 14:09Mathieu Arnold (mat)

Update to latest commit.

a0ecd4137d

2019-04-15 14:00Mathieu Arnold (mat)

Update to latest commit.

9078f249ee

2019-04-10 18:02Mathieu Arnold (mat)

Update to latest commit.

59db368782

2019-04-01 10:36Mathieu Arnold (mat)

Update to latest commit.

3afbf9d471

2019-03-25 10:57Mathieu Arnold (mat)

Update to latest commit.

63ba5d6862

2019-03-19 09:38Mathieu Arnold (mat)

Make WITH_DEBUG actually build and be as helpful as possible.

c2ef5a47f0

2019-03-18 16:37Mathieu Arnold (mat)

Update to latest commit.

add78b4509

2019-03-12 17:11Mathieu Arnold (mat)

Update WWW.

PR:		236196
Submitted by:	Leonid Nevecherya

c517e3ebf0

2019-03-11 17:52Mathieu Arnold (mat)

Update to latest commit.

4af6b72f9b

2019-03-04 13:17Mathieu Arnold (mat)

Update to latest commit.

2c5fa92c17

2019-03-01 11:10Mathieu Arnold (mat)

Add BIND 9.14.0 first release candidate.

37346d336a

2019-02-25 10:57Mathieu Arnold (mat) · as dns/bind913

Update to 9.13.7.

4f7643b652

2019-02-25 10:57Mathieu Arnold (mat)

Update to latest commit.

32d4905b88

2019-02-18 15:01Mathieu Arnold (mat)

Update to latest commit.

6f6c3fd184

2019-02-11 19:50Mathieu Arnold (mat)

Update to latest commit.

b728faaee8

2019-02-10 00:25Sunpoet Po-Chuan Hsieh (sunpoet)

Update dns/libidn2 to 2.1.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://gitlab.com/libidn/libidn2/blob/master/NEWS

dc7a01a3c8

2019-02-09 13:11Mathieu Arnold (mat) · as dns/bind913

Update to 9.13.6.

c999767558

2019-02-04 18:29Mathieu Arnold (mat)

Update to latest commit.

6165d88d30

2019-01-29 13:18Mathieu Arnold (mat)

Use official patch instead of my half baked one.

No functionnal changes.

47efe65491

2019-01-28 14:00Mathieu Arnold (mat)

Update to latest commit.

77376421ab

2019-01-21 16:44Mathieu Arnold (mat)

Update to latest commit.

112bc7b561

2019-01-14 09:54Mathieu Arnold (mat)

Update to latest commit.

934624a68f

2019-01-13 21:58Adam Weinberger (adamw)

Remove GeoIP-related options. Where possible, replace GeoIP 1 defaults with GeoIP 2.

Also, as suggested by zi, add an UPDATING note about this.

2eb84a7a05

www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21