Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: mat@FreeBSD.org
Packages: latest: 9.21.27
Upstream: up to date
Last update: 2026-10-21 to 9.21.27 · 07723370c8
Quarterly: 2026Q4: 9.21.27 · last MFH 2026-10-21 077013700a
Formerly: dns/bind913 until 2019-05-16
WWW: https://www.isc.org/bind/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install bind9-devel

installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27

Port

# cd /usr/ports/dns/bind9-devel && make install clean

# make -C /usr/ports/dns/bind9-devel config  # change options first

Size

9.5 MiB download · 27 MiB installed

Depends on

databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0

License

MPL20

Options

6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML

Show the 7 options that are off

GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE

pkg-message

Shown after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

Shown after upgrading

The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.

Shown always

+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	9.21.27	9.21.26	–
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed

VuXML entries whose affected range the packaged version has left.

DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilitiesentered 2024-02-13

CVE-2023-50387, CVE-2023-50868

BIND -- multiple vulnerabilitiesentered 2017-04-13

CVE-2017-3136, CVE-2017-3137, CVE-2017-3138

BIND -- multiple vulnerabilitiesentered 2017-01-12

CVE-2016-9131, CVE-2016-9147, CVE-2016-9444, CVE-2016-9778

BIND -- Remote Denial of Service vulnerabilityentered 2016-11-02

CVE-2016-8864

BIND -- Remote Denial of Service vulnerabilityentered 2016-09-28

CVE-2016-2776

BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfersentered 2016-08-10

CVE-2016-6170, CVE-2016-6171, CVE-2016-6172, CVE-2016-6173

bind -- denial of service vulnerabilityentered 2016-08-06

CVE-2016-2775

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1285

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1286

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-2088

bind -- multiple vulnerabilitiesentered 2015-12-16

CVE-2015-3193, CVE-2015-8000, CVE-2015-8461

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

2019-01-07 15:08Mathieu Arnold (mat)

Update to latest commit.

e13271eb74

2019-01-06 21:39Sunpoet Po-Chuan Hsieh (sunpoet)

Update dns/libidn2 to 2.1.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://gitlab.com/libidn/libidn2/blob/master/NEWS

06e735460e

2018-12-24 13:49Mathieu Arnold (mat)

Update to latest commit.

a0a51888df

2018-12-17 15:29Mathieu Arnold (mat)

Update to latest commit.

While there, rename MINCACHE option, most of its features have been
integrated in BIND9, the only remaining bit of the patch is the override
cache feature to force all cached TTL to a specific one.

9a19dbbd5e

2018-12-13 10:06Mathieu Arnold (mat)

Update to 9.11.5-P1, 9.12.3-P1, 9.13.5.

While there:
- Don't disable symbol table generation when building WITH_DEBUG.
- Try and make sure nullfs can really be used in a more robustt and
  centralized way.
- Make sure all changes are sync'ed among all BIND9 ports.

794e28f05a

2018-12-12 02:35Gerald Pfeifer (gerald)

Bump PORTREVISION for ports depending on the canonical version of GCC defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t GCC 8.2 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.

PR:		231590

a9f015d155

2018-12-10 14:39Mathieu Arnold (mat)

Update to latest commit.

The filter-aaaa feature is now a pluggable module.
While there, ipv6 is not optional any more.

4dc8511880

2018-12-05 21:01Mark Linimon (linimon)

These ports now build on powerpc64.

While here, pet portlint.

Approved by:	portmgr (tier-2 blanket)

a3973d3826

2018-12-04 15:31Mathieu Arnold (mat)

Update to latest commit.

ccf454b46c

2018-11-26 13:03Mathieu Arnold (mat)

Update to latest commit.

c214c50f54

2018-11-22 10:54Mathieu Arnold (mat) · as dns/bind913

Update to 9.13.4.

badd888f52

2018-11-20 17:10Mathieu Arnold (mat)

Update to latest commit.

adfa184b9d

2018-11-12 18:28Mathieu Arnold (mat)

Update to latest commit.

d664f7acce

2018-11-05 09:37Mathieu Arnold (mat)

Update to latest commit.

8787dea6a8

2018-11-02 10:59Mathieu Arnold (mat)

Fix build on powerpc64.

PR:		231786
Submitted by:	Piotr Kubaj

9ae23125ac

2018-10-31 16:47Mathieu Arnold (mat)

Update to latest commit.

33bfd768cb

2018-10-24 10:06Mathieu Arnold (mat)

Update to latest commit.

ffb22c70b1

2018-10-15 19:10Mathieu Arnold (mat)

Update to latest commit.

a7924563a6

2018-10-08 12:15Mathieu Arnold (mat)

Update to latest commit.

8b3077b380

2018-10-01 16:27Mathieu Arnold (mat)

Update to latest commit.

59cc109ed3

2018-09-25 16:25Mathieu Arnold (mat)

Fix build on i386.

eef8b139b6

2018-09-24 11:31Mathieu Arnold (mat)

Update to latest commit.

b5c3146106

2018-09-20 16:12Mathieu Arnold (mat) · as dns/bind913

Update to 9.13.3.

Cleanup options.

f81bec1730

2018-09-17 13:59Mathieu Arnold (mat)

Update to latest commit.

68c134bfe0

2018-09-10 15:16Mathieu Arnold (mat)

Various cleanup & fixes post-DOCS/EXAMPLES cleanup.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine

cde7011950

2018-09-10 12:29Mathieu Arnold (mat)

Update to latest commit.

847812242b

2018-09-06 00:01Sunpoet Po-Chuan Hsieh (sunpoet)

Update devel/json-c to 0.13.1

- Add my LOCAL to MASTER_SITES
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/json-c/json-c/blob/master/ChangeLog
PR:		231007
Exp-run by:	antoine

29632fcc45

2018-09-03 14:38Mathieu Arnold (mat)

Update to latest commit

a50073967b

2018-08-27 15:51Mathieu Arnold (mat)

Update to latest (building) commit.

Cleanup obsolete options.

c944472789

2018-08-24 13:49Mathieu Arnold (mat)

Permit using allow-new-zones, LMDB, and a chrooted environment.

Fixes this obscure and not at all helpful message:
mdb_env_open of '_default.nzd' failed: No such file or directory

PR:		229125
Reported by:	Tomáš Čiernik
MFH:		2018Q3

46de96c295

2018-08-20 12:20Mathieu Arnold (mat)

Update to latest commit.

a392065761

2018-08-20 12:20Mathieu Arnold (mat)

Update to v5.29.1-93-g8d8d86ac0a.

095e70078d

2018-08-13 15:26Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

e0d56ca9a1

2018-08-06 13:20Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

76ece37c2c

2018-07-30 13:59Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

15c4862331

2018-07-23 15:27Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

73583fab5f

2018-07-16 13:09Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

4d06eff7b5

2018-07-11 11:37Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

ed239a5762

2018-07-11 11:36Mathieu Arnold (mat) · as dns/bind913

Update BIND9 ports to 9.11.4, 9.12.2 and 9.13.2.

Sponsored by:	Absolight

5f2f83cc31

2018-07-02 15:48Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

1e62298229

2018-06-25 16:39Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

efc0ec5fb6

2018-06-18 10:17Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

ecb8e37d49

2018-06-15 15:16Mathieu Arnold (mat) · as dns/bind913

Second part of the previous commit, somehow lost the first time.

Sponsored by:	Absolight

cd95a0029c

2018-06-15 14:55Mathieu Arnold (mat) · as dns/bind913

Update to 9.13.1.

Sponsored by:	Absolight

327414735f

2018-06-14 17:42Mathieu Arnold (mat)

Include a patch to fix CVE-2018-5738 in all the BIND9 ports.

MFH:		2018Q2 (blanket)
Security:	CVE-2018-5738
Sponsored by:	Absolight

ff748a9b40

2018-06-11 13:56Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

2f62e59b3e

2018-06-06 12:31Mathieu Arnold (mat)

Move things around a bit to be more handbook compliant.

Sponsored by:	Absolight

d37ee3b20d

2018-06-05 01:42Mark Linimon (linimon)

Mark as broken on powerpc64.

Approved by:	portmgr (tier-2 blanket)

de4b871682

2018-06-04 14:07Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

9f882387b0

2018-05-28 11:47Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

d80b3168f1

devel/libmsiecf 1 unaddressed · 6.8	Oct 26
net/ndpi 1 unaddressed · 6.9	Oct 26
audio/speex 1 unaddressed · 8.3	Oct 26
devel/libphdi 1 unaddressed · 6.9	Oct 26
audio/furnace 2 unaddressed · 6.9	Oct 26
sysutils/libfvde 2 unaddressed · 6.8	Oct 26
audio/gbsplay 3 unaddressed · 6.8	Oct 26
archivers/snappy-java 4 unaddressed · 8.7	Oct 26
www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21