CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

0
unaddressed
0
VuXML only
11
fixed
0
open problem reports

Port info

Maintainer
mat@FreeBSD.org
Packages
latest: 9.21.27
Upstream
up to date
Last update
to 9.21.27 · 07723370c8
Quarterly
2026Q4: 9.21.27 · last MFH 077013700a
Formerly
dns/bind913 until 2019-05-16
WWW
https://www.isc.org/bind/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install bind9-devel
installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27
Port
# cd /usr/ports/dns/bind9-devel && make install clean
# make -C /usr/ports/dns/bind9-devel config  # change options first
Size
9.5 MiB download · 27 MiB installed
Depends on
databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MPL20
Options
6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML
Show the 7 options that are off
GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE
pkg-message
Shown after installing
BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart
Shown after upgrading
The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.
Shown always
+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.21.279.21.26–
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

Mathieu Arnold (mat)
Typo.

Noticed by:	danfe
Sponsored by:	Absolight
6a73b33e92
Mathieu Arnold (mat)
Add BIND9 9.13.0.

The ISC changed their release model, they are now doing
odd-unstable/even-stable release numbering.  This is a development
version, consider it alpha/beta quality.  The next stable release will
be 9.14.0.

Changes:	https://kb.isc.org/article/AA-01612
Sponsored by:	Absolight
d34e89a5ac
Mathieu Arnold (mat)
Add PY_FLAVOR to Python module dependencies.

Sponsored by:	Absolight
8dcaabcd6e
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
51d67d4029
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
d9f6deb906
Mathieu Arnold (mat)
Update to latest commit.

OpenSSL is no longer optional, and upstream switched from idnkit to libidn2.

Sponsored by:	Absolight
07784a692b
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
b9be5ce449
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
98cc2b734d
Mathieu Arnold (mat)
Fix build when LOCALBASE!=/usr/local.

PR:		227554
Submitted by:	John Hein
Sponsored by:	Absolight
f7b2cf3866
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
9522488e36
Mathieu Arnold (mat)
Update to latest commit.

While there, add some placeholders for things to change when a new
branch gets there.

Sponsored by:	Absolight
b0f2255552
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
a91316f51a
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
9d96fdf5d7
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
c7ba72b298
Mathieu Arnold (mat)
Update to latest commit.

While there, use the GitLab integration.

Sponsored by:	Absolight
d81c3e13d9
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
055ff18377
Mathieu Arnold (mat)
Update to latest commit.

The ISC has a gitlab now, use it.

Sponsored by:	Absolight
6d2c3c1817
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
ac7fbdd85e
Mathieu Arnold (mat)
Teach named where its pid file should be by default, to be consistent with the default configuration, rc script, man pages...

PR:		225687
Reported by:	John W. O'Brien
Sponsored by:	Absolight
bd282bafcc
Mathieu Arnold (mat)
Update to latest snapshot.

Sponsored by:	Absolight
a33a392ce2
Mathieu Arnold (mat)
TCP_FASTOPEN only concerns named, not the tools.

Reported by:	sunpoet
Sponsored by:	Absolight
d197ddf9b7
Mathieu Arnold (mat)
Add a TCP_FASTOPEN option (default on) to allow not building it in. [1]

It is annoying because it outputs one line saying it cannot enable
TCP_FASTOPEN when the deamon starts.

While there, discover that FILTER_AAAA is always enabled in 9.12+ and no
longer an option, so remove it.

PR:		217288 [1] (based on)
Reported by:	doktornotor mailinator com
Sponsored by:	Absolight
82419fcd32
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
0ea723d89f
Mathieu Arnold (mat)
Catch up with the conflicts lines in the BIND9 ports.

Sponsored by:	Absolight
2b194cdeb1
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
e1d753b782
Mathieu Arnold (mat)
Update named.root.

Sponsored by:	People afraid of a nuclear holocaust.
be414a03fe
Mathieu Arnold (mat)
Update to latest commit.

MFH:		2018Q1
Security:	CVE-2017-3145
Sponsored by:	Absolight
0ae41b7f2c
Mathieu Arnold (mat)
Add a TUNING_LARGE option.

https://kb.isc.org/article/AA-01314/0

Tunes certain compiled-in constants and default settings to
values better suited to large servers with 12/16GB+ of memory.
This can improve performance on such servers, but will consume
more memory and may degrade performance on smaller systems.

PR:		224859
Sponsored by:	Absolight
ee84f127aa
Mathieu Arnold (mat)
Fix altlog_proglist warning when it contains more than the named service.

PR:		224951
Submitted by:	Trix Farrar
Sponsored by:	Absolight
c8e8c7e244
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
e2ed0ec261
Sunpoet Po-Chuan Hsieh (sunpoet)
Update devel/json-c to 0.13

- Add TEST_TARGET
- While I'm here, fix shebang for net/opensips
- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/json-c/json-c/blob/master/ChangeLog
PR:		224675
Exp-run by:	antoine
97064443de
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
9ddae97dcc
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
e9677e7346
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
d0892f4d89
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
4a475c3cc2
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
0bfb42708e
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
d6bdb50425
Mathieu Arnold (mat)
Add an extra check to make sure syslogd is correctly configured when using chroot.

Sponsored by:	Absolight
d12663fa08
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
20b7e462be
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
5908ef2de7
Mathieu Arnold (mat)
Add a symlink to named's session-keyfile.

Using nsupdate -l, and chroot was broken because nsupdate could not find
the keyfile by itself.

PR:		223403
Submitted by:	Harald Schmalzbauer
Sponsored by:	Absolight
8ab9e7cb3e
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
98b703fa68
Danilo G. Baio (dbaio)
Update license of ports using MPL (without version)

All ports now should use MPL[10|11|20] license.

Approved by:	portmgr (blanket)
c27d4e377f
Mathieu Arnold (mat)
Enable the PYTHON option by default, it brings a few interesting DNSSEC tools.

Sponsored by:	Absolight
3245e6532c
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
cf8142cee1
Mathieu Arnold (mat)
Install the mtree file as .sample to allow users to change them.

Sponsored by:	Absolight
789f1484de
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
82f10ad7ba
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
2576bb391a
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
11b44a3462
Mathieu Arnold (mat)
Update to latest commit.

Sponsored by:	Absolight
a20e80639d
« newest← newerpage 6 of 9older →oldest »