Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: mat@FreeBSD.org
Packages: latest: 9.21.27
Upstream: up to date
Last update: 2026-10-21 to 9.21.27 · 07723370c8
Quarterly: 2026Q4: 9.21.27 · last MFH 2026-10-21 077013700a
Formerly: dns/bind913 until 2019-05-16
WWW: https://www.isc.org/bind/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install bind9-devel

installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27

Port

# cd /usr/ports/dns/bind9-devel && make install clean

# make -C /usr/ports/dns/bind9-devel config  # change options first

Size

9.5 MiB download · 27 MiB installed

Depends on

databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0

License

MPL20

Options

6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML

Show the 7 options that are off

GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE

pkg-message

Shown after installing

BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart

Shown after upgrading

The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.

Shown always

+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	9.21.27	9.21.26	–
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	9.21.27	9.21.26	–
FreeBSD 14	9.21.27	9.21.26	9.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed

VuXML entries whose affected range the packaged version has left.

DNSSEC validators -- denial-of-service/CPU exhaustion from KeyTrap and NSEC3 vulnerabilitiesentered 2024-02-13

CVE-2023-50387, CVE-2023-50868

BIND -- multiple vulnerabilitiesentered 2017-04-13

CVE-2017-3136, CVE-2017-3137, CVE-2017-3138

BIND -- multiple vulnerabilitiesentered 2017-01-12

CVE-2016-9131, CVE-2016-9147, CVE-2016-9444, CVE-2016-9778

BIND -- Remote Denial of Service vulnerabilityentered 2016-11-02

CVE-2016-8864

BIND -- Remote Denial of Service vulnerabilityentered 2016-09-28

CVE-2016-2776

BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfersentered 2016-08-10

CVE-2016-6170, CVE-2016-6171, CVE-2016-6172, CVE-2016-6173

bind -- denial of service vulnerabilityentered 2016-08-06

CVE-2016-2775

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1285

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-1286

bind -- denial of service vulnerabilityentered 2016-03-28

CVE-2016-2088

bind -- multiple vulnerabilitiesentered 2015-12-16

CVE-2015-3193, CVE-2015-8000, CVE-2015-8461

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

2017-09-25 15:01Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

9f0310eea0

2017-09-18 12:41Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

7763a396ca

2017-09-11 14:57Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

45f7bd90f3

2017-09-05 13:00Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

9bbd7d2909

2017-09-04 16:29Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

21dca707fd

2017-08-28 14:42Mathieu Arnold (mat)

Update to latest snapshot.

Sponsored by:	Absolight

59bf5722c9

2017-08-21 13:50Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

dbb6b553fc

2017-08-14 15:25Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

a797007c81

2017-08-07 12:37Mathieu Arnold (mat)

Fix build with --enable-querytrace.

Sponsored by:	Absolight

2b8247abab

2017-08-07 12:21Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

6a101e88fb

2017-07-31 12:43Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

14a6f9a666

2017-07-25 14:22Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

db8e560a4a

2017-07-17 12:20Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

9e4df9d4bf

2017-07-10 20:48Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

292588c0f2

2017-07-03 14:14Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

18add6bd52

2017-06-30 14:11Mathieu Arnold (mat)

Update to latest commit.

Security:	CVE-2017-3142
Security:	CVE-2017-3143
Sponsored by:	Absolight

6639e60fd3

2017-06-26 16:52Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

30d3468ce0

2017-06-19 12:32Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

d13f94ee7a

2017-06-15 13:46Mathieu Arnold (mat)

Update to latest commit.

MFH:		2017Q2
Security:	CVE-2017-3140
Security:	CVE-2017-3141
Sponsored by:	Absolight

3fb8800bcd

2017-06-15 00:54Mathieu Arnold (mat)

Remove special handling for testing and documentation domains, per RFC 6761 recommendations.

While there:
- Fix invalid syntax in sample slave config.
- Add a message about having syslogd working with BIND9 chroot.

PR:		217915
Reported by:	eserte12 yahoo de
Sponsored by:	Absolight

336fb2ebbb

2017-06-06 10:50Mathieu Arnold (mat)

Update to latest snapshot.

Sponsored by:	Absolight

c475168a20

2017-05-29 14:30Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

a73c17a023

2017-05-22 14:16Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

7340c6df0a

2017-05-15 16:41Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

840b1378bc

2017-05-09 14:55Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

bd4783b394

2017-05-02 12:46Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

51aa0de6f7

2017-04-24 12:26Mathieu Arnold (mat)

Update to latest snapshot.

Sponsored by:	Absolight

b9c2d4f028

2017-04-20 15:12Mathieu Arnold (mat)

Update to 9.9.10, 9.10.5, 9.11.1 and 9.12 to latest snapshot.

While there:

Make it more maintainable by sorting stuff in the Makefile and removing
vestigial pre 10.3 things.

Refresh the root zone hints.

"Fix" the configuration section telling you to get some top level
zones from f.root-servers.net, which does not allow axfr any more. [1]

PR:		218656 [1]
Reported by:	Thomas Steen Rasmussen / Tykling [1]
MFH:		2017Q2
Sponsored by:	Absolight

d4de1a5f8c

2017-04-13 12:15Mathieu Arnold (mat)

Unbreak rndc calls when using non default rndc.key location.

PR:		218335
Sponsored by:	Absolight

0688061ed1

2017-04-13 12:15Mathieu Arnold (mat)

Update to latest commit.

Security:	c6861494-1ffb-11e7-934d-d05099c0ae8c
Sponsored by:	Absolight

b86cf46531

2017-02-20 17:05Mathieu Arnold (mat)

Update to latest snapshot.

Sponsored by:	Absolight

ccf4d8ede3

2017-02-13 13:38Mathieu Arnold (mat)

Update to latest commit.

MFH:		2017Q1
Security:	CVE-2017-3135
Sponsored by:	Absolight

b8e18e40c3

2017-01-23 15:21Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

49c8848b33

2017-01-12 09:15Mathieu Arnold (mat)

Update to latest commit.

MFH:            2017Q1
Security:       CVE-2016-9131 CVE-2016-9147 CVE-2016-9444 CVE-2016-9778
Sponsored by:   Absolight

855408c6d6

2017-01-02 11:49Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

6e50202209

2016-12-26 15:00Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

2942c4d61d

2016-12-19 13:12Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

d865a36c08

2016-12-12 15:48Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

35b7ad566d

2016-12-09 16:40Mathieu Arnold (mat)

Cleanup CONFLICTS.

Sponsored by:	Absolight

265c712184

2016-12-09 16:40Mathieu Arnold (mat)

This was fixed by the previous commit.

Sponsored by:	Absolight

79e3454fc9

2016-12-09 16:02Mathieu Arnold (mat)

Fixup libedit for all BIND9 ports, and fix spurious json dependency by adding an option.

PR:		215170
Reported by:	sunpoet
Sponsored by:	Absolight

36062bcbe6

2016-12-05 14:41Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

5f2b4e7265

2016-11-14 09:52Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

4ee2188dce

2016-11-02 11:49Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

55c13616e4

2016-10-24 14:26Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

84854faa7c

2016-10-19 16:23John Marino (marino)

dns/bind9-devel: Set LDFLAGS for ports-based libedit/ncurses

The latest version failed to configure using ports libedit+ncurses:
  configure: checking for readline with -ledit
  checking for readline... no
  configure: checking for readline with -ledit -lterminfo
  checking for readline... no
  configure: checking for readline with -ledit -ltermcap
  checking for readline... no
  configure: checking for readline with -ledit -lncurses
  checking for readline... no
  configure: checking for readline with -ledit -lcurses
  checking for readline... no
  configure: error: The readline library was not found.

Setting LDFLAGS allows the build to complete as before.

Approved by:	just-fix-it/explicit LDFLAGS blanket

b111cf4a09

2016-10-17 14:03Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

b65113bb10

2016-10-10 12:58Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

0bdefc78dc

2016-10-04 16:37Mathieu Arnold (mat)

Remarke MAKE_JOBS_UNSAFE everywhere.

Sponsored by:	Absolight

8ee6dea551

2016-10-03 13:57Mathieu Arnold (mat)

Update to latest commit.

Sponsored by:	Absolight

1ad22401e6

devel/libmsiecf 1 unaddressed · 6.8	Oct 26
net/ndpi 1 unaddressed · 6.9	Oct 26
audio/speex 1 unaddressed · 8.3	Oct 26
devel/libphdi 1 unaddressed · 6.9	Oct 26
audio/furnace 2 unaddressed · 6.9	Oct 26
sysutils/libfvde 2 unaddressed · 6.8	Oct 26
audio/gbsplay 3 unaddressed · 6.8	Oct 26
archivers/snappy-java 4 unaddressed · 8.7	Oct 26
www/py-tornado 3 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21