CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

dns/bind9-devel 9.21.27

BIND DNS suite with updated DNSSEC and DNS64

Port info

Maintainer
mat@FreeBSD.org
Packages
latest: 9.21.27
Upstream
up to date
Last update
to 9.21.27 · 07723370c8
Quarterly
2026Q4: 9.21.27 · last MFH 077013700a
Formerly
dns/bind913 until 2019-05-16
WWW
https://www.isc.org/bind/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install bind9-devel
installs 9.21.27 from latest; from quarterly (2026Q4) 9.21.27
Port
# cd /usr/ports/dns/bind9-devel && make install clean
# make -C /usr/ports/dns/bind9-devel config  # change options first
Size
9.5 MiB download · 27 MiB installed
Depends on
databases/lmdb0 0.9.36_1, devel/fstrm 0.6.1_1, devel/json-c 0.19_1, devel/libedit 3.1.20260512,1, devel/libuv 1.52.1, devel/protobuf-c 1.5.2, dns/bind-tools 9.20.30, dns/libidn2 2.3.8, sysutils/liburcu 0.15.7, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MPL20
Options
6 of 13 on in the package: DNSTAP DOCS GSSAPI_BASE IDN STATS_JSON STATS_XML
Show the 7 options that are off
GEOIP GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE OVERRIDECACHE QUERYTRACE START_LATE
pkg-message
Shown after installing
BIND requires configuration of rndc, including a "secret"
key.  The easiest, and most secure way to configure rndc is
to run 'rndc-confgen -a' to generate the proper conf file,
with a new random key, and appropriate file permissions.

The /usr/local/etc/rc.d/named script will do that for you.

If using syslog to log the BIND9 activity, and using a
chroot'ed installation, you will need to tell syslog to install
a log socket in the BIND9 chroot by running:

  # sysrc altlog_proglist+=named

And then restarting syslogd with: service syslogd restart
Shown after upgrading
The BIND9 port was changed to respect upstream's change
concerning master and slave that were replaced by primary and
secondary, all the references in the sample files were updated
to reflect that.
Shown always
+------------------------------------------------------------+
|THIS IS A DEVELOPMENT VERSION OF BIND, IT WILL EAT YOUR DATA|
+------------------------------------------------------------+

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 169.21.279.21.26–
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 159.21.279.21.26–
FreeBSD 149.21.279.21.269.21.27

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 9.21.27.

Fixed (11)

Show 11 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (403)

Mathieu Arnold (mat)
Update to commit 2df6324.

Sponsored by:	Absolight
ad02e0f4df
Mathieu Arnold (mat)
Update to commit e13d04f.

Sponsored by:	Absolight
b9fcdecf5f
Mathieu Arnold (mat)
Add a bind9 development version, extracted from their git repository.

Requested by:	many
Sponsored by:	Absolight
93272c5ded