dns/bind9-devel 9.21.27 MidnightBSD

System: MidnightBSD
Repository: mports
Maintainer: [email protected]
Last update: 2026-10-21
Commit: be0be6aa06
License: MPL20
Categories: dns, net

Description

BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are:

DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support

See the CHANGES file for more information on new features.

In the other systems

System

Port

Version

MidnightBSD

dns/bind9-devel

9.21.27

FreeBSD

dns/bind9-devel

9.21.27

HardenedBSD

dns/bind9-devel

9.21.26

GhostBSD

dns/bind9-devel

9.21.26

Install

Binary package:

mport install bind

From mports:

cd /usr/mports/dns/bind9-devel && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	bind>0:dns/bind9-devel
LIB_DEPENDS=	libdns-9.21.27.so:dns/bind9-devel

Dependencies

As this port's Makefile names them.

Library 4

libnghttp2.so : www/libnghttp2
liburcu.so : sysutils/liburcu
libuv.so : devel/libuv
liblmdb.so : databases/lmdb

Build dependencies 4

Run dependencies 4

No port depends on this one.

Configuration

Options name: dns_bind

Option

Default

Description

DNSTAP

Provides fast passive logging of DNS messages

DOCS

off

GEOIP

off

GSSAPI_BASE

off

Using Heimdal in base (nsupdate is broken)

GSSAPI_HEIMDAL

off

Using security/heimdal (nsupdate is broken)

GSSAPI_MIT

off

Using security/krb5

GSSAPI_NONE

Disable

IDN

OVERRIDECACHE

off

Use the override-cache patch

QUERYTRACE

off

Enable the very verbose query tracelogging

START_LATE

off

Start BIND late in the boot process (see help)

STATS_JSON

Enable JSON statistics channel

STATS_XML

Enable XML statistics channel

USES: compiler:c11 cpe gnome libedit meson perl5 pkgconfig ssl tar:xz
Service scripts: none

Files

Manual pages 17

ddns-confgen(8)
filter-a(8)
filter-aaaa(8)
named(8)
named-checkconf(1)
named-checkzone(1)
named-compilezone(1)
named-journalprint(1)
named-makejournal(1)
named-nzd2nzf(1)
named-wireformat(1)
named.conf(5)
rndc(8)
rndc-confgen(8)
rndc.conf(5)
synthrecord(8)
tsig-keygen(8)

pkg-plist 283

bin/named-checkconf
bin/named-checkzone
bin/named-compilezone
bin/named-journalprint
bin/named-makejournal
bin/named-nzd2nzf
bin/named-wireformat
@sample etc/mtree/BIND.chroot.dist.sample
@sample etc/mtree/BIND.chroot.local.dist.sample
@sample etc/bind/named.conf.sample
etc/bind/named.root
etc/bind/primary/empty.db
etc/bind/primary/localhost-forward.db
etc/bind/primary/localhost-reverse.db
include/dns/acl.h
include/dns/adb.h
include/dns/deleg.h
include/dns/dsync.h
include/dns/notify.h
include/dns/rdatavec.h
include/dns/badcache.h
include/dns/bit.h
include/dns/byaddr.h
include/dns/cache.h
include/dns/callbacks.h
include/dns/catz.h
include/dns/cert.h
include/dns/client.h
include/dns/clientinfo.h
include/dns/compress.h
include/dns/db.h
include/dns/dbiterator.h
include/dns/diff.h
include/dns/dispatch.h
include/dns/dlz.h
include/dns/dlz_dlopen.h
include/dns/dns64.h
include/dns/dnssec.h
include/dns/dnstap.h
include/dns/ds.h
include/dns/dsdigest.h
include/dns/dyndb.h
include/dns/ecs.h
include/dns/ede.h
include/dns/edns.h
include/dns/enumclass.h
include/dns/enumtype.h
include/dns/fixedname.h
include/dns/forward.h
include/dns/geoip.h
include/dns/ipkeylist.h
include/dns/iptable.h
include/dns/journal.h
include/dns/kasp.h
include/dns/keydata.h
include/dns/keyflags.h
include/dns/keymgr.h
include/dns/keystore.h
include/dns/keytable.h
include/dns/keyvalues.h
include/dns/lib.h
include/dns/master.h
include/dns/masterdump.h
include/dns/message.h
include/dns/name.h
include/dns/nametree.h
include/dns/ncache.h
include/dns/nsec.h
include/dns/nsec3.h
include/dns/nta.h
include/dns/opcode.h
include/dns/order.h
include/dns/peer.h
include/dns/private.h
include/dns/qp.h
include/dns/rcode.h
include/dns/rdata.h
include/dns/rdataclass.h
include/dns/rdatalist.h
include/dns/rdataset.h
include/dns/rdatasetiter.h
include/dns/rdataslab.h
include/dns/rdatastruct.h
include/dns/rdatatype.h
include/dns/remote.h
include/dns/request.h
include/dns/resolver.h
include/dns/result.h
include/dns/rootns.h
include/dns/rpz.h
include/dns/rriterator.h
include/dns/rrl.h
include/dns/sdlz.h
include/dns/secalg.h
include/dns/secproto.h
include/dns/skr.h
include/dns/soa.h
include/dns/ssu.h
include/dns/stats.h
include/dns/time.h

The first 100 are listed.

distinfo 1

File

Size

SHA256

bind-9.21.27.tar.xz

5.601244e+06

a579fee35da9042b656edcc41580f822c08604d9a5710cec958e8490d7eba306

Master sites 1

ISC/bind9/9.21.27

Commit history 5

Date Commit Credits Log message

2026-10-21

be0be6aa06

Lucas Holt

dns/bind9-devel: update to 9.21.27 [security] (#1865)

## Summary - Update `dns/bind9-devel` 9.21.26 → 9.21.27 (ISC security release). - `pkg-plist`: bump the versioned library names (`lib{dns,isc,isccc,isccfg,ns}-9.21.27.so`) and drop `include/isc/tm.h`, which upstream removed in 9.21.27 (`lib/isc/tm.c` and `lib/isc/include/isc/tm.h` are gone from the tarball). - No `files/patch-*` changes are needed. All three patches apply cleanly, and so does `extrapatch-bind-min-override-ttl` (checked with `patch -C`). ## Security fixes - [CVE-2026-19630](https://kb.isc.org/docs/cve-2026-19630): CPU exhaustion while parsing crafted DNS messages (name decompression) - [CVE-2026-94300](https://kb.isc.org/docs/cve-2026-94300): concurrent GSS-TSIG traffic can terminate named - [CVE-2026-96888](https://kb.isc.org/docs/cve-2026-96888): crash with …

2026-09-16 67bbb4344d Lucas Holt dns/bind920, dns/bind-tools, dns/bind9-devel: security update (14 CVEs) (#1341)

2026-09-06

a05b377b53

Lucas Holt

*: bump PORTREVISION for the textproc/libxml2 2.15 shared library change (#848)

`textproc/libxml2` 2.15 changed SONAME from `libxml2.so.2` to `libxml2.so.16` **and** removed ELF symbol versioning entirely — the new library defines no `LIBXML2_*` versions at all. Consumers built against the old library were never rebuilt, so they still record a dependency on `libxml2.so.2` plus version requirements nothing can satisfy, and fail at load time: ``` ld-elf.so.1: /usr/local/lib/libxml2.so.2: version LIBXML2_2.4.30 required by /usr/local/lib/libevdocument3.so.4 not defined ``` ### Scope `Tools/scripts/bump_revision.pl -f -l textproc/libxml2` — **436 Makefiles**: 323 revisions incremented, 113 gained a `PORTREVISION` line. The diff touches nothing but `PORTREVISION` lines (verified: `git diff -U0` shows no other changed line), and spot-checked ports still …

2026-08-16

7db5ce0f70

Lucas Holt

dns/bind9-devel: fix the staging path in the option install targets

The option helper targets (post-install-DOCS-on and friends) are entries in _FAKE_SEQ and run in the main make, not in the sub-make that fake-post-install starts with FAKE_SETUP. There PREFIX is not stage-prefixed and STAGEDIR is empty, so ${STAGEDIR}${DOCSDIR} resolved to the live /usr/local: the build wrote outside the stage directory and the file was then reported missing, e.g. install ... README.rst /usr/local/share/doc/py312-webcolors /usr/local/share/doc/py312-webcolors/README.rst not installed. Fake failed. Use ${FAKE_DESTDIR} in these targets, as x11-wm/icewm already does. AI-Assisted-by: Claude Opus 5 (1M context) <[email protected]> Signed-off-by: Lucas Holt <[email protected]>

2026-08-04

1da08abdff

Lucas Holt

dns: update BIND ports (#685)

## What changed - Update `dns/bind920` to BIND 9.20.26. - Update `dns/bind9-devel` to BIND 9.21.24 and refresh its installed-file list. - Update `dns/bind918` to final BIND 9.18.50, mark it deprecated, and direct users to `dns/bind920`. ## Validation - `bmake patch` and source builds passed for all three ports with optional documentation disabled. - `dns/bind918` passed `fake` and package generation. - The local `mport.check-fake` validator still reports staged BIND devel headers as missing despite their presence in the generated plist; the devel package check could not be completed because of that host-side validation issue. The BIND 9.18 expiration date is set to 2026-12-31 to allow migration from the EOL branch. ## Summary by Sourcery …