BSD Ports

dns/bind920 9.20.30 MidnightBSD

System
MidnightBSD
Repository
mports
Maintainer
[email protected]
Last update
Commit
b1ff50cdd7
License
MPL20
Categories
dns, net

Description

BIND version 9 is a major rewrite of nearly all aspects of the underlying BIND architecture. Some of the important features of BIND 9 are:

DNS Security: DNSSEC (signed zones), TSIG (signed DNS requests) IP version 6: Answers DNS queries on IPv6 sockets, IPv6 resource records (AAAA) Experimental IPv6 Resolver Library DNS Protocol Enhancements: IXFR, DDNS, Notify, EDNS0 Improved standards conformance Views: One server process can provide multiple "views" of the DNS namespace, e.g. an "inside" view to certain clients, and an "outside" view to others. Multiprocessor Support

See the CHANGES file for more information on new features.

In the other systems

The newest version among them is 9.20.30, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
MidnightBSDdns/bind9209.20.30 newestno data-[email protected]2026-10-21
FreeBSDdns/bind9209.20.30 newestnone known-[email protected]2026-10-21
DragonFlydns/bind9209.20.10 behind since 2026-07-251 known-[email protected]-
HardenedBSDdns/bind9209.20.29 behind since 2026-10-21no data-[email protected]-
GhostBSDdns/bind9209.20.29 behind since 2026-10-21no data-[email protected]-
OPNsensedns/bind9209.20.24 behind since 2026-07-25no data-[email protected]-

Version history 3

  1. 9.20.30 b1ff50cdd7
  2. 9.20.29 67bbb4344d
  3. 9.20.26 1da08abdff

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

mport install bind

From mports:

cd /usr/mports/dns/bind920 && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	bind>0:dns/bind920
LIB_DEPENDS=	libdns-9.20.30.so:dns/bind920

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Library 4

Build dependencies 4
Run dependencies 4

No port depends on this one.

Related ports

The same software or family in MidnightBSD: one homepage, or one name but for a version or a variant.

Configuration

Options name: dns_bind

OptionDefaultDescription
DNSTAPonProvides fast passive logging of DNS messages
DOCSoff
FIXED_RRSEToffEnable fixed rrset ordering
GEOIPoff
GSSAPI_BASEoffUsing Heimdal in base (nsupdate is broken)
GSSAPI_HEIMDALoffUsing security/heimdal (nsupdate is broken)
GSSAPI_MIToffUsing security/krb5
GSSAPI_NONEonDisable
IDNon
JSONon
LARGE_FILEoff64-bit file support
LMDBonUse LMDB for zone management
OVERRIDECACHEoffUse the override-cache patch
QUERYTRACEoffEnable the very verbose query tracelogging
START_LATEoffStart BIND late in the boot process (see help)
TCP_FASTOPENonRFC 7413 support
USES
autoreconf compiler:c11 cpe gnome libedit libtool pkgconfig ssl tar:xz
Service scripts
none

Files

Manual pages 14
  • ddns-confgen(8)
  • filter-a(8)
  • filter-aaaa(8)
  • named(8)
  • named-checkconf(1)
  • named-checkzone(1)
  • named-compilezone(1)
  • named-journalprint(1)
  • named-nzd2nzf(1)
  • named.conf(5)
  • rndc(8)
  • rndc-confgen(8)
  • rndc.conf(5)
  • tsig-keygen(8)
pkg-plist 274
  • bin/named-checkconf
  • bin/named-checkzone
  • bin/named-compilezone
  • bin/named-journalprint
  • bin/named-nzd2nzf
  • @sample etc/mtree/BIND.chroot.dist.sample
  • @sample etc/mtree/BIND.chroot.local.dist.sample
  • @sample etc/bind/named.conf.sample
  • etc/bind/named.root
  • etc/bind/primary/empty.db
  • etc/bind/primary/localhost-forward.db
  • etc/bind/primary/localhost-reverse.db
  • include/dns/acl.h
  • include/dns/adb.h
  • include/dns/badcache.h
  • include/dns/bit.h
  • include/dns/byaddr.h
  • include/dns/cache.h
  • include/dns/callbacks.h
  • include/dns/catz.h
  • include/dns/cert.h
  • include/dns/client.h
  • include/dns/clientinfo.h
  • include/dns/compress.h
  • include/dns/db.h
  • include/dns/dbiterator.h
  • include/dns/diff.h
  • include/dns/dispatch.h
  • include/dns/dlz.h
  • include/dns/dlz_dlopen.h
  • include/dns/dns64.h
  • include/dns/dnsrps.h
  • include/dns/dnssec.h
  • include/dns/dnstap.h
  • include/dns/ds.h
  • include/dns/dsdigest.h
  • include/dns/dsync.h
  • include/dns/dyndb.h
  • include/dns/ecs.h
  • include/dns/ede.h
  • include/dns/edns.h
  • include/dns/enumclass.h
  • include/dns/enumtype.h
  • include/dns/fixedname.h
  • include/dns/forward.h
  • include/dns/geoip.h
  • include/dns/ipkeylist.h
  • include/dns/iptable.h
  • include/dns/journal.h
  • include/dns/kasp.h
  • include/dns/keydata.h
  • include/dns/keyflags.h
  • include/dns/keymgr.h
  • include/dns/keystore.h
  • include/dns/keytable.h
  • include/dns/keyvalues.h
  • include/dns/librpz.h
  • include/dns/log.h
  • include/dns/master.h
  • include/dns/masterdump.h
  • include/dns/message.h
  • include/dns/name.h
  • include/dns/nametree.h
  • include/dns/ncache.h
  • include/dns/nsec.h
  • include/dns/nsec3.h
  • include/dns/nta.h
  • include/dns/opcode.h
  • include/dns/order.h
  • include/dns/peer.h
  • include/dns/private.h
  • include/dns/qp.h
  • include/dns/rbt.h
  • include/dns/rcode.h
  • include/dns/rdata.h
  • include/dns/rdataclass.h
  • include/dns/rdatalist.h
  • include/dns/rdataset.h
  • include/dns/rdatasetiter.h
  • include/dns/rdataslab.h
  • include/dns/rdatastruct.h
  • include/dns/rdatatype.h
  • include/dns/remote.h
  • include/dns/request.h
  • include/dns/resolver.h
  • include/dns/result.h
  • include/dns/rootns.h
  • include/dns/rpz.h
  • include/dns/rriterator.h
  • include/dns/rrl.h
  • include/dns/sdlz.h
  • include/dns/secalg.h
  • include/dns/secproto.h
  • include/dns/skr.h
  • include/dns/soa.h
  • include/dns/ssu.h
  • include/dns/stats.h
  • include/dns/time.h
  • include/dns/tkey.h
  • include/dns/trace.h

The first 100 are listed.

distinfo 1
FileSizeSHA256
bind-9.20.30.tar.xz6.004232e+069e1443a40a72a30272cbc3196d020a6b2e26937111c83e59e101e82e1e3b4fef
Master sites 1
  • ISC/bind9/9.20.30

Commit history 5

DateCommitCreditsLog message
b1ff50cdd7 Lucas Holt dns/bind920: update to 9.20.30 [security] (#1866)
## Summary Update dns/bind920 from 9.20.29 to 9.20.30, an ISC security release. dns/bind-tools is a slave port (`MASTERDIR=../../dns/bind920`), so it follows automatically. Only its versioned library names in pkg-plist needed changing. ## Security fixes - [CVE-2026-19630](https://kb.isc.org/docs/cve-2026-19630): crafted messages could exhaust CPU through unbounded compressed-name expansion - [CVE-2026-94300](https://kb.isc.org/docs/cve-2026-94300): concurrent GSS-TSIG traffic could terminate named - [CVE-2026-96888](https://kb.isc.org/docs/cve-2026-96888): crash with redirect zones and `qname-minimization strict` - [CVE-2026-97313](https://kb.isc.org/docs/cve-2026-97313): crash when resuming from a query initiated by RPZ Release notes: …
67bbb4344d Lucas Holt dns/bind920, dns/bind-tools, dns/bind9-devel: security update (14 CVEs) (#1341)
a05b377b53 Lucas Holt *: bump PORTREVISION for the textproc/libxml2 2.15 shared library change (#848)
`textproc/libxml2` 2.15 changed SONAME from `libxml2.so.2` to `libxml2.so.16` **and** removed ELF symbol versioning entirely — the new library defines no `LIBXML2_*` versions at all. Consumers built against the old library were never rebuilt, so they still record a dependency on `libxml2.so.2` plus version requirements nothing can satisfy, and fail at load time: ``` ld-elf.so.1: /usr/local/lib/libxml2.so.2: version LIBXML2_2.4.30 required by /usr/local/lib/libevdocument3.so.4 not defined ``` ### Scope `Tools/scripts/bump_revision.pl -f -l textproc/libxml2` — **436 Makefiles**: 323 revisions incremented, 113 gained a `PORTREVISION` line. The diff touches nothing but `PORTREVISION` lines (verified: `git diff -U0` shows no other changed line), and spot-checked ports still …
3fa5c23b9a Lucas Holt dns/bind920: remove obsolete helper header (#776)
## Summary - remove `include/isc/helper.h` from `pkg-plist` - align the plist with BIND 9.20.26, which no longer installs that header - restore package creation ## Validation - `BATCH=yes bmake makesum` - clean `BATCH=yes bmake patch` - clean `BATCH=yes bmake` - clean `BATCH=yes bmake fake` - clean `BATCH=yes bmake package` - `BATCH=yes bmake test` (target exited successfully without substantive test output) - `BATCH=yes bmake check-license` - `portlint -AC dns/bind920` Package created successfully as `bind920-9.20.26.mport`. Existing fake-qa stripping, dependency, and ineffective `REINPLACE_CMD` warnings are unchanged and outside this plist-only fix. ## Summary by Sourcery Bug Fixes: - Remove the obsolete BIND helper header from the package plist so …
1da08abdff Lucas Holt dns: update BIND ports (#685)
## What changed - Update `dns/bind920` to BIND 9.20.26. - Update `dns/bind9-devel` to BIND 9.21.24 and refresh its installed-file list. - Update `dns/bind918` to final BIND 9.18.50, mark it deprecated, and direct users to `dns/bind920`. ## Validation - `bmake patch` and source builds passed for all three ports with optional documentation disabled. - `dns/bind918` passed `fake` and package generation. - The local `mport.check-fake` validator still reports staged BIND devel headers as missing despite their presence in the generated plist; the devel package check could not be completed because of that host-side validation issue. The BIND 9.18 expiration date is set to 2026-12-31 to allow migration from the EOL branch. ## Summary by Sourcery …