diff --git a/net-dns/bind-tools/Manifest b/net-dns/bind-tools/Manifest
index a463c19232..f62a62a64c 100644
--- a/net-dns/bind-tools/Manifest
+++ b/net-dns/bind-tools/Manifest
@@ -1,6 +1,8 @@
 DIST bind-9.20.22.tar.xz 5817248 BLAKE2B 74537646d8c08c4874548b064ab62bab3721d22e2654feed54ea0b61c087018b24f725d0cfaf8298bc71a1be280c753c86449b13e5d9ec26f84ba7e9f61b7a5a SHA512 a23b630fc755977534e3fb8605810495ab8e4817ade93448f93167a38c643b0da6e93b3c2d9e191e99989af446a8aabfa43636120cc6c2a0c653dcd36cb89d07
 DIST bind-9.20.23.tar.xz 5837532 BLAKE2B f4f5526fac2832685204ccc93087df3ce2dd3fbb267a5b68d0cf8074365a8f1d6e7b9ff130b41a023ea8dd96499a361a0396188f0a71a08630c54ec13e63c39a SHA512 fce8a69620c15223e54dd197c09c7b00c165e5e3a5b2f62b241f589be5675c581029cf750caa8ed1f1fcb0faf293df04e77c494c205bab89d6d01153395bf4cb
 DIST bind-9.20.24.tar.xz 5854912 BLAKE2B 06fde034ef2d3f4432caf5d9a701f70f32dec94be63e64dfd5484d9e008245ca5707c067c0fa19e1e2c0a3d83d2bbeb465c6ec18aceed48ffaad6973c8a77a54 SHA512 6e163d483a45a71d979c0c4fc9778e22f6fc158ab3dff460d84fa60391689c2f6e62ec179500718bcad27547728910ee17de2d10ef1936018a8958138e9c146c
+DIST bind-9.20.26.tar.xz 5918032 BLAKE2B 433d5ed7457367ce5b195a7d1a6f3fef21f929b158b14e3c86d8dc2004240119e4ec3b1d3cab1121be66ec77463fcb462e1207ec3339cf46ca4eec05f8c366ef SHA512 6d90452d86bfbd1cd6c1301f8c2d9c2251402c81a03d45ab30217f5db05ab1ca6ca7e01fac3642bcd7e1866bd535763e9a9526886312eb5eaf4e532431a92931
 DIST bind-9.21.21.tar.xz 5346552 BLAKE2B e0639f94ac5e82c2975bda2e85cb8275fb0e9d3e069f944cfa3e72238772fcfdb3f2238bc21baee674709430b7436f0a32911d16ac925e534849e6b1fb7436b6 SHA512 ebb05d1141d38bd1897bb0de1475194ca6e9335e1a295ab388376d880de1a0569279b734433f469565eccdea91cc8e6e3603b2879be700bf27082ff075bdbe49
 DIST bind-9.21.22.tar.xz 5383844 BLAKE2B 17112e87af111ad4c6d8836585cd01c34b43bc581cf8e6f2c5da631d58ae110aaa92d7666480b8c7d9a99609f580e9f56ad4cea9f7aaa73201d11acb0521ca7e SHA512 f9e11d150162661c755dabdd7862c0565e6a10077e2a6aee04f8cefce94c262d8928ff9e42f8c8750242aee3b0992afe2f49f72f0f8cab8b7e4ae1c9fc06e0fa
 DIST bind-9.21.23.tar.xz 5403480 BLAKE2B fcee66abedd74d371c35d6ea3b79123136cd9b581b1c55e1c611f3b2d05284d1b1038ea21fa11bd0dde39d0821f428106f3beefbbe839c442177f3bfa0f25c9e SHA512 86bf978dd591c78f4a47ec5d8e1899708dafff6c4fc015a621a58e1541dc37b6b07a5149833a37e9440bdd3f2ffb78f2d42f38df472a8489ba1b30b4d915aaa5
+DIST bind-9.21.24.tar.xz 5470080 BLAKE2B 7af743c6c71c317f10426432b7e651d3224b09008fc026e63ea6dd25a7ec37505da68075a506de0a04c5b320c1d7b0f9aff5be4da3aade2b8381e69ad8a6572b SHA512 b3654db3ce934371a50bd4e730c13c8821b9e6cb294759606337f132f6e4843d30b328f351c11f4b3c5c67748694fc1e2ecee78fa4280136a7bbaf8e193069ca
diff --git a/net-dns/bind-tools/bind-tools-9.21.24.ebuild b/net-dns/bind-tools/bind-tools-9.21.24.ebuild
new file mode 100644
index 0000000000..0378f06b1e
--- /dev/null
+++ b/net-dns/bind-tools/bind-tools-9.21.24.ebuild
@@ -0,0 +1,63 @@
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit meson flag-o-matic toolchain-funcs
+
+DESCRIPTION="bind tools: dig, nslookup, host, nsupdate, dnssec-keygen"
+HOMEPAGE="https://www.isc.org/software/bind"
+SRC_URI="https://downloads.isc.org/isc/bind9/9.21.24/bind-9.21.24.tar.xz -> bind-9.21.24.tar.xz"
+
+LICENSE="Apache-2.0 BSD BSD-2 GPL-2 HPND ISC MPL-2.0"
+SLOT="0"
+KEYWORDS="*"
+IUSE="gssapi idn ipv6 libedit readline xml"
+# no PKCS11 currently as it requires OpenSSL to be patched, also see bug 409687
+
+COMMON_DEPEND="
+	dev-libs/libuv:=
+	dev-libs/openssl
+	dev-libs/userspace-rcu
+	sys-libs/libcap
+	dev-db/lmdb
+	xml? ( dev-libs/libxml2 )
+	idn? ( net-dns/libidn2:= )
+	gssapi? ( virtual/krb5 )
+	libedit? ( dev-libs/libedit )
+	!libedit? (
+		readline? ( sys-libs/readline:= )
+	)
+"
+DEPEND="${COMMON_DEPEND}"
+RDEPEND="${COMMON_DEPEND}
+	!<=net-dns/bind-9.18.1-r2
+"
+S="${WORKDIR}/bind-9.21.24"
+
+# sphinx required for man-page and html creation
+BDEPEND="
+	virtual/pkgconfig
+"
+
+src_configure() {
+	local emesonargs=(
+		--sysconfdir=/etc/bind
+		--localstatedir=/var
+		-Ddoc=disabled
+		-Dzlib=disabled
+		-Dstats-json=disabled
+		-Dstats-xml=disabled
+		$(meson_feature gssapi)
+		$(meson_feature idn)
+	)
+	meson_src_configure
+}
+
+src_install() {
+	meson_src_install
+
+	rm -r "${D}"/usr/bin/{arpaname,named*,nsec3hash} || die
+	rm -r "${D}"/usr/sbin || die
+}
+
+# vim: filetype=ebuild