bind-announce  

Messages by Thread

• New BIND releases are available: 9.16.50, 9.18.26, 9.19.23 Victoria Risk
• New BIND releases are available: 9.16.49, 9.18.25, 9.19.22 Victoria Risk
• BIND 9.16 is approaching EOL in April, 2024 Victoria Risk
• New BIND releases are available: 9.16.48, 9.18.24, 9.19.21 Victoria Risk
• Pre-announcement of BIND 9 security issues scheduled for disclosure 13 February 2024 Victoria Risk
• BIND maintenance releases for January postponed Victoria Risk
• UPDATE to pre-announcement of BIND 9 security issues scheduled for disclosure 17 January 2024 Suzanne Goldlust
• Pre-announcement of BIND 9 security issues scheduled for disclosure 17 January 2024 Suzanne Goldlust
• New BIND releases are available: 9.18.21, 9.19.19 Victoria Risk
• New BIND releases are available: 9.16.45, 9.18.20, 9.19.18 Victoria Risk
• New BIND releases are available: 9.16.44, 9.18.19, 9.19.17 Cathy Almond
• Pre-announcement of BIND 9 security issues scheduled for disclosure 20 September 2023 Greg Choules
• New BIND releases are available: 9.16.43, 9.18.18, 9.19.16 Everett B. Fulton
• New BIND releases are available: 9.18.17, 9.19.15 Peter Davies
• New BIND releases are available: 9.16.42, 9.18.16, 9.19.14 Cathy Almond
• Pre-announcement of BIND 9 security issues scheduled for disclosure 21 June 2023 Cathy Almond
• New BIND releases are available: 9.16.41, 9.18.15, 9.19.13 Peter Davies
• New BIND releases are available: 9.16.40, 9.18.14, 9.19.12 Darren Ankney
• New BIND releases are available: 9.16.39, 9.18.13, 9.19.11 Everett B. Fulton
• New BIND releases are available: 9.16.38, 9.18.12, 9.19.10 Everett B. Fulton
• New BIND releases are available: 9.16.37, 9.18.11, 9.19.9 Greg Choules
• Pre-announcement of BIND 9 security issues scheduled for disclosure 25 January 2023 Cathy Almond
• New BIND releases are available: 9.16.36, 9.18.10, 9.19.8 Cathy Almond
• New BIND Releases are available: 9.16.35, 9.18.9, and 9.19.7 Peter Davies
• New BIND Releases are available: 9.16.34, 9.18.8 and 9.19.6 Peter Davies
• New BIND Releases are available: 9.16.33, 9.18.7 and 9.19.5 Cathy Almond
• Pre-announcement of BIND security issues scheduled for disclosure 21 September 2022 Cathy Almond
• New BIND Releases are available: 9.16.32, 9.18.6, and 9.19.4 Everett B. Fulton
• New BIND Releases are available: 9.16.31, 9.18.5, and 9.19.3 Everett B. Fulton
• New BIND Releases are available: 9.16.30, 9.18.4, and 9.19.2 Everett B. Fulton
• New BIND Releases are available: 9.16.28, 9.18.3, and 9.19.1 Cathy Almond
• Pre-announcement of a BIND security issue scheduled for disclosure 18 May 2022 Cathy Almond
• New BIND Releases are available: 9.16.28, 9.18.2, and 9.19.0 Peter Davies
• New BIND Releases are available: 9.11.31, 9.16.27, and 9.18.1 Everett B. Fulton
• CVE-2022-0667: Assertion failure on delayed DS lookup Everett B. Fulton
• CVE-2022-0635: DNAME insist with synth-from-dnssec enabled Everett B. Fulton
• CVE-2022-0396: DoS from specifically crafted TCP packets Everett B. Fulton
• CVE-2021-25220: DNS forwarders - cache poisoning vulnerability Everett B. Fulton
• Pre-announcement of 4 BIND security issues scheduled for disclosure 16 March 2022 Everett B. Fulton
• BIND 9.11 EOL approaching at end of March, 2022 Victoria Risk
• A new BIND release is available: 9.16.26 another correction Peter Davies
• A new BIND release is available: 9.16.26 correction Peter Davies
• New BIND release is available: 9.16.26 Peter Davies
• Reminder: BIND 9.11 will be EOL in March 2022 Victoria Risk
• A new BIND stable branch is available: 9.18.0 Peter Davies
• New BIND releases are available: 9.16.25 and 9.17.22 Peter Davies
• New BIND releases are available: 9.16.24 and 9.17.21 Everett B. Fulton
• New BIND releases are available: 9.16.23 and 9.17.20 Everett B. Fulton
• CVE-2021-25219: Lame cache can be abused to severely degrade resolver performance Everett B. Fulton
• Operational Notification: NSEC3 hash iterations should be minimised. Everett B. Fulton
• New BIND releases are available: 9.16.21 and 9.17.18 Greg Choules
• Operational Notification: BIND 9.16.20, 9.17.17, and 9.16.20-S1 can,trigger an assertion failure when reading zone data stored in map format Michael McNally
  • Re: Operational Notification: BIND 9.16.20, 9.17.17, and 9.16.20-S1 can trigger an assertion failure when reading zone data stored in map format Michael McNally
• New BIND releases are available: 9.11.35, 9.16.20, and 9.17.17 Michael McNally
• CVE-2021-25218: A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use Michael McNally
• Pre-announcement of a BIND security issue scheduled for disclosure 18 August 2021 Michael McNally
• New BIND releases are available: 9.11.34, 9.16.19, and 9.17.16 Michael McNally
• New BIND releases are available: 9.16.18, and 9.17.15 Victoria Risk
• Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14 Michael McNally
• New BIND releases are available: 9.11.33, 9.16.17, and 9.17.14 Michael McNally
• New BIND releases are available: 9.11.32, 9.16.16, and 9.17.13 Michael McNally
• New BIND releases are available: 9.11.31, 9.16.15, and 9.17.12 Michael McNally
• CVE-2021-25216: A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack Michael McNally
• CVE-2021-25215: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself Michael McNally
• CVE-2021-25214: A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly Michael McNally
• Pre-announcement of a BIND security issue scheduled for disclosure 21 April 2021 Victoria Risk
  • Re: Pre-announcement of a BIND security issue scheduled for disclosure 21 April 2021 Cathy Almond
• New BIND releases are available: 9.11.29, 9.16.13, and 9.17.11 Michael McNally
• BIND Operational Notification: Zone journal (.jnl) file incompatibility,after upgrading to BIND 9.16.12 and 9.17 ISC Security Officer
• Operational Notification: Zone journal (.jnl) file incompatibility,after upgrading to BIND 9.16.12 and 9.17 ISC Security Officer
• Operational Notification: Enabling the new BIND option "stale-answer-client-timeout" can result in unexpected server termination ISC Security Officer
• New BIND releases are available: 9.11.28, 9.16.12, and 9.17.10 Michael McNally
• CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack Michael McNally
• Pre-announcement of a BIND security issue scheduled for disclosure 17 February 2021 Michael McNally
• New BIND releases are available: 9.11.27, 9.16.11, and 9.17.9 Michael McNally
• BIND 9 Release Model changes Victoria Risk
• New BIND releases are available: 9.11.26, 9.16.10, and 9.17.8 Michael McNally
• End of support for CentOS 6 Victoria Risk
• New BIND releases are available: 9.11.25, 9.16.9, and 9.17.7 Michael McNally
  • A fix is available for man page problems affecting the BIND 9.11.25 release (was Re: New BIND releases are available: 9.11.25, 9.16.9, and 9.17.7) Michael McNally
• New BIND releases are available: 9.11.24, 9.16.8, and 9.17.6 Michael McNally
• New BIND releases are available: 9.11.23, 9.16.7, and 9.17.5 Michael McNally
• CVE-2020-8624: update-policy rules of type "subdomain" are enforced incorrectly Michael McNally
• CVE-2020-8623: A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c Michael McNally
• CVE-2020-8622: A truncated TSIG response can lead to an assertion failure Michael McNally
• CVE-2020-8621: Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c Michael McNally
• CVE-2020-8620: A specially crafted large TCP payload can trigger an assertion failure in tcpdns.c Michael McNally
• New BIND releases are available: 9.11.22, 9.16.6, and 9.17.4 Michael McNally
• Pre-announcement of five BIND security issues scheduled for disclosure 20 August 2020 ISC Security Officer
• New BIND releases are available: 9.11.21, 9.16.5, and 9.17.3 Michael McNally
• New BIND releases are available: 9.11.20, 9.16.4, and 9.17.2 Michael McNally
• CVE-2020-8619: An asterisk character in an empty non-terminal can cause an assertion failure in rbtdb.c Michael McNally
• CVE-2020-8618: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer Michael McNally
• New releases of BIND are available: 9.11.19, 9.14.12, and 9.16.3 Michael McNally
• CVE-2020-8617: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c Michael McNally
• CVE-2020-8616: BIND does not sufficiently limit the number of fetches performed when processing referrals Michael McNally
• Pre-announcement of two BIND security issues scheduled for disclosure 19 May 2020 ISC Security Officer
• New releases of BIND are available: 9.11.18, 9.16.2, and 9.17.1 Michael McNally
• New releases of BIND are available: 9.11.17, 9.16.1, and 9.17.0 Michael McNally
• Operational Notification: An error in handling TCP client quota limits can exhaust TCP connections in BIND 9.16.0 Michael McNally
• New releases of BIND are available: 9.16.0, 9.14.11, and 9.11.16 Michael McNally
• New releases of BIND are available: 9.11.15, 9.14.10, and 9.15.8 Michael McNally
• Changes BIND 9.15+ source distribution (gz -> xz, and SHA1 deprecation) Ondřej Surý
• New releases of BIND are available: 9.11.14, 9.14.9, and 9.15.7 Cathy Almond
• Encrypted DNS: DoH vs. DoT webinar - Wednesday, December 11 Suzanne Goldlust
  • DNSSEC weekly webinar series beginning Wednesday, February 5 Suzanne Goldlust
• New security release versions of BIND are available: 9.11.13, 9.14.8 and 9.15.6 Cathy Almond
• CVE-2019-6477: TCP-pipelined queries can bypass tcp-clients limit Cathy Almond
• Operational Notification: synth-from-dnssec may cause slow resolution on resolvers under certain cache conditions Brian Conry
• BIND logging webinar next Wednesday, 1 PM ET Suzanne Goldlust
• New security release versions of BIND are available: 9.11.12, 9.14.7 and 9.15.5 Cathy Almond
  • Re: New security release versions of BIND are available: 9.11.12, 9.14.7 and 9.15.5 Cathy Almond
• CVE-2019-6476: An error in QNAME minimization code can cause BIND to exit with an assertion failure Cathy Almond
• CVE-2019-6475: A flaw in mirror zone validity checking can allow zone data to be spoofed Cathy Almond
• New releases of BIND are available: 9.11.11, 9.14.6, and 9.15.4 Michael McNally
  • Re: New releases of BIND are available: 9.11.11, 9.14.6, and 9.15.4 Michael McNally
• ISC Security Vulnerability Disclosure Process Update Michael McNally
• New releases of BIND are available: 9.11.10, 9.14.5, and 9.15.3 Michael McNally
• New releases of BIND are available: 9.11.9, 9.14.4, and 9.15.2 Michael McNally
• CVE-2019-6471: A race condition when discarding malformed packets can cause BIND to exit with an assertion failure Michael McNally
• Vulnerability CVE-2019-6469 cannot affect public open-source BIND, only BIND 9 Supported Preview Edition Michael McNally
• New versions of BIND are available: BIND 9.11.7, BIND 9.14.2, and BIND 9.15.0 Michael McNally
• New security release versions of BIND are available: 9.11.6-P1, 9.12.4-P1, and 9.14.1 Michael McNally
• CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used Michael McNally
• CVE-2019-6467: An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion failure in query.c Michael McNally
• CVE-2018-5743: Limiting simultaneous TCP clients is ineffective Michael McNally
• BIND 9.14.0 is now available Michael McNally
• BIND 9.14.0rc3 is now available Michael McNally
• BIND 9.14.0rc2 is now available Michael McNally
• New BIND releases are available - BIND 9.11.6, 9.12.4, and 9.14.0rc1 Michael McNally
• New versions of BIND are available Michael McNally
  • New versions of BIND are available Michael McNally
• CVE-2019-6465: Controls for zone transfers might not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable. Michael McNally
• CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys Michael McNally
• CVE-2018-5744: A specially crafted packet can cause named to leak memory Michael McNally
• BIND 9.13.6 is now available Michael McNally
• A new ISC code signing key is available Michael McNally
• DNS Flag Day - Feb 1, 2019 Victoria Risk
• BIND 9.13.5-W1 is now available. 9.13.5-W1 replaces 9.13.5 and corrects the problem with incomplete Windows zips Michael McNally
• Withdrawing BIND 9.13.5 WINDOWS zips Victoria Risk
• New BIND releases are available - BIND 9.11.5-P1, 9.12.3-P1, and 9.13.5 Michael McNally
• Operational Notification: DNSSEC key deletion may create broken NSEC and NSEC3 chains and unnecessary RRSIGs Michael McNally
• BIND 9.13.4 (an unstable development release of BIND 9) is now available. Michael McNally
  • Re: BIND 9.13.4 (an unstable development release of BIND 9) is now available. Michael McNally
• New BIND maintenance releases are available: 9.11.5 and 9.12.3 Michael McNally
• New BIND release candidates are available: 9.11.5rc1, 9.12.3rc1 Michael McNally
• New BIND releases are available -- 9.11.4-P2, 9.12.2-P2, and 9.13.3 Michael McNally
• Operational Notification: Some releases of BIND are too strict when handling referrals containing non-empty answer sections Michael McNally
• Operational Notification: Change 4892 exposed multiple problems affecting inline-signing Michael McNally
• CVE-2018-5741: Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation Michael McNally
• New BIND releases are available: 9.9.13-P1, 9.10.8-P1, 9.11.4-P1, 9.12.2-P1 Michael McNally
• CVE-2018-5740: A flaw in the "deny-answer-aliases" feature can cause an INSIST assertion failure in named Michael McNally
• New maintenance releases of BIND are available: 9.9.13, 9.10,8, 9.11.4, 9.12.2, and development release 9.13.2 Michael McNally
• Operational Notification: Extremely large zone transfers can result in corrupted journal files or server process termination Michael McNally
• New BIND release candidates are available: 9.9.13rc2, 9.10.8rc2, 9.11.4rc2, 9.12.2rc2 Michael McNally
• New BIND release candidates are available: 9.9.13rc1, 9.10.8rc1, 9.11.4rc1, 9.12.2rc1, and 9.13.1 Michael McNally
• CVE-2018-5738: Some versions of BIND can improperly permit recursive query service to unauthorized clients Michael McNally
• BIND 9.13.0 is now available Michael McNally
• BIND 9.12.1-P2 is now available Michael McNally
• CVE-2018-5737: BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled. Michael McNally
• CVE-2018-5736: Multiple transfers of a zone in quick succession can cause an assertion failure in rbtdb.c Michael McNally
• Planning to stop exporting BIND libraries Victoria Risk
• New BIND maintenance releases are available: 9.9.12, 9.10.7, 9.11.3, and 9.12.1 Michael McNally
• Operational Notification: "update-policy local" was named misleadingly and could permit non-local DDNS updates Michael McNally
• CVE-2018-5734: A malformed request can trigger an assertion failure in badcache.c Michael McNally
• New BIND release candidates are available Michael McNally
  • Re: New BIND release candidates are available Michael McNally
• BIND 9.12.1rc1 is now available Michael McNally
• New BIND Gitlab open for public access Victoria Risk
• BIND 9.12.1b1 is now available Michael McNally
• New BIND beta releases are available Michael McNally
• BIND 9.12.0 is now available Michael McNally
• ISC is hiring Victoria Risk
• BIND 9.12.0rc3 is now available Brian Conry
• BIND 9.11.2-P1 is now available Brian Conry
• BIND 9.10.6-P1 is now available Brian Conry
• BIND 9.9.11-P1 is now available Brian Conry
• CVE-2017-3145: Improper fetch cleanup sequencing in the resolver can cause named to crash Brian Conry
• BIND 9.9 and 9.10 branches nearing end of maintenance Victoria Risk
• BIND 9.12.0rc1 is now available Michael McNally
• BIND 9.12.0b2 is now available Michael McNally
• BIND 9.12.0b1 is now available Michael McNally
• Operational Notification: KSK-2010 will be retired from the root zone, potentially affecting validating resolvers Michael McNally
• BIND 9.11.2 is now available Brian Conry
• BIND 9.10.6 is now available Brian Conry
• BIND 9.9.11 is now available Brian Conry
• New BIND development releases are available: 9.9.11rc2, 9.10.6rc2, and 9.11.2rc2 Michael McNally
• New BIND development releases are available: 9.9.11rc1, 9.10.6rc1, and 9.11.2rc1 Michael McNally
• Bugs.isc.org is now open for browsing Victoria Risk
• New development releases of BIND are now available -- BIND 9.9.11b1, BIND 9.10.6b1, and BIND 9.11.2b1 Michael McNally
• BIND 9.11.1-P3 is now available Michael McNally
• BIND 9.10.5-P3 is now available Michael McNally
• BIND 9.9.10-P3 is now available Michael McNally
• A regression introduced in recent security releases can cause problems with zone transfers from some non-BIND servers Michael McNally
• A clarification about CVE-2017-3143 and "update-policy local;" Michael McNally
• BIND 9.11.1-P2 is now available Michael McNally
• BIND 9.10.5-P2 is now available Michael McNally
• BIND 9.9.10-P2 is now available Michael McNally
• CVE-2017-3143: An error in TSIG authentication can permit unauthorized dynamic updates Michael McNally
• CVE-2017-3142: An error in TSIG authentication can permit unauthorized zone transfers Michael McNally

• Earlier messages