New BIND releases are available: 9.18.28, 9.20.0
Victoria Risk <[email protected]> Tue, 23 Jul 2024 06:29:06 -0700
| Newsgroups | gmane.network.dns.bind.announce,gmane.network.dns.bind.user |
|---|---|
| Message-ID | <[email protected]> |
--===============0900235217329907063==
Content-Type: multipart/alternative;
boundary="Apple-Mail=_2E18A901-FE4F-49FF-BC1D-2D2A3940AA99"
--Apple-Mail=_2E18A901-FE4F-49FF-BC1D-2D2A3940AA99
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
BIND users-
Our July 2024 maintenance release of BIND 9.18, as well as the new =
9.20.0 stable branch, are available and can be downloaded from the ISC =
software download page, https://www.isc.org/download.
In addition to bug fixes and feature improvements, these releases also =
contain fixes for security vulnerabilities (CVE-2024-0760, =
CVE-2024-1737, CVE-2024-1975, CVE-2024-4076), about which more =
information is provided in the following Security Advisories:
https://kb.isc.org/docs/cve-2024-0760
https://kb.isc.org/docs/cve-2024-1737
https://kb.isc.org/docs/cve-2024-1975
https://kb.isc.org/docs/cve-2024-4076
A summary of significant changes in the new releases can be found in =
their release notes:
- Current supported stable branches:
9.18.28 - =
https://downloads.isc.org/isc/bind9/9.18.28/doc/arm/html/notes.html
9.20.0 - =
https://downloads.isc.org/isc/bind9/9.20.0/doc/arm/html/notes.html
We also have a nice blog post from Ond=C5=99ej Sur=C3=BD on the 9.20.0 =
release, including performance testing results =
(https://www.isc.org/blogs/2024-bind920/).
---
Please Note:
To create an effective mitigation for CVE-2024-1737 we have introduced =
two new configurable limits that prevent the loading (into zones or into =
cache) of DNS resource records (RRs) that exceed them. We therefore =
recommend reading this KB article,
https://kb.isc.org/docs/rrset-limits-in-zones, in case you need to =
change the defaults to suit your specific operational environment.
We recommend that users planning to upgrade from the EOL 9.16 branch =
read the following document first:
=
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-t=
o-918
--Apple-Mail=_2E18A901-FE4F-49FF-BC1D-2D2A3940AA99
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=utf-8
<html><head><meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3Dutf-8"></head><body style=3D"overflow-wrap: break-word; =
-webkit-nbsp-mode: space; line-break: after-white-space;"><div>BIND =
users-</div><div><br></div><div>Our July 2024 maintenance release of =
BIND 9.18, as well as the new 9.20.0 stable branch, are available and =
can be downloaded from the ISC software download page, =
https://www.isc.org/download.</div><div><br></div><div>In addition to =
bug fixes and feature improvements, these releases also contain fixes =
for security vulnerabilities (CVE-2024-0760, CVE-2024-1737, =
CVE-2024-1975, CVE-2024-4076), about which more information is provided =
in the following Security Advisories:</div><div><br></div><div> =
https://kb.isc.org/docs/cve-2024-0760</div><div> =
https://kb.isc.org/docs/cve-2024-1737</div><div> =
https://kb.isc.org/docs/cve-2024-1975</div><div> =
https://kb.isc.org/docs/cve-2024-4076</div><div><br></div><div>A summary =
of significant changes in the new releases can be found in their release =
notes:</div><div><br></div><div> - Current supported stable =
branches:</div><div><br></div><div> 9.18.28 - =
https://downloads.isc.org/isc/bind9/9.18.28/doc/arm/html/notes.html</div><=
div> 9.20.0 - =
https://downloads.isc.org/isc/bind9/9.20.0/doc/arm/html/notes.html</div><d=
iv><br></div><div>We also have a nice blog post from Ond=C5=99ej Sur=C3=BD=
on the 9.20.0 release, including performance testing results (<a =
href=3D"https://www.isc.org/blogs/2024-bind920/">https://www.isc.org/blogs=
/2024-bind920/</a>).</div><div><br></div><div>---</div><div>Please =
Note:</div><div><br></div><div><p style=3D"margin: 0px; font-style: =
normal; font-variant-caps: normal; font-stretch: normal; line-height: =
normal; font-family: "Helvetica Neue"; font-size-adjust: none; =
font-kerning: auto; font-variant-alternates: normal; =
font-variant-ligatures: normal; font-variant-numeric: normal; =
font-variant-east-asian: normal; font-variant-position: normal; =
font-feature-settings: normal; font-optical-sizing: auto; =
font-variation-settings: normal;">To create an effective mitigation for =
CVE-2024-1737 we have introduced two new configurable limits that =
prevent the loading (into zones or into cache) of DNS resource records =
(RRs) that exceed them. We therefore recommend reading this KB =
article,</p><p style=3D"margin: 0px; font-style: normal; =
font-variant-caps: normal; font-stretch: normal; line-height: normal; =
font-family: "Helvetica Neue"; font-size-adjust: none; =
font-kerning: auto; font-variant-alternates: normal; =
font-variant-ligatures: normal; font-variant-numeric: normal; =
font-variant-east-asian: normal; font-variant-position: normal; =
font-feature-settings: normal; font-optical-sizing: auto; =
font-variation-settings: normal;"><a =
href=3D"https://kb.isc.org/docs/rrset-limits-in-zones">https://kb.isc.org/=
docs/rrset-limits-in-zones</a>, in case you need to change the defaults =
to suit your specific operational environment.</p><p style=3D"margin: =
0px; font-style: normal; font-variant-caps: normal; font-stretch: =
normal; font-size: 13px; line-height: normal; font-family: =
"Helvetica Neue"; font-size-adjust: none; font-kerning: auto; =
font-variant-alternates: normal; font-variant-ligatures: normal; =
font-variant-numeric: normal; font-variant-east-asian: normal; =
font-variant-position: normal; font-variant-emoji: normal; =
font-feature-settings: normal; font-optical-sizing: auto; =
font-variation-settings: normal;"><br></p></div><div>We recommend that =
users planning to upgrade from the EOL 9.16 branch read the following =
document first:</div><div><br></div><div> =
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-t=
o-918</div><div><br></div></body></html>=
--Apple-Mail=_2E18A901-FE4F-49FF-BC1D-2D2A3940AA99--
--===============0900235217329907063==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
bind-announce mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-announce
--===============0900235217329907063==--