Date: Fri, 18 Jun 2021 09:07:25 +0200 From: Xavier Humbert <xavier@groumpf.org> To: FreeBSD Ports ML <freebsd-ports@freebsd.org> Subject: Fwd: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14 Message-ID: <6b2e14d7-eb26-93a7-ceb6-ebb8782cd294@groumpf.org> In-Reply-To: <2dfb237b-0aa9-2a79-81a6-56de4073449c@isc.org> References: <2dfb237b-0aa9-2a79-81a6-56de4073449c@isc.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. --------------qHGlD5JjbQvElU0aT9n29bVx Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit FYI : Do not upgrade ! -------- Forwarded Message -------- Subject: Important: A significant flaw is present in June BIND releases 9.16.17 and 9.17.14 Date: Thu, 17 Jun 2021 19:56:58 -0800 From: Michael McNally <mcnally@isc.org> To: bind-users@lists.isc.org Dear BIND users: Yesterday, 16 June 2021, we released monthly maintenance snapshot releases of our currently supported release branches of BIND. Specifically, we released BIND 9.11.33, 9.16.17, and 9.17.14 There's no way to say this that isn't embarrassing, but only after the release was an error in a recently optimized routine discovered by a user -- an error that will definitely cause operational problems for almost all server operators who upgrade to either of these affected versions: - BIND 9.16.17 - BIND 9.17.14 BIND 9.11.33 is NOT affected. If you have not yet updated to the 16 June releases, we ask that you hold off on any plans to install 9.16.17 or 9.17.14 until replacement releases can be prepared and tested. The specific issue in question is being tracked in our issue tracker: https://gitlab.isc.org/isc-projects/bind9/-/issues/2779 and more information about our plans for issuing replacement releases will be provided later; at the moment our priority is getting the news to parties as quickly as possible so that those who have not already adopted the new releases can postpone until corrected versions are available. Michael McNally Internet Systems Consortium _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users --------------qHGlD5JjbQvElU0aT9n29bVx--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6b2e14d7-eb26-93a7-ceb6-ebb8782cd294>