BIND 9.4.1 is now available.
Mark Andrews
Mark_Andrews at isc.org
Tue Jul 24 21:54:16 UTC 2007
BIND 9.4.1 is now available.
BIND 9.4.1-P1 is a security release for BIND 9.4.
BIND 9.4.1-P1 can be downloaded from
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz
The PGP signature of the distribution is at
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.sha256.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.sha512.asc
The signature was generated with the ISC public key, which is
available at <http://www.isc.org/about/openpgp/pgpkey2006.txt>.
A binary kit for Windows 2000, Windows XP and Window 2003 is at
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip
The PGP signature of the binary kit for Windows 2000, Windows XP and
Window 2003 is at
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.sha256.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.sha512.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.sha256.asc
ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.sha512.asc
Changes since 9.4.0.
--- 9.4.1-P1 released ---
2206. [security] "allow-query-cache" and "allow-recursion" now
cross inherit from each other.
If allow-query-cache is not set in named.conf then
allow-recursion is used if set, otherwise allow-query
is used if set, otherwise the default (localnets;
localhost;) is used.
If allow-recursion is not set in named.conf then
allow-query-cache is used if set, otherwise allow-query
is used if set, otherwise the default (localnets;
localhost;) is used.
[RT #16987]
2203. [security] Query id generation was cryptographically weak.
[RT # 16915]
2202. [security] The default acls for allow-query-cache and
allow-recursion were not being applied. [RT #16960]
2193. [port] win32: BINDInstall.exe is now linked statically.
[RT #16906]
2192. [port] win32: use vcredist_x86.exe to install Visual
Studio's redistributable dlls if building with
Visual Stdio 2005 or later.
--- 9.4.1 released ---
2172. [bug] query_addsoa() was being called with a non zone db.
[RT #16834]
--- 9.4.0 released ---
More information about the bind-announce
mailing list