BIND 9.4.1 is now available.

Mark Andrews Mark_Andrews at isc.org
Tue Jul 24 21:54:16 UTC 2007


		BIND 9.4.1 is now available.

	BIND 9.4.1-P1 is a security release for BIND 9.4.

BIND 9.4.1-P1 can be downloaded from

        ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz

The PGP signature of the distribution is at

        ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.asc
        ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.sha256.asc
        ftp://ftp.isc.org/isc/bind9/9.4.1-P1/bind-9.4.1-P1.tar.gz.sha512.asc

The signature was generated with the ISC public key, which is
available at <http://www.isc.org/about/openpgp/pgpkey2006.txt>.

A binary kit for Windows 2000, Windows XP and Window 2003 is at

	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip

The PGP signature of the binary kit for Windows 2000, Windows XP and
Window 2003 is at
        
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.asc
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.sha256.asc
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.zip.sha512.asc
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.asc
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.sha256.asc
	ftp://ftp.isc.org/isc/bind9/9.4.1-P1/BIND9.4.1-P1.debug.zip.sha512.asc

Changes since 9.4.0.

	--- 9.4.1-P1 released ---

2206.	[security]	"allow-query-cache" and "allow-recursion" now
			cross inherit from each other.

			If allow-query-cache is not set in named.conf then
			allow-recursion is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			If allow-recursion is not set in named.conf then
			allow-query-cache is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			[RT #16987]
	
2203.	[security]	Query id generation was cryptographically weak.
			[RT # 16915]

2202.	[security]	The default acls for allow-query-cache and 
			allow-recursion were not being applied. [RT #16960]

2193.	[port]		win32: BINDInstall.exe is now linked statically.
			[RT #16906]

2192.	[port]		win32: use vcredist_x86.exe to install Visual
			Studio's redistributable dlls if building with
			Visual Stdio 2005 or later.

	--- 9.4.1 released ---

2172.	[bug]		query_addsoa() was being called with a non zone db.
			[RT #16834]

	--- 9.4.0 released ---



More information about the bind-announce mailing list