New BIND release candidates are available: 9.11.5rc1, 9.12.3rc1
Michael McNally
mcnally at isc.org
Fri Oct 5 19:28:22 UTC 2018
New release candidates are available for upcoming maintenance releases
in the 9.11, and 9.12 stable release branches of BIND.
Release notes can be found with the releases or via the following links:
9.11.5rc1:
https://ftp.isc.org/isc/bind9/9.11.5rc1/RELEASE-NOTES-bind-9.11.5rc1.html
9.12.3rc1:
https://ftp.isc.org/isc/bind9/9.12.3rc1/RELEASE-NOTES-bind-9.12.3rc1.html
These releases introduce two new update policy rulesets, krb5-selfsub
and ms-selfsub, which were promised in the announcement of CVE-2018-5741.
They are meant to reproduce the behavior which, prior to CVE-2018-5741,
was incorrectly claimed for the krb5-subdomain and ms-subdomain rulesets,
in case any operators were relying on exactly the behavior promised
in the (incorrect) documentation for those features. Please see our
announcement for CVE-2018-5741 if you need more information:
https://kb.isc.org/docs/cve-2018-5741
More information about the bind-announce
mailing list