New BIND releases are available: 9.18.37, 9.20.9, 9.21.8

[Suzanne Goldlust]

Our May 2025 maintenance releases of BIND 9 are available and can be downloaded from the ISC software download page, https://www.isc.org/download. Packages and container images provided by ISC will be updated later today.

In addition to bug fixes and feature improvements, these releases also contain a fix for a security vulnerability (CVE-2025-40775), about which more information is provided in the following Security Advisory:

    https://kb.isc.org/docs/cve-2025-40775

Please note that the current ESV branch, 9.18.X, is not affected by this CVE.

A summary of significant changes in the new releases can be found in their release notes:

  - Current supported stable branches:

    9.18.37 - https://downloads.isc.org/isc/bind9/9.18.37/doc/arm/html/notes.html
    9.20.9  - https://downloads.isc.org/isc/bind9/9.20.9/doc/arm/html/notes.html

  - Experimental development branch:

    9.21.8  - https://downloads.isc.org/isc/bind9/9.21.8/doc/arm/html/notes.html

---

As a reminder, BIND’s supported platforms are listed in the ARM (https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/chapter2.html#supported-platforms) and in this knowledgebase article (https://kb.isc.org/docs/supported-platforms). We ended support for RHEL 7 in June 2024 (as noted in release notes at the time). BIND will no longer build on RHEL7.

Thank you for using ISC’s software.