CVE-2011-1910 vs bind 9.6-ESV-R4-P3

Cathy Almond cathya at isc.org
Wed Aug 3 11:08:36 UTC 2011


On 03/08/11 10:25, Issam Harrathi wrote:
> Hi all,
> when i see this about the affected version by the CVE-2011-1910: 9.6: 9.6.3,
> 9.6-ESV-R2, -R3, -R4, -R5b1
> does this mean that the 9.6-ESV-R4-P1 is affected?

I know it's a bit unwieldy and large at the moment (we have thoughts on
how to remedy this), but does this table help? :

https://www.isc.org/software/bind/security/matrix

And I'd recommend that you think about 9.6-ESV-R5 (recently released)
which addresses one more recent security issue that does impact
9.6-ESV-R4-P1 (CVE-2011-2464).

Cathy



More information about the bind-users mailing list