named.rfc1912.zones + named.root.key

[Greg Choules]

Package naming is always difficult. Naming things is hard, as they say. It
just so happens that 9.18 has the ESV label at the moment. But, as you
read, 9.18 has nearly had its day, 9.22 is suspended for now and so 9,20
will be maintained for a while. Therefore 9.20 is the best choice right
now. Not only because it is current but also because it is the focus for
vulnerability fixes. Please follow the KB instructions and install the
latest 9.20.

As a side note, people will not stop trying to help - depending on the
issue - however old is your BIND version; if, for instance; you wanted to
know more about a specific statement. But if issues look security-related,
the initial advice will always be to upgrade to the latest release first
and see if the problem still exists.

Cheers, Greg

On Thu, 28 May 2026 at 08:42, Renzo Marengo <buckroger2011 at gmail.com> wrote:

> >This explains how to obtain ISC official packages
> https://kb.isc.org/docs/isc-packages-for-bind-9#open-source-packages
> >You should consider 9.20 because of this:
> https://www.isc.org/blogs/2026-05-12-bind-security-updates/
>
> So you suggest to migrate from ESV-BIND to BIND (rpm 9.20.23)  ?
> I chose ESV bind because it has life cycle longer than stable bind
> Link, which you indicated, says It will end maintenance for 9.18 and
> 9.18-S at the end of June 2026 and efforts will be fixed efforts on
> vulnerabilities in the 9.20 and 9.21 branches.
> Do you know when 9.20 rpm esv-bind  will be available ?
>
> Il giorno gio 28 mag 2026 alle ore 08:58 Greg Choules
> <gregchoules+bindusers at googlemail.com> ha scritto:
> >
> > As I said, 9.11.4 is so very old, many changes have happened since then
> so please don't get hung up on two files.
> >
> > This explains how to obtain ISC official packages
> https://kb.isc.org/docs/isc-packages-for-bind-9#open-source-packages
> > You should consider 9.20 because of this:
> https://www.isc.org/blogs/2026-05-12-bind-security-updates/
> >
> > I hope that helps.
> >
> > On Thu, 28 May 2026 at 07:43, Renzo Marengo <buckroger2011 at gmail.com>
> wrote:
> >>
> >> I'm using "ESV" Bind version, the rpm package dedicated for
> >> RHEL-compatible doesn't contains these 2 files and someone says
> >> depends on packaging worker of repository.
> >> Why should I use 9.20.23 version ?
> >>
> >>
> >> Il giorno gio 28 mag 2026 alle ore 08:08 Greg Choules
> >> <gregchoules+bindusers at googlemail.com> ha scritto:
> >> >
> >> > Hello Renzo.
> >> >
> >> > There have been so many changes since 9.11.4 I would suggest that you
> don't get hung up on a couple of files. If you are installing 9.18.49 as a
> package, it will contain everything it needs.
> >> > I would recommend that, if you are planning a jump from 9.11 anyway,
> that you consider 9.20.23 rather than 9.19.49.
> >> >
> >> > Regards, Greg
> >> >
> >> > On Thu, 28 May 2026 at 07:00, Renzo Marengo <buckroger2011 at gmail.com>
> wrote:
> >> >>
> >> >> in Alma Linux 9 I have decide to migrate to latest ISC-Bind (rpm
> package) which is 9.18.49 version (Copr/Epel 9 repository)
> >> >> Previous bind 9.11.4 contains these 'include' entries:
> >> >>
> >> >> named.rfc1912.zones
> >> >> named.root.key
> >> >>
> >> >> These files don't exist inside isc-bind rpm packages
> >> >> I think the former is about default zones (e.g. localhost) the
> latter is about dnssec keys.
> >> >>
> >> >> I'd like using standard files according to isc-bind documents.
> >> >> How should I proceed ?
> >> >>
> >> >> Thanks
> >> >>
> >> >>
> >> >> --
> >> >> Visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20260528/28f57242/attachment.htm>