<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">When you say “ISC packages”, are you referring to the packages in the ppa:isc/bind repository on launchpad?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Ben Bridges<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Ondřej Surý <ondrej@isc.org> <br>
<b>Sent:</b> Thursday, December 8, 2022 12:26 AM<br>
<b>To:</b> Ben Bridges <bbridges@springnet.net><br>
<b>Cc:</b> Emmanuel Fusté <manu.fuste@gmail.com>; bind-users@lists.isc.org<br>
<b>Subject:</b> Re: Bind 9.16.1 crash<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">In fact, it’s as far from being “fully patched” as possible. Not all bugs are security bugs and not all crashes are security bugs.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Ubuntu is pushing a version that has received most refactoring in the networking code in the recent history.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The “we don’t update upstream version” policy works well only if you carefully pick upstream version. Instead this is snapshot of Debian at random point int time and this is the unfortunate result. I’ve negotiated the exception for Debian
to carry the latest upstream release for a good reason.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">You are going to do so much better by using ISC packages. And my general recommendation would be to go straight to latest 9.18.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">Ondrej<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">--<o:p></o:p></p>
</div>
<p class="MsoNormal">Ondřej Surý — ISC (He/Him)<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-bottom:12.0pt">On 8. 12. 2022, at 1:03, Ben Bridges <bbridges@springnet.net> wrote:<o:p></o:p></p>
</blockquote>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">According to the Ubuntu maintainers, the bind9 package on our server (1:9.16.1-0ubuntu2.11) is fully patched for all the BIND 9 CVE’s including the latest batch of 6 released on 2022-09-21 (CVE-2022-38178, CVE-2022-38177, CVE-2022-3080,
CVE-2022-2906, CVE-2022-2881, and CVE-2022-2795).<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Emmanuel Fusté <manu.fuste@gmail.com> <br>
<b>Sent:</b> Wednesday, December 7, 2022 4:22 PM<br>
<b>To:</b> Ben Bridges <bbridges@springnet.net>; bind-users@lists.isc.org<br>
<b>Subject:</b> Re: Bind 9.16.1 crash<o:p></o:p></p>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">Current ESV : 9.16.35<o:p></o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">No, your release is not patched.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Add the ISC PPA repo and install the latest ESV. ISC PPA packaged are packaged by the same maintainers.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">Le mer. 7 déc. 2022, 23:02, Ben Bridges <<a href="mailto:bbridges@springnet.net" target="_blank">bbridges@springnet.net</a>> a écrit :<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Ubuntu 20.04.5 is LTS and BIND 9.16 is the current stable ESV release, so they’re both still fully supported (and fully patched).<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Ben Bridges</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> bind-users <<a href="mailto:bind-users-bounces@lists.isc.org" target="_blank">bind-users-bounces@lists.isc.org</a>>
<b>On Behalf Of </b>John Thurston<br>
<b>Sent:</b> Wednesday, December 7, 2022 2:32 PM<br>
<b>To:</b> <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<b>Subject:</b> Re: Bind 9.16.1 crash<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p>To me, the next step is to get your instance of BIND somewhat up to date. <o:p>
</o:p></p>
<p>I'm not a "gotta be on the bleeding edge" kinda guy, but running a version released in first quarter of 2020 is old even by my standards. Is there some business reason to keep running a +2 year old version of BIND?<o:p></o:p></p>
<pre>--<o:p></o:p></pre>
<pre>Do things because you should, not just because you can. <o:p></o:p></pre>
<pre> <o:p></o:p></pre>
<pre>John Thurston 907-465-8591<o:p></o:p></pre>
<pre><a href="mailto:John.Thurston@alaska.gov" target="_blank">John.Thurston@alaska.gov</a><o:p></o:p></pre>
<pre>Department of Administration<o:p></o:p></pre>
<pre>State of Alaska<o:p></o:p></pre>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On 12/7/2022 10:32 AM, Ben Bridges wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The BIND version is 9.16.1 running on a fully patched Ubuntu 20.04.5 server.<o:p></o:p></p>
</blockquote>
</div>
<p><span style="font-family:"Arial",sans-serif;border:solid windowtext 1.0pt;padding:0in"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;border:solid windowtext 1.0pt;padding:0in"><~WRD2561.jpg><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><br>
<br>
</span><a href="https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=FSsvuOcOZbeJGvJwFC4eFc1vL4Q3NElIAgIaa1YT504%3D&reserved=0" title=""Link: SpringNet" t "><span style="text-decoration:none"><o:p></o:p></span></a></p>
<div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:blue;border:solid windowtext 1.0pt;padding:0in"><a href="https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=FSsvuOcOZbeJGvJwFC4eFc1vL4Q3NElIAgIaa1YT504%3D&reserved=0" title=""Link: SpringNet" t "><span style="text-decoration:none"><~WRD2561.jpg></span><span style="font-family:"Calibri",sans-serif;color:windowtext;border:none;text-decoration:none"><o:p></o:p></span></a></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"Arial",sans-serif"><br>
<br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Sales 417.575.7000 | Support 417.874.8000 |
<a href="https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=FSsvuOcOZbeJGvJwFC4eFc1vL4Q3NElIAgIaa1YT504%3D&reserved=0" target="_blank" title="Link: SpringNet">
springnet.net</a></span><o:p></o:p></p>
</div>
<p class="MsoNormal">-- <br>
Visit <a href="https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=fY9Hu18j4I8u5bWAz9vAJRcpGFlXuo5FNwZMW5aLI18%3D&reserved=0" target="_blank">
https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=PqcVhkk9XX4rpg94rMqN5p83q8mfBIC8X%2BiebJ8Pic4%3D&reserved=0" target="_blank">
https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fbind-users&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=fY9Hu18j4I8u5bWAz9vAJRcpGFlXuo5FNwZMW5aLI18%3D&reserved=0" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><o:p></o:p></p>
</blockquote>
</div>
</div>
<p><span style="font-family:"Arial",sans-serif"><br>
<span style="border:solid windowtext 1.0pt;padding:0in"><img border="0" width="300" height="12" style="width:3.125in;height:.125in" id="Picture_x0020_1" src="cid:~WRD0716.jpg" alt="Image removed by sender. City Utilities"></span><br>
<br>
</span><a href="https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=FSsvuOcOZbeJGvJwFC4eFc1vL4Q3NElIAgIaa1YT504%3D&reserved=0" title=""Link: SpringNet" t "><span style="font-family:"Arial",sans-serif;border:solid windowtext 1.0pt;padding:0in;text-decoration:none"><img border="0" width="125" height="54" style="width:1.3in;height:.5666in" id="Picture_x0020_2" src="cid:~WRD0716.jpg" alt="Image removed by sender. SpringNet"></span></a><span style="font-family:"Arial",sans-serif"><br>
<br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Sales 417.575.7000 | Support 417.874.8000 |
<a href="https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.springnet.net%2F&data=05%7C01%7Cbbridges%40springnet.net%7C8cfa221dba534b913bc508dad8e51261%7Cd5c4167800674aa2b1d53a72abc6a57c%7C0%7C0%7C638060775631803256%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=FSsvuOcOZbeJGvJwFC4eFc1vL4Q3NElIAgIaa1YT504%3D&reserved=0" target="_blank" title="Link: SpringNet">
springnet.net</a></span><o:p></o:p></p>
<p class="MsoNormal">-- <br>
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.<br>
<br>
<br>
bind-users mailing list<br>
bind-users@lists.isc.org<br>
https://lists.isc.org/mailman/listinfo/bind-users<o:p></o:p></p>
</div>
</blockquote>
</div>
<p><font face="Arial" size="1px"><br>
<img src="https://www.cityutilities.net/wp-content/uploads/email-divbar.jpg" height="12" width="300" border="0" alt="City Utilities"><br>
<br>
<a href="http://www.springnet.net" target="_blank" title="Link: SpringNet" border="0"><img src="https://www.cityutilities.net/wp-content/uploads/springnet-emaillogo.png" height="54" width="125" border="0" alt="SpringNet"></a><br>
<br>
</font><font face="Arial" size="2">Sales 417.575.7000 | Support 417.874.8000 | <a href="http://www.springnet.net" target="_blank" title="Link: SpringNet" border="0">
springnet.net</a></font></p>
</body>
</html>