ISC DHCP 4.2.5-P1 is now available for download. This is a security release of DHCP 4.2.5-P1. It differs from DHCP 4.2.5 in the version of BIND code included, BIND 9.8.4-P2, which contains a fix for the BIND vulnerability disclosed in CVE-2013-2266 (see https://kb.isc.org/article/AA-00871 for more information.) There are no code changes to the DHCP source. A list of the changes in this release has been appended to the end of this message. For a complete list of changes from any previous release, please consult the RELNOTES file within the source distribution, or on our website: http://www.isc.org/software/dhcp/425-p1 This release, and its OpenPGP-signatures are available now from: ftp://ftp.isc.org/isc/dhcp/4.2.5-P1/dhcp-4.2.5-P1.tar.gz ftp://ftp.isc.org/isc/dhcp/4.2.5-P1/dhcp-4.2.5-P1.tar.gz.sha512.asc ftp://ftp.isc.org/isc/dhcp/4.2.5-P1/dhcp-4.2.5-P1.tar.gz.sha256.asc ftp://ftp.isc.org/isc/dhcp/4.2.5-P1/dhcp-4.2.5-P1.tar.gz.sha1.asc ISC's Release Signing Key can be obtained at: http://www.isc.org/about/openpgp/ Changes since 4.2.5 - A security issue in Bind9 was found and fixed. This release includes the fixed Bind9 code. There have been no code changes to the DHCP code. [ISC-Bugs #32688] CVE: CVE-2013-2266