Our takeISC advisory AV26-1072 covers multiple high-severity flaws in BIND 9 (9.11.0–9.18.50, 9.21.0–9.21.26 and supported preview equivalents). Update your resolvers and servers now.Security Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Update BIND 9 to 9.18.51, 9.20.10 or 9.21.27 (or later) and any Supported Preview Edition releases immediately. Check your recursive and authoritative servers; the advisory covers a broad range of versions.
What this means for you — Lean IT orgs:If you run your own DNS servers with BIND 9, update to version 9.18.51, 9.20.10 or 9.21.27 (or newer) right away. Most lean-IT teams use cloud DNS and can ignore this.
What this means for you — MSP:Audit every client for on-prem BIND 9 (9.11–9.18.50, 9.21.0–9.21.26 and Supported Preview equivalents). Patch to 9.18.51+, 9.20.10+ or 9.21.27+ and verify recursive/authoritative roles.
What this means for you — Researcher:ISC BIND advisory AV26-1072 discloses vulnerabilities affecting BIND 9 versions 9.11.0–9.18.50, 9.21.0–9.21.26 and multiple Supported Preview Edition releases. Update to the fixed versions listed.