ISC has announced the release of BIND versions 9.20.29 (stable) and 9.21.26 (development), addressing 14 security vulnerabilities, including eight rated as high severity related to cache poisoning and denial-of-service attacks. While ISC reported no known active exploitation of these vulnerabilities, they recommend users upgrade to the nearest patched version as soon as possible. The vulnerabilities span several versions, affecting 9.18, 9.20, and 9.21, with 9.20.29 closing all 14 security issues, while 9.21.26 resolves 13. The updates also include performance improvements and fixes for various bugs, emphasizing the importance of maintaining secure and efficient DNS operations

ISC Patches 14 BIND 9 Vulnerabilities in 9.20.29 and 9.21.26

ISC has released both BIND 9.20.29 (stable) and 9.21.26 (development) today, patching 14 security vulnerabilities spanning cache poisoning and denial-of-service. Eight of the flaws rate High severity (CVSS 7.5), though ISC reported no known active exploitation. The updates affect the 9.18, 9.20, and 9.21 lines, with 9.20.29 closing all 14 while 9.21.26 addresses 13. ISC recommends upgrading to the patched release nearest your current version as soon as possible.

ISC Patches 14 BIND 9 Vulnerabilities in 9.20.29 and 9.21.26 @ Linux Compatible