From: "Lewis G Rosenthal" Received: from [192.168.100.201] (account lgrosenthal@2rosenthals.com HELO [192.168.100.23]) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTPSA id 880470 for ecs-isp@2rosenthals.com; Mon, 13 Jul 2020 12:35:07 -0400 Subject: Re: [eCS-ISP] [BULK] [eCS-ISP] Bind 9.11.20 To: eCS ISP Mailing List References: Organization: Rosenthal & Rosenthal, LLC Message-ID: <5F0C8D3C.5090107@2rosenthals.com> Date: Mon, 13 Jul 2020 12:35:08 -0400 User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:38.0) Gecko/20100101 Firefox/38.0 SeaMonkey/2.35 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi, Dan... On 07/13/20 12:01 pm, Dan Napier wrote: > Hello Friends > > Did I miss something, I seem to be way ahead of the curve. Running 9.12.4 I am not a Math Major, so I might be wrong, but isn’t 9.11.20 a lower rev? > 9.12.4 seems to run dandy, reports ip4 and ip6 addresses, does not hog cpu. Did I do something wrong? > As you will note here: https://bind.isc.org/ 9.11 is an ESV (Extended Service Release). 9.11.20 is indeed newer than 9.12.4. BIND 9.12.4 was a maintenance release, specifically to address issues disclosed in CVE-2018-5744, CVE-2018-5745, and CVE-2019-6465. 9.11.20, OTOH, addresses all security issues up through CVE-2020-8619: https://gitlab.isc.org/isc-projects/bind9/-/blob/v9_11/README.md Not every higher version number necessarily denotes a *newer* or more secure one. 9.12 was a development branch; 9.11 is a stable one. 9.16 is current, and will eventually become an ESV (I believe), so at some point, that should become our target. GL HTH -- Lewis ------------------------------------------------------------- Lewis G Rosenthal, CNA, CLP, CLE, CWTS, EA Rosenthal & Rosenthal, LLC www.2rosenthals.com visit my IT blog www.2rosenthals.net/wordpress -------------------------------------------------------------