Hi, Dan...

On 07/13/20 12:01 pm, Dan Napier wrote:

Hello Friends

Did I miss something, I seem to be way ahead of the curve.  Running 9.12.4   I am not a Math Major, so I might be wrong, but isn’t 9.11.20 a lower rev?
9.12.4 seems to run dandy, reports ip4 and ip6 addresses, does not hog cpu.  Did I do something wrong?

As you will note here:

https://bind.isc.org/

9.11 is an ESV (Extended Service Release). 9.11.20 is indeed newer than 9.12.4.

BIND 9.12.4 was a maintenance release, specifically to address issues disclosed in CVE-2018-5744, CVE-2018-5745, and CVE-2019-6465.

9.11.20, OTOH, addresses all security issues up through CVE-2020-8619:

https://gitlab.isc.org/isc-projects/bind9/-/blob/v9_11/README.md

Not every higher version number necessarily denotes a *newer* or more secure one. 9.12 was a development branch; 9.11 is a stable one.

9.16 is current, and will eventually become an ESV (I believe), so at some point, that should become our target.

GL HTH