This document summarizes changes since BIND 9.9.9:
BIND 9.9.9-P5 addresses the security issues described in
CVE-2016-9131, CVE-2016-9147 and CVE-2016-9444.
BIND 9.9.9-P4 addresses the security issue described in
BIND 9.9.9-P3 addresses the security issue described in
BIND 9.9.9-P2 addresses the security issue described in
BIND 9.9.9-P1 addresses Windows installation issues and a race
condition in the rbt/rbtdb implementation resulting in named
exiting due to assertion failures being detected.
The latest versions of BIND 9 software can always be found at
There you will find additional information about each release,
source code, and pre-compiled versions for Microsoft Windows
Named could mishandle authority sections that were missing
RRSIGs triggering an assertion failure. This flaw is
disclosed in CVE-2016-9444. [RT # 43632]
Named mishandled some responses where covering RRSIG
records are returned without the requested data
resulting in a assertion failure. This flaw is disclosed in
CVE-2016-9147. [RT #43548]
Named incorrectly tried to cache TKEY records which could
trigger a assertion failure when there was a class mismatch.
This flaw is disclosed in CVE-2016-9131. [RT #43522]
It was possible to trigger assertions when processing
a response. This flaw is disclosed in CVE-2016-8864. [RT #43465]
It was possible to trigger a assertion when rendering a
message using a specially crafted request. This flaw is
disclosed in CVE-2016-2776. [RT #43139]
getrrsetbyname with a non absolute name could trigger an
infinite recursion bug in lwresd and named with lwres
configured if when combined with a search list entry the
resulting name is too long. This flaw is disclosed in
CVE-2016-2775. [RT #42694]
Thank you to everyone who assisted us in making this release possible.
If you would like to contribute to ISC to assist us in continuing to
make quality open source software, please visit our donations page at
© 2001-2017 Internet Systems ConsortiumFor assistance with problems and questions for which you have not been able to find an answer in our Knowledge Base, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership.ISC relies on the financial support of the community to fund the development of its open source software products. If you would like to support future product evolution and maintenance as well having peace of mind knowing that our team of experts are poised to provide you with individual technical assistance whenever you call upon them, then please consider our Professional Subscription Support services - details can be found on our main website.