id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
11166	bind9 bind-utilities bind 9.11.4-P2 (Security Update)	Douglas R. Reno	thomas	"New patch level.

At 6:18PM CDT, I received the following email over the oss-security mailing list:


{{{
To the packagers and redistributors of BIND:

Today ISC announced one CVE (which does not come with a code fix)
and two operational notifications for issues in BIND (which do.)

The new releases for BIND 9.11.4-P2 and BIND 9.12.2-P2 can be found
at http://www.isc.org/downloads

Details on the security vulnerability and the two operational
notifications can be found via the following links:

   https://kb.isc.org/docs/cve-2018-5741


https://kb.isc.org/docs/change-4892-exposed-multiple-problems-affecting-dnssec-inline-signing

https://kb.isc.org/docs/some-releases-of-bind-9-12-are-too-strict-when-handling-referrals-with-non-empty-answer-sections


Michael McNally
ISC Security Officer
}}}
"	enhancement	closed	high	8.4	BOOK	SVN	medium	fixed