|
Message-ID: <1d770872-05b4-6e74-930f-09a49c34ad24@isc.org> Date: Wed, 30 Aug 2017 08:01:31 -0800 From: ISC Security Officer <security-officer@....org> To: oss-security@...ts.openwall.com Subject: A recommendation for maintainers of BIND packages (re: DNSSEC validation) Hello, oss-security list subscribers -- Please pardon the intrusion but ISC are trying to reach packagers who maintain and redistribute packages of BIND based on our source. We know that many of you selectively pick and choose changes which are added to current BIND releases for backporting to older BIND versions on which your distributed packages are based. For those of you who do, we would like to make sure you have selected this change: 4564. [maint] Update the built in managed keys to include the upcoming root KSK. [RT #44579] and distributed it to users prior to the completion of the in-progress root key rollover in order to ensure that DNSSEC validation continues to work for operators who are using BIND's managed-keys functionality. If you have any questions, you may contact us using security-officer@....org Thank you, Michael McNally ISC Security Officer
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.