ISC.org

ISC.org maintains and publishes the BIND 9 DNS software, the Kea DHCP server, and the Stork graphical management interface. ISC also operates the F-Root system for the benefit of the Internet.

Public Key

npub1at0tnp83e8xq8urgtxn4rumv9q8lzka2vlxj8v27mv5ehpg8qeeq928u5j

NIP-05 Address

iscdotorg@fosstodon-org.mostr.pub

Profile Code

nprofile1qqsw4h4esncunnqr7p59nf637dkzsrl3tw4x0nfrk90dk2vms5rsvuspz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qz9thwden5te0wfjkccte9ejxjar5duh8qatzqc34sg

Publishing to

relay.mostr.pub

relay.ditto.pub

nostr.wine

Author Public Key

npub1at0tnp83e8xq8urgtxn4rumv9q8lzka2vlxj8v27mv5ehpg8qeeq928u5j

Show more details

Last Notes

2026-10-23 07:11:51 UTC

ISC has been fortunate to have @nprofile…4ru4 as our Director of DNS Engineering since 2017. But independently of his day job, he is an important maintainer of PHP packages for Debian and Ubuntu.
This has become even more significant over the last few days as the PHP RCE vulnerabilities have been disclosed.
We are so proud of Ondřej, and grateful for him and all the other unsung heroes of the global Internet who work for the common good.
Read more at the Atlantic: https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/

2026-07-21 19:59:06 UTC

DNS Operations working group meeting yesterday at IETF recording is available. Warning - it is 2 hours long.
Honestly?I haven't watched the whole thing, it is rly long, but I skipped around, looking for controversy, and it seems like the usual, well-meaning people with an idea for the DNS. This is the reason it is so complicated - so many use cases.
https://www.youtube.com/watch?v=qASW86uosQw

2026-07-21 18:58:44 UTC

We continue to get LLM reports of high severity security vulnerabilities in BIND 9 that turn out to be ... just the way the DNS works.
The *only possible conclusion* is, DNS is DANGEROUS.
Right?

2026-05-20 12:07:15 UTC

Our May 2026 maintenance releases of BIND 9 are available at https://isc.org/download : 9.18.49 and 9.20.23 (stable) and 9.21.22 (development). Packages and container images provided by ISC will be updated later today.
In addition to bug fixes and feature improvements, these releases also contain fixes for security vulnerabilities:
- https://kb.isc.org/docs/cve-2026-3039
- https://kb.isc.org/docs/cve-2026-3592
- https://kb.isc.org/docs/cve-2026-3593
- https://kb.isc.org/docs/cve-2026-5946
- https://kb.isc.org/docs/cve-2026-5947
- https://kb.isc.org/docs/cve-2026-5950

2026-04-28 22:07:46 UTC

"This is also a good reminder that we rely so very much on the Internet Archive for many projects of the time."
#nevent1q…r08l

2026-04-16 21:08:16 UTC

I just posted a blog, it is 100% nicer and more restrained than our development team would have posted. Read between the lines, people.... ;-)
https://www.isc.org/blogs/2026-04-16-How-to-report-a-vulnerability/

2026-03-03 16:43:14 UTC

The EC is working on more detailed guidance about how the CRA will work in practice. After lots of input from many of our open source colleagues, they have issued a draft. There are substantial improvements to the guidance around open source.
The EC has opened a 4-week public comment period on this new document, it would be a good time to read it and comment, if you haven't.
https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/16959-Draft-Commission-guidance-on-the-Cyber-Resilience-Act_en
#cra #openSource

2025-12-22 14:42:16 UTC

When the European Commission approached us about funding a bug bounty for BIND 9, we were impressed with the proposal. We have a policy against bug bounties (because we were frustrated with people wasting our time), but under this proposal, the YesWeHack team would do initial triage, and use their expertise to minimize the 'slop' reports. This is a game-changer for a small development team.
The bounty program is active, and we are looking for our first valid report.
https://yeswehack.com/programs/bind-bug-bounty-program

2025-10-29 14:15:03 UTC

Kea 3.0.2 and 3.1.3, the latest versions of ISC's DHCP server software, are released. Kea 3.0.2 is a maintenance release on the existing stable branch, and Kea 3.1.3 is a development release.
Please note that both versions address a vulnerability in kea-dhcp4; see https://kb.isc.org/docs/cve-2025-11232.
The releases are available from the ISC download page at https://www.isc.org/download/#Kea and from our Cloudsmith repos. Development versions are not suitable for production use.
Thank you for using ISC’s software!

2025-06-17 19:48:00 UTC

- reply

The recording is posted at: https://www.youtube.com/live/esy96ePPqpU?t=17199s

2025-06-12 16:30:29 UTC

This Saturday, June 14 at 2:30 PM EDT, Dan Mahoney of ISC will speak about "Running a root DNS server on FreeBSD -- from Alpha to Now" at BSDCan 2025 in Ottawa!
We hope you can be there!
https://indico.bsdcan.org/event/5/contributions/109/

2025-05-28 19:48:56 UTC

Did you know that ISC has TWO job openings at the moment?
We are looking for two additional engineers for the Stork team. Stork is our powerful, scaleable, easy-to-use, open source, graphical management tool for DHCP and DNS.
These are both 100% remote, work-from-home jobs (from almost anywhere in the world) and ISC is a great place to work (even if we do say so ourselves).
If you're not a bot, please apply at https://isc.recruitee.com !

2025-05-09 13:51:45 UTC

- reply

Some of you are looking for new jobs now, and I am very sympathetic to how hard that can be. However, this is also a terrible time to be hiring: we posted these jobs and immediately, AI-generated applications started flooding in. We are wasting a tremendous amount of time we don't have in wading through applications trying to decide if there is a human involved.
One of the reviewers commented that the hiring process may come down to who can correctly identify the traffic lights.

2025-05-07 14:35:28 UTC

ISC is hiring! We are looking for two additional engineers for the Stork team. We are developing a powerful, scaleable and easy to use Open Source graphical management tool for DHCP and DNS. These are both 100% remote, work from home jobs and ISC is a great place to work.
Apply at https://isc.recruitee.com

2025-04-19 17:28:01 UTC

We have done what we can to insulate ourselves from the CVE drama, by reserving a block of addresses that should last us a while, but, what a mess…
https://opensourcesecurity.io/2025/04-can-we-trust-cve/

2025-04-01 14:45:37 UTC

This is adorable!
From our friends at #NLnetLabs ... get a bound version of the phone book of the Internet.
https://nlnetlabs.nl/news/2025/Apr/01/phonebook-of-the-internet/ #dns

2025-03-20 20:45:52 UTC

Did you know ISC had a #DNS Hackathon recently? It was hosted by #RIPE_NCC , #dnsoarc , and #Netnod in Stockholm on March 14-15. We proposed a project, the DNS Zone Viewer, to integrate another DNS implementation (besides #BIND 9) with Stork, our graphical management interface.
Read more about it at https://www.isc.org/blogs/2025-dns-hackathon/ !

2025-03-20 13:53:07 UTC

the 'broligarchs' do not represent us, either!
https://mastodon.art/@ratfactor/114192334285787607
#opensource

2025-03-12 21:09:29 UTC

Chaoyi Lu just gave an excellent overview of 2024 research papers into DNS security at the ICANN meeting in Seattle this week. Save yourself a week of reading and get a briefing by scanning this.
https://static.sched.com/hosted_files/icann82/7b/1.1%20chaoyi-dnspapers2024-0304.pdf
#dns

2025-03-10 19:09:35 UTC

RE: https://mastodon.rfc1925.org/@ondrej/114139634627242361
It would be nice if these people writing a new DNS resolver could just promote their system on its merits, without resorting to driveby attacks on existing software.
BIND9 has had many CVEs due to input validation and denial of service (due to our use of contracts), but memory safety has never been a significant cause of CVEs in BIND9. https://www.cvedetails.com/product/144/ISC-Bind.html?vendor_id=64

2024-12-19 19:30:38 UTC

Raise your hand if you're familiar with the DNS Root Server System! 🖐️
A lot of people aren't, so our president, Jeff Osborn, gave a talk recently about it: how it works, what it is, and what it isn't.
Even if you think you know all about it already, you might find some interesting information in here. Check it out at https://www.isc.org/blogs/root-server-system/ !

2024-12-19 17:21:40 UTC

ISC has issued an Operational Notification for BIND 9.20.0 -> 9.20.4. We apologize for any inconvenience, especially this close to the holiday season.
https://kb.isc.org/docs/operational-notification-bind-920-defect-in-qpzone-implementation
ISC has updated all 9.20.4 packaged distributions to use the older RBTDB database implementation instead of the new QPDB for authoritative zones. We recommend affected users update their packages or recompile their builds.
Please refer to the link above for more details and instructions.

2024-12-11 16:14:21 UTC

Our latest BIND releases are live!
BIND 9.18.32 and 9.20.4 are the stable versions, and 9.21.3 is the development version.
They can be downloaded from the ISC software download page, https://www.isc.org/download. Packages and container images provided by ISC will be updated later today.
Check the release notes for a summary of significant changes in each version.
We recommend that users planning to upgrade from the EOL 9.16 branch read the following document first:
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918

2024-12-10 00:07:00 UTC

Honestly you all are simply *LUCKY* that the internet works at all. If/when it works, it is because people who care are working, mostly un-noticed, in the background. I am not talking only of my own colleagues.....

2024-12-09 23:37:17 UTC

I have an idea for a new service, DNS *therapy*. We listen to your DNS problems with understanding and empathy, but we do not provide solutions. What do you think, is this a compelling offering??

2024-08-26 21:15:48 UTC

Our August maintenance releases of BIND 9.18 and 9.20 are out, along with the first release of our new development branch, 9.21.
Download from: https://www.isc.org/download.
NB:
We will roll the package repositories over, moving 9.20 to the `bind` repo, and adding 9.21 to `bind-dev`, on **Wednesday, August 28th**.
BIND 9.18 is and will remain in the 'bind-esv' repo, so if you are using BIND 9.18 and don't want to be updated to 9.20, please set your systems to update from `bind-esv`.

2024-06-25 13:54:06 UTC

Warning: Someone is sending emails from try-isc.com, pretending to be from Internet Systems Corporation, and offering information about undisclosed BIND software vulnerabilities. These emails are NOT from ISC, the authors of BIND, and they are not authorized by ISC. https://www.isc.org/blogs/2024-spammer-impersonator/

2024-06-06 14:03:59 UTC

Will you be at #NANOG91 next week in Kansas City? ISC will!
Please stop by our table in the Monday afternoon Sponsor Showcase area and say hi!
See you there!
https://cdn.fosstodon.org/media_attachments/files/112/570/047/270/289/405/original/82b82ada884bfad9.png

2024-05-30 17:54:36 UTC

ISC is hiring! We have two open positions at the moment:
BIND 9 Software Engineer
BIND 9 QA/Automation/Release Engineer
ISC is (even if we do say so ourselves) a terrific company to work for, full of smart and friendly people. We are 100% remote and our staff can (and do!) work from anywhere. We offer competitive salaries and benefits.
If you're interested, please visit https://www.isc.org/careers/ to find out more and apply!

2024-05-15 19:00:01 UTC

Our May 2024 maintenance releases of BIND 9 are available and can be downloaded from https://www.isc.org/download.
Check the release notes for significant updates.
We recommend that users planning to upgrade from either the EOL 9.11 branch or the EOL 9.16 branch read the following documents first:
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-911-to-916
https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
Thanks for using ISC's software!

2024-01-19 14:49:04 UTC

If you're not planning to hurkle-durkle all weekend, you might learn something by peeking into the EU Policy Workshop Devroom at Fosdem on Sunday. ISC's Robert Carolina is one of a number of open source advocates participating. Rob will give a 5 minute speed lesson on product liability and software, a topic everyone making software used in the EU needs to pay attention to. (Yes, you can stay home and stream it!) https://fosdem.org/2024/schedule/track/eu-policy/