BIND 8 End Of Life Announcement

ISC strongly encourages users who depend on BIND 8 to migrate to BIND 9 as soon as possible.

It's never easy to retire a product. The security issues of BIND 8 are many, and 7 years after the release of BIND 9, ISC must devote our efforts to maintaining and enhancing the current version. BIND 9 was always intended as a replacement for BIND 8, thus there are no more BIND 8 releases planned beyond 8.4.7-P1, being released today.

Solution to CERT Advisories CVE-2007-2930 and VU#927905

Preferred solution: Upgrade to BIND 9.4.1-P1

Alternative Interim solution: Install patch "P1" for BIND 8.4.7

Tools for Migrating to BIND9

• Why should I stop running BIND8?
• Additional Resources:
  • Migration from BIND 8 to 9
  • named-checkconf
  • Recommended minimum hardware config
  • BIND 9.4 Administrator Reference Manual
  • O'Reilly's BIND Migration Gotcha's
  • Men & Mice DNS consulting.
  • ISC BIND9 migration consulting service
  • CERT Vulnerability Note #927905
  • Common Vulnerabilities and Exposures list entry CVE-2007-2930
  • BIND 9 Administrators Reference Manual Book by Jeremy C. Reed
  • Reference Sites: CERT, Team Cymru, SANS.
  • Ron Aitchison's book on DNS, and BIND 9 .
  • BIND 8-9 Transition Strategies webinar slides.