iiinova — where your digital self keeps evolving

Internet Systems Consortium (ISC)

@isc.org

186 followers 25 following 158 posts

Developer and maintainer of open source Internet Infrastructure software: BIND, Kea and DHCP. Operator of DNS root (F-root). Open source for an open Internet.

Posts Replies Media

Internet Systems Consortium (ISC) @isc.org · 01/10/2026

Our September 2026 maintenance releases of Kea 3.2.1 (stable) and 3.3.2 (development) are available and can be downloaded from www.isc.org/download/. Lots of bug fixes and new compatibility with OpenSSL 4.0; please read the release notes for more details. Thank you for using ISC's software!

ISC's software is open source and available for free

000

Internet Systems Consortium (ISC) @isc.org · 29/09/2026

Don't miss this FREE workshop on managing Kea DHCP and Stork! ISC's Eddy Winstead will be at #NANOG98 in Miami on October 20, leading you through administering our DHCP server software and our graphical management system. Register NOW at nanog.org/events/n98-i... !

Kea DHCP Server Workshop

NANOG is the professional association for Internet engineering, architecture and operations.

000

Internet Systems Consortium (ISC) @isc.org · 17/09/2026

If you'll be at #NANOG98 in Miami on October 20, we hope you'll join us for ISC's FREE hands-on Kea/Stork workshop! Join ISC's Eddy Winstead to learn more about administering our DHCP server software and our graphical management system. Register at nanog.org/events/n98-i.... Hope to see you there!

Kea DHCP Server Workshop

NANOG is the professional association for Internet engineering, architecture and operations.

000

Internet Systems Consortium (ISC) @isc.org · 16/09/2026

CVEs addressed today (8-14 of 14): kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202...

CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement

000

Internet Systems Consortium (ISC) @isc.org · 16/09/2026

CVEs addressed today (1-7 of 14): kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202...

CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification

000

Internet Systems Consortium (ISC) @isc.org · 16/09/2026

The latest versions of BIND are now released: 9.20.29 (stable) and 9.21.26 (development). They contain fixes for 14 CVEs; please read the release notes and upgrade as soon as possible. www.isc.org/download/ Please see the reply to this post 👇 for links to the CVEs fixed in these releases.

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 10/09/2026

There's still space to sign up for ISC's FREE hands-on Kea/Stork workshop at #NANOG98 in Miami on October 20! Join ISC's Eddy Winstead to learn more about administering our DHCP server software and our graphical management system. Register at nanog.org/events/n98-i...

Kea DHCP Server Workshop

NANOG is the professional association for Internet engineering, architecture and operations.

000

Internet Systems Consortium (ISC) @isc.org · 03/09/2026

Funded by a grant from the #Nominet DNS Fund for some new test equipment in our BIND 9 performance monitoring lab, we have achieved significant improvement in BIND's authoritative performance on multi-core systems! Read our latest blog post for the impressive details: www.isc.org/blogs/2026-0...

BIND Authoritative Performance on Multi-core Systems

A 2025/26 grant from the Nominet DNS Fund enabled ISC to purchase new computers for our ten-year-old Perflab performance test bed.

000

Internet Systems Consortium (ISC) @isc.org · 02/09/2026

Will you be at #NANOG98 in Miami? If so, please join ISC for a FREE hands-on workshop on Tuesday, October 20 to learn more about administering Kea DHCP and Stork, our graphical management system! Sign up now at https:// nanog.org/events/n98-isc-workshop/. We hope to see you there!

Kea DHCP Server Workshop

NANOG is the professional association for Internet engineering, architecture and operations.

000

Internet Systems Consortium (ISC) @isc.org · 26/08/2026

Kea DHCP 3.3.1 has been released. Development versions are not recommended for production use, but we invite you to try 3.3.1 out in your testing lab and give us your feedback. Software/release notes are available at www.isc.org/download/#Kea. Thank you for using ISC’s software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 25/08/2026

Kea is ISC's modern open source DHCP server. Maybe you''ve been thinking of migrating away from the EOL ISC DHCP, or maybe you just want to know more about how to use and manage Kea. We're here to help!

000

Internet Systems Consortium (ISC) @isc.org · 25/08/2026

If you'll be at NANOG 98 in Miami, join us for a FREE hands-on workshop on Tuesday, October 20 to learn more about administering Kea and Stork, our graphical management system! Sign up now at nanog.org/events/n98-i.... We hope to see you there!

Kea DHCP Server Workshop

NANOG is the professional association for Internet engineering, architecture and operations.

100

Internet Systems Consortium (ISC) @isc.org · 19/08/2026

The August 2026 maintenance releases of BIND 9.20.27 (stable) and 9.21.25 (development) are available and can be downloaded from the link below. Packages and container images provided by ISC will be updated later today. For downloads and more information, visit www.isc.org/download/

ISC's software is open source and available for free

000

Internet Systems Consortium (ISC) @isc.org · 12/08/2026

ISC is pleased to announce the release of Stork 2.5.1, a development version of the Stork GUI management system. Development versions are not recommended for production use, but we invite you to try 2.5.1 out in your testing lab. www.isc.org/download/#St.... Thank you for using ISC’s software!

000

Internet Systems Consortium (ISC) @isc.org · 30/07/2026

ISC is pleased to announce the releases of Kea 3.0.4, a maintenance release on a stable branch, and 3.3.0, a development release. The software can be downloaded from www.isc.org/download/#Kea Please read the release notes before upgrading. Thank you for using ISC's software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 22/07/2026

kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202...

CVE-2026-11622: Potential memory usage beyond configured limits

Internet Systems Consortium (ISC) @isc.org · 22/07/2026

In addition to bug fixes and feature improvements, these releases also contain fixes for security vulnerabilities: kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202...

CVE-2026-10723: Incorrect acceptance of NSEC3 records

000

Internet Systems Consortium (ISC) @isc.org · 22/07/2026

The July 2026 maintenance releases of BIND 9 are live. Software and release notes at isc.org/download

CVE-2026-10723: Incorrect acceptance of NSEC3 records

Internet Systems Consortium (ISC) @isc.org · 24/06/2026

Please READ THE RELEASE NOTES thoroughly before upgrading to Kea 3.2.0. The software and release notes can be downloaded from our website at www.isc.org/download/#Kea .

ISC's software is open source and available for free

000

Internet Systems Consortium (ISC) @isc.org · 24/06/2026

ISC is excited to announce the release of Kea 3.2.0! This is a major release and includes a long list of bug fixes, feature improvements, and build changes. For an overview of the main updates available, please read our blog post at www.isc.org/blogs/kea-3-2/ . Thank you for using Kea DHCP!

Announcing Kea 3.2, a new stable version

ISC is excited to announce the release of Kea 3.2.0, a new stable version!

100

Internet Systems Consortium (ISC) @isc.org · 03/06/2026

Development versions are not intended for production use, but we invite you to try it out on your test servers and give us your feedback.

Internet Systems Consortium (ISC) @isc.org · 03/06/2026

ISC is pleased to announce the release of Stork 2.5.0, the latest dev branch of our DHCP and DNS graphical management system. There are many new features and some bug fixes. The Stork software and release notes can be retrieved at www.isc.org/download/#St... Thank you for using ISC’s software!

ISC's software is open source and available for free

100

Internet Systems Consortium (ISC) @isc.org · 03/06/2026

But thank you for paying attention!

100

Internet Systems Consortium (ISC) @isc.org · 03/06/2026

www.merriam-webster.com/grammar/wait...

merriam-webster.com

A Podium Is the Same Thing as a Lectern

We'd say it from a podium if we had to

100

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

(And if you're a researcher, please don't just submit slop reports! ISC and the other open source vendors are doing our best to triage everything, but we need your help.)

000

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

Here's ISC's Petr Špaček giving his "Brace for Upgrades" talk at #RIPE92 last week, as well as a slide from his presentation. The bottom line: streamline your deployment processes, because you're going to need to update often to keep up with the onslaught of AI-discovered vulnerabilities.

ISC engineer Petr Špaček standing behind a podium labeled RIPE92

A presentation slide with the text "Upgrade cycle" in the top left and an exploding-head emoji at the top right, with larger text in the center that reads "Optimize deployment processes!"

200

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

Enjoy a couple of pictures of Ondřej Surý speaking at #RIPE92 ! Were you there for his talk? What did you think?

ISC engineer Ondřej Surý standing behind a podium labeled RIPE92 with his left hand raised

ISC engineer Ondřej Surý standing behind a podium labeled RIPE92

100

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

ISC's Director of DNS Engineering, Ondřej Surý, spoke at last week's #RIPE92 conference on "DNS, Transitive Trust and How Many is Many." It was an interactive presentation with lots of interesting insights and discussion. Watch the recording/read the transcript at ripe92.ripe.net/programme/me...

ripe92.ripe.net

Talk details: DNS, Transitive Trust and How Many is Many, Ondřej Surý - RIPE 92

Talk details for 'DNS, Transitive Trust and How Many is Many' by Ondřej Surý at RIPE 92

000

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

It also ties in with our recent blog post: www.isc.org/blogs/2026-0...

Prepare for more frequent BIND security updates

Plan for more frequent BIND security updates, at least for the remainder of 2026.

000

Internet Systems Consortium (ISC) @isc.org · 02/06/2026

ISC engineer Petr Špaček recently gave a talk at RIPE 92 in Edinburgh on the impact LLMs are having on some open source projects: "Brace for Updates." It is short and pithy, and it may resonate with a lot of you in FOSS.... ripe92.ripe.net/programme/me...

ripe92.ripe.net

Talk details: Brace for Upgrades - Plural, Petr Špaček - RIPE 92

Talk details for 'Brace for Upgrades - Plural' by Petr Špaček at RIPE 92

100

Internet Systems Consortium (ISC) @isc.org · 27/05/2026

Source tarballs and packages are available from our Cloudsmith repositories at cloudsmith.io/~isc/repos/k... for the development version.

Cloudsmith - Repositories - ISC - Internet Systems Consortium (isc) - kea-dev (kea-dev) - Package Groups

Get better DevOps with secure software delivery for: Alpine, Cargo, CocoaPods, Composer, Conan, Conda, CRAN, Dart, Debian, Docker, Generic, Go, Helm, Hex, HuggingFace, LuaRocks, Maven, MCP, npm, NuGet...

000

Internet Systems Consortium (ISC) @isc.org · 27/05/2026

Kea 3.1.9, a development release of ISC's DHCP implementation, is published today. The software is available from the ISC download page at www.isc.org/download/#Kea. Development versions are not suitable for production use. Thank you for using ISC’s software.

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 20/05/2026

In addition to bug fixes and feature improvements, these releases also contain fixes for security vulnerabilities: - kb.isc.org/docs/cve-202... - kb.isc.org/docs/cve-202... - kb.isc.org/docs/cve-202... - kb.isc.org/docs/cve-202... - kb.isc.org/docs/cve-202... - kb.isc.org/docs/cve-202...

CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

000

Internet Systems Consortium (ISC) @isc.org · 20/05/2026

Our May 2026 maintenance releases of BIND 9 are available at isc.org/download : 9.18.49 and 9.20.23 (stable) and 9.21.22 (development). Packages and container images provided by ISC will be updated later today.

ISC's software is open source and available for free

100

Internet Systems Consortium (ISC) @isc.org · 20/04/2026

If you haven't seen it yet, we recently posted a blog about how to report a security vulnerability in a way that is helpful and meaningful. Our marketing team is 100% nicer and more restrained than our development team would have been. Read between the lines, people 😉 www.isc.org/blogs/2026-0...

How to report a security vulnerability, 101

At ISC, we sincerely value the contributions of our users, and security researchers, who analyze and probe our software for vulnerabilities.

Internet Systems Consortium (ISC) @isc.org · 01/04/2026

Our April 2026 maintenance releases of BIND 9 are available: 9.18.48 and 9.20.22 (stable), and 9.21.21 (development). For more information, or to download the software or release notes, please visit the ISC software download page: www.isc.org/download/ Thanks for using ISC's software!

Internet Systems Consortium (ISC) @isc.org · 25/03/2026

In addition to bug fixes and feature improvements, these releases also contain fixes for security vulnerabilities: kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202... kb.isc.org/docs/cve-202...

CVE-2026-1519: Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

Internet Systems Consortium (ISC) @isc.org · 25/03/2026

ISC's March 2026 maintenance releases of BIND 9 are available at isc.org/download : stable branches 9.18.47 and 9.20.21, and development branch 9.21.20. Packages and container images provided by ISC will be updated later today. Thanks for using ISC's software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 25/03/2026

ISC is proud to be one of the first projects to receive funding from the @nominet.uk DNS Fund! They are generously supporting the purchase of some new test equipment for our BIND 9 performance monitoring lab, and we are grateful for their support. Read more at nominet.uk/blog/investi... !

Investing in the internet’s essential technology: inside the first Nominet DNS Fund projects - Nominet

Discover more about the first five projects funded in the Nominet DNS Fund and their impact in the wider DNS ecosystem.

Internet Systems Consortium (ISC) @isc.org · 25/03/2026

Both stable versions address a vulnerability in Kea DHCP; see our published advisory at kb.isc.org/docs/cve-202... . Kea 3.1.7 is not susceptible to this CVE, but development versions are not suitable for production use.

CVE-2026-3608: Stack overflow in Kea daemons

000

Internet Systems Consortium (ISC) @isc.org · 25/03/2026

ISC is pleased to announce the releases of Kea 2.6.5 and 3.0.3 (stable) and 3.1.7 (development). The releases are available from the ISC download page at www.isc.org/download/#Kea. Thank you for using ISC’s software!

100

Internet Systems Consortium (ISC) @isc.org · 06/03/2026

We've just posted a blog on BIND 9.20 resolver performance compared to 9.18. tl;dr: under mid- to heavy traffic loads, 9.20 uses less memory than 9.18. Read more about our performance benchmarking at www.isc.org/blogs/2026-0... Thanks for using ISC's software!

BIND 9.20 Resolver performance compared to 9.18

In this post, we will show that BIND 9.20 compares favorably with 9.

000

Internet Systems Consortium (ISC) @isc.org · 04/03/2026

ISC is pleased to announce the results of code audits for our Kea DHCP and Stork graphical management software projects! Thank you to @ostifofficial.bsky.social and the ICANN Grant Program for their support and assistance. Read more about the audits at www.isc.org/blogs/2026-t...

Kea and Stork Projects Audited

In mid-2025 ISC contracted with OSTIF to identify an external organization to audit our Kea and Stork code for security issues.

Internet Systems Consortium (ISC) @isc.org · 27/02/2026

Packages and container images provided by ISC will be updated later today.

000

Internet Systems Consortium (ISC) @isc.org · 27/02/2026

New maintenance releases of BIND 9 are available and can be downloaded at isc.org/download/#BIND. The new stable branches are 9.18.46 and 9.20.20, and the new development branch is 9.21.19. Please see the release notes for important changes and details. Thank you for using ISC's software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 27/02/2026

Packages and container images provided by ISC will be updated later today.

000

Internet Systems Consortium (ISC) @isc.org · 25/02/2026

The new Stork includes lots of changes, including direct API support for Kea; improved DNS monitoring support for both BIND 9 and PowerDNS; sortable tables, many security improvements; an updated user interface; build, test, and documentation upgrades; and many bug fixes.

Internet Systems Consortium (ISC) @isc.org · 25/02/2026

ISC is pleased to announce the releases of Kea DHCP 3.1.6 (development branch) and Stork 2.4.0, a new stable branch. Software and release notes available at www.isc.org/download/ Thank you for using ISC’s software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 18/02/2026

Our February 2026 maintenance releases of BIND 9 are available for versions 9.18.45, 9.20.19, and 9.21.18. Packages and container images provided by ISC will be updated later today. Download source code and release notes at www.isc.org/download/ Thank you for using ISC's software!

ISC's software is open source and available for free

Internet Systems Consortium (ISC) @isc.org · 09/02/2026

ISC mourns the loss of one of our board members, Dr. David "Dave" Farber: www.isc.org/blogs/david-...

Dave Farber, ISC Board Member from 1994 - 2026