BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium (ISC) released BIND 9.20.29 and 9.21.26 to address fourteen security vulnerabilities in BIND 9, its open-source DNS server software. Several of these flaws could lead to server crashes or allow attackers to poison DNS data, potentially disrupting internet services. While no active exploits are currently known, the vulnerabilities are reproducible and ISC has released system tests to confirm the fixes. Users running older BIND versions (up to 9.18.50) should upgrade to 9.20.29 or later to mitigate the risks.