New addresses for b.root-servers.net

William Herrin bill at herrin.us
Sat Jun 3 23:17:41 UTC 2023


On Sat, Jun 3, 2023 at 12:46 PM Matt Corallo <nanog at as397444.net> wrote:
> I assume RHEL would ship a root hints update during that time, but such things can slip through
> pretty easily as its not a security update.

Hi Matt,

It *is* a security update. That's a really great point that I
completely missed. After some period of time, the folks running
b.root-servers.net should file a CVE against implementations still
using the deprecated IP address. The CVE makes it a security issue
compelling vendors of any still-supported software to issue an update.

Regards,
Bill Herrin

-- 
William Herrin
bill at herrin.us
https://bill.herrin.us/


More information about the NANOG mailing list