New BIND 9 releases, 9.18.37, 9.20.9, and 9.21.8, are now available. The updates encompass bug fixes, enhancements to features, and a resolution for a security vulnerability (CVE-2025-40775). The existing ESV branch, 9.18.X, remains unaffected.

New BIND releases are available: 9.18.37, 9.20.9, 9.21.8

Our May 2025 maintenance releases of BIND 9 are available and can be downloaded from the ISC software download page, https://www.isc.org/download. Packages and container images provided by ISC will be updated later today.

In addition to bug fixes and feature improvements, these releases also contain a fix for a security vulnerability (CVE-2025-40775), about which more information is provided in the following Security Advisory:

https://kb.isc.org/docs/cve-2025-40775

Please note that the current ESV branch, 9.18.X, is not affected by this CVE.

A summary of significant changes in the new releases can be found in their release notes:

- Current supported stable branches:

9.18.37 - https://downloads.isc.org/isc/bind9/9.18.37/doc/arm/html/notes.html
9.20.9 - https://downloads.isc.org/isc/bind9/9.20.9/doc/arm/html/notes.html

- Experimental development branch:

9.21.8 - https://downloads.isc.org/isc/bind9/9.21.8/doc/arm/html/notes.html



As a reminder, BIND’s supported platforms are listed in the ARM ( https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/chapter2.html#supported-platforms) and in this knowledgebase article ( https://kb.isc.org/docs/supported-platforms). We ended support for RHEL 7 in June 2024 (as noted in release notes at the time). BIND will no longer build on RHEL7.

Thank you for using ISC’s software.