On Sat, Jun 3, 2023 at 12:46 PM Matt Corallo <na...@as397444.net> wrote:
> I assume RHEL would ship a root hints update during that time, but such 
> things can slip through
> pretty easily as its not a security update.

Hi Matt,

It *is* a security update. That's a really great point that I
completely missed. After some period of time, the folks running
b.root-servers.net should file a CVE against implementations still
using the deprecated IP address. The CVE makes it a security issue
compelling vendors of any still-supported software to issue an update.

Regards,
Bill Herrin

-- 
William Herrin
b...@herrin.us
https://bill.herrin.us/

Reply via email to