Remote profile

The accolades for @ondrej keep pouring in! Here's an article from the BBC: https://www.bbc.co.uk/news/articles/cw30ejqljl43o

The Internet as a whole and the open source community in particular are SO fortunate to have him and the other volunteers working on our behalf.

As Ondřej modestly says, "This too shall pass," but this effort is truly heroic and appreciated.

Thank you again and keep up the great work!

ISC has been fortunate to have @ondrej as our Director of DNS Engineering since 2017. But independently of his day job, he is an important maintainer of PHP packages for Debian and Ubuntu.

This has become even more significant over the last few days as the PHP RCE vulnerabilities have been disclosed.

We are so proud of Ondřej, and grateful for him and all the other unsung heroes of the global Internet who work for the common good.

Read more at the Atlantic: https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/

Not bragging or anything, we have plenty of our own issues, but none of ISC's open source products, nor our website, are impacted by the PHP CVE.

#MarkedSafeFromPHP

New BIND 9 releases are live at https://www.isc.org/download/ : 9.20.30 (stable), 9.21.27 (development)

Packages and container images provided by ISC will be updated later today.

In addition to bug fixes and feature improvements, these releases also contain fixes for the following security vulnerabilities:

https://kb.isc.org/docs/cve-2026-19630
https://kb.isc.org/docs/cve-2026-94300
https://kb.isc.org/docs/cve-2026-96888
https://kb.isc.org/docs/cve-2026-97313

Thank you for using ISC's software!