FYI, there's new root hints file as of 2024-05-28: https://www.internic.net/domain/named.root see also: https://www.iana.org/domains/root/files Also, Debian stable isn't quite caught up to that yet (though I expect it will likely be with upcoming stable update). And yes, "newer" (/non-ancient) BIND versions are "smart" enough to catch this, notice, and complain (the bit in the logs was what first caught my attention on it).
times UTC / GMT0: # cat /etc/debian_version; sed -ne '3,4p;4q' /etc/bind/named.conf.default-zones && dpkg -S /usr/share/dns/root.hints && dpkg -l dns-root-data | grep '^ii '; diff -U0 /usr/share/dns/root.hints <(su - test -c 'curl -s https://www.internic.net/domain/named.root') 12.5 type hint; file "/usr/share/dns/root.hints"; dns-root-data: /usr/share/dns/root.hints ii dns-root-data 2023010101 all DNS root data including root zone and DNSSEC key --- /usr/share/dns/root.hints 2023-01-11 07:22:00.000000000 +0000 +++ /dev/fd/63 2024-06-05 05:57:26.860941086 +0000 @@ -12,2 +12,2 @@ -; last update: January 01, 2023 -; related version of root zone: 2023010101 +; last update: May 28, 2024 +; related version of root zone: 2024052801 @@ -24,2 +24,2 @@ -B.ROOT-SERVERS.NET. 3600000 A 199.9.14.201 -B.ROOT-SERVERS.NET. 3600000 AAAA 2001:500:200::b +B.ROOT-SERVERS.NET. 3600000 A 170.247.170.2 +B.ROOT-SERVERS.NET. 3600000 AAAA 2801:1b8:10::b # May 12 20:45:20 tigger named[3452]: checkhints: b.root-servers.net/A (170.247.170.2) missing from hints May 12 20:45:20 tigger named[3452]: checkhints: b.root-servers.net/A (199.9.14.201) extra record in hints May 12 20:45:20 tigger named[3452]: checkhints: b.root-servers.net/AAAA (2801:1b8:10::b) missing from hints May 12 20:45:20 tigger named[3452]: checkhints: b.root-servers.net/AAAA (2001:500:200::b) extra record in hints