Re: libc flaw: BIND 9 closes most holes but also opens one

From: Doug Barton (DougB@FreeBSD.org)
Date: 06/29/02 

Date: Sat, 29 Jun 2002 14:56:50 -0700
From: Doug Barton <DougB@FreeBSD.org>
To: Brett Glass <brett@lariat.org>

Brett Glass wrote:
>
> At 03:43 PM 6/29/2002, Pete Ehlke wrote:
>
> >Please, Brett. Don't embarass yourself further on this.
> >
> >http://marc.theaimsgroup.com/?l=bind-announce&m=102527571007047&w=2security>
>
> Embarrass? The page you cite actually proves that I'm correct!

You quoted the second page. The URL I left in the quotation above is the
announcement for 8.2.6, which says:

Highlights vs. 8.2.5
        Security Fix libbind. All applications linked against libbind
        need to relinked.

Also, take a look at the URL I posted previously:

ftp://ftp.isc.org/isc/bind/src/8.2.6/825-826.diff

> What this means is that the only safe version of libbind is 8.3.3.

Wrong again. As I said before, if you can't be careful to read and
understand what is being said before you post, please don't post. You're
providing needless confusion to the people reading this list.

Doug

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages