Re: libc flaw: BIND 9 closes most holes but also opens one

From: Brett Glass (brett@lariat.org)
Date: 06/30/02


Date: Sat, 29 Jun 2002 18:06:58 -0600
To: Doug Barton <DougB@FreeBSD.ORG>
From: Brett Glass <brett@lariat.org>

At 03:56 PM 6/29/2002, Doug Barton wrote:

>You quoted the second page. The URL I left in the quotation above is the
>announcement for 8.2.6, which says:
>
>Highlights vs. 8.2.5
> Security Fix libbind. All applications linked against libbind
> need to relinked.

So? That's not the version of libbind that's in 9.2.1. The version
in 9.2.1 is vulnerable; I've checked the source.

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: libc flaw: BIND 9 closes most holes but also opens one
    ... On Sat, 29 Jun 2002, Brett Glass wrote: ... The URL I left in the quotation above is the ... That's not the version of libbind that's in 9.2.1. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: libc flaw: BIND 9 closes most holes but also opens one
    ... The URL I left in the quotation above is the ... >>Highlights vs. 8.2.5 ... That's not the version of libbind that's in 9.2.1. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • Re: libc flaw: BIND 9 closes most holes but also opens one
    ... At 03:44 PM 6/29/2002, Doug Barton wrote: ... Not unless ISC is lying, which of course it would have no ... which says that libbind was fixed between 8.3.2 and 8.3.3. ...
    (FreeBSD-Security)
  • Re: named 8.3.2-T1B vulnerable?
    ... At 06:15 PM 6/29/2002, Doug Barton wrote: ... libbind has the same resolver bug as our libc did. ...
    (FreeBSD-Security)
  • Re: patching holes Hmmmm
    ... Doug Barton wrote: ... > On Thu, 25 Apr 2002, Pizik Ilya wrote: ... >>V> Last time I tried to make world I ran into some problems with smmsp user. ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)