Re: libc flaw: BIND 9 closes most holes but also opens one

From: Brett Glass (brett@lariat.org)
Date: 07/01/02


Date: Sun, 30 Jun 2002 20:40:27 -0600
To: Mark.Andrews@isc.org
From: Brett Glass <brett@lariat.org>

At 08:08 PM 6/30/2002, Mark.Andrews@isc.org wrote:

> You have been told how to fix the problem. Install libbind
> from BIND 8 (that implies the include files).
>
> BIND9:
> don't call configure with --enable-libbind (this is the default)
> BIND8:
> remove "bin" from "SUBDIRS= include port lib bin" in the top
> level Makefile
>
> Install both BIND 8 and BIND 9. "--enable-libbind" effectively
> does just that.

I'll do this. It'll be a bunch of work to do it on several systems....
I wish there were up-to-date binary packages! I may try to create
a binary package for BIND 8's libbind to make this easier.

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message