nanog mailing list archives

Re: sorry to ruin several of your evenings...


From: Charles Sprickman <spork () inch com>
Date: Sun, 28 Jan 2001 02:24:20 -0500 (EST)


On 27 Jan 2001, Paul Vixie wrote:

But if you just want the BIND 8 you already have (except, without
certain security flaws) then BIND 8.2.3 is just what you need.

Without being aware of what your disclosure policies are, I'll go ahead
and ask...  what are the flaws, and are they also in 8.2.2-p7?

I don't see anything at:

http://www.isc.org/products/BIND/bind-security.html

that mentions p7.  Sure, I could diff a bunch of stuff...

Sorry to bring this to NANOG, but it's a bit more appropriate than gabbing
about what a root server is.  Also, note that Bugtraq is gone until
Monday, so there'll be no talk of this there.

Thanks,

Charles



Current thread: