From owner-freebsd-stable  Sat May  4 16:26:30 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from empty1.ekahuna.com (empty1.ekahuna.com [198.144.200.196])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9A1D737B416; Sat,  4 May 2002 16:26:27 -0700 (PDT)
Received: from pc-02 (pc02.ekahuna.com [198.144.200.197])
          by empty1.ekahuna.com (Post.Office MTA v3.5.3 release 223
          ID# 0-0U10L2S100V35) with ESMTP id com;
          Sat, 4 May 2002 16:26:27 -0700
From: "Philip J. Koenig" <pjklist@ekahuna.com>
Organization: The Electric Kahuna Organization
To: stable@FreeBSD.ORG
Date: Sat, 4 May 2002 16:26:26 -0700
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Subject: Re: stable-digest V5 #516
Reply-To: pjklist@ekahuna.com
Cc: Doug Barton <DougB@FreeBSD.org>
In-reply-to: <bulk.10283.20020504144843@hub.freebsd.org>
X-mailer: Pegasus Mail for Win32 (v3.12c)
Message-ID: <20020504232627100.AAA911@empty1.ekahuna.com@pc02.ekahuna.com>
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

> Date: Sat, 4 May 2002 14:16:07 -0700 (PDT)
> From: Doug Barton <DougB@FreeBSD.org>
> 
> On Wed, 1 May 2002, Joe Abley wrote:
> 
> > I think 8.3.1 should be rolled into RELENG_4_5, since it specifically
> > contains security fixes over 8.2.4.
> 
> 	Users who depend on BIND can install a newer version from the
> ports. Users who don't are not affected by the problems in 8.2.4.


This interesting - because there was no FreeBSD advisory released 
recently about any Bind vulnerabilities that I can recall, and even 
though on ISC's Bind homepage it suggests there is a security problem 
with 8.2.4 (or pre 8.3.1 versions), on the security page (linked 
right from the text suggesting you to upgrade) it implies that there 
isn't any problem with 8.2.4:

http://www.isc.org/products/BIND/bind-security.html


Mark?



--
Philip J. Koenig                                       pjklist@ekahuna.com
Electric Kahuna Systems -- Computers & Communications for the New Millenium


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message