From owner-freebsd-questions Wed Jan 31 0:42:46 2001 Delivered-To: freebsd-questions@freebsd.org Received: from changeofhabit.mr.itd.umich.edu (changeofhabit.mr.itd.umich.edu [141.211.144.17]) by hub.freebsd.org (Postfix) with ESMTP id 8906737B491 for ; Wed, 31 Jan 2001 00:42:27 -0800 (PST) Received: from tim.elnsng1.mi.home.com (c1129767-a.elnsng1.mi.home.com [24.183.248.20]) by changeofhabit.mr.itd.umich.edu (8.9.3/3.2r) with SMTP id DAA03527; Wed, 31 Jan 2001 03:42:23 -0500 (EST) From: Tim McMillen To: Donald Burr , FreeBSD Questions Subject: Re: Is FreeBSD susceptible to BIND vulnerability? Date: Wed, 31 Jan 2001 03:46:32 -0500 X-Mailer: KMail [version 1.1.99] Content-Type: text/plain; charset="US-ASCII" References: <01013102125901.78918@tim.elnsng1.mi.home.com> In-Reply-To: <01013102125901.78918@tim.elnsng1.mi.home.com> MIME-Version: 1.0 Message-Id: <01013103463206.78918@tim.elnsng1.mi.home.com> Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG It appears I was mistaken. The advisory is a little incorrect too, it seems. The archives of freebsd-security have the full discussion, but here is a more definitive answer: http://docs.freebsd.org/cgi/getmsg.cgi?fetch=120576+0+current/freebsd-security The bind8 port was just upgraded (Late Tue. night) to 8.2.3 which was just released. So I guess one either has to upgrade the whole system to the latest 4.2-stable or upgrade their bind version, perhaps through the port. Tim On Wednesday January 31, 2001 02:12, Tim McMillen wrote: > At the very bottom of the advisory, it says no. Though the advisory > seems to say Bind 8.2.3 has been released (not just beta) and the > FreeBSD response seems to say that it hasn't. I dunno, I just read > the advisory, I don't run BIND. > > Tim > > On Wednesday January 31, 2001 00:37, Donald Burr wrote: > > There was an advisory about BIND posted to Slashdot today: > > http://slashdot.org/article.pl?sid=01/01/30/0435256&mode=thread > > > > I am concerned -- does this affect FreeBSD? I am running a > > somewhat 4.2-STABLE (buildworld done around Dec 5 of last year). > > The BIND version string is: > > > > Jan 30 21:27:11 borg-cube named[20011]: starting. named 8.2.3-T5B > > Mon Sep 25 23:37:47 GMT 2000 > > jkh@narf.osd.bsdi.com:/usr/obj/usr/src/usr.sbin/named > > > > If this affects me, has this problem been corrected in the latest > > 4.2-STABLE code? (if so, then I will cvsup and make buildworld > > RIGHT NOW!!!) :) > > > > Please let me know, thanks! > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message