From owner-freebsd-security Thu Aug 14 10:10:48 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id KAA00255 for security-outgoing; Thu, 14 Aug 1997 10:10:48 -0700 (PDT) Received: from verdi.nethelp.no (verdi.nethelp.no [195.1.171.130]) by hub.freebsd.org (8.8.5/8.8.5) with SMTP id KAA00237 for ; Thu, 14 Aug 1997 10:10:41 -0700 (PDT) From: sthaug@nethelp.no Received: (qmail 21124 invoked by uid 1001); 14 Aug 1997 17:10:34 +0000 (GMT) To: imp@rover.village.org Cc: cschuber@uumail.gov.bc.ca, freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG Subject: Re: CERT Advisory CA-97.22 - BIND - the Berkeley Internet Name Daemon In-Reply-To: Your message of "Thu, 14 Aug 1997 09:25:46 -0600" References: X-Mailer: Mew version 1.05+ on Emacs 19.28.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Thu, 14 Aug 1997 19:10:34 +0200 Message-ID: <21122.871578634@verdi.nethelp.no> Sender: owner-freebsd-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > : This has been discussed on BUGTRAQ over the last 3-4 months. We now have a > : CERT advisory discussing this. > : > : When will BIND-8.1.1 be available in the 2.2 branch? > > 8.1.1 isn't even in the -current branch yet, so one could conjecture > that it will be a while. Bind 4.9.6 and Bind 8.1.1 have incompatible > boot file formats, so adding 8.1.1 into the 2.2 branch, or even the > -current banch, is complicated by compatibility concerns. > > 8.1.1 builds out of the box on a FreeBSD system. There have been > efforts made to make it a port so it is even easier. Also, note that according to Paul Vixie there is no real reason to upgrade to 8.1.1 because of the problems mentioned in this CERT advisory - 4.9.6 is fine. Steinar Haug, Nethelp consulting, sthaug@nethelp.no ---------------------------------------------------------------------- Subject: Re: CERT Advisory CA-97.22 - BIND - the Berkeley Internet Name Daemon From: Paul A Vixie To: cert-advisory-request@cert.org Cc: bind-workers@vix.com Date: Wed, 13 Aug 1997 14:06:46 -0700 Reply-To: Paul A Vixie I am still not happy with this text. People who just want to fix this problem should feel free to upgrade to 4.9.6, without touching 8.1.1 at all.