From owner-cvs-all Fri Jun 28 18:31:16 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DED9E37B400; Fri, 28 Jun 2002 18:31:10 -0700 (PDT) Received: from mrout2.yahoo.com (mrout2.yahoo.com [216.145.54.172]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7EE2F43E06; Fri, 28 Jun 2002 18:31:10 -0700 (PDT) (envelope-from DougB@FreeBSD.org) Received: from zoot.corp.yahoo.com (zoot.corp.yahoo.com [216.145.52.89]) by mrout2.yahoo.com (8.11.6/8.11.6/y.out) with ESMTP id g5T1V7R24750; Fri, 28 Jun 2002 18:31:08 -0700 (PDT) Received: from localhost (dougb@localhost) by zoot.corp.yahoo.com (8.12.5/8.12.5/Submit) with ESMTP id g5T1V66J067260; Fri, 28 Jun 2002 18:31:07 -0700 (PDT) Date: Fri, 28 Jun 2002 18:31:06 -0700 (PDT) From: Doug Barton To: Robert Watson Cc: cvs-committers@FreeBSD.org, Subject: Re: cvs commit: ports/net/bind8 Makefile distinfo ports/net/bind8/files patch-aa In-Reply-To: Message-ID: <20020628182743.I16738-100000@zoot.corp.yahoo.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, 28 Jun 2002, Robert Watson wrote: > > On Fri, 28 Jun 2002, Doug Barton wrote: > > > dougb 2002/06/28 17:05:17 PDT > > > > Modified files: > > net/bind8 Makefile distinfo > > net/bind8/files patch-aa > > Log: > > Upgrade to 8.3.3, the latest from ISC. This release fixes the > > libbind bug, and adds logging for people who attempt to exploit > > it to named. Also improves logging for named-xfer, and adds > > features to ndc to attempt to preserve command line arguments > > that named was started with. > > > > All users of BIND 8 are HIGHLY encouraged to upgrade to this version. > > It's worth noting that for most consumers of bind, this won't provide any > added protection against the resolver vulnerability at all, so it > shouldn't be over-sold :-). Actually it's still debatable just how possible it is to exploit the resolver bug at all, but that's another topic. In addition to the logging improvements for people trying to exploit the bug, users of bind 8 are still encouraged to upgrade to this version just in case they missed all the other announcements of the importance of upgrading to the latest version of bind 8 in the first place. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message