From owner-cvs-all Fri Jun 28 18:44: 8 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4E95337B405; Fri, 28 Jun 2002 18:44:03 -0700 (PDT) Received: from rover.village.org (rover.bsdimp.com [204.144.255.66]) by mx1.FreeBSD.org (Postfix) with ESMTP id B019D43E0A; Fri, 28 Jun 2002 18:44:01 -0700 (PDT) (envelope-from imp@village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.11.3/8.11.3) with ESMTP id g5T1hpY09903; Fri, 28 Jun 2002 19:43:51 -0600 (MDT) (envelope-from imp@village.org) Received: from localhost (warner@rover2.village.org [10.0.0.1]) by harmony.village.org (8.11.6/8.11.6) with ESMTP id g5T1hoG68311; Fri, 28 Jun 2002 19:43:50 -0600 (MDT) (envelope-from imp@village.org) Date: Fri, 28 Jun 2002 19:43:28 -0600 (MDT) Message-Id: <20020628.194328.51639012.imp@village.org> To: DougB@FreeBSD.org Cc: rwatson@FreeBSD.org, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: ports/net/bind8 Makefile distinfo ports/net/bind8/files patch-aa From: "M. Warner Losh" In-Reply-To: <20020628182743.I16738-100000@zoot.corp.yahoo.com> References: <20020628182743.I16738-100000@zoot.corp.yahoo.com> X-Mailer: Mew version 2.1 on Emacs 21.1 / Mule 5.0 (SAKAKI) Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In message: <20020628182743.I16738-100000@zoot.corp.yahoo.com> Doug Barton writes: : Actually it's still debatable just how possible it is to exploit the : resolver bug at all, but that's another topic. I'm pretty sure it is exploitable. Lots of folks that fix these things think that it is exploitable. It is better to assume that it is exploitable and upgrade, than to put one's faith in what reads on the net on this topic. I mean if Theo is willing to take down the 5 years w/o a root exploit in the base install from the OpenBSD web page, you know it has got to be real :-) Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message