Date: Tue, 8 Jul 2008 19:29:46 -0400 From: Wesley Shields <wxs@FreeBSD.org> To: Remko Lodder <remko@elvandar.org> Cc: freebsd-security@freebsd.org, Andrew Storms <astorms@ncircle.com> Subject: Re: BIND update? Message-ID: <20080708232946.GB74886@atarininja.org> In-Reply-To: <386291aa73945a1cc3559aab7c0a6bb3.squirrel@galain.elvandar.org> References: <C499288F.1A09A0%astorms@ncircle.com> <386291aa73945a1cc3559aab7c0a6bb3.squirrel@galain.elvandar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 08, 2008 at 11:31:28PM +0200, Remko Lodder wrote: > > On Tue, July 8, 2008 11:22 pm, Andrew Storms wrote: > > I agree Remko. I meant this more as of a timing and planning question > > than > > a "the sky is falling!". Was curious to know if/when an update might be > > available so schedules could be set. > > > > Thanks. > > > > I cannot tell anything yet about a schedule or a plan for updates yet. We > (Security Team) first need to investigate what actions are required before > we can get to this step. I am sure we will try to resolve this as soon as > possible (and send out the word, if needed by an advisory). It's worth noting the measures mentioned in the advisory. Specifically, restrict recursive queries to only hosts you control. That will help cut down your exposure while work goes forward on addressing this however the security team sees fit. -- WXS
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080708232946.GB74886>