From owner-freebsd-security Thu Mar 29 9:50:54 2001 Delivered-To: freebsd-security@freebsd.org Received: from epsilon.lucida.ca (epsilon.lucida.ca [209.47.215.67]) by hub.freebsd.org (Postfix) with SMTP id 2996B37B719 for ; Thu, 29 Mar 2001 09:50:51 -0800 (PST) (envelope-from matt@LUCIDA.CA) Received: (qmail 41481 invoked by uid 1000); 29 Mar 2001 17:50:50 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 29 Mar 2001 17:50:50 -0000 Date: Thu, 29 Mar 2001 12:50:49 -0500 (EST) From: Matt Heckaman To: Neil Blakey-Milner Cc: James Greenfield , Chris Faulhaber , Seorge , Subject: Re: Something's happening with named In-Reply-To: <20010329193238.A86421@rapier.smartspace.co.za> Message-ID: <20010329124830.S41363-100000@epsilon.lucida.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Rating: localhost 1.6.2 0/1000/N Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thu, 29 Mar 2001, Neil Blakey-Milner wrote: ... : 8.2.3 > 8.2.3-T6B. Ie, 8.2.3-T6B is before 8.2.3. It has the : security problem. You can install the bind8 port over your current : bind installation. I think it's as simple as "cd /usr/ports/net/bin8 : && make install PREFIX=/usr", but you might have better luck looking : at the archives. It was mentioned on the list (by Kris I believe) that the building (in order?) the following items with the latest contrib/bind source in /usr/src will produce the desired result. I have been using this method for a while now instead of clobbering everything with the port, it works for me but YMMV. lib/libisc lib/libbind usr.bin/dig usr.bin/dnskeygen usr.bin/dnsquery usr.bin/host usr.sbin/named usr.sbin/ndc usr.sbin/nslookup usr.sbin/nsupdate libexec/named-xfer * Matt Heckaman - mailto:matt@LUCIDA.CA http://www.lucida.ca/pgp * * GPG fingerprint - 53CA 8320 C8F6 32ED 9DDF 036E 3171 C093 4AD3 1364 * UNPRECEDENTED PERFORMANCE: nothing we had before ever worked this way. - Simon Travaglia -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: http://www.lucida.ca/pgp iD8DBQE6w3X6MXHAk0rTE2QRAk7WAKCQmwinw6vUnurwwoHnLjAXeXNhDgCdGoak MMUtMK0LRahonHK/4LZRZCk= =F8Dc -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message