From owner-freebsd-stable@FreeBSD.ORG  Wed Jul 25 17:39:02 2007
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 31A1316A419
	for <stable@FreeBSD.org>; Wed, 25 Jul 2007 17:39:02 +0000 (UTC)
	(envelope-from dougb@FreeBSD.org)
Received: from mail2.fluidhosting.com (mx21.fluidhosting.com [204.14.89.4])
	by mx1.freebsd.org (Postfix) with SMTP id C172713C45A
	for <stable@FreeBSD.org>; Wed, 25 Jul 2007 17:39:01 +0000 (UTC)
	(envelope-from dougb@FreeBSD.org)
Received: (qmail 18446 invoked by uid 399); 25 Jul 2007 17:39:01 -0000
Received: from localhost (HELO lap.dougb.net) (dougb@dougbarton.us@127.0.0.1)
	by localhost with ESMTP; 25 Jul 2007 17:39:01 -0000
X-Originating-IP: 127.0.0.1
Message-ID: <46A78AB3.9090805@FreeBSD.org>
Date: Wed, 25 Jul 2007 10:38:59 -0700
From: Doug Barton <dougb@FreeBSD.org>
Organization: http://www.FreeBSD.org/
User-Agent: Thunderbird 2.0.0.5 (X11/20070723)
MIME-Version: 1.0
To: Steven Hartland <killing@multiplay.co.uk>
References: <01e101c7cecb$380e6960$b6db87d4@multiplay.co.uk>
In-Reply-To: <01e101c7cecb$380e6960$b6db87d4@multiplay.co.uk>
X-Enigmail-Version: 0.95.1
OpenPGP: id=D5B2F0FB
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: stable@FreeBSD.org
Subject: Re: bind exploit, patch expected?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2007 17:39:02 -0000

Steven Hartland wrote:
> I assume the security team are already working on this but
> cant hurt to ask:

Before you ask questions on a public list it's generally considered
polite to do a little checking yourself, especially in an open source
project. As Mike pointed out, the secteam had already addressed this
issue on -security, and I had already followed up in detail regarding
the upgrade plans.

In addition, at the time you posted the updates had all been done in
the ports, HEAD (-current), and RELENG_[56] (5 and 6-stable).

In any case, it's good that you're on top of your security
announcements, and I'm glad to say that this time anyway we're one
step ahead. :)

Doug

-- 

    This .signature sanitized for your protection