From owner-freebsd-security@FreeBSD.ORG Thu Feb 1 23:19:44 2007 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 814E816A403 for ; Thu, 1 Feb 2007 23:19:44 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from mx.isc.org (mx.isc.org [204.152.184.167]) by mx1.freebsd.org (Postfix) with ESMTP id 6E07713C428 for ; Thu, 1 Feb 2007 23:19:44 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from farside.isc.org (farside.isc.org [IPv6:2001:4f8:3:bb::5]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "farside.isc.org", Issuer "ISC CA" (verified OK)) by mx.isc.org (Postfix) with ESMTP id 5A6E21140AD; Thu, 1 Feb 2007 23:19:44 +0000 (UTC) (envelope-from Mark_Andrews@isc.org) Received: from drugs.dv.isc.org (localhost.isc.org [IPv6:::1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "drugs.dv.isc.org", Issuer "ISC CA" (verified OK)) by farside.isc.org (Postfix) with ESMTP id 17641E601F; Thu, 1 Feb 2007 23:19:41 +0000 (UTC) (envelope-from marka@isc.org) Received: from drugs.dv.isc.org (localhost [127.0.0.1]) by drugs.dv.isc.org (8.13.8/8.13.8) with ESMTP id l11NJJ7r065204; Fri, 2 Feb 2007 10:19:22 +1100 (EST) (envelope-from marka@drugs.dv.isc.org) Message-Id: <200702012319.l11NJJ7r065204@drugs.dv.isc.org> To: Doug Barton From: Mark Andrews In-reply-to: Your message of "Thu, 01 Feb 2007 11:21:14 -0800." <45C23DAA.9040108@FreeBSD.org> Date: Fri, 02 Feb 2007 10:19:19 +1100 Sender: Mark_Andrews@isc.org X-Mailman-Approved-At: Fri, 02 Feb 2007 03:31:00 +0000 Cc: freebsd-security@freebsd.org, Chris Marlatt Subject: Re: What about BIND 9.3.4 in FreeBSD in base system ? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2007 23:19:44 -0000 > Chris Marlatt wrote: > > Doug Barton wrote: > >> > >> plan to MFC it after 4 or 5 days. I am actually considering only > >> MFC'ing it to RELENG_6 to help provide some incentive for those on 5.x > >> to upgrade. > >> > > > > One would assume that the release would be supported up until the EOL > > provided on freebsd.org of May 31, 2008. > > Yes, but whether a full upgrade is needed for "support" or not depends > on your definition. Given that FreeBSD is not vulnerable to these > issues in its default configuration, one could easily argue that an > upgrade for RELENG_5 isn't necessary. > > Doug The subject here is 9.3.4. All the issues raised in this thread so far were addressed as of 9.3.2-P2 / 9.3.3. To the best of my knowledge these have already been addresed. There are two new issue for 9.3.4. CVE-2007-0494 which is only a problem if you are doing DNSEC validation. CVE-2007-0493 which any recursive 9.3.x (x<4) named is vulnerable. Mark > -- > > This .signature sanitized for your protection > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews@isc.org