Date: Fri, 14 Jan 2000 11:15:37 -1000 From: Clifton Royston <cliftonr@lava.net> To: freebsd-stable@freebsd.org Subject: Bind version in 3.3RELEASE Message-ID: <20000114111536.E8127@lava.net>
next in thread | raw e-mail | index | archive | help
I noticed 3.3Release, which I installed recently, is running Bind 8.2.1 which has known security vulnerabilities including a possible root compromise exploit. <http://ciac.llnl.gov/ciac/bulletins/k-007.shtml> I did not see this mentioned in the errata page for 3.3 at <http://www.freebsd.org/releases/3.3R/errata.html> The ISC recommends running Bind 8.2.2P5. Is Bind 8.2.2P5 incorporated into the latest -stable build, so that I'll get it if I start doing CTM or CVS updates? Or is it preferable to grab the sources direct from ISC? -- Clifton -- Clifton Royston -- LavaNet Systems Architect -- cliftonr@lava.net "An absolute monarch would be absolutely wise and good. But no man is strong enough to have no interest. Therefore the best king would be Pure Chance. It is Pure Chance that rules the Universe; therefore, and only therefore, life is good." - AC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000114111536.E8127>
