From owner-freebsd-security  Wed Jun 26  8:30: 8 2002
Delivered-To: freebsd-security@freebsd.org
Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153])
	by hub.freebsd.org (Postfix) with ESMTP id AEFE737B900
	for <freebsd-security@freebsd.org>; Wed, 26 Jun 2002 08:28:34 -0700 (PDT)
Received: from madman.nectar.cc (madman.nectar.cc [10.0.1.111])
	by gw.nectar.cc (Postfix) with ESMTP
	id 3BF1423; Wed, 26 Jun 2002 10:28:34 -0500 (CDT)
Received: from madman.nectar.cc (localhost [IPv6:::1])
	by madman.nectar.cc (8.12.3/8.12.3) with ESMTP id g5QFSYsE065937;
	Wed, 26 Jun 2002 10:28:34 -0500 (CDT)
	(envelope-from nectar@madman.nectar.cc)
Received: (from nectar@localhost)
	by madman.nectar.cc (8.12.3/8.12.3/Submit) id g5QFSXO6065936;
	Wed, 26 Jun 2002 10:28:33 -0500 (CDT)
Date: Wed, 26 Jun 2002 10:28:32 -0500
From: "Jacques A. Vidrine" <nectar@freebsd.org>
To: Konrad Heuer <kheuer@gwdg.de>
Cc: freebsd-security@freebsd.org
Subject: Re: bsd libc dns resolving code vulnerable?
Message-ID: <20020626152832.GE65700@madman.nectar.cc>
Mail-Followup-To: "Jacques A. Vidrine" <nectar@FreeBSD.org>,
	Konrad Heuer <kheuer@gwdg.de>, freebsd-security@freebsd.org
References: <20020626165034.Q35146-100000@gwdu60.gwdg.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020626165034.Q35146-100000@gwdu60.gwdg.de>
User-Agent: Mutt/1.4i
X-Url: http://www.nectar.cc/
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Wed, Jun 26, 2002 at 04:55:42PM +0200, Konrad Heuer wrote:
> 
> Does already someone know about:
> 
> http://www.pine.nl/advisories/pine-cert-20020601.txt
> 
> Any comments?

Fixed in -CURRENT, RELENG_4, and RELENG_4_6 early this morning.  I
believe Warner is fixing RELENG_4_5 at the moment.  When that is done,
an advisory will be published.

In short: upgrade.  Be sure to recompile any statically linked
applications that use DNS.

Cheers,
-- 
Jacques A. Vidrine <n@nectar.cc>                 http://www.nectar.cc/
NTT/Verio SME          .     FreeBSD UNIX     .       Heimdal Kerberos
jvidrine@verio.net     .  nectar@FreeBSD.org  .          nectar@kth.se

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message