[34104] in North American Network Operators' Group
Re: sorry to ruin several of your evenings...
daemon@ATHENA.MIT.EDU (Charles Sprickman)
Sun Jan 28 02:26:43 2001
Date: Sun, 28 Jan 2001 02:24:20 -0500 (EST)
From: Charles Sprickman <spork@inch.com>
To: Paul Vixie <vixie@mfnx.net>
Cc: <nanog@merit.edu>
In-Reply-To: <g3u26k5ii0.fsf@redpaul.mfnx.net>
Message-ID: <Pine.BSF.4.30.0101280217430.24361-100000@shell.inch.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On 27 Jan 2001, Paul Vixie wrote:
> But if you just want the BIND 8 you already have (except, without
> certain security flaws) then BIND 8.2.3 is just what you need.
Without being aware of what your disclosure policies are, I'll go ahead
and ask... what are the flaws, and are they also in 8.2.2-p7?
I don't see anything at:
http://www.isc.org/products/BIND/bind-security.html
that mentions p7. Sure, I could diff a bunch of stuff...
Sorry to bring this to NANOG, but it's a bit more appropriate than gabbing
about what a root server is. Also, note that Bugtraq is gone until
Monday, so there'll be no talk of this there.
Thanks,
Charles
