North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: sorry to ruin several of your evenings...

  • From: Charles Sprickman
  • Date: Sun Jan 28 02:27:33 2001 
On 27 Jan 2001, Paul Vixie wrote:

> But if you just want the BIND 8 you already have (except, without
> certain security flaws) then BIND 8.2.3 is just what you need.

Without being aware of what your disclosure policies are, I'll go ahead
and ask...  what are the flaws, and are they also in 8.2.2-p7?

I don't see anything at:

http://www.isc.org/products/BIND/bind-security.html

that mentions p7.  Sure, I could diff a bunch of stuff...

Sorry to bring this to NANOG, but it's a bit more appropriate than gabbing
about what a root server is.  Also, note that Bugtraq is gone until
Monday, so there'll be no talk of this there.

Thanks,

Charles