BIND update?

Wesley Shields wxs at FreeBSD.org
Tue Jul 8 23:42:55 UTC 2008


On Tue, Jul 08, 2008 at 11:31:28PM +0200, Remko Lodder wrote:
> 
> On Tue, July 8, 2008 11:22 pm, Andrew Storms wrote:
> > I agree Remko.  I meant this more as of a timing and planning question
> > than
> > a "the sky is falling!".  Was curious to know if/when an update might be
> > available so schedules could be set.
> >
> > Thanks.
> >
> 
> I cannot tell anything yet about a schedule or a plan for updates yet. We
> (Security Team) first need to investigate what actions are required before
> we can get to this step. I am sure we will try to resolve this as soon as
> possible (and send out the word, if needed by an advisory).

It's worth noting the measures mentioned in the advisory.  Specifically,
restrict recursive queries to only hosts you control.  That will help
cut down your exposure while work goes forward on addressing this
however the security team sees fit.

-- WXS


More information about the freebsd-security mailing list