BIND update?

[Chris Palmer]

Wesley Shields writes:

> > Malware authors create exploits based on information they gleaned by
> > reverse
> 
> (legitimate businesses).  I'm also not sure how this applies since the
> project is open source - the fix is published at the time of the patch,

My implicit (sorry about that) point was that if closed source software has
no obscurity, there's no way open source software can have any. So we should
not pretend that there is any, nor that it can help. The best course is to
provide users full information about the risks they face and to respond with
timely and correct fixes to those issues that introduce unnecessary risk.

In this case, the BIND bug is already patched and publicly available anyway.