Request for FreeBSD 4.9-RELEASE: PLEASE include this patch to BIND and turn it on by default

Wed Sep 17 09:43:33 PDT 2003

On Wed, 2003-09-17 at 12:37, Brett Glass wrote:
> The message below describes an emergency patch, made by ISC to BIND, which
> defeats Verisign's TLD wildcards. Please incorporate this patch into the
> version of BIND that ships with FreeBSD 4.9-RELEASE. It will save many of
> us a lot of tedious manual patching!

Please do NOT incorporate it.  Discussion on the SAGE list indicates
that there is a bug which prevents NS entries for domains with no cached
data from being recognized.  A corrected patch is expected "soon".

-- 
brandon s. allbery    [linux,solaris,freebsd,perl]     allbery at kf8nh.com
system administrator      [WAY too many hats]        allbery at ece.cmu.edu
electrical and computer engineering, carnegie mellon univ.         KF8NH
URGENT!  E-xpedient nuked APK subdomains; kf8nh.apk.net is DEAD.  Sorry.