| 1 |
"Jerry A!" wrote: |
| 2 |
|
| 3 |
> On Thu, Feb 15, 2001 at 02:51:46PM +0100, Achim Gottinger wrote: |
| 4 |
> : "Jerry A!" wrote: |
| 5 |
> : |
| 6 |
> : > Due to the announced security expliots in bind, I upgraded the v9 |
| 7 |
> : > package in the CVS tree to 9.1.0. I planned on upgrading the v8 package |
| 8 |
> : > to 8.2.3. However, I wasn't able to get it to compile on my system. |
| 9 |
> : > I'm not suprised because more than likely I've gotten it dirty with all |
| 10 |
> : > the stuff I've been working on lately. |
| 11 |
> : > |
| 12 |
> : |
| 13 |
> : This is a glibc-2.2 related problem which we did not fix yet. |
| 14 |
> : If someone really need bind 8 we can look deeper into it. |
| 15 |
> |
| 16 |
> Well, I'm hoping that we can fix it. I'd prefer to pull the insecure |
| 17 |
> versions out of the tree. Hate for us to be the distro that ships |
| 18 |
> software w/known security holes. 8) |
| 19 |
|
| 20 |
We are still in a pre-productive phase right now, which should not mean we are |
| 21 |
the most insecure distro on |
| 22 |
planet earth. :-) |
| 23 |
No version of bind 8 compiles on our current system (shame on us but no |
| 24 |
security problems with 8 for us). |
| 25 |
Is 9.1 really that much insecure? I took a look at the isc homepage and did not |
| 26 |
find any security warnings for 9.1 |
| 27 |
but for 8.2. |
| 28 |
I will take a closer look at bind 8.2.3 now. But I have already spend some |
| 29 |
hours on it without succes during |
| 30 |
the glibc-2.2 move. |
| 31 |
|
| 32 |
achim~ |
| 33 |
|
| 34 |
> |
| 35 |
> |
| 36 |
> --Jerry |
| 37 |
> |
| 38 |
> name: Jerry Alexandratos || Open-Source software isn't a |
| 39 |
> phone: 703.599.6023 || matter of life or death... |
| 40 |
> email: jerry@×××××××.org || ...It's much more important |
| 41 |
> || than that! |
| 42 |
> |
| 43 |
> _______________________________________________ |
| 44 |
> gentoo-dev mailing list |
| 45 |
> gentoo-dev@g.o |
| 46 |
> http://www.gentoo.org/mailman/listinfo/gentoo-dev |
Archives