On Tue, 2009-08-11 at 22:53 -0400, BBB Kee wrote: > > > On Tue, Aug 11, 2009 at 7:26 PM, Gordon Ewasiuk <gewas...@above.net> > wrote: > I was getting the same results on a couple of Solaris 9 on x86 > servers. > During a code review, a coworker found some fairly major > changes in how > BIND does things between 9.5.0-P2 and 9.5.1-P3. > > We had to backport just the security fix from 9.5.1-P3 to > 9.5.0-P2 to > address the sock->pending_recv error. > > > > > > O...how? I see lots of codes different between 9.5.0-P2 and 9.5.1-P3. > Is it just copy the update.c from 9.5.1-P3 to 9.5.0-P2 and compile? I > just make this changes and compile ok in 9.5.0-P2 and it seems it can > prevent from the current DOS attack also. > > Eric
Hi Eric, I am unsure exactly which piece was pulled from 9.5.1-P3 and backported. I can just tell you that we did it. So far, things are stable. Regards, -Gordon _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users