> But the CHANGES files list *three* security fixes (2827, 2828 & 2831),
> none of which seem to be superficially the "same" vulnerability. So is
> the "two" above a mistake?

There are two vulnerabilities (see the CERT advisories).  One of them, we
thought we'd fixed it, then we noticed something we'd overlooked, so we
fixed it again really hard.  Consequently it has two CHANGES notes
associated with it:  2828 and 2831.

--
Evan Hunt -- e...@isc.org
Internet Systems Consortium, Inc.
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to