> But the CHANGES files list *three* security fixes (2827, 2828 & 2831), > none of which seem to be superficially the "same" vulnerability. So is > the "two" above a mistake?
There are two vulnerabilities (see the CERT advisories). One of them, we thought we'd fixed it, then we noticed something we'd overlooked, so we fixed it again really hard. Consequently it has two CHANGES notes associated with it: 2828 and 2831. -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. _______________________________________________ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users