looks like there is some work in progress to update the in-tree BIND to 9.4.2-P1 + local tweaking, for example:

http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/bind/lib/dns/dispatch.c?r1=1.8

As Theo points out, patience is a virtue, and it's the "+ local tweaking" above that is the reason I gratefully use OpenBSD.


/Pete




On 9 Jul 2008, at 16:45, Zamri Besar wrote:

Good morning,

Today, I'm received alert from one of my friends regarding to
Vulnerability Note VU#800113 - Multiple DNS implementations vulnerable
to cache poisoning.
http://www.kb.cert.org/vuls/id/800113

I checked the above site, and found that most of the *BSD status are
unknown. Is this bug affected OpenBSD default bind dns?

I'm don't know either the above bug is similar to this thread or not.
http://marc.info/?l=openbsd-misc&m=118539211412877&w=2

--
Thank you.

Yours truly,

Zamri Besar

Reply via email to