On 9 Jul 2002, Samuel Flory wrote: > http://rhn.redhat.com/errata/RHSA-2002-105.html >
This is dated 2002-06-04, way before the CERT advisory. CERT lists those things affected as libbind and BSD libc. Redhat uses GNU libc and no libbind that I know of. I'm assuming this is a non-issue OR Redhat is still in the process of determining if there is a problem. Considering any given application COULD use libbind, it would take time to comb through the apps (I'm guessing here). Note there has been discussions that the CERT recommendation to use BIND 9 as a central cache to help 'filter' potentially problem DNS responses does NOT in fact help the situation at all. See http://marc.theaimsgroup.com/?l=djbdns&m=102614840819438&w=2 $.02 Bill Carlson -- Systems Programmer [EMAIL PROTECTED] | Anything is possible, Virtual Hospital http://www.vh.org/ | given time and money. University of Iowa Hospitals and Clinics | Opinions are mine, not my employer's. | _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
