Bug#699145: bind9: CVE-2012-5689

2013-02-28 Thread Moritz Muehlenhoff
On Wed, Feb 27, 2013 at 12:41:37AM +, Dominic Hargreaves wrote: > On Mon, Feb 25, 2013 at 08:29:10AM -0700, LaMont Jones wrote: > > On Sun, Feb 24, 2013 at 11:53:01AM +, Dominic Hargreaves wrote: > > > On Mon, Jan 28, 2013 at 07:37:03AM +0100, Moritz Muehlenhoff wrote: > > > Given these, I

Bug#699145: bind9: CVE-2012-5689

2013-02-26 Thread Dominic Hargreaves
On Mon, Feb 25, 2013 at 08:29:10AM -0700, LaMont Jones wrote: > On Sun, Feb 24, 2013 at 11:53:01AM +, Dominic Hargreaves wrote: > > On Mon, Jan 28, 2013 at 07:37:03AM +0100, Moritz Muehlenhoff wrote: > > Given these, I am not convinced that this should be RC for wheezy. > > How about a NEWS ite

Bug#699145: bind9: CVE-2012-5689

2013-02-25 Thread LaMont Jones
On Sun, Feb 24, 2013 at 11:53:01AM +, Dominic Hargreaves wrote: > On Mon, Jan 28, 2013 at 07:37:03AM +0100, Moritz Muehlenhoff wrote: > Given these, I am not convinced that this should be RC for wheezy. > How about a NEWS item drawing attention to the issue and workaround, > and a downgrade to

Bug#699145: bind9: CVE-2012-5689

2013-02-24 Thread Dominic Hargreaves
On Mon, Jan 28, 2013 at 07:37:03AM +0100, Moritz Muehlenhoff wrote: > Package: bind9 > Severity: grave > Tags: security > Justification: user security hole > > Please see https://kb.isc.org/article/AA-00855 for details. Hello, I'm providing a summary of the issue following my investigation as a

Bug#699145: bind9: CVE-2012-5689

2013-01-27 Thread Moritz Muehlenhoff
Package: bind9 Severity: grave Tags: security Justification: user security hole Please see https://kb.isc.org/article/AA-00855 for details. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@