Re: [gentoo-dev] Bind 8.2.3

[320095285153-0001@t-online.de (Achim Gottinger)]

"Jerry A!" wrote:

> On Thu, Feb 15, 2001 at 02:51:46PM +0100, Achim Gottinger wrote:
> : "Jerry A!" wrote:
> :
> : > Due to the announced security expliots in bind, I upgraded the v9
> : > package in the CVS tree to 9.1.0.  I planned on upgrading the v8 package
> : > to 8.2.3.  However, I wasn't able to get it to compile on my system.
> : > I'm not suprised because more than likely I've gotten it dirty with all
> : > the stuff I've been working on lately.
> : >
> :
> : This is a glibc-2.2 related problem which we did not fix yet.
> : If someone really need bind 8 we can look deeper into it.
>
> Well, I'm hoping that we can fix it.  I'd prefer to pull the insecure
> versions out of the tree.  Hate for us to be the distro that ships
> software w/known security holes.  8)

We are still in a pre-productive phase right now, which should not mean we are
the most insecure distro on
planet earth. :-)
No version of bind 8 compiles on our current system (shame on us but no
security problems with 8 for us).
Is 9.1 really that much insecure? I took a look at the isc homepage and did not
find any security warnings for 9.1
but for 8.2.
I will take a closer look at bind 8.2.3 now. But I have already spend some
hours on it without succes during
the glibc-2.2 move.

achim~

>
>
>         --Jerry
>
> name:  Jerry Alexandratos         ||  Open-Source software isn't a
> phone: 703.599.6023               ||  matter of life or death...
> email: jerry@thehutt.org          ||  ...It's much more important
>                                   ||  than that!
>
> _______________________________________________
> gentoo-dev mailing list
> gentoo-dev@gentoo.org
> http://www.gentoo.org/mailman/listinfo/gentoo-dev