Re: ISC BIND 9.6.1-P3 is now available

2010-01-20 Thread Cathy Almond
David Coulthart wrote: > On Jan 19, 2010, at 12:28 PM, Evan Hunt wrote: >> BIND 9.6.1-P3 is a SECURITY PATCH for BIND 9.6.1. It addresses two >> potential cache poisoning vulnerabilities, both of which could allow >> a validating recursive nameserver to cache data which had not been >> authenticat

Re: ISC BIND 9.6.1-P3 is now available

2010-01-20 Thread David Coulthart
On Jan 19, 2010, at 12:28 PM, Evan Hunt wrote: BIND 9.6.1-P3 is a SECURITY PATCH for BIND 9.6.1. It addresses two potential cache poisoning vulnerabilities, both of which could allow a validating recursive nameserver to cache data which had not been authenticated or was invalid. Do these vulne

Re: ISC BIND 9.6.1-P3 is now available

2010-01-19 Thread Evan Hunt
> But the CHANGES files list *three* security fixes (2827, 2828 & 2831), > none of which seem to be superficially the "same" vulnerability. So is > the "two" above a mistake? There are two vulnerabilities (see the CERT advisories). One of them, we thought we'd fixed it, then we noticed something

Re: ISC BIND 9.6.1-P3 is now available

2010-01-19 Thread Chris Thompson
These announcements for BIND 9.4.3-P5, 9.5.1-P2 and 9.6.1-P3 say BIND 9.x.x-Px is a SECURITY PATCH for BIND 9.x.x. It addresses two potential cache poisoning vulnerabilities, both of which could allow a validating recursive nameserver to cache data which had not been authenticated or was invali

ISC BIND 9.6.1-P3 is now available

2010-01-19 Thread Evan Hunt
BIND 9.6.1-P3 is now available. BIND 9.6.1-P3 is a SECURITY PATCH for BIND 9.6.1. It addresses two potential cache poisoning vulnerabilities, both of which could allow a validating recursive nameserver to cache data which had not been authenticated or was invalid. B