Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability- advisory-issued

2011-02-24 Thread James B. Byrne
On Wed, February 23, 2011 13:07, Markus Falb wrote: On 23.2.2011 18:27, Larry Vaden wrote: US-CERT encourages users and administrators using the affected versions of BIND to upgrade to BIND 9.7.3. Optionally, one can wait on a backport. Ahhh! Have a look at the relevant bugzilla ticket

[CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Larry Vaden
US-CERT encourages users and administrators using the affected versions of BIND to upgrade to BIND 9.7.3. Optionally, one can wait on a backport. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Brunner, Brian T.
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Larry Vaden Sent: Wednesday, February 23, 2011 12:27 PM To: CentOS mailing list Subject: [CentOS]http://www.securityweek.com/high-severity-bind-vulnera bility-advisory-issued

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread m . roth
Larry Vaden wrote: US-CERT encourages users and administrators using the affected versions of BIND to upgrade to BIND 9.7.3. Optionally, one can wait on a backport. Larry, go away. You don't seem to contribute anything at all to the list, other than your obnoxiousness, and your desire to

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Markus Falb
On 23.2.2011 18:27, Larry Vaden wrote: US-CERT encourages users and administrators using the affected versions of BIND to upgrade to BIND 9.7.3. Optionally, one can wait on a backport. Ahhh! Have a look at the relevant bugzilla ticket at https://bugzilla.redhat.com/show_bug.cgi?id=679496

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Digimer
On 02/23/2011 12:55 PM, m.r...@5-cent.us wrote: Larry Vaden wrote: US-CERT encourages users and administrators using the affected versions of BIND to upgrade to BIND 9.7.3. Optionally, one can wait on a backport. Larry, go away. You don't seem to contribute anything at all to the list,

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread James Hogarth
I don't want to raise the drama, so please don't take this wrong. In this case though, I do think that a warning on the ML about a security issue is justified. You can't be too careful. Except that this issue does not affect BIND in rhel and thus CentOS therefore making it yet more pointless

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Always Learning
Many thanks to Markus Falb for publishing his excellent research - the same research that Larry could also have done. This issue did not affect the versions of bind as shipped with Red Hat Enterprise Linux 4, 5, or 6. James Hogarth wrote: He obviously has a fascination with

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Larry Vaden
On Wed, Feb 23, 2011 at 1:03 PM, James Hogarth james.hoga...@gmail.com wrote: Except that this issue does not affect BIND in rhel and thus CentOS therefore making it yet more pointless drivel from the OP. Please take off the blinders and realize there are lots of folks (some x% of a million or

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Larry Vaden
On Wed, Feb 23, 2011 at 1:14 PM, Always Learning cen...@g7.u22.net wrote: Many thanks to Markus Falb for publishing his excellent research - the same research that Larry could also have done.        This issue did not affect the versions of bind as shipped with        Red Hat Enterprise

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Eero Volotinen
2011/2/23 Larry Vaden va...@texoma.net: On Wed, Feb 23, 2011 at 1:03 PM, James Hogarth james.hoga...@gmail.com wrote: Except that this issue does not affect BIND in rhel and thus CentOS therefore making it yet more pointless drivel from the OP. Please take off the blinders and realize

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Trutwin, Joshua
Please take off the blinders and realize there are lots of folks (some x% of a million or more) on this list who compile from current source in order to minimize their risks and are therefore the subject audience. On the one hand, you have Paul Vixie and crew (authors of BIND) and US_CERT

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Les Mikesell
On 2/23/2011 1:21 PM, Larry Vaden wrote: On Wed, Feb 23, 2011 at 1:03 PM, James Hogarthjames.hoga...@gmail.com wrote: Except that this issue does not affect BIND in rhel and thus CentOS therefore making it yet more pointless drivel from the OP. Please take off the blinders and realize

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Larry Vaden
On Wed, Feb 23, 2011 at 1:25 PM, Eero Volotinen eero.voloti...@iki.fi wrote: It is not wise to install packages from sources because it messes the package management. Agreed; that is why folks like Jeff Johnson and John Stanley share their knowledge about how to do it such that your outcome

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Always Learning
On Wed, 2011-02-23 at 13:23 -0600, Larry Vaden wrote: On Wed, Feb 23, 2011 at 1:14 PM, Always Learning cen...@g7.u22.net wrote: Many thanks to Markus Falb for publishing his excellent research - the same research that Larry could also have done. This issue did not affect the

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Keith Keller
On Wed, Feb 23, 2011 at 07:28:15PM +, Trutwin, Joshua wrote: [ Larry Vaden wrote: (please don't snip attributions)] Please take off the blinders and realize there are lots of folks (some x% of a million or more) on this list who compile from current source in order to minimize

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread John Hinton
On 2/23/2011 2:23 PM, Larry Vaden wrote: On Wed, Feb 23, 2011 at 1:14 PM, Always Learningcen...@g7.u22.net wrote: Many thanks to Markus Falb for publishing his excellent research - the same research that Larry could also have done. This issue did not affect the versions of bind as

Re: [CentOS] http://www.securityweek.com/high-severity-bind-vulnerability-advisory-issued

2011-02-23 Thread Kai Schaetzl
Larry Vaden wrote on Wed, 23 Feb 2011 13:21:23 -0600: Please take off the blinders and realize there are lots of folks (some x% of a million or more) on this list who compile from current source in order to minimize their risks and are therefore the subject audience. Nonsense, there is no