Re: Bug#690569: Bug#690142: remote named DoS on recursor (CVE-2012-5166) and Bug#690569 (DNS wildcards fail to resolve with DNSSEC enabled)

2012-10-18 Thread Michael Gilbert
On Wed, Oct 17, 2012 at 10:22 PM, Matthew Grant wrote: On Wed, Oct 17, 2012 at 1:57 PM, Michael Gilbert No. We're in the freeze now. Fixes need to be backported. If backporting a fix is not possible with the certainty of no introduced bugs, we have no choice. Debian Bind9 cannot ship

Re: Bug#690569: Bug#690142: remote named DoS on recursor (CVE-2012-5166) and Bug#690569 (DNS wildcards fail to resolve with DNSSEC enabled)

2012-10-17 Thread Matthew Grant
On Wed, Oct 17, 2012 at 1:57 PM, Michael Gilbert mgilb...@debian.orgwrote: On Tue, Oct 16, 2012 at 6:49 PM, Matthew Grant wrote: Can Bug #690569 (DNS wildcards fail to resolve with DNSsec enabled - breaks RFC 4035)be reclassified as grave, or at least Important severity? You implied a bug