Re: Waiting for BIND security announcement

2007-08-07 Thread Alex Zbyslaw
Jeffrey Goldberg wrote: But since I'm masochistic, I figure that I should inflict problems on myself like remembering to update the serial numbers myself. (Big shouting reminder comments at both ends of the zone files seem to do the trick) emacs zone-mode will do it automatically for

Re: Waiting for BIND security announcement

2007-08-07 Thread Rakhesh Sasidharan
Just bumping this question of mine. I tried a freebsd-update fetch just now, but I still have no updates! And my system is still on 6.2-RELEASE-p4. Is that normal or should I be concerned? $ freebsd-update fetch Looking up update.FreeBSD.org mirrors... 1 mirrors found. Fetching metadata

Re: Waiting for BIND security announcement

2007-08-06 Thread Rakhesh Sasidharan
On Wed, 1 Aug 2007, Josh Carroll wrote: You need wait no longer...the security advisory just went out with a patch: http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc I'm on FreeBSD 6.2-RELEASE-p4. If I do a freebsd-update shouldn't I get this? Or will there be a delay coz

Re: Waiting for BIND security announcement

2007-08-05 Thread Doug Barton
Rakhesh Sasidharan wrote: This has probably been asked before, Heh, no, never. :) but if BIND is available in ports then why is it also available in contrib? Couple of reasons, of relatively equal importance depending on who you speak to. BSD systems have always (I haven't verified this,

Re: Waiting for BIND security announcement

2007-08-05 Thread Rakhesh Sasidharan
This has probably been asked before, Heh, no, never. :) That's a relief. :) but if BIND is available in ports then why is it also available in contrib? Couple of reasons, of relatively equal importance depending on who you speak to. BSD systems have always (I haven't verified this, but

Re: Waiting for BIND security announcement

2007-08-04 Thread Rakhesh Sasidharan
Hi! Was going through this slightly old thread and wanted to clear somethings up for myself. If you want to stay as close as possible to 6.2-RELEASE but also include the fixes that the security officer deems important enough to release widely, use the tag RELENG_6_2 (usually in your

Re: Waiting for BIND security announcement

2007-08-02 Thread Jeffrey Goldberg
On Aug 1, 2007, at 3:47 PM, Doug Barton wrote: I can't speak for the security team, but I'm pretty sure that this change is forthcoming. As someone has already noted in this thread, the wait is over. When it comes to BIND stuff in particular, I always update the ports first, so anyone with

Re: Waiting for BIND security announcement

2007-08-02 Thread Doug Barton
Jeffrey Goldberg wrote: Yes, I do mean a (low volume) authoritative name server for a small handful of low traffic vanity domains. My intention is to set it up as a master which will transfer zone information to a professional DNS hosting service (dnspark.net whom I'm very happy with).

Re: Waiting for BIND security announcement

2007-08-01 Thread Jeffrey Goldberg
On Jul 31, 2007, at 10:05 PM, A.G. Russell IV wrote: On Thu, Jul 26, 2007 at 10:48:10AM +0200, Zbigniew Szalbot wrote: On 7/25/07, Doug Barton [EMAIL PROTECTED] wrote: RELENG_6 was updated shortly after the release of 9.3.4. I'll be updating RELENG_[56] with the new 9.3.4-P1 version after

Re: Waiting for BIND security announcement

2007-08-01 Thread Doug Barton
Jeffrey Goldberg wrote: It appears that BIND has only been fixed in -STABLE and -CURRENT, but not in -RELEASE. Does anyone know if there are plans to get this patched in 6.2? For me it makes little difference since I am not (yet) running named in a publicly accessible way. But my medium

Re: Waiting for BIND security announcement

2007-08-01 Thread Jeffrey Goldberg
On Aug 1, 2007, at 2:13 PM, Doug Barton wrote: If you want to stay as close as possible to 6.2-RELEASE but also include the fixes that the security officer deems important enough to release widely, use the tag RELENG_6_2 (usually in your supfile for cvsup or csup). If you want the latest code

Re: Waiting for BIND security announcement

2007-08-01 Thread Philip M. Gollucci
Jeffrey Goldberg wrote: Are there other things in /usr/src/contrib that follow this pattern? /usr/ports/mail/sendmail /usr/src/usr.sbin/sendmail Its very common to install /usr/ports/security/cyrus-sasl2-saslauthd add # SASL (cyrus-sasl v2) sendmail build flags...

Re: Waiting for BIND security announcement

2007-08-01 Thread Colin Percival
Jeffrey Goldberg wrote: Anyway, I was disappointed that the BIND fix didn't make it into RELENG_6_2. Give us a little time. Unless an issue is exceptionally urgent, it usually takes us about a week to confirm that we're affected, to get a patch from upstream or create our own, to make sure the

Re: Waiting for BIND security announcement

2007-08-01 Thread Doug Barton
Jeffrey Goldberg wrote: On Aug 1, 2007, at 2:13 PM, Doug Barton wrote: If you want to stay as close as possible to 6.2-RELEASE but also include the fixes that the security officer deems important enough to release widely, use the tag RELENG_6_2 (usually in your supfile for cvsup or csup).

Re: Waiting for BIND security announcement

2007-08-01 Thread Josh Carroll
You need wait no longer...the security advisory just went out with a patch: http://security.freebsd.org/advisories/FreeBSD-SA-07:07.bind.asc Josh ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions

Re: Waiting for BIND security announcement

2007-07-31 Thread A.G. Russell IV
if you will look at /usr/src/contrib/bind9/version your contents will look something like this: # This file must follow /bin/sh rules. It is imported directly via # configure. # MAJORVER=9 MINORVER=3 PATCHVER=3 RELEASETYPE= RELEASEVER= Meaning mine, which was updated a few minutes ago, is

Re: Waiting for BIND security announcement

2007-07-26 Thread Zbigniew Szalbot
Hello, On Thu, 26 Jul 2007 11:36:27 +0300, Abdullah Ibn Hamad Al-Marri [EMAIL PROTECTED] wrote: On 7/25/07, Doug Barton [EMAIL PROTECTED] wrote: RELENG_6 was updated shortly after the release of 9.3.4. I'll be updating RELENG_[56] with the new 9.3.4-P1 version after I'm done regression

Re: Waiting for BIND security announcement

2007-07-26 Thread Abdullah Ibn Hamad Al-Marri
On 7/25/07, Doug Barton [EMAIL PROTECTED] wrote: RELENG_6 was updated shortly after the release of 9.3.4. I'll be updating RELENG_[56] with the new 9.3.4-P1 version after I'm done regression testing it, which should be some time tonight. Same for updating HEAD with 9.4.1-P1. The ports for

Re: Waiting for BIND security announcement

2007-07-24 Thread Simon L. Nielsen
[freebsd-security@ CC'ed to avoid answering the same there again shorly :) - if following up, please drop either freebsd-questions or freebsd-securiy to avoid spamming both lists] On 2007.07.24 18:15:43 -0500, Jeffrey Goldberg wrote: As I'm sure many people know there is a newly discovered BIND

Re: Waiting for BIND security announcement

2007-07-24 Thread Doug Barton
Simon L. Nielsen wrote: [freebsd-security@ CC'ed to avoid answering the same there again shorly :) - if following up, please drop either freebsd-questions or freebsd-securiy to avoid spamming both lists] On 2007.07.24 18:15:43 -0500, Jeffrey Goldberg wrote: As I'm sure many people know