oss-security - BIND CVE-2009-4022 fix incomplete

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1409622395.235811263936069790.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 19 Jan 2010 16:21:09 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: coley <coley@...re.org>, oss-security <oss-security@...ts.openwall.com>
Subject: BIND CVE-2009-4022 fix incomplete

Hi Steve,

I'm not assigning this one as I'm not sure if you've seen this or not.

ISC released an update today for BIND, part of it was that CVE-2009-4022
was not completely fixed:
https://www.isc.org/advisories/CVE-2009-4022

If you look down at the bottom of their advisory you can see this:
    Jan. 19 - Revised Summary, Severity, Description, Workaround, Impact &
    Solution (earlier fixes incomplete) 

As best as we can tell, this is why:
https://bugzilla.redhat.com/show_bug.cgi?id=554851#c7

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.