From owner-freebsd-security@FreeBSD.ORG Thu Dec 18 16:19:52 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8EAAC51F for ; Thu, 18 Dec 2014 16:19:52 +0000 (UTC) Received: from mproxy19.sbb.rs (mproxy19.sbb.rs [89.216.2.104]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "smtp.sbb.rs", Issuer "PositiveSSL CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 10720128A for ; Thu, 18 Dec 2014 16:19:51 +0000 (UTC) Received: from knossos (cable-178-148-99-16.dynamic.sbb.rs [178.148.99.16]) by mproxy19.sbb.rs (8.14.4/8.14.4) with ESMTP id sBIGD9RQ011219 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 18 Dec 2014 17:13:09 +0100 X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.97.6 at SBB mail Received: from localhost (1000@localhost [local]); by localhost (OpenSMTPD) with ESMTPA id fbd63843; for ; Thu, 18 Dec 2014 17:13:07 +0100 (CET) Date: Thu, 18 Dec 2014 17:13:07 +0100 From: Zoran Kolic To: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-14:30.unbound Message-ID: <20141218161306.GA21957@knossos> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mproxy19.sbb.rs X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Dec 2014 16:19:52 -0000 > The first part of that statement is false. The dns/unbound port was > fixed for CVE-2014-8602 on 9 December. Thus a valid work around is to > disable local_unbound and use ports/dns/unbound. To ask explicitelly: this does not affect 9.3? I see no unbound nor local_unbound on stock install. Best regards Zoran