From owner-freebsd-security@FreeBSD.ORG  Wed Jul  9 15:33:09 2008
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BFD2A106567B
	for <freebsd-security@freebsd.org>;
	Wed,  9 Jul 2008 15:33:09 +0000 (UTC)
	(envelope-from wtf.matters@gmail.com)
Received: from qb-out-0506.google.com (qb-out-0506.google.com [72.14.204.238])
	by mx1.freebsd.org (Postfix) with ESMTP id 7927C8FC19
	for <freebsd-security@freebsd.org>;
	Wed,  9 Jul 2008 15:33:09 +0000 (UTC)
	(envelope-from wtf.matters@gmail.com)
Received: by qb-out-0506.google.com with SMTP id f30so6777057qba.7
	for <freebsd-security@freebsd.org>;
	Wed, 09 Jul 2008 08:33:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:cc:mime-version:content-type;
	bh=YXUdTaF3KSC/djGyGVQb1LAbB6GcS+xQnm8BvU2PbXc=;
	b=kAytEtM4ww4FkjHNMmMhU+JGH4MZ0heawFv8pzdiSfsEfhEsRQm523nw4zC8Mu+8zy
	FqgX2+t5mNUdZbZnaSVFpCPTsLeTNOhXu3IFnBp15JHZ+kdbr0vVYm4lVKT0BMwYw3Iq
	ZRR0oIJVgqa1PYlMFz7o6rghqmu2F10poi8jQ=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:mime-version:content-type;
	b=toZQDAPOevIrH42/JtzWvpktvB+x1ifCZfnASeI+BevpJmClhXfTfjEcqYUa6/Ug7G
	P4JEtfRXVxb35Kw9bjkBgIWcdpfOH7pjTiCfjO47ziPaZB4nMS3nUythRvJrmNeeWu3B
	LRK/yg9oQKh4rkYaDpKHNqV+6Qtp3OfW1VnD8=
Received: by 10.141.212.5 with SMTP id o5mr4048000rvq.20.1215616777665;
	Wed, 09 Jul 2008 08:19:37 -0700 (PDT)
Received: by 10.141.153.20 with HTTP; Wed, 9 Jul 2008 08:19:37 -0700 (PDT)
Message-ID: <17cd1fbe0807090819o2aa28250h13c58dbe262abb7c@mail.gmail.com>
Date: Wed, 9 Jul 2008 11:19:37 -0400
From: "Josh Mason" <wtf.matters@gmail.com>
To: remko@elvandar.org, freebsd-security@freebsd.org
MIME-Version: 1.0
X-Mailman-Approved-At: Wed, 09 Jul 2008 15:48:45 +0000
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: astorms@ncircle.com
Subject: Re: BIND update?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jul 2008 15:33:09 -0000

Remko Lodder wrote:
> On Tue, July 8, 2008 8:34 pm, Andrew Storms wrote:
>> Are going to expect a update for BIND today?
>>
>> http://www.isc.org/index.pl?/sw/bind/bind-security.php
>>
>> _______________________________________________
>
> Hello,
>
> I think it's important that we do not overstretch things instantly. The
> FreeBSD Security Team is aware of this situation and will investigate how
> to do plan and act upon this.
>
> Thanks,
> Remko
>
 Right, lets not act swiftly. That would be too much to ask. Is there any
reason why FreeBSD is one of the last vendors to release patches for the
vulnerability?

I apologize, perhaps I should simply do it myself as has been the common
response as of late, or perhaps install from source retrieved from
isc.orgshould be the expected answer?

Most other vendors seem to have taken this seriously, yet FreeBSD seems to
be sitting on their hands for some unknown reason while its users remain
vulnerable.

Thanks for all the hard work,

   Your incredibly loyal follower