in.named filling Solaris swap space (newbie)

Kevin Darcy kcd at daimlerchrysler.com
Fri May 18 22:53:04 UTC 2001


Jim Reid wrote:

> >>>>> "Tom" == Tom Hartley <tom.hartley at homepages.co.uk> writes:
>
>     Tom> Hi Thanks for all the feedback - 'strings in.named | grep -i
>     Tom> bind' gives me Bind 8.1.2
>
> This needs to be upgraded because it has security holes.

Not necessarily. Sun has an annoying habit of issuing "security
patches" for the older versions of BIND they ship with Solaris. If those
patches are applied, and if one trusts the Sun programmers to have
back-ported the fixes properly, then maybe that executable has no
security holes in it.

I guess the reason Sun does things this way, instead of just porting the
latest release whenever a security hole is announced and issuing
*that* as a patch, is because they're worried about version
incompatibilities that would complicate support.


- Kevin



More information about the bind-users mailing list