bind8.2 security issues

[Steve Foster]

All,


i have seen the postings on this group and via CERT about the
vulnerabilities in Bind8.X , however i am bit confused as to how to
progress. I currently have bind running 8.2.3 on Solaris 2.6 , i have no
problems re-building a new version of bind to replace it, however Sun have
not released any details on new resolver library patches, So should i wait
until they do before building a new version of bind, or does bind use its
own internal ones for build named etc...

Also it says that named itself is not vulnerable, how can this be so??

many thanks in advance

Steve
Steve Foster
Senior Systems Administrator
PSINet Europe
Work: +44 (1223) 577322
Mobile: +44 (7720) 425911