Re: Compromised...

[rich () PARANOID ORG (Rich Burroughs)]

On Tue, 8 Feb 2000, Joshua Krage wrote:

> but it
> hampers the easy "stay up-to-date" by upgrading to the latest releases
> whenever they come out.  Its hard to tell your community 'make sure you
> upgrade to BIND 8.2.2-P5', or even 'upgrade to the latest vendor release',
> because now either statement will cause confusion when users compare
> notes.

I'm not sure that I see the problem here. The security updates were in
8.2.2-P3. If people are using RedHat, that is the latest package
available. RedHat has never made a practice of rolling a new package every
time there is a bug in a piece of software or a newer version released,
and I don't think it's reasonable to expect them to. If there were a
known security update they would have released a new RPM.

RedHat users should be directed to check the errata and security
announcements at RedHat's site.

Rich