Re: CVE-2012-1033 (bind9)

[Michael Gilbert <mgilbert@debian.org>]

On Thu, Jul 26, 2012 at 10:50 AM, Mike Ashton wrote:
> Hello folks,
>
> If we look here:
>
> http://security-tracker.debian.org/tracker/CVE-2012-1033
>
> it appears as though this CVE has been written off as a DNS protocol
> flaw, I believe based on the original ISC announcement here:

Hi, this had already been fixed in unstable/testing before your
message.  It's a low severity issue, and if you want to see it fixed
in squeeze, you could help by preparing an stable-proposed-update for
the next point release.

In the meantime, I've updated the tracker.

Thanks,
Mike