Re: bind worm

[Erik Steffl <steffl@bigfoot.com>]

Bill White wrote:
> 
> On Fri, Mar 23, 2001 at 02:23:16PM -0800, Karsten M. Self wrote:
> > on Fri, Mar 23, 2001 at 12:53:59PM -0500, John Cuson (jcuson@labs.isdh.state.in.us) wrote:
> > > forwarded sans alert ...
> > >
> > > john cuson
> > > (jcuson@labs.isdh.state.in.us, jcuson@alumni.indiana.edu)
> > >
> > >   "Why, sometimes I've believed as many as six impossible things
> > >     before breakfast."
> > >
> >
> > Note that
> >     Package: bind
> >     Version: 1:8.2.3-4
> >
> 
> This is very confusing to me.  It looks to me as if the version of bind
> in stable is 8.2.2p7-1.  It looks to me as if you have to go to unstable
> to get 8.2.3-4.  So, when you say we should "run our updates", does that
> means we should update a production environment to unstable?  Seems risky
> to me.

  you might want to check the archives of security but AFAIK the
security problems are released for potato as well. So I guess if it was
fixed in testing/unstable it was also fixed in stable...

	erik