Bind vulnerability patch????

[Evan Hunt]

> I have what may be a silly question. Is there really such thing as a
> patch with bind? I would like to remedy the newest cache poisoning
> problem by applying the patch, but it seems to me that it is not
> really an in-place patch as much as it is removing your old bind and
> installing the patched version. Am I missing something? I'm using
> Solaris 9.

No, you're not missing anything.  ISC refers to the "-P1" releases
as "patches", but it would be more correct to say that they're "patched
versions".

If you want an in-place patch, just download (for instance) 9.3.5 and
9.3.5-P1, extract them into parallel directories, and run diff -ur on
them.

-- 
Evan Hunt -- evan_hunt at isc.org
Internet Systems Consortium, Inc.