[BlueOnyx:04465] Re: (no subject)

[webmaster]

Saw those same updates in my logs

Hmm..?  Maybe I'm ok then

The "site" is currently sitting on a  550 and I am deciding either to 
"patch up bind on it" or move the site to my BX box.

Yes I know, I know I need to replace that 550.  Thanks to divorce 
lawyers I can't afford that right now.

Thanks for you help




>On May 12, 2010, at 2:46 PM, webmaster wrote:
>
> >
> > Running BX everything is up to date using yum (I thknk)
> >
> > Webmin tells me that my version of bind is BIND version 9.3.6.
> > Correct?
> >
> > Anyway. I am dealing with PCI compliance issues for a client and my
> > server guy says that I have BIND version 9.3.6  DNS cache poisioning
> >
> > This true?
>
>Maybe... probably not...
>
>Most distros, CentOS included, issue patches throughout its lifespan.
>They may not go to bind 9.4, but the vulnerability is usually patched
>quickly. Our current version and release of bind is this:
>
>[root at box1 admin]# rpm -q bind
>bind-9.3.6-4.P1.el5_4.2
>
>The P1 is supposed to address that vulnerability.
>http://lwn.net/Alerts/370490/
>
>Ours was updated:
>Jan 21 06:04:23 Updated: 30:bind-chroot-9.3.6-4.P1.el5_4.2.i386
>Jan 21 06:04:13 Updated: 30:bind-chroot-9.3.6-4.P1.el5_4.2.i386
>Jan 21 06:04:08 Updated: 30:bind-utils-9.3.6-4.P1.el5_4.2.i386
>Jan 21 06:04:08 Updated: 30:bind-9.3.6-4.P1.el5_4.2.i386
>Jan 21 06:04:08 Updated: 30:bind-libs-9.3.6-4.P1.el5_4.2.i386
>_______________________________________________
>Blueonyx mailing list
>Blueonyx at blueonyx.it
>http://www.blueonyx.it/mailman/listinfo/blueonyx