@cswiger: "Hi, all
Apropos of this security issue with BIND, I just tried updating a  
FreeBSD-6.3-STABLE system with dns/bind95, and it loudly complains  
about the OpenSSL version which comes with the system:
<quote>
Is the version of OpenSSL now included with RELENG_6 (OpenSSL 0.9.7e- 
p1) OK, or is it at risk as reported?
Regards,
-Chuck"
    @simon: "[quote edited to contain important part]
<quote>
[...]
Just so there is no doubt - the base system OpenSSL isn't actually
vulnerable to those issues.  They were fixed in SA-02:33.openssl,
FreeBSD-SA-06:19.openssl, and FreeBSD-SA-06:23.openssl.
The BIND build system just has no way to see this since they were
patched instead of upgraded.
Simon L. Nielsen
Hats: Base system OpenSSL janitor and FreeBSD Security Team"
    @dougb: "<quote>
... hence the false economy of not doing a "standard" upgrade of the 
version in the base. :) It's nice to know that for the particular set 
of problems listed in this version of BIND's warning message our users 
should not be at risk though.
I used the ports openssl on my 6-stable boxes without problems, but I 
did not have that many ports installed, and I nuked the base openssl 
first. YMMV.
Doug
     This .signature sanitized for your protection"
{'source': 'USENET', 'other_information': '{"reply_count": 2, "forum_name": "lucky.freebsd.security.20140226.mbox"}', 'file': 'data/output/usenet-lucky.freebsd.parquet'}