On Mon, 2003-12-01 at 18:18, fedora wrote: > last week there was a BIND vulnerability fix. I figured the fixes for RH There was? For BIND 9? Do you have a reference? Last BIND update I see was a maintenance release of 9.2.3 in October, and I can't seem to find anything in CERT's database. > Also, since the kernel security issue was fixed in the 2.4.23 kernel in > september was there a reason for it not being already backported already? I would like to see a kernel with the do_brk() patch, but 2.4.23 only came out a few days ago, not in September. -- Joshua Penix http://www.binarytribe.com Binary Tribe Linux Integration Services & Network Consulting