On 07/05/2011 05:38 PM, Bryn M. Reeves wrote: ... > Usually the ChangeLog lines for the bind package include a CVE number so I > wouldn't generally want to assume that it did but the upstream advisories for > both CVEs specifically mention 9.8.0-P4 as containing the fix: > > http://www.isc.org/software/bind/advisories/cve-2011-2464 > http://www.isc.org/software/bind/advisories/cve-2011-2465 > > Regards, > Bryn. Thanks - I recalled too that the CVE's usually ended up in the changelog ... its all clear now :-) thank you! -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines