Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 231283 - net-dns/posadis affected by cache poisoning issue VU#800113 ??
Summary: net-dns/posadis affected by cache poisoning issue VU#800113 ??
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Gentoo Security
URL:
Whiteboard: B3 [masked | noglsa]
Keywords: PMASKED
Depends on:
Blocks:
 
Reported: 2008-07-09 10:52 UTC by Matthias Geerdsen (RETIRED)
Modified: 2008-12-01 13:43 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Geerdsen (RETIRED) gentoo-dev 2008-07-09 10:52:39 UTC 
As a caching DNS server, posadis might be affected by the issue too.
Besides that, it's last version was released in December 2004 it seems. Is it still maintained somehow or is it not even worse keeping it in the tree maybe?

Matsuu, could you comment please?
Comment 1 MATSUU Takuto (RETIRED) gentoo-dev 2008-07-10 15:55:14 UTC 
posadis is in package.mask now.
and I have contacting upstream.
Comment 2 Matthias Geerdsen (RETIRED) gentoo-dev 2008-07-12 19:12:39 UTC 
thanks, please let us know if/when you hear back from upstream
Comment 3 Pierre-Yves Rofes (RETIRED) gentoo-dev 2008-07-13 19:42:20 UTC 
setting to enhancement until we get some updates.
Comment 4 Robert Buchholz (RETIRED) gentoo-dev 2008-11-26 16:29:26 UTC 
Matsuu, did upstream respond? If they did not, it might be worthwhile to remove this package and issue a maskglsa.
Comment 5 MATSUU Takuto (RETIRED) gentoo-dev 2008-11-26 17:05:09 UTC 
no response. removed from portage tree now.
Comment 6 Robert Buchholz (RETIRED) gentoo-dev 2008-12-01 13:10:25 UTC 
GLSA vote, I vote NO.
Comment 7 Pierre-Yves Rofes (RETIRED) gentoo-dev 2008-12-01 13:43:35 UTC 
no too and closing