Tony Yarusso's Blog

So I noticed this morning both on my laptop at home and in the logs on servers at work that there had been a BIND update that came down the pipe, and being a core system service, was a bit curious what the deal was, but didn't look into it right away. Now, later in the day I'm going through the tech / security news of the day, and found this article providing a bit of background, and was able to confirm that it was related via USN 622-1.

The article states that vendors have 30 days to provide patches before the embargo on the details of the vulnerability is lifted. Ubuntu had this patch to me in less than 30 hours - heck, as far as I can tell it might have been 3 hours. Just another little reminder of why I like alert, involved, responsive, community-driven software like this so much. To Kees Cook, LaMont Jones, Jamie Strandboge, and anyone else that may have had a hand in it, nice work!