Hi Ondrej, On Mon, Jul 11, 2016 at 08:36:07PM +0200, Ondřej Surý wrote: > Hi Salvatore, > > the common agreement between DNS Vendors (that includes me) is that this > shouldn't have been assigned CVE as it is an operational issue as you > have an established trust between DNS master-slave for transfers. (And > all DNS servers are affected.) > > I don't think this really needs update in stable, but I would like to > hear whether you think otherwise.
No I completely agree, we actually have marked all those already as no-dsa (for src:nsd, src:pdns, src:bind9 and src:knot). But filling those as well in BTS to have the reference in BTS. Thanks for your quick response, amazing :-) Salvatore