Martijn Oops (ping @ancarda) schneier.com/blog/...

Mark Dain Sorry this took some time to reply, I've been very busy. It's not surprising at all there's yet another buffer overflow in a C library we all depend on. I don't think we'll ever get rid of the worst of security flaws without ditching unsafe languages for mission critical components like DNS. Problem is it's so hard to shake off C/C++. For the time being, I suppose it's patch vigilantly, as always