Many security advisories this year. Is this normal?
reddit / BSD

----------------------------------------------------------------------
midgaze · 2015-09-14 06:12

Going over that list, it looks like there are a bunch from the "usual
suspects". 35% of those vulnerabilities from 2015 are from BIND and
OpenSSL. 2014 seems to have about the same rate as 2015 has so far.
It's nice that BIND got removed from the base system in -current! That
should bring the vulnerability numbers down quite a bit.

----------------------------------------------------------------------
ben_bai · 2015-09-14 07:55

bind, openssl, ntpd and sendmail. The unholy 4 (legacy code
nightmares).

----------------------------------------------------------------------
marmulak · 2015-09-14 08:58

I only have a vague idea of what bind does. Why is it so vulnerable?

----------------------------------------------------------------------
ben_bai · 2015-09-14 10:34

Bind is for DNS, it's a Domain Name Resolver and a Domain Name
Authority server. It has lots of features, which mean a lot lines-of-
code which means a lot of bugs. Plus it's directly listening on the
network which makes it an ideal target. bind 4/8 codebase goes back to
the early 80's. bind 9 was a complete rewrite, because "this time we
get it right" - NOT.

----------------------------------------------------------------------
marmulak · 2015-09-14 11:07

Ouch

----------------------------------------------------------------------
strngsvlmstng96 · 2015-09-28 16:21

Could you explain how/why they are nightmares?