Ubuntu, security response, and community contributions

Note that the Red Hat BIND update was actually released on the 8th July and immediately
available by RHN and web:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-1447...

However due to email list problems the email notification wasn't able to be sent to the
enterprise-watch-list and rhsa-announce mailing list until some hours later on the 9th.  (On
10th July we released updated packages for Red Hat Enterprise Linux 5 only because the sample
and default configuration file still specified a single source port).