Steve Shockley notes an article up at TidBITS on Apple's unexplained failure to patch the DNS vulnerability
that we have been discussing
for a few weeks
now. "Apple uses the popular Internet Systems Consortium BIND DNS server, which was one of the first tools patched, but Apple has yet to include the fixed version in Mac OS X Server, despite being notified of vulnerability details early in the process and being informed of the coordinated patch release date."