yum update giving only BIND 9.3.4-P1

[Jeff Lightner]

CentOS is compiled from RHEL source RPMs.  That should mean the only
updates you'll see in CentOS are the one's you'll see in RHEL.  Also
presumably there would be some lag time between RHEL providing the
update and CentOS picking it up to recompile for update.

Having said all that - RHEL isn't providing an updated to 9.3.5-P1.
They're just patching 9.3.4-P1.   (See email thread here early this
month in which Adam Tkac of RedHat talks about that.)

As I noted in the vulnerability thread RedHat had updated the 9.3.4-P1
as of 10-July to include the fixes needed for port randomization.

Type "rpm -qa |grep -i bind" to see what the actual RPM version is.

The updated Bind packages  just installed from RedHat on RHEL5 were:
rpm -qa |grep bind
bind-libs-9.3.4-6.0.2.P1.el5_2
bind-utils-9.3.4-6.0.2.P1.el5_2
bind-9.3.4-6.0.2.P1.el5_2
bind-chroot-9.3.4-6.0.2.P1.el5_2
system-config-bind-4.0.3-2.el5

Don't forget you need to remove the query port restriction from your
named.conf as the upgrade doesn't do that for you (it only changes the
entry in the sample named.conf).

If you absolutely have to have 9.3.5 you'll have to download the source
and recompile.

-----Original Message-----
From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
Behalf Of Mark Andrews
Sent: Tuesday, July 15, 2008 7:35 PM
To: Kitchens, Douglas
Cc: bind-users at isc.org
Subject: Re: yum update giving only BIND 9.3.4-P1 


> When performing a yum update bind on our CentOS servers, we are
getting
> the latest version as BIND 9.3.4-P1. Does any one know when we can
> expect BIND 9.3.5-P1 to be available via a yum update, or what mirror
we
> can point to that will pull down the appropriate version?
> 
	You should talk to CentOS.
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org
----------------------------------
CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
----------------------------------