[BlueOnyx:18128] Re: BIND security update

Tigerwolf tigerwolf at tigerden.com
Fri Jul 31 14:43:20 -05 2015


On Thu, 30 Jul 2015, Michael Stauber wrote:

> I just checked. Updated bind RPMs for CentOS5 just have hit the CentOS 
> mirrors.

The BX check-update on 5106 isn't picking up the patched bind because BX 
already has a later and higher numerical version (9.8.x) than Centos 
(9.3.x, 9.7.x) already.

The BX repository at 
baseurl=http://updates.blueonyx.it/pub/BlueOnyx/5106R/CentOS5/blueonyx/$basearch/ 
shows the bind version at

bind-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 4M 
bind-chroot-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 69K 
bind-devel-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 403K 
bind-libs-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 2M 
bind-sdb-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 775K 
bind-utils-9.8.2-0.17.rc1.4.i386.rpm 01-Apr-2013 18:31 271K

but the Centos Repository at 
http://mirror.centos.org/centos/5.11/updates/i386/RPMS/
shows only

bind 9.3.6-25.x
bind 9.7.0-21.x
bind97.x

files, though each of those three Centos series has some files dated 
2015-07-29 which are likely the recent patches.

I seem to recall there was a special custom BX update to address some 
other issues a couple years back, so that may explain the newer 9.8 
package BX version.

Is a fresh re-roll of BX's 5106 9.8.x bind version needed to include the 
patches?

This might also affect other BX release versions, too.

-- 
=^_^=  Tigerwolf



More information about the Blueonyx mailing list