Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have heard about a vulnerability in BIND. See here:

The issue appears to be with certain versions and my version (9.3.6) is earlier than any versions they mention. I did a yum install on BIND and it downloaed and installed the same version 9.3.6 which seems old.

So old in fact that I got to worrying. I know that CentOS doesn't upgrade versions and that instead it patches existing versions of applications. But where do you go to get the patches or are they downloaded periodically in the background. Am I to assume that the keepers of my CentOS repos are patching BIND (and other apps) so that when I update or install using YUM I get the latest safe version.

Without a new version number how do I know I'm patched?

share|improve this question

cve-2011-0414 affects ISC BIND 9.7.1 through 9.7.2-P3, so if you are running 9.3.6 you are not vulnerable.

see also

"Not vulnerable. This issue did not affect the versions of bind as shipped with Red Hat Enterprise Linux 4, 5, or 6."

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.