With the rate of vulnerabilities these days, its difficult to keep ahead. There have been no package updates for the DNS bind9 recently but there are plenty of vulnerabilities. Can someone please assist with a "How-To" for a manual installation of the latest stable release of Bind9 from ISC?
1 Answer
The bind9 package is in main, which means that Canonical are committed to providing security updates for it until the end-of-life of any particular release. Note that security updates are generally backported, so you won't necessarily be able to tell what updates are included from just the version number. Instead, you should check the changelog or search for the CVE that concerns you using Launchpad's CVE search feature.
Users who care about keeping their versions up-to-date should stay updated via the official security updates.
Building the package from source will work, but you will need to watch upstream security notices and keep up-to-date yourself. One big reason to use a distribution package is to save you this trouble, since the distribution vendor does this for you.