Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

With the rate of vulnerabilities these days, its difficult to keep ahead. There have been no package updates for the DNS bind9 recently but there are plenty of vulnerabilities. Can someone please assist with a "How-To" for a manual installation of the latest stable release of Bind9 from ISC?

share|improve this question
1  
What security updates have you found in bind9 that Canonical haven't picked up on? Can you name any specific CVEs so that I can file bugs on them? Thanks! –  Robie Basak Feb 6 '13 at 19:22

1 Answer 1

The bind9 package is in main, which means that Canonical are committed to providing security updates for it until the end-of-life of any particular release. Note that security updates are generally backported, so you won't necessarily be able to tell what updates are included from just the version number. Instead, you should check the changelog or search for the CVE that concerns you using Launchpad's CVE search feature.

Users who care about keeping their versions up-to-date should stay updated via the official security updates.

Building the package from source will work, but you will need to watch upstream security notices and keep up-to-date yourself. One big reason to use a distribution package is to save you this trouble, since the distribution vendor does this for you.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.