Security issue / Upgrade BIND

Hi,
I am running two DNS servers on suse 9.3 ( BIND version 9.3.2, under chroot /var/lib/named ) Now I need to upgrade ASAP because of the new security issue in DNS protocol, There seems to be no updates for bind if I run the update tool (YOU) or apt-get, perhaps suse 9.3 is to old and not supported anymore ?
Any suggestion for me ?

Thanks

Maybe build it from the bind source release?

Maybe hope some kind person with 9.3 will build it and make it available.

Theoretically you could grab the 10.2 (closest you can get) source rpm and compile it yourself although it might cause some issues - 9.3 has been out of support err… 18-24 months?

It seems I can compile it for 10.0 and 10.1 from the 10.2 sources but unfortunately I do not think I have 9.x anywhere so I cannot provide you with an RPM unless I install 9.3 in a VM.

Then again I don’t think I have the installation media anywhere either - although I think I saw 9.x box somewhere :slight_smile:

Hi, thanks for the reply guys.
I will be very grateful for any help, perhaps I just need to setup new servers to be secure in the DNS department.

Thanks

My apologies if I misled anyone. I found out that what I thought was a 10.1 bind update from Novell was in fact an older one, just before end of support. Anyway I took the 10.2 SRPM and rebuilt it on 10.1 using:

rpmbuild --rebuild bind-9.3.5P1-0.1.src.rpm

(openldap2 and openldap2-devel are build dependencies) which resulted in several packages in /usr/src/packages/RPMS/$arch/ which I installed with

rpm -Fhv bind-*

(-F only updates the ones that were installed).

If you want the x86_64 RPMs maybe we can arrange something.