How can I update BIND using WHM?

Citizen

Active Member
Sep 3, 2012
28
0
1
cPanel Access Level
Root Administrator
ISC BIND 9.x before 9.7.6P1,
9.8.x before 9.8.3P1,
9.9.x before 9.9.1P1,
and 9.4ESV
and 9.6ESV
before 9.6ESVR7P1
does not properly handle
resource records with a zerolength
RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or
obtain sensitive information from process memory via a crafted record.
How can I update to the latest version of BIND using WHM?
 

mtindor

Well-Known Member
Sep 14, 2004
1,508
136
343
inside a catfish
cPanel Access Level
Root Administrator
Your bind is likely up to date. But you can update it either via WHM Update System Software or WHM Update Server Software [i forgot off the top of my head].

Or you can do it manually from commandline using yum.

But, if it's the up-to-date version for your particular OS distro, it isn't going to update any further.

Why are you asking? Do you have a PCI Compliance place stating that you have a problematic install of BIND? If so, you can do this [from commandline] to see if your version of installed Bind is patched for whatever security issue the PCI place may be complaining about.

rpm -q --changelog bind

If your version of bind claims to have resolved whatever issue the PCI folks are barking about, then send them the output of the command above and tell them that it's a non-issue.

M
 

Citizen

Active Member
Sep 3, 2012
28
0
1
cPanel Access Level
Root Administrator
For anyone finding this in the future, this did turn out to be a false positive. I got an exception through my PCI auditor by showing them the BIND changelog.