Question

1

Ubuntu 12.04.3 LTS Bind Upgrade Question

rated 0 times [ 1] [ 0] / answers: 1 / hits: 2837 / 1 Year ago, sun, december 11, 2022, 1:16:03

I am running Ubuntu Server 12.04.3 LTS with with BIND 9.8.1-P1 + to make sure I have the latest updates I ran

sudo apt-get update

sudo apt-get upgrade

sudo dist-upgrade

This all worked fine but I noticed that the Bind version is still 9.8.1-P1 & since found out that Ubuntu 12.04.3 has not released the latest recommend Bind version of 9.8.6-P1 or even 9.9.4-P1 to this Ubuntu release which is found on:-

https://www.isc.org/downloads/software-support-policy/bind-software-status/

Since there are security holes in this bind version 9.8.1-P1 we are
unable to pass PCI Compliance:-

DNS Server Recursive Query Cache Poisoning Weakness dns (53/udp)
CVE-1999-0024 Medium
5.0 Fail

Solution: Upgrade Bind to version 9.9.4-P1

DNS Server Cache Snooping Remote Information Disclosure dns (53/udp)
Medium, 5.0, Fail (The vulnerability is not included in the NVD)

Solution: Upgrade Bind to version 9.9.4-P1 & add the following line
to the options section of named.conf: allow-recursion { internaldns;
}; eg. options { allow-query { internaldns; }; allow-recursion {
internaldns; }; }; (This new feature was introduced in Bind 9.4)
(http://fixunix.com/dns/496768-dns-cache-snooping.html)

So my question is how do I upgrade to bind version 9.9.4-P1 + also is it safe to run that version on Ubuntu 12.04 LTS?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

hamostic

Add To Favorites

Follow

Total Points: 403

Total Questions: 142

Total Answers: 112

Location: Iceland

Member since Sat, Sep 17, 2022

2 Years ago

answered 1 Year ago sertold · Accepted Answer

I don't know if it is safe or not, but you should be able to upgrade by using this PPA for Bind. I would uninstall the old version and then install the new version from this PPA by using the following commands.

sudo add-apt-repository ppa:malcscott/bind9.9

sudo apt-get update

sudo apt-get install bind9

The webpage for the Launchpad PPA is here.