Hi, RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294). There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but http://mirror.centos.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm) Couldn't find bind on cbs.centos.org but I'm not really familiar with the building / publishing process at CentOS. Which steps are between ' RedHat published an update' and ' mirror.centos.org'? Best regards, Robért _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx https://lists.centos.org/mailman/listinfo/centos