PCI Question Related to ISC Bind Backport

via forums.cpanel.net => original post link

We recently had to change PCI compliance providers. We’ve always scanned as compliant. With the new providers first scan, they provided a list of violations all related to Bind that violated PCI compliancy. I had indicated that it was backported and provided the text from the changelog to prove so. They just had one question for me that I don’t know how to answer:

Are you getting that backported software and patches for ISC BIND from RedHat?

PS: We are using CloudLinux release…