Is it necessary to recompile OS to apply security patch?

Hello, I know nothing/very little about OpenBSD or UNIX. I have been tasked with updating our OpenBSD DNS server with a security fix (Vulnerability Note VU#800113- Multiple DNS implementations vulnerable to cache poisoning). In order to do this it appears that I have to download the source code

Re: Is it necessary to recompile OS to apply security patch?

Assume this production server is running one of the supported releases, 4.2 or 4.3, you can obtain the latest patch via the errata page. http://openbsd.org/errata43.html For 4.2 it's errata #013, for 4.3 it's #004... if you run an earlier version, manually merging the patch may be required.

Re: Is it necessary to recompile OS to apply security patch?

Hi, Assuming the box is only a DNS server, then the simplest easiest (in my option) is to take a copy of the DNS related files: - /etc/rc.conf.local - /var/named/* - noting also IP address, hostname etc etc and then reinstall the o/s from a recent snapshot (downloaded