[CentOS] mirror.centos.org ships non-updated version of bind ?

Mon Jun 10 23:17:05 UTC 2019
cosml at rsguhr.eu <cosml at rsguhr.eu>


RedHat published an update for bind two weeks ago - it's fixed some bind vulnerabilities (https://access.redhat.com/errata/RHSA-2019:1294).

There's a commit 'import bind-9.9.4-74.el7_6.1' on https://git.centos.org/rpms/bind/commits/c7 since 12 ago but  http://mirror.centos.org/ still ships the old non-updated version of bind (bind-9.9.4-73.el7_6.x86_64.rpm)

Couldn't find bind on cbs.centos.org but I'm not really familiar with the building / publishing process at CentOS.

Which steps are between ' RedHat published an update' and ' mirror.centos.org'?

Best regards,