Assume this production server is running one of the supported releases, 4.2 or 4.3, you can obtain the latest patch via the errata page.
http://openbsd.org/errata43.html For 4.2 it's errata #013, for 4.3 it's #004... if you run an earlier version, manually merging the patch may be required. >From the top of the 4.3 patch file: ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/004_bind.patch Apply by doing: cd /usr/src patch -p0 < 004_bind.patch Then rebuild and install bind: cd usr.sbin/bind make -f Makefile.bsd-wrapper obj make -f Makefile.bsd-wrapper make -f Makefile.bsd-wrapper install You'll only need to recompile then restart BIND, updating to -STABLE and compiling the kernel isn't required.. Now, your server may not have the source in /usr/src, you can either obtain it from the release CD-ROM or a local HTTP/FTP mirror.. src.tar.gz is the userland. sys.tar.gz is the kernel. Locate a mirror here: http://www.openbsd.org/ftp.html Take care, feel free to reply to the list for further assistance...