-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 12 Feb 2024 17:04:19 +0100
Source: bind9
Architecture: source
Version: 1:9.19.21-1
Distribution: unstable
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Closes: 1063448
Changes:
bind9 (1:9.19.21-1) unstable; urgency=high
.
[ Helmut Grohne ]
* Drop unused Build-Depends: python3. (Closes: #1063448)
.
[ Ondřej Surý ]
* New upstream version 9.19.21
- CVE-2023-4408: Parsing large DNS messages may cause excessive CPU
load
- CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion
failure when "nxdomain-redirect" is enabled
- CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an
assertion failure during recursive resolution
- CVE-2023-6516: Specific recursive query patterns may lead to an
out-of-memory condition
- CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
- CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust
CPU resources
Checksums-Sha1:
68539a446ae104a71ba12d22eb7b7e24db50691c 3041 bind9_9.19.21-1.dsc
a3381e233404c291de727882d3a7f80ad917c54d 5704020 bind9_9.19.21.orig.tar.xz
ab4f5129f9891b91bbbabff5bf294378bcc20a9f 59112 bind9_9.19.21-1.debian.tar.xz
19237d2f440a96c6d7c2f831139ac1fb2279c368 15906 bind9_9.19.21-1_amd64.buildinfo
Checksums-Sha256:
4c02d8b69cbd1c07d550d464c18b51927390a9e2b21bfe02af9be50b9ef87355 3041 bind9_9.19.21-1.dsc
2b68a99b85f78c76cc87a4eac14cc510e04b64660f5036c04f5f3185b00a6e8c 5704020 bind9_9.19.21.orig.tar.xz
af053b28def0bb4b41500359418283c4756b2b9e76b2cc44aa1afce3f4821ab1 59112 bind9_9.19.21-1.debian.tar.xz
468ca7794fda3b6eb4120c015d85d320e06afc9310a225c0516b68a45779c508 15906 bind9_9.19.21-1_amd64.buildinfo
Files:
a37ed99194a5a15ab1891f661a71352a 3041 net optional bind9_9.19.21-1.dsc
0d0cabccc9841cddc3721b4cf9c5c6e6 5704020 net optional bind9_9.19.21.orig.tar.xz
9614b6ad7ad5788b32a078e452dbf353 59112 net optional bind9_9.19.21-1.debian.tar.xz
34941ebd872a87433af4decf8860cbc9 15906 net optional bind9_9.19.21-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmXNI/9fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz
NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u
WcLZFw//Sl05pBBok86mF60fncarIu8SsEyqYwz43/VJvQaHPTJ5QZuR+m7pW7kN
IsGRWv3/gRtdI109lcBgWafilV9sZJIrsVW5eTPdFC7SLzNysWzhaMlgAEkdFHDm
VwZbZxVXHFt/0LE5BAruBqKY56AvzZdfVn0UeFWyIl9vmG8jm0I00jAOVMuyV5f3
LlZqweyAVkzSlG9wyCeUQEO+yag0S88FEVM0KJqgtDtbSL8uZoUjUr40Ho6udRkY
KLnFFbTyT3T+3s1vD8yOT7U1O8fe0P2lchrzh5rGgnJ9q/fFMsXGFd2LVLNQKPFR
0jl3DzDIAXCi8rEa4csCSV7E30ZaYB7qiNjIOB5yk7FlDxM1Buu+eGrKZKq2tW1y
Lg9YXPv/3vF/iY8NJM2dFLc1s+AK40DsRLq+MFyWKzeGL/pnabEDEVlgx4migx7r
hgcj3gv8U3v+87UHFMHdKmhUTzc82mayWwTcr6D2Fuwh1ZNVnOO7YqMK/ODqv5+w
1Nf+CU2nZuNjMAG47eMQxvdO3oEbsb2iMGF7daHSRu6Vfse/Ss/2NlNdPR0MT7xp
QgIcSgQUO39+SMqJ9nsWOUoUlzqC+8uJGmkE6KcQOs2cJLdN/PQK5NHUWU+4VayX
o65rV85/4FcH3fIcgmS/9Be7Zsfw85/xtFzo+0hlbBLxEtdR02I=
=NVDo
-----END PGP SIGNATURE-----
Attachment:
pgpaUVptIwxfF.pgp
Description: PGP signature