bind9 1:9.18.24-0ubuntu1 source package in Ubuntu
Changelog
bind9 (1:9.18.24-0ubuntu1) noble; urgency=medium
* Updated to 9.18.21 to fix security issues.
- Security Fixes:
+ Validating DNS messages containing a lot of DNSSEC signatures could
cause excessive CPU load, leading to a denial-of-service condition.
This has been fixed. (CVE-2023-50387)
+ Preparing an NSEC3 closest encloser proof could cause excessive CPU
load, leading to a denial-of-service condition. This has been
fixed. (CVE-2023-50868)
+ Parsing DNS messages with many different names could cause
excessive CPU load. This has been fixed. (CVE-2023-4408)
+ Specific queries could cause named to crash with an assertion
failure when nxdomain-redirect was enabled. This has been fixed.
(CVE-2023-5517)
+ A bad interaction between DNS64 and serve-stale could cause named
to crash with an assertion failure, when both of these features
were enabled. This has been fixed. (CVE-2023-5679)
+ Under certain circumstances, the DNS-over-TLS client code
incorrectly attempted to process more than one DNS message at a
time, which could cause named to crash with an assertion failure.
This has been fixed.
- Bug Fixes:
+ The counters exported via the statistics channel were changed back
to 64-bit signed values; they were being inadvertently truncated to
unsigned 32-bit values since BIND 9.15.0.
- See https://bind9.readthedocs.io/en/v9.18.24/notes.html for
additional information
-- Marc Deslauriers <email address hidden> Wed, 14 Feb 2024 14:31:05 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Noble
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- net
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| bind9_9.18.24.orig.tar.xz | 5.3 MiB | 709d73023c9115ddad3bab65b6c8c79a590196d0d114f5d0ca2533dbd52ddf66 |
| bind9_9.18.24.orig.tar.xz.asc | 833 bytes | d69191fd021bd68280077f03f586942cf2027ae7683be08aeb244bc58530e625 |
| bind9_9.18.24-0ubuntu1.debian.tar.xz | 71.6 KiB | 00c39f452e621ef34ab3924c5245b6ba673e2c23ac072346e16e2276679f1b55 |
| bind9_9.18.24-0ubuntu1.dsc | 3.2 KiB | 3d249740d6f5fc60a0cf8d0aab8eb3ff1025221a919a2435b4e0fd846c931067 |
Available diffs
Binary packages built by this source
- bind9: Internet Domain Name Server
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package provides the server and related configuration files.
- bind9-dbgsym: debug symbols for bind9
- bind9-dev: Static Libraries and Headers used by BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package contains a bundle of static libraries and header files used by
BIND 9.
.
Please be aware that the BIND 9 libraries are considered private by upstream
developers and the API and ABI might break at any time.
- bind9-dnsutils: Clients provided with BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers various client programs related to DNS that are
derived from the BIND 9 source tree.
.
- dig - query the DNS in various ways
- nslookup - the older way to do it
- nsupdate - perform dynamic updates (See RFC2136)
- bind9-dnsutils-dbgsym: debug symbols for bind9-dnsutils
- bind9-doc: Documentation for BIND 9
This package provides various documents that are useful for maintaining a
working BIND 9 installation.
- bind9-host: DNS Lookup Utility
This package provides the 'host' DNS lookup utility in the form that
is bundled with the BIND 9 sources.
- bind9-host-dbgsym: debug symbols for bind9-host
- bind9-libs: Shared Libraries used by BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package contains a bundle of shared libraries used by BIND 9.
- bind9-libs-dbgsym: debug symbols for bind9-libs
- bind9-utils: Utilities for BIND 9
This package provides various utilities that are useful for maintaining a
working BIND 9 installation.
- bind9-utils-dbgsym: debug symbols for bind9-utils
- bind9utils: Transitional package for bind9-utils
This is a transitional package. It can safely be removed.
- dnsutils: Transitional package for bind9-dnsutils
This is a transitional package. It can safely be removed.
