Format: 1.8 Date: Wed, 14 Feb 2024 14:31:05 -0500 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: armhf armhf_translations Version: 1:9.18.24-0ubuntu1 Distribution: noble-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.18.24-0ubuntu1) noble; urgency=medium . * Updated to 9.18.21 to fix security issues. - Security Fixes: + Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50387) + Preparing an NSEC3 closest encloser proof could cause excessive CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50868) + Parsing DNS messages with many different names could cause excessive CPU load. This has been fixed. (CVE-2023-4408) + Specific queries could cause named to crash with an assertion failure when nxdomain-redirect was enabled. This has been fixed. (CVE-2023-5517) + A bad interaction between DNS64 and serve-stale could cause named to crash with an assertion failure, when both of these features were enabled. This has been fixed. (CVE-2023-5679) + Under certain circumstances, the DNS-over-TLS client code incorrectly attempted to process more than one DNS message at a time, which could cause named to crash with an assertion failure. This has been fixed. - Bug Fixes: + The counters exported via the statistics channel were changed back to 64-bit signed values; they were being inadvertently truncated to unsigned 32-bit values since BIND 9.15.0. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information Checksums-Sha1: 61082e59598f7d30274d52d5b5e5c0aa33d71ecd 594118 bind9-dbgsym_9.18.24-0ubuntu1_armhf.ddeb c65e0bec5dcced6cb909165252b11be4195bfa6d 263084 bind9-dev_9.18.24-0ubuntu1_armhf.deb 9eb18049692fcf96bfdbe722c60a4e44f52df64d 348716 bind9-dnsutils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 3455c168680fea92f90154245a6e727411ebcfed 148742 bind9-dnsutils_9.18.24-0ubuntu1_armhf.deb a8b7889a99d9bb1cfa6be247a72dad9d50f8b248 102504 bind9-host-dbgsym_9.18.24-0ubuntu1_armhf.ddeb b253183cdcde2702a7306ef8b472f00acdaa1c38 47394 bind9-host_9.18.24-0ubuntu1_armhf.deb 67d95ebc21e949082dcb4f0302f775289d897b77 3564950 bind9-libs-dbgsym_9.18.24-0ubuntu1_armhf.ddeb cf79088b5334298929e95f9db8e06de9ff90eb2d 1147510 bind9-libs_9.18.24-0ubuntu1_armhf.deb 753a61a957cc2be15d72d02c7bf4a5fdf7a2000a 304810 bind9-utils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 4677014a6aefa56702bc7de2d76804f0170c2f38 154144 bind9-utils_9.18.24-0ubuntu1_armhf.deb d60fb99a5ea5a27dc14ba67165934cf342b950c7 10786 bind9_9.18.24-0ubuntu1_armhf.buildinfo 9d55ff297b703764e04e0b1b1c987fa12877a579 244516 bind9_9.18.24-0ubuntu1_armhf.deb 35e7c2b2a6a402e31b8c14c6a7366d3e198ff060 13035 bind9_9.18.24-0ubuntu1_armhf_translations.tar.gz Checksums-Sha256: 02c38205cbf38fb5b5a45641183f2e556d4ba8302e189611af2e629754027eef 594118 bind9-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 08e723ad8bee629b530dcd321217ed9a397093e4c19926b1e6ea89b128ae2a3c 263084 bind9-dev_9.18.24-0ubuntu1_armhf.deb 95d5c2b5bc27074ed568534b36fec75f93e96639a68e8fafa533085698597c5c 348716 bind9-dnsutils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb d578283258e732d276a0e22d3092e21e29861f8fec97a51131339f67fa198fb2 148742 bind9-dnsutils_9.18.24-0ubuntu1_armhf.deb c9f99dc63ede62294dd06540058581b770cfc9df55c5e63201c8e22c9283296b 102504 bind9-host-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 024ecc160cf6ae3683f2372a746f3520010fd1d6c71aadbd6931ba3b97a1d099 47394 bind9-host_9.18.24-0ubuntu1_armhf.deb 7a8a5bae9e9582ab310c16ebb97e40d0e9800dde033e26e4e6db6ace4b3e284a 3564950 bind9-libs-dbgsym_9.18.24-0ubuntu1_armhf.ddeb a768530a75171f633aaa47466ec3d0515a41c1f27fdf68fc5160288840493a60 1147510 bind9-libs_9.18.24-0ubuntu1_armhf.deb a9b7a9aa1a3b9c1d9dce30e9b0caac3d7efe9d251f0abffc2fc97d15712fee71 304810 bind9-utils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb c894d8e264abe817593a1a56d0669fafb502ee530766168f0da3873712585f7c 154144 bind9-utils_9.18.24-0ubuntu1_armhf.deb a7f3169f8fdbc101cf9ed1e66fc6f2d3d285eba32b266ad485bf3a05cdb72fc5 10786 bind9_9.18.24-0ubuntu1_armhf.buildinfo 405bb7ac69c6b3138cd01c2d21b0731fef226ead3c361748cbfe16e431e56935 244516 bind9_9.18.24-0ubuntu1_armhf.deb e2f519978bedd98decea57093d6d3d9b3836d92f9b9aef52bb0ffe010b7f234b 13035 bind9_9.18.24-0ubuntu1_armhf_translations.tar.gz Files: dd42c23ccac32f60b289112ff0b8a82a 594118 debug optional bind9-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 12f653b4a356847d3c95414e8fa8f6ca 263084 devel optional bind9-dev_9.18.24-0ubuntu1_armhf.deb 060c231822b751d9ab3db4807d88cf52 348716 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb dce84814dff448cf5a508fee4e43e68b 148742 net standard bind9-dnsutils_9.18.24-0ubuntu1_armhf.deb f00763cfb59da3947d592bd30d8f23c9 102504 debug optional bind9-host-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 76985ef5ddb892de87901812fcf18331 47394 net standard bind9-host_9.18.24-0ubuntu1_armhf.deb 3ed27a2f85aa90323f1d2bdb3b9c4b92 3564950 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu1_armhf.ddeb 413cd0b3d150e67e68a35a4a947906c1 1147510 libs standard bind9-libs_9.18.24-0ubuntu1_armhf.deb b4487e4fb48c4fe462e020b82c1be17f 304810 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu1_armhf.ddeb bcb922451dee0a5922067139256e0c30 154144 net optional bind9-utils_9.18.24-0ubuntu1_armhf.deb 41b1d40a77d9de5d4fdafb9b3887508d 10786 net optional bind9_9.18.24-0ubuntu1_armhf.buildinfo fc082b0bd85fa130de0257a1c4ee96ec 244516 net optional bind9_9.18.24-0ubuntu1_armhf.deb fe4c48313fcbac9b48e43c701e690bcb 13035 raw-translations - bind9_9.18.24-0ubuntu1_armhf_translations.tar.gz Original-Maintainer: Debian DNS Team