Format: 1.8
Date: Tue, 09 Apr 2024 14:28:37 -0700
Source: bind9
Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils
Built-For-Profiles: noudeb
Architecture: arm64
Version: 1:9.18.24-0ubuntu0.23.10.1~ppa2
Distribution: mantic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-025.buildd>
Changed-By: Lena Voytek <lena.voytek@canonical.com>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Launchpad-Bugs-Fixed: 2040459
Changes:
 bind9 (1:9.18.24-0ubuntu0.23.10.1~ppa2) mantic; urgency=medium
 .
   * New upstream version 9.18.24 (LP: #2040459)
     - Updates:
       + Mark use of AES as the DNS COOKIE algorithm as depricated.
       + Mark resolver-nonbackoff-tries and resolver-retry-interval statements
         as depricated.
       + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and
         2801:1b8:10::b.
       + Mark dnssec-must-be-secure option as deprecated.
       + Honor nsupdate -v option for SOA queries by sending both the UPDATE
         request and the initial query over TCP.
       + Reduce memory consumption through dedicated jemalloc memory arenas.
     - Bug fixes:
       + Fix accidental truncation to 32 bit of statistics channel counters.
       + Do not schedule unsigned versions of inline-signed zones containing
         DNSSEC records for resigning.
       + Take local authoritive data into account when looking up stale data
         from the cache.
       + Fix assertion failure when lock-file used at the same time as named -X.
       + Fix lockfile removal issue when starting named 3+ times.
       + Fix validation of If-Modified-Since header in statistics channel for
         its length.
       + Add Content-Length header bounds check to avoid integer overflow.
       + Fix memory leaks from OpenSSL error stack.
       + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs
         and ms-subdomain-self-rhs UPDATE policies.
       + Fix accidental disable of stale-refresh-time feature on rndc flush.
       + Fix possible DNS message corruption from partial writes in TLS DNS.
     - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional
       information.
   * Remove CVE patches fixed upstream:
     - CVE-2023-3341.patch
     - CVE-2023-4236.patch
     [ Fixed in 9.18.19 ]
     - 0001-CVE-2023-4408.patch
     - 0002-CVE-2023-5517.patch
     - 0003-CVE-2023-5679.patch
     - 0004-CVE-2023-50387-CVE-2023-50868.patch
     [ Fixed in 9.18.24 ]
   * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the
     standard library stdatomic.h.
Checksums-Sha1:
 4f4aa6e0c49b4cb292d65743e4db587d4f49a266 277086 bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 3f4b25df17ca354f8b4f72fa1f753ef213d790fe 168786 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 1d50d1e19e82e199191ea3b4016e89daa7d79978 64092 bind9-host_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 08db30fa9fa1e8049a0cb2183a2beb620de56a5c 1194082 bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 b4bc20212ec0808d96136ef01e7b2968e083aa28 171796 bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 dd02a645440bdeed79d0c29fb4ff584c4bc7ed65 9030 bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.buildinfo
 1d27514d37f237d1e066095685e03b496093b965 261380 bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
Checksums-Sha256:
 fcc897d568cb7ad750268e53434712785fc481c0e28064b77b2959b925919009 277086 bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 1ead5c03162310b59175c91aabd742f577e76ab47038ca112334a2aef1fc195c 168786 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 4e811cd79f3b034385189a4d3f6f1c53f6ac779aea4e5f7d399e51ff9cbd35ea 64092 bind9-host_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 637cb41d2abd29dd71f4ded94716dcd57d162762c9d7b6b0e08e5af30a2e7353 1194082 bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 49574f316b49ecf847b569b90109656c34ba1d4f18ce4c0af22ebdd06e3ff161 171796 bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 75fa8376a43130f1a198cccf465e8fffa46009b74f553eb5c8bd007d2b5c98dc 9030 bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.buildinfo
 e1625d879e7e2456fc98b8172ab7f590b3d215feef8b8651c68733d19cace16b 261380 bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
Files:
 975af86c926608cc6f3f538225fadc1d 277086 devel optional bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 41b4846c0a49c514de68b536d4a1fef0 168786 net standard bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 5915d569b6928b33fbc3c296f6973794 64092 net standard bind9-host_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 997d652b5e7769290cbb4f0d1c074be0 1194082 libs standard bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 c30bb0239765bd7304147585f11bbef8 171796 net optional bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
 4f4e281556d02c92f694a0f8355f8b09 9030 net optional bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.buildinfo
 291011aee6c223bb9c7568ee869b446b 261380 net optional bind9_9.18.24-0ubuntu0.23.10.1~ppa2_arm64.deb
Original-Maintainer: Debian DNS Team <team+dns@tracker.debian.org>