Format: 1.8 Date: Wed, 12 Apr 2017 09:45:52 -0700 Source: bind9 Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-90 libdns100 libisc95 liblwres90 libisccc90 libisccfg90 dnsutils lwresd Architecture: amd64 amd64_translations Version: 1:9.9.5.dfsg-3ubuntu0.14 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Steve Beattie Description: bind9 - Internet Domain Name Server bind9-doc - Documentation for BIND bind9-host - Version of 'host' bundled with BIND 9.X bind9utils - Utilities for BIND dnsutils - Clients provided with BIND host - Transitional package libbind-dev - Static Libraries and Headers used by BIND libbind9-90 - BIND9 Shared Library used by BIND libdns100 - DNS Shared Library used by BIND libisc95 - ISC Shared Library used by BIND libisccc90 - Command Channel Library used by BIND libisccfg90 - Config File Handling Library used by BIND liblwres90 - Lightweight Resolver Library used by BIND lwresd - Lightweight Resolver Daemon Changes: bind9 (1:9.9.5.dfsg-3ubuntu0.14) trusty-security; urgency=medium . * SECURITY UPDATE: Denial of Service due to an error handling synthesized records when using DNS64 with "break-dnssec yes;" - bin/named/query.c: reset noqname if query_dns64() called. - CVE-2017-3136 * SECURITY UPDATE: Denial of Service due to resolver terminating when processing a response packet containing a CNAME or DNAME - lib/dns/resolver.c: don't expect a specific ordering of answer components - lib/dns/name.c: remove part of assertion that triggers in dns_name_split() (partial cherrypick of upstream dc3912f3caac1104fef441fd18571b7a975708ea - bin/tests/system/dname/ns2/example.db, bin/tests/system/dname/tests.sh: add testcases. - CVE-2017-3137 * SECURITY UPDATE: Denial of Service when receiving a null command on the control channel - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no command token is given - bin/tests/system/rndc/tests.sh: add testcase. - CVE-2017-3138 Checksums-Sha1: 77d26805a70258e415ea6dbed22c65988e622130 286796 bind9_9.9.5.dfsg-3ubuntu0.14_amd64.deb 2bfcc60c8712b12c2694b379b5a654630ab3c164 145536 bind9utils_9.9.5.dfsg-3ubuntu0.14_amd64.deb 2f51459569099370132caf052d07643cb789cf0c 46398 bind9-host_9.9.5.dfsg-3ubuntu0.14_amd64.deb fb9c5b1b4ed7723a9fc5f09cb74d029fec1466b6 1179536 libbind-dev_9.9.5.dfsg-3ubuntu0.14_amd64.deb 7533a048718a477b53445ca581668646f40702c5 22066 libbind9-90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 9e0d54dcc2f1539bf504f3ff55436dab2e8c5c2b 643026 libdns100_9.9.5.dfsg-3ubuntu0.14_amd64.deb 2611db01804bde566ac8463e9535966545e0f59e 148050 libisc95_9.9.5.dfsg-3ubuntu0.14_amd64.deb efcb18b39bcbbf3f6c9d1f3540e7a4f5bcfecd86 33042 liblwres90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 2c2743b6050e1e9ec062fee6bd028a0510ab60ef 15708 libisccc90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 3ebc46b42ef8c7fcc317a32e5ed01a1250e2466c 35964 libisccfg90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 6812ef3e143883ce6bbc2d384c2b06f459b7292d 96808 dnsutils_9.9.5.dfsg-3ubuntu0.14_amd64.deb 98fbfdb52f0231b93a147cfeb76acda040673833 204676 lwresd_9.9.5.dfsg-3ubuntu0.14_amd64.deb 8214544aff73bb0611af2f6642b76e8b292e6649 13055 bind9_9.9.5.dfsg-3ubuntu0.14_amd64_translations.tar.gz Checksums-Sha256: 4860967a89c319a57764d509ce0428f870b7dc1f5ab271933bf61a71e9ddb752 286796 bind9_9.9.5.dfsg-3ubuntu0.14_amd64.deb 75704d52ad42f6137f8a55ae2e35f10a01569d64f6fd22beb3f69d1d2877e864 145536 bind9utils_9.9.5.dfsg-3ubuntu0.14_amd64.deb fb8207c5e0ba198f8684096261853aa0e87cae932409a629cbccefa2dc55413d 46398 bind9-host_9.9.5.dfsg-3ubuntu0.14_amd64.deb 29578124316e7e5d0ae9c641033570ca1331ccf227d1b462f17befe4350f62ae 1179536 libbind-dev_9.9.5.dfsg-3ubuntu0.14_amd64.deb 59c340786d5e094b9c4d6cb918409ab7073b7cffcbcb05e20e5504078f8bbcd5 22066 libbind9-90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 38e99cc7e6b757672118ee9a4700e9bc4e58b65542dd177b3be559df48a57210 643026 libdns100_9.9.5.dfsg-3ubuntu0.14_amd64.deb d58130710c1a945c9237de23e0fcf4219462ca6386bdee1248c846447e7752ec 148050 libisc95_9.9.5.dfsg-3ubuntu0.14_amd64.deb 99f61d06817dbf0b192b4710db2e2af543fdf0d5e8155876e2ef7433df745e92 33042 liblwres90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 9865cc32e4ca3a10d2959cd4344440a542b2b6538837978ddce750bf4eb1c007 15708 libisccc90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 22c3a5fe9826df30af5686e8d61d83be1fda561b47d75364e534a55b173c5b0e 35964 libisccfg90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 810f6875f390468e1e41c0a96194dbc3dbc915ae027bdd702ed09965b9d7ba8f 96808 dnsutils_9.9.5.dfsg-3ubuntu0.14_amd64.deb 64369796a25c594fe975a47941893ee1774f5a66f586bc846ff4a19bfd257e0a 204676 lwresd_9.9.5.dfsg-3ubuntu0.14_amd64.deb 0281d8933fe498d3982dd8bd4784085b0bf0f0a72186daffba0658e355afb3b3 13055 bind9_9.9.5.dfsg-3ubuntu0.14_amd64_translations.tar.gz Files: ab37995c83df8ab718b2e445fd993847 286796 net optional bind9_9.9.5.dfsg-3ubuntu0.14_amd64.deb bd947f5286f8e57e27abf64c9abcfae8 145536 net optional bind9utils_9.9.5.dfsg-3ubuntu0.14_amd64.deb 3d532d85add44afc0fd74cee1225e031 46398 net standard bind9-host_9.9.5.dfsg-3ubuntu0.14_amd64.deb 4c99a012ee5608beeb07f60962cf3088 1179536 libdevel optional libbind-dev_9.9.5.dfsg-3ubuntu0.14_amd64.deb 74b8ebf006edd54b756cec56a589893b 22066 libs standard libbind9-90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 24a0091a31499873788cc156f238c596 643026 libs standard libdns100_9.9.5.dfsg-3ubuntu0.14_amd64.deb a4deb617b6018fb889cfaf473d1f1c48 148050 libs standard libisc95_9.9.5.dfsg-3ubuntu0.14_amd64.deb 91c486c00257f48fec374cbb93d25eb6 33042 libs standard liblwres90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 1d3acd9455d8c80a66a2e8645236f9a2 15708 libs optional libisccc90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 2b5a5ef8151d012126a1230b8fec568d 35964 libs optional libisccfg90_9.9.5.dfsg-3ubuntu0.14_amd64.deb 1bb679f23678b88b973ce9754b6389e1 96808 net standard dnsutils_9.9.5.dfsg-3ubuntu0.14_amd64.deb 80d8721bb3a61da7c2917e9abea510be 204676 net optional lwresd_9.9.5.dfsg-3ubuntu0.14_amd64.deb 9fca72c147a83baafc151033cf1a3a22 13055 raw-translations - bind9_9.9.5.dfsg-3ubuntu0.14_amd64_translations.tar.gz Original-Maintainer: LaMont Jones