Format: 1.8 Date: Tue, 18 Aug 2020 07:38:53 -0400 Source: bind9 Binary: bind9 bind9-dnsutils bind9-host bind9-libs bind9-utils Architecture: ppc64el ppc64el_translations Version: 1:9.16.1-0ubuntu2.3 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: bind9 - Internet Domain Name Server bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.16.1-0ubuntu2.3) focal-security; urgency=medium . * SECURITY UPDATE: A specially crafted large TCP payload can trigger an assertion failure - debian/patches/CVE-2020-8620.patch: add extra checks to lib/isc/netmgr/netmgr-int.h, lib/isc/netmgr/netmgr.c, lib/isc/netmgr/tcp.c, lib/isc/netmgr/udp.c. - CVE-2020-8620 * SECURITY UPDATE: Attempting QNAME minimization after forwarding can lead to an assertion failure - debian/patches/CVE-2020-8621.patch: disable QNAME minimization in lib/dns/resolver.c. - CVE-2020-8621 * SECURITY UPDATE: A truncated TSIG response can lead to an assertion failure - debian/patches/CVE-2020-8622.patch: move code in lib/dns/message.c. - CVE-2020-8622 * SECURITY UPDATE: A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure - debian/patches/CVE-2020-8623.patch: add extra checks in lib/dns/pkcs11rsa_link.c, lib/isc/include/pk11/internal.h, lib/isc/pk11.c. - CVE-2020-8623 * SECURITY UPDATE: update-policy rules of type subdomain were enforced incorrectly - debian/patches/CVE-2020-8624.patch: add extra check in bin/named/zoneconf.c. - CVE-2020-8624 Checksums-Sha1: efcdf049985643e4c8a5d2271ff2b71754927cee 587556 bind9-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 699cee3757f9cc8a8a321aaf885f33154f53a429 325000 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb dba9d3cefd156a1c752b2f6557a37c8efb6b1040 138080 bind9-dnsutils_9.16.1-0ubuntu2.3_ppc64el.deb 42fb41f633941afad85846dfdc29f25a2355ac51 91660 bind9-host-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 8eccfe693a445eb8416a22363270eb80f38a6e68 46100 bind9-host_9.16.1-0ubuntu2.3_ppc64el.deb a3c4f958a2a9f0fb6722b01ec5c833a8bc4fb210 3772160 bind9-libs-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb d31c379e2fcfbc373bf2bb31e8b8efd4573e5e17 1196152 bind9-libs_9.16.1-0ubuntu2.3_ppc64el.deb 02007e6d23ee777f7ba7a1528ee4605f9a5a43c9 303800 bind9-utils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb ca1c52ed89e182e2734f1931432a782eed23b6c8 172960 bind9-utils_9.16.1-0ubuntu2.3_ppc64el.deb b8dfad0db9f20d861677ec18ec190a4a9a7d3b53 11055 bind9_9.16.1-0ubuntu2.3_ppc64el.buildinfo 321a6b43c985951860f1311acfe73f2d1504e214 240496 bind9_9.16.1-0ubuntu2.3_ppc64el.deb 48e0d4c3c9d22ddff29942122ce6b91937d6b095 12977 bind9_9.16.1-0ubuntu2.3_ppc64el_translations.tar.gz Checksums-Sha256: 4017a02d380ff63a7dc784bddbe49bb85cd232be7ac81bc9b638a5497027b82b 587556 bind9-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 228b18b08da3405238bd1f0eb8a296f67d6843b686980d33a1a65cf85d877500 325000 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 0199ea3b65c658998e59e5066944bef23539be5d663239981b72d7c245540c5f 138080 bind9-dnsutils_9.16.1-0ubuntu2.3_ppc64el.deb 2d5cb88501b18d1d72120021968114f2bbc14b9c972849359a35cdccb6a4a2f7 91660 bind9-host-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 8cc0ec8330458535c076bb6c9f8800ea02de567cd67f4e22720be30ede02bbc0 46100 bind9-host_9.16.1-0ubuntu2.3_ppc64el.deb 22a353ff3725fbe00e45b6a509364b3c7d6ad7b9d768a252899b8be21c59c322 3772160 bind9-libs-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 239e5a0484d777550d489337d99167463677a2f10328c14f9703add348f721b1 1196152 bind9-libs_9.16.1-0ubuntu2.3_ppc64el.deb 9ccd30114722aa3e6642e10890e1d7a7ff2fbb2df35aee460c3fec508f622af0 303800 bind9-utils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 295eaf051321f1fbd7c8e1b48ff8710e49b25e34fca6d4f54fcfe6e8eac9d3bc 172960 bind9-utils_9.16.1-0ubuntu2.3_ppc64el.deb bb255b8713baa52c9e821be4443c4fa69a41ae34e0444b6ebcf15b13dc5e6517 11055 bind9_9.16.1-0ubuntu2.3_ppc64el.buildinfo c2d1e1c4674ea8ee80658a34d21abb2df4e5e2540f0df34d0404c78e274573da 240496 bind9_9.16.1-0ubuntu2.3_ppc64el.deb 49b117cf0ea34a96e0e561c9fdd9dfe72eeb5c8d1a04679b8b1a6e2d7d84dc67 12977 bind9_9.16.1-0ubuntu2.3_ppc64el_translations.tar.gz Files: bb7cc2703c40f120a681073c42aae05c 587556 debug optional bind9-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb edc636e5af76e1dada56b93eaf730831 325000 debug optional bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 240c2658c714df0a30c2d391d58e3f2a 138080 net standard bind9-dnsutils_9.16.1-0ubuntu2.3_ppc64el.deb 3987323ec5079692e6b51d590972bf68 91660 debug optional bind9-host-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb f5eb308862be0c1af31dcc19b4b54045 46100 net standard bind9-host_9.16.1-0ubuntu2.3_ppc64el.deb f469468d2fdbbbc17a38db550b7be499 3772160 debug optional bind9-libs-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb 53eb98324980f7f65423794d2d122fe4 1196152 libs standard bind9-libs_9.16.1-0ubuntu2.3_ppc64el.deb d12eb6511e91269e2a750fa2f7fdcbeb 303800 debug optional bind9-utils-dbgsym_9.16.1-0ubuntu2.3_ppc64el.ddeb a1ad6b88a5b7c03822592543fc644825 172960 net optional bind9-utils_9.16.1-0ubuntu2.3_ppc64el.deb 04f673f4fe9c5dc9910de6d7f43a9365 11055 net optional bind9_9.16.1-0ubuntu2.3_ppc64el.buildinfo 60da433ed9fa701d19f570b309e43734 240496 net optional bind9_9.16.1-0ubuntu2.3_ppc64el.deb d91891fbca18fc52ed905ab85dcbab40 12977 raw-translations - bind9_9.16.1-0ubuntu2.3_ppc64el_translations.tar.gz Original-Maintainer: Debian DNS Team