Format: 1.8 Date: Thu, 11 Apr 2024 14:11:18 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: arm64 arm64_translations Version: 1:9.18.24-0ubuntu0.22.04.1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2040459 Changes: bind9 (1:9.18.24-0ubuntu0.22.04.1) jammy; urgency=medium . * New upstream version 9.18.24 (LP: #2040459) - Updates: + Mark use of AES as the DNS COOKIE algorithm as depricated. + Mark resolver-nonbackoff-tries and resolver-retry-interval statements as depricated. + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and 2801:1b8:10::b. + Mark dnssec-must-be-secure option as deprecated. + Honor nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. + Reduce memory consumption through dedicated jemalloc memory arenas. - Bug fixes: + Fix accidental truncation to 32 bit of statistics channel counters. + Do not schedule unsigned versions of inline-signed zones containing DNSSEC records for resigning. + Take local authoritive data into account when looking up stale data from the cache. + Fix assertion failure when lock-file used at the same time as named -X. + Fix lockfile removal issue when starting named 3+ times. + Fix validation of If-Modified-Since header in statistics channel for its length. + Add Content-Length header bounds check to avoid integer overflow. + Fix memory leaks from OpenSSL error stack. + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies. + Fix accidental disable of stale-refresh-time feature on rndc flush. + Fix possible DNS message corruption from partial writes in TLS DNS. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information. * Remove CVE patches fixed upstream: - CVE-2023-3341.patch - CVE-2023-4236.patch [ Fixed in 9.18.19 ] - 0001-CVE-2023-4408.patch - 0002-CVE-2023-5517.patch - 0003-CVE-2023-5679.patch - 0004-CVE-2023-50387-CVE-2023-50868.patch [ Fixed in 9.18.24 ] * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the standard library stdatomic.h. Checksums-Sha1: d0d0eb2ca8f25336254b8b03e3cceb239a3e6270 646096 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 628202a3b0d0a03415e0fa412c99624df6697264 263490 bind9-dev_9.18.24-0ubuntu0.22.04.1_arm64.deb 34aa55469a90a71d7102f100820d249cc627513e 389092 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 19a8a3f046a49fe90c5ee3c618e5350726f59c01 157948 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_arm64.deb d02480ae301b655558ead987c2a5223e14ef25d9 105976 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 77fd615ab7990232fc23ea0424ad8bc680799856 51932 bind9-host_9.18.24-0ubuntu0.22.04.1_arm64.deb 233496cd3ad910f8c4a9b16b5e24cececefed329 3644970 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 5956248f9e4cf38ff47d51f7f152f9a0b89b67ff 1204118 bind9-libs_9.18.24-0ubuntu0.22.04.1_arm64.deb 234a6ded9627c7813d1b4db6776c7217ca68cf71 398464 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 5d81c60e7f07541b2d1baaa3ba2ff7e5474a5bf4 161124 bind9-utils_9.18.24-0ubuntu0.22.04.1_arm64.deb 0d34b0a4345babf32b7be32ade70dcb2c593d104 11965 bind9_9.18.24-0ubuntu0.22.04.1_arm64.buildinfo 7a6d74fee8333ef2852debc8e429d55b67dadce3 251914 bind9_9.18.24-0ubuntu0.22.04.1_arm64.deb 3a09fd166b9e72c6abdabb27921303375bf393f2 12855 bind9_9.18.24-0ubuntu0.22.04.1_arm64_translations.tar.gz Checksums-Sha256: 35977ef601d269a01f0b2923608b1685265c566e3cd2a9425c0b54716af9fa34 646096 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 21807d3846e19ba0f9e52b61f3537e372556ed65dab1a38695872b1f3e4805ed 263490 bind9-dev_9.18.24-0ubuntu0.22.04.1_arm64.deb ea8cf37aad0b2012ad1a77adf12c67341c9853a74b279d8ef14a5a4ae06e037d 389092 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb e1008f91038a14d962f3742c1ede55cc46bba1c2220e1ba768a13ba5667d3660 157948 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_arm64.deb 477a5c37880b01cac383d2a4722453ba33d939d5488055e797660172d193d54d 105976 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 6290fb761fce2c845ff9856780d4ea8f9c75daf12bf939e6f50e70f682b63cf4 51932 bind9-host_9.18.24-0ubuntu0.22.04.1_arm64.deb 0178bac3b96b6326c041ff637c6d18e12caff8bb322b5f8663d3030c2f9f3d1c 3644970 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 27e32efbcacc4f911307d93c425ef891ad6414e40e96e1417420926be17cc186 1204118 bind9-libs_9.18.24-0ubuntu0.22.04.1_arm64.deb d76834fb51d381663d5c1f51cac9282d063a044a4fabe781ae11e5901af6d41d 398464 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 036e65935752b9c9c2b8444222b852720cc03ad3760aaef6bc5ad82fd152c274 161124 bind9-utils_9.18.24-0ubuntu0.22.04.1_arm64.deb 3368220430e2a2c7fb6f2840949519706ce34e5aa8846dc1dc7c13221a3587ae 11965 bind9_9.18.24-0ubuntu0.22.04.1_arm64.buildinfo adb9ec5c033d6f66205e3f262190de19b2fd0d9c496203616a9b73e1aa235082 251914 bind9_9.18.24-0ubuntu0.22.04.1_arm64.deb f85626767a302a5f02b6088ae55250988077e91f687e96820406b5e30363e645 12855 bind9_9.18.24-0ubuntu0.22.04.1_arm64_translations.tar.gz Files: 678894f7cb12440902af63c828ed6160 646096 debug optional bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 2549eb967707604bed3981f9c1678693 263490 devel optional bind9-dev_9.18.24-0ubuntu0.22.04.1_arm64.deb 6d6ed1c9978c0022f0cca679e0cd5fcb 389092 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb 3a8202424ec0178b7966c666cfd781cb 157948 net standard bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_arm64.deb 2c6a173b5863a6ba7086290a7f061511 105976 debug optional bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb e1280b674a0a10f76fa76e7c4a789044 51932 net standard bind9-host_9.18.24-0ubuntu0.22.04.1_arm64.deb 8463b5774375ab05a16d2ddd479345f3 3644970 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb fe46125d97540159066c7e9a36f6503a 1204118 libs standard bind9-libs_9.18.24-0ubuntu0.22.04.1_arm64.deb b0bde6c80511c0024f42ce92a51f7f7f 398464 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_arm64.ddeb b3f67f0029c54bbc4973258848395eec 161124 net optional bind9-utils_9.18.24-0ubuntu0.22.04.1_arm64.deb da82500911b1721c818ddb17b114e855 11965 net optional bind9_9.18.24-0ubuntu0.22.04.1_arm64.buildinfo 9494f5b6949a2d0fb4018cf11c93a715 251914 net optional bind9_9.18.24-0ubuntu0.22.04.1_arm64.deb 1d1668b827e358489a2820f7826e965c 12855 raw-translations - bind9_9.18.24-0ubuntu0.22.04.1_arm64_translations.tar.gz Original-Maintainer: Debian DNS Team