Format: 1.8 Date: Thu, 11 Apr 2024 14:11:18 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 1:9.18.24-0ubuntu0.22.04.1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2040459 Changes: bind9 (1:9.18.24-0ubuntu0.22.04.1) jammy; urgency=medium . * New upstream version 9.18.24 (LP: #2040459) - Updates: + Mark use of AES as the DNS COOKIE algorithm as depricated. + Mark resolver-nonbackoff-tries and resolver-retry-interval statements as depricated. + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and 2801:1b8:10::b. + Mark dnssec-must-be-secure option as deprecated. + Honor nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. + Reduce memory consumption through dedicated jemalloc memory arenas. - Bug fixes: + Fix accidental truncation to 32 bit of statistics channel counters. + Do not schedule unsigned versions of inline-signed zones containing DNSSEC records for resigning. + Take local authoritive data into account when looking up stale data from the cache. + Fix assertion failure when lock-file used at the same time as named -X. + Fix lockfile removal issue when starting named 3+ times. + Fix validation of If-Modified-Since header in statistics channel for its length. + Add Content-Length header bounds check to avoid integer overflow. + Fix memory leaks from OpenSSL error stack. + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies. + Fix accidental disable of stale-refresh-time feature on rndc flush. + Fix possible DNS message corruption from partial writes in TLS DNS. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information. * Remove CVE patches fixed upstream: - CVE-2023-3341.patch - CVE-2023-4236.patch [ Fixed in 9.18.19 ] - 0001-CVE-2023-4408.patch - 0002-CVE-2023-5517.patch - 0003-CVE-2023-5679.patch - 0004-CVE-2023-50387-CVE-2023-50868.patch [ Fixed in 9.18.24 ] * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the standard library stdatomic.h. Checksums-Sha1: 176874ada2b1ac3fd684798b5fb040f37fca4560 571856 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb f61e1868ac8a35b4bea2f2a51e253b858039511c 263486 bind9-dev_9.18.24-0ubuntu0.22.04.1_i386.deb 24e96e526872d00fb819456feb0dc836e17e4bae 343698 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb c018b8c9f5d2e8604514543df1e3bd72b70002c9 160372 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_i386.deb cedf05baafdeac9c7bbdc13eff34606ce7d0eb7b 93040 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 638e29dee5b0196503ec7f2471ed4be475909583 54604 bind9-host_9.18.24-0ubuntu0.22.04.1_i386.deb d80af052353f170e0640f124340c54977c3d5d16 3070178 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 01cc1776ef990634330288bf0d8d8f7ba3c3fa1f 1331150 bind9-libs_9.18.24-0ubuntu0.22.04.1_i386.deb 69a667956c764aa6a449598777ba7b6a46e91469 357166 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb f3723a067b19548f2f1a37e69b1c0f577963eb95 164024 bind9-utils_9.18.24-0ubuntu0.22.04.1_i386.deb 870c2541c982b3f102fd8af38b467906b43de654 11849 bind9_9.18.24-0ubuntu0.22.04.1_i386.buildinfo 5398ee9280cee5f70f93ddbfb92fcdf6a302f165 274506 bind9_9.18.24-0ubuntu0.22.04.1_i386.deb 575eebea508f1681c3c14ade44b05ec21d97f889 13175 bind9_9.18.24-0ubuntu0.22.04.1_i386_translations.tar.gz Checksums-Sha256: 059b3cfe7e3c65d5c6846cdc1a017a889668799b1fa5f07ce0ae5a062b87f43e 571856 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 782fb4a3b62260f42bf39f4e0e2abaa3631a7b7c83ef232f82cf1fd35524db83 263486 bind9-dev_9.18.24-0ubuntu0.22.04.1_i386.deb 73e0e34234b5d81658ba292aea900a275bcd6694504b2c090f91180a945bb291 343698 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb fd67cfd4d8ca2a675d264c90eb6a78c15c70aa56c28903e8f7d1ba3f08fbf411 160372 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_i386.deb 509a82afbea3c4e685ffa0baed1b77acbddea030bd45ede31560ba89d1a8b29d 93040 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 71ea9a84547275a3e61364bfcdcde5a75122f4508f5020abbb31b0ff59629738 54604 bind9-host_9.18.24-0ubuntu0.22.04.1_i386.deb ce35302c6b91d946828b8fc316234a9226616b05ed15c9f7b7301cb38baa2d98 3070178 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 2354d79521bc04ee55a794ec80c77494e289164bec9398356d9292d93d93ed97 1331150 bind9-libs_9.18.24-0ubuntu0.22.04.1_i386.deb de0c50d3f76177d7e9b8106ba2d7acd28eb0f08caa6519ee27d25c157c7c945a 357166 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb ab00f54cae9e62209da8f5b750bf581e99bd89b5ae7a1830ce94abe5146a4865 164024 bind9-utils_9.18.24-0ubuntu0.22.04.1_i386.deb 955fb327dc96a1e9481f5c1a5e2ce25f389394ca99f7150e4d16672ee175b7c2 11849 bind9_9.18.24-0ubuntu0.22.04.1_i386.buildinfo b9a7c05a937307adee9911e637b879c21386d7c11bbdeb41ff071b7d6daec05f 274506 bind9_9.18.24-0ubuntu0.22.04.1_i386.deb de50925703693c8f7cb63ae7bbb5878d920afd575e728162f73b084c8565234e 13175 bind9_9.18.24-0ubuntu0.22.04.1_i386_translations.tar.gz Files: 8cd49dae640d02d680cefae99199e53f 571856 debug optional bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb d53efdb8a569491f979eca9072dfb873 263486 devel optional bind9-dev_9.18.24-0ubuntu0.22.04.1_i386.deb fbb9ee62e3bfb93a3bb0db2876cf8b4b 343698 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 3241df3b12650766b54edfe44ffd8d34 160372 net standard bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_i386.deb 4bfa40fa18107e96418a06e3bd535034 93040 debug optional bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb a3046a40071f51246b734f08e6ffc1f0 54604 net standard bind9-host_9.18.24-0ubuntu0.22.04.1_i386.deb d0208b700796622ce2a722f66192649a 3070178 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 74d4cc1ed83c7d1bd97b98d612908278 1331150 libs standard bind9-libs_9.18.24-0ubuntu0.22.04.1_i386.deb 61971433b038201239b720ef24eadb98 357166 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_i386.ddeb 7fe4685104b85f13ed1e71ac60c511d8 164024 net optional bind9-utils_9.18.24-0ubuntu0.22.04.1_i386.deb eaa54d9caed3badffeefd83f19f83aa3 11849 net optional bind9_9.18.24-0ubuntu0.22.04.1_i386.buildinfo 20fc9c253b96f17d6d429c8dd5e5f19e 274506 net optional bind9_9.18.24-0ubuntu0.22.04.1_i386.deb 631d667019d01566d6e31aa0e1c7ae6b 13175 raw-translations - bind9_9.18.24-0ubuntu0.22.04.1_i386_translations.tar.gz Original-Maintainer: Debian DNS Team