Format: 1.8 Date: Thu, 11 Apr 2024 14:11:18 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: s390x s390x_translations Version: 1:9.18.24-0ubuntu0.22.04.1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2040459 Changes: bind9 (1:9.18.24-0ubuntu0.22.04.1) jammy; urgency=medium . * New upstream version 9.18.24 (LP: #2040459) - Updates: + Mark use of AES as the DNS COOKIE algorithm as depricated. + Mark resolver-nonbackoff-tries and resolver-retry-interval statements as depricated. + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and 2801:1b8:10::b. + Mark dnssec-must-be-secure option as deprecated. + Honor nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. + Reduce memory consumption through dedicated jemalloc memory arenas. - Bug fixes: + Fix accidental truncation to 32 bit of statistics channel counters. + Do not schedule unsigned versions of inline-signed zones containing DNSSEC records for resigning. + Take local authoritive data into account when looking up stale data from the cache. + Fix assertion failure when lock-file used at the same time as named -X. + Fix lockfile removal issue when starting named 3+ times. + Fix validation of If-Modified-Since header in statistics channel for its length. + Add Content-Length header bounds check to avoid integer overflow. + Fix memory leaks from OpenSSL error stack. + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies. + Fix accidental disable of stale-refresh-time feature on rndc flush. + Fix possible DNS message corruption from partial writes in TLS DNS. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information. * Remove CVE patches fixed upstream: - CVE-2023-3341.patch - CVE-2023-4236.patch [ Fixed in 9.18.19 ] - 0001-CVE-2023-4408.patch - 0002-CVE-2023-5517.patch - 0003-CVE-2023-5679.patch - 0004-CVE-2023-50387-CVE-2023-50868.patch [ Fixed in 9.18.24 ] * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the standard library stdatomic.h. Checksums-Sha1: e46be23b701d2e490a38e050272cc6fa5e99150b 602434 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 9c7fd8b3fd6f840f88e983b87780a0ee13aeaca1 263494 bind9-dev_9.18.24-0ubuntu0.22.04.1_s390x.deb 73c8d6b286c596988cde14b2e67f59ab738eed4c 354332 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 8db21966ad87bb0ce6d8cd654ba2943feeac4f71 156644 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_s390x.deb 5f1efb7143bbd341107873d22d509dea63850cc0 106314 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 4986c4006e801a7bf682fb27a098d7a95e43e8a7 50442 bind9-host_9.18.24-0ubuntu0.22.04.1_s390x.deb e6027af259bf62a34b9b2f03c551aceb1e9c0b94 3695368 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb ec4136950b3ee777bd25d06bcaa2f1bba1e17cdf 1179884 bind9-libs_9.18.24-0ubuntu0.22.04.1_s390x.deb a083ea617646492e2c556ec3d3ebfcd2eb9806eb 315912 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb d6ed18081694ebdfcc5065f585d7eeb3ed3275b5 161242 bind9-utils_9.18.24-0ubuntu0.22.04.1_s390x.deb d64254a6b507b469b5bc61a800d5cfe2ae57cc1b 11850 bind9_9.18.24-0ubuntu0.22.04.1_s390x.buildinfo 9a32d166a60c3eda750beec9f0e24b67a8c10717 253212 bind9_9.18.24-0ubuntu0.22.04.1_s390x.deb 0d2da6ae4d165352ed05ced6d08299226af63465 13131 bind9_9.18.24-0ubuntu0.22.04.1_s390x_translations.tar.gz Checksums-Sha256: ffd754405eed80eb46f7bd3fbdc5ac07fcf98c60e7843cbf17d6916dc8552b3f 602434 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb c5cf4f7d1870372b1235b4b3e80aa9f4bb7b489b18c05faf3b0ba975ad3dd5a4 263494 bind9-dev_9.18.24-0ubuntu0.22.04.1_s390x.deb 2aadc4c39f43948e736fd8f2291ab1d62238a10806ae35fe50c0475dfaff894f 354332 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 7a142d4cf3ad991620e4cd5361a1b87ae0aae7ac9847b7fd29751c9e0cdea2e9 156644 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_s390x.deb 0624f2aa8f62f2232b0c7ea4fa4adb80b3636b41e49167ffc6a5f04e368c3b37 106314 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb b9d6e3d3300ef57fd7f7079b83ae7ab2ae9982d0eb899baccdcedc5ac206c236 50442 bind9-host_9.18.24-0ubuntu0.22.04.1_s390x.deb 91c613bc3dd3d6096409442fb2b7f7d23ecafa45851e3385a8f0066360eb7d7d 3695368 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb e815f10d26069377b3ecd73a4bd0f6436151d30a126d8684aa93c939f4c76d5e 1179884 bind9-libs_9.18.24-0ubuntu0.22.04.1_s390x.deb ae98cd22ec0a6911e721707b60b94b6295f953567c6875da85c283f15eae2328 315912 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 914fd53ebca66d615fb815da42b75a32da0a5e2cd3c082f4dedc9f9a1879d485 161242 bind9-utils_9.18.24-0ubuntu0.22.04.1_s390x.deb aea3af34e772501e7363ef421f9e77a45c9abab8d3dbae8f6b01f0e41ea427c0 11850 bind9_9.18.24-0ubuntu0.22.04.1_s390x.buildinfo 8fd8afff631cf64823d29dd0ea3e631b92dba7f8b562ca5b6be0500656e186e3 253212 bind9_9.18.24-0ubuntu0.22.04.1_s390x.deb b0e6a97c35c13b3c586b363c37eb22a2d1c3e98b4adeb07355b063eef0731d30 13131 bind9_9.18.24-0ubuntu0.22.04.1_s390x_translations.tar.gz Files: 99fd69a1e8fb9b02fd2d345b34c4fbc9 602434 debug optional bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 8dc636860269bdc519ea7bbcbb70c599 263494 devel optional bind9-dev_9.18.24-0ubuntu0.22.04.1_s390x.deb 149e629906f8a29e70034a81affa787e 354332 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 33d9c45cf212f2cfcaaa8a614002c7de 156644 net standard bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_s390x.deb 4bdbeb19655700fc9cecaf51ea938ad2 106314 debug optional bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 72611bd6adbacb4c7cd360e7f4ccfc20 50442 net standard bind9-host_9.18.24-0ubuntu0.22.04.1_s390x.deb 957d39c8b04d63cbb806fded4c4e743d 3695368 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb 04839a02d22ae62caf91e01147ac5014 1179884 libs standard bind9-libs_9.18.24-0ubuntu0.22.04.1_s390x.deb 6da02c359269c53252b946d2c7451d37 315912 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_s390x.ddeb a27ad0c25c7bab0a2128954ea5b7d0f5 161242 net optional bind9-utils_9.18.24-0ubuntu0.22.04.1_s390x.deb 4a5fdf85442a50865f1bbb2c5e899609 11850 net optional bind9_9.18.24-0ubuntu0.22.04.1_s390x.buildinfo e253e399dbf9114f2231dc413fefe39e 253212 net optional bind9_9.18.24-0ubuntu0.22.04.1_s390x.deb 3213742ac31a868318c967fbdd47c578 13131 raw-translations - bind9_9.18.24-0ubuntu0.22.04.1_s390x_translations.tar.gz Original-Maintainer: Debian DNS Team