Format: 1.8 Date: Tue, 09 Apr 2024 14:28:37 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: ppc64el ppc64el_translations Version: 1:9.18.24-0ubuntu0.23.10.1 Distribution: mantic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2040459 Changes: bind9 (1:9.18.24-0ubuntu0.23.10.1) mantic; urgency=medium . * New upstream version 9.18.24 (LP: #2040459) - Updates: + Mark use of AES as the DNS COOKIE algorithm as depricated. + Mark resolver-nonbackoff-tries and resolver-retry-interval statements as depricated. + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and 2801:1b8:10::b. + Mark dnssec-must-be-secure option as deprecated. + Honor nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. + Reduce memory consumption through dedicated jemalloc memory arenas. - Bug fixes: + Fix accidental truncation to 32 bit of statistics channel counters. + Do not schedule unsigned versions of inline-signed zones containing DNSSEC records for resigning. + Take local authoritive data into account when looking up stale data from the cache. + Fix assertion failure when lock-file used at the same time as named -X. + Fix lockfile removal issue when starting named 3+ times. + Fix validation of If-Modified-Since header in statistics channel for its length. + Add Content-Length header bounds check to avoid integer overflow. + Fix memory leaks from OpenSSL error stack. + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies. + Fix accidental disable of stale-refresh-time feature on rndc flush. + Fix possible DNS message corruption from partial writes in TLS DNS. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information. * Remove CVE patches fixed upstream: - CVE-2023-3341.patch - CVE-2023-4236.patch [ Fixed in 9.18.19 ] - 0001-CVE-2023-4408.patch - 0002-CVE-2023-5517.patch - 0003-CVE-2023-5679.patch - 0004-CVE-2023-50387-CVE-2023-50868.patch [ Fixed in 9.18.24 ] * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the standard library stdatomic.h. Checksums-Sha1: 5873cdadc38dc532004a75f7b05cc3d2cd86e1aa 731578 bind9-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb d61019789a0a862c55335f5bf6043628e4a2db53 263086 bind9-dev_9.18.24-0ubuntu0.23.10.1_ppc64el.deb c4e562c58010d8b0f88bb78b46d2b6873a30a9ce 399914 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb e7cf1b3de72227e5072b6413438c11a0599a0f4d 166076 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 41dfc79a42c3f875a5f14a93ca8ffec624ce71f8 114848 bind9-host-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 480742c7cf7b5b8b6dd36c06bf1cbca10d55fb63 54122 bind9-host_9.18.24-0ubuntu0.23.10.1_ppc64el.deb a7a9a08e7af0e9f2f60b2f9213ee5f193c2cb306 4020970 bind9-libs-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb e25b42c4e66f0ba60fcef890bc0ac2ce5f211957 1418732 bind9-libs_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 02cc502a56a1631ad9b959d7f9e1c1317811c1da 346386 bind9-utils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 16963b60e6a641a12338426394f947929105c1b9 167504 bind9-utils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 152fbb8ef443d1480415c7cdedcbd00901b8c55d 11021 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.buildinfo 7fa74803224cf88f8237f0223a9606218e4f8a0e 286372 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 1e6ad93f3750430b3f8731f20d9373889565a7cd 13099 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el_translations.tar.gz Checksums-Sha256: 1113731dc23af36ee2621f7b23d9cf0462ec37d2b3698dd85d1a87173a9f5636 731578 bind9-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 71675a776d98c0b86191a3c252d34687d80cb469a4ec0b8a38f92d84546083f6 263086 bind9-dev_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 4f4e08894ed7bb4d9f4d1188b26ffb042d06fe96fc6cc90d795a53f387e497bd 399914 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb fb48d8b3378356bd0b10b6fce2a7abf8959a3899ad0700659741640d7bb67ca8 166076 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 0ba5a2d639ba596f7393d6e05410e6de7848495df34b6b85e89305cc318281c2 114848 bind9-host-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb d2d1f8ed4a65cc8b256f9e5c53ed41d8ad2b5a907fdeefc3a6c604dbbf49b2ff 54122 bind9-host_9.18.24-0ubuntu0.23.10.1_ppc64el.deb f448a2e143d5f2d83787836bd4a49c998840fe4b7765512524c3a5324330f188 4020970 bind9-libs-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 1b5993787055db1bba4652851bf0c26d2fa4850ad6565ad811f35824f415cf8c 1418732 bind9-libs_9.18.24-0ubuntu0.23.10.1_ppc64el.deb ebddaab75f6674423e9d005d57df5f655d455257d7697698e6db64bc72591f5b 346386 bind9-utils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 01f56b2e4a00f0ae4346ad749dd52f71cb5f844b8dc65f305d1f1c3b0e297315 167504 bind9-utils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 2fc32dd524c2d6b6776acf3345938d4a86afb4713ac90f7101332215ec65d98d 11021 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.buildinfo 7a1d2721c8eccc5d2e3ad1a047b443038a4de4f2fe3b7761eec5814d452502fd 286372 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 83a9e86505d04992a457916f67eb3c74cfc433e8cdf64196918e0ee07f7dfd7a 13099 bind9_9.18.24-0ubuntu0.23.10.1_ppc64el_translations.tar.gz Files: 0e6787987223382ba0bfc813fbb91835 731578 debug optional bind9-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 015cf33e4ff7d83d45805320492ec00d 263086 devel optional bind9-dev_9.18.24-0ubuntu0.23.10.1_ppc64el.deb ead5c781554f4120349d8dc5305cf493 399914 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 2b210502e4a27f12a92c9b28319c8195 166076 net standard bind9-dnsutils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb 8ba460ac8dbdc6273e307634d22c6446 114848 debug optional bind9-host-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb 7f949de230dc2a3ce6a27d9e17a6dbec 54122 net standard bind9-host_9.18.24-0ubuntu0.23.10.1_ppc64el.deb d7d5f519f465bacfbc5c1f61ec2a282c 4020970 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb a4ad23a8625d89a4e76596f00b4fca91 1418732 libs standard bind9-libs_9.18.24-0ubuntu0.23.10.1_ppc64el.deb d781aac4ff1154327f0cdee79f36b3ac 346386 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu0.23.10.1_ppc64el.ddeb f98cbc2d47886c22c32f225b0bccbdc8 167504 net optional bind9-utils_9.18.24-0ubuntu0.23.10.1_ppc64el.deb e188b17d3179a47a622a58c1945cf492 11021 net optional bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.buildinfo 0e71267e67b2e89bae45ee718cf8138d 286372 net optional bind9_9.18.24-0ubuntu0.23.10.1_ppc64el.deb ba355c74e6e5e8023c295be121f8b0a4 13099 raw-translations - bind9_9.18.24-0ubuntu0.23.10.1_ppc64el_translations.tar.gz Original-Maintainer: Debian DNS Team