-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 12 Feb 2024 17:25:59 +0100 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: armel Version: 1:9.16.48-1 Distribution: bullseye-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.16.48-1) bullseye-security; urgency=high . * New upstream version 9.16.48 - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution - CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources * Update patches from debian/9.16 branch - Disable treat-warnings-as-errors in sphinx-build - Remove the reference to OPTIONS.md - it breaks build on Debian stretch Checksums-Sha1: f3a80bfc0e996d306ff662dc1f3f0fe97b705488 494452 bind9-dbgsym_9.16.48-1_armel.deb e74df6efff257fd519a71a737d7b08d9ff96c234 1702080 bind9-dev_9.16.48-1_armel.deb 9b1f102539b91ce20f2b9e7c2ed20e62c5358ee0 276824 bind9-dnsutils-dbgsym_9.16.48-1_armel.deb f418ba906d7526f07076deaa2bbd2effdd845494 400440 bind9-dnsutils_9.16.48-1_armel.deb 57f2dfe5d4c451eb5285aff0c12dac9accea9464 77856 bind9-host-dbgsym_9.16.48-1_armel.deb f8d44fedba6d85977ac5dd075d40f72affba94ab 308452 bind9-host_9.16.48-1_armel.deb 3b2d278739bc5e7256cb483c4247953ae85cb928 3239140 bind9-libs-dbgsym_9.16.48-1_armel.deb b5858dc5ff37cd8bbd7ca6a6418d0ac65080805c 1281092 bind9-libs_9.16.48-1_armel.deb 52aa0c4da15a89ec5d40b62a78c91490aee65099 257112 bind9-utils-dbgsym_9.16.48-1_armel.deb 9833392fbea09c75e83eebb174fa84ea1606a504 430124 bind9-utils_9.16.48-1_armel.deb bc9da4904483c4c5969f4642377a9f6623235953 10560 bind9_9.16.48-1_armel-buildd.buildinfo ecb6ee7743ef286d0d84a990c22f9635a162c7bb 485744 bind9_9.16.48-1_armel.deb Checksums-Sha256: bec1b4ac2747c63f42fd8af76cb681e96b160f6349d23ea785ec19730ed5d3c7 494452 bind9-dbgsym_9.16.48-1_armel.deb b3dc0fba40979d1346749839712f3560272de4a545b0e1df2ae8fc04d57bdf29 1702080 bind9-dev_9.16.48-1_armel.deb ff532f8eaaedfdc13b229eb6cb33db0d7dff18937227c86e787fc35506406cdd 276824 bind9-dnsutils-dbgsym_9.16.48-1_armel.deb c5a6b18a1c2dccdb62dc773e8c97b871a91f114892950c5f0df1bb2de9c9e901 400440 bind9-dnsutils_9.16.48-1_armel.deb edb2faabbd81efa1ec245b15fe0d7aa8387cc52db337fe42694267c8341e1c2c 77856 bind9-host-dbgsym_9.16.48-1_armel.deb 5f0b4aed4d1a64edebc3198afe33b640702798e7d87a0cfddd76445a36abe14e 308452 bind9-host_9.16.48-1_armel.deb 797d5ced1bad047060ae927bfa48b295d09c28b6da82f7ba2d6560c1b50778fc 3239140 bind9-libs-dbgsym_9.16.48-1_armel.deb 5ca74a814b88437ddb2f42124af9389469a219b8c5cad380ce4ef31aa902773e 1281092 bind9-libs_9.16.48-1_armel.deb 2deb0776ec1f189473502fd5d39c5d2d9a0400a8e58c81c11f2de07fb95e06a0 257112 bind9-utils-dbgsym_9.16.48-1_armel.deb faff8490bded78e65bb532bcce515f6ac9dc0a251d2b7b40994335a0ea0fa766 430124 bind9-utils_9.16.48-1_armel.deb 84d23144811154c1f2416a49346525407b23425ee4a27ac1d165cc94094a28bf 10560 bind9_9.16.48-1_armel-buildd.buildinfo e56337cc6619edc543ea7419484210152c7adeb01ad9393da6a78da0e40aae1d 485744 bind9_9.16.48-1_armel.deb Files: 8459b27ddf512d78635200af76d80275 494452 debug optional bind9-dbgsym_9.16.48-1_armel.deb eed83fb432ed1dc0e4d726c4b6d9eb15 1702080 devel optional bind9-dev_9.16.48-1_armel.deb ba90ae5375e70d9f714da9e684d10804 276824 debug optional bind9-dnsutils-dbgsym_9.16.48-1_armel.deb 4b72304d8cdb0d1a05bcde5d86243404 400440 net standard bind9-dnsutils_9.16.48-1_armel.deb d1750d938d82303e88a01d09a6d5e5e4 77856 debug optional bind9-host-dbgsym_9.16.48-1_armel.deb 96a14bfe8483dbc9163acec576c91710 308452 net standard bind9-host_9.16.48-1_armel.deb 84cd3a49e2770afdc141216a7e499be2 3239140 debug optional bind9-libs-dbgsym_9.16.48-1_armel.deb 5cef99276b925280ea1a37fd9b47952f 1281092 libs standard bind9-libs_9.16.48-1_armel.deb 6c1fd159f386f7d5a5576fb5be618fad 257112 debug optional bind9-utils-dbgsym_9.16.48-1_armel.deb b1ebca5dddb9357fb64c15438acb635e 430124 net optional bind9-utils_9.16.48-1_armel.deb b61c4b44b33ef5c149b0cc4d982350ac 10560 net optional bind9_9.16.48-1_armel-buildd.buildinfo 98ca1d01b1040865aedb560bc57d262f 485744 net optional bind9_9.16.48-1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEU81tY/BC8e+eAeWhLffeOnPnbLUFAmXKUosACgkQLffeOnPn bLVLgBAAoGegMBzfixABdUUwfTFiWU0gjMiHzqduIL75sNANeIihizxn48p/Z0UB WYZn4valC1elPcqVl3neVMVsuSQE8uBOQljmrYa3ljfuZ1tYwfA8hLGFw3Tt8fYk 0wk+1GEHbarrhQy5AFncluxuFGsbmqA6fBu1mWGBfyjyh49+FrtiFcfPStbB1vBL yiYkLdkDcFyT9TwrMhTUE2wI94sCrtCAL/vNL+7bqWG7FIEIJIndymJrjnajrxsg nZnTLmG7zJIX+nH5deuhlOcBo269Ux3ubJURNxXNIWgtfCaf5OgOnc4TdbC9X63c +bFCtyXVH+Cc9XquSU8qzIgcxxXvusPbUYfDTPGvejAJamP47mv915KxfxgX/JkU R0wDcShloaTSjny3TgDe4W5ffe9sZbfhNfNrPomshZAIhP1bidvPGkTmbRseD6bX FsdoJks7EWMd+ZM4nZShmVFde7Jg6hz1/pbTJO/BAc+NbpLb87Ft0LKEebL88GBx 5Zs/F3wKqPiOcQ7s5LP/8REU2NMA3VDiIuJrIk7xGBHn6C9jZpCsge13+p/+wROX yEn/Xh55xPX13TISRFSkefGa378iBdKbb3cwa63a5rsy5wCUNydFCIRs+S90cIcK viUL6jh+B5goXvG6KbdUnB2td1CQsO19j40+0NSXyY8p/1Y+iSs= =lJUQ -----END PGP SIGNATURE-----