bind9 1:9.10.3.dfsg.P4-8ubuntu1.12 source package in Ubuntu

Changelog

bind9 (1:9.10.3.dfsg.P4-8ubuntu1.12) xenial-security; urgency=medium

  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

 -- Marc Deslauriers <email address hidden>  Wed, 20 Feb 2019 10:07:28 +0100

Upload details

Uploaded by:
Marc Deslauriers on 2019-02-20
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates on 2019-02-22 main net
Xenial security on 2019-02-22 main net

Downloads

File Size SHA-256 Checksum
bind9_9.10.3.dfsg.P4.orig.tar.gz 8.2 MiB 895077c868d06eea39c1526624f2278a3b51a3358b5aa50f48a0f1c16a7ab6e6
bind9_9.10.3.dfsg.P4-8ubuntu1.12.debian.tar.xz 92.1 KiB d8da97846e160ac1e1d95bd746a6d5c520ac239071f691b36cc55a0350c2b3e5
bind9_9.10.3.dfsg.P4-8ubuntu1.12.dsc 3.8 KiB 2c2759fe2e8895591bae289c0dc7dac8528786a26f2703b09e60efcaf4f5f221

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package provides the server and related configuration files.

bind9-dbgsym: debug symbols for package bind9

 .
 .
 This package provides the server and related configuration files.

bind9-doc: Documentation for BIND

 This package provides various documents that are useful for maintaining a
 working BIND installation.

bind9-host: Version of 'host' bundled with BIND 9.X

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9-host-dbgsym: debug symbols for package bind9-host

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9utils: Utilities for BIND

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

bind9utils-dbgsym: debug symbols for package bind9utils

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

dnsutils: Clients provided with BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

dnsutils-dbgsym: debug symbols for package dnsutils

 .
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

host: Transitional package

 This dummy package is provided for a smooth transition from the previous
 host package. It may safely be removed after installation.

libbind-dev: Static Libraries and Headers used by BIND

 This package delivers archive-style libraries, header files, and API man
 pages for libbind, libdns, libisc, and liblwres. These are only needed
 if you want to compile other packages that need more nameserver API than the
 resolver code provided in libc.

libbind-export-dev: Development files for the exported BIND libraries

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers development files for the exported BIND libraries.

libbind9-140: BIND9 Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libbind9-140-dbgsym: debug symbols for package libbind9-140

 .
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libdns-export162: Exported DNS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libdns shared library.

libdns-export162-dbgsym: debug symbols for package libdns-export162

 .
 .
 This package delivers the exported libdns shared library.

libdns-export162-udeb: Exported DNS library for debian-installer
libdns-export162-udeb-dbgsym: debug symbols for package libdns-export162-udeb
libdns162: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libdns162-dbgsym: debug symbols for package libdns162

 .
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libirs-export141: Exported IRS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libirs shared library.

libirs-export141-dbgsym: debug symbols for package libirs-export141

 .
 .
 This package delivers the exported libirs shared library.

libirs-export141-udeb: Exported IRS library for debian-installer
libirs-export141-udeb-dbgsym: debug symbols for package libirs-export141-udeb
libirs141: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libirs141-dbgsym: debug symbols for package libirs141

 .
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libisc-export160: Exported ISC Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisc shared library.

libisc-export160-dbgsym: debug symbols for package libisc-export160

 .
 .
 This package delivers the exported libisc shared library.

libisc-export160-udeb: Exported ISC library for debian-installer
libisc-export160-udeb-dbgsym: debug symbols for package libisc-export160-udeb
libisc160: ISC Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisc160-dbgsym: debug symbols for package libisc160

 .
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisccc-export140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-dbgsym: debug symbols for package libisccc-export140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb-dbgsym: debug symbols for package libisccc-export140-udeb

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140-dbgsym: debug symbols for package libisccc140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccfg-export140: Exported ISC CFG Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-dbgsym: debug symbols for package libisccfg-export140

 .
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-udeb: Exported ISC CFG library for debian-installer
libisccfg-export140-udeb-dbgsym: debug symbols for package libisccfg-export140-udeb
libisccfg140: Config File Handling Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

libisccfg140-dbgsym: debug symbols for package libisccfg140

 .
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

liblwres141: Lightweight Resolver Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

liblwres141-dbgsym: debug symbols for package liblwres141

 .
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

lwresd: Lightweight Resolver Daemon

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.

lwresd-dbgsym: debug symbols for package lwresd

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.