bind9 1:9.16.6-3ubuntu1.2 source package in Ubuntu

Changelog

bind9 (1:9.16.6-3ubuntu1.2) groovy-security; urgency=medium

  * SECURITY UPDATE: DoS via broken inbound incremental zone update (IXFR)
    - debian/patches/CVE-2021-25214.patch: immediately reject the entire
      transfer for certain RR in lib/dns/xfrin.c.
    - CVE-2021-25214
  * SECURITY UPDATE: assert via answering certain queries for DNAME records
    - debian/patches/CVE-2021-25215.patch: fix assert checks in
      lib/ns/query.c.
    - CVE-2021-25215
  * SECURITY UPDATE: overflow in BIND's GSSAPI security policy negotiation
    - debian/rules: build with --disable-isc-spnego to disable internal
      SPNEGO and use the one from the kerberos libraries.
    - CVE-2021-25216

 -- Marc Deslauriers <email address hidden>  Tue, 27 Apr 2021 07:14:19 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Groovy updates main net
Groovy security main net

Downloads

File Size SHA-256 Checksum
bind9_9.16.6.orig.tar.xz 3.1 MiB b567b0f3b47dd03b345a4848af7f2acdd3f5cea2bd804edd85d9ef50743571cb
bind9_9.16.6-3ubuntu1.2.debian.tar.xz 68.8 KiB 43cca93fde1f5be7a6f8e66145f4e410e2c16b92bb153e6e17bee0a63c7de17f
bind9_9.16.6-3ubuntu1.2.dsc 2.9 KiB 2f098f44b3ff7883600f981515f1e4fcaa565d3ffef6f86210653f12b0777b57

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
 name server. BIND 9 is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package provides the server and related configuration files.

bind9-dbgsym: debug symbols for bind9
bind9-dev: Static Libraries and Headers used by BIND 9

 The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
 name server. BIND 9 is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package contains a bundle of static libraries and header files used by
 BIND 9.
 .
 Please be aware that the BIND 9 libraries are considered private by upstream
 developers and the API and ABI might break at any time.

bind9-dnsutils: Clients provided with BIND 9

 The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
 name server. BIND 9 is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND 9 source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

bind9-dnsutils-dbgsym: debug symbols for bind9-dnsutils
bind9-doc: Documentation for BIND 9

 This package provides various documents that are useful for maintaining a
 working BIND 9 installation.

bind9-host: DNS Lookup Utility

 This package provides the 'host' DNS lookup utility in the form that
 is bundled with the BIND 9 sources.

bind9-host-dbgsym: debug symbols for bind9-host
bind9-libs: Shared Libraries used by BIND 9

 The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
 name server. BIND 9 is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package contains a bundle of shared libraries used by BIND 9.

bind9-libs-dbgsym: debug symbols for bind9-libs
bind9-utils: Utilities for BIND 9

 This package provides various utilities that are useful for maintaining a
 working BIND 9 installation.

bind9-utils-dbgsym: debug symbols for bind9-utils
bind9utils: Transitional package for bind9-utils

 This is a transitional package. It can safely be removed.

dnsutils: Transitional package for bind9-dnsutils

 This is a transitional package. It can safely be removed.