Format: 1.8 Date: Thu, 11 Apr 2024 14:11:18 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: ppc64el ppc64el_translations Version: 1:9.18.24-0ubuntu0.22.04.1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2040459 Changes: bind9 (1:9.18.24-0ubuntu0.22.04.1) jammy; urgency=medium . * New upstream version 9.18.24 (LP: #2040459) - Updates: + Mark use of AES as the DNS COOKIE algorithm as depricated. + Mark resolver-nonbackoff-tries and resolver-retry-interval statements as depricated. + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and 2801:1b8:10::b. + Mark dnssec-must-be-secure option as deprecated. + Honor nsupdate -v option for SOA queries by sending both the UPDATE request and the initial query over TCP. + Reduce memory consumption through dedicated jemalloc memory arenas. - Bug fixes: + Fix accidental truncation to 32 bit of statistics channel counters. + Do not schedule unsigned versions of inline-signed zones containing DNSSEC records for resigning. + Take local authoritive data into account when looking up stale data from the cache. + Fix assertion failure when lock-file used at the same time as named -X. + Fix lockfile removal issue when starting named 3+ times. + Fix validation of If-Modified-Since header in statistics channel for its length. + Add Content-Length header bounds check to avoid integer overflow. + Fix memory leaks from OpenSSL error stack. + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs and ms-subdomain-self-rhs UPDATE policies. + Fix accidental disable of stale-refresh-time feature on rndc flush. + Fix possible DNS message corruption from partial writes in TLS DNS. - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional information. * Remove CVE patches fixed upstream: - CVE-2023-3341.patch - CVE-2023-4236.patch [ Fixed in 9.18.19 ] - 0001-CVE-2023-4408.patch - 0002-CVE-2023-5517.patch - 0003-CVE-2023-5679.patch - 0004-CVE-2023-50387-CVE-2023-50868.patch [ Fixed in 9.18.24 ] * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the standard library stdatomic.h. Checksums-Sha1: a8b58940ca15836f839c1bf7fac1e38669c638a8 721298 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 8eba6742c33d8f98d6c6a47036c45d71e3e00182 263496 bind9-dev_9.18.24-0ubuntu0.22.04.1_ppc64el.deb abed1a49a993ab968a36795537649a4f3ba828ab 390228 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 3c020d634d4051f4f531b9ebc98c7983201a646c 164986 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 321e1c2d6f43a9b9176ca31e539a3c8d9f34613e 112260 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb d3000ed4fcf608250bd24c6cddfc4e8e8b5a85d8 54826 bind9-host_9.18.24-0ubuntu0.22.04.1_ppc64el.deb cd7885f8036147b32200644b7aaf74042b3fb706 3979360 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 1f0e3a7c59062d5c88d186eddab0c172ed78fa81 1415144 bind9-libs_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 153dc0f615deb2043f5c5ff92454315db0ee60e0 339990 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 0f2ddd333ceb113e7259ba44f3dfd884aa85ff1d 166124 bind9-utils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb c0e8b807549ed614b8155680471c22c1a7e2be14 12047 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.buildinfo 27e7637a7513e5a2ac1479ed0861d6f7d6862d4b 283514 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 62e1d27b4bde4e23396d27cb4b6a8097ea711030 13106 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el_translations.tar.gz Checksums-Sha256: b6485fc20b4469d3391bf8a8ba63cc93782cf98447be1c660037ef2f1997c3fc 721298 bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 04d72a4784c80f5cc5b61016abe49b06e29a1848e6dcb114b281762d262c081c 263496 bind9-dev_9.18.24-0ubuntu0.22.04.1_ppc64el.deb cb4f143e33eb51df14100ffc30d58bbecba2d51444df47e7c659412458d8016b 390228 bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb eda558667328e6ed320b0cab46bd547a77317968f827ac7a1d3a824dd83b9af3 164986 bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 0dd663b33d5bc7bb5cf9ebbc3f0ba7f3d1e6dfdb4d046e2b145f0d00a086effe 112260 bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb c3c68d42211d1d79a7c6196906ff993d5636b08f2147c2ad43e8db73e4b1ed84 54826 bind9-host_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 501e7ca4edc2dde19404b842d55e1e87f4b15c7ce312c09367294ced5083d42e 3979360 bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb ef69031eb1c3958d50d48e75a457c4e7daf2e4ae384ed9fb9cc4f69b719e8874 1415144 bind9-libs_9.18.24-0ubuntu0.22.04.1_ppc64el.deb cd39ec3c46bedff278a44712a3f35351d98e5412e8d809a9454da53e3b0161f8 339990 bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 309a166feb212cde14e068dfc98bffc57b4bedab32fb3f2cbb8c55fccfd99ca4 166124 bind9-utils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb b06d91cb3a52539523d901f30a5699ef6279bcae5727e429086b96afa2323635 12047 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.buildinfo 5ddedd160ee7edf2c767f89f09e539b28b51b8d6a736e214b5e7826f4909eb5d 283514 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 983fcf43e8bc6eb34866b1305c86e852c37ec1cf313548466ee7f000b0d654ba 13106 bind9_9.18.24-0ubuntu0.22.04.1_ppc64el_translations.tar.gz Files: aaa416191a511c0b25d80dbe9af9e6ba 721298 debug optional bind9-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 5b55c077d679d488959747ba28d190df 263496 devel optional bind9-dev_9.18.24-0ubuntu0.22.04.1_ppc64el.deb e21b28b971fe12b6b6007b1726591c9d 390228 debug optional bind9-dnsutils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 1c04daee5cfff4a996fb48dc60f1c899 164986 net standard bind9-dnsutils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 24dd593a1796c679c5703d22522bf42c 112260 debug optional bind9-host-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 99a2f7d70ab9a69966be5b021941445d 54826 net standard bind9-host_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 21eb88208b544d48f68404a1474c70d7 3979360 debug optional bind9-libs-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb 6f3ea5d417d4387d6ba555d807ecb48f 1415144 libs standard bind9-libs_9.18.24-0ubuntu0.22.04.1_ppc64el.deb cfba8a84e04a8bcf951e6f774a7cc5c4 339990 debug optional bind9-utils-dbgsym_9.18.24-0ubuntu0.22.04.1_ppc64el.ddeb b85b34e75b881f25ad038c224e15d258 166124 net optional bind9-utils_9.18.24-0ubuntu0.22.04.1_ppc64el.deb b20323f9a6393f3479a33e9626278e51 12047 net optional bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.buildinfo 6350379196f796a0b3ada39550361c3e 283514 net optional bind9_9.18.24-0ubuntu0.22.04.1_ppc64el.deb 26f44f1744a9e4ad487c5923b3410253 13106 raw-translations - bind9_9.18.24-0ubuntu0.22.04.1_ppc64el_translations.tar.gz Original-Maintainer: Debian DNS Team