bind9 1:9.8.1.dfsg.P1-4ubuntu0.22 source package in Ubuntu

Changelog

bind9 (1:9.8.1.dfsg.P1-4ubuntu0.22) precise-security; urgency=medium

  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

 -- Steve Beattie <email address hidden>  Thu, 13 Apr 2017 00:02:24 -0700

Upload details

Uploaded by:
Steve Beattie on 2017-04-13
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates on 2017-04-17 main net
Precise security on 2017-04-17 main net

Downloads

File Size SHA-256 Checksum
bind9_9.8.1.dfsg.P1.orig.tar.gz 6.7 MiB 71789f861cf05db618bdb43627e949f6145ed6e03c6631bf6d281568b829367e
bind9_9.8.1.dfsg.P1-4ubuntu0.22.diff.gz 525.3 KiB efda73c31ce5acbdadc4cf9c1cc6abb13267144d5e23035e0ce6eee30796dc72
bind9_9.8.1.dfsg.P1-4ubuntu0.22.dsc 2.6 KiB becbb38182f03685264b1524178482c75c4a875f766a8510d826ccbe3d7f7616

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package provides the server and related configuration files.

bind9-doc: Documentation for BIND

 This package provides various documents that are useful for maintaining a
 working BIND installation.

bind9-host: Version of 'host' bundled with BIND 9.X

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9utils: Utilities for BIND

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

dnsutils: Clients provided with BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

host: Transitional package

 This dummy package is provided for a smooth transition from the previous
 host package. It may safely be removed after installation.

libbind-dev: Static Libraries and Headers used by BIND

 This package delivers archive-style libraries, header files, and API man
 pages for libbind, libdns, libisc, and liblwres. These are only needed
 if you want to compile other packages that need more nameserver API than the
 resolver code provided in libc.

libbind9-80: BIND9 Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libdns81: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libisc83: ISC Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisccc80: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccfg82: Config File Handling Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

liblwres80: Lightweight Resolver Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

lwresd: Lightweight Resolver Daemon

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.