Format: 1.8 Date: Tue, 27 Apr 2021 07:15:23 -0400 Source: bind9 Binary: bind9 bind9-dnsutils bind9-host bind9-libs bind9-utils Architecture: arm64 arm64_translations Version: 1:9.16.1-0ubuntu2.8 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: bind9 - Internet Domain Name Server bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.16.1-0ubuntu2.8) focal-security; urgency=medium . * SECURITY UPDATE: DoS via broken inbound incremental zone update (IXFR) - debian/patches/CVE-2021-25214.patch: immediately reject the entire transfer for certain RR in lib/dns/xfrin.c. - CVE-2021-25214 * SECURITY UPDATE: assert via answering certain queries for DNAME records - debian/patches/CVE-2021-25215.patch: fix assert checks in lib/ns/query.c. - CVE-2021-25215 * SECURITY UPDATE: overflow in BIND's GSSAPI security policy negotiation - debian/rules: build with --disable-isc-spnego to disable internal SPNEGO and use the one from the kerberos libraries. - CVE-2021-25216 Checksums-Sha1: 10213a22b9427f3d6fb80521a7839b0462637a57 535420 bind9-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 489b5af75db62a44ee6a352bbd174e6fb55c7465 294160 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb fce3653b3595168ba441e069aae654431dbd8f2c 128792 bind9-dnsutils_9.16.1-0ubuntu2.8_arm64.deb 70a4cdcebaa577fd74e68f5ab6a26ef9a0a900df 82384 bind9-host-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb f80b40b12b4dfc5d8fe7f1fbd46519b0e11c8516 41448 bind9-host_9.16.1-0ubuntu2.8_arm64.deb 07aee55660d16672ff699169d1fbc9f93842d8b9 3383248 bind9-libs-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 87c8da5f1aead2eb1836753076d0fbaddfb9d1e0 996388 bind9-libs_9.16.1-0ubuntu2.8_arm64.deb 8011c8452f342b81d8b3cc7ba2e243f13d433881 294320 bind9-utils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 50b85c4655a7b6f9376e507b7635c7cb2d8712f8 166776 bind9-utils_9.16.1-0ubuntu2.8_arm64.deb e98324fc79586bd12c14a307ecccee0e3c09dbb6 11106 bind9_9.16.1-0ubuntu2.8_arm64.buildinfo 6bd93654ceec3db9179ee7c9109b3f58e50e65ad 214712 bind9_9.16.1-0ubuntu2.8_arm64.deb de924c2e4759ae712ce9122039f02f017b9e8195 13059 bind9_9.16.1-0ubuntu2.8_arm64_translations.tar.gz Checksums-Sha256: e2b69e79f086e75060779fd8c4b5a284a672d681d9fcc6fbd9b6d3729c6dc65d 535420 bind9-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 9b084a4f8f811ce95f1f115c78d3dcbf4cf61a8c6e5da6af702eb4193e716f47 294160 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 86eeed3916302dcda9103e321b11bde59872d7fb49e27180d8ac7e7a1b84cd6c 128792 bind9-dnsutils_9.16.1-0ubuntu2.8_arm64.deb 6a9202beeb5baf122a1a9f9a9afc9d3151f8fb7aa90b1a95ab1f90f184e1fb1a 82384 bind9-host-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 7e7f522ee3d3dd86b21b78df14b98208cce82497edd4d0dbc6fde90100b3ac29 41448 bind9-host_9.16.1-0ubuntu2.8_arm64.deb aa230aad1997113420a53f95ac3f2484f0d9bea86b9e6ea5a8d900e5c7306985 3383248 bind9-libs-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 34645ef5779f1f588970e04dfd3367a420e83b82c0c8d12156e9fa30e2c33f57 996388 bind9-libs_9.16.1-0ubuntu2.8_arm64.deb 2aff3246dc985534588fe58c222527ee3712ae32be5990e2a3515101cee7fb44 294320 bind9-utils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb e2f6760cb504f927350cca20f81f63a082b36392a4ac87794aa0a2821af1e12a 166776 bind9-utils_9.16.1-0ubuntu2.8_arm64.deb f19ed0b844836698b6bc67c247a989fb451471dac3011d7ec13fa097eabe7aa4 11106 bind9_9.16.1-0ubuntu2.8_arm64.buildinfo 9bfdde1b7788ecd5fd475a8bfa5289890a118cb725eb3d9fdead0b00a297d686 214712 bind9_9.16.1-0ubuntu2.8_arm64.deb da750a741a3254a4200a2259e22c6ee80d90bfae774bb855d0d86487fe94180e 13059 bind9_9.16.1-0ubuntu2.8_arm64_translations.tar.gz Files: 1f7d1e16a2a8216af7d92bd20a0c2f16 535420 debug optional bind9-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 6719824663adeecb4488832caeb1132a 294160 debug optional bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 91404a3a934fa988c3781365452bb2f7 128792 net standard bind9-dnsutils_9.16.1-0ubuntu2.8_arm64.deb e1e7e2d2576362db68abfa8e2729840b 82384 debug optional bind9-host-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb d12151902b340c63cee60342aa907c5c 41448 net standard bind9-host_9.16.1-0ubuntu2.8_arm64.deb a0d13fed8d6ec410d41233a47d57675d 3383248 debug optional bind9-libs-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb e4bf829bee416e28041e3cfd1f1084ac 996388 libs standard bind9-libs_9.16.1-0ubuntu2.8_arm64.deb 927c0f245d2c5bf645e673c70ba3e888 294320 debug optional bind9-utils-dbgsym_9.16.1-0ubuntu2.8_arm64.ddeb 93aaf8cc180b23b9e5fbf0e27b5c8b40 166776 net optional bind9-utils_9.16.1-0ubuntu2.8_arm64.deb 0b16a9a352c57b77e5b4e93948809102 11106 net optional bind9_9.16.1-0ubuntu2.8_arm64.buildinfo 761922a171ad49f8d0ce1388ec2bc39a 214712 net optional bind9_9.16.1-0ubuntu2.8_arm64.deb c59213d97a78d7003a9ec590eccca154 13059 raw-translations - bind9_9.16.1-0ubuntu2.8_arm64_translations.tar.gz Original-Maintainer: Debian DNS Team