Format: 1.8 Date: Tue, 27 Apr 2021 07:15:23 -0400 Source: bind9 Binary: bind9 bind9-dnsutils bind9-host bind9-libs bind9-utils Architecture: armhf armhf_translations Version: 1:9.16.1-0ubuntu2.8 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: bind9 - Internet Domain Name Server bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.16.1-0ubuntu2.8) focal-security; urgency=medium . * SECURITY UPDATE: DoS via broken inbound incremental zone update (IXFR) - debian/patches/CVE-2021-25214.patch: immediately reject the entire transfer for certain RR in lib/dns/xfrin.c. - CVE-2021-25214 * SECURITY UPDATE: assert via answering certain queries for DNAME records - debian/patches/CVE-2021-25215.patch: fix assert checks in lib/ns/query.c. - CVE-2021-25215 * SECURITY UPDATE: overflow in BIND's GSSAPI security policy negotiation - debian/rules: build with --disable-isc-spnego to disable internal SPNEGO and use the one from the kerberos libraries. - CVE-2021-25216 Checksums-Sha1: 2a762fd79b964d185d0165c41b764e55ddae8335 532880 bind9-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 5a60881014a03261ca85a1cfd218119674d4b2d5 292464 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb d5b9c612da242c22638f013a6dbff03072faebc0 130360 bind9-dnsutils_9.16.1-0ubuntu2.8_armhf.deb 77f6f1fd442340532b68a891359ab64116566428 82416 bind9-host-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 52dfbe46c6466cd610059d25c0669596a2e64f55 40568 bind9-host_9.16.1-0ubuntu2.8_armhf.deb d2038b3406cf2e5aff018355e4988839d6ce9690 3320344 bind9-libs-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 0f3f69982c7d33e9b629f550a03f9cc7eb362ee4 1003208 bind9-libs_9.16.1-0ubuntu2.8_armhf.deb 972e85023c1c9bd486178f8434562f0c59701a10 290052 bind9-utils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 01f4145e271fd1f3d06be13e643571034df40f78 168176 bind9-utils_9.16.1-0ubuntu2.8_armhf.deb bd7214b227955139e2bd7f6f7b5d7e53907d1a41 11001 bind9_9.16.1-0ubuntu2.8_armhf.buildinfo fe073b0a9adc583620604926d7d63b4d86344f39 222368 bind9_9.16.1-0ubuntu2.8_armhf.deb dd6ee0652e1654191b2e7daacbbf5cea251127dc 13059 bind9_9.16.1-0ubuntu2.8_armhf_translations.tar.gz Checksums-Sha256: ff3a095a8442db8e2c402450d0da40a4d5b35174cef7d92fc54a2d5ed5e1fabf 532880 bind9-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 8a64c4325a9b0eda1d6219df7f302e88f716a52755c2dfcda339d3f89ed908a4 292464 bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 45c59ca86cd39f17e6ae0da4d038c006a0b2c696bc7fc14bd0012896494f5de2 130360 bind9-dnsutils_9.16.1-0ubuntu2.8_armhf.deb 3b67bd255f09e47525315a2bc886f1ab7a0ec96998bd1204702961e51907b9a5 82416 bind9-host-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb f7a30d109c63bc269f5b0cf5dd7ba880e7a2a725160fb1d30fb29f4a33a775e7 40568 bind9-host_9.16.1-0ubuntu2.8_armhf.deb c44d75b9c7528a2bd08998cd2b28edf49c1e7e9750798465ea09434fcdfbc7e8 3320344 bind9-libs-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 67793c7588765367b2ffda6d55130f2c71c510a4e1b3dc15e6b4b3a3efded871 1003208 bind9-libs_9.16.1-0ubuntu2.8_armhf.deb fe5a10829d22771564db446bb119ccc6140cfa7b4c27ca1f41f3dcc9c90ce1a7 290052 bind9-utils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb b190637c8860d28a88140e9bfaa1db545612433f6a5303d8812e1554c804cb1f 168176 bind9-utils_9.16.1-0ubuntu2.8_armhf.deb eeb05b225eb69cd7a1f392b129456698834da83e19675da7b0566fc1df7430ed 11001 bind9_9.16.1-0ubuntu2.8_armhf.buildinfo c81572985ad1edfc53114f5d0e5e2a34139ab73dec6db50c18950188dbe0a80d 222368 bind9_9.16.1-0ubuntu2.8_armhf.deb ed22c18b836cb217f2a175d1c7baa528cd2bbe03a87fb19bba5e56461f0fd9e7 13059 bind9_9.16.1-0ubuntu2.8_armhf_translations.tar.gz Files: 1cc45394765959383685df0decdec72c 532880 debug optional bind9-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb db1222ddcf3900cc761831beb71b2451 292464 debug optional bind9-dnsutils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 96f794c073bbfe8d93c81b163a82b6f5 130360 net standard bind9-dnsutils_9.16.1-0ubuntu2.8_armhf.deb 2bca9a3d73ffd38f349a13d288dd1b74 82416 debug optional bind9-host-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb f33240ff245fdc58657c05f2ff815447 40568 net standard bind9-host_9.16.1-0ubuntu2.8_armhf.deb b724a88208fd4780ba0082caaff5a0d1 3320344 debug optional bind9-libs-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 89dd18d3ffa40d696c817d43e7d5ec6a 1003208 libs standard bind9-libs_9.16.1-0ubuntu2.8_armhf.deb ae13d2b21c71e333fd121af7f7972ca7 290052 debug optional bind9-utils-dbgsym_9.16.1-0ubuntu2.8_armhf.ddeb 80240f98fd80555ec144e01bfb3c215e 168176 net optional bind9-utils_9.16.1-0ubuntu2.8_armhf.deb d3e8b4a92894c7ac8b1a03f9dbe842f5 11001 net optional bind9_9.16.1-0ubuntu2.8_armhf.buildinfo 2e7074a4ced97ff49008b9cdd3a2ee9f 222368 net optional bind9_9.16.1-0ubuntu2.8_armhf.deb f4cd819898a868037fb91c855f443f22 13059 raw-translations - bind9_9.16.1-0ubuntu2.8_armhf_translations.tar.gz Original-Maintainer: Debian DNS Team