Format: 1.8 Date: Thu, 09 Aug 2018 23:26:07 -0700 Source: bind9 Binary: bind9 bind9utils bind9-doc bind9-host libbind-dev libbind9-160 libdns1100 libirs160 libisc169 liblwres160 libisccc160 libisccfg160 dnsutils libbind-export-dev libdns-export1100 libdns-export1100-udeb libirs-export160 libirs-export160-udeb libisc-export169 libisc-export169-udeb libisccc-export160 libisccc-export160-udeb libisccfg-export160 libisccfg-export160-udeb Architecture: source Version: 1:9.11.3+dfsg-1ubuntu1.2 Distribution: bionic-security Urgency: medium Maintainer: Ubuntu Developers Changed-By: Steve Beattie Description: bind9 - Internet Domain Name Server bind9-doc - Documentation for BIND bind9-host - DNS lookup utility (deprecated) bind9utils - Utilities for BIND dnsutils - Clients provided with BIND libbind-dev - Static Libraries and Headers used by BIND libbind-export-dev - Development files for the exported BIND libraries libbind9-160 - BIND9 Shared Library used by BIND libdns-export1100 - Exported DNS Shared Library libdns-export1100-udeb - Exported DNS library for debian-installer (udeb) libdns1100 - DNS Shared Library used by BIND libirs-export160 - Exported IRS Shared Library libirs-export160-udeb - Exported IRS library for debian-installer (udeb) libirs160 - DNS Shared Library used by BIND libisc-export169 - Exported ISC Shared Library libisc-export169-udeb - Exported ISC library for debian-installer (udeb) libisc169 - ISC Shared Library used by BIND libisccc-export160 - Command Channel Library used by BIND libisccc-export160-udeb - Command Channel Library used by BIND (udeb) libisccc160 - Command Channel Library used by BIND libisccfg-export160 - Exported ISC CFG Shared Library libisccfg-export160-udeb - Exported ISC CFG library for debian-installer (udeb) libisccfg160 - Config File Handling Library used by BIND liblwres160 - Lightweight Resolver Library used by BIND Changes: bind9 (1:9.11.3+dfsg-1ubuntu1.2) bionic-security; urgency=medium . * SECURITY UPDATE: denial of service crash when deny-answer-aliases option is used - debian/patches/CVE-2018-5740-1.patch: explicit DNAME query could trigger a crash if deny-answer-aliases was set - debian/patches/CVE-2018-5740-2.patch: add tests - debian/patches/CVE-2018-5740-3.patch: caclulate nlabels and set *chainingp correctly, add test - CVE-2018-5740 Checksums-Sha1: c0a8a63f81078ec0bee6d1c821822737df9fb9d3 3924 bind9_9.11.3+dfsg-1ubuntu1.2.dsc b59c604767e3e435c15f095004e59193a475c910 85736 bind9_9.11.3+dfsg-1ubuntu1.2.debian.tar.xz e7829b794179ebbcce366e5a080ad475c4d6c65e 9210 bind9_9.11.3+dfsg-1ubuntu1.2_source.buildinfo Checksums-Sha256: 4f71545014ca6b9a653138f6afd1e8d5e6f8ea4ac905cacf88cd0447d975761e 3924 bind9_9.11.3+dfsg-1ubuntu1.2.dsc 5363562fc4096ec1ebeaf52dba46d3619c6819b34737b35c4fd443978eaf98e6 85736 bind9_9.11.3+dfsg-1ubuntu1.2.debian.tar.xz 585c632bc81a177316939b4f5fce1cd1de1ddfca372fcd072f53163ad7e0ca68 9210 bind9_9.11.3+dfsg-1ubuntu1.2_source.buildinfo Files: 90b4244c32380219c76f43df1da8a62d 3924 net optional bind9_9.11.3+dfsg-1ubuntu1.2.dsc b04b5253265e63b9280296fe32899b73 85736 net optional bind9_9.11.3+dfsg-1ubuntu1.2.debian.tar.xz 888205dc1a0a4efb0b33415784d349bc 9210 net optional bind9_9.11.3+dfsg-1ubuntu1.2_source.buildinfo Original-Maintainer: Debian DNS Packaging