Ubuntu
bind9 package

bind9 1:9.11.3+dfsg-1ubuntu1.13 source package in Ubuntu

Changelog

bind9 (1:9.11.3+dfsg-1ubuntu1.13) bionic-security; urgency=medium

  * SECURITY UPDATE: A truncated TSIG response can lead to an assertion
    failure
    - debian/patches/CVE-2020-8622.patch: move code in lib/dns/message.c.
    - CVE-2020-8622
  * SECURITY UPDATE: A flaw in native PKCS#11 code can lead to a remotely
    triggerable assertion failure
    - debian/patches/CVE-2020-8623.patch: add extra checks in
      lib/dns/pkcs11dh_link.c, lib/dns/pkcs11dsa_link.c,
      lib/dns/pkcs11rsa_link.c, lib/isc/include/pk11/internal.h,
      lib/isc/pk11.c.
    - CVE-2020-8623
  * SECURITY UPDATE: update-policy rules of type subdomain were enforced
    incorrectly
    - debian/patches/CVE-2020-8624.patch: add extra check in
      bin/named/zoneconf.c.
    - CVE-2020-8624

 -- Marc Deslauriers <email address hidden>  Tue, 18 Aug 2020 08:08:32 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
bind9_9.11.3+dfsg.orig.tar.gz 6.9 MiB 1ba0ab6ac21cb3e5cdf103f00b98a259a67b29dcd2bc116b8ae643a394a954a4
bind9_9.11.3+dfsg-1ubuntu1.13.debian.tar.xz 100.7 KiB 8edf19e0c90ddfb755bd0b2fcb6c2cbfc76893eaf581df89e6490a2ecf22e705
bind9_9.11.3+dfsg-1ubuntu1.13.dsc 3.8 KiB 3e72f2806de9b88fa06f4a981b832da7af1399b927d2e562c4cf41b65459a5c2

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package provides the server and related configuration files.

bind9-dbgsym: debug symbols for bind9
bind9-doc: Documentation for BIND

 This package provides various documents that are useful for maintaining a
 working BIND installation.

bind9-host: DNS lookup utility (deprecated)

 This package provides /usr/bin/host, a simple utility (bundled with the
 BIND 9.X sources) which can be used for converting domain names to IP
 addresses and the reverse.
 .
 This utility is deprecated, use dig or delv from the dnsutils package.

bind9-host-dbgsym: debug symbols for bind9-host
bind9utils: Utilities for BIND

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

bind9utils-dbgsym: debug symbols for bind9utils
dnsutils: Clients provided with BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

dnsutils-dbgsym: debug symbols for dnsutils
libbind-dev: Static Libraries and Headers used by BIND

 This package delivers archive-style libraries, header files, and API man
 pages for libbind, libdns, libisc, and liblwres. These are only needed
 if you want to compile other packages that need more nameserver API than the
 resolver code provided in libc.

libbind-export-dev: Development files for the exported BIND libraries

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers development files for the exported BIND libraries.

libbind9-160: BIND9 Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libbind9-160-dbgsym: debug symbols for libbind9-160
libdns-export1100: Exported DNS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libdns shared library.

libdns-export1100-dbgsym: debug symbols for libdns-export1100
libdns-export1100-udeb: Exported DNS library for debian-installer
libdns1100: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libdns1100-dbgsym: debug symbols for libdns1100
libirs-export160: Exported IRS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libirs shared library.

libirs-export160-dbgsym: debug symbols for libirs-export160
libirs-export160-udeb: Exported IRS library for debian-installer
libirs160: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libirs160-dbgsym: debug symbols for libirs160
libisc-export169: Exported ISC Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisc shared library.

libisc-export169-dbgsym: debug symbols for libisc-export169
libisc-export169-udeb: Exported ISC library for debian-installer
libisc169: ISC Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisc169-dbgsym: debug symbols for libisc169
libisccc-export160: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export160-dbgsym: debug symbols for libisccc-export160
libisccc-export160-udeb: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc160: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc160-dbgsym: debug symbols for libisccc160
libisccfg-export160: Exported ISC CFG Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export160-dbgsym: debug symbols for libisccfg-export160
libisccfg-export160-udeb: Exported ISC CFG library for debian-installer

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisccfg shared library.

libisccfg160: Config File Handling Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

libisccfg160-dbgsym: debug symbols for libisccfg160
liblwres160: Lightweight Resolver Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

liblwres160-dbgsym: debug symbols for liblwres160