Accepted bind9 1:9.3.2-2ubuntu3 (source)

[Kees Cook]

Accepted:
 OK: bind9_9.3.2-2ubuntu3.dsc
     -> Component: main Section: net
 OK: bind9_9.3.2-2ubuntu3.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 28 Sep 2006 16:38:15 -0700
Source: bind9
Binary: libisccc0 lwresd libbind9-0 bind9-doc dnsutils bind9 libbind-dev bind9-host liblwres9 libisc11 libisccfg1 libdns21
Architecture: source
Version: 1:9.3.2-2ubuntu3
Distribution: edgy
Urgency: low
Maintainer: LaMont Jones <lamont at debian.org>
Changed-By: Kees Cook <kees at outflux.net>
Description: 
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - Version of 'host' bundled with BIND 9.X
 dnsutils   - Clients provided with BIND
 libbind-dev - Static Libraries and Headers used by BIND
 libbind9-0 - BIND9 Shared Library used by BIND
 libdns21   - DNS Shared Library used by BIND
 libisc11   - ISC Shared Library used by BIND
 libisccc0  - Command Channel Library used by BIND
 libisccfg1 - Config File Handling Library used by BIND
 liblwres9  - Lightweight Resolver Library used by BIND
 lwresd     - Lightweight Resolver Daemon
Changes: 
 bind9 (1:9.3.2-2ubuntu3) edgy; urgency=low
 .
   * SECURITY UPDATE: name servers accessible from the Internet could be
     used as an amplifier in DDoS attacks against other networks.
   * debian/named.conf.options: allow recursion only on localnets.  This
     matches the default configuration of listening on all interfaces, and
     gives a reasonable balance between allowing local recursion, and
     protecting the server from being used in a DDoS attack.
   * References
     CVE-2006-0987
     http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=248899
Files: 
 1a99f153f790cb56d6d9fd211289cf34 761 net optional bind9_9.3.2-2ubuntu3.dsc
 9fd965694e818d79c3a414bcc1a63fce 88612 net optional bind9_9.3.2-2ubuntu3.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFFJUo5DecnbV4Fd/IRAg/cAKCzKlL+Q0v5qUkkRubYcZgnHfzuHwCg2WAy
tc8OlROzX0Dv2JtiGnlMVJU=
=dFpT
-----END PGP SIGNATURE-----