[ubuntu/hardy-security] bind9 1:9.4.2.dfsg.P2-2ubuntu0.8 (Accepted)

[Marc Deslauriers]

bind9 (1:9.4.2.dfsg.P2-2ubuntu0.8) hardy-security; urgency=low

  * SECURITY UPDATE: denial of service via specially crafted packet
    - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache,
      nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute
      flag to indicate negative-cache records rather than using rrtype 0.
    - Patch backported from 9.6-ESV-R4-P3.
    - CVE-2011-2464

Date: Tue, 05 Jul 2011 09:30:37 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/bind9/1:9.4.2.dfsg.P2-2ubuntu0.8
-------------- next part --------------
Format: 1.7
Date: Tue, 05 Jul 2011 09:30:37 -0400
Source: bind9
Binary: bind9 bind9-doc bind9-host libbind-dev libbind9-30 libdns35 libdns36 libisc35 liblwres30 libisccc30 libisccfg30 dnsutils lwresd
Architecture: source
Version: 1:9.4.2.dfsg.P2-2ubuntu0.8
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - Version of 'host' bundled with BIND 9.X
 dnsutils   - Clients provided with BIND
 libbind-dev - Static Libraries and Headers used by BIND
 libbind9-30 - BIND9 Shared Library used by BIND
 libdns35   - DNS Shared Library used by BIND
 libdns36   - DNS Shared Library used by BIND
 libisc35   - ISC Shared Library used by BIND
 libisccc30 - Command Channel Library used by BIND
 libisccfg30 - Config File Handling Library used by BIND
 liblwres30 - Lightweight Resolver Library used by BIND
 lwresd     - Lightweight Resolver Daemon
Changes: 
 bind9 (1:9.4.2.dfsg.P2-2ubuntu0.8) hardy-security; urgency=low
 .
   * SECURITY UPDATE: denial of service via specially crafted packet
     - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache,
       nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute
       flag to indicate negative-cache records rather than using rrtype 0.
     - Patch backported from 9.6-ESV-R4-P3.
     - CVE-2011-2464
Files: 
 dcfd7e128a3d8c52b55ae9c343ecf8a2 1636 net optional bind9_9.4.2.dfsg.P2-2ubuntu0.8.dsc
 d1bba5623291d201776de9bc2ed311e9 242651 net optional bind9_9.4.2.dfsg.P2-2ubuntu0.8.diff.gz
Original-Maintainer: LaMont Jones <lamont at debian.org>