[ubuntu/natty-security] bind9_9.7.3.dfsg-1ubuntu2.4_armel_translations.tar.gz, bind9_9.7.3.dfsg-1ubuntu2.4_i386_translations.tar.gz, bind9, bind9_9.7.3.dfsg-1ubuntu2.4_amd64_translations.tar.gz, bind9_9.7.3.dfsg-1ubuntu2.4_powerpc_translations.tar.gz 1:9.7.3.dfsg-1ubuntu2.4 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Tue Jun 5 18:33:54 UTC 2012


bind9 (1:9.7.3.dfsg-1ubuntu2.4) natty-security; urgency=low

  * SECURITY UPDATE: ghost domain names attack
    - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
      of the old NS RRset when replacing it.
    - Patch backported from 9.7.5.
    - CVE-2012-1033
  * SECURITY UPDATE: denial of service via zero length rdata handling
    - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
      duplicate rdata.
    - Patch backported from 9.7.6-P1.
    - CVE-2012-1667

Date: Mon, 04 Jun 2012 13:27:50 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/bind9/1:9.7.3.dfsg-1ubuntu2.4
-------------- next part --------------
Format: 1.8
Date: Mon, 04 Jun 2012 13:27:50 -0400
Source: bind9
Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-60 libdns69 libisc62 liblwres60 libisccc60 libisccfg62 dnsutils lwresd
Architecture: source
Version: 1:9.7.3.dfsg-1ubuntu2.4
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - Version of 'host' bundled with BIND 9.X
 bind9utils - Utilities for BIND
 dnsutils   - Clients provided with BIND
 host       - Transitional package
 libbind-dev - Static Libraries and Headers used by BIND
 libbind9-60 - BIND9 Shared Library used by BIND
 libdns69   - DNS Shared Library used by BIND
 libisc62   - ISC Shared Library used by BIND
 libisccc60 - Command Channel Library used by BIND
 libisccfg62 - Config File Handling Library used by BIND
 liblwres60 - Lightweight Resolver Library used by BIND
 lwresd     - Lightweight Resolver Daemon
Changes: 
 bind9 (1:9.7.3.dfsg-1ubuntu2.4) natty-security; urgency=low
 .
   * SECURITY UPDATE: ghost domain names attack
     - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
       of the old NS RRset when replacing it.
     - Patch backported from 9.7.5.
     - CVE-2012-1033
   * SECURITY UPDATE: denial of service via zero length rdata handling
     - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
       duplicate rdata.
     - Patch backported from 9.7.6-P1.
     - CVE-2012-1667
Checksums-Sha1: 
 e0b59135ae3c96a3567954b2ae5d07bcbb3084d7 2267 bind9_9.7.3.dfsg-1ubuntu2.4.dsc
 de8d7da35386f64e3828f86b35dbaa347aa48bbc 519371 bind9_9.7.3.dfsg-1ubuntu2.4.diff.gz
Checksums-Sha256: 
 354a13d15cbc649cff7ecf1c3c2ce2cecec8a3545b1f679921942b82f8d8054e 2267 bind9_9.7.3.dfsg-1ubuntu2.4.dsc
 f9582447e93d93848fe09bd31fdc611b8280a4db533365ad8aa85b38fed19567 519371 bind9_9.7.3.dfsg-1ubuntu2.4.diff.gz
Files: 
 679086ff39f335b195f5fc25762869f2 2267 net optional bind9_9.7.3.dfsg-1ubuntu2.4.dsc
 f22daa388326e6ef27ec058306db2b71 519371 net optional bind9_9.7.3.dfsg-1ubuntu2.4.diff.gz
Original-Maintainer: LaMont Jones <lamont at debian.org>


More information about the Natty-changes mailing list