[ubuntu/wily-proposed] bind9 1:9.9.5.dfsg-11ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed Sep 2 19:58:14 UTC 2015


bind9 (1:9.9.5.dfsg-11ubuntu1) wily; urgency=medium

  * SECURITY UPDATE: denial of service in DNSSEC-signed record validation
    via malformed keys
    - fix validation inlib/dns/hmac_link.c, lib/dns/include/dst/dst.h,
      lib/dns/ncache.c, lib/dns/openssldh_link.c,
      lib/dns/openssldsa_link.c, lib/dns/opensslecdsa_link.c,
      lib/dns/opensslrsa_link.c, lib/dns/resolver.c.
    - CVE-2015-5722

Date: Tue, 01 Sep 2015 13:54:11 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.9.5.dfsg-11ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 01 Sep 2015 13:54:11 -0400
Source: bind9
Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-90 libdns100 libisc95 liblwres90 libisccc90 libisccfg90 dnsutils lwresd libbind-export-dev libdns-export100 libdns-export100-udeb libisc-export95 libisc-export95-udeb libisccfg-export90 libisccfg-export90-udeb libirs-export91 libirs-export91-udeb
Architecture: source
Version: 1:9.9.5.dfsg-11ubuntu1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - Version of 'host' bundled with BIND 9.X
 bind9utils - Utilities for BIND
 dnsutils   - Clients provided with BIND
 host       - Transitional package
 libbind-dev - Static Libraries and Headers used by BIND
 libbind-export-dev - Development files for the exported BIND libraries
 libbind9-90 - BIND9 Shared Library used by BIND
 libdns-export100 - Exported DNS Shared Library
 libdns-export100-udeb - Exported DNS library for debian-installer (udeb)
 libdns100  - DNS Shared Library used by BIND
 libirs-export91 - Exported IRS Shared Library
 libirs-export91-udeb - Exported IRS library for debian-installer (udeb)
 libisc-export95 - Exported ISC Shared Library
 libisc-export95-udeb - Exported ISC library for debian-installer (udeb)
 libisc95   - ISC Shared Library used by BIND
 libisccc90 - Command Channel Library used by BIND
 libisccfg-export90 - Exported ISC CFG Shared Library
 libisccfg-export90-udeb - Exported ISC CFG library for debian-installer (udeb)
 libisccfg90 - Config File Handling Library used by BIND
 liblwres90 - Lightweight Resolver Library used by BIND
 lwresd     - Lightweight Resolver Daemon
Changes:
 bind9 (1:9.9.5.dfsg-11ubuntu1) wily; urgency=medium
 .
   * SECURITY UPDATE: denial of service in DNSSEC-signed record validation
     via malformed keys
     - fix validation inlib/dns/hmac_link.c, lib/dns/include/dst/dst.h,
       lib/dns/ncache.c, lib/dns/openssldh_link.c,
       lib/dns/openssldsa_link.c, lib/dns/opensslecdsa_link.c,
       lib/dns/opensslrsa_link.c, lib/dns/resolver.c.
     - CVE-2015-5722
Checksums-Sha1:
 5db097968dfbef112dc8a4f826e5d53993c916ca 3530 bind9_9.9.5.dfsg-11ubuntu1.dsc
 2a717b2162a1672f15b4f6d71f4fbd31648d1341 111841 bind9_9.9.5.dfsg-11ubuntu1.diff.gz
Checksums-Sha256:
 dca18bd56255a979e0a925af19a2cdce1c977e8d05ec1abf31fc06e915922d2d 3530 bind9_9.9.5.dfsg-11ubuntu1.dsc
 72dd3fe7491ff10eebd485f770d54fb3d951722f92549e1ae1e5b71c9954b633 111841 bind9_9.9.5.dfsg-11ubuntu1.diff.gz
Files:
 0972f0122cf31bf06796769c80f6e99b 3530 net optional bind9_9.9.5.dfsg-11ubuntu1.dsc
 a57f651f1518407cef9b7680318dfaad 111841 net optional bind9_9.9.5.dfsg-11ubuntu1.diff.gz
Original-Maintainer: LaMont Jones <lamont at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=bxth
-----END PGP SIGNATURE-----


More information about the Wily-changes mailing list