Ubuntu
bind9 package

bind9 1:9.10.3.dfsg.P4-8ubuntu1.16 source package in Ubuntu

Changelog

bind9 (1:9.10.3.dfsg.P4-8ubuntu1.16) xenial-security; urgency=medium

  * SECURITY UPDATE: BIND does not sufficiently limit the number of fetches
    performed when processing referrals
    - debian/patches/CVE-2020-8616.patch: further limit the number of
      queries that can be triggered from a request in lib/dns/adb.c,
      lib/dns/include/dns/adb.h, lib/dns/resolver.c.
    - CVE-2020-8616
  * SECURITY UPDATE: A logic error in code which checks TSIG validity can
    be used to trigger an assertion failure in tsig.c
    - debian/patches/CVE-2020-8617.patch: don't allow replaying a TSIG
      BADTIME response in lib/dns/tsig.c.
    - CVE-2020-8617

 -- Marc Deslauriers <email address hidden>  Fri, 15 May 2020 08:23:59 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
bind9_9.10.3.dfsg.P4.orig.tar.gz 8.2 MiB 895077c868d06eea39c1526624f2278a3b51a3358b5aa50f48a0f1c16a7ab6e6
bind9_9.10.3.dfsg.P4-8ubuntu1.16.debian.tar.xz 101.5 KiB c53841d9b853b5691c5da51920dfa0f2ce26861ea1f8bc68283bc3ce90c1810b
bind9_9.10.3.dfsg.P4-8ubuntu1.16.dsc 3.8 KiB 183d830343f5634509f272aeaa602256dc8d576502889d44170b13584a458920

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package provides the server and related configuration files.

bind9-dbgsym: debug symbols for package bind9

 .
 .
 This package provides the server and related configuration files.

bind9-doc: Documentation for BIND

 This package provides various documents that are useful for maintaining a
 working BIND installation.

bind9-host: Version of 'host' bundled with BIND 9.X

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9-host-dbgsym: debug symbols for package bind9-host

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9utils: Utilities for BIND

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

bind9utils-dbgsym: debug symbols for package bind9utils

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

dnsutils: Clients provided with BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

dnsutils-dbgsym: debug symbols for package dnsutils

 .
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

host: Transitional package

 This dummy package is provided for a smooth transition from the previous
 host package. It may safely be removed after installation.

libbind-dev: Static Libraries and Headers used by BIND

 This package delivers archive-style libraries, header files, and API man
 pages for libbind, libdns, libisc, and liblwres. These are only needed
 if you want to compile other packages that need more nameserver API than the
 resolver code provided in libc.

libbind-export-dev: Development files for the exported BIND libraries

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers development files for the exported BIND libraries.

libbind9-140: BIND9 Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libbind9-140-dbgsym: debug symbols for package libbind9-140

 .
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libdns-export162: Exported DNS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libdns shared library.

libdns-export162-dbgsym: debug symbols for package libdns-export162

 .
 .
 This package delivers the exported libdns shared library.

libdns-export162-udeb: Exported DNS library for debian-installer
libdns-export162-udeb-dbgsym: debug symbols for package libdns-export162-udeb
libdns162: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libdns162-dbgsym: debug symbols for package libdns162

 .
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libirs-export141: Exported IRS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libirs shared library.

libirs-export141-dbgsym: debug symbols for package libirs-export141

 .
 .
 This package delivers the exported libirs shared library.

libirs-export141-udeb: Exported IRS library for debian-installer
libirs-export141-udeb-dbgsym: debug symbols for package libirs-export141-udeb
libirs141: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libirs141-dbgsym: debug symbols for package libirs141

 .
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libisc-export160: Exported ISC Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisc shared library.

libisc-export160-dbgsym: debug symbols for package libisc-export160

 .
 .
 This package delivers the exported libisc shared library.

libisc-export160-udeb: Exported ISC library for debian-installer
libisc-export160-udeb-dbgsym: debug symbols for package libisc-export160-udeb
libisc160: ISC Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisc160-dbgsym: debug symbols for package libisc160

 .
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisccc-export140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-dbgsym: debug symbols for package libisccc-export140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb-dbgsym: debug symbols for package libisccc-export140-udeb

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140-dbgsym: debug symbols for package libisccc140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccfg-export140: Exported ISC CFG Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-dbgsym: debug symbols for package libisccfg-export140

 .
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-udeb: Exported ISC CFG library for debian-installer
libisccfg-export140-udeb-dbgsym: debug symbols for package libisccfg-export140-udeb
libisccfg140: Config File Handling Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

libisccfg140-dbgsym: debug symbols for package libisccfg140

 .
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

liblwres141: Lightweight Resolver Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

liblwres141-dbgsym: debug symbols for package liblwres141

 .
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

lwresd: Lightweight Resolver Daemon

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.

lwresd-dbgsym: debug symbols for package lwresd

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.