-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Apr 2021 12:42:26 +0200 Source: bind9 Architecture: source Version: 1:9.11.5.P4+dfsg-5.1+deb10u4 Distribution: buster-security Urgency: high Maintainer: Debian DNS Team <team+dns@tracker.debian.org> Changed-By: Ondřej Surý <ondrej@debian.org> Changes: bind9 (1:9.11.5.P4+dfsg-5.1+deb10u4) buster-security; urgency=high . * CVE-2021-25214: A malformed incoming IXFR transfer could trigger an assertion failure in ``named``, causing it to quit abnormally. * CVE-2021-25215: ``named`` crashed when a DNAME record placed in the ANSWER section during DNAME chasing turned out to be the final answer to a client query. Checksums-Sha1: 28675312b28404011597917a71f19c3ca03fe281 4096 bind9_9.11.5.P4+dfsg-5.1+deb10u4.dsc 4aee73e47940157ef8a1f5af637659f8ef1693db 117660 bind9_9.11.5.P4+dfsg-5.1+deb10u4.debian.tar.xz 8978a1418504af7bceb38d1b6f634cc3e340292e 21064 bind9_9.11.5.P4+dfsg-5.1+deb10u4_amd64.buildinfo Checksums-Sha256: 5f0223e945d9df8f2bf64f3f9f071bc2bd8f61e650a2de0f303398fe764acd52 4096 bind9_9.11.5.P4+dfsg-5.1+deb10u4.dsc 57e352b469d4929d637f3e5dd4dee592e29cf85eb075a77883e957fb9eaeea54 117660 bind9_9.11.5.P4+dfsg-5.1+deb10u4.debian.tar.xz 9272d09179d248b52fdc1b24066cc61afa3e03d87bcd690e950fa8fdd975ed4a 21064 bind9_9.11.5.P4+dfsg-5.1+deb10u4_amd64.buildinfo Files: 873531cbe36e0799bb95b7f4590ffaa1 4096 net optional bind9_9.11.5.P4+dfsg-5.1+deb10u4.dsc e729be3776778eab083bb078c4694c05 117660 net optional bind9_9.11.5.P4+dfsg-5.1+deb10u4.debian.tar.xz cbce4bd497de3cb4eb7ffbe9db814009 21064 net optional bind9_9.11.5.P4+dfsg-5.1+deb10u4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmCKkjJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcIjyg//Vxfo73NdHg3gO5gbl/i4HuP+skrXtgUFwxiEyERn6XMftkxpTotM6VB3 dQ/P3MA5XIZws03tyGpRQ4ywHzs1ZwsfNtyvlyGA/LY3gJsHtBhLXsrYWFjXyP+b mhzUmRpqr5m8M1XNdg2svPkjt1U4CS6M6TvV89eUdRJdgfLupl20n80nmEOIYcAh HeIiKqGTeYwJe8VbtX62ekb18pLxEuaxoTUy9se/U6z9oxqNmB6Bdrww+ktF9Ajo xf6x4Qdfk5nJW3LoEz77BiVg8BP68gpm6mAl+5EL/lL6JoR2vQyzC/QvyizW7chJ 7dIlTW6M/A9jnZrodkwZ4BrUB6y42VuDsxt3IAi71z1jkLrSn2Wdzkr0zpR9zzGU 4VJpSnNjXEDwYJPgDvTTxmqm6hGVPF4zn/71rTwsNPjFqU3r4o4QcnBE7IEoQx4I OBuNyC2SoPvpxlN2uzowSZCpdkvalB4Q00JLV2RzuDVZpOXkISqYV4YLGwnFkX7y rARSGevlQlEcLzfjVUUI58fglXcyn3Bez/V79Ee4hmN1VzVJkSWg8yXO0GDFZg72 l7V+wuVnykU7rVdnohk7h7XEfKHQYeV6wMFB10/ENOOVdnrFQ5Rdb+ZgkMQNtMVM 9fnbL5D6d5ErNgTMt6YN46XEV4T/6S/tIuR2T8J2OhUjXzNTkQE= =w80j -----END PGP SIGNATURE-----