-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Jun 2023 20:43:16 +0200 Source: bind9 Architecture: source Version: 1:9.18.16-1 Distribution: unstable Urgency: medium Maintainer: Debian DNS Team <team+dns@tracker.debian.org> Changed-By: Ondřej Surý <ondrej@debian.org> Changes: bind9 (1:9.18.16-1) unstable; urgency=medium . * New upstream version 9.18.16 - CVE-2023-2828: The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. - CVE-2023-2911: A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. Checksums-Sha1: 63956dcedf7a9293aad250d76b2793690c4d6a8e 3293 bind9_9.18.16-1.dsc fd4d104b751c8962c4351ee7f9a51851c8c93307 5462456 bind9_9.18.16.orig.tar.xz dc97925ecceeb1a333425bc733afa2b6d47b7fe7 833 bind9_9.18.16.orig.tar.xz.asc b11bde472bd99dd4c72061624d2938a0c57cc0ea 60472 bind9_9.18.16-1.debian.tar.xz 2f6cff7ab3dcfd0ac36180ecf32ca0d1c83050e1 15340 bind9_9.18.16-1_amd64.buildinfo Checksums-Sha256: 5cb5335f49771e42bbdb0a40ed3b3655a03c120bdefaae0d449bc84f592cb2de 3293 bind9_9.18.16-1.dsc c88234fe07ee75c3c8a9e59152fee64b714643de8e22cf98da3db4d0b57e0775 5462456 bind9_9.18.16.orig.tar.xz 8053d23883adfe5711d6eeed4c37b91773579a9a4f4c7b7fdb258d8b2c715d4f 833 bind9_9.18.16.orig.tar.xz.asc d4620165e1a31ae62f3e339048fcc6b327bd6be6c7534aeeb6b78a7f9409d4d0 60472 bind9_9.18.16-1.debian.tar.xz 007cd37d9823d3b4258038d5dcb6df750906beda395aca4689239a5f5ba7c81c 15340 bind9_9.18.16-1_amd64.buildinfo Files: 348113234eed456b22bc9aec9f39684a 3293 net optional bind9_9.18.16-1.dsc c75648e02db965770fdf76fb828796a0 5462456 net optional bind9_9.18.16.orig.tar.xz fd85495275fbce1e521b6e358126bbb6 833 net optional bind9_9.18.16.orig.tar.xz.asc 20cf467526b5c8025d2be179f86b8600 60472 net optional bind9_9.18.16-1.debian.tar.xz a3bd8746d79798e3ad76bb90e2296ce7 15340 net optional bind9_9.18.16-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmSTThlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcIMvQ/9EGGFR/vcHtBNNGd33gp7Su0SWAnOTMWfPA9W7ulzLeUWiyCyaVKeTyxT y0qSdsW5Xm1NheFxZyYHyAXcGCIyK/XMyR6embxoawLlOLkQbts70DJSYTU6XPSi uyYXyArotSwaf9Kn0mBsbVwu1MsefUv5lS5gzgZDmw9QT13uw5MpC+PIzaVc8gGP S0qTG3+3HmOGRx3PdCNYBuUuGnQSSN14QujZx1TACd6LsVIILSNK1gtcGiEJ3UEe hHZ5wgQAyW/9/omsISwxce8Kt9s8ukSiY2b89JYaVxPput6POGKh5h1HjlxnF2zD LfCgiISV2rSSQD4p1XOSXCHQbHw2iqElOyW/Pi0BtrWcfeCzxjILLJXu8iGlE7pU xZwMX2F1pD/nXDRbEH2NR7stABnwr8+ahua/JkjX2QFERgjhqj1utAGSdCUPHbkX SN67Kfxn9M8pjep2Qbl1Q335+Qz16PVjzEt7GqOWsMLKv7whUDdnhfx+9jR1X9SR Xa25VmQ8f8tEt+fRUZFj1yCuPTdWUg3XWCsdaLCHj6MEtJqh4HdLqynMFPgt0Ykc Z+ASWkaU+fz+nmhMACoeONaUBDSTwCGQL4BmU5YONrUeTRi7U6l8fyAe0B4CIIOk DfvjPhPJQjhuAZI/VX/L73Jck0FUzZDgsJ9PAYLy8coyctYmI+o= =Jlrx -----END PGP SIGNATURE-----