-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 12 Feb 2024 17:04:19 +0100 Source: bind9 Architecture: source Version: 1:9.19.21-1 Distribution: unstable Urgency: high Maintainer: Debian DNS Team <team+dns@tracker.debian.org> Changed-By: Ondřej Surý <ondrej@debian.org> Closes: 1063448 Changes: bind9 (1:9.19.21-1) unstable; urgency=high . [ Helmut Grohne ] * Drop unused Build-Depends: python3. (Closes: #1063448) . [ Ondřej Surý ] * New upstream version 9.19.21 - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution - CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources Checksums-Sha1: 68539a446ae104a71ba12d22eb7b7e24db50691c 3041 bind9_9.19.21-1.dsc a3381e233404c291de727882d3a7f80ad917c54d 5704020 bind9_9.19.21.orig.tar.xz ab4f5129f9891b91bbbabff5bf294378bcc20a9f 59112 bind9_9.19.21-1.debian.tar.xz 19237d2f440a96c6d7c2f831139ac1fb2279c368 15906 bind9_9.19.21-1_amd64.buildinfo Checksums-Sha256: 4c02d8b69cbd1c07d550d464c18b51927390a9e2b21bfe02af9be50b9ef87355 3041 bind9_9.19.21-1.dsc 2b68a99b85f78c76cc87a4eac14cc510e04b64660f5036c04f5f3185b00a6e8c 5704020 bind9_9.19.21.orig.tar.xz af053b28def0bb4b41500359418283c4756b2b9e76b2cc44aa1afce3f4821ab1 59112 bind9_9.19.21-1.debian.tar.xz 468ca7794fda3b6eb4120c015d85d320e06afc9310a225c0516b68a45779c508 15906 bind9_9.19.21-1_amd64.buildinfo Files: a37ed99194a5a15ab1891f661a71352a 3041 net optional bind9_9.19.21-1.dsc 0d0cabccc9841cddc3721b4cf9c5c6e6 5704020 net optional bind9_9.19.21.orig.tar.xz 9614b6ad7ad5788b32a078e452dbf353 59112 net optional bind9_9.19.21-1.debian.tar.xz 34941ebd872a87433af4decf8860cbc9 15906 net optional bind9_9.19.21-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmXNI/9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcLZFw//Sl05pBBok86mF60fncarIu8SsEyqYwz43/VJvQaHPTJ5QZuR+m7pW7kN IsGRWv3/gRtdI109lcBgWafilV9sZJIrsVW5eTPdFC7SLzNysWzhaMlgAEkdFHDm VwZbZxVXHFt/0LE5BAruBqKY56AvzZdfVn0UeFWyIl9vmG8jm0I00jAOVMuyV5f3 LlZqweyAVkzSlG9wyCeUQEO+yag0S88FEVM0KJqgtDtbSL8uZoUjUr40Ho6udRkY KLnFFbTyT3T+3s1vD8yOT7U1O8fe0P2lchrzh5rGgnJ9q/fFMsXGFd2LVLNQKPFR 0jl3DzDIAXCi8rEa4csCSV7E30ZaYB7qiNjIOB5yk7FlDxM1Buu+eGrKZKq2tW1y Lg9YXPv/3vF/iY8NJM2dFLc1s+AK40DsRLq+MFyWKzeGL/pnabEDEVlgx4migx7r hgcj3gv8U3v+87UHFMHdKmhUTzc82mayWwTcr6D2Fuwh1ZNVnOO7YqMK/ODqv5+w 1Nf+CU2nZuNjMAG47eMQxvdO3oEbsb2iMGF7daHSRu6Vfse/Ss/2NlNdPR0MT7xp QgIcSgQUO39+SMqJ9nsWOUoUlzqC+8uJGmkE6KcQOs2cJLdN/PQK5NHUWU+4VayX o65rV85/4FcH3fIcgmS/9Be7Zsfw85/xtFzo+0hlbBLxEtdR02I= =NVDo -----END PGP SIGNATURE-----