Format: 1.8
Date: Tue, 09 Apr 2024 14:28:37 -0700
Source: bind9
Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils
Built-For-Profiles: noudeb
Architecture: s390x
Version: 1:9.18.24-0ubuntu0.23.10.1~ppa1
Distribution: mantic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-s390x-019.buildd>
Changed-By: Lena Voytek <lena.voytek@canonical.com>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Launchpad-Bugs-Fixed: 2040459
Changes:
 bind9 (1:9.18.24-0ubuntu0.23.10.1~ppa1) mantic; urgency=medium
 .
   * New upstream version 9.18.24 (LP: #2040459)
     - Updates:
       + Mark use of AES as the DNS COOKIE algorithm as depricated.
       + Mark resolver-nonbackoff-tries and resolver-retry-interval statements
         as depricated.
       + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and
         2801:1b8:10::b.
       + Mark dnssec-must-be-secure option as deprecated.
       + Honor nsupdate -v option for SOA queries by sending both the UPDATE
         request and the initial query over TCP.
       + Reduce memory consumption through dedicated jemalloc memory arenas.
     - Bug fixes:
       + Fix accidental truncation to 32 bit of statistics channel counters.
       + Do not schedule unsigned versions of inline-signed zones containing
         DNSSEC records for resigning.
       + Take local authoritive data into account when looking up stale data
         from the cache.
       + Fix assertion failure when lock-file used at the same time as named -X.
       + Fix lockfile removal issue when starting named 3+ times.
       + Fix validation of If-Modified-Since header in statistics channel for
         its length.
       + Add Content-Length header bounds check to avoid integer overflow.
       + Fix memory leaks from OpenSSL error stack.
       + Fix SERVFAIL responses after introduction of krb5-subdomain-self-rhs
         and ms-subdomain-self-rhs UPDATE policies.
       + Fix accidental disable of stale-refresh-time feature on rndc flush.
       + Fix possible DNS message corruption from partial writes in TLS DNS.
     - See https://bind9.readthedocs.io/en/v9.18.24/notes.html for additional
       information.
   * Remove CVE patches fixed upstream:
     - CVE-2023-3341.patch
     - CVE-2023-4236.patch
     [ Fixed in 9.18.19 ]
     - 0001-CVE-2023-4408.patch
     - 0002-CVE-2023-5517.patch
     - 0003-CVE-2023-5679.patch
     - 0004-CVE-2023-50387-CVE-2023-50868.patch
     [ Fixed in 9.18.24 ]
Checksums-Sha1:
 0fe79ba321a956defd11dd82c0540400cff8b225 277224 bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 51d94d5eae47df8178ba4af5adccba0cafac6f6d 175248 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 cc8efd4f7bca90ca1bbaf9f871f887cab3b0ee57 64056 bind9-host_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 3bd6b8bf73e7a4b2be917771129c3f87644cd52f 1231496 bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 93edd6a5cc93e5de3b26f678ac64659a3051affd 177856 bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 9a81e8e3e50e397c257361779d9d15fa8bd2afcf 8901 bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.buildinfo
 54649708016521e52c7b6ef4ee174a56dd6d5403 276846 bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
Checksums-Sha256:
 400614975337b3c933162e7f17851cc52b24c92efc648a0343ae51290b2cb31c 277224 bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 e24fe0a2e1810eaf2dc997b638dc1dc0cc1e8fc915b2879a5633c6be09d3be1f 175248 bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 7a850103a932d329f0e41dfff4593545042c7895eb9371b838cfaace18bba4fb 64056 bind9-host_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 7d5cb145ef6672832448e4efdda87b88e03ddef3f4bcb344ef87bcf750ce30ed 1231496 bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 2d6c6abdb8aa6f8c1895047bdfbf5b9a80a2e80dcb64a33a1574e530ccc1c6fc 177856 bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 5c64141cd1557d427f7120cb4b1e8d9c31f386a087de4a49755fc7c80d1b76a9 8901 bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.buildinfo
 30f7da98d4d06a5cf0e0101e3daf77a682d5e06fbc62f6afded56629e9c377ce 276846 bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
Files:
 b9e05934b2fc5eaddacaeade6ea701d2 277224 devel optional bind9-dev_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 37554cfbba59c57405d730060990dd87 175248 net standard bind9-dnsutils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 4d0ec141f581df83285a372deb397ffc 64056 net standard bind9-host_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 348a56b3ab1d5d95338623c9c4fc2521 1231496 libs standard bind9-libs_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 77bc85c2d62e3dbf11867b8086dff124 177856 net optional bind9-utils_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
 1f4d5ad2a9703a8e0c133963e6388016 8901 net optional bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.buildinfo
 1aaa2645a74ae4320f0f7fa40a6b4eda 276846 net optional bind9_9.18.24-0ubuntu0.23.10.1~ppa1_s390x.deb
Original-Maintainer: Debian DNS Team <team+dns@tracker.debian.org>