Ubuntu
bind9 package

bind9 1:9.10.3.dfsg.P4-8ubuntu1.17 source package in Ubuntu

Changelog

bind9 (1:9.10.3.dfsg.P4-8ubuntu1.17) xenial-security; urgency=medium

  * SECURITY UPDATE: A truncated TSIG response can lead to an assertion
    failure
    - debian/patches/CVE-2020-8622.patch: move code in lib/dns/message.c.
    - CVE-2020-8622
  * SECURITY UPDATE: A flaw in native PKCS#11 code can lead to a remotely
    triggerable assertion failure
    - debian/patches/CVE-2020-8623.patch: add extra checks in
      lib/dns/pkcs11dh_link.c, lib/dns/pkcs11dsa_link.c,
      lib/dns/pkcs11rsa_link.c, lib/isc/include/pk11/internal.h,
      lib/isc/pk11.c.
    - CVE-2020-8623

 -- Marc Deslauriers <email address hidden>  Tue, 18 Aug 2020 08:18:25 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
bind9_9.10.3.dfsg.P4.orig.tar.gz 8.2 MiB 895077c868d06eea39c1526624f2278a3b51a3358b5aa50f48a0f1c16a7ab6e6
bind9_9.10.3.dfsg.P4-8ubuntu1.17.debian.tar.xz 103.6 KiB ca5d328899919672b286a07b9b14228172b9ba81f28e33de9a8a67fb5bcdcf68
bind9_9.10.3.dfsg.P4-8ubuntu1.17.dsc 3.8 KiB 18eb541f3ce21877d15d94f8cd3a71dccf21e1fd83058beab370eee83286799d

View changes file

Binary packages built by this source

bind9: Internet Domain Name Server

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package provides the server and related configuration files.

bind9-dbgsym: debug symbols for package bind9

 .
 .
 This package provides the server and related configuration files.

bind9-doc: Documentation for BIND

 This package provides various documents that are useful for maintaining a
 working BIND installation.

bind9-host: Version of 'host' bundled with BIND 9.X

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9-host-dbgsym: debug symbols for package bind9-host

 This package provides the 'host' program in the form that is bundled with
 the BIND 9.X sources.

bind9utils: Utilities for BIND

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

bind9utils-dbgsym: debug symbols for package bind9utils

 This package provides various utilities that are useful for maintaining a
 working BIND installation.

dnsutils: Clients provided with BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

dnsutils-dbgsym: debug symbols for package dnsutils

 .
 .
 This package delivers various client programs related to DNS that are
 derived from the BIND source tree.
 .
  - dig - query the DNS in various ways
  - nslookup - the older way to do it
  - nsupdate - perform dynamic updates (See RFC2136)

host: Transitional package

 This dummy package is provided for a smooth transition from the previous
 host package. It may safely be removed after installation.

libbind-dev: Static Libraries and Headers used by BIND

 This package delivers archive-style libraries, header files, and API man
 pages for libbind, libdns, libisc, and liblwres. These are only needed
 if you want to compile other packages that need more nameserver API than the
 resolver code provided in libc.

libbind-export-dev: Development files for the exported BIND libraries

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers development files for the exported BIND libraries.

libbind9-140: BIND9 Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libbind9-140-dbgsym: debug symbols for package libbind9-140

 .
 .
 This package delivers the libbind9 shared library used by BIND's daemons and
 clients.

libdns-export162: Exported DNS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libdns shared library.

libdns-export162-dbgsym: debug symbols for package libdns-export162

 .
 .
 This package delivers the exported libdns shared library.

libdns-export162-udeb: Exported DNS library for debian-installer
libdns-export162-udeb-dbgsym: debug symbols for package libdns-export162-udeb
libdns162: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libdns162-dbgsym: debug symbols for package libdns162

 .
 .
 This package delivers the libdns shared library used by BIND's daemons and
 clients.

libirs-export141: Exported IRS Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libirs shared library.

libirs-export141-dbgsym: debug symbols for package libirs-export141

 .
 .
 This package delivers the exported libirs shared library.

libirs-export141-udeb: Exported IRS library for debian-installer
libirs-export141-udeb-dbgsym: debug symbols for package libirs-export141-udeb
libirs141: DNS Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libirs141-dbgsym: debug symbols for package libirs141

 .
 .
 This package delivers the libirs shared library used by BIND's daemons and
 clients.

libisc-export160: Exported ISC Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisc shared library.

libisc-export160-dbgsym: debug symbols for package libisc-export160

 .
 .
 This package delivers the exported libisc shared library.

libisc-export160-udeb: Exported ISC library for debian-installer
libisc-export160-udeb-dbgsym: debug symbols for package libisc-export160-udeb
libisc160: ISC Shared Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisc160-dbgsym: debug symbols for package libisc160

 .
 .
 This package delivers the libisc shared library used by BIND's daemons and
 clients.

libisccc-export140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-dbgsym: debug symbols for package libisccc-export140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc-export140-udeb-dbgsym: debug symbols for package libisccc-export140-udeb

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140: Command Channel Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccc140-dbgsym: debug symbols for package libisccc140

 .
 .
 This package delivers the libisccc shared library used by BIND's daemons
 and clients, particularly rndc.

libisccfg-export140: Exported ISC CFG Shared Library

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-dbgsym: debug symbols for package libisccfg-export140

 .
 .
 This package delivers the exported libisccfg shared library.

libisccfg-export140-udeb: Exported ISC CFG library for debian-installer
libisccfg-export140-udeb-dbgsym: debug symbols for package libisccfg-export140-udeb
libisccfg140: Config File Handling Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

libisccfg140-dbgsym: debug symbols for package libisccfg140

 .
 .
 This package delivers the libisccfg shared library used by BIND's daemons
 and clients to read and write ISC-style configuration files like named.conf
 and rndc.conf.

liblwres141: Lightweight Resolver Library used by BIND

 The Berkeley Internet Name Domain (BIND) implements an Internet domain
 name server. BIND is the most widely-used name server software on the
 Internet, and is supported by the Internet Software Consortium, www.isc.org.
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

liblwres141-dbgsym: debug symbols for package liblwres141

 .
 .
 This package delivers the liblwres shared library used by BIND's daemons
 and clients.

lwresd: Lightweight Resolver Daemon

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.

lwresd-dbgsym: debug symbols for package lwresd

 lwresd is the daemon providing name lookup services to clients that use
 the BIND 9 lightweight resolver library. It is essentially a stripped-
 down, caching-only name server that answers queries using the BIND 9
 lightweight resolver protocol rather than the DNS protocol.