bind9 1:9.11.3+dfsg-1ubuntu1.15 source package in Ubuntu
Changelog
bind9 (1:9.11.3+dfsg-1ubuntu1.15) bionic-security; urgency=medium
* SECURITY UPDATE: DoS via broken inbound incremental zone update (IXFR)
- debian/patches/CVE-2021-25214.patch: immediately reject the entire
transfer for certain RR in lib/dns/xfrin.c.
- CVE-2021-25214
* SECURITY UPDATE: assert via answering certain queries for DNAME records
- debian/patches/CVE-2021-25215.patch: fix assert checks in
lib/ns/query.c.
- CVE-2021-25215
* SECURITY UPDATE: overflow in BIND's GSSAPI security policy negotiation
- debian/rules: build with --disable-isc-spnego to disable internal
SPNEGO and use the one from the kerberos libraries.
- debian/libdns1100.symbols: removed internal SPNEGO symbols.
- CVE-2021-25216
-- Marc Deslauriers <email address hidden> Tue, 27 Apr 2021 07:16:20 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Bionic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- net
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| bind9_9.11.3+dfsg.orig.tar.gz | 6.9 MiB | 1ba0ab6ac21cb3e5cdf103f00b98a259a67b29dcd2bc116b8ae643a394a954a4 |
| bind9_9.11.3+dfsg-1ubuntu1.15.debian.tar.xz | 101.6 KiB | 49b23f3e0696918acaceec6dd7b5f41636ac0a21aa126f15a3fdef9f559410ea |
| bind9_9.11.3+dfsg-1ubuntu1.15.dsc | 3.8 KiB | 1fb2cf9c2a46454076969dd4fc6ad78c6a606806145e7f7b64243ed3a9c53d16 |
Available diffs
Binary packages built by this source
- bind9: Internet Domain Name Server
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package provides the server and related configuration files.
- bind9-dbgsym: debug symbols for bind9
- bind9-doc: Documentation for BIND
This package provides various documents that are useful for maintaining a
working BIND installation.
- bind9-host: DNS lookup utility (deprecated)
This package provides /usr/bin/host, a simple utility (bundled with the
BIND 9.X sources) which can be used for converting domain names to IP
addresses and the reverse.
.
This utility is deprecated, use dig or delv from the dnsutils package.
- bind9-host-dbgsym: debug symbols for bind9-host
- bind9utils: Utilities for BIND
This package provides various utilities that are useful for maintaining a
working BIND installation.
- bind9utils-dbgsym: debug symbols for bind9utils
- dnsutils: Clients provided with BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers various client programs related to DNS that are
derived from the BIND source tree.
.
- dig - query the DNS in various ways
- nslookup - the older way to do it
- nsupdate - perform dynamic updates (See RFC2136)
- dnsutils-dbgsym: debug symbols for dnsutils
- libbind-dev: Static Libraries and Headers used by BIND
This package delivers archive-style libraries, header files, and API man
pages for libbind, libdns, libisc, and liblwres. These are only needed
if you want to compile other packages that need more nameserver API than the
resolver code provided in libc.
- libbind-export-dev: Development files for the exported BIND libraries
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers development files for the exported BIND libraries.
- libbind9-160: BIND9 Shared Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libbind9 shared library used by BIND's daemons and
clients.
- libbind9-160-dbgsym: debug symbols for libbind9-160
- libdns-export1100: Exported DNS Shared Library
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the exported libdns shared library.
- libdns-export1100-dbgsym: debug symbols for libdns-export1100
- libdns-export1100-udeb: Exported DNS library for debian-installer
- libdns1100: DNS Shared Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libdns shared library used by BIND's daemons and
clients.
- libdns1100-dbgsym: debug symbols for libdns1100
- libirs-export160: Exported IRS Shared Library
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the exported libirs shared library.
- libirs-export160-dbgsym: debug symbols for libirs-export160
- libirs-export160-udeb: Exported IRS library for debian-installer
- libirs160: DNS Shared Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libirs shared library used by BIND's daemons and
clients.
- libirs160-dbgsym: debug symbols for libirs160
- libisc-export169: Exported ISC Shared Library
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the exported libisc shared library.
- libisc-export169-dbgsym: debug symbols for libisc-export169
- libisc-export169-udeb: Exported ISC library for debian-installer
- libisc169: ISC Shared Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libisc shared library used by BIND's daemons and
clients.
- libisc169-dbgsym: debug symbols for libisc169
- libisccc-export160: Command Channel Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libisccc shared library used by BIND's daemons
and clients, particularly rndc.
- libisccc-export160-dbgsym: debug symbols for libisccc-export160
- libisccc-export160-udeb: Command Channel Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libisccc shared library used by BIND's daemons
and clients, particularly rndc.
- libisccc160: Command Channel Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libisccc shared library used by BIND's daemons
and clients, particularly rndc.
- libisccc160-dbgsym: debug symbols for libisccc160
- libisccfg-export160: Exported ISC CFG Shared Library
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the exported libisccfg shared library.
- libisccfg-export160-dbgsym: debug symbols for libisccfg-export160
- libisccfg-export160-udeb: Exported ISC CFG library for debian-installer
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the exported libisccfg shared library.
- libisccfg160: Config File Handling Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the libisccfg shared library used by BIND's daemons
and clients to read and write ISC-style configuration files like named.conf
and rndc.conf.
- libisccfg160-dbgsym: debug symbols for libisccfg160
- liblwres160: Lightweight Resolver Library used by BIND
The Berkeley Internet Name Domain (BIND) implements an Internet domain
name server. BIND is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers the liblwres shared library used by BIND's daemons
and clients.
- liblwres160-dbgsym: debug symbols for liblwres160
