-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 12 Feb 2024 17:25:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.16.48-1
Distribution: bullseye-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.16.48-1) bullseye-security; urgency=high
 .
   * New upstream version 9.16.48
    - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU
      load
    - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion
      failure when "nxdomain-redirect" is enabled
    - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an
      assertion failure during recursive resolution
    - CVE-2023-6516: Specific recursive query patterns may lead to an
      out-of-memory condition
    - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
    - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust
      CPU resources
   * Update patches from debian/9.16 branch
    - Disable treat-warnings-as-errors in sphinx-build
    - Remove the reference to OPTIONS.md - it breaks build on Debian
      stretch
Checksums-Sha1:
 f70151d73fcf906df9c5b5410346473545811bf9 517544 bind9-dbgsym_9.16.48-1_amd64.deb
 7f4b1de455ae0457c939acde00305d7099ae5728 1788464 bind9-dev_9.16.48-1_amd64.deb
 8efc06b428bd3f69cc8c4ce2ae87490c6893878f 287528 bind9-dnsutils-dbgsym_9.16.48-1_amd64.deb
 1ae416b5d574e20ceb09b8cddaf313450206f01f 406700 bind9-dnsutils_9.16.48-1_amd64.deb
 7db8ad3501d28567f6c0c62c21ade574ea24845f 81688 bind9-host-dbgsym_9.16.48-1_amd64.deb
 368d46a3d77510381d9ff7f2b8d3bf06699d1e37 311060 bind9-host_9.16.48-1_amd64.deb
 5e589f61aab1fcbf02fc0cdafabb5d7019c5e1fc 3445728 bind9-libs-dbgsym_9.16.48-1_amd64.deb
 5e537e9077c575835cee8ebaffaf239337f2151c 1430592 bind9-libs_9.16.48-1_amd64.deb
 07cfe77ffba350bc7182e350ff042c10b4d4f25f 265548 bind9-utils-dbgsym_9.16.48-1_amd64.deb
 759a9dc625b7d95a1ee3b74c601d3795e40397c7 438004 bind9-utils_9.16.48-1_amd64.deb
 b68e6af1e369d6e090ecc35282442f5bef5a7287 10661 bind9_9.16.48-1_amd64-buildd.buildinfo
 5294d33900c59a5a2b2d609865ea8a7b235bf222 498820 bind9_9.16.48-1_amd64.deb
Checksums-Sha256:
 98f0d4a3fda992e5efc027068cce6309c462db426f4bacec49254a7909b559d0 517544 bind9-dbgsym_9.16.48-1_amd64.deb
 fd179ee57b928c6f052864ee6bcdfe8ad58000e72341ec41331a20d31f4947e5 1788464 bind9-dev_9.16.48-1_amd64.deb
 9a85a5c4b1135baaf3a4c056de0d1217bf6320afef3a24b50b9703e0a7205544 287528 bind9-dnsutils-dbgsym_9.16.48-1_amd64.deb
 bb468421fba0d49c1ab2f8ad23b2bf7f61a3b9a3ba86a4e33398b566c4cf6cc9 406700 bind9-dnsutils_9.16.48-1_amd64.deb
 82e156906bddaec29eaf488fe4f542ab55036d1d7296fb6dafda06ea90528a08 81688 bind9-host-dbgsym_9.16.48-1_amd64.deb
 04344bac270166c505f4bfc561921977b3824e346b5331bcf05b93df5dfe502a 311060 bind9-host_9.16.48-1_amd64.deb
 ff8ad8c821681c3f715e9dc48f26c7624c02f5716ed858d50a61fb6156990d21 3445728 bind9-libs-dbgsym_9.16.48-1_amd64.deb
 c495d676cb582e509b462d6c3be7b0feaa25399ef07a5fa6fcd6885ee1a53619 1430592 bind9-libs_9.16.48-1_amd64.deb
 b338f173095309a6e91c8582c8adb3ed48d87e87b9a4b7802f1d649f25be4d3d 265548 bind9-utils-dbgsym_9.16.48-1_amd64.deb
 991987c44d5974ea07531e2943c9a0694721ed0b12e2e1ee60383079127f3092 438004 bind9-utils_9.16.48-1_amd64.deb
 482b582a24b5b6ac7946e159e23bb84f25299b8771512616e553d5cd7a177f2a 10661 bind9_9.16.48-1_amd64-buildd.buildinfo
 ad64a6d2fc1cf07e6cc659ee8802ecda9ec25abc6e4303f1ac7b7bedfaeb5b74 498820 bind9_9.16.48-1_amd64.deb
Files:
 16aaa5171198d50a77f0d5ebf0aef0be 517544 debug optional bind9-dbgsym_9.16.48-1_amd64.deb
 c0a90f9e569d202591841e3887f6972e 1788464 devel optional bind9-dev_9.16.48-1_amd64.deb
 416f1d406c89b33de8b4785a76f0f1cd 287528 debug optional bind9-dnsutils-dbgsym_9.16.48-1_amd64.deb
 2940c592f7f3f575a55811c77f4e270d 406700 net standard bind9-dnsutils_9.16.48-1_amd64.deb
 50e2c9645099f2b579a4a26efa30202b 81688 debug optional bind9-host-dbgsym_9.16.48-1_amd64.deb
 3ca778cb722ce2bb1d6a92d503b4db82 311060 net standard bind9-host_9.16.48-1_amd64.deb
 d69ab2c4d4e9bc89c4d014b038d0578f 3445728 debug optional bind9-libs-dbgsym_9.16.48-1_amd64.deb
 3c18575877546c0d717d7f2d53dad551 1430592 libs standard bind9-libs_9.16.48-1_amd64.deb
 5514c37c7be4f7106b4f2612abeb2e50 265548 debug optional bind9-utils-dbgsym_9.16.48-1_amd64.deb
 39025722c21bf9154647be2e09730c29 438004 net optional bind9-utils_9.16.48-1_amd64.deb
 4423e956af1b60af20f20cbeb9d0ba9b 10661 net optional bind9_9.16.48-1_amd64-buildd.buildinfo
 ed78c5b81660d90a66c06a168ecae1ba 498820 net optional bind9_9.16.48-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=belA
-----END PGP SIGNATURE-----