Accepted bind9 1:9.16.15-1~bpo10+1 (source) into buster-backports->backports-policy, buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 12 May 2021 08:47:16 +0200
Source: bind9
Architecture: source
Version: 1:9.16.15-1~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Closes: 987741 987742 987743
Changes:
bind9 (1:9.16.15-1~bpo10+1) buster-backports; urgency=high
.
* Rebuild for buster-backports.
.
bind9 (1:9.16.15-1) unstable; urgency=high
.
* New upstream version 9.16.15 (Closes: #987741, #987742, #987743)
+ CVE-2021-25214: A malformed incoming IXFR transfer could trigger an
assertion failure in ``named``, causing it to quit abnormally.
+ CVE-2021-25215: ``named`` crashed when a DNAME record placed in the
ANSWER section during DNAME chasing turned out to be the final
answer to a client query.
+ CVE-2021-25216: When a server's configuration set the
``tkey-gssapi-keytab`` or ``tkey-gssapi-credential`` option, a
specially crafted GSS-TSIG query could cause a buffer overflow in
the ISC implementation of SPNEGO (a protocol enabling negotiation of
the security mechanism used for GSSAPI authentication).
* Add patches to implement I-D draft-hardaker-dnsop-nsec3-guidance
Checksums-Sha1:
6fc7db8c779a3a0b2421a339703719867eaa57f9 3163 bind9_9.16.15-1~bpo10+1.dsc
5d68bbd1ff452708d45f2d4ef832faa3a1690fc7 5025688 bind9_9.16.15.orig.tar.xz
4926e0c0f0f2b667cf021a1f857f97b6280c8d1c 833 bind9_9.16.15.orig.tar.xz.asc
b9059d7bb3f9cf2adc0c38ce95998af90cb48462 89704 bind9_9.16.15-1~bpo10+1.debian.tar.xz
f410fe64f7f021364c4880c8aa80892c7ff95d85 5856 bind9_9.16.15-1~bpo10+1_source.buildinfo
Checksums-Sha256:
3ad63bb5c1df950d309e07da285e8020d529e3d1b4cc5fde53c11a665b5167d6 3163 bind9_9.16.15-1~bpo10+1.dsc
98b6f432d878a7bf8f57eb7b3c28be27278cf6b9989154bfe6c81104b38e7839 5025688 bind9_9.16.15.orig.tar.xz
55628031d8c5697707e1f8ad3d8033f72ffb987cdc392d578ec4bc89c968822e 833 bind9_9.16.15.orig.tar.xz.asc
081e02b96646478e82b5ad40e9c025fbc355e823da62a96c0b08fae09f84fba3 89704 bind9_9.16.15-1~bpo10+1.debian.tar.xz
d7636be0ffc0242080d9ee2e47eca2ef60121b6dc82a7affba70da6d6ddfd6a0 5856 bind9_9.16.15-1~bpo10+1_source.buildinfo
Files:
e72394f42aac2c853965c8286aa28b61 3163 net optional bind9_9.16.15-1~bpo10+1.dsc
6c6e5bb21763161bc68665b8729b3630 5025688 net optional bind9_9.16.15.orig.tar.xz
a2e6a9234cd8726fd389e82dea656fec 833 net optional bind9_9.16.15.orig.tar.xz.asc
6088b75e6e8231cdc7f189449bc20205 89704 net optional bind9_9.16.15-1~bpo10+1.debian.tar.xz
1828aabbf68f758a90ac8b4ac4db949f 5856 net optional bind9_9.16.15-1~bpo10+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ohu6
-----END PGP SIGNATURE-----
Reply to: