Accepted bind9 1:9.16.22-1~deb11u1~bpo10+1 (source) into buster-backports->backports-policy, buster-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 12 Nov 2021 16:03:46 +0100
Source: bind9
Architecture: source
Version: 1:9.16.22-1~deb11u1~bpo10+1
Distribution: buster-backports
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Changes:
bind9 (1:9.16.22-1~deb11u1~bpo10+1) buster-backports; urgency=medium
.
* Rebuild for buster-backports.
* Cherry-pick upstream fix to build with Sphinx < 2.0.0
(only necessary for buster)
.
bind9 (1:9.16.22-1~deb11u1) bullseye-security; urgency=high
.
* New upstream version 9.16.22
+ CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
effectively disables the lame server cache, as it could previously be
abused by an attacker to significantly degrade resolver performance.
Checksums-Sha1:
b80f2deae4e096347bf8b9258611391b1015b8f8 2951 bind9_9.16.22-1~deb11u1~bpo10+1.dsc
0d56f6a88532363757534566598c48a9f7072bfa 5059000 bind9_9.16.22.orig.tar.xz
610d42d7a9220c0bb90964966bfb7097402a6aec 78944 bind9_9.16.22-1~deb11u1~bpo10+1.debian.tar.xz
88175118439048c425bb4fb9aada7495a5c02cfb 6363 bind9_9.16.22-1~deb11u1~bpo10+1_source.buildinfo
Checksums-Sha256:
f4e8297ea9a0b93a4649d8e60a0ed01a7925cc23099b298e762d9ada6b2e33ef 2951 bind9_9.16.22-1~deb11u1~bpo10+1.dsc
65e7b2af6479db346e2fc99bcfb6ec3240066468e09dbec575ebc7c57d994061 5059000 bind9_9.16.22.orig.tar.xz
497981fc12719515b9b3edc9613506ee711e98a4208ac878dbfc4194b7b314d1 78944 bind9_9.16.22-1~deb11u1~bpo10+1.debian.tar.xz
ee8701d99df6b94ea8cfcbd9ca7a7d4952d160bb68d930d0d941ba3c4cd1aa65 6363 bind9_9.16.22-1~deb11u1~bpo10+1_source.buildinfo
Files:
2a09043c3a963d9aced47a2c83266d4a 2951 net optional bind9_9.16.22-1~deb11u1~bpo10+1.dsc
6a45478b33c04c830d4263635d8cd137 5059000 net optional bind9_9.16.22.orig.tar.xz
2314730db9af32d5bce86fffe4e2f2cd 78944 net optional bind9_9.16.22-1~deb11u1~bpo10+1.debian.tar.xz
86da01902b759a8e148b5ec00ea76c01 6363 net optional bind9_9.16.22-1~deb11u1~bpo10+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=lrYs
-----END PGP SIGNATURE-----
Reply to: