Just released, including a security update: 8.8.4-20170709 Updates in 1 source package(s), 4 binary package(s): Source bind9, binaries: libdns-export100:amd64 libirs-export91:amd64 libisc-export95:amd64 libisccfg-export90:amd64 bind9 (1:9.9.5.dfsg-9+deb8u12) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add patch to fix CVE-2017-3042 and CVE-2017-3043 CVE-2017-3042: error in TSIG authentication can permit unauthorized zone transfers. An attacker may be able to circumvent TSIG authentication of AXFR and Notify requests. CVE-2017-3043: error in TSIG authentication can permit unauthorized dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0) signature for a dynamic update. -- Steve McIntyre <email@example.com> Sun, 09 Jul 2017 23:00:58 +0100 -- Steve McIntyre, Cambridge, UK. firstname.lastname@example.org We don't need no education. We don't need no thought control.
Description: PGP signature