-----------------------------------------------------------------------
Debian Stable Updates Announcement SUA 123-1 http://www.debian.org
debian-release@lists.debian.org Ondřej Surý
September 9th, 2017
-----------------------------------------------------------------------
Package : dns-root-data
Version : 2017072601~deb9u1 [stretch]
2017072601~deb8u1 [jessie]
Importance : medium
The keys used to authenticate the root DNS zone for DNSSEC are in the
process of being updated. Currently two such keys are in use, but from
October 11th only the newer key will be in use.
Further information regarding the key change process can be found at
https://www.icann.org/resources/pages/ksk-rollover
The dns-root-data package includes information about such keys,
allowing other packages to use them for validation. This update ensures
that the newer key is marked as valid, ensuring that records will still
be able to be validated using DNSSEC after the older key is no longer
being used.
If you use dns-root-data then we strongly recommend that you install
this update.
Upgrade Instructions
--------------------
You can get the updated packages by adding the stable-updates archive
for your distribution to your /etc/apt/sources.list:
deb http://ftp.debian.org/debian stretch-updates main
deb-src http://ftp.debian.org/debian stretch-updates main
or
deb http://ftp.debian.org/debian jessie-updates main
deb-src http://ftp.debian.org/debian jessie-updates main
You can also use any of the Debian archive mirrors. See
http://www.debian.org/mirrors/list for the full list of mirrors.
For further information about stable-updates, please refer to
http://lists.debian.org/debian-devel-announce/2011/03/msg00010.html
If you encounter any issues, please don't hesitate to get in touch with
the Debian Release Team at debian-release@lists.debian.orgAttachment:
signature.asc
Description: This is a digitally signed message part