[ubuntu/cosmic-proposed] bind9 1:9.11.3+dfsg-1ubuntu2 (Accepted)

[Marc Deslauriers]

bind9 (1:9.11.3+dfsg-1ubuntu2) cosmic; urgency=medium

  * SECURITY UPDATE: improperly permits recursive query service
    - debian/patches/CVE-2018-5738.patch: fix configure_view_acl() handling
      in bin/named/server.c.
    - CVE-2018-5738

Date: Mon, 11 Jun 2018 09:41:51 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.11.3+dfsg-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 11 Jun 2018 09:41:51 -0400
Source: bind9
Binary: bind9 bind9utils bind9-doc bind9-host libbind-dev libbind9-160 libdns1100 libirs160 libisc169 liblwres160 libisccc160 libisccfg160 dnsutils libbind-export-dev libdns-export1100 libdns-export1100-udeb libirs-export160 libirs-export160-udeb libisc-export169 libisc-export169-udeb libisccc-export160 libisccc-export160-udeb libisccfg-export160 libisccfg-export160-udeb
Architecture: source
Version: 1:9.11.3+dfsg-1ubuntu2
Distribution: cosmic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 bind9      - Internet Domain Name Server
 bind9-doc  - Documentation for BIND
 bind9-host - DNS lookup utility (deprecated)
 bind9utils - Utilities for BIND
 dnsutils   - Clients provided with BIND
 libbind-dev - Static Libraries and Headers used by BIND
 libbind-export-dev - Development files for the exported BIND libraries
 libbind9-160 - BIND9 Shared Library used by BIND
 libdns-export1100 - Exported DNS Shared Library
 libdns-export1100-udeb - Exported DNS library for debian-installer (udeb)
 libdns1100 - DNS Shared Library used by BIND
 libirs-export160 - Exported IRS Shared Library
 libirs-export160-udeb - Exported IRS library for debian-installer (udeb)
 libirs160  - DNS Shared Library used by BIND
 libisc-export169 - Exported ISC Shared Library
 libisc-export169-udeb - Exported ISC library for debian-installer (udeb)
 libisc169  - ISC Shared Library used by BIND
 libisccc-export160 - Command Channel Library used by BIND
 libisccc-export160-udeb - Command Channel Library used by BIND (udeb)
 libisccc160 - Command Channel Library used by BIND
 libisccfg-export160 - Exported ISC CFG Shared Library
 libisccfg-export160-udeb - Exported ISC CFG library for debian-installer (udeb)
 libisccfg160 - Config File Handling Library used by BIND
 liblwres160 - Lightweight Resolver Library used by BIND
Changes:
 bind9 (1:9.11.3+dfsg-1ubuntu2) cosmic; urgency=medium
 .
   * SECURITY UPDATE: improperly permits recursive query service
     - debian/patches/CVE-2018-5738.patch: fix configure_view_acl() handling
       in bin/named/server.c.
     - CVE-2018-5738
Checksums-Sha1:
 2faf77c4b7d2ffe7ac652c8077300eeb03df4498 3916 bind9_9.11.3+dfsg-1ubuntu2.dsc
 eaf5968939284fed1a930c079e4d16e7222bedad 84036 bind9_9.11.3+dfsg-1ubuntu2.debian.tar.xz
 4310277bee1c4bbf23b7f9547058ddc326b17296 8994 bind9_9.11.3+dfsg-1ubuntu2_source.buildinfo
Checksums-Sha256:
 4ca94147ffa8d2aa7b89981ffd11b926e5e17799256796ed1c5703948d8918e2 3916 bind9_9.11.3+dfsg-1ubuntu2.dsc
 eac4a9a5220ced684dddef3670c7400a88966c1f71c3ebe3b022412e2ddfc1ad 84036 bind9_9.11.3+dfsg-1ubuntu2.debian.tar.xz
 842825d808100ca6c7831c8e9e341d8ebc0f03b7b7820bd3708845f454c5dbfe 8994 bind9_9.11.3+dfsg-1ubuntu2_source.buildinfo
Files:
 649dbba99716885eb4ecef509efcbe3d 3916 net optional bind9_9.11.3+dfsg-1ubuntu2.dsc
 23d3f5b1422edcf898b2859e92f139c3 84036 net optional bind9_9.11.3+dfsg-1ubuntu2.debian.tar.xz
 2f1c791077b1764ce1ae0b7da90f643e 8994 net optional bind9_9.11.3+dfsg-1ubuntu2_source.buildinfo
Original-Maintainer: Debian DNS Packaging <pkg-dns-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=hHIq
-----END PGP SIGNATURE-----