-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 12 Feb 2024 17:28:03 +0100
Source: bind9
Binary: bind9-doc bind9utils dnsutils
Architecture: all
Version: 1:9.18.24-1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9-doc  - Documentation for BIND 9
 bind9utils - Transitional package for bind9-utils
 dnsutils   - Transitional package for bind9-dnsutils
Changes:
 bind9 (1:9.18.24-1) bookworm-security; urgency=high
 .
   * New upstream version 9.18.24
    - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU
      load
    - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion
      failure when "nxdomain-redirect" is enabled
    - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an
      assertion failure during recursive resolution
    - CVE-2023-6516: Specific recursive query patterns may lead to an
      out-of-memory condition
    - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
    - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust
      CPU resources
Checksums-Sha1:
 343e9975efad84d126e9c00ad67ce33f033c52a6 3446260 bind9-doc_9.18.24-1_all.deb
 a9596e40a9512f23a69fba02d6082105ae302a95 11548 bind9_9.18.24-1_all-buildd.buildinfo
 a0bca32276aa6432b7faad0751d7ef0d6660c510 261144 bind9utils_9.18.24-1_all.deb
 b62ee293572197f946f4028de31c7707829b8094 261148 dnsutils_9.18.24-1_all.deb
Checksums-Sha256:
 6a147082644f4aa927a151ebeb0f491eaf3e7a7d8729b53724e80fe705754c27 3446260 bind9-doc_9.18.24-1_all.deb
 76796393694a575386e9d25c8008329387f262141d291d2ee480c9f9060cef35 11548 bind9_9.18.24-1_all-buildd.buildinfo
 34e7d9011079848408b0b12ffaec4b3d38a30ab52d13b6c7f387b3da9bcbd30c 261144 bind9utils_9.18.24-1_all.deb
 9be3273e336c155f7b59dd9f239eb864e37a26d7e42297405e30191e870be4c1 261148 dnsutils_9.18.24-1_all.deb
Files:
 7f9b1384e9e87fa817bf8ab8a46c3c59 3446260 doc optional bind9-doc_9.18.24-1_all.deb
 2579a69b18303bae2bc9df91f117c351 11548 net optional bind9_9.18.24-1_all-buildd.buildinfo
 c3ba9c71ef655619cfc9ef45ae8a7cf3 261144 oldlibs optional bind9utils_9.18.24-1_all.deb
 07085847625bab7b262a53c6f9a945e7 261148 oldlibs optional dnsutils_9.18.24-1_all.deb

-----BEGIN PGP SIGNATURE-----
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=pzZa
-----END PGP SIGNATURE-----