-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 12 Feb 2024 17:25:59 +0100
Source: bind9
Binary: bind9-doc bind9utils dnsutils
Architecture: all
Version: 1:9.16.48-1
Distribution: bullseye-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9-doc  - Documentation for BIND 9
 bind9utils - Transitional package for bind9-utils
 dnsutils   - Transitional package for bind9-dnsutils
Changes:
 bind9 (1:9.16.48-1) bullseye-security; urgency=high
 .
   * New upstream version 9.16.48
    - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU
      load
    - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion
      failure when "nxdomain-redirect" is enabled
    - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an
      assertion failure during recursive resolution
    - CVE-2023-6516: Specific recursive query patterns may lead to an
      out-of-memory condition
    - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator
    - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust
      CPU resources
   * Update patches from debian/9.16 branch
    - Disable treat-warnings-as-errors in sphinx-build
    - Remove the reference to OPTIONS.md - it breaks build on Debian
      stretch
Checksums-Sha1:
 a2075ad82b637aad04fe957c50b32e52ecd75254 5152244 bind9-doc_9.16.48-1_all.deb
 c2bce9838e5b8a8247f31131e53eb1bae568651b 11525 bind9_9.16.48-1_all-buildd.buildinfo
 afcf230875273a1a2baef6eb5d3de91ff35159a3 269468 bind9utils_9.16.48-1_all.deb
 8c48420e7c2176f2cfbe25071ded6baddadff9e8 269472 dnsutils_9.16.48-1_all.deb
Checksums-Sha256:
 42d208eec81c5ba073d4501ad0d93bfe9639548e2af8f9735875a091e4f8e313 5152244 bind9-doc_9.16.48-1_all.deb
 084c128d9f1e7d2a5530255c1a5e1dc9b274b259fa7edb1e3d1d2e848a828843 11525 bind9_9.16.48-1_all-buildd.buildinfo
 f1fbc2971d869517da746038987ad01d20b746bd837773c490744f4491b3f6a4 269468 bind9utils_9.16.48-1_all.deb
 a1c52b1a5da7cfb572247362888018d0229f1f799888ddfc81bdc3a6b3a4d92d 269472 dnsutils_9.16.48-1_all.deb
Files:
 1d42f02aa7c674e4d995b8295f498d16 5152244 doc optional bind9-doc_9.16.48-1_all.deb
 810399a2bab6d04bdbdcec12e9a68c52 11525 net optional bind9_9.16.48-1_all-buildd.buildinfo
 c584583d190bc62a35d84ba5696f7490 269468 oldlibs optional bind9utils_9.16.48-1_all.deb
 2c02fec41a992679e80c886e772a6252 269472 oldlibs optional dnsutils_9.16.48-1_all.deb

-----BEGIN PGP SIGNATURE-----
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=AkbI
-----END PGP SIGNATURE-----