-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Jul 2024 17:22:50 +0200 Source: bind9 Architecture: source Version: 1:9.18.28-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian DNS Team Changed-By: Ondřej Surý Changes: bind9 (1:9.18.28-1~deb12u1) bookworm-security; urgency=high . * New upstream version 9.18.28 - CVE-2024-0760: A flood of DNS messages over TCP may make the server unstable - CVE-2024-1737: BIND's database will be slow if a very large number of RRs exist at the same name - CVE-2024-1975: SIG(0) can be used to exhaust CPU resources - CVE-2024-4076: Assertion failure when serving both stale cache data and authoritative zone content Checksums-Sha1: aa2e2891678a85d9715218b50ba59ecc09c14c93 3081 bind9_9.18.28-1~deb12u1.dsc 409ea591b16c93e9518bc3b33b76f29f20498abb 5533340 bind9_9.18.28.orig.tar.xz 7e0b5f8062b0a16afc1eef8646216684da3744ee 60940 bind9_9.18.28-1~deb12u1.debian.tar.xz ebd5c752522c85f1587cfedb95bce51705019cbf 15532 bind9_9.18.28-1~deb12u1_amd64.buildinfo Checksums-Sha256: b38547c57d926d01d02277f72b034e2bb5cf301f9f60706096c3e2ea86d85c77 3081 bind9_9.18.28-1~deb12u1.dsc e7cce9a165f7b619eefc4832f0a8dc16b005d29e3890aed6008c506ea286a5e7 5533340 bind9_9.18.28.orig.tar.xz db1e53306698c913ea28dafd75ca82b0c714fb3df37bd56d9c6db3ec08e69dea 60940 bind9_9.18.28-1~deb12u1.debian.tar.xz 82ca30bbb206254c436f3639396c6ab3ab1aca4475e7b9090609d0a0f9e8e97e 15532 bind9_9.18.28-1~deb12u1_amd64.buildinfo Files: 381fa605480992fc332d0251e72516f5 3081 net optional bind9_9.18.28-1~deb12u1.dsc 8fc27fb04e6760aee166a05c6ffd19d5 5533340 net optional bind9_9.18.28.orig.tar.xz 3c60c59fff7f4eca343760d1604f28bc 60940 net optional bind9_9.18.28-1~deb12u1.debian.tar.xz ed5e47fd695c58ee04f7d519c9bd8d17 15532 net optional bind9_9.18.28-1~deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmaf5RlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcIOVRAArLg0dqhGRCwevmjW/kXN1NShqrcQ2NsfZMblN7PqgphUprquknfuyWiR mtv0bVAYOPeKTgu+XBPgvdXi5KAeFpk66LWc/HGQQk4grTpgc0II0lggAVC8Ih4X dW+ErOpeQHcfz/LpoRTqP32+BOKCjrewVaTmdlv6pTDSsd6s+kNrmcZUJUv7FUfj RJrMWztvfKbRw0Z+lDSWxpMbz7wn4xHT9wW24lExSSXxFWxwGJRlN2YQQcRBQKOs hswv5nDQ99Tqyrz6RCV1/6tw8HFj7U61uviinx1L0BUolD+9uramQ3wLzJ9NJAdM sHPm1YUhGW6z/xFyJdyJkSdngJ3HlFzS1UTC7JprNtH8BQZM/bSQe1QRHU/EJeRw brBxm9gfXuKksZAzxNUaqm+gngzqHfJsVm5R1slXh6jJrt+Y0cFbAGmMIMqNkAP8 cMz9kJPXiu9p1puFZ6CCO/ln0J4Km5gm+NcBurFxJ8f2XZEClBgw75b1z6ICHtvl kS6PKGKl2Nx8lFDRZ6LIRfZYX0zR+uNtMwAua5G7dSelbfgwP2k83DCJH6YvmsoY 5YIu1aEDwK49VBIAfZmdEJLzeE+KnwNDswG6XW5WJu1vNuF5ZttfV6zbKAeWzszv VwFDWg1+hCl/aq8Vs9o/5BfXI4v0m+1BSvjkbHVPdaWuh7IQjWo= =Qr/E -----END PGP SIGNATURE-----