Debian-LTS alert DLA-645-1 (bind9)

From:
    	     
 
Thorsten Alteholz <debian@alteholz.de> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 645-1] bind9 security update 
Date:
    	     
 
Wed, 5 Oct 2016 19:44:33 +0200 (CEST)
Message-ID:
    	     
 
<alpine.DEB.2.02.1610051942360.26991@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : bind9
Version        : 1:9.8.4.dfsg.P1-6+nmu2+deb7u11
CVE ID         : CVE-2016-2775 CVE-2016-2776
Debian Bug     : 831796 839010

CVE-2016-2775

     lwresd crash with long query name
     Backport of upstream commit 38cc2d14e218e536e0102fa70deef99461354232.

CVE-2016-2776

     assertion failure due to unspecified crafted query
     Fix based on 43139-9-9.patch from ISC.

For Debian 7 "Wheezy", these problems have been fixed in version
1:9.8.4.dfsg.P1-6+nmu2+deb7u11.

We recommend that you upgrade your bind9 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=7+ly
-----END PGP SIGNATURE-----