Your message dated Fri, 25 Nov 2022 23:54:32 +0100
with message-id <y4fhqoj1j7rfq...@fliwatuet.svr02.mucip.net>
and subject line Closing fixed bugs
has caused the Debian Bug report #905743,
regarding bind9: CVE-2018-5740
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
905743: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905743
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: bind9
Version: 1:9.10.3.dfsg.P4-12.3+deb9u4
Severity: important

Dear Maintainer,


https://kb.isc.org/article/AA-01639/0 worries me a lot.
I don't think not using deny-answer-aliases is really an option,
as this would lead to other security issues.


Regards,
Rob


-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-7-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages bind9 depends on:
ii  adduser                3.115
ii  bind9utils             1:9.10.3.dfsg.P4-12.3+deb9u4
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers    1.48
ii  libbind9-140           1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libc6                  2.24-11+deb9u3
ii  libcap2                1:2.25-1
ii  libcomerr2             1.43.4-2
ii  libdns162              1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libgeoip1              1.6.9-4
ii  libgssapi-krb5-2       1.15-1+deb9u1
ii  libirs141              1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libisc160              1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libisccc140            1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libisccfg140           1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libk5crypto3           1.15-1+deb9u1
ii  libkrb5-3              1.15-1+deb9u1
ii  liblwres141            1:9.10.3.dfsg.P4-12.3+deb9u4
ii  libssl1.0.2            1.0.2l-2+deb9u3
ii  libxml2                2.9.4+dfsg1-2.2+deb9u2
ii  lsb-base               9.20161125
ii  net-tools              1.60+git20161116.90da8a0-1
ii  netbase                5.4

bind9 recommends no packages.

Versions of packages bind9 suggests:
ii  bind9-doc   1:9.10.3.dfsg.P4-12.3+deb9u4
ii  dnsutils    1:9.10.3.dfsg.P4-12.3+deb9u4
pn  resolvconf  <none>
pn  ufw         <none>

-- Configuration Files:
/etc/bind/db.root changed [not included]
/etc/bind/named.conf changed [not included]

-- debconf information:
  bind9/start-as-user: bind
  bind9/different-configuration-file:
  bind9/run-resolvconf: false

--- End Message ---
--- Begin Message ---
Closing bugs that have already been fixed in stable or unstable

Attachment: signature.asc
Description: PGP signature


--- End Message ---

Reply via email to