-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1703-1                  security@debian.org
http://www.debian.org/security/                           Florian Weimer
January 12, 2009                      http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : bind9
Vulnerability  : interpretation conflict
Problem type   : remote
Debian-specific: no
CVE Id(s)      : CVE-2009-0025

It was discovered that BIND, an implementation of the DNS protocol
suite, does not properly check the result of an OpenSSL function which
is used to verify DSA cryptographic signatures.  As a result,
incorrect DNS resource records in zones protected by DNSSEC could be
accepted as genuine.

For the stable distribution (etch), this problem has been fixed in
version 9.3.4-2etch4.

For the unstable distribution (sid) and the testing distribution
(lenny), this problem will be fixed soon.

We recommend that you upgrade your BIND packages.

Upgrade instructions
- --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:

      Size/MD5 checksum:     1197 aa679c6e3106b422fa8de952556cc98e
      Size/MD5 checksum:   302859 12d089f391d6ac1a60e2a7b7b8c49f42
      Size/MD5 checksum:  4043577 198181d47c58a0a9c0265862cd5557b0

Architecture independent packages:

      Size/MD5 checksum:   187564 d3609a90363331288018fcdbba29a047

alpha architecture (DEC Alpha)

      Size/MD5 checksum:   226154 9adec25147fa3f2c85cef36c75148335
      Size/MD5 checksum:    96576 8ca632cac9163decf3c3dd24a373cc1b
      Size/MD5 checksum:   112678 273ba2508722416d3a7090153922c01e
      Size/MD5 checksum:    98226 eef74b1024e184fcea8a09f3800cf544
      Size/MD5 checksum:   190164 7eac73aae4fabfcfec8e9ecdcde45ff5
      Size/MD5 checksum:   322348 a5a5ea6ddbfaab6c8aeaf247d1c95874
      Size/MD5 checksum:   116594 61d56b68f75ef2693169176efa07512e
      Size/MD5 checksum:   564948 2827fe2266733bd0439ec8a22f167f25
      Size/MD5 checksum:   115860 0bb76803abf4d4799c7d2a64cd0af449
      Size/MD5 checksum:  1407512 95c550a74d02dbe81886f33499e249cc
      Size/MD5 checksum:   188806 420104ba72fe220ae0e7eff269fc086d

amd64 architecture (AMD x86_64 (AMD64))

      Size/MD5 checksum:   317636 d5841784354f118901f08f48a0e886e8
      Size/MD5 checksum:    96156 ce4d2168a261c296f6b60dc2c52a0ac0
      Size/MD5 checksum:   224438 460704b96b0b279f5f54346a02356f18
      Size/MD5 checksum:   190758 21f6b7f6dca59161cf1ba423b97a013e
      Size/MD5 checksum:   552562 4cdcf10ca2572737e63c6269e4d7ef6b
      Size/MD5 checksum:   117040 24dd657bb0b671a48fb1498948fdca41
      Size/MD5 checksum:   114878 02b9e3b075f638e91b92248e40f46cea
      Size/MD5 checksum:  1107812 587e9613589665f4ccecac2d1bb7c4e7
      Size/MD5 checksum:   187666 e359081c8f81d6380655bc563a844803
      Size/MD5 checksum:    96942 07f2b24d6f2815bb4fcad64a206d21b2
      Size/MD5 checksum:   111304 f85b9997f97e24dd1c972a6c25d3713f

arm architecture (ARM)

      Size/MD5 checksum:    95824 cd0dbfd76dc1a9a7ae66c3d17dd2c076
      Size/MD5 checksum:   187430 4d066c4c8fda96616654f0e5c5f269d4
      Size/MD5 checksum:   532276 f15132b68c23e3a2b7bcbb1d0c7e9e1c
      Size/MD5 checksum:   116148 821abd04e8459db5bd026dce7c5007c8
      Size/MD5 checksum:   112778 b0737de9602f9844b17f8c79c0c7bee9
      Size/MD5 checksum:   107920 93094487c134673000797d03326bcfbb
      Size/MD5 checksum:   183016 668007a69bc0bcb174fb3af007a06a2d
      Size/MD5 checksum:   217782 fe30c568a6f694e31f323c5a7c65a489
      Size/MD5 checksum:   311142 a5ad717d9c53e22fc559e2b846af6761
      Size/MD5 checksum:    95240 bec7ba6d11e71d4a5203ffd8775ce61b
      Size/MD5 checksum:  1074544 a8d33e799364caf2a1a6119ba980fb5c

hppa architecture (HP PA RISC)

      Size/MD5 checksum:    96486 780b5f6edcb2594c074faaacac84a506
      Size/MD5 checksum:   217580 f4eb031a7c5a6c4454d84cd784c218aa
      Size/MD5 checksum:   188274 b8428b8e5c42e5f809d9180196435023
      Size/MD5 checksum:   115708 144ebf381de71a09bca8bd0dd0899969
      Size/MD5 checksum:  1258938 60e891b0432a731536a921964a5ba3e7
      Size/MD5 checksum:   185524 291fd0feff440c39dcdfa77b19fb70dd
      Size/MD5 checksum:   314068 441b640e2d300524bf352d613833afdf
      Size/MD5 checksum:   543334 89560b776cd247e6dfbc37b5a8ad541d
      Size/MD5 checksum:   114236 452ab3e612e68e21df601d3a1f3016bc
      Size/MD5 checksum:    96668 749a3664788afdf253d40123630c913d
      Size/MD5 checksum:   113042 c77ab83bf8b702a0f221299f63f84275

i386 architecture (Intel ia32)

      Size/MD5 checksum:   110234 cb2d13c313d5061d6af864325b9b7d0d
      Size/MD5 checksum:    95040 b8d8c02291c6fa58cfc6405902c39ba0
      Size/MD5 checksum:   206548 05f6acbfc0982ed87a378e35f3ad8be9
      Size/MD5 checksum:   472778 22d8b1ea77e191686c5affab4c869240
      Size/MD5 checksum:   296242 86357a0f5353674fb5b73ddf97d8a242
      Size/MD5 checksum:   170214 163fdc7612a950d7a32b0992af767b23
      Size/MD5 checksum:   995236 a747c1d27a79515936517d301a534e07
      Size/MD5 checksum:   180794 4bc0c43e3454131453454d08d6029de4
      Size/MD5 checksum:    95042 7656f21f85e5489d595a5fc43627199b
      Size/MD5 checksum:   106106 6b5985e30d0536eb56dfd5b31b479b58
      Size/MD5 checksum:   113194 3ae945c6b46bda56b407e81bf285fad6

ia64 architecture (Intel ia64)

      Size/MD5 checksum:   117816 c06945e1506470a93158549c6e94ec80
      Size/MD5 checksum:   102474 4cd35b5a1cfb24b1fb156441fae565e9
      Size/MD5 checksum:  1584324 7e7b49e71bde1abc7fec8a6845b4e376
      Size/MD5 checksum:   216428 682aa4769f46a7dfb2b2bdaf7ec53dde
      Size/MD5 checksum:   127650 7206fa330fc8b115a95f8a20073b2683
      Size/MD5 checksum:   232106 e8a5ae82b88f1288ee91fb6879a38035
      Size/MD5 checksum:   393396 f6d1ec1bdd9b7d3bf0543c1f72184c5e
      Size/MD5 checksum:   100022 b080abf8bcf2f7d33944c0f5ab07d5db
      Size/MD5 checksum:   740278 684ee73762dc6a569e0ad5458cb39a63
      Size/MD5 checksum:   280944 434b3f2bf7b6eac8c8eadbc9ff71b88a
      Size/MD5 checksum:   125878 78c533671d65799444a6abeecb066102

mips architecture (MIPS (Big Endian))

      Size/MD5 checksum:    95048 1a1adcb72a4a988eb862dbfa70a05993
      Size/MD5 checksum:    94272 494f78dca4285c9784f92779d08516a0
      Size/MD5 checksum:   180574 d4bace2add3362896bdb17e794642d80
      Size/MD5 checksum:   211456 a317473e059e7670b6bb603a1fb532b2
      Size/MD5 checksum:   107968 9d86c2744569db8b9110c37be4de8aba
      Size/MD5 checksum:   110378 ab471c9ce1bb5a666413d00253c84c71
      Size/MD5 checksum:   491896 984d83789bb28f65d78130b5ffe58783
      Size/MD5 checksum:  1229560 6bae9ceb7a1a604f3a45c6df905fb2c8
      Size/MD5 checksum:   301540 084df4d5378ecb47eee2715a709005ef
      Size/MD5 checksum:   174080 29e62329993fe21bd2d412b659a3c220
      Size/MD5 checksum:   113348 c697f17d93aa609ef448edf740ca132a

mipsel architecture (MIPS (Little Endian))

      Size/MD5 checksum:    94150 0177400160d90cc2d662ca3a6688178e
      Size/MD5 checksum:   179698 310f99bbfb09db4f5ea5dff07b66bb63
      Size/MD5 checksum:   107218 c6b342a831948a7bf7801d46d38290c4
      Size/MD5 checksum:   113072 a27b2fe4ed7a345d258313ddc4f8346f
      Size/MD5 checksum:   110300 fb55450e28a08d2010b6e93e17b895ae
      Size/MD5 checksum:    94980 fb919221192449e70239f8991f01636b
      Size/MD5 checksum:   488288 8a089d802fd33105a3699e81480439c9
      Size/MD5 checksum:   210968 e5c3f788c66086cf7dcd26215a17a0f8
      Size/MD5 checksum:  1205504 260e40c7c015eca2a29612c725d8dd35
      Size/MD5 checksum:   174202 765ab3865c5a811dac4ac157e358a318
      Size/MD5 checksum:   299586 5f5e170a809055667994b7b76b0745a1

powerpc architecture (PowerPC)

      Size/MD5 checksum:   301350 a20ea0a911818a574701d68e29f3a2d1
      Size/MD5 checksum:   183376 c550243d0a3b401d2970a3973f656120
      Size/MD5 checksum:    96210 4116f47d69a3f83ce9022b306b1e6826
      Size/MD5 checksum:    96250 112e99a3eead25467bbb19895cc1eb3a
      Size/MD5 checksum:   173642 27ea1f6607f69941e718884d7b90b626
      Size/MD5 checksum:   109316 2158dc4b86fcc4b841776df478bafe2d
      Size/MD5 checksum:   206910 0f1968d555573c2fd230ffb92109e729
      Size/MD5 checksum:   488474 8fc4aa4a58958441f5cda10c83a24e05
      Size/MD5 checksum:  1167916 45c319145305d976c147af786f10f65a
      Size/MD5 checksum:   113906 a908806289ae42f4947557f82952d1c6
      Size/MD5 checksum:   112320 3bf75de9190d5c0012510fffacd4d980

s390 architecture (IBM S/390)

      Size/MD5 checksum:   114300 d5ab339f6f1505b6efe1caab0f91b4b0
      Size/MD5 checksum:    95710 23cc9069086681ec048ab64d04150b78
      Size/MD5 checksum:   196642 a135997ee33f30d6a9656563cf398ce1
      Size/MD5 checksum:   331958 3c560c643e1a60548ef5c4f567b3bbf6
      Size/MD5 checksum:   194782 bd4744eff4c131183da5c32fa9197b81
      Size/MD5 checksum:   118206 ddd094acc29a60f0ad39deb9ffcc3b53
      Size/MD5 checksum:   579538 6b6bb21b3ba7fcc3d0a96fb29e32b24e
      Size/MD5 checksum:  1137454 2b639e2c0c5e2bed36db838611141876
      Size/MD5 checksum:   116708 bab63e3ca69977baa87b07181ca5d1a4
      Size/MD5 checksum:    97832 5e3591957078a61702b71fdb2e24fdfc
      Size/MD5 checksum:   234026 dcf706e32b50ab97068af14126bb65bd

sparc architecture (Sun SPARC/UltraSPARC)

      Size/MD5 checksum:   183878 eee08db142d1871d4b692dbbcd15999a
      Size/MD5 checksum:   111224 261734b90a58046ad8ccd7ecf45629c3
      Size/MD5 checksum:   114294 b9d3bc689a758181f7a6068db8970fe5
      Size/MD5 checksum:  1122546 27f759bbc75c0da9c82cb26769d122c2
      Size/MD5 checksum:   175962 9a2373e0bb287efc7eb53697b91de147
      Size/MD5 checksum:   107672 348e2faed12a7a66d00c3d3eed509605
      Size/MD5 checksum:   210612 0f479f72667f152c97491331fd3a7ed8
      Size/MD5 checksum:   494486 69c393bf175654857ec2151d4ee47a4e
      Size/MD5 checksum:    95434 34974e2951421e842ea394dbba268bb2
      Size/MD5 checksum:    95384 429ec6ce3ab7f33b25e008277b542a03
      Size/MD5 checksum:   300876 a0a9ae53e63e2dbb54b6db43dfbb1c72


  These files will probably be moved into the stable distribution on
  its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp:  dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show ' and http://packages.debian.org/