-----------------------------------------------------------------------
Debian Stable Updates Announcement SUA 124-1 http://www.debian.org
debian-release@lists.debian.org Ondřej Surý
September 9th, 2017
-----------------------------------------------------------------------
Package : bind9
Version : 1:9.10.3.dfsg.P4-12.3+deb9u3 [stretch]
1:9.9.5.dfsg-9+deb8u14 [jessie]
Importance : medium
The keys used to authenticate the root DNS zone for DNSSEC are in the
process of being updated. Currently two such keys are in use, but from
October 11th only the newer key will be in use.
Further information regarding the key change process can be found at
https://www.icann.org/resources/pages/ksk-rollover
bind9 is a DNS resolver which can use DNSSEC in order to validate the
integrity of responses to DNS queries. This update adds support for the
newer key to bind9, ensuring that DNSSEC validation of the root zones
will continue to operate as expected after the key rollover.
If you use bind9 with DNSSEC validation, we strongly recommend that you
install this update.
Upgrade Instructions
--------------------
You can get the updated packages by adding the stable-updates archive
for your distribution to your /etc/apt/sources.list:
deb http://ftp.debian.org/debian stretch-updates main
deb-src http://ftp.debian.org/debian stretch-updates main
or
deb http://ftp.debian.org/debian jessie-updates main
deb-src http://ftp.debian.org/debian jessie-updates main
You can also use any of the Debian archive mirrors. See
http://www.debian.org/mirrors/list for the full list of mirrors.
For further information about stable-updates, please refer to
http://lists.debian.org/debian-devel-announce/2011/03/msg00010.html
If you encounter any issues, please don't hesitate to get in touch with
the Debian Release Team at debian-release@lists.debian.orgAttachment:
signature.asc
Description: This is a digitally signed message part