bind - denial of service

A vulnerability was discovered in BIND, a domain name server, whereby
a malicious name server could return authoritative negative responses
with a large TTL (time-to-live) value, thereby rendering a domain name
unreachable. A successful attack would require that a vulnerable BIND
instance submit a query to a malicious nameserver.

The bind9 package is not affected by this vulnerability.

For the current stable distribution (woody) this problem has been
fixed in version 1:8.3.3-2.0woody2.

For the unstable distribution (sid) this problem has been fixed in
version 1:8.4.3-1.

We recommend that you update your bind package.