A buffer overflow vulnerability was discovered in the SPNEGO
implementation affecting the GSSAPI security policy negotiation in BIND,
a DNS server implementation, which could result in denial of service
(daemon crash), or potentially the execution of arbitrary code.
For the stable distribution (buster), this problem has been fixed in
We recommend that you upgrade your bind9 packages.