SynopsisThe remote Debian host is missing a security-related update.
DescriptionIt was discovered that BIND, an implementation of the DNS protocol suite, does not properly check the result of an OpenSSL function which is used to verify DSA cryptographic signatures. As a result, incorrect DNS resource records in zones protected by DNSSEC could be accepted as genuine.
SolutionUpgrade the BIND packages.
For the stable distribution (etch), this problem has been fixed in version 9.3.4-2etch4.