Package: release.debian.org Severity: normal Tags: jessie User: release.debian....@packages.debian.org Usertags: pu
Dear release team, this is the dns-root-data update for DNSSEC Root Zone KSK-2017 (key tag 20326), that's needed for the packages that rely on dns-root-data for bootstrapping DNSSEC Trust Anchors. The root.hints has been updated to 2017072601 which should be update as well. I don't think the /usr/share/dns/root.hints is used anywhere in Debian, so it should be safe update. There will be another update after the former KSK has been removed from trust anchors (around January 2018 or maybe even earlier when the former KSK is removed from the RZ). It was suggested in a discussion with a security team that this should fasttrack via jessie-updates. Cheers, Ondrej -- System Information: Debian Release: 9.1 APT prefers stable APT policy: (990, 'stable'), (500, 'unstable-debug'), (500, 'stable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.4.0-83-generic (SMP w/8 CPU cores) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8), LANGUAGE=en_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
