[ubuntu/jammy-proposed] bind9 1:9.18.0-2ubuntu1 (Accepted)

[Athos Ribeiro]

bind9 (1:9.18.0-2ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946833). Remaining changes:
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler (universe packages)
      + d/dnsutils.install: don't install dnstap
      + d/libdns1104.symbols: don't include dnstap symbols
      + d/rules: don't build dnstap nor install dnstap.proto
    - Add back apport:
      + d/bind9.apport: add back old bind9 apport hook, but without calling
        attach_conffiles() since that is already done by apport itself, with
        confirmation from the user.
      + d/control, d/rules: build-depends on dh-apport and use it
    - d/NEWS: mention some of the bigger changes in 9.16.0 packaging
    - d/bind9.named.service: use systemd Type=forking to signal daemon init.
      This fixes a regression of #900788 where services whose startup depend
      on name resolutions may fail due to bind9 not being ready (LP #1899902).
  * Dropped Changes:
    - SECURITY UPDATE: resolver performance degradation via lame cache abuse
      + debian/patches/CVE-2021-25219.patch: disable lame cache in
        bin/named/config.c, bin/named/server.c, lib/dns/resolver.c.
      + CVE-2021-25219
      [ Fixed in 9.17.19 ]
  * New Changes:
    - d/control: remove optional libjemalloc-dev Build-Depends as it is not in
      main.
    - d/NEWS: mention some of the relevant changes in 9.18.0 packaging
      or functionality that may affect usability.

Date: Mon, 14 Feb 2022 17:40:31 -0300
Changed-By: Athos Ribeiro <athos.ribeiro at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.0-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 14 Feb 2022 17:40:31 -0300
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.0-2ubuntu1
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Athos Ribeiro <athos.ribeiro at canonical.com>
Launchpad-Bugs-Fixed: 1946833
Changes:
 bind9 (1:9.18.0-2ubuntu1) jammy; urgency=medium
 .
   * Merge with Debian unstable (LP: #1946833). Remaining changes:
     - Don't build dnstap as it depends on universe packages:
       + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
         protobuf-c-compiler (universe packages)
       + d/dnsutils.install: don't install dnstap
       + d/libdns1104.symbols: don't include dnstap symbols
       + d/rules: don't build dnstap nor install dnstap.proto
     - Add back apport:
       + d/bind9.apport: add back old bind9 apport hook, but without calling
         attach_conffiles() since that is already done by apport itself, with
         confirmation from the user.
       + d/control, d/rules: build-depends on dh-apport and use it
     - d/NEWS: mention some of the bigger changes in 9.16.0 packaging
     - d/bind9.named.service: use systemd Type=forking to signal daemon init.
       This fixes a regression of #900788 where services whose startup depend
       on name resolutions may fail due to bind9 not being ready (LP #1899902).
   * Dropped Changes:
     - SECURITY UPDATE: resolver performance degradation via lame cache abuse
       + debian/patches/CVE-2021-25219.patch: disable lame cache in
         bin/named/config.c, bin/named/server.c, lib/dns/resolver.c.
       + CVE-2021-25219
       [ Fixed in 9.17.19 ]
   * New Changes:
     - d/control: remove optional libjemalloc-dev Build-Depends as it is not in
       main.
     - d/NEWS: mention some of the relevant changes in 9.18.0 packaging
       or functionality that may affect usability.
Checksums-Sha1:
 bad0c82638710d6f6a7ac041612ae70f3578ab04 2943 bind9_9.18.0-2ubuntu1.dsc
 88eaca1fa7c0ca445574efc16cae1358e1ae0b69 5292320 bind9_9.18.0.orig.tar.xz
 98375192f203d4275008cb472308f0f80f77e62b 87580 bind9_9.18.0-2ubuntu1.debian.tar.xz
 af53e2b6c01f08b11cca85b253ddbb20adb7d335 8188 bind9_9.18.0-2ubuntu1_source.buildinfo
Checksums-Sha256:
 ad917e56f9a960c38eaa00e7721d01203f1edac3c8f4b83f91d0499d585cfb6d 2943 bind9_9.18.0-2ubuntu1.dsc
 56525bf5caf01fd8fd9d90910880cc0f8a90a27a97d169187d651d4ecf0c411c 5292320 bind9_9.18.0.orig.tar.xz
 3d69a3e792bd2eae259c6482822be75d3de96ddee962957e98f159eb40c3d817 87580 bind9_9.18.0-2ubuntu1.debian.tar.xz
 64d45de62ea12052f34ad338c06d643ce69069355a713143348790b217655878 8188 bind9_9.18.0-2ubuntu1_source.buildinfo
Files:
 f9eca1efcbc9c41497f81f934f30f893 2943 net optional bind9_9.18.0-2ubuntu1.dsc
 0e6fe85e3f2d252f5cec9cb98e82bc15 5292320 net optional bind9_9.18.0.orig.tar.xz
 94a51781d4a7efe9adc97286f56170bd 87580 net optional bind9_9.18.0-2ubuntu1.debian.tar.xz
 469cf268985fa4b67bb9a47e8bc50d34 8188 net optional bind9_9.18.0-2ubuntu1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/bind9
Vcs-Git-Commit: 916f04dc1e3aee4f6aa770214a5dc9867a98426b
Vcs-Git-Ref: refs/heads/merge-lp1946833-jammy