[ubuntu/jammy-proposed] bind9 1:9.18.12-0ubuntu0.22.04.1 (Accepted)

Lena Voytek lena.voytek at canonical.com
Fri Mar 17 17:20:32 UTC 2023 

bind9 (1:9.18.12-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream releases 9.18.2 - 9.18.12 (LP: #2003586)
    - Updates:
      + update-quota option
      + named -V shows supported cryptographic algorithms
      + Catalog Zones schema version 2 support in named
      + DNS error support Stale Answer and Stale NXDOMAIN Answer
      + Remote TLS certificate verification support
      + reusereport option
    - Bug Fixes Include:
      + Fix crash when using dig with +nssearch and +tcp (LP: #1258003)
      + Fix incomplete results using dig with +nssearch (LP: #1970252)
      + Fix loading of preinstalled plugins (LP: #2006972)
      + CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080,
        CVE-2022-38178, CVE-2022-3094, CVE-2022-3736, CVE-2022-3924,
        CVE-2022-1183
      + Fix thread safety in dns_dispatch
      + Fix ADB quota management in resolver
      + Fix Prohibited DNS error on allow-recursion
      + Fix crash when restarting server with active statschannel connection
      + Fix use after free for catalog zone processing
      + Fix leak of dns_keyfileio_t objects
      + Fix nslookup failure to use port option when record type ANY is used
      + Fix crash on dnssec-policy zone with NSEC3 and inline-signing turned on
      + Fix inheritance when setting remote server port
      + Fix assertion error when accessing statistics channel
      + Fix rndc dumpdb -expired for stuck cache
      + Fix check for other name servers after receiving FORMERR
      + Fix deletion of CDS after zone sign
      + Fix dighost query context management
      + Fix dig hanging due to IPv4 mapped IPv6 address
      + See https://bind9.readthedocs.io/en/v9_18_12/notes.html#notes-for-bind-9-18-12
        for additional bug fixes and information
  * Improve dep-8 test suite (LP: #2003584):
    - d/t/zonetest: Add dep8 test for checking the domain zone creation process
    - d/t/control: Add new test outline
  * d/bind9-doc.docs: Stop installing removed file doc/misc/options.active
  * Remove patches for bugs LP #1964400 and LP #1964686 fixed upstream:
    - lp1964400-lp1964686-Fix-an-issue-in-dig-when-retrying-with-the-next-serv
    - lp1964400-lp1964686-When-resending-a-UDP-request-insert-the-query-to-the
    - lp1964400-lp1964686-Add-digdelv-system-test-to-check-timed-out-result-fo
    - lp1964400-lp1964686-After-dig-request-errors-try-to-use-other-servers-wh
    - lp1964400-lp1964686-Add-digdelv-system-test-to-check-that-dig-tries-othe
    - lp1964400-lp1964686-Fix-dig-error-when-trying-the-next-server-after-a-TC
    - lp1964400-lp1964686-Add-various-dig-host-tests-for-TCP-UDP-socket-error-
  * Remove CVE patches fixed upstream:
    - debian/patches/CVE-2022-1183.patch
      [Included in upstream release 9.18.3]
    - debian/patches/CVE-2022-2795.patch
    - debian/patches/CVE-2022-2881.patch
    - debian/patches/CVE-2022-2906.patch
    - debian/patches/CVE-2022-3080.patch
    - debian/patches/CVE-2022-38178.patch
      [Included in upstream release 9.18.7]
    - debian/patches/CVE-2022-3094.patch
    - debian/patches/CVE-2022-3736.patch
    - debian/patches/CVE-2022-3924.patch
      [Included in upstream release 9.18.11]

Date: Wed, 08 Mar 2023 12:08:55 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Sergio Durigan Junior <sergio.durigan at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.12-0ubuntu0.22.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 08 Mar 2023 12:08:55 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.12-0ubuntu0.22.04.1
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 1258003 1970252 2003584 2003586 2006972
Changes:
 bind9 (1:9.18.12-0ubuntu0.22.04.1) jammy; urgency=medium
 .
   * New upstream releases 9.18.2 - 9.18.12 (LP: #2003586)
     - Updates:
       + update-quota option
       + named -V shows supported cryptographic algorithms
       + Catalog Zones schema version 2 support in named
       + DNS error support Stale Answer and Stale NXDOMAIN Answer
       + Remote TLS certificate verification support
       + reusereport option
     - Bug Fixes Include:
       + Fix crash when using dig with +nssearch and +tcp (LP: #1258003)
       + Fix incomplete results using dig with +nssearch (LP: #1970252)
       + Fix loading of preinstalled plugins (LP: #2006972)
       + CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080,
         CVE-2022-38178, CVE-2022-3094, CVE-2022-3736, CVE-2022-3924,
         CVE-2022-1183
       + Fix thread safety in dns_dispatch
       + Fix ADB quota management in resolver
       + Fix Prohibited DNS error on allow-recursion
       + Fix crash when restarting server with active statschannel connection
       + Fix use after free for catalog zone processing
       + Fix leak of dns_keyfileio_t objects
       + Fix nslookup failure to use port option when record type ANY is used
       + Fix crash on dnssec-policy zone with NSEC3 and inline-signing turned on
       + Fix inheritance when setting remote server port
       + Fix assertion error when accessing statistics channel
       + Fix rndc dumpdb -expired for stuck cache
       + Fix check for other name servers after receiving FORMERR
       + Fix deletion of CDS after zone sign
       + Fix dighost query context management
       + Fix dig hanging due to IPv4 mapped IPv6 address
       + See https://bind9.readthedocs.io/en/v9_18_12/notes.html#notes-for-bind-9-18-12
         for additional bug fixes and information
   * Improve dep-8 test suite (LP: #2003584):
     - d/t/zonetest: Add dep8 test for checking the domain zone creation process
     - d/t/control: Add new test outline
   * d/bind9-doc.docs: Stop installing removed file doc/misc/options.active
   * Remove patches for bugs LP #1964400 and LP #1964686 fixed upstream:
     - lp1964400-lp1964686-Fix-an-issue-in-dig-when-retrying-with-the-next-serv
     - lp1964400-lp1964686-When-resending-a-UDP-request-insert-the-query-to-the
     - lp1964400-lp1964686-Add-digdelv-system-test-to-check-timed-out-result-fo
     - lp1964400-lp1964686-After-dig-request-errors-try-to-use-other-servers-wh
     - lp1964400-lp1964686-Add-digdelv-system-test-to-check-that-dig-tries-othe
     - lp1964400-lp1964686-Fix-dig-error-when-trying-the-next-server-after-a-TC
     - lp1964400-lp1964686-Add-various-dig-host-tests-for-TCP-UDP-socket-error-
   * Remove CVE patches fixed upstream:
     - debian/patches/CVE-2022-1183.patch
       [Included in upstream release 9.18.3]
     - debian/patches/CVE-2022-2795.patch
     - debian/patches/CVE-2022-2881.patch
     - debian/patches/CVE-2022-2906.patch
     - debian/patches/CVE-2022-3080.patch
     - debian/patches/CVE-2022-38178.patch
       [Included in upstream release 9.18.7]
     - debian/patches/CVE-2022-3094.patch
     - debian/patches/CVE-2022-3736.patch
     - debian/patches/CVE-2022-3924.patch
       [Included in upstream release 9.18.11]
Checksums-Sha1:
 ba7b3dfdc2ddef9f8f3ee116236f83de90cf3c49 3226 bind9_9.18.12-0ubuntu0.22.04.1.dsc
 ccd2f3f2f28a3fcf74b0e6aa40b886bb3b491219 5420940 bind9_9.18.12.orig.tar.xz
 52000f079dd5faf67e514a43f8a0fa2fd5fa2367 833 bind9_9.18.12.orig.tar.xz.asc
 6c9be15a369a0ef4cb926ddf4b1a0f71d57e166c 88196 bind9_9.18.12-0ubuntu0.22.04.1.debian.tar.xz
 aeaf28a6497e27ece08f05a3e5d0ff0b548f1f49 7223 bind9_9.18.12-0ubuntu0.22.04.1_source.buildinfo
Checksums-Sha256:
 414b8dcce0fde0d1b5a30fa8a392efced020fb2c1c6fa72d02ee2bba30dc1f9e 3226 bind9_9.18.12-0ubuntu0.22.04.1.dsc
 47766bb7b063aabbad054386b190aa7f6c14524427afd427c30ec426512027e7 5420940 bind9_9.18.12.orig.tar.xz
 ac76abe03b37f1bcd7337ea6302fea6ca211e377d4bd2fb975ba476c78eb064c 833 bind9_9.18.12.orig.tar.xz.asc
 b7dd916df507403ff0f15f2c5fc00431f90493311cc9401aae4e8d34d722b6be 88196 bind9_9.18.12-0ubuntu0.22.04.1.debian.tar.xz
 ff447a94be1792d3ed1fc2ed1d9915778a87ef163257b3d97129a1cc05b17cdd 7223 bind9_9.18.12-0ubuntu0.22.04.1_source.buildinfo
Files:
 125d49621d3fa6b2972cc434dfd4e36c 3226 net optional bind9_9.18.12-0ubuntu0.22.04.1.dsc
 101a5d919a8d7da1ae98f36e36d1dc9f 5420940 net optional bind9_9.18.12.orig.tar.xz
 9852b532a47685ac1994895d85124ade 833 net optional bind9_9.18.12.orig.tar.xz.asc
 5e43a3b55b093e152926644e641d1a93 88196 net optional bind9_9.18.12-0ubuntu0.22.04.1.debian.tar.xz
 99faa462dd9f9dfe51154d847676b3e4 7223 net optional bind9_9.18.12-0ubuntu0.22.04.1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~sergiodj/ubuntu/+source/bind9
Vcs-Git-Commit: 2f2271fcbb6dca9528477d8f3083580a5ea122b7
Vcs-Git-Ref: refs/heads/MRE-jammy-9.18.11

More information about the jammy-changes mailing list