[ubuntu/jammy-proposed] bind9 1:9.18.18-0ubuntu0.22.04.1 (Accepted)

Fri Sep 29 20:35:31 UTC 2023

bind9 (1:9.18.18-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream release 9.18.18 (LP: #2028413)
    - Updates:
      + Mark a primary server as temporarily unreachable when a TCP connection
        response to an SOA query times out, matching behavior of a refused TCP
        connection.
      + Mark dialup and heartbeat-interval options as deprecated.
      + Retry DNS queries without an EDNS COOKIE when the first response is
        FORMERR with the EDNS COOKIE that was sent originally.
      + Use NS records for the relaxed QNAME minimization mode to reduce the
        number of queries from named.
      + Mark TKEY mode 2 as deprecated.
      + Mark delegation-only and root-delegation-only as deprecated.
      + Run RPZ and catalog zone updates on specialized offload threads to
        reduce blocked query processing time.
    - Bug Fixes:
      + Fix assertion failure from processing already-queued queries while
        server is being reconfigured or cache is being flushed.
      + Fix failure to load zones containing resource records with a TTL value
        larger than 86400 seconds when dnssec-policy is set to insecure.
      + Fix the ability to read HMAC-MD5 key files (LP: #2015176).
      + Fix stability issues with the catalog zone implementation.
      + Fix bind9 getting stuck when listen-on statement for HTTP is removed
        from configuration.
      + Do not return delegation from cache after stale-answer-client-timeout.
      + Fix failure to auto-tune clients-per-query limit in some situations.
      + Fix proper timeouts when using max-transfer-time-in and
        max-transfer-idle-in statements.
      + Bring rndc read timeout back to 60 seconds from 30.
      + Treat libuv returning ISC_R_INVALIDPROTO as a network error.
      + Clean up empty-non-terminal NSEC3 records.
      + Fix log file rotation cleanup for absolute file path destinations.
      + Fix various catalog zone processing crashes.
      + Fix transfer hang when downloading large zones over TLS.
      + Fix named crash when adding a new zone into the configuration file for
        a name which was already configured as member zone for a catalog zone.
      + Delay DNSSEC key queries until all zones have finished loading.
    - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
      information.
  * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
    9.18.16.
  * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
  * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)

Date: Wed, 20 Sep 2023 15:15:41 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.18-0ubuntu0.22.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 20 Sep 2023 15:15:41 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.18-0ubuntu0.22.04.1
Distribution: jammy
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2015176 2028413 2032650
Changes:
 bind9 (1:9.18.18-0ubuntu0.22.04.1) jammy; urgency=medium
 .
   * New upstream release 9.18.18 (LP: #2028413)
     - Updates:
       + Mark a primary server as temporarily unreachable when a TCP connection
         response to an SOA query times out, matching behavior of a refused TCP
         connection.
       + Mark dialup and heartbeat-interval options as deprecated.
       + Retry DNS queries without an EDNS COOKIE when the first response is
         FORMERR with the EDNS COOKIE that was sent originally.
       + Use NS records for the relaxed QNAME minimization mode to reduce the
         number of queries from named.
       + Mark TKEY mode 2 as deprecated.
       + Mark delegation-only and root-delegation-only as deprecated.
       + Run RPZ and catalog zone updates on specialized offload threads to
         reduce blocked query processing time.
     - Bug Fixes:
       + Fix assertion failure from processing already-queued queries while
         server is being reconfigured or cache is being flushed.
       + Fix failure to load zones containing resource records with a TTL value
         larger than 86400 seconds when dnssec-policy is set to insecure.
       + Fix the ability to read HMAC-MD5 key files (LP: #2015176).
       + Fix stability issues with the catalog zone implementation.
       + Fix bind9 getting stuck when listen-on statement for HTTP is removed
         from configuration.
       + Do not return delegation from cache after stale-answer-client-timeout.
       + Fix failure to auto-tune clients-per-query limit in some situations.
       + Fix proper timeouts when using max-transfer-time-in and
         max-transfer-idle-in statements.
       + Bring rndc read timeout back to 60 seconds from 30.
       + Treat libuv returning ISC_R_INVALIDPROTO as a network error.
       + Clean up empty-non-terminal NSEC3 records.
       + Fix log file rotation cleanup for absolute file path destinations.
       + Fix various catalog zone processing crashes.
       + Fix transfer hang when downloading large zones over TLS.
       + Fix named crash when adding a new zone into the configuration file for
         a name which was already configured as member zone for a catalog zone.
       + Delay DNSSEC key queries until all zones have finished loading.
     - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
       information.
   * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
     9.18.16.
   * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
   * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)
Checksums-Sha1:
 779bfb54516b0175bab1e981117bbb37b6e87b5a 3292 bind9_9.18.18-0ubuntu0.22.04.1.dsc
 7331e36171bba93e30d6874b8f70f097b0a3ba1d 5490428 bind9_9.18.18.orig.tar.xz
 133905b80a7a6781ac6da297dcf59140419391e4 833 bind9_9.18.18.orig.tar.xz.asc
 d7030ea2395d52da101cf44cd08d512f1bf69c31 92684 bind9_9.18.18-0ubuntu0.22.04.1.debian.tar.xz
 41590b1c4231a19cdc197d23cd6bbf0b8a1c5ef6 7294 bind9_9.18.18-0ubuntu0.22.04.1_source.buildinfo
Checksums-Sha256:
 8ec595e162e8f1f4f537f37fdf9e46316a47191e6c092c2a2e3f6d8097ca4230 3292 bind9_9.18.18-0ubuntu0.22.04.1.dsc
 d735cdc127a6c5709bde475b5bf16fa2133f36fdba202f7c3c37d134e5192160 5490428 bind9_9.18.18.orig.tar.xz
 305ea203e6e968d54cbae8df9781d986eb1c592097be5c717f38a7def64f90b7 833 bind9_9.18.18.orig.tar.xz.asc
 54ed18f0dd86590d9ff11befbf06993da6cb35695909e190945dd83fc74c1f49 92684 bind9_9.18.18-0ubuntu0.22.04.1.debian.tar.xz
 e80e7b4c8b8d2d21601c809b2b4b5d7c23a2c6812736ccfcd53ef61f2306a6f4 7294 bind9_9.18.18-0ubuntu0.22.04.1_source.buildinfo
Files:
 10f274e1d51e77c24e5b8c6771ea95c5 3292 net optional bind9_9.18.18-0ubuntu0.22.04.1.dsc
 d8f443ea8fbd294345b3b7d1a7a81417 5490428 net optional bind9_9.18.18.orig.tar.xz
 8f85360601d26967865cd2724962b357 833 net optional bind9_9.18.18.orig.tar.xz.asc
 4f977e8718a89de79112e737cde81838 92684 net optional bind9_9.18.18-0ubuntu0.22.04.1.debian.tar.xz
 e527d7ac5d7a5e9f3cf2830dd73f3779 7294 net optional bind9_9.18.18-0ubuntu0.22.04.1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/bind9
Vcs-Git-Commit: 83178ed804297a060fd02dfe569b525e928d5df3
Vcs-Git-Ref: refs/heads/MRE-jammy-9.18.18