[ubuntu/kinetic-proposed] bind9 1:9.18.12-0ubuntu0.22.10.1 (Accepted)

Lena Voytek lena.voytek at canonical.com
Fri Mar 17 17:15:29 UTC 2023


bind9 (1:9.18.12-0ubuntu0.22.10.1) kinetic; urgency=medium

  * New upstream releases 9.18.5 - 9.18.12 (LP: #2003586)
    - Updates:
      + update-quota option
      + named -V shows supported cryptographic algorithms
    - Bug Fixes Include:
      + Fix crash when using dig with +nssearch and +tcp (LP: #1258003)
      + Fix incomplete results using dig with +nssearch (LP: #1970252)
      + CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080,
        CVE-2022-38178, CVE-2022-3094, CVE-2022-3736, CVE-2022-3924
      + Fix thread safety in dns_dispatch
      + Fix ADB quota management in resolver
      + Fix Prohibited DNS error on allow-recursion
      + Fix crash when restarting server with active statschannel connection
      + Fix use after free for catalog zone processing
      + Fix leak of dns_keyfileio_t objects
      + Fix nslookup failure to use port option when record type ANY is used
      + Fix crash on dnssec-policy zone with NSEC3 and inline-signing turned on
      + Fix inheritance when setting remote server port
      + Fix assertion error when accessing statistics channel
      + Fix rndc dumpdb -expired for stuck cache
      + Fix check for other name servers after receiving FORMERR
      + See https://bind9.readthedocs.io/en/v9_18_12/notes.html#notes-for-bind-9-18-12
        for additional bug fixes and information
  * Improve dep-8 test suite (LP: #2003584):
    - d/t/zonetest: Add dep8 test for checking the domain zone creation process
    - d/t/control: Add new test outline
  * d/bind9-doc.docs: Stop installing removed file doc/misc/options.active
  * d/p/0001-Disable-treat-warnings-as-errors-in-sphinx-build.patch: refresh to
    apply with version 9.18.8
  * Remove CVE patches fixed upstream:
    - debian/patches/CVE-2022-2795.patch
    - debian/patches/CVE-2022-2881.patch
    - debian/patches/CVE-2022-2906.patch
    - debian/patches/CVE-2022-3080.patch
    - debian/patches/CVE-2022-38178.patch
      [Included in upstream release 9.18.7]
    - debian/patches/CVE-2022-3094.patch
    - debian/patches/CVE-2022-3736.patch
    - debian/patches/CVE-2022-3924.patch
      [Included in upstream release 9.18.11]

Date: Wed, 08 Mar 2023 08:49:53 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Sergio Durigan Junior <sergio.durigan at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.12-0ubuntu0.22.10.1
-------------- next part --------------
Format: 1.8
Date: Wed, 08 Mar 2023 08:49:53 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.12-0ubuntu0.22.10.1
Distribution: kinetic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 1258003 1970252 2003584 2003586
Changes:
 bind9 (1:9.18.12-0ubuntu0.22.10.1) kinetic; urgency=medium
 .
   * New upstream releases 9.18.5 - 9.18.12 (LP: #2003586)
     - Updates:
       + update-quota option
       + named -V shows supported cryptographic algorithms
     - Bug Fixes Include:
       + Fix crash when using dig with +nssearch and +tcp (LP: #1258003)
       + Fix incomplete results using dig with +nssearch (LP: #1970252)
       + CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080,
         CVE-2022-38178, CVE-2022-3094, CVE-2022-3736, CVE-2022-3924
       + Fix thread safety in dns_dispatch
       + Fix ADB quota management in resolver
       + Fix Prohibited DNS error on allow-recursion
       + Fix crash when restarting server with active statschannel connection
       + Fix use after free for catalog zone processing
       + Fix leak of dns_keyfileio_t objects
       + Fix nslookup failure to use port option when record type ANY is used
       + Fix crash on dnssec-policy zone with NSEC3 and inline-signing turned on
       + Fix inheritance when setting remote server port
       + Fix assertion error when accessing statistics channel
       + Fix rndc dumpdb -expired for stuck cache
       + Fix check for other name servers after receiving FORMERR
       + See https://bind9.readthedocs.io/en/v9_18_12/notes.html#notes-for-bind-9-18-12
         for additional bug fixes and information
   * Improve dep-8 test suite (LP: #2003584):
     - d/t/zonetest: Add dep8 test for checking the domain zone creation process
     - d/t/control: Add new test outline
   * d/bind9-doc.docs: Stop installing removed file doc/misc/options.active
   * d/p/0001-Disable-treat-warnings-as-errors-in-sphinx-build.patch: refresh to
     apply with version 9.18.8
   * Remove CVE patches fixed upstream:
     - debian/patches/CVE-2022-2795.patch
     - debian/patches/CVE-2022-2881.patch
     - debian/patches/CVE-2022-2906.patch
     - debian/patches/CVE-2022-3080.patch
     - debian/patches/CVE-2022-38178.patch
       [Included in upstream release 9.18.7]
     - debian/patches/CVE-2022-3094.patch
     - debian/patches/CVE-2022-3736.patch
     - debian/patches/CVE-2022-3924.patch
       [Included in upstream release 9.18.11]
Checksums-Sha1:
 d0f47f972bf1f55ee8bc2726aa07669a0608dcac 3227 bind9_9.18.12-0ubuntu0.22.10.1.dsc
 ccd2f3f2f28a3fcf74b0e6aa40b886bb3b491219 5420940 bind9_9.18.12.orig.tar.xz
 52000f079dd5faf67e514a43f8a0fa2fd5fa2367 833 bind9_9.18.12.orig.tar.xz.asc
 fd9ad5e14a8bbd7dff979cb23f5656edba19db9e 88740 bind9_9.18.12-0ubuntu0.22.10.1.debian.tar.xz
 c7e54c5aa137fdd1388663b6183f593c58c2dc75 7223 bind9_9.18.12-0ubuntu0.22.10.1_source.buildinfo
Checksums-Sha256:
 55d68b70f63b1f556011258b2a761d74a5e10b67ec4ffb810c5059a5b6453b26 3227 bind9_9.18.12-0ubuntu0.22.10.1.dsc
 47766bb7b063aabbad054386b190aa7f6c14524427afd427c30ec426512027e7 5420940 bind9_9.18.12.orig.tar.xz
 ac76abe03b37f1bcd7337ea6302fea6ca211e377d4bd2fb975ba476c78eb064c 833 bind9_9.18.12.orig.tar.xz.asc
 5e0488dfcaa5586752ba71d2e90a24801e7cafca062ff2f1b4ae111ca00c6783 88740 bind9_9.18.12-0ubuntu0.22.10.1.debian.tar.xz
 36db7db68899f52589552e656ec43d78cf8e783e5fe79eff5f7d80f6ed25dcae 7223 bind9_9.18.12-0ubuntu0.22.10.1_source.buildinfo
Files:
 f8cafd55fb96248d66527cf6753196f1 3227 net optional bind9_9.18.12-0ubuntu0.22.10.1.dsc
 101a5d919a8d7da1ae98f36e36d1dc9f 5420940 net optional bind9_9.18.12.orig.tar.xz
 9852b532a47685ac1994895d85124ade 833 net optional bind9_9.18.12.orig.tar.xz.asc
 48dad4bcc912133773f446d43a09ac14 88740 net optional bind9_9.18.12-0ubuntu0.22.10.1.debian.tar.xz
 d2e0ff03acc1727fb0679a39906d04b6 7223 net optional bind9_9.18.12-0ubuntu0.22.10.1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~sergiodj/ubuntu/+source/bind9
Vcs-Git-Commit: 0fb7cc0b5e22a95c6b57a2f502356b7f46fbfd84
Vcs-Git-Ref: refs/heads/MRE-kinetic-9.18.11


More information about the kinetic-changes mailing list