[ubuntu/lunar-proposed] bind9 1:9.18.18-0ubuntu0.23.04.1 (Accepted)

Lena Voytek lena.voytek at canonical.com
Fri Sep 29 20:35:32 UTC 2023


bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium

  * New upstream release 9.18.18 (LP: #2028413)
    - Updates:
      + Mark a primary server as temporarily unreachable when a TCP connection
        response to an SOA query times out, matching behavior of a refused TCP
        connection.
      + Mark dialup and heartbeat-interval options as deprecated.
      + Retry DNS queries without an EDNS COOKIE when the first response is
        FORMERR with the EDNS COOKIE that was sent originally.
      + Use NS records for the relaxed QNAME minimization mode to reduce the
        number of queries from named.
      + Mark TKEY mode 2 as deprecated.
      + Mark delegation-only and root-delegation-only as deprecated.
      + Run RPZ and catalog zone updates on specialized offload threads to
        reduce blocked query processing time.
    - Bug Fixes:
      + Fix assertion failure from processing already-queued queries while
        server is being reconfigured or cache is being flushed.
      + Fix failure to load zones containing resource records with a TTL value
        larger than 86400 seconds when dnssec-policy is set to insecure.
      + Fix the ability to read HMAC-MD5 key files (LP: #2015176).
      + Fix stability issues with the catalog zone implementation.
      + Fix bind9 getting stuck when listen-on statement for HTTP is removed
        from configuration.
      + Do not return delegation from cache after stale-answer-client-timeout.
      + Fix failure to auto-tune clients-per-query limit in some situations.
      + Fix proper timeouts when using max-transfer-time-in and
        max-transfer-idle-in statements.
      + Bring rndc read timeout back to 60 seconds from 30.
      + Treat libuv returning ISC_R_INVALIDPROTO as a network error.
      + Clean up empty-non-terminal NSEC3 records.
      + Fix log file rotation cleanup for absolute file path destinations.
      + Fix various catalog zone processing crashes.
      + Fix transfer hang when downloading large zones over TLS.
      + Fix named crash when adding a new zone into the configuration file for
        a name which was already configured as member zone for a catalog zone.
      + Delay DNSSEC key queries until all zones have finished loading.
    - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
      information.
  * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
    9.18.16.
  * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
  * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)

Date: Wed, 20 Sep 2023 14:52:27 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.18-0ubuntu0.23.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 20 Sep 2023 14:52:27 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.18-0ubuntu0.23.04.1
Distribution: lunar
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2015176 2028413 2032650
Changes:
 bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium
 .
   * New upstream release 9.18.18 (LP: #2028413)
     - Updates:
       + Mark a primary server as temporarily unreachable when a TCP connection
         response to an SOA query times out, matching behavior of a refused TCP
         connection.
       + Mark dialup and heartbeat-interval options as deprecated.
       + Retry DNS queries without an EDNS COOKIE when the first response is
         FORMERR with the EDNS COOKIE that was sent originally.
       + Use NS records for the relaxed QNAME minimization mode to reduce the
         number of queries from named.
       + Mark TKEY mode 2 as deprecated.
       + Mark delegation-only and root-delegation-only as deprecated.
       + Run RPZ and catalog zone updates on specialized offload threads to
         reduce blocked query processing time.
     - Bug Fixes:
       + Fix assertion failure from processing already-queued queries while
         server is being reconfigured or cache is being flushed.
       + Fix failure to load zones containing resource records with a TTL value
         larger than 86400 seconds when dnssec-policy is set to insecure.
       + Fix the ability to read HMAC-MD5 key files (LP: #2015176).
       + Fix stability issues with the catalog zone implementation.
       + Fix bind9 getting stuck when listen-on statement for HTTP is removed
         from configuration.
       + Do not return delegation from cache after stale-answer-client-timeout.
       + Fix failure to auto-tune clients-per-query limit in some situations.
       + Fix proper timeouts when using max-transfer-time-in and
         max-transfer-idle-in statements.
       + Bring rndc read timeout back to 60 seconds from 30.
       + Treat libuv returning ISC_R_INVALIDPROTO as a network error.
       + Clean up empty-non-terminal NSEC3 records.
       + Fix log file rotation cleanup for absolute file path destinations.
       + Fix various catalog zone processing crashes.
       + Fix transfer hang when downloading large zones over TLS.
       + Fix named crash when adding a new zone into the configuration file for
         a name which was already configured as member zone for a catalog zone.
       + Delay DNSSEC key queries until all zones have finished loading.
     - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
       information.
   * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
     9.18.16.
   * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
   * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)
Checksums-Sha1:
 21fe75de3304cfdf7056a18785b73f71f22ad421 3308 bind9_9.18.18-0ubuntu0.23.04.1.dsc
 7331e36171bba93e30d6874b8f70f097b0a3ba1d 5490428 bind9_9.18.18.orig.tar.xz
 133905b80a7a6781ac6da297dcf59140419391e4 833 bind9_9.18.18.orig.tar.xz.asc
 5d770be0ea5c356746d585a5289bb8a706b0b055 73580 bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
 40d0ec3d614726fbe701f0ea0c0220680cd0dede 7332 bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Checksums-Sha256:
 ada106b141829232a93929404d01527929ce7c57be4e22ca1750bfacb2d0a290 3308 bind9_9.18.18-0ubuntu0.23.04.1.dsc
 d735cdc127a6c5709bde475b5bf16fa2133f36fdba202f7c3c37d134e5192160 5490428 bind9_9.18.18.orig.tar.xz
 305ea203e6e968d54cbae8df9781d986eb1c592097be5c717f38a7def64f90b7 833 bind9_9.18.18.orig.tar.xz.asc
 c1c0e425e842db1c20f3353159f2984afda52033d2eac00acb95209be58655de 73580 bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
 24ab05c2f04df569ef05b4b1beaa1368fdc9c625bad5854507288588c87606e9 7332 bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Files:
 d8e0fb6ffa9d3099d5f9b25a9a4ebb0d 3308 net optional bind9_9.18.18-0ubuntu0.23.04.1.dsc
 d8f443ea8fbd294345b3b7d1a7a81417 5490428 net optional bind9_9.18.18.orig.tar.xz
 8f85360601d26967865cd2724962b357 833 net optional bind9_9.18.18.orig.tar.xz.asc
 8d7ae066876fe5e0fd07627e520bb2a0 73580 net optional bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
 bf364ef2dd61501cd59e36685fb78551 7332 net optional bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/bind9
Vcs-Git-Commit: e394e1303d42519ca36879abe5301394d7e8bc4a
Vcs-Git-Ref: refs/heads/MRE-lunar-9.18.18


More information about the lunar-changes mailing list