[ubuntu/lunar-proposed] bind9 1:9.18.18-0ubuntu0.23.04.1 (Accepted)
Lena Voytek
lena.voytek at canonical.com
Fri Sep 29 20:35:32 UTC 2023
bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium
* New upstream release 9.18.18 (LP: #2028413)
- Updates:
+ Mark a primary server as temporarily unreachable when a TCP connection
response to an SOA query times out, matching behavior of a refused TCP
connection.
+ Mark dialup and heartbeat-interval options as deprecated.
+ Retry DNS queries without an EDNS COOKIE when the first response is
FORMERR with the EDNS COOKIE that was sent originally.
+ Use NS records for the relaxed QNAME minimization mode to reduce the
number of queries from named.
+ Mark TKEY mode 2 as deprecated.
+ Mark delegation-only and root-delegation-only as deprecated.
+ Run RPZ and catalog zone updates on specialized offload threads to
reduce blocked query processing time.
- Bug Fixes:
+ Fix assertion failure from processing already-queued queries while
server is being reconfigured or cache is being flushed.
+ Fix failure to load zones containing resource records with a TTL value
larger than 86400 seconds when dnssec-policy is set to insecure.
+ Fix the ability to read HMAC-MD5 key files (LP: #2015176).
+ Fix stability issues with the catalog zone implementation.
+ Fix bind9 getting stuck when listen-on statement for HTTP is removed
from configuration.
+ Do not return delegation from cache after stale-answer-client-timeout.
+ Fix failure to auto-tune clients-per-query limit in some situations.
+ Fix proper timeouts when using max-transfer-time-in and
max-transfer-idle-in statements.
+ Bring rndc read timeout back to 60 seconds from 30.
+ Treat libuv returning ISC_R_INVALIDPROTO as a network error.
+ Clean up empty-non-terminal NSEC3 records.
+ Fix log file rotation cleanup for absolute file path destinations.
+ Fix various catalog zone processing crashes.
+ Fix transfer hang when downloading large zones over TLS.
+ Fix named crash when adding a new zone into the configuration file for
a name which was already configured as member zone for a catalog zone.
+ Delay DNSSEC key queries until all zones have finished loading.
- See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
information.
* d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
9.18.16.
* d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
* d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)
Date: Wed, 20 Sep 2023 14:52:27 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andreas Hasenack <andreas at canonical.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.18-0ubuntu0.23.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 20 Sep 2023 14:52:27 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.18-0ubuntu0.23.04.1
Distribution: lunar
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2015176 2028413 2032650
Changes:
bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium
.
* New upstream release 9.18.18 (LP: #2028413)
- Updates:
+ Mark a primary server as temporarily unreachable when a TCP connection
response to an SOA query times out, matching behavior of a refused TCP
connection.
+ Mark dialup and heartbeat-interval options as deprecated.
+ Retry DNS queries without an EDNS COOKIE when the first response is
FORMERR with the EDNS COOKIE that was sent originally.
+ Use NS records for the relaxed QNAME minimization mode to reduce the
number of queries from named.
+ Mark TKEY mode 2 as deprecated.
+ Mark delegation-only and root-delegation-only as deprecated.
+ Run RPZ and catalog zone updates on specialized offload threads to
reduce blocked query processing time.
- Bug Fixes:
+ Fix assertion failure from processing already-queued queries while
server is being reconfigured or cache is being flushed.
+ Fix failure to load zones containing resource records with a TTL value
larger than 86400 seconds when dnssec-policy is set to insecure.
+ Fix the ability to read HMAC-MD5 key files (LP: #2015176).
+ Fix stability issues with the catalog zone implementation.
+ Fix bind9 getting stuck when listen-on statement for HTTP is removed
from configuration.
+ Do not return delegation from cache after stale-answer-client-timeout.
+ Fix failure to auto-tune clients-per-query limit in some situations.
+ Fix proper timeouts when using max-transfer-time-in and
max-transfer-idle-in statements.
+ Bring rndc read timeout back to 60 seconds from 30.
+ Treat libuv returning ISC_R_INVALIDPROTO as a network error.
+ Clean up empty-non-terminal NSEC3 records.
+ Fix log file rotation cleanup for absolute file path destinations.
+ Fix various catalog zone processing crashes.
+ Fix transfer hang when downloading large zones over TLS.
+ Fix named crash when adding a new zone into the configuration file for
a name which was already configured as member zone for a catalog zone.
+ Delay DNSSEC key queries until all zones have finished loading.
- See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
information.
* d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in
9.18.16.
* d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18.
* d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650)
Checksums-Sha1:
21fe75de3304cfdf7056a18785b73f71f22ad421 3308 bind9_9.18.18-0ubuntu0.23.04.1.dsc
7331e36171bba93e30d6874b8f70f097b0a3ba1d 5490428 bind9_9.18.18.orig.tar.xz
133905b80a7a6781ac6da297dcf59140419391e4 833 bind9_9.18.18.orig.tar.xz.asc
5d770be0ea5c356746d585a5289bb8a706b0b055 73580 bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
40d0ec3d614726fbe701f0ea0c0220680cd0dede 7332 bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Checksums-Sha256:
ada106b141829232a93929404d01527929ce7c57be4e22ca1750bfacb2d0a290 3308 bind9_9.18.18-0ubuntu0.23.04.1.dsc
d735cdc127a6c5709bde475b5bf16fa2133f36fdba202f7c3c37d134e5192160 5490428 bind9_9.18.18.orig.tar.xz
305ea203e6e968d54cbae8df9781d986eb1c592097be5c717f38a7def64f90b7 833 bind9_9.18.18.orig.tar.xz.asc
c1c0e425e842db1c20f3353159f2984afda52033d2eac00acb95209be58655de 73580 bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
24ab05c2f04df569ef05b4b1beaa1368fdc9c625bad5854507288588c87606e9 7332 bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Files:
d8e0fb6ffa9d3099d5f9b25a9a4ebb0d 3308 net optional bind9_9.18.18-0ubuntu0.23.04.1.dsc
d8f443ea8fbd294345b3b7d1a7a81417 5490428 net optional bind9_9.18.18.orig.tar.xz
8f85360601d26967865cd2724962b357 833 net optional bind9_9.18.18.orig.tar.xz.asc
8d7ae066876fe5e0fd07627e520bb2a0 73580 net optional bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz
bf364ef2dd61501cd59e36685fb78551 7332 net optional bind9_9.18.18-0ubuntu0.23.04.1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~ahasenack/ubuntu/+source/bind9
Vcs-Git-Commit: e394e1303d42519ca36879abe5301394d7e8bc4a
Vcs-Git-Ref: refs/heads/MRE-lunar-9.18.18
More information about the lunar-changes
mailing list