[ubuntu/noble-proposed] bind9 1:9.18.21-0ubuntu1 (Accepted)

[Lena Voytek]

bind9 (1:9.18.21-0ubuntu1) noble; urgency=medium

  * New upstream release 9.18.21 (LP: #2040359)
    - Updates:
      + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and
        2801:1b8:10::b.
      + Honor nsupdate -v option when server command specified by sending both
        the UPDATE request and the initial query over TCP.
      + Mark cookie-algorithm aes as deprecated, use SipHash-2-4, instead.
      + Mark resolver-nonbackoff-tries and resolver-retry-interval as
        deprecated.
      + Mark dnssec-must-be-secure as deprecated.
    - Bug Fixes:
      + Do not schedule unsigned versions of inline-signed zones containing
        DNSSEC records for resigning.
      + Take local authoritative data into account when looking up stale cache
        data.
      + Fix use of named -X and lock-file at the same time.
      + Fix improper lock-file removal.
      + Fix bound checking in Content-Length header in the statistics channel.
      + Fix memory leaks from not clearing the OpenSSL error stack.
      + Fix SERVFAIL responses from introduction of krb5-subdomain-self-rhs and
        ms-subdomain-self-rhs update policies.
      + Fix stale-refresh-time feature being disabled by cache flush.
      + Fix DNS message corruption from partial writes.
    - See https://bind9.readthedocs.io/en/v9.18.21/notes.html for additional
      information
  * d/p/CVE-2023-3341.patch, d/p/CVE-2023-4236.patch: Remove - fixed by
    upstream in version 9.18.19
  * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the
    standard library stdatomic.h

Date: Thu, 25 Jan 2024 08:37:15 -0700
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.18.21-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Thu, 25 Jan 2024 08:37:15 -0700
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.18.21-0ubuntu1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2040359
Changes:
 bind9 (1:9.18.21-0ubuntu1) noble; urgency=medium
 .
   * New upstream release 9.18.21 (LP: #2040359)
     - Updates:
       + Update IP addresses for B.ROOT-SERVERS.NET to 170.247.170.2 and
         2801:1b8:10::b.
       + Honor nsupdate -v option when server command specified by sending both
         the UPDATE request and the initial query over TCP.
       + Mark cookie-algorithm aes as deprecated, use SipHash-2-4, instead.
       + Mark resolver-nonbackoff-tries and resolver-retry-interval as
         deprecated.
       + Mark dnssec-must-be-secure as deprecated.
     - Bug Fixes:
       + Do not schedule unsigned versions of inline-signed zones containing
         DNSSEC records for resigning.
       + Take local authoritative data into account when looking up stale cache
         data.
       + Fix use of named -X and lock-file at the same time.
       + Fix improper lock-file removal.
       + Fix bound checking in Content-Length header in the statistics channel.
       + Fix memory leaks from not clearing the OpenSSL error stack.
       + Fix SERVFAIL responses from introduction of krb5-subdomain-self-rhs and
         ms-subdomain-self-rhs update policies.
       + Fix stale-refresh-time feature being disabled by cache flush.
       + Fix DNS message corruption from partial writes.
     - See https://bind9.readthedocs.io/en/v9.18.21/notes.html for additional
       information
   * d/p/CVE-2023-3341.patch, d/p/CVE-2023-4236.patch: Remove - fixed by
     upstream in version 9.18.19
   * d/p/always-use-standard-library-stdatomic.patch: Maintain use of the
     standard library stdatomic.h
Checksums-Sha1:
 3d516ab7dc49f09f9d949e414ef574940f939f3b 3313 bind9_9.18.21-0ubuntu1.dsc
 e202ef1583ef39f1af0d3a9cb1e6f6adbc4a2314 5507132 bind9_9.18.21.orig.tar.xz
 c6ff6e44ee2d446e781d772929fcb4df5a89a2d5 833 bind9_9.18.21.orig.tar.xz.asc
 aed6045699d1e8a20ceed44a2651412569fda580 72964 bind9_9.18.21-0ubuntu1.debian.tar.xz
 ed125899160480aaa116752c6c292917b75075f3 9241 bind9_9.18.21-0ubuntu1_source.buildinfo
Checksums-Sha256:
 1f06a875708347a48b31e126463460ac5f4e508506df39316f9a8d58bbd26122 3313 bind9_9.18.21-0ubuntu1.dsc
 a556be22505d9ea4f9c6717aee9c549739c68498aff3ca69035787ecc648fec5 5507132 bind9_9.18.21.orig.tar.xz
 4e45174c6922b7c8ef6e0e8e3d8828400d592d89accb56d593d910070cc51869 833 bind9_9.18.21.orig.tar.xz.asc
 449dbd93783e0bad9e1b4200f847ab5b1372458a10fefae2ac7732119ed5cd1e 72964 bind9_9.18.21-0ubuntu1.debian.tar.xz
 fdaafc19aea701277713f2be4c633301e8afbd4aee5557f1cde106c225686cfc 9241 bind9_9.18.21-0ubuntu1_source.buildinfo
Files:
 e46631b1f1a9783d4bd20e532f3443fb 3313 net optional bind9_9.18.21-0ubuntu1.dsc
 815f7eeaca45292b35f064b28d79e171 5507132 net optional bind9_9.18.21.orig.tar.xz
 ed6e1f0f508aa4f83a38bbe3cc9840e1 833 net optional bind9_9.18.21.orig.tar.xz.asc
 3fd38ef7d42abf8de17d7640c64402b8 72964 net optional bind9_9.18.21-0ubuntu1.debian.tar.xz
 287f89e2d9eb6fdc03b2d6d8eee2be83 9241 net optional bind9_9.18.21-0ubuntu1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/bind9
Vcs-Git-Commit: 6f186351ec31bcd82f62f6403f57604524e2823b
Vcs-Git-Ref: refs/heads/merge-lp2040359-noble