Debian
bind9 package

Change log for bind9 package in Debian

151 → 225 of 234 results First • • • Last
Superseded in jessie-release
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium


  * Include dlz_dlopen.h in libbind-dev (closes: #769117).

 -- Michael Gilbert <email address hidden>  Sun, 30 Nov 2014 22:53:50 +0000

Available diffs

Superseded in jessie-release
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium


  * Avoid libnsl dependency on non-linux architectures.  Closes: #766430
  * Install export libraries to /lib instead of /usr/lib.  Closes: #766544
  * Add myself to the maintainer team with approval from LaMont and Bdale.

 -- Michael Gilbert <email address hidden>  Thu, 30 Oct 2014 02:42:17 +0000
Superseded in wheezy-release 
bind9 (1:9.8.4.dfsg.P1-6+nmu2+deb7u2) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * CVE-2014-0591: named crash when handling malformed NSEC3-signed zones.
    A remote attacker could use this flaw against an authoritative name
    server that served NCES3-signed zones by sending a specially crafted
    query, which, when processed, would cause named to crash. (Closes: #735190)

 -- Salvatore Bonaccorso <email address hidden>  Fri, 05 Sep 2014 22:18:48 +0200
Superseded in jessie-release
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium


  * Non-maintainer upload.
  * Mark critical section as not parallel in the makefile.  Closes: #762766

 -- Michael Gilbert <email address hidden>  Mon, 13 Oct 2014 04:37:55 +0000
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low


  * Non-maintainer upload.
  * Fix intermittent parallel build failure.  Closes: #762766
  * Set -fno-delete-null-pointer-checks.  Closes: #750760
  * Use separate packages for the udebs.  Closes: #762762
  * Don't install configuration files to /usr.  Closes: #762948

 -- Michael Gilbert <email address hidden>  Mon, 06 Oct 2014 01:23:57 +0000
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low


  * Non-maintainer upload.
  * Add support for hurd.  Closes: #746540
  * Provide shared libraries for isc-dhcp.  Closes: #656150

 -- Michael Gilbert <email address hidden>  Sun, 14 Sep 2014 00:58:06 +0000
Superseded in experimental-release 
bind9 (1:9.10.0.dfsg~rc2-1) experimental; urgency=low


  * New upstream version
  * new shared library: libirs
  * do not call dns_lib_init2 twice

 -- LaMont Jones <email address hidden>  Wed, 30 Apr 2014 09:47:09 -0600
Superseded in jessie-release
Superseded in sid-release 
bind9 (1:9.9.5.dfsg-4) unstable; urgency=low


  [Julien Cristau]

  * FTBFS on kfreebsd.  Closes: #741285

  [LaMont Jones]

  * revert aclocal.m4 expansion from earlier merge

 -- LaMont Jones <email address hidden>  Tue, 29 Apr 2014 14:48:50 -0600

Available diffs

Superseded in sid-release 
bind9 (1:9.9.5.dfsg-3) unstable; urgency=low


  * Re-enable rrl (now a configure option).  Closes: #741059 LP: #1288823

 -- LaMont Jones <email address hidden>  Mon, 24 Mar 2014 06:55:55 -0600

Available diffs

Superseded in sid-release 
bind9 (1:9.9.5.dfsg-2) unstable; urgency=low


  * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3
  * move dnssec-coverage to bind9utils.  Closes: #739994
  * dnssec-{checkds,verify} manpages in wrong package.  Closes: #739995

 -- LaMont Jones <email address hidden>  Wed, 26 Feb 2014 09:30:31 -0700
Deleted in experimental-release (Reason: None provided.) 
bind9 (1:9.9.5.dfsg-1) experimental; urgency=low


  [Internet Software Consortium, Inc]

  * New upstream version: 9.9.5  Closes: #735190

  [Martin Nagy]

  * dynamic loading of database backends. See:
    http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch. 
    Closes: #722669

  [LaMont Jones]

  * fix sonames
  * merge ubuntu changes
  * Deliver dns/rrl.h.  Closes: #724844
  * rules tweak to make backports to pre-dh-systemd releases easier

 -- LaMont Jones <email address hidden>  Tue, 11 Feb 2014 09:16:05 -0700
Published in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze11) squeeze-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * CVE-2013-4854: A specially crafted query that includes malformed rdata can
    cause named to terminate with an assertion failure while rejecting the
    malformed query. (Closes: #717936).

 -- Salvatore Bonaccorso <email address hidden>  Sat, 27 Jul 2013 11:09:40 +0200
Superseded in wheezy-release 
bind9 (1:9.8.4.dfsg.P1-6+nmu2+deb7u1) wheezy-security; urgency=high


  * Non-maintainer upload by the Security Team.
  * CVE-2013-4854: A specially crafted query that includes malformed rdata can
    cause named to terminate with an assertion failure while rejecting the
    malformed query. (Closes: #717936).

 -- Salvatore Bonaccorso <email address hidden>  Sat, 27 Jul 2013 10:39:42 +0200
Superseded in sid-release 
bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low


  [Peter Marschall]

  * If rndc.conf exists, skip creation of rndc.key.  Closes: #620394

  [Al Tarakanoff]

  * properly quote check of pid in bind9 init.d.  LP: #1092243

  [LaMont Jones]

  * include distro and package version in version string
  * apparmor: allow GeoIP data file access.  LP: #834901
  * enable filter-aaaa.  Closes: #701704  LP: #1115168

 -- LaMont Jones <email address hidden>  Thu, 29 Aug 2013 16:22:29 -0600
Superseded in sid-release 
bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low


  [Michael Stapelberg]

  * add systemd service file.  Closes: #718212

  [LaMont Jones]

  * deliver more dnssec-* tools in bind9utils.  Closes: #713026
  * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025
  * deliver rrl.h and stat.h Closes: #692483, #720813

 -- LaMont Jones <email address hidden>  Tue, 27 Aug 2013 10:06:37 -0600
Superseded in sid-release 
bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low


  * ack NMUs of 9.8.4
    - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689,
      CVE-2013-2266
    - deliver rrl.h

  [LaMont Jones]

  * Use ISC's bin/tests
  * Diff cleanup and rationalization to 9.9.3 upstream

 -- LaMont Jones <email address hidden>  Sat, 17 Aug 2013 07:09:54 -0600
Superseded in jessie-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * CVE-2013-4854: A specially crafted query that includes malformed rdata can
    cause named to terminate with an assertion failure while rejecting the
    malformed query. (Closes: #717936).

 -- Salvatore Bonaccorso <email address hidden>  Sat, 27 Jul 2013 10:24:07 +0200
Superseded in jessie-release
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium


  * Non-maintainer upload.
  * Install /usr/include/dns/rrl.h (closes: #699834).

 -- Michael Gilbert <email address hidden>  Tue, 16 Apr 2013 01:59:05 +0000
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA
    lookup for a record with an A record overwrite rule in a Response Policy
    Zone (closes: #699145).
  * Fix cve-2013-2266: issues in regular expression handling (closes: #704174).

 -- Michael Gilbert <email address hidden>  Fri, 29 Mar 2013 00:47:25 +0000
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low


  [Ben Hutchings]

  * Initialise OpenSSL before calling chroot().  Closes: #696661

 -- LaMont Jones <email address hidden>  Fri, 01 Mar 2013 08:23:27 -0700
Superseded in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze9) squeeze-proposed-updates; urgency=low


  * Update db.root with new IP for D.root-servers.net.  Closes: #697352

 -- LaMont Jones <email address hidden>  Tue, 08 Jan 2013 07:07:02 -0700
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low


  [LaMont Jones]

  * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern]
    - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch.

  [Paul Vixie]

  * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits. 
    Closes: #698641

 -- LaMont Jones <email address hidden>  Wed, 30 Jan 2013 14:04:35 -0700
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high


  * The rest of the dnssec validation logspam removal.  Closes: #697681

 -- LaMont Jones <email address hidden>  Mon, 21 Jan 2013 13:18:53 -0700
Deleted in experimental-release (Reason: None provided.) 
bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low


  [Michael Gilbert]

  * Use /var/lib/bind for state file.  Closes: #689332

  [LaMont Jones]

  * zone transfers now involve link(), update the apparmor profile
  * Update db.root with new IP for D.root-servers.net.  Closes: #697352
  * re-drop dlzexternal test
  * Reduce log level for "sucessfully validated after lower casing" dnssec
    based on mail from Mark Andrews.  Closes: #697681
  * remove /var/lib/bind/bind9-default.md5sum in postrm
  * remove /etc/bind/named.conf.options on purge.  Closes: #668801

  [Sebastian Wiesinger]

  * Build and deliver dnssec-checkds and dnssec-verify in bind9utils

 -- LaMont Jones <email address hidden>  Wed, 09 Jan 2013 10:09:40 -0700
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low


  [Marc Deslauriers]

  * debian/bind9.apport: Add AppArmor info and logs to apport hook.

  [LaMont Jones]

  * Reduce log level for "sucessfully validated after lower casing" dnssec
    based on mail from Mark Andrews.  Closes: #697681
  * remove /var/lib/bind/bind9-default.md5sum in postrm
  * remove /etc/bind/named.conf.options on purge.  Closes: #668801

 -- LaMont Jones <email address hidden>  Wed, 09 Jan 2013 09:47:24 -0700
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low


  [Michael Gilbert]

  * Use /var/lib/bind for state file.  Closes: #689332

  [LaMont Jones]

  * Re-enable dlopen, do not build the test that fails.  Closes: #692416
  * Update db.root with new IP for D.root-servers.net.  Closes: #697352

 -- LaMont Jones <email address hidden>  Mon, 07 Jan 2013 06:50:25 -0700
Superseded in experimental-release 
bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low


  * Named could die on specific queries with dns64 enabled.
    [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]
    CVE-2012-5688  Closes: #695192

 -- LaMont Jones <email address hidden>  Wed, 05 Dec 2012 05:27:18 -0700
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low


  * CVE-2012-5688
    - Named could die on specific queries with dns64 enabled.
      [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.]

 -- LaMont Jones <email address hidden>  Wed, 05 Dec 2012 05:22:06 -0700
Superseded in wheezy-release 
bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low


  * Non-maintainer upload.
  * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing
    the patch.

 -- Philipp Kern <email address hidden>  Sat, 03 Nov 2012 20:43:43 +0100
Superseded in experimental-release 
bind9 (1:9.9.2.dfsg-1) experimental; urgency=low


  [Matthew Grant]

  * Turn off dlopen as it was causing test compile failures.
  * Add missing library .postrm files for debhelper

  [LaMont Jones]

  * New upstream version 9.9.2
  * soname fixes

 -- LaMont Jones <email address hidden>  Thu, 01 Nov 2012 08:59:57 -0600
Superseded in sid-release 
bind9 (1:9.8.4.dfsg-1) unstable; urgency=low


  [Matthew Grant]

  * Turn off dlopen as it was causing test compile failures.
  * Add missing library .postrm files for debhelper

  [LaMont Jones]

  * New upstream version
  * soname fixup
  * Ack NMUs

 -- LaMont Jones <email address hidden>  Mon, 29 Oct 2012 08:37:49 -0600
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium


  [ Philipp Kern ]
  * Non-maintainer upload.

  [ Marc Deslauriers ]
  * SECURITY UPDATE: denial of service via specific combinations of RDATA
    - bin/named/query.c: fix logic
    - Patch backported from 9.8.3-P4
    - CVE-2012-5166

 -- Philipp Kern <email address hidden>  Sun, 28 Oct 2012 20:28:11 +0100
Superseded in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze7) squeeze-security; urgency=high


  * Apply patch extracted from 9.7.6-P3 to fix CVE-2012-4244

 -- Florian Weimer <email address hidden>  Wed, 12 Sep 2012 20:00:45 +0200
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * Fix denial of service vulnerability triggered
    through an assert because of using bad cache
    (CVE-2012-3817; Closes: #683259).

 -- Nico Golde <email address hidden>  Mon, 30 Jul 2012 20:56:10 +0200
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high


  * Non-maintainer upload by the Security Team.
  * SECURITY UPDATE: ghost domain names attack
    - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that
      of the old NS RRset when replacing it.
    - Patch backported from 9.8.2.
    - CVE-2012-1033
  * SECURITY UPDATE: denial of service via zero length rdata handling
    - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for
      duplicate rdata.
    - Patch backported from 9.8.3-P1.
    - CVE-2012-1667

 -- Luk Claes <email address hidden>  Wed, 20 Jun 2012 15:26:09 -0400
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low


  [Christoph Egger]

  * define _GNU_SOURCE on kfreebsd et al.  Closes: #658201

  [LaMont Jones]

  * chmod typo in postinst.  LP: #980798
  * Correctly order debhelper bits in postrm.  Closes: #661040

 -- LaMont Jones <email address hidden>  Fri, 13 Apr 2012 12:09:24 -0600
Published in lenny-release 
bind9 (1:9.6.ESV.R4+dfsg-0+lenny4) lenny-security; urgency=high


  * Apply patch from ISC to fix query.c crash (CVE-2011-4313)

 -- Florian Weimer <email address hidden>  Wed, 16 Nov 2011 20:25:57 +0100
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low


  [Zlatan Todoric]

  * fixed Serbian latin translation of debconf template.  Closes: #634951

  [Peter Eisentraut]

  * Add support for "status" action to lwresd init script.  Closes: #651540

  [Bjørn Steensrud]

  * NB Translations.  Closes: #654454

  [LaMont Jones]

  * Default to run_resolvconf=false.  LP: #933723
  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202
  * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb. 
    Closes: #620007  LP: #681536
  * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides.
    LP: #929563

 -- LaMont Jones <email address hidden>  Fri, 17 Feb 2012 14:40:29 -0800
Superseded in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze4) squeeze-security; urgency=high


  * Apply patch from ISC to fix query.c crash (CVE-2011-4313)

 -- Florian Weimer <email address hidden>  Wed, 16 Nov 2011 20:12:40 +0100
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low


  * Deliver named.conf.options on fresh install.  Closes: #657042  LP: #920202

 -- LaMont Jones <email address hidden>  Wed, 25 Jan 2012 03:55:21 -0700
Superseded in sid-release 
bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * 9.8.1-P1
    -  Cache lookup could return RRSIG data associated with nonexistent
       records, leading to an assertion failure.

  [LaMont Jones]

  * add a readme entry for DNSSEC-by-default
  * Failed to install due to chgrp on non-existant directory.  Closes: #647598
  * ack NMU: l10n issues

 -- LaMont Jones <email address hidden>  Wed, 18 Jan 2012 10:44:14 -0700
Superseded in sid-release 
bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low


  * Non-maintainer upload.
  * Fix pending l10n issues. Debconf translations:
    - Danish (Joe Hansen).  Closes: #619302
    - Korean (강민지).  Closes: #632006, #632016
    - Serbian (FULL NAME).  Closes: #634886

 -- Christian Perrier <email address hidden>  Sat, 03 Dec 2011 17:22:12 +0100
Superseded in sid-release 
bind9 (1:9.8.1.dfsg-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * New upstream release

  [LaMont Jones]

  * cleanup the messages around killing named
  * enable dnssec validation: deliver named.conf.options outside of
    conffiledom, and update if able, complain and do not update if not
    Closes: #516979
  * typo in min-ncache-ttl processing
  * disable dlz until we get a patch to make it build again

  [Jay Ford]

  * Fix "waiting for pid $pid to die" loop to not be infinite.  Closes: #570852

 -- LaMont Jones <email address hidden>  Tue, 01 Nov 2011 16:39:19 -0600
Superseded in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze3) squeeze-security; urgency=high


  * Apply patch from ISC BIND 9.7.3-P3 to address CVE-2011-2464.

 -- Florian Weimer <email address hidden>  Tue, 05 Jul 2011 18:47:02 +0200
Superseded in lenny-release 
bind9 (1:9.6.ESV.R4+dfsg-0+lenny3) lenny-security; urgency=high


  * Apply patch from ISC BIND 9.6-ESV-R4-P3 to address CVE-2011-2464.

 -- Florian Weimer <email address hidden>  Tue, 05 Jul 2011 18:22:53 +0200
Superseded in squeeze-release 
bind9 (1:9.7.3.dfsg-1~squeeze2) squeeze-security; urgency=high
  * Apply patches from 9.7.3-P1 to address crasher in negative caching    (CVE-2011-1910) and resolution failures in DLV mode. -- Florian Weimer <email address hidden>  Fri, 27 May 2011 20:04:04 +0200
Superseded in wheezy-release
Superseded in sid-release 
bind9 (1:9.7.3.dfsg-1) unstable; urgency=low
  [Peter Palfrader]  * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right    db.  [Internet Systems Consortium, Inc]  * 9.7.3 - Closes: #612287  [Mahyuddin Susanto]  * Updated Indonesian debconf templates.  Closes: #608559  [LaMont Jones]  * soname changes -- LaMont Jones <email address hidden>  Wed, 23 Feb 2011 09:14:36 -0700
Superseded in lenny-release 
bind9 (1:9.6.ESV.R3+dfsg-0+lenny1) stable-security; urgency=low
  * v9.6-ESV-R3.  Addresses CVE-2010-3613, CVE-2010-3614    - Fix denial of service via ncache entry and a rrsig for the      same type (CVE-2010-3613)    - answers were incorrectly marked as insecure during key algorithm      rollover (CVE-2010-3614) -- LaMont Jones <email address hidden>  Wed, 01 Dec 2010 16:41:43 -0700
Superseded in wheezy-release
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.7.2.dfsg.P3-1.1) unstable; urgency=low
  * Non-maintainer upload.  * Fix encoding of Danish debconf translation -- Christian Perrier <email address hidden>  Wed, 12 Jan 2011 19:49:15 +0100
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high
  [ISC]  * Fix denial of service via ncache entry and a rrsig for the    same type (CVE-2010-3613)  * answers were incorrectly marked as insecure during key algorithm    rollover (CVE-2010-3614)  * Using "allow-query" in the "options" or "view" statements to    restrict access to authoritative zones had no effect.    (CVE-2010-3615)  [LaMont Jones]  * Adjust indentation for dpkg change.  Closes: #597171 -- LaMont Jones <email address hidden>  Wed, 01 Dec 2010 16:32:48 -0700
Superseded in sid-release 
bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low


  [Roy Jamison]

  * lib/isc/unix/resource.c was missing inttypes.h include.  LP: #674199

 -- LaMont Jones <email address hidden>  Fri, 12 Nov 2010 10:52:32 -0700
Superseded in sid-release 
bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low


  [Joe Dalton]

  * Add Danish translation of debconf templates.  Closes: #599431

  [Internet Software Consortium, Inc]

  * v9.7.2-P2

  [José Figueiredo]

  * Add Brazilian Portuguese debconf templates translation.  Closes: #597616

  [LaMont Jones]

  * drop this v3 (quilt) source format idea.  Closes: #589916

 -- LaMont Jones <email address hidden>  Sun, 10 Oct 2010 19:01:57 -0600
Superseded in lenny-release 
bind9 (1:9.6.ESV.R1+dfsg-0+lenny2) stable-security; urgency=medium


  * Use old location of the PID files.  Closes: #585004.
  * Log warning if openssl.cnf is not readable.

 -- Florian Weimer <email address hidden>  Wed, 09 Jun 2010 06:53:48 +0200
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low


  * Correct conflicts for bind9-host

 -- LaMont Jones <email address hidden>  Fri, 16 Jul 2010 05:24:38 -0600
Superseded in sid-release 
bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * Temporarily and partially disable change 2864 because it would cause
    inifinite attempts of RRSIG queries.  This is an urgent care fix; we'll
    revisit the issue and complete the fix later.  [RT #21710]
  * Temporarially rollback change 2748. [RT #21594]
  * Named failed to accept uncachable negative responses from insecure zones.
    [RT# 21555]

  [LaMont Jones]

  * freshen copyright file

 -- LaMont Jones <email address hidden>  Thu, 15 Jul 2010 15:07:54 -0600
Superseded in sid-release 
bind9 (1:9.7.1.dfsg-2) unstable; urgency=low


  [Regid Ichira]

  * explicitly add nsupdate to dynamic updates in README.Debian. 
    Closes: #577398

  [LaMont Jones]

  * Cleanup bind9-host description.  Closes: #579421
  * switch to 3.0 (quilt) source format, but not to quilt.  Closes: #578210

  [Stephen Gran]

  * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley
    <email address hidden>.  Closes: #584603

 -- LaMont Jones <email address hidden>  Fri, 02 Jul 2010 08:19:29 -0600
Superseded in sid-release 
bind9 (1:9.7.1.dfsg-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * 9.7.1

  [LaMont Jones]

  * Add freebsd support.  Closes: #578447
  * soname changes
  * freshen root cache.  LP: #596363

 -- LaMont Jones <email address hidden>  Mon, 21 Jun 2010 09:53:30 -0600
Superseded in lenny-release 
bind9 (1:9.6.ESV.R1+dfsg-0+lenny1) stable-security; urgency=high


  * New upstream version: BIND 9.6-ESV-R1.
  * Restore Debian-specific feature patches.

 -- Florian Weimer <email address hidden>  Sun, 23 May 2010 14:45:30 +0200
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * 9.7.0-P1
    - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]

 -- LaMont Jones <email address hidden>  Wed, 17 Mar 2010 08:06:42 -0600
Superseded in sid-release 
bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low


  [Niko Tyni]

  * fix mips/mipsel startup.  Closes: #516616

  [LaMont Jones]

  * ignore failures due to a lack of /etc/bind/named.conf*.  LP: #422968
  * ldap API changed regarding % sign.  LP: #227344
  * Drop more rfc and draft files.  Closes: #572606
  * update config.guess, config.sub.  Closes: #572528

 -- LaMont Jones <email address hidden>  Fri, 12 Mar 2010 14:56:08 -0700
Superseded in sid-release 
bind9 (1:9.7.0.dfsg-2) unstable; urgency=low


  [Aurelien Jarno]

  * kfreebsd has linux threads.  Closes: #470500

  [LaMont Jones]

  * do not error out on initial install.  Closes: #572443

 -- LaMont Jones <email address hidden>  Thu, 04 Mar 2010 09:32:13 -0700
Superseded in sid-release 
bind9 (1:9.7.0.dfsg-1) unstable; urgency=low


  * New upstream release

 -- LaMont Jones <email address hidden>  Wed, 17 Feb 2010 14:53:36 -0700
Superseded in lenny-release 
bind9 (1:9.5.1.dfsg.P3-1+lenny1) stable-security; urgency=high


  * Fix cache poisoning through additional section for secure delegations
    (CVE-2009-4022).  Backport of ISC changes between 9.5.2 and 9.5.2-P1.

 -- Florian Weimer <email address hidden>  Sun, 20 Dec 2009 20:14:35 +0100
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.6.1.dfsg.P3-1) unstable; urgency=low


  * New upstream release.  CVE-2010-0097

 -- LaMont Jones <email address hidden>  Tue, 19 Jan 2010 11:29:51 -0700
Deleted in experimental-release (Reason: None provided.) 
bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low


  * merge changes from 9.6.1.dfsg.P2-1
  * meta: drop verisoned depends from library packages, for less upgrade pain
  * apparmor: allow named to create /var/run/named/session.key

 -- LaMont Jones <email address hidden>  Sun, 06 Dec 2009 11:46:17 -0700
Superseded in experimental-release 
bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low


  [Internet Software Consortium, Inc]

  * 9.7.0b3

  [LaMont Jones]

  * Merge remote branch 'origin/master'
  * soname changes

 -- LaMont Jones <email address hidden>  Mon, 30 Nov 2009 21:07:58 -0700
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * 9.6.1-P2
    - When validating, track whether pending data was from the
      additional section or not and only return it if validates
      as secure. [RT #20438] CVE-2009-4022

  [LaMont Jones]

  * prerm: do not stop named on upgrade.  Closes: #542888
  * Drop some RFCs that crept into the diff.
  * meta: add ${misc:Depends}
  * lintian: update config.guess, config.sub in idnkit-1.0 tree
  * dnsutils: remove pre-sarge dpkg-divert calls in postinst
  * meta: soname changes
  * l10n: missing newline in pofile.

 -- LaMont Jones <email address hidden>  Fri, 27 Nov 2009 10:07:10 -0700
Superseded in experimental-release 
bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low


  * dnsutils: remove pre-sarge dpkg-divert calls in postinst

 -- LaMont Jones <email address hidden>  Tue, 17 Nov 2009 22:42:40 -0600
Superseded in lenny-release 
bind9 (1:9.5.1.dfsg.P3-1) stable-security; urgency=low


  [Internet Software Consortium, Inc]

  * A specially crafted update packet will cause named to exit. 
    CVE-2009-0696, CERT VU#725188.  Closes: #538975

 -- LaMont Jones <email address hidden>  Tue, 28 Jul 2009 22:48:28 -0600
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low


  * Build-Depend on the fixed libgeoip-dev.  Closes: #540973

 -- LaMont Jones <email address hidden>  Mon, 17 Aug 2009 06:53:11 -0600
Superseded in sid-release 
bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low


  [Jamie Strandboge]

  * reload individual named profile, not all of apparmor.  LP: #412751

  [Guillaume Delacour]

  * bind9 did not purge cleanly.  Closes: #497959

  [LaMont Jones]

  * postinst: do not append a blank line to /etc/default/bind9. 
    Closes: #541469
  * init.d stop needs to not error out.  LP: #398033
  * meta: fix build-depends.  Closes: #539230

 -- LaMont Jones <email address hidden>  Fri, 14 Aug 2009 17:03:31 -0600
Superseded in squeeze-release
Superseded in sid-release 
bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low


  [Internet Software Consortium, Inc]

  * A specially crafted update packet will cause named to exit. 
    CVE-2009-0696, CERT VU#725188.  Closes: #538975

  [InterNIC]

  * Update db.root hints file.

  [LaMont Jones]

  * Move default zone definitions from named.conf to named.conf.default-zones.
     Closes: #492308
  * use start-stop-daemon if rndc stop fails.  Closes: #536487
  * lwresd: pidfile name was wrong in init script.  Closes: #527137

 -- LaMont Jones <email address hidden>  Tue, 28 Jul 2009 22:03:14 -0600
Superseded in sid-release 
bind9 (1:9.6.1.dfsg-2) unstable; urgency=low


  * ia64: fix atomic.h

 -- LaMont Jones <email address hidden>  Tue, 23 Jun 2009 01:56:35 -0600
Superseded in squeeze-release
Superseded in lenny-release 
bind9 (1:9.5.1.dfsg.P2-1+lenny1) stable; urgency=medium


  * Non-maintainer upload with permission from maintainer
  * Upload "DNSSEC lookaside validation failed to handle unknown
    algorithms. [RT #19479]" fix to stable

 -- Florian Weimer <email address hidden>  Wed, 29 Apr 2009 13:33:34 +0200
Superseded in sid-release 
bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low


  * random_1 broke memory usage assertions.

 -- LaMont Jones <email address hidden>  Thu, 23 Apr 2009 05:15:45 -0600
151 → 225 of 234 results First • • • Last