Format: 1.8 Date: Wed, 20 Sep 2023 14:52:27 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: arm64 arm64_translations Version: 1:9.18.18-0ubuntu0.23.04.1 Distribution: lunar-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2015176 2028413 2032650 Changes: bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium . * New upstream release 9.18.18 (LP: #2028413) - Updates: + Mark a primary server as temporarily unreachable when a TCP connection response to an SOA query times out, matching behavior of a refused TCP connection. + Mark dialup and heartbeat-interval options as deprecated. + Retry DNS queries without an EDNS COOKIE when the first response is FORMERR with the EDNS COOKIE that was sent originally. + Use NS records for the relaxed QNAME minimization mode to reduce the number of queries from named. + Mark TKEY mode 2 as deprecated. + Mark delegation-only and root-delegation-only as deprecated. + Run RPZ and catalog zone updates on specialized offload threads to reduce blocked query processing time. - Bug Fixes: + Fix assertion failure from processing already-queued queries while server is being reconfigured or cache is being flushed. + Fix failure to load zones containing resource records with a TTL value larger than 86400 seconds when dnssec-policy is set to insecure. + Fix the ability to read HMAC-MD5 key files (LP: #2015176). + Fix stability issues with the catalog zone implementation. + Fix bind9 getting stuck when listen-on statement for HTTP is removed from configuration. + Do not return delegation from cache after stale-answer-client-timeout. + Fix failure to auto-tune clients-per-query limit in some situations. + Fix proper timeouts when using max-transfer-time-in and max-transfer-idle-in statements. + Bring rndc read timeout back to 60 seconds from 30. + Treat libuv returning ISC_R_INVALIDPROTO as a network error. + Clean up empty-non-terminal NSEC3 records. + Fix log file rotation cleanup for absolute file path destinations. + Fix various catalog zone processing crashes. + Fix transfer hang when downloading large zones over TLS. + Fix named crash when adding a new zone into the configuration file for a name which was already configured as member zone for a catalog zone. + Delay DNSSEC key queries until all zones have finished loading. - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional information. * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in 9.18.16. * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18. * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650) Checksums-Sha1: 5a7f84d0ec927b269f5821d3d8123e04c1630a7b 644514 bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb c8dccbd56ed419390dd08bd3ae9d04612fcb9823 262948 bind9-dev_9.18.18-0ubuntu0.23.04.1_arm64.deb 841e3a49506125ff178bb5cdcad97ad15f5fd1ec 392254 bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb a217a66c2cdb78636d249789a3a0d41b44dd9f3e 154952 bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_arm64.deb 11f5c0183a56aa6dc9924087251135b1d2c1594f 105512 bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 8871cc28657cfe26c8c8db56643daba89c03b8cc 50332 bind9-host_9.18.18-0ubuntu0.23.04.1_arm64.deb ccaa9c15adf25bed51b9db0eb19993a8e63b5ca5 3623330 bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 377eba354e77393ea339f9f771a47762846365f0 1189816 bind9-libs_9.18.18-0ubuntu0.23.04.1_arm64.deb 0d594308f481d25b6c4306a2741dc92930770d26 394100 bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 00a584e1653eb27d1f40d14018f12bb0c7cb460c 158290 bind9-utils_9.18.18-0ubuntu0.23.04.1_arm64.deb 6512736b2947fd2857a6b0d1ac4d83a433368eb5 11151 bind9_9.18.18-0ubuntu0.23.04.1_arm64.buildinfo 12aff2bd3e0c190a8a6aec8923e260259a9e0975 248368 bind9_9.18.18-0ubuntu0.23.04.1_arm64.deb f2a539e59aa9f67243d95943e2211e6769a7b358 12942 bind9_9.18.18-0ubuntu0.23.04.1_arm64_translations.tar.gz Checksums-Sha256: a633610efcca9bd669095431400c63eda7290d7923a577782bfcf3619247f101 644514 bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb c9b01afeac45db476fde5cae259fc0f61f52e2a16a8ce5d62b3dabca3bc55a2f 262948 bind9-dev_9.18.18-0ubuntu0.23.04.1_arm64.deb 08d51f76f695be07c2dc67ed6ead6c06dfa934b8fd9a965960f261d1b6769e07 392254 bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 0e188314bde34e6a5c7191072f56c45e2b5c3c4eb97fd3ff6fe660a8ea83b1c4 154952 bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_arm64.deb b9ce6782ab76100f75b237e65c3c3892702d49bb786c7b9973d55c2bccc615b7 105512 bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 618bedddef437ffc795783621eade106b0e2b00397d5524efcc50eb976fa78c0 50332 bind9-host_9.18.18-0ubuntu0.23.04.1_arm64.deb 5901ef820c4f49cb379dccf7a5b833cb2e306a47deda7057725f260ca760981b 3623330 bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb d423506dbf34a68dec0ff8d2628db33701680d6b0ec2094e26b0d9686ea09d2c 1189816 bind9-libs_9.18.18-0ubuntu0.23.04.1_arm64.deb e53face7306caecc43ab6191903dba68f42794ff255ee268c6d865108d79694c 394100 bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 26dfedd0870af5fcd386743c76b85fd9610b56ea3619358a7512401cc56baf48 158290 bind9-utils_9.18.18-0ubuntu0.23.04.1_arm64.deb e63fa9430f5ab8de24bb6968363243a11dab37b2613b4101bf216774f5f8e7ad 11151 bind9_9.18.18-0ubuntu0.23.04.1_arm64.buildinfo 70eecb4ce274e6a4ef11abf8e0f756583dfb2b6f05fa3f5e920de8334877ff51 248368 bind9_9.18.18-0ubuntu0.23.04.1_arm64.deb 339dab0158db36f30e9eaf349717da9ecb8ec221b17197b1c792d4b28e2741da 12942 bind9_9.18.18-0ubuntu0.23.04.1_arm64_translations.tar.gz Files: a88e3865bc1a00920cb7df3e8c778730 644514 debug optional bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 3278e46edfbd5ce55e76cf3518daaa48 262948 devel optional bind9-dev_9.18.18-0ubuntu0.23.04.1_arm64.deb 576ed3c66856f52431ec607faed7a817 392254 debug optional bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb c9002ac75e2547965ccaf9912f981a76 154952 net standard bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_arm64.deb b50c9fb1c2a91d454bd7758dc88dcdff 105512 debug optional bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 6a2ba023dcf01ace6eb49c1789b1a899 50332 net standard bind9-host_9.18.18-0ubuntu0.23.04.1_arm64.deb 381192715f0876def0ed3ba08ad382b2 3623330 debug optional bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb 284ed915e9a62fa5e85a9a840472df5b 1189816 libs standard bind9-libs_9.18.18-0ubuntu0.23.04.1_arm64.deb dea7975ca161b7d71c59cc78d66a7642 394100 debug optional bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_arm64.ddeb fcefc6d3fc8a61441d21285a56b20564 158290 net optional bind9-utils_9.18.18-0ubuntu0.23.04.1_arm64.deb 4d7c8f5a5bf9784a0d762217acba5737 11151 net optional bind9_9.18.18-0ubuntu0.23.04.1_arm64.buildinfo 699c27ac9619f26a2b52329aa9b9073d 248368 net optional bind9_9.18.18-0ubuntu0.23.04.1_arm64.deb 850ec68394b6463a8ecef827d56d79b5 12942 raw-translations - bind9_9.18.18-0ubuntu0.23.04.1_arm64_translations.tar.gz Original-Maintainer: Debian DNS Team