diff -Nru bind9-9.10.3.dfsg.P4/debian/bind9-resolvconf.service bind9-9.10.3.dfsg.P4/debian/bind9-resolvconf.service --- bind9-9.10.3.dfsg.P4/debian/bind9-resolvconf.service 2016-04-04 00:58:17.000000000 +0000 +++ bind9-9.10.3.dfsg.P4/debian/bind9-resolvconf.service 2016-11-15 16:30:00.000000000 +0000 @@ -8,6 +8,7 @@ [Service] ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named' ExecStop=/sbin/resolvconf -d lo.named +RemainAfterExit=yes [Install] WantedBy=bind9.service diff -Nru bind9-9.10.3.dfsg.P4/debian/changelog bind9-9.10.3.dfsg.P4/debian/changelog --- bind9-9.10.3.dfsg.P4/debian/changelog 2016-10-31 12:56:39.000000000 +0000 +++ bind9-9.10.3.dfsg.P4/debian/changelog 2016-11-15 16:30:31.000000000 +0000 @@ -1,3 +1,10 @@ +bind9 (1:9.10.3.dfsg.P4-8ubuntu1.3) xenial; urgency=medium + + * Add RemainAfterExit to bind9-resolvconf unit configuration file + (LP: #1536181). + + -- Nishanth Aravamudan Tue, 15 Nov 2016 08:30:31 -0800 + bind9 (1:9.10.3.dfsg.P4-8ubuntu1.2) xenial-security; urgency=medium * SECURITY UPDATE: denial of service via responses containing a DNAME