Format: 1.8 Date: Wed, 23 Mar 2022 13:48:30 -0400 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 1:9.18.1-1ubuntu1 Distribution: jammy-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Sergio Durigan Junior Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 1961556 1964400 1964686 1965981 Changes: bind9 (1:9.18.1-1ubuntu1) jammy; urgency=medium . * Merge with Debian unstable (LP: #1965981). Remaining changes: - Don't build dnstap as it depends on universe packages: + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and protobuf-c-compiler (universe packages) + d/dnsutils.install: don't install dnstap + d/libdns1104.symbols: don't include dnstap symbols + d/rules: don't build dnstap nor install dnstap.proto - Add back apport: + d/bind9.apport: add back old bind9 apport hook, but without calling attach_conffiles() since that is already done by apport itself, with confirmation from the user. + d/control, d/rules: build-depends on dh-apport and use it - d/NEWS: mention some of the bigger changes in 9.16.0 packaging - d/bind9.named.service: use systemd Type=forking to signal daemon init. This fixes a regression of #900788 where services whose startup depend on name resolutions may fail due to bind9 not being ready (LP #1899902). - d/control: remove optional libjemalloc-dev Build-Depends as it is not in main. - d/NEWS: mention some of the relevant changes in 9.18.0 packaging or functionality that may affect usability. * Dropped changes: - d/p/0003-Remove-spurious-debugging-true.patch: remove development leftover debugging flag from nslookup code (LP: #1961556). [ Incorporated in 9.18.1. ] - SECURITY UPDATE: cache poisoning via bogus NS records + debian/patches/CVE-2021-25220.patch: tighten rules for acceptance of records into the cache in lib/dns/resolver.c. + CVE-2021-25220 [ Incorporated in 9.18.1. ] - SECURITY UPDATE: DoS via specially crafted TCP stream + debian/patches/CVE-2022-0396.patch: ensure correct ordering in lib/isc/netmgr/netmgr.c. + CVE-2022-0396 [ Incorporated in 9.18.1. ] - SECURITY UPDATE: DNAME insist with synth-from-dnssec enabled + debian/patches/CVE-2022-0635.patch: fix logic in lib/dns/rbtdb.c. + CVE-2022-0635 [ Incorporated in 9.18.1. ] - SECURITY UPDATE: Assertion failure on delayed DS lookup + debian/patches/CVE-2022-0667.patch: fix logic in lib/dns/resolver.c. + CVE-2022-0667 [ Incorporated in 9.18.1. ] * Added changes: - d/p/lp1964400-lp1964686-Add-digdelv-system-test-to-check-that-dig-tries-othe.patch, d/p/lp1964400-lp1964686-Add-digdelv-system-test-to-check-timed-out-result-fo.patch, d/p/lp1964400-lp1964686-Add-various-dig-host-tests-for-TCP-UDP-socket-error-.patch, d/p/lp1964400-lp1964686-After-dig-request-errors-try-to-use-other-servers-wh.patch, d/p/lp1964400-lp1964686-Fix-an-issue-in-dig-when-retrying-with-the-next-serv.patch, d/p/lp1964400-lp1964686-Fix-dig-error-when-trying-the-next-server-after-a-TC.patch, d/p/lp1964400-lp1964686-When-resending-a-UDP-request-insert-the-query-to-the.patch: Fix dig error when trying the next server after a TCP connection failure. This upstream patchset also fixes a crash when using the "host" command for numeric lookups (LP: #1964400) and an infinite hang when passing a non-existent hostname to "host" (LP: #1964686). Checksums-Sha1: 8a4502917c2f24cc26321af12d5a4cc5d21dae6c 582160 bind9-dbgsym_9.18.1-1ubuntu1_i386.ddeb 632bf2fbadf05a789be595ec2e6fe0223df828f9 262308 bind9-dev_9.18.1-1ubuntu1_i386.deb 292f6c0e4666f756110e4189f518d4c067f3f823 318462 bind9-dnsutils-dbgsym_9.18.1-1ubuntu1_i386.ddeb 40f418b0f8f17460e7921bd7f4f41d019e4a137a 150978 bind9-dnsutils_9.18.1-1ubuntu1_i386.deb 161d0abdeca8557878eb473f29bde24ad7c7d727 83276 bind9-host-dbgsym_9.18.1-1ubuntu1_i386.ddeb a63a723af2272eeaae398c04fcdedf55daae0a1a 50686 bind9-host_9.18.1-1ubuntu1_i386.deb 028748c5df4c54451827c479de897e5734b35c6e 3073238 bind9-libs-dbgsym_9.18.1-1ubuntu1_i386.ddeb 48094d6fcd7ba0b1cdd6f882708f3bb38ad594cb 1312952 bind9-libs_9.18.1-1ubuntu1_i386.deb 0527b0776cdd6ab20038e527952e1894107a8465 340930 bind9-utils-dbgsym_9.18.1-1ubuntu1_i386.ddeb 6fc5407b1b09124475b25fbfb903d7671067ac49 158304 bind9-utils_9.18.1-1ubuntu1_i386.deb 1c233c0e3c4de904e248813db1cffc656dfd9df6 10852 bind9_9.18.1-1ubuntu1_i386.buildinfo d6cb3509e87b9b665d291a316291261f0217533d 269218 bind9_9.18.1-1ubuntu1_i386.deb cfc539fb82eee6638f9182085e55f93ec4aa5ae3 13054 bind9_9.18.1-1ubuntu1_i386_translations.tar.gz Checksums-Sha256: 20b4fb55048580dd190a84cc4d50dd6c937da0c0cdfb2b07f307c201c834c831 582160 bind9-dbgsym_9.18.1-1ubuntu1_i386.ddeb 9509fa50932de4a98b02b456cbd28ade6bb69a6e9087ba384c8deb8162be3f11 262308 bind9-dev_9.18.1-1ubuntu1_i386.deb 429dad625588934af2b5cf3142569cad2b43da5080af1573621fd36082cbd00d 318462 bind9-dnsutils-dbgsym_9.18.1-1ubuntu1_i386.ddeb a61aba29206eb0b18400d2ecd5f07b65e936890c8ba6083acc4df72e4a579a18 150978 bind9-dnsutils_9.18.1-1ubuntu1_i386.deb daaaaf63958e31bb15967783a90d4b588ccf8fac5d354b33b143eed2f2dc9d7a 83276 bind9-host-dbgsym_9.18.1-1ubuntu1_i386.ddeb 38abd18c8607d67170a8a7f3228eca997aa8848fe3fcdd3d31178ca96be79cd9 50686 bind9-host_9.18.1-1ubuntu1_i386.deb 3ad7f90cf8996d6ff0d872ee2028014aa8f564d2bc92a1a09bd49ac7d9d34771 3073238 bind9-libs-dbgsym_9.18.1-1ubuntu1_i386.ddeb b459546c2f1b15bc4611131badbb52d5cb09674f0fa2d63974249d7290f0ea3f 1312952 bind9-libs_9.18.1-1ubuntu1_i386.deb f76fb54297415d78895dcfc7f1ad7b4ec7dee5d8e05271364ebb77403bdb9853 340930 bind9-utils-dbgsym_9.18.1-1ubuntu1_i386.ddeb e84f17cc26b20f2ea8d1e7f00ea63ea208324e27870e7f56e6787d34aad67edf 158304 bind9-utils_9.18.1-1ubuntu1_i386.deb 98ab1763e0399311b869689063462fe895b55e1f25fe0190c4e40ca6b66beaf1 10852 bind9_9.18.1-1ubuntu1_i386.buildinfo f5e443760c587a4aefab945dfd9b35f054ba0de11d377475f0202a71816ccd4b 269218 bind9_9.18.1-1ubuntu1_i386.deb 977069fc55057dd57d3a3949d01bcbe48873f27ffae0066b7dff800355118b84 13054 bind9_9.18.1-1ubuntu1_i386_translations.tar.gz Files: a8681bbdb2e530370b1e207f217fbe62 582160 debug optional bind9-dbgsym_9.18.1-1ubuntu1_i386.ddeb e6e7a45d8f81d021232f8125f491f76a 262308 devel optional bind9-dev_9.18.1-1ubuntu1_i386.deb b6b9186dc3475fb51f0cb245ff2ffe55 318462 debug optional bind9-dnsutils-dbgsym_9.18.1-1ubuntu1_i386.ddeb 8632def78f52a4c51eb9935e6d6cfe1c 150978 net standard bind9-dnsutils_9.18.1-1ubuntu1_i386.deb 3ae16fc4a3f7c11d308045074e2b692a 83276 debug optional bind9-host-dbgsym_9.18.1-1ubuntu1_i386.ddeb b83c5c0d5e8101ea270652d740512a1e 50686 net standard bind9-host_9.18.1-1ubuntu1_i386.deb b3d9455070cb2bf710f617c477c536e5 3073238 debug optional bind9-libs-dbgsym_9.18.1-1ubuntu1_i386.ddeb 5d326c27d35e4937690162e63fb5b763 1312952 libs standard bind9-libs_9.18.1-1ubuntu1_i386.deb b751cca6568215df2112c1d794bc5d69 340930 debug optional bind9-utils-dbgsym_9.18.1-1ubuntu1_i386.ddeb 61716fa4797c75161fe572793e147768 158304 net optional bind9-utils_9.18.1-1ubuntu1_i386.deb d1445241134a8ec44ce00e7c7ea989d5 10852 net optional bind9_9.18.1-1ubuntu1_i386.buildinfo 175e4c5759c6b8205a84d7897326df2e 269218 net optional bind9_9.18.1-1ubuntu1_i386.deb cbf2c0b676b9c4ce7d7addceb99ad1dc 13054 raw-translations - bind9_9.18.1-1ubuntu1_i386_translations.tar.gz Original-Maintainer: Debian DNS Team