Format: 1.8 Date: Wed, 20 Sep 2023 14:52:27 -0700 Source: bind9 Binary: bind9 bind9-dev bind9-dnsutils bind9-host bind9-libs bind9-utils Built-For-Profiles: noudeb Architecture: riscv64 riscv64_translations Version: 1:9.18.18-0ubuntu0.23.04.1 Distribution: lunar-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Lena Voytek Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Launchpad-Bugs-Fixed: 2015176 2028413 2032650 Changes: bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium . * New upstream release 9.18.18 (LP: #2028413) - Updates: + Mark a primary server as temporarily unreachable when a TCP connection response to an SOA query times out, matching behavior of a refused TCP connection. + Mark dialup and heartbeat-interval options as deprecated. + Retry DNS queries without an EDNS COOKIE when the first response is FORMERR with the EDNS COOKIE that was sent originally. + Use NS records for the relaxed QNAME minimization mode to reduce the number of queries from named. + Mark TKEY mode 2 as deprecated. + Mark delegation-only and root-delegation-only as deprecated. + Run RPZ and catalog zone updates on specialized offload threads to reduce blocked query processing time. - Bug Fixes: + Fix assertion failure from processing already-queued queries while server is being reconfigured or cache is being flushed. + Fix failure to load zones containing resource records with a TTL value larger than 86400 seconds when dnssec-policy is set to insecure. + Fix the ability to read HMAC-MD5 key files (LP: #2015176). + Fix stability issues with the catalog zone implementation. + Fix bind9 getting stuck when listen-on statement for HTTP is removed from configuration. + Do not return delegation from cache after stale-answer-client-timeout. + Fix failure to auto-tune clients-per-query limit in some situations. + Fix proper timeouts when using max-transfer-time-in and max-transfer-idle-in statements. + Bring rndc read timeout back to 60 seconds from 30. + Treat libuv returning ISC_R_INVALIDPROTO as a network error. + Clean up empty-non-terminal NSEC3 records. + Fix log file rotation cleanup for absolute file path destinations. + Fix various catalog zone processing crashes. + Fix transfer hang when downloading large zones over TLS. + Fix named crash when adding a new zone into the configuration file for a name which was already configured as member zone for a catalog zone. + Delay DNSSEC key queries until all zones have finished loading. - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional information. * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in 9.18.16. * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18. * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650) Checksums-Sha1: e95f0fed29b17d4d3da6faae04eed8b8acbe1e52 623642 bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb b2b09d651bc2d83706fc3e6b75131498162b5bd3 262948 bind9-dev_9.18.18-0ubuntu0.23.04.1_riscv64.deb bd270953a44f7a07387b08cfb6e1323d216f2b5e 376438 bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 1c4d94a4ce241cb07fff10c2d5de702fd04f3783 150124 bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_riscv64.deb dd8d99cf2214eed629aee43313e4293f517fd942 103042 bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 6816ee33880320b15cc497c147a2d44e4b10bea4 49578 bind9-host_9.18.18-0ubuntu0.23.04.1_riscv64.deb c1d14aa8fcb011861a0d934ed01ef411719dfee8 3535714 bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 5c142d1b4f7163920d1f1ac3ff291e95297eb6ab 1170306 bind9-libs_9.18.18-0ubuntu0.23.04.1_riscv64.deb 78d52d5b138b8d19fb6abaed74ad33fd6f54dd4d 388082 bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 3f64bde0afa7d77e937b78e1bfc8e4e85b372be1 154854 bind9-utils_9.18.18-0ubuntu0.23.04.1_riscv64.deb e1bc974298eb0a5be4c82e5a040e37ce948b4307 10981 bind9_9.18.18-0ubuntu0.23.04.1_riscv64.buildinfo f9ea448c22a6646816f354f5b11c2ce729d4b2f8 242732 bind9_9.18.18-0ubuntu0.23.04.1_riscv64.deb 79712234b20aa4be3ba4d90f70a95e7f6dc8a505 13156 bind9_9.18.18-0ubuntu0.23.04.1_riscv64_translations.tar.gz Checksums-Sha256: 02750ccd2e0ce96201d67cb6bc585d25754a8c42a0755321b4346e889b23afe0 623642 bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 3bea8e0c12af8b28c47097244e5fcf13eea0c6c2d7ffd886d99693fef12b549a 262948 bind9-dev_9.18.18-0ubuntu0.23.04.1_riscv64.deb de891758ead8ff7bf0efb5b5c388bc6e6d6306c6f213925e072cd406e8b14933 376438 bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 0b81fea64cb3245a720d2935b3d75a1059b9726f074aead935cd079650cda7ec 150124 bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_riscv64.deb fd97cfed08d046f899f85de9d9232951b191151137facf625484734e9d0aa5d4 103042 bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb de28a7847a9140fa3f0572bf077c169dccf0a41873baa1690ad114d62713bad5 49578 bind9-host_9.18.18-0ubuntu0.23.04.1_riscv64.deb bfa3b8afb851dff524d312ba400f6f968b0c95fff55ed10ffdd42dfabffe7b4e 3535714 bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb c7911c824fcbf401e4815032f87780bd456628bd1c393ecbe0c8280a9d63449b 1170306 bind9-libs_9.18.18-0ubuntu0.23.04.1_riscv64.deb 256f0bb6107b53a95c011b6d4c96f2fb1d9ce617b964317bf506ab823a17c82e 388082 bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 9f505244e374b089fac18f7f93193a95e97ee35e1370f3987c0addc20b7a063d 154854 bind9-utils_9.18.18-0ubuntu0.23.04.1_riscv64.deb 02ec530f29821e5e49760df9fa8b57a85c433fa227d6fc2de7a47ff20af31eb5 10981 bind9_9.18.18-0ubuntu0.23.04.1_riscv64.buildinfo 0467b4f58a4208bd12c436788a9694d5f983654e82aa5f3cb30feac0ca81c1b2 242732 bind9_9.18.18-0ubuntu0.23.04.1_riscv64.deb de1b7ccefc685d661f346fd7b4ffd7a5f9381799e689ece50d7750caad2abc33 13156 bind9_9.18.18-0ubuntu0.23.04.1_riscv64_translations.tar.gz Files: 391166f53d74e69bbe36df202c4e21af 623642 debug optional bind9-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 4a0b7f5fd66f2a61969a1a0909815c4e 262948 devel optional bind9-dev_9.18.18-0ubuntu0.23.04.1_riscv64.deb 53535d06f05866140a2959e726cf1dc5 376438 debug optional bind9-dnsutils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 56eb891ed1bef4454ef99c2885d4e5c4 150124 net standard bind9-dnsutils_9.18.18-0ubuntu0.23.04.1_riscv64.deb f044ec7983d372a7aaecb10edfc19865 103042 debug optional bind9-host-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb dfd7c5d4b2212e1dd0e77ddd1c664980 49578 net standard bind9-host_9.18.18-0ubuntu0.23.04.1_riscv64.deb 7165084398f715838f202a6d45e163e0 3535714 debug optional bind9-libs-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 1c78736a002f04e1c7683d0b2931a545 1170306 libs standard bind9-libs_9.18.18-0ubuntu0.23.04.1_riscv64.deb 416c4bc182e9970bfa5c85a009b01a4e 388082 debug optional bind9-utils-dbgsym_9.18.18-0ubuntu0.23.04.1_riscv64.ddeb 226b6fa01d265d24a0a2a25d0f7fb3cf 154854 net optional bind9-utils_9.18.18-0ubuntu0.23.04.1_riscv64.deb 5376f246a014553a5f8f72907cb1556e 10981 net optional bind9_9.18.18-0ubuntu0.23.04.1_riscv64.buildinfo daea42f78ca2228a5e6d3bf27858b946 242732 net optional bind9_9.18.18-0ubuntu0.23.04.1_riscv64.deb 9ebd4300c3a23b18c50465b34439dd4d 13156 raw-translations - bind9_9.18.18-0ubuntu0.23.04.1_riscv64_translations.tar.gz Original-Maintainer: Debian DNS Team