-
bind9 (1:9.5.0.dfsg.P2-1ubuntu3.5) intrepid-security; urgency=low
* SECURITY UPDATE: incorrect cache update from additional section
- bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
lib/dns/{rbtdb.c,resolver.c,validator.c}: further fixes backported
from 9.5.2-P2
- CVE-2009-4022
* SECURITY UPDATE: incorrect caching of bogus NXDOMAIN responses
- bin/named/query.c, lib/dns/include/dns/{db.h,types.h},
lib/dns/{rbtdb.c,resolver.c,validator.c}: fixes backported from
9.5.2-P2
- CVE-2010-0097
-- Marc Deslauriers <email address hidden> Tue, 19 Jan 2010 13:11:22 -0500
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu3.4) intrepid-security; urgency=low
* SECURITY UPDATE: incorrect cache update from additional section
- bin/named/query.c, lib/dns/{include/dns/types.h,masterdump.c,
rbtdb.c,resolver.c,validator.c}: handle the additional section
properly. lib/dns/api, version: increment versions.
- debian/*: increment to libdns44, add libdns43 metapackage so
upgrade-manager won't hold the bind9 upgrade back.
- CVE-2009-4022
-- Marc Deslauriers <email address hidden> Fri, 04 Dec 2009 08:47:05 -0500
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu3.2) intrepid-security; urgency=low
* SECURITY UPDATE: server can exit on malicious update packet.
- bin/named/update.c: backported upstream fix.
- CVE-2009-0696
-- Kees Cook <email address hidden> Tue, 28 Jul 2009 20:10:39 -0700
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu3.1) intrepid-security; urgency=low
* SECURITY UPDATE: clients treat malformed signatures as good when verifying
server DSA and ECDSA certificates.
- update lib/dns/openssldsa_link.c to properly check the return code of
DSA_do_verify()
- CVE-2009-0025
-- Jamie Strandboge <email address hidden> Wed, 07 Jan 2009 16:56:11 -0600
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu3) intrepid-proposed; urgency=low
* Port LaMont Jones' IPv6 fix to Intrepid. (LP: #249824)
-- Matt LaPlante <email address hidden> Tue, 02 Dec 2008 22:52:17 -0600
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu2) intrepid; urgency=low
* Add ufw integration:
- Created debian/bind9.ufw.profile
- debian/rules:
+ install profile
- debian/control
+ Suggest ufw
-- Nicolas Valcarcel <email address hidden> Tue, 26 Aug 2008 20:00:01 -0500
-
bind9 (1:9.5.0.dfsg.P2-1ubuntu1) intrepid; urgency=low
* debian/{control,rules}: enable PIE hardening
-- Kees Cook <email address hidden> Wed, 20 Aug 2008 15:46:44 -0700
-
bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low
[LaMont Jones]
* default to using resolvconf if it is installed
* fix sonames and dependencies. Closes: #149259, #492418
* Do not build-depend libcap2-dev on non-linux. Closes: #493392
* drop unused query-loc manpage. Closes: #492564
* lwresd: Deliver /etc/bind directory. Closes: #490027
* fix query-source comment in default install
[Internet Software Consortium, Inc]
* 9.5.0-P2. Closes: #492949
[localization folks]
* l10n: Spanish debconf translation. Closes: #492425 (Ignacio Mondino)
* l10n: Swedish debconf templates. Closes: #491369 (Martin Ågren)
* l10n: Japanese debconf translations. Closes: #492048 (Hideki Yamane
(Debian-JP))
* l10n: Finnish translation. Closes: #490630 (Esko Arajärvi)
* l10n: Italian debconf translations. Closes: #492587 (Alessandro Vietta)
bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
* Revert "meta: merge the mess of single-lib packages back into one large
one." - That way lies madness and pain.
* init.d/bind9: implement status function. LP: #203169
-- LaMont Jones <email address hidden> Tue, 05 Aug 2008 00:51:51 +0100
-
bind9 (1:9.5.0.dfsg.P1-2~build1) intrepid; urgency=low
* package for intrepid
bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low
* Revert "meta: merge the mess of single-lib packages back into one large
one." - That way lies madness and pain.
* init.d/bind9: implement status function. LP: #203169
bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low
* Repackage 9.5.0.dfsg-5 with the -P1 tarball.
bind9 (1:9.5.0.dfsg-5) unstable; urgency=low
[Internet Software Consortium, Inc]
* Randomize UDP query source ports to improve forgery resilience.
(CVE-2008-1447)
[LaMont Jones]
* add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean
* fix sonames
* drop unneeded build-deps, since we do not actually deliver B9vARM.pdf
* meta: cleanup libbind9-41 Provides/Conflicts
* build: fix sonames for new libraries
* postinst: really restart bind/lwresd in postinst
-- LaMont Jones <email address hidden> Tue, 08 Jul 2008 22:00:54 -0600
-
bind9 (1:9.5.0.dfsg-4) unstable; urgency=low
[LaMont Jones]
* control: fix dnsutils description to avoid list reformatting.
Closes: #480317
* lwresd: restart in postinst. Closes: #486481
* meta: merge the mess of single-lib packages back into one large one.
* apparmor: allow bind to create files in /var/{lib,cache}/bind
* build: drop .la files. Closes: #486969
* build: drop the extra lib path from the library-package merge
* meta: liblwres40 does not conflict with the libbind9-40-provided libbind0
[localization folks]
* l10n: German debconf translation. Closes: #486547 (Helge Kreutzmann)
* l10n: Indonesian debconf translations. Closes: #486503 (Arief S Fitrianto)
* l10n: Slovak po-debconf translation Closes: #488905 (helix84)
* l10n: Turkish debconf template. Closes: #486479 (Mert Dirik)
-- Ubuntu Archive Auto-Sync <email address hidden> Fri, 04 Jul 2008 08:29:17 +0100
-
bind9 (1:9.5.0.dfsg-3) unstable; urgency=low
[LaMont Jones]
* bind9utils Depends: libbind9-40. Closes: #486194
* bind9 should not deliver manpages for nonexistant binaries.
Closes: #486196
[localization folks]
* l10n: Vietnamese debconf templates translation update. Closes: #486185
(Clytie Siddall)
* l10n: Russian debconf templates translation. Closes: #486191 (Yuri Kozlov)
* l10n: Galician debconf template. Closes: #486215 (Jacobo Tarrio)
* l10n: French debconf templates. Closes: #486325 (CALARESU Luc)
* l10n: Czech debconf translation. Closes: #486337 (Miroslav Kure)
* l10n: Updated Portuguese translation. Closes: #486267 (Traduz -
Portuguese Translation Team)
bind9 (1:9.5.0.dfsg-2) unstable; urgency=low
[Tim Spriggs]
* init.d: Nexenta has different ifconfig arguments
[LaMont Jones]
* templates rework from debian-l10n-english
* reload named when an interface goes up or down. LP: #226495
* build: need to create the directories for interface restart triggering
* Build-Depends: libcap2-dev. Closes: #485747
* Leave named running during update. Closes: #453765
* Fix path to uname, cleaning up the nexenta checks.
* l10n: avoid double-question in templates.
[localization folks]
* l10n: Vietnamese debconf translations. Closes: #483911 (Clytie Siddall)
* l10n: Portuguese debconf translations. Closes: #483872 (Traduz -
Portuguese Translation Team)
bind9 (1:9.5.0.dfsg-1) unstable; urgency=low
[LaMont Jones]
* manpages: fix references that should say /etc/bind
* meta: build-depend libxml2-dev for statistics support
bind9 (1:9.5.0.dfsg-0) experimental; urgency=low
[Internet Software Consortium, Inc]
* 9.5.0 release
[LaMont Jones]
* Only use capabilities if they are present: reprise. Closes: #360339, #212226
* control: fix dnsutils description to avoid list reformatting. Closes: #480317
* build: use the correct directories in dh_shlibdeps invocation
* build: turn on dlz. No pgsql or mysql support yet. LP: #227344
-- LaMont Jones <email address hidden> Thu, 19 Jun 2008 13:11:51 +0100
-
bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low
* build: use the correct directories in dh_shlibdeps invocation
* build: turn on dlz. LP: #227344
-- LaMont Jones <email address hidden> Tue, 27 May 2008 21:43:06 -0600
-
bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low
* Upload what will become (maybe an ancestor of) -2 to intrepid.
- Only use capabilities if they are present: reprise. Closes: #360339, #212226
- control: fix dnsutils description to avoid list reformatting. Closes: #480317
-- LaMont Jones <email address hidden> Mon, 26 May 2008 11:46:27 -0600
-
bind9 (1:9.4.2-10) unstable; urgency=low
[Jamie Strandboge]
* debian/bind9.preinst: AA force-complain on upgrade without existing
profile. LP: #204658
[LaMont Jones]
* host: manpage inaccurately describes default query. LP: #203087
-- LaMont Jones <email address hidden> Wed, 09 Apr 2008 20:33:51 +0100
