bind9 1:9.18.18-0ubuntu0.23.04.1 source package in Ubuntu
Changelog
bind9 (1:9.18.18-0ubuntu0.23.04.1) lunar; urgency=medium * New upstream release 9.18.18 (LP: #2028413) - Updates: + Mark a primary server as temporarily unreachable when a TCP connection response to an SOA query times out, matching behavior of a refused TCP connection. + Mark dialup and heartbeat-interval options as deprecated. + Retry DNS queries without an EDNS COOKIE when the first response is FORMERR with the EDNS COOKIE that was sent originally. + Use NS records for the relaxed QNAME minimization mode to reduce the number of queries from named. + Mark TKEY mode 2 as deprecated. + Mark delegation-only and root-delegation-only as deprecated. + Run RPZ and catalog zone updates on specialized offload threads to reduce blocked query processing time. - Bug Fixes: + Fix assertion failure from processing already-queued queries while server is being reconfigured or cache is being flushed. + Fix failure to load zones containing resource records with a TTL value larger than 86400 seconds when dnssec-policy is set to insecure. + Fix the ability to read HMAC-MD5 key files (LP: #2015176). + Fix stability issues with the catalog zone implementation. + Fix bind9 getting stuck when listen-on statement for HTTP is removed from configuration. + Do not return delegation from cache after stale-answer-client-timeout. + Fix failure to auto-tune clients-per-query limit in some situations. + Fix proper timeouts when using max-transfer-time-in and max-transfer-idle-in statements. + Bring rndc read timeout back to 60 seconds from 30. + Treat libuv returning ISC_R_INVALIDPROTO as a network error. + Clean up empty-non-terminal NSEC3 records. + Fix log file rotation cleanup for absolute file path destinations. + Fix various catalog zone processing crashes. + Fix transfer hang when downloading large zones over TLS. + Fix named crash when adding a new zone into the configuration file for a name which was already configured as member zone for a catalog zone. + Delay DNSSEC key queries until all zones have finished loading. - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional information. * d/p/CVE-2023-2828.patch, CVE-2023-2911.patch: Remove - fixed upstream in 9.18.16. * d/p/CVE-2023-3341.patch: Refresh, matching upstream, to apply in 9.18.18. * d/t/control, d/t/dyndb-ldap: add DEP8 test (LP: #2032650) -- Lena Voytek <email address hidden> Wed, 20 Sep 2023 14:52:27 -0700
Upload details
- Uploaded by:
- Lena Voytek
- Sponsored by:
- Andreas Hasenack
- Uploaded to:
- Lunar
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- net
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section | |
---|---|---|---|---|
Lunar | proposed | main | net |
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
bind9_9.18.18.orig.tar.xz | 5.2 MiB | d735cdc127a6c5709bde475b5bf16fa2133f36fdba202f7c3c37d134e5192160 |
bind9_9.18.18.orig.tar.xz.asc | 833 bytes | 305ea203e6e968d54cbae8df9781d986eb1c592097be5c717f38a7def64f90b7 |
bind9_9.18.18-0ubuntu0.23.04.1.debian.tar.xz | 71.9 KiB | c1c0e425e842db1c20f3353159f2984afda52033d2eac00acb95209be58655de |
bind9_9.18.18-0ubuntu0.23.04.1.dsc | 3.2 KiB | ada106b141829232a93929404d01527929ce7c57be4e22ca1750bfacb2d0a290 |
Available diffs
Binary packages built by this source
- bind9: Internet Domain Name Server
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package provides the server and related configuration files.
- bind9-dbgsym: debug symbols for bind9
- bind9-dev: Static Libraries and Headers used by BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package contains a bundle of static libraries and header files used by
BIND 9.
.
Please be aware that the BIND 9 libraries are considered private by upstream
developers and the API and ABI might break at any time.
- bind9-dnsutils: Clients provided with BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package delivers various client programs related to DNS that are
derived from the BIND 9 source tree.
.
- dig - query the DNS in various ways
- nslookup - the older way to do it
- nsupdate - perform dynamic updates (See RFC2136)
- bind9-dnsutils-dbgsym: debug symbols for bind9-dnsutils
- bind9-doc: Documentation for BIND 9
This package provides various documents that are useful for maintaining a
working BIND 9 installation.
- bind9-host: DNS Lookup Utility
This package provides the 'host' DNS lookup utility in the form that
is bundled with the BIND 9 sources.
- bind9-host-dbgsym: debug symbols for bind9-host
- bind9-libs: Shared Libraries used by BIND 9
The Berkeley Internet Name Domain (BIND 9) implements an Internet domain
name server. BIND 9 is the most widely-used name server software on the
Internet, and is supported by the Internet Software Consortium, www.isc.org.
.
This package contains a bundle of shared libraries used by BIND 9.
- bind9-libs-dbgsym: debug symbols for bind9-libs
- bind9-utils: Utilities for BIND 9
This package provides various utilities that are useful for maintaining a
working BIND 9 installation.
- bind9-utils-dbgsym: debug symbols for bind9-utils
- bind9utils: Transitional package for bind9-utils
This is a transitional package. It can safely be removed.
- dnsutils: Transitional package for bind9-dnsutils
This is a transitional package. It can safely be removed.