Author: Ubuntu Git Importer
Author Date: 2019-04-03 04:56:42 UTC

DSC file for 1:9.11.5.P4+dfsg-2

Author: Bernhard Schmidt
Author Date: 2019-04-02 19:12:50 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: b0bdd02432d14daafce1bb0f8797148c2ed46a67
Unapplied parent: d8ed947828eb20a9b9a2433ca6e72d67db684e12

New changelog entries:
  [ Ondřej Surý ]
  * Update d/gbp.conf for Debian Buster
  [ Bernhard Schmidt ]
  * Cherry-Pick upstream commit to prevent dnssec-keymgr from immediately
    expiring and deleting old DNSSEC keys when being run for the first
    time (Closes: #923984)
  * Update AppArmor policy for Samba AD DLZ
    - Add changed default location for named.conf
    - Allow read/mmap on some Samba libraries
    Thanks to Steven Monai (Closes: #920530)
  [ Andreas Beckmann ]
  * bind9.preinst: cope with ancient conffile named.conf.options
    (Closes: #905177)

Author: Bernhard Schmidt
Author Date: 2019-04-02 19:12:50 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: a2175fa9885401baf48515bdf997a9e29527cc21

New changelog entries:
  [ Ondřej Surý ]
  * Update d/gbp.conf for Debian Buster
  [ Bernhard Schmidt ]
  * Cherry-Pick upstream commit to prevent dnssec-keymgr from immediately
    expiring and deleting old DNSSEC keys when being run for the first
    time (Closes: #923984)
  * Update AppArmor policy for Samba AD DLZ
    - Add changed default location for named.conf
    - Allow read/mmap on some Samba libraries
    Thanks to Steven Monai (Closes: #920530)
  [ Andreas Beckmann ]
  * bind9.preinst: cope with ancient conffile named.conf.options
    (Closes: #905177)

Author: Bernhard Schmidt
Author Date: 2019-02-22 16:54:10 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 52d2091ca185fda1be3c67ec4fa80c07c2ab6136
Unapplied parent: 09fe0ebcfe048d10a06591986a49b1329465a8be

New changelog entries:
  [ Bernhard Schmidt ]
  * New upstream version 9.11.5.P4+dfsg
    - CVE-2018-5744: A specially crafted packet can cause named to leak memory
    - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over
      to an unsupported key algorithm when using managed-keys
    - CVE-2019-6465: Controls for zone transfers might not be properly applied
      to Dynamically Loadable Zones (DLZs) if the zones are writable.
  * d/watch: Do not use beta or RC versions
  * d/libdns1104.symbols: fix symbols-file-contains-debian-revision for dnstap
    symbols
  [ Ondřej Surý ]
  * Add new upstream GPG signing-key

Author: Bernhard Schmidt
Author Date: 2019-02-22 16:54:10 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: ebcfdaed808852dab2177f911c875bf606ff4d62

New changelog entries:
  [ Bernhard Schmidt ]
  * New upstream version 9.11.5.P4+dfsg
    - CVE-2018-5744: A specially crafted packet can cause named to leak memory
    - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over
      to an unsupported key algorithm when using managed-keys
    - CVE-2019-6465: Controls for zone transfers might not be properly applied
      to Dynamically Loadable Zones (DLZs) if the zones are writable.
  * d/watch: Do not use beta or RC versions
  * d/libdns1104.symbols: fix symbols-file-contains-debian-revision for dnstap
    symbols
  [ Ondřej Surý ]
  * Add new upstream GPG signing-key

Author: Ubuntu Git Importer
Author Date: 2019-02-22 10:57:06 UTC

DSC file for 1:9.11.5.P1+dfsg-1ubuntu2

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: e43b479562053f9260287e716b0a0fddea957075

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: e43b479562053f9260287e716b0a0fddea957075

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: e43b479562053f9260287e716b0a0fddea957075

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: b17a322337109e48bc37223a507ae78434407867
Unapplied parent: 417e29c33028609e92f277e160d0eb72b23d7051

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: e43b479562053f9260287e716b0a0fddea957075

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: b17a322337109e48bc37223a507ae78434407867
Unapplied parent: 417e29c33028609e92f277e160d0eb72b23d7051

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: b17a322337109e48bc37223a507ae78434407867
Unapplied parent: 417e29c33028609e92f277e160d0eb72b23d7051

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: b17a322337109e48bc37223a507ae78434407867
Unapplied parent: 417e29c33028609e92f277e160d0eb72b23d7051

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 98e06ba763484621205c5f4b63f94a04cf53d9fd
Unapplied parent: 4af20aff5792274d9686614cd6d0036efed59767

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ce70edc07011a3590eb933a6f99672ce0d184392

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 1eeeae604cabb4e3a09af2421590e59b55cdf4aa
Unapplied parent: 3d41831abeedcc026782b9186e7d51ba30660f88

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 2ac89f20ad3360e203214dfba09b536478ba71ce

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 96a067adb4409ede8d26453ec15c8027509b4aec
Unapplied parent: be5c3b01b2ee3717b3210e3b256313295e9bbebd

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ce70edc07011a3590eb933a6f99672ce0d184392

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: ce70edc07011a3590eb933a6f99672ce0d184392

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 96a067adb4409ede8d26453ec15c8027509b4aec
Unapplied parent: be5c3b01b2ee3717b3210e3b256313295e9bbebd

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 1eeeae604cabb4e3a09af2421590e59b55cdf4aa
Unapplied parent: 3d41831abeedcc026782b9186e7d51ba30660f88

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 1eeeae604cabb4e3a09af2421590e59b55cdf4aa
Unapplied parent: 3d41831abeedcc026782b9186e7d51ba30660f88

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:07:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.12 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 96a067adb4409ede8d26453ec15c8027509b4aec
Unapplied parent: be5c3b01b2ee3717b3210e3b256313295e9bbebd

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745-pre.patch: enhance rfc 5011 logging in
      lib/dns/zone.c,
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 2ac89f20ad3360e203214dfba09b536478ba71ce

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 8f32abf5ff0267b580f3814e97633ee67c4204e3

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 98e06ba763484621205c5f4b63f94a04cf53d9fd
Unapplied parent: 4af20aff5792274d9686614cd6d0036efed59767

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 8f32abf5ff0267b580f3814e97633ee67c4204e3

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 8f32abf5ff0267b580f3814e97633ee67c4204e3

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:02:07 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 2ac89f20ad3360e203214dfba09b536478ba71ce

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 08:10:34 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 98e06ba763484621205c5f4b63f94a04cf53d9fd
Unapplied parent: 4af20aff5792274d9686614cd6d0036efed59767

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Dimitri John Ledkov
Author Date: 2019-02-05 14:31:40 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c441991180d23d4066bdecdfcf4f1e9c2c232fb2

New changelog entries:
  * Disable EDDSA to avoid picking up new symbols when rebuilding against
    new OpenSSL. Cherrypick from Debian & Disco. LP: #1815474

Author: Dimitri John Ledkov
Author Date: 2019-02-05 14:31:40 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 06a4ff681a5bb1b80a85933af2dc6571dffe7f0a
Unapplied parent: eeed7c325ab3c21c79f3bcb8cdbf633a684f0f6f

New changelog entries:
  * Disable EDDSA to avoid picking up new symbols when rebuilding against
    new OpenSSL. Cherrypick from Debian & Disco. LP: #1815474

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 534cda3fac8f7406614ae13455bbd00027e9fb4a
Unapplied parent: bb122ac04c592dd1194968cb003860308d657700

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 534cda3fac8f7406614ae13455bbd00027e9fb4a
Unapplied parent: bb122ac04c592dd1194968cb003860308d657700

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 9b9cbf937c8823070697f64c6c8a0e3014a3ce8c

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 9b9cbf937c8823070697f64c6c8a0e3014a3ce8c

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:58:53 UTC

Import patches-applied version 1:9.9.5.dfsg-9+deb8u15 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: f96568ecd9b4819f3ac1f0a4e451b8f2973b5191
Unapplied parent: 5e8d11342406507af33697c7b59f65547d11dfbb

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:58:53 UTC

Import patches-unapplied version 1:9.9.5.dfsg-9+deb8u15 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 05aeb72e8f361d6c3356d0c3b873887eafe9890f

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Timo Aaltonen
Author Date: 2018-04-13 04:40:47 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 70242602814ef4d69ec6e5546fbe3d9198120128
Unapplied parent: 8fef78d9f3e68141948c4952261a550519e828db

New changelog entries:
  * New upstream release. (LP: #1763572)
    - fix a crash when configured with ipa-dns-install
  * Merge from Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe

Author: Timo Aaltonen
Author Date: 2018-04-13 04:40:47 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 3950c2c39039be56a8861a16916e4fba4376b7fe

New changelog entries:
  * New upstream release. (LP: #1763572)
    - fix a crash when configured with ipa-dns-install
  * Merge from Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe

Author: Ubuntu Git Importer
Author Date: 2018-03-23 16:45:59 UTC

pristine-tar data for bind9_9.11.3+dfsg.orig.tar.gz

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:40:17 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.3+deb9u4 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 1d93845758286975883ea0abe15c8e358ed282ba
Unapplied parent: c09cf0adfcf8966cdcd34b330c99203787d3b164

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:40:17 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.3+deb9u4 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 914739121df134ac43bde61d53062f25b46038f4

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Ubuntu Git Importer
Author Date: 2018-03-06 11:32:46 UTC

pristine-tar data for bind9_9.11.2.P1.orig.tar.gz

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:26:27 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: cc1c0c21b3990155234416d1c803fe18049a990e
Upload parent: 79ab6e7438ad26be74098a893717ef8098cdae8b

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:26:27 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 7056c964d4d31fd232e97fd8e4676b7bfca7f369
Unapplied parent: d3a12d1daf604c27bc69b8e9a1aecb49878e8abd

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Marc Deslauriers
Author Date: 2017-09-15 11:42:53 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.2 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 8d068071ee6829d92c48dfbd6377785e867140d9

New changelog entries:
  * SECURITY REGRESSION: regression in last security update
    - debian/patches/CVE-2017-3142-regression.patch: fix verification of
      TSIG signed TCP message sequences where not all the messages contain
      TSIG records in lib/dns/tsig.c, aded test to
      lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
  * debian/patches/update_keys.patch: Update the built in managed keys to
    include the upcoming root KSK in bind.keys, bind.keys.h.

Author: Marc Deslauriers
Author Date: 2017-09-15 11:42:53 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.2 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 7c1fe9397d836d5ce33dee0da656cb53b416d7db
Unapplied parent: 19105bd28972338a95bc585558fe365fcaaf217e

New changelog entries:
  * SECURITY REGRESSION: regression in last security update
    - debian/patches/CVE-2017-3142-regression.patch: fix verification of
      TSIG signed TCP message sequences where not all the messages contain
      TSIG records in lib/dns/tsig.c, aded test to
      lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
  * debian/patches/update_keys.patch: Update the built in managed keys to
    include the upcoming root KSK in bind.keys, bind.keys.h.

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba5f02d2957112b32e838892063ca635659f25f8
Upload parent: 2998a9c607e20e741b6a0d388ef7d3625aa90c92

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba5f02d2957112b32e838892063ca635659f25f8
Upload parent: 2998a9c607e20e741b6a0d388ef7d3625aa90c92

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: d1fdec708200b56a7e55d94871892b8159e41715
Unapplied parent: 7e5a00a72691daba697daa4240fb2f2d5f67f83d

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: d1fdec708200b56a7e55d94871892b8159e41715
Unapplied parent: 7e5a00a72691daba697daa4240fb2f2d5f67f83d

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Nish Aravamudan
Author Date: 2017-03-22 17:09:25 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.4 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 775d52f78f444fa8fd814ae1403649eef777b479
Unapplied parent: b54573571d518933a9a8c26148ea0f4535ccf571

New changelog entries:
  * Add RemainAfterExit to bind9-resolvconf unit configuration file
    (LP: #1536181).

Author: Nish Aravamudan
Author Date: 2017-03-22 17:09:25 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.4 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 15b43bfbf9198bd770cc41cc9d9810c6ab0c7c6f

New changelog entries:
  * Add RemainAfterExit to bind9-resolvconf unit configuration file
    (LP: #1536181).

Author: Marc Deslauriers
Author Date: 2017-02-15 14:37:39 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu4 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: ec6bd233ba2898565db3f99275229314299b5cea

New changelog entries:
  * SECURITY UPDATE: Combining dns64 and rpz can result in dereferencing
    a NULL pointer
    - debian/patches/CVE-2017-3135.patch: properly handle dns64 and rpz
      combination in bin/named/query.c, lib/dns/message.c,
      lib/dns/rdataset.c.
    - CVE-2017-3135
  * SECURITY UPDATE: regression in CVE-2016-8864
    - debian/patches/rt44318.patch: synthesised CNAME before matching DNAME
      was still being cached when it should have been in lib/dns/resolver.c,
      added tests to bin/tests/system/dname/ans3/ans.pl,
      bin/tests/system/dname/ns1/root.db, bin/tests/system/dname/tests.sh.
    - No CVE number

Author: Marc Deslauriers
Author Date: 2017-02-15 14:37:39 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu4 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: f6fb07847a48ec4c7529e81c7a3a37f667f26086
Unapplied parent: 23f9fc7991a07c2f1e48bca32506780ada889b6b

New changelog entries:
  * SECURITY UPDATE: Combining dns64 and rpz can result in dereferencing
    a NULL pointer
    - debian/patches/CVE-2017-3135.patch: properly handle dns64 and rpz
      combination in bin/named/query.c, lib/dns/message.c,
      lib/dns/rdataset.c.
    - CVE-2017-3135
  * SECURITY UPDATE: regression in CVE-2016-8864
    - debian/patches/rt44318.patch: synthesised CNAME before matching DNAME
      was still being cached when it should have been in lib/dns/resolver.c,
      added tests to bin/tests/system/dname/ans3/ans.pl,
      bin/tests/system/dname/ns1/root.db, bin/tests/system/dname/tests.sh.
    - No CVE number

Author: LaMont Jones
Author Date: 2017-02-03 20:13:21 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.12 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 7afb025cb45492f163b1b0dd5c01f3ba2b496dc5
Unapplied parent: 31c49d986d0c8b2475c6be71986a13a7cadb096e

New changelog entries:
  * Backport (70_precise_mtime.diff) 18b87b2a58d422fe4d3073540bf89b5a812ed2e5
    to trusty. LP: #1553176

Author: LaMont Jones
Author Date: 2017-02-03 20:13:21 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.12 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: d20e8b51a77de15dc3b51937b4bee528da491ad3

New changelog entries:
  * Backport (70_precise_mtime.diff) 18b87b2a58d422fe4d3073540bf89b5a812ed2e5
    to trusty. LP: #1553176

Author: Michael Gilbert
Author Date: 2017-01-15 06:04:12 UTC

Import patches-unapplied version 1:9.10.4-P5-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: cd03982cb475ef6ba14eada3f54deeed43dcf6ca

New changelog entries:
  * New upstream: 9.10.4-P5
    - Fixes CVE-2016-2775: crash in lwresd due to a long query name
      (closes: #831796).
    - Fixes CVE-2016-2776: maliciously crafted query can cause named to crash
      (closes: #839010).
    - Fixes CVE-2016-6170: improper zone size limits (closes: #830810).
    - Fixes CVE-2016-8864: incorrect handling of a DNAME record can cause
      named to crash (closes: #842858).
    - Fixes CVE-2016-9131: maliciously crafted response to an ANY query can
      cause named to crash (closes: #851065).
    - Fixes CVE-2016-9147: query with contradictory DNSSEC information can
      cause named to crash (closes: #851063).
    - Fixes CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS)
      record can cause named to crash (closes: #851062).
  * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now
    (closes: #828082).
  * Update debian/copyright to format 1.0.
  * Add upstream signing key.

Author: Michael Gilbert
Author Date: 2017-01-15 06:04:12 UTC

Import patches-applied version 1:9.10.4-P5-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 940089d571c718bc85ce02a2acf88feb712ba9bf
Unapplied parent: f02496513bb7a0fae5596191d535eba049617e81

New changelog entries:
  * New upstream: 9.10.4-P5
    - Fixes CVE-2016-2775: crash in lwresd due to a long query name
      (closes: #831796).
    - Fixes CVE-2016-2776: maliciously crafted query can cause named to crash
      (closes: #839010).
    - Fixes CVE-2016-6170: improper zone size limits (closes: #830810).
    - Fixes CVE-2016-8864: incorrect handling of a DNAME record can cause
      named to crash (closes: #842858).
    - Fixes CVE-2016-9131: maliciously crafted response to an ANY query can
      cause named to crash (closes: #851065).
    - Fixes CVE-2016-9147: query with contradictory DNSSEC information can
      cause named to crash (closes: #851063).
    - Fixes CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS)
      record can cause named to crash (closes: #851062).
  * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now
    (closes: #828082).
  * Update debian/copyright to format 1.0.
  * Add upstream signing key.

Author: Marc Deslauriers
Author Date: 2016-10-04 18:31:17 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: cd03982cb475ef6ba14eada3f54deeed43dcf6ca

New changelog entries:
  * SECURITY UPDATE: denial of service via assertion failure
    - debian/patches/CVE-2016-2776.patch: properly handle lengths in
      lib/dns/message.c.
    - CVE-2016-2776

Author: Marc Deslauriers
Author Date: 2016-10-04 18:31:17 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 940089d571c718bc85ce02a2acf88feb712ba9bf
Unapplied parent: a6ac1ccd8d70109926d15ab397f5352b3252ad31

New changelog entries:
  * SECURITY UPDATE: denial of service via assertion failure
    - debian/patches/CVE-2016-2776.patch: properly handle lengths in
      lib/dns/message.c.
    - CVE-2016-2776

Author: LaMont Jones
Author Date: 2016-04-13 19:19:37 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: e49d2778b42a79feff323d65435d598bd3e4a1fe
Unapplied parent: 66862022668c28bc8b42bf11b14e15f284d237f4

New changelog entries:
  [Timo Aaltonen]
  * Fix bind9-resolvconf.service installation.
  * Add support for native pkcs11. LP: #1565392
  [Samuel Thibault]
  * Detect in6_pktinfo on hurd-i386. Closes: #820404

Author: LaMont Jones
Author Date: 2016-04-13 19:19:37 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8 to debian/sid

Imported using git-ubuntu import.

Changelog parent: afdb2ae9c664c5a459d6fcc7d1df14cade8ce14c

New changelog entries:
  [Timo Aaltonen]
  * Fix bind9-resolvconf.service installation.
  * Add support for native pkcs11. LP: #1565392
  [Samuel Thibault]
  * Detect in6_pktinfo on hurd-i386. Closes: #820404

Author: Michael Gilbert
Author Date: 2016-03-08 02:51:39 UTC

Import patches-unapplied version 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: eea6c8345f963d30703e5c9f84c6f80c696d4582

New changelog entries:
  * Fix CVE-2016-1285: error parsing control channel input.
  * Fix CVE-2016-1286: error parsing DNAME resource records.
  * Non-maintainer upload by the Security Team.
  * CVE-2015-8704: Specific APL data could trigger an INSIST in apl_42.c.
    A buffer size check used to guard against overflow could cause named to
    exit with an INSIST failure In apl_42.c.
  * Non-maintainer upload by the Security Team.
  * Add patch to fix CVE-2015-8000.
    CVE-2015-8000: Insufficient testing when parsing a message allowed
    records with an incorrect class to be be accepted, triggering a REQUIRE
    failure when those records were subsequently cached.
  * CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash.

Author: Michael Gilbert
Author Date: 2016-03-08 02:51:39 UTC

Import patches-applied version 1:9.8.4.dfsg.P1-6+nmu2+deb7u10 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: c6481f894333c5503394a10b50342bee237ea022
Unapplied parent: 246afaa6131905f34ef3fd72860209bfd4904d3d

New changelog entries:
  * Fix CVE-2016-1285: error parsing control channel input.
  * Fix CVE-2016-1286: error parsing DNAME resource records.
  * Non-maintainer upload by the Security Team.
  * CVE-2015-8704: Specific APL data could trigger an INSIST in apl_42.c.
    A buffer size check used to guard against overflow could cause named to
    exit with an INSIST failure In apl_42.c.
  * Non-maintainer upload by the Security Team.
  * Add patch to fix CVE-2015-8000.
    CVE-2015-8000: Insufficient testing when parsing a message allowed
    records with an incorrect class to be be accepted, triggering a REQUIRE
    failure when those records were subsequently cached.
  * CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash.

Author: Marc Deslauriers
Author Date: 2016-03-08 13:26:39 UTC

Import patches-applied version 1:9.9.5.dfsg-11ubuntu1.3 to applied/ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: b1f7a930ff5e37c66feb26d6d613f56704949cf2
Unapplied parent: aafe5a13bd2a1374616e4b2d2429ee1fb49805bc

New changelog entries:
  * SECURITY UPDATE: denial of service via rndc control channel input
    parsing error
    - properly check data in bin/named/control.c, bin/named/controlconf.c,
      bin/rndc/rndc.c, lib/isccc/cc.c.
    - CVE-2016-1285
  * SECURITY UPDATE: denial of service via resource record signatures
    parsing issue
    - fix improper DNAME handling in lib/dns/resolver.c.
    - CVE-2016-1286

Author: Marc Deslauriers
Author Date: 2016-03-08 13:26:39 UTC

Import patches-unapplied version 1:9.9.5.dfsg-11ubuntu1.3 to ubuntu/wily-security

Imported using git-ubuntu import.

Changelog parent: 4dacb0cd1d943460300ff53e96b573c7df13847c

New changelog entries:
  * SECURITY UPDATE: denial of service via rndc control channel input
    parsing error
    - properly check data in bin/named/control.c, bin/named/controlconf.c,
      bin/rndc/rndc.c, lib/isccc/cc.c.
    - CVE-2016-1285
  * SECURITY UPDATE: denial of service via resource record signatures
    parsing issue
    - fix improper DNAME handling in lib/dns/resolver.c.
    - CVE-2016-1286