Author: Ubuntu Git Importer
Author Date: 2019-06-22 14:14:34 UTC

DSC file for 1:9.11.5.P4+dfsg-5ubuntu1

Author: Ubuntu Git Importer
Author Date: 2019-06-22 14:14:21 UTC

DSC file for 1:9.11.5.P4+dfsg-5.1

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d83b007c8175831c6b8268c33e846ae6c2a39c47

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler (universe packages)
      + d/dnsutils.install: don't install dnstap
      + d/libdns1104.symbols: don't include dnstap symbols
      + d/rules: don't build dnstap nor install dnstap.proto
    - d/p/enable-udp-in-host-command.diff: fix parsing of the -U command line
      option (LP #1804648)
    - d/p/fix-shutdown-race.diff: dig/host/nslookup could crash when interrupted
      close to a query timeout (LP #1797926)
    - d/t/simpletest: drop the internetsociety.org test as it requires
      network egress access that is not available in the Ubuntu autopkgtest
      farm.
    - SECURITY UPDATE: DoS via malformed packets
      + d/p/CVE-2019-6471.patch: fix race condition in lib/dns/dispatch.c
      + CVE-2019-6471

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d83b007c8175831c6b8268c33e846ae6c2a39c47

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler (universe packages)
      + d/dnsutils.install: don't install dnstap
      + d/libdns1104.symbols: don't include dnstap symbols
      + d/rules: don't build dnstap nor install dnstap.proto
    - d/p/enable-udp-in-host-command.diff: fix parsing of the -U command line
      option (LP #1804648)
    - d/p/fix-shutdown-race.diff: dig/host/nslookup could crash when interrupted
      close to a query timeout (LP #1797926)
    - d/t/simpletest: drop the internetsociety.org test as it requires
      network egress access that is not available in the Ubuntu autopkgtest
      farm.
    - SECURITY UPDATE: DoS via malformed packets
      + d/p/CVE-2019-6471.patch: fix race condition in lib/dns/dispatch.c
      + CVE-2019-6471

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: ffb2ffe8365e6fc8b96abaaf570b0ec7a87814a3

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: ffb2ffe8365e6fc8b96abaaf570b0ec7a87814a3

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d83b007c8175831c6b8268c33e846ae6c2a39c47

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler (universe packages)
      + d/dnsutils.install: don't install dnstap
      + d/libdns1104.symbols: don't include dnstap symbols
      + d/rules: don't build dnstap nor install dnstap.proto
    - d/p/enable-udp-in-host-command.diff: fix parsing of the -U command line
      option (LP #1804648)
    - d/p/fix-shutdown-race.diff: dig/host/nslookup could crash when interrupted
      close to a query timeout (LP #1797926)
    - d/t/simpletest: drop the internetsociety.org test as it requires
      network egress access that is not available in the Ubuntu autopkgtest
      farm.
    - SECURITY UPDATE: DoS via malformed packets
      + d/p/CVE-2019-6471.patch: fix race condition in lib/dns/dispatch.c
      + CVE-2019-6471

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: ffb2ffe8365e6fc8b96abaaf570b0ec7a87814a3

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5ubuntu1 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Upload parent: ffb2ffe8365e6fc8b96abaaf570b0ec7a87814a3

Author: Rafael David Tinoco
Author Date: 2019-06-21 18:06:22 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5ubuntu1 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d83b007c8175831c6b8268c33e846ae6c2a39c47

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler (universe packages)
      + d/dnsutils.install: don't install dnstap
      + d/libdns1104.symbols: don't include dnstap symbols
      + d/rules: don't build dnstap nor install dnstap.proto
    - d/p/enable-udp-in-host-command.diff: fix parsing of the -U command line
      option (LP #1804648)
    - d/p/fix-shutdown-race.diff: dig/host/nslookup could crash when interrupted
      close to a query timeout (LP #1797926)
    - d/t/simpletest: drop the internetsociety.org test as it requires
      network egress access that is not available in the Ubuntu autopkgtest
      farm.
    - SECURITY UPDATE: DoS via malformed packets
      + d/p/CVE-2019-6471.patch: fix race condition in lib/dns/dispatch.c
      + CVE-2019-6471

Author: Salvatore Bonaccorso
Author Date: 2019-06-21 09:24:31 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5.1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d5bf70844d986411e4ae2c2716cfb384b5c8d194

New changelog entries:
  * Non-maintainer upload.
  * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
    (Closes: #930746)

Author: Salvatore Bonaccorso
Author Date: 2019-06-21 09:24:31 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7cb4b5026a6c6b9c70bae7dbb03689f6dc823bf3

New changelog entries:
  * Non-maintainer upload.
  * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
    (Closes: #930746)

Author: Salvatore Bonaccorso
Author Date: 2019-06-21 09:24:31 UTC

Import patches-unapplied version 1:9.11.5.P4+dfsg-5.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7cb4b5026a6c6b9c70bae7dbb03689f6dc823bf3

New changelog entries:
  * Non-maintainer upload.
  * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
    (Closes: #930746)

Author: Salvatore Bonaccorso
Author Date: 2019-06-21 09:24:31 UTC

Import patches-applied version 1:9.11.5.P4+dfsg-5.1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: d62644cc59025ca94bafa550d68f5f43fcc79c48
Unapplied parent: d5bf70844d986411e4ae2c2716cfb384b5c8d194

New changelog entries:
  * Non-maintainer upload.
  * move item_out test inside lock in dns_dispatch_getnext() (CVE-2019-6471)
    (Closes: #930746)

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.4 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 86b4eed63e9f703bec19b0544b089f17f1af150a

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: db3c786e6864ba140f8ac21815bb13728bbeb3ef

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.4 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 8c48b85dc047ff4d01806c7a01d482eb65c6e995
Unapplied parent: 3b2d0fe22fe6736e00f867e6a11cec927f4c33fa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.8 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: bc20b912341711fb505d20d0020a829fd569b6aa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.8 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 4dddb65f9ba42b517df74a32a502f7d9783eea7a
Unapplied parent: 99a875d3037b7b8a1077a162f3806444807bd894

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.4 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 8c48b85dc047ff4d01806c7a01d482eb65c6e995
Unapplied parent: 3b2d0fe22fe6736e00f867e6a11cec927f4c33fa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.8 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 4dddb65f9ba42b517df74a32a502f7d9783eea7a
Unapplied parent: 99a875d3037b7b8a1077a162f3806444807bd894

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 7d5f4d690c2378646532e4abc20b7ad3729bc811
Unapplied parent: a1ed42a7c5e72b4b2940cbc258b4a996d357c838

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.8 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: bc20b912341711fb505d20d0020a829fd569b6aa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.4 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 86b4eed63e9f703bec19b0544b089f17f1af150a

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5.4 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 8c48b85dc047ff4d01806c7a01d482eb65c6e995
Unapplied parent: 3b2d0fe22fe6736e00f867e6a11cec927f4c33fa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.8 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 4dddb65f9ba42b517df74a32a502f7d9783eea7a
Unapplied parent: 99a875d3037b7b8a1077a162f3806444807bd894

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: db3c786e6864ba140f8ac21815bb13728bbeb3ef

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: db3c786e6864ba140f8ac21815bb13728bbeb3ef

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:54:20 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5.4 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 86b4eed63e9f703bec19b0544b089f17f1af150a

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 7d5f4d690c2378646532e4abc20b7ad3729bc811
Unapplied parent: a1ed42a7c5e72b4b2940cbc258b4a996d357c838

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:55:08 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.8 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: bc20b912341711fb505d20d0020a829fd569b6aa

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Marc Deslauriers
Author Date: 2019-06-18 22:50:18 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2.5 to applied/ubuntu/disco-security

Imported using git-ubuntu import.

Changelog parent: 7d5f4d690c2378646532e4abc20b7ad3729bc811
Unapplied parent: a1ed42a7c5e72b4b2940cbc258b4a996d357c838

New changelog entries:
  * SECURITY UPDATE: DoS via malformed packets
    - debian/patches/CVE-2019-6471.patch: fix race condition in
      lib/dns/dispatch.c.
    - CVE-2019-6471

Author: Andreas Hasenack
Author Date: 2019-04-26 14:20:00 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2.4 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Upload parent: e5673055341ef54b1223ebc17100389148c9bcbe

Author: Andreas Hasenack
Author Date: 2019-04-26 14:20:00 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2.4 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 50e7e2af016b500896cfd6da8481bc5100af1e57
Unapplied parent: cd5ba2a70ac0470e920b6f63735c1cc67e253490

New changelog entries:
  * d/rules: add back EdDSA support (LP: #1825712)

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f63a531029d63212075f836c3d00fe764c5975c3

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f36e0038f8f071b6600fb0c71228349f443e9aaa
Unapplied parent: 7b58d71ec05bd99d84427b3ac469e446313960ae

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f63a531029d63212075f836c3d00fe764c5975c3

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f36e0038f8f071b6600fb0c71228349f443e9aaa
Unapplied parent: 7b58d71ec05bd99d84427b3ac469e446313960ae

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f36e0038f8f071b6600fb0c71228349f443e9aaa
Unapplied parent: 7b58d71ec05bd99d84427b3ac469e446313960ae

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-04-24 10:17:28 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.14 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f63a531029d63212075f836c3d00fe764c5975c3

New changelog entries:
  * SECURITY UPDATE: limiting simultaneous TCP clients is ineffective
    - debian/patches/CVE-2018-5743.patch: add reference counting in
      bin/named/client.c, bin/named/include/named/client.h,
      bin/named/include/named/interfacemgr.h, bin/named/interfacemgr.c,
      lib/isc/include/isc/quota.h, lib/isc/quota.c,
      lib/isc/win32/libisc.def.in.
    - debian/patches/CVE-2018-5743-atomic-fix.patch: replace atomic
      operations with isc_refcount reference counting in
      bin/named/client.c, bin/named/include/named/interfacemgr.h,
      bin/named/interfacemgr.c.
    - CVE-2018-5743

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-unapplied version 1:9.11.5.P1+dfsg-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: e43b479562053f9260287e716b0a0fddea957075

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-22 09:52:30 UTC

Import patches-applied version 1:9.11.5.P1+dfsg-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: b17a322337109e48bc37223a507ae78434407867
Unapplied parent: 417e29c33028609e92f277e160d0eb72b23d7051

New changelog entries:
  * SECURITY UPDATE: memory leak via specially crafted packet
    - debian/patches/CVE-2018-5744.patch: silently drop additional keytag
      options in bin/named/client.c.
    - CVE-2018-5744
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - debian/patches/CVE-2018-5745.patch: properly handle situations when
      the key tag cannot be computed in lib/dns/include/dst/dst.h,
      lib/dns/zone.c.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - debian/patches/CVE-2019-6465.patch: handle zone transfers marked in
      the zone table as a DLZ zone bin/named/xfrout.c.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.19 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 2a042c31e08bf0903092eb54bfe9c9cd2c6383b1
Unapplied parent: aa1a7890494b0984ba0e90e3f6d9576f6dc8494b

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Marc Deslauriers
Author Date: 2019-02-20 09:21:50 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.19 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: ded96db9a2664bedb6d0053a62d2309893ddf5f2

New changelog entries:
  * SECURITY UPDATE: assertion failure when a trust anchor rolls over to an
    unsupported key algorithm when using managed-keys
    - lib/dns/zone.c: enhance rfc 5011 logging
    - lib/dns/include/dst/dst.h, lib/dns/zone.c: properly handle situations
      when the key tag cannot be computed.
    - CVE-2018-5745
  * SECURITY UPDATE: Controls for zone transfers may not be properly
    applied to Dynamically Loadable Zones (DLZs) if the zones are writable
    - bin/named/xfrout.c: handle zone transfers marked in the zone table as
      a DLZ zone.
    - CVE-2019-6465

Author: Dimitri John Ledkov
Author Date: 2019-02-05 14:31:40 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c441991180d23d4066bdecdfcf4f1e9c2c232fb2

New changelog entries:
  * Disable EDDSA to avoid picking up new symbols when rebuilding against
    new OpenSSL. Cherrypick from Debian & Disco. LP: #1815474

Author: Dimitri John Ledkov
Author Date: 2019-02-05 14:31:40 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 06a4ff681a5bb1b80a85933af2dc6571dffe7f0a
Unapplied parent: eeed7c325ab3c21c79f3bcb8cdbf633a684f0f6f

New changelog entries:
  * Disable EDDSA to avoid picking up new symbols when rebuilding against
    new OpenSSL. Cherrypick from Debian & Disco. LP: #1815474

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 9b9cbf937c8823070697f64c6c8a0e3014a3ce8c

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 534cda3fac8f7406614ae13455bbd00027e9fb4a
Unapplied parent: bb122ac04c592dd1194968cb003860308d657700

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-applied version 1:9.11.4+dfsg-3ubuntu5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 534cda3fac8f7406614ae13455bbd00027e9fb4a
Unapplied parent: bb122ac04c592dd1194968cb003860308d657700

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Dimitri John Ledkov
Author Date: 2018-09-29 00:36:45 UTC

Import patches-unapplied version 1:9.11.4+dfsg-3ubuntu5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 9b9cbf937c8823070697f64c6c8a0e3014a3ce8c

New changelog entries:
  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:58:53 UTC

Import patches-applied version 1:9.9.5.dfsg-9+deb8u15 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: f96568ecd9b4819f3ac1f0a4e451b8f2973b5191
Unapplied parent: 5e8d11342406507af33697c7b59f65547d11dfbb

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:58:53 UTC

Import patches-unapplied version 1:9.9.5.dfsg-9+deb8u15 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 05aeb72e8f361d6c3356d0c3b873887eafe9890f

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Timo Aaltonen
Author Date: 2018-04-13 04:40:47 UTC

Import patches-applied version 1:9.11.3+dfsg-1ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 70242602814ef4d69ec6e5546fbe3d9198120128
Unapplied parent: 8fef78d9f3e68141948c4952261a550519e828db

New changelog entries:
  * New upstream release. (LP: #1763572)
    - fix a crash when configured with ipa-dns-install
  * Merge from Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe

Author: Timo Aaltonen
Author Date: 2018-04-13 04:40:47 UTC

Import patches-unapplied version 1:9.11.3+dfsg-1ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 3950c2c39039be56a8861a16916e4fba4376b7fe

New changelog entries:
  * New upstream release. (LP: #1763572)
    - fix a crash when configured with ipa-dns-install
  * Merge from Debian unstable. Remaining changes:
    - Build without lmdb support as that package is in Universe

Author: Ubuntu Git Importer
Author Date: 2018-03-23 16:45:59 UTC

pristine-tar data for bind9_9.11.3+dfsg.orig.tar.gz

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:40:17 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.3+deb9u4 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 1d93845758286975883ea0abe15c8e358ed282ba
Unapplied parent: c09cf0adfcf8966cdcd34b330c99203787d3b164

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Salvatore Bonaccorso
Author Date: 2018-01-15 21:40:17 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.3+deb9u4 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 914739121df134ac43bde61d53062f25b46038f4

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Addresses could be referenced after being freed in resolver.c, causing an
    assertion failure. (CVE-2017-3145)

Author: Ubuntu Git Importer
Author Date: 2018-03-06 11:32:46 UTC

pristine-tar data for bind9_9.11.2.P1.orig.tar.gz

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: d03638d5a1eca31b08e93dcd9d8ddfd28fe8a5f0
Unapplied parent: d03c3a3d7a32adfcfc79c14bcc417e7399747c5d

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Marc Deslauriers
Author Date: 2018-01-16 12:24:33 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 7f4e4abf0f06e82a338fc01336e2d23bdc600def

New changelog entries:
  * SECURITY UPDATE: assertion failure via improper cleanup
    - debian/patches/CVE-2017-3145.patch: fix cleanup handling in
      lib/dns/resolver.c.
    - CVE-2017-3145

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 8398e813871c748e90fe596c4745905cc9144c85
Unapplied parent: e74af85c0be77cc44fa2e298acd898d5fd07d639

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:26:27 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: cc1c0c21b3990155234416d1c803fe18049a990e
Upload parent: 79ab6e7438ad26be74098a893717ef8098cdae8b

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:26:27 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-8ubuntu1.9 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 7056c964d4d31fd232e97fd8e4676b7bfca7f369
Unapplied parent: d3a12d1daf604c27bc69b8e9a1aecb49878e8abd

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Andreas Hasenack
Author Date: 2017-11-06 19:41:19 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.3 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 19176b37b351392a87269486339b0e51a8d63d77
Upload parent: fc5d52626a3b568011dd9f9220da5cc6d2d99154

New changelog entries:
  * d/bind9.service: source the defaults file and start the daemon with the
    options set there (LP: #1565060).

Author: Marc Deslauriers
Author Date: 2017-09-15 11:42:53 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu5.2 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 7c1fe9397d836d5ce33dee0da656cb53b416d7db
Unapplied parent: 19105bd28972338a95bc585558fe365fcaaf217e

New changelog entries:
  * SECURITY REGRESSION: regression in last security update
    - debian/patches/CVE-2017-3142-regression.patch: fix verification of
      TSIG signed TCP message sequences where not all the messages contain
      TSIG records in lib/dns/tsig.c, aded test to
      lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
  * debian/patches/update_keys.patch: Update the built in managed keys to
    include the upcoming root KSK in bind.keys, bind.keys.h.

Author: Marc Deslauriers
Author Date: 2017-09-15 11:42:53 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu5.2 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: 8d068071ee6829d92c48dfbd6377785e867140d9

New changelog entries:
  * SECURITY REGRESSION: regression in last security update
    - debian/patches/CVE-2017-3142-regression.patch: fix verification of
      TSIG signed TCP message sequences where not all the messages contain
      TSIG records in lib/dns/tsig.c, aded test to
      lib/dns/tests/Makefile.in, lib/dns/tests/tsig_test.c.
  * debian/patches/update_keys.patch: Update the built in managed keys to
    include the upcoming root KSK in bind.keys, bind.keys.h.

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba5f02d2957112b32e838892063ca635659f25f8
Upload parent: 2998a9c607e20e741b6a0d388ef7d3625aa90c92

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: d1fdec708200b56a7e55d94871892b8159e41715
Unapplied parent: 7e5a00a72691daba697daa4240fb2f2d5f67f83d

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba5f02d2957112b32e838892063ca635659f25f8
Upload parent: 2998a9c607e20e741b6a0d388ef7d3625aa90c92

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Andreas Hasenack
Author Date: 2017-08-24 21:28:00 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-12.6ubuntu1 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: d1fdec708200b56a7e55d94871892b8159e41715
Unapplied parent: 7e5a00a72691daba697daa4240fb2f2d5f67f83d

New changelog entries:
  * Merge with Debian unstable (LP: #1712920). Remaining changes:
    - Add RemainAfterExit to bind9-resolvconf unit configuration file
      (LP #1536181).
    - rules: Fix path to libsofthsm2.so. (LP #1685780)
    - d/p/CVE-2016-8864-regression-test.patch: tests for the regression
      introduced with the CVE-2016-8864.patch and fixed in
      CVE-2016-8864-regression.patch.
    - d/p/CVE-2016-8864-regression2-test.patch: tests for the second
      regression (RT #44318) introduced with the CVE-2016-8864.patch
      and fixed in CVE-2016-8864-regression2.patch.
    - d/control, d/rules: add json support for the statistics channels.
      (LP #1669193)

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 933233590577976b540ca3dd9ce741dbba61b901

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Marc Deslauriers
Author Date: 2017-06-29 11:50:47 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.7 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 316e5871289cc1835c511efa63ff2be96728eacb
Unapplied parent: 394349aa00a448f6aa4b9f7845b68b437aa1d881

New changelog entries:
  * SECURITY UPDATE: TSIG authentication issues
    - debian/patches/CVE-2017-3042,3043.patch: fix TSIG logic in
      lib/dns/dnssec.c, lib/dns/message.c, lib/dns/tsig.c.
    - CVE-2017-3142
    - CVE-2017-3143

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-applied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 6b95c611fb08556435bc674d8a295eb835ce5b5c
Unapplied parent: 198b16ea6bc8f3f9209f264be6fe3db063180b8e

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Steve Beattie
Author Date: 2017-04-13 07:02:24 UTC

Import patches-unapplied version 1:9.8.1.dfsg.P1-4ubuntu0.22 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 4dcd37adb9d87170356960c574f51a9247f4b31a

New changelog entries:
  * SECURITY UPDATE: Denial of Service due to an error handling
    synthesized records when using DNS64 with "break-dnssec yes;"
    - bin/named/query.c: reset noqname if query_dns64() called.
    - CVE-2017-3136
  * SECURITY UPDATE: Denial of Service due to resolver terminating when
    processing a response packet containing a CNAME or DNAME
    - lib/dns/resolver.c: don't expect a specific
      ordering of answer components
    - lib/dns/name.c: remove part of assertion that triggers in
      dns_name_split() (partial cherrypick of upstream
      dc3912f3caac1104fef441fd18571b7a975708ea
    - bin/tests/system/dname/ns2/example.db,
      bin/tests/system/dname/tests.sh: add testcases.
    - CVE-2017-3137
  * SECURITY UPDATE: Denial of Service when receiving a null command on
    the control channel
    - lib/isc/lex.c, lib/isc/include/isc/lex.h: don't throw an assert if no
      command token is given
    - CVE-2017-3138

Author: Nish Aravamudan
Author Date: 2017-03-22 17:09:25 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu1.4 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 15b43bfbf9198bd770cc41cc9d9810c6ab0c7c6f

New changelog entries:
  * Add RemainAfterExit to bind9-resolvconf unit configuration file
    (LP: #1536181).

Author: Nish Aravamudan
Author Date: 2017-03-22 17:09:25 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu1.4 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 775d52f78f444fa8fd814ae1403649eef777b479
Unapplied parent: b54573571d518933a9a8c26148ea0f4535ccf571

New changelog entries:
  * Add RemainAfterExit to bind9-resolvconf unit configuration file
    (LP: #1536181).

Author: Marc Deslauriers
Author Date: 2017-02-15 14:37:39 UTC

Import patches-applied version 1:9.10.3.dfsg.P4-10.1ubuntu4 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: f6fb07847a48ec4c7529e81c7a3a37f667f26086
Unapplied parent: 23f9fc7991a07c2f1e48bca32506780ada889b6b

New changelog entries:
  * SECURITY UPDATE: Combining dns64 and rpz can result in dereferencing
    a NULL pointer
    - debian/patches/CVE-2017-3135.patch: properly handle dns64 and rpz
      combination in bin/named/query.c, lib/dns/message.c,
      lib/dns/rdataset.c.
    - CVE-2017-3135
  * SECURITY UPDATE: regression in CVE-2016-8864
    - debian/patches/rt44318.patch: synthesised CNAME before matching DNAME
      was still being cached when it should have been in lib/dns/resolver.c,
      added tests to bin/tests/system/dname/ans3/ans.pl,
      bin/tests/system/dname/ns1/root.db, bin/tests/system/dname/tests.sh.
    - No CVE number

Author: Marc Deslauriers
Author Date: 2017-02-15 14:37:39 UTC

Import patches-unapplied version 1:9.10.3.dfsg.P4-10.1ubuntu4 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: ec6bd233ba2898565db3f99275229314299b5cea

New changelog entries:
  * SECURITY UPDATE: Combining dns64 and rpz can result in dereferencing
    a NULL pointer
    - debian/patches/CVE-2017-3135.patch: properly handle dns64 and rpz
      combination in bin/named/query.c, lib/dns/message.c,
      lib/dns/rdataset.c.
    - CVE-2017-3135
  * SECURITY UPDATE: regression in CVE-2016-8864
    - debian/patches/rt44318.patch: synthesised CNAME before matching DNAME
      was still being cached when it should have been in lib/dns/resolver.c,
      added tests to bin/tests/system/dname/ans3/ans.pl,
      bin/tests/system/dname/ns1/root.db, bin/tests/system/dname/tests.sh.
    - No CVE number

Author: LaMont Jones
Author Date: 2017-02-03 20:13:21 UTC

Import patches-unapplied version 1:9.9.5.dfsg-3ubuntu0.12 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: d20e8b51a77de15dc3b51937b4bee528da491ad3

New changelog entries:
  * Backport (70_precise_mtime.diff) 18b87b2a58d422fe4d3073540bf89b5a812ed2e5
    to trusty. LP: #1553176

Author: LaMont Jones
Author Date: 2017-02-03 20:13:21 UTC

Import patches-applied version 1:9.9.5.dfsg-3ubuntu0.12 to applied/ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 7afb025cb45492f163b1b0dd5c01f3ba2b496dc5
Unapplied parent: 31c49d986d0c8b2475c6be71986a13a7cadb096e

New changelog entries:
  * Backport (70_precise_mtime.diff) 18b87b2a58d422fe4d3073540bf89b5a812ed2e5
    to trusty. LP: #1553176