Merge ~lucaskanashiro/ubuntu/+source/ldns:sync into ubuntu/+source/ldns:debian/sid

[Lucas Kanashiro]

This is a sync request, all the delta is applied in the ldns Debian package version 1.7.0-4:

  * SECURITY UPDATE: double-free in ldns_fget_token_l
    - debian/patches/CVE-2017-1000231.patch: check parse limit before t
      increment in parse.c.
    - CVE-2017-1000231
  * SECURITY UPDATE: double-free in ldns_str2rdf_long_str
    - debian/patches/CVE-2017-1000232.patch: free after reallocing to 0
      size in str2host.c.
    - CVE-2017-1000232
  * Don't build-depend on python3-all-dev, the build rules don't handle
    multiple versions of python3 correctly.

No critical bug was found and the upstream version didn't change. The main change in this version from what we have in Ubuntu is that the Ed25519 algorithm was enabled as described in d/changelog.

[Christian Ehrhardt  (paelzer)]

CVE-2017-1000231 & CVE-2017-1000232 - accepted in 1.7.0-4
Re-enable openssl1.1 & DANE TA usage - was cancelled out in 1.7.0-3ubuntu4
Don't build-depend on python3-all-dev - accepted in 1.7.0-3.1
All delta in Debian

Other Debian changes are usual housekeeping, ack to make this a sync.

review: Approve

[Christian Ehrhardt  (paelzer)]

The only task left before calling syncpackage is to build this once in a PPA.
This wasn't built for more than a year in Ubuntu and as lessons learned chances are high that it might break unexpectedly.

If that is the case we clearly want to poke at it in a PPA instead of being stuck somewhere in proposed. So if (in general for sync MPs) you do a test build with the current version in Focal (all arch) that would be great.

Please ping any of us once that is checked to call syncpackage for this.

[Lucas Kanashiro (lucaskanashiro)]

I prepared this PPA with the sync'ed package: https://launchpad.net/~lucaskanashiro/+archive/ubuntu/focal-ldns-sync

It builds fine in all architectures.

[Christian Ehrhardt  (paelzer)]

Agreed,
did a sync please check in a day if it properly arrived

$ syncpackage -r focal-proposed -d unstable -v -V 1.7.0-4 ldns --force
syncpackage: Source ldns -> focal/Proposed: current version 1.7.0-3ubuntu8, new version 1.7.0-4
syncpackage: I: Valid signature by 0xC361B1E3029543EBC625E97D8372A477EFAE59C2
syncpackage: I: Good signature by Matthias Klose <email address hidden> (0xBD7EAA60778FA6F5)
syncpackage: New changes:
ldns (1.7.0-4) unstable; urgency=medium

  * Fix invalid maintainer (Closes: #899938)
  * Add two upstream patches to address security issues:
   + CVE-2017-1000231: Memory corruption in ldns_rr_new_frm_fp_l
     (Closes: #882015)
   + CVE-2017-1000232: Memory corruption in ldns_str2rdf_long_str
     (Closes: #882014)
  * Bump debhelper compat to v12
  * Update the Vcs-* links to salsa.d.o
  * Bump the policy to the latest version (no change)
  * Add upstream Homepage link to d/control
  * Disable GOST and enable Ed25519 algorithm (see draft-wouters-sury-dnsop-algorithm-update)

 -- Ondřej Surý <email address hidden> Sun, 10 Mar 2019 21:56:02 +0000

ldns (1.7.0-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Don't build-depend on python3-all-dev, the build rules don't handle
    multiple versions of python3 correctly. Closes: #904038
    Thanks to Steve Langasek <email address hidden> for the patch.
  * Enable parallel building.

 -- Mattia Rizzolo <email address hidden> Thu, 27 Sep 2018 10:36:04 +0200
Sync this package [y|N]? y

[Lucas Kanashiro (lucaskanashiro)]

Landed in the release pocket: https://launchpad.net/ubuntu/+source/ldns