Commits

Show all
Author Commit Message Labels Comments Date
LaMont Jones
changelog: release
Tags
v9.4.3.dfsg-b2-1
LaMont Jones
Merge commit 'origin/stable/v9.4.3' into stable/v9.4.3 Conflicts: config.h.in configure lib/isc/unix/socket.c
LaMont Jones
Merge commit 'v9.4.3b1' into stable/v9.4.3 Conflicts: config.h.in configure
LaMont Jones
control: fix dnsutils description to avoid list reformatting Addresses-Debian-Bug: 480317 Signed-off-by: LaMont Jones <lamont@debian.org>
LaMont Jones
lwresd Depends: adduser
LaMont Jones
apparmor: add dnscvsutil package files
LaMont Jones
changelog: release
Tags
v9.4.2-10
LaMont Jones
host: manpage inaccurately describes default query. Some time ago, host was modified to query for A, AAAA, and MX RR by default, but host.1 was not updated to reflect this. Addresses-Ubuntu-Bug: 203087 Signed-off-by: LaMont Jones <lamont@debian.org>
Jamie Strandboge
debian/bind9.preinst: AA force-complain on upgrade without existing profile Addresses-Ubuntu-Bug: 204658 Signed-off-by: Jamie Strandboge <jamie@canonical.com> committer: LaMont Jones <lamont@debian.org>
LaMont Jones
changelog: release
Tags
v9.4.2-9
LaMont Jones
apparmor: make profile match README.Debian
LaMont Jones
apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind
LaMont Jones
changelog: release
Tags
v9.4.2-8
Jamie Strandboge
debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named Signed-off-by: Jamie Strandboge <jamie@canonical.com> Signed-off-by: LaMont Jones <lamont@debian.org> committer: LaMont Jones <lamont@debian.org>
ISC
CVE-2008-0122: off by one error in (unused) inet_network function. Note that none of the applications shipped with BIND (8 or 9) call inet_network(), nor is it the code used in glibc's resolver. Description: An off-by-one error in the inet_network() function in libbind could lead to memory corruption with certain inputs. Impact: Applications linked against libbind which call inet_network() with untrusted inputs could lead to a denial-of-service or potentially…
Jamie Strandboge
apparmor: force complain-mode for apparmor on certain upgrades Set complain mode on upgrades from 1:9.3.4-2ubuntu2 and earlier, rather than enforcing mode. See also https://wiki.ubuntu.com/ApparmorProfileMigration Addresses-Ubuntu-Bug: 203528 Signed-off-by: Jamie Strandboge <jamie@canonical.com> Signed-off-by: LaMont Jones <lamont@debian.org> committer: LaMont Jones <lamont@debian.org>
Michael Milligan
Add min-cache-ttl and min-ncache-ttl keywords Sometimes it is useful to set a 'floor' on the TTL for records to be cached. Some sites like to use ridiculously low TTLs for some reason, and that often is not compatible with slow links. Signed-off-by: Michael Milligan <milli@acmeps.com> Signed-off-by: LaMont Jones <lamont@debian.org> committer: LaMont Jones <lamont@debian.org>
LaMont Jones
changelog: release
Tags
v9.4.2-7
LaMont Jones
Drop root-delegation comments from named.conf root-delegation was a sledge-hammer solution to a specific problem, and the documentation in named.conf was incomplete. Addresses-Debian-Bug: 217829,297219 Signed-off-by: LaMont Jones <lamont@debian.org>
Jamie Strandboge
Allow rw access to /var/lib/bind/* in apparmor-profile. The apparmor profile was missing an entry for /var/lib/bind, which is where updated zone files belong. Addresses-Ubuntu-Bug: 201954 Signed-off-by: Jamie Strandboge <jamie@canonical.com> Signed-off-by: LaMont Jones <lamont@debian.org> committer: LaMont Jones <lamont@debian.org>
LaMont Jones
changelog: release
Tags
v9.4.2-6
LaMont Jones
Correct apparmor profile filename The merge of -3ubuntu1 was broken, and changed the path name for the apparmor profile. Addresses-Ubuntu-Bug: 200739 Signed-off-by: LaMont Jones <lamont@debian.org>
LaMont Jones
changelog: release
Tags
v9.4.2-5
LaMont Jones
Add AAAA ::1 entry to db.local Addresses-Debian-Bug: 230088 Signed-off-by: LaMont Jones <lamont@debian.org>
LaMont Jones
Fix doc pathnames in README.Debian In the top of the file /usr/share/doc/bind9/README.Debian.gz the reference to the file /usr/doc/bind9-doc/misc/migration.gz from the package bind9-doc is incorrect. The right path should be : /usr/share/doc/bind9-doc/misc/migration.gz Addresses-Debian-Bug: 266891 Signed-off-by: LaMont Jones <lamont@debian.org>
LaMont Jones
add "order random_1" support (return one random RR) Clients who implement RFC 3484, Section 6, Rule 9 for IPv4 addresses create serious issues for domains that use rrset-order cyclic or random to do load balancing, since they erroneously decide that the host with the longest prefix in common with their own address is "closest", while no such relationship exists in IPv4. While technically incorrect, returning exactly one A RR from a random ordering…
LaMont Jones
changelog: release Signed-off-by: LaMont Jones <lamont@debian.org>
Tags
v9.4.2-4
LaMont Jones
build: cleanup apparmor profile delivery Signed-off-by: LaMont Jones <lamont@debian.org>
LaMont Jones
README.Debian: make the apparmor comment more generic
LaMont Jones
control: revert ubuntu maintainer change
  1. Prev
  2. Next