[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#693385: unblock: bind9/1:9.8.4.dfsg-1



Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package bind9

1) a rebase bind9 for wheezy to 9.8.4 will make security maintenance a
lot easier going forward.  To properly fix bugs - some security and
basic functionaliy, upstream have changed data structure code, and some
flags.  Makes patching tricky (see below).

2) Bug #690569 DNS wildcards fail to resolve with DNSsec enabled - a
basic DNS protocol bug.  To get DNS resolving going have to turn off
DNSSEC validation - a bit of a thinko.  Found there were too many
changes to 9.8.x ISC upstream since 9.8.1-P3 for me to consider patching
it reliably.  ISC don't give access to their VCS.

Note: also fixes CVE-2012-4244

Note: libdns81, libisc83 are updated to libdns88 and libisc84 in
upstream.

Thank you for looking into this. I really appreciate your time and
dedication to Debian.

Best Regards,

Matthew Grant

debdiff:

File lists identical (after any substitutions)

Control files: lines which differ (wdiff format)
------------------------------------------------
Depends: libbind9-80 (= [-1:9.8.1.dfsg.P1-4.3),-] {+1:9.8.4.dfsg-1),+}
libc6 (>= 2.4), libcap2 (>= 2.10), [-libdns81-] {+libdns88+} (=
[-1:9.8.1.dfsg.P1-4.3),-] {+1:9.8.4.dfsg-1),+} libgssapi-krb5-2 (>=
1.6.dfsg.2), [-libisc83-] {+libisc84+} (= [-1:9.8.1.dfsg.P1-4.3),-]
{+1:9.8.4.dfsg-1),+} libisccc80 (= [-1:9.8.1.dfsg.P1-4.3),-]
{+1:9.8.4.dfsg-1),+} libisccfg82 (= [-1:9.8.1.dfsg.P1-4.3),-]
{+1:9.8.4.dfsg-1),+} liblwres80 (= [-1:9.8.1.dfsg.P1-4.3),-]
{+1:9.8.4.dfsg-1),+} libssl1.0.0 (>= 1.0.0), {+libxml2 (>= 2.7.4),+}
debconf (>= 0.5) | debconf-2.0, netbase, adduser, lsb-base (>= 3.2-14),
bind9utils (= [-1:9.8.1.dfsg.P1-4.3),-] {+1:9.8.4.dfsg-1),+} net-tools
Installed-Size: [-816-] {+940+}
Version: [-1:9.8.1.dfsg.P1-4.3-] {+1:9.8.4.dfsg-1+}



unblock bind9/1:9.8.4.dfsg-1

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


Reply to: