Re: bind9 update 9.16.50 -- too many record

[Guillaume Bienkowski <guillaume.bienkowski@braincube.com>]

Hi Lee, Ondrej, Salvatore

I didn't follow up on this because your backport of the configuration settings was done  after my original message in August: the 9.16.50-1~deb11u2 version, which landed during my holiday break.

Since then, we are able to set the appropriate configuration settings to enable more than 100 SRV records and our Bind9 instance is running fine.

So on my side this is fixed, and I thank the maintainers for having backported the config options. 

My original complaint was that we had a functional regression in a security update, and no way of recovering a working bind9 without these configuration settings. We had to resort to pin an older version (the -48 version), and Ondrej what you did with deb11u2 fixed our issue.

Thank you for looking back at this thread anyway. Bookworm is in our sights so we'll have a more recent version of the package.

Guillaume

On Wed, Nov 27, 2024 at 11:32 PM Salvatore Bonaccorso <carnil@debian.org> wrote:

Hi Ondrej,

On Mon, Jul 29, 2024 at 12:14:01PM +0200, Ondřej Surý wrote:
> I've now also ported all the changes to the system tests, so I can
> confirm the changes are correct and I've now uploaded the version
> with configuration options to security-master.
>
> This means that information in:
>
> https://kb.isc.org/docs/rrset-limits-in-zones
>
> also applies to bind9_9.16.50-1~deb11u2.
>
> Salvatore, when you are communicating this, I would frame this
> as an improvement to the original patches.

I was actually aiming to see this followup improvement via the last
point release, but I think now it's equally well to release a followup
DSA.

You have tested patches, but still would be good to have a
confirmation from Guillaume, before the followup goes out.

> It is still recommended to upgrade to bookworm though.

Ack!

Regards,
Salvatore

--

 

 

	Guillaume Bienkowski
	Infrastructure Manager
	+33 6 18 30 78 10

   

braincube.com

To learn more about the management of your personal data and your rights, click here.