2006
bind (1:8.4.7-1) unstable; urgency=low
* new upstream version * Document CVE-2006-0527 in README.Debian. See #355787 * Use invoke-rc.d. Closes: #359313
-- LaMont Jones <lamont@debian.org> Sun, 24 Sep 2006 18:19:21 -0600
2005
bind (1:8.4.6-1) unstable; urgency=high
* New upstream version. Closes CAN-2005-0033 * b.root-servers.net IP changed. * Add check_del to src/bin/named/Makefile clean target. Closes: #223479
-- LaMont Jones <lamont@debian.org> Tue, 25 Jan 2005 10:33:42 -0700
2004
bind (1:8.4.4-1) unstable; urgency=low
* New upstream version. Closes: #229042 Upstream fix for h_errno.
-- LaMont Jones <lamont@debian.org> Thu, 22 Jan 2004 07:59:57 -0700
2003
bind (1:8.4.3-2) unstable; urgency=low
* upstream fix for forward-only configs, query logging. * hack around libc declaring a different variety of h_errno. Closes: #220215
-- LaMont Jones <lamont@debian.org> Mon, 8 Dec 2003 21:02:01 -0700
bind (1:8.4.3-1) unstable; urgency=low
* New upstream version
-- LaMont Jones <lamont@debian.org> Thu, 27 Nov 2003 14:05:34 -0700
bind (1:8.4.1.0-2) unstable; urgency=low
* Sigh.. Really fix 204802 by incorporating upstream fix.
Version shows 8.4.1-P1. Closes: #204802
-- LaMont Jones <lamont@debian.org> Tue, 26 Aug 2003 17:16:03 -0600
bind (1:8.4.1.0-1) unstable; urgency=low
* Use the upstream ifaddrs patch. Closes: #204802 * Remove RFC's from orig.tar.gz, forces the version # divergence. Closes: #199797 * Remove man pages (from contrib) that we shouldn't have. Closes: #196972 * Add 'fetch-glue no;' to the default config. Closes: #170487
-- LaMont Jones <lamont@debian.org> Thu, 14 Aug 2003 06:47:50 -0600
bind (1:8.4.1-3) unstable; urgency=low
* check_del fixes.
-- LaMont Jones <lamont@debian.org> Thu, 24 Jul 2003 12:23:30 -0600
bind (1:8.4.1-2) unstable; urgency=low
* Use libc getifaddrs to hopefully fix 196993. Closes: #196993
-- LaMont Jones <lamont@debian.org> Fri, 27 Jun 2003 17:10:52 -0600
bind (1:8.4.1-1) unstable; urgency=low
* New upstream release
-- LaMont Jones <lamont@debian.org> Mon, 9 Jun 2003 22:37:26 -0600
bind (1:8.4.0-1) unstable; urgency=low
* New upstream release.
-- LaMont Jones <lamont@debian.org> Mon, 2 Jun 2003 09:27:40 -0600
bind (1:8.3.4+8.4.0-zRC2-1) experimental; urgency=low
* New upstream release candidate
-- LaMont Jones <lamont@debian.org> Wed, 28 May 2003 09:12:38 -0600
bind (1:8.3.4+8.4.0-zRC1-1) experimental; urgency=low
* New upstream release candidate
-- LaMont Jones <lamont@debian.org> Fri, 2 May 2003 21:45:52 -0600
bind (1:8.3.4+8.4.0-T2B-1) experimental; urgency=low
* New upstream test release.
-- LaMont Jones <lamont@debian.org> Mon, 28 Apr 2003 08:30:34 -0600
bind (1:8.3.4+8.4.0-T1B-2) experimental; urgency=low
* Fix errno usage in check_del.
-- LaMont Jones <lamont@debian.org> Mon, 14 Apr 2003 09:26:30 -0600
bind (1:8.3.4+8.4.0-T1B-1) experimental; urgency=low
* New upstream test release * remove bogus diff from upstream in ns_makecanon().
-- LaMont Jones <lamont@debian.org> Sun, 13 Apr 2003 16:47:51 -0600
bind (1:8.3.4-4) unstable; urgency=low
* minor tweak or two in the output of check_del. * Cleanup patch from the gratuitous and incorrectly versioned NMU.
-- LaMont Jones <lamont@debian.org> Wed, 9 Apr 2003 22:15:59 -0600
bind (1:8.3.4-3) unstable; urgency=low
* setsockopt(SO_BSDCOMPAT) has been a no-op for a long time; with
the 2.5 series of Linux kernels it is an annoying bug. This NMU
removes it.
-- Jonathan Walther <krooger@debian.org> Wed, 9 Apr 2003 18:49:44 -0800
2002
bind (1:8.3.4-2) unstable; urgency=low
* fix overrides
* T_ANY queries could return SERVFAIL instead of NODATA sometimes.
(ISC bug fix 1455.)
* check_del assumed chars were signed. Closes: #176279
* New db.root file (comment changes). Closes: #176515
-- LaMont Jones <lamont@debian.org> Sun, 17 Nov 2002 13:57:49 -0700
bind (1:8.3.4-1) unstable; urgency=low
* New upstream version - no functional change from 8.3.3-3 * Quit delivering nslookup man page in bind package. Closes: #153183 * Deliver a named.conf.options and named.conf.local, to allow better control of locally added zones in the face of named.conf changes.
-- LaMont Jones <lamont@debian.org> Sun, 17 Nov 2002 09:30:25 -0700
bind (1:8.3.3-3) unstable; urgency=high
* Apply patches from ISC. * Fix IP address for j.root-servers.net. Closes: #167819 * Take upstream grammar fix. Closes: #167068
-- LaMont Jones <lamont@debian.org> Wed, 13 Nov 2002 18:10:17 -0700
bind (1:8.3.3-2) unstable; urgency=low
* Change verbosity options in check_del.
* Allow mask bits in ACL's. (Will be fixed upstream soon, per Vixie,
although not necessarily with the same syntax - use at your own risk,
and be ready to change if needed....)
* swap maintainer/uploader status so LaMont is primary and Bdale is backup
* Notice when bind9 overwrites us.
Closes: #144667, #159070, #152429
* Make it easier to customize the init.d script. Closes: #144916, #104191
-- LaMont Jones <lamont@debian.org> Wed, 4 Sep 2002 23:19:47 -0600
bind (1:8.3.3-1) unstable; urgency=high
* new upstream version, includes buffer overflow fix in libbind,
closes: #151247.
* start-stop-daemon --exec doesn't kill deleted named's. Closes: #142282
* deliver the upstream changelog in the package(s). oops.
-- Bdale Garbee <bdale@gag.com> Sun, 30 Jun 2002 21:48:10 -0600
bind (1:8.3.1-2) unstable; urgency=low
* update pointer to chroot info in README.Debian as per 135774 filed against
the bind9 package (but providing an updated link for bind8 as well!)
* Add back in nsupdate. (Deleted in 1:8.2.3-4) Closes: #136875
* rewrite of check_del for performance from lamont@debian.org
* update init.d to not use ndc for restarts, since 'ndc restart' doesn't
preserve options passed to named on startup, closes: #135991, #71652
-- Bdale Garbee <bdale@gag.com> Sun, 7 Apr 2002 15:29:47 -0600
bind (1:8.3.1-1) unstable; urgency=low
* Hand holding daemon stop/start isn't compatible with dh_installinit.
Closes: #132692, #129399
* Adding myself to Uploaders with Bdale's permission
-- LaMont Jones <lamont@debian.org> Fri, 15 Feb 2002 23:15:48 -0700
bind (1:8.3.1-0.1) unstable; urgency=low
* NMU
* New upstream version:
Critical bug fix to prevent DNS storms. If you have BIND 8.3.0 you
need to upgrade.
-- LaMont Jones <lamont@debian.org> Sat, 2 Feb 2002 21:14:09 -0700
bind (1:8.3.0-1.1) unstable; urgency=low
* NMU * Add check_del to the package.
-- LaMont Jones <lamont@debian.org> Thu, 17 Jan 2002 09:02:26 -0700
bind (1:8.3.0-1) unstable; urgency=low
* new upstream version, closes: #128797 * change priority of these packages from optional to extra, as the bind9 flavors are preferred for new installations
-- Bdale Garbee <bdale@gag.com> Mon, 14 Jan 2002 22:59:29 -0700
2001
bind (1:8.2.5-2) unstable; urgency=low
* apply patch to dig.c to include time.h, closes: #125998 * move bind's position in rc.d link sequence to start daemon before and stop daemon after other daemons which may fail if name service is not available. Also, switch to dh_installinit in rules file, which allows some cleanup of the maintainer scripts, closes: #67628 * fix remaining references to wrong named.conf location in man pages, closes: #89968 * check pidfile on start too, not just stop, closes: #108981 * include hostname.7 man page, closes: #18096
-- Bdale Garbee <bdale@gag.com> Fri, 21 Dec 2001 02:16:28 -0700
bind (1:8.2.5-1) unstable; urgency=low
* new upstream version, closes: #114251, #108328 * no longer offer to stuff 127.0.0.1 into resolv.conf in the postinst. this broke non-interactive installs, isn't clearly a good thing to do, and decoupling resolv.conf administration has worked well for the bind9 packages. closes: #64135, #77208, #122351 * the named.conf manpage is fine in this version, closes: #102650, #111698 * deliver text version of the BOG in bind-doc again, closes: #52307
-- Bdale Garbee <bdale@gag.com> Wed, 5 Dec 2001 22:49:11 -0700
bind (1:8.2.4-1) unstable; urgency=low
* new upstream version, closes: #98246
-- Bdale Garbee <bdale@gag.com> Fri, 1 Jun 2001 01:11:04 -0600
bind (1:8.2.3-5) unstable; urgency=low
* Fold in fix 1187 from 8.2.4-T1B. Don't forward queries if we're going
to reject the reply anyway.
* Quit using mmv, closes: #91312.
-- Bdale Garbee <bdale@gag.com> Tue, 24 Apr 2001 00:13:16 -0600
bind (1:8.2.3-4) unstable; urgency=low
* remove nsupdate binary and man page, since they're in the dnsutils derived
from 9.X BIND source. Closes: #87608, #89028
-- Bdale Garbee <bdale@gag.com> Sun, 11 Mar 2001 22:43:27 -0700
bind (1:8.2.3-3) unstable; urgency=low
* add build dependency on bison, closes: #84221 * update man pages to show our default named.conf location, closes: #83600, #74303
-- Bdale Garbee <bdale@gag.com> Mon, 5 Feb 2001 16:42:16 -0700
bind (1:8.2.3-2) unstable; urgency=low
* add build dependency on flex, closes: #83826 * add suggested ppp control script to README.Debian, ndc has too many issues for me to include this in the default config. Closes: #71662 * update references in the man pages to the named_dump.db location, since we specify a working directory in named.conf, closes: #76053, #77567 * 8.2.3 builds fine on sid, closes: #81067
-- Bdale Garbee <bdale@gag.com> Mon, 29 Jan 2001 20:50:09 -0700
bind (1:8.2.3-1) unstable; urgency=high
* new upstream release, highlights include:
Several serious security holes plugged.
Many bug fixes, especially to IXFR and TSIG.
New "ndc reload -noexpired" feature.
"ndc status" now shows config file name and age.
Ignore stuck stale queries after long zone load delay.
TTL 0 is now allowed in zone files.
Several updated contrib/ packages.
Better portability to Win/NT.
Ported to Darwin (Mac OS X).
Forwarders are now used in order by measured RTT.
* restructuring in preparation for imminent release of BIND 9.1.0 packages.
The dnsutils and task-dns-server packages move to the bind9 source package,
and the host and rblcheck commands break out into standalone packages
depended on by the new dnsutils.
-- Bdale Garbee <bdale@gag.com> Fri, 26 Jan 2001 23:38:45 -0700
2000
bind (1:8.2.2p7-1) stable unstable; urgency=high
* new upstream version, release notes indicate highlights since 8.2.2p5 as
Fixes "ZXFR" denial of service attack
Fixes "division by 0" denial of service attack
Fix various other random problems
Add no new functionality
target stable since this includes fixes for denial of service attacks
closes: #76620
* fix debian/rules to use distclean, and clean up old mkdep cruft in various
makefiles, greatly reducing the size of the diff.gz
-- Bdale Garbee <bdale@gag.com> Sat, 11 Nov 2000 13:48:50 -0700
bind (1:8.2.2p5-11) frozen unstable; urgency=low
* do a better job handling the case of no named running on upgrades,
closes: #62129, #62177, #62163 Target potato since at least one of
these was marked grave.
-- Bdale Garbee <bdale@gag.com> Tue, 11 Apr 2000 14:13:14 -0600
bind (1:8.2.2p5-10) frozen unstable; urgency=low
* Improve the daemon kill/launch code in the bind postinst to handle the
case where a daemon is running but does not have a /var/run/ndc socket.
This caused us to leave two competing copies of the daemon running after
some upgrades. Target frozen since this is release critical.
Closes: #61129.
-- Bdale Garbee <bdale@gag.com> Fri, 7 Apr 2000 20:24:23 -0600
bind (1:8.2.2p5-9) frozen unstable; urgency=medium
* fix from upstream (Mark.Andrews@nominum.com in this case) for a problem that could cause core dumps, closes: #59649 * target frozen since this bug is release critical
-- Bdale Garbee <bdale@gag.com> Fri, 24 Mar 2000 00:08:20 -0700
bind (1:8.2.2p5-8) frozen unstable; urgency=medium
* fix the tests for upgrading from old versions in the postinst to also
recognize the oddball version of 8.2.2p5 built as a slink security release
that still used the old config file schema. Target frozen, since without
this fix, upgrading from a slink system with the security update that is
an authoritative nameserver will leave the system unauthoritative without
any notification during the upgrade... which is Evil. /o\ Closes: #60828
-- Bdale Garbee <bdale@gag.com> Tue, 21 Mar 2000 01:10:46 -0700
bind (1:8.2.2p5-7) frozen unstable; urgency=low
* fix the version number in the dnsutils 'replaces' declaration to include
the oddball version of 8.2.2p5 built as a slink security release. I had
forgotten about that fork, and upgrades from that version to potato break
since some files moved from 'bind' to 'dnsutils' in the potato package
schema. Target frozen since this breaks upgrades, closes: #55929
-- Bdale Garbee <bdale@gag.com> Sun, 23 Jan 2000 10:06:36 -0700
bind (1:8.2.2p5-6) frozen unstable; urgency=low
* add task-dns-server, target frozen so it is included in potato
* update postrm to remove the 127.0.0.1 nameserver entry from resolv.conf
when purging, so that resolution isn't left broken, closes: #55487
-- Bdale Garbee <bdale@gag.com> Wed, 19 Jan 2000 20:43:30 -0700
bind (1:8.2.2p5-5) unstable; urgency=low
* patch named-bootconf to fix insecure /tmp usage, closes: #54217 * have postinst call '/etc/init.d/bind restart' instead of calling ndc directly, so users with odd configurations get a working restart during upgrades if they've customized the init.d, closes: #52540 * the bind package for potato doesn't prompt for a named restart, and I don't plan to update the slink bind package again. closes: #53397
-- Bdale Garbee <bdale@gag.com> Fri, 7 Jan 2000 00:20:52 -0700
1999
bind (1:8.2.2p5-4) unstable; urgency=low
* add a few things I missed in the Build-Depends
* named restart during postinst was reworked for -2, and seems solid for
all the test cases I can find, closes: #51864
-- Bdale Garbee <bdale@gag.com> Sun, 5 Dec 1999 18:59:12 -0700
bind (1:8.2.2p5-3) unstable; urgency=low
* update control to current policy, including Build-Depends
-- Bdale Garbee <bdale@gag.com> Wed, 1 Dec 1999 23:06:05 -0700
bind (1:8.2.2p5-2) unstable; urgency=low
* set PATH in /etc/init.d/bind explicitly, closes: #51323 * set TTL's in provided zone files, update SOA comments to reflect last argument now being negative cache TTL, not default TTL, closes: #50670 * update README.Debian to include a pointer to a page describing how to set up named to run chroot'ed, and to include information on running the daemon non-root. This is a partial response to 50013. * manually handle init.d, implementing deferred restart of the daemon during upgrades. closes: #50648
-- Bdale Garbee <bdale@gag.com> Sat, 27 Nov 1999 16:16:12 -0700
bind (1:8.2.2p5-1) unstable; urgency=high
* new upstream source
-- Bdale Garbee <bdale@gag.com> Sun, 14 Nov 1999 04:43:38 -0700
bind (1:8.2.2p3-1) unstable; urgency=high
* new upstream sources, with remote root exploit fix
Closes: #49641, #48407, #49836, #49837, #49844, #49847
-- Bdale Garbee <bdale@gag.com> Thu, 11 Nov 1999 01:07:02 -0700
bind (1:8.2.2-4) unstable; urgency=low
* fix LDFLAGS for host compilation to avoid release critical bug on alphas
-- Bdale Garbee <bdale@gag.com> Sat, 6 Nov 1999 21:10:27 -0700
bind (1:8.2.2-3) unstable; urgency=low
* update rules to rebuild doc/bog/file.psf since the clean removes it
-- Bdale Garbee <bdale@gag.com> Sat, 30 Oct 1999 01:47:26 -0600
bind (1:8.2.2-2) unstable; urgency=low
* patch from Paul Vixie to allow re-packaging upstream source without any
of the encumbered crypto code! this release includes a new .orig.tar.gz
upload, and all of BIND now moves back from non-free to main!
-- Bdale Garbee <bdale@gag.com> Sat, 30 Oct 1999 01:12:07 -0600
bind (1:8.2.2-1) unstable; urgency=low
* new upstream version, still non-free, closes: #48407 * update the postinst. if this is an upgrade from a version prior to 8.2.1, provide a strong warning before the daemon launch that the new named.conf will be providing only a leaf config until any old config files are manually converted... this hopefully will reduce/eliminate the sense of surprise people are apparently having at "losing" authority for zones during the upgrade. Closes: #47694 * fix double invocation of daemon in postinst, closes: #46382 * fix dnsutils Replaces clause in control file to use proper epoch, closes: #45890, #46241
-- Bdale Garbee <bdale@gag.com> Fri, 29 Oct 1999 18:10:14 -0600
bind (1:8.2.1-8) unstable; urgency=low
* never uploaded, details moved to 8.2.2-1 so bugs close properly
-- Bdale Garbee <bdale@gag.com> Sun, 3 Oct 1999 20:27:29 -0600
bind (1:8.2.1-7) unstable; urgency=low
* update README.Debian to reflect change made in named's default location
for named.conf that was made in -5.
* move the forwarders template inside the option block in the default
named.conf, closes: #45604, #45984, #45892
* update postinst and named.conf template to reflect /usr/doc move to
/usr/share/doc, closes: #45896
* change 'restart' clause in init.d to use ndc, closes: #41122
* now compiling with gcc 2.95, which fixes the illegal instruction problem
(apparently a gcc bug on i386) that conflicted with the ISC's
appropriation of SIGILL for control purposes, closes: #38002
* add a postrm to make lintian happy about the /usr/doc symlink silliness,
and use more of dh_installinit's featureset to handle the rc.d priority
instead of doing it manually in the postinst
-- Bdale Garbee <bdale@gag.com> Wed, 29 Sep 1999 12:47:42 -0600
bind (1:8.2.1-6) unstable; urgency=low
* update to FHS compliance, fixes build failures since debhelper went FHS.
* add 'Replaces:' to control for dnsutils, since I moved a command or two
from the bind package to dnsutils, and dpkg stumbles, closes: #44608
* yes, the demise of bindconfig was deliberate, closes: #44430
* 8.2.1 appears to not need the pselect hack, closes: #33728
* since we're not using anything in contrib (most of it is out of date),
toss the subtree, then generate/upload a fresh orig.tar.gz that's over a
megabyte smaller... this has the side effect that dh_installmanpages
doesn't install spurious manpages in the bind package, closes: #44424
* switch (back) to the host program from ftp.nikhef.nl, and restore the
set of symlinks to it we tossed in 8.2.1-4, closes: #44876, #44528
* rename db.127.0.0 to db.127, updating named.conf, closes: #44904
* the decision to force a manual update of bind config files when upgrading
from previous versions of the Debian bind package to 8.2.1 and later was
not made lightly. The inconvenience of a one-time manual transition is
real, but automating the configuration update from pre-8.2.1 packages is
nowhere as trivial as it should be for various reasons. Once the 8.2.1
schema is in use, everything is done "Debian style" with liberal use of
dpkg conffile handling, so future upgrades should be completely automatic.
closes: #45256
* do content substitions on contents of doc/man to fix up suffixes in man
pages, closes: #44587
* file a suitable wishlist bug against bind, and add undocumented links for
the remaining executables that don't have man pages in the bind package
-- Bdale Garbee <bdale@gag.com> Sat, 18 Sep 1999 17:24:28 -0600
bind (1:8.2.1-5) unstable; urgency=low
* change named's default config file location from /etc/named.conf to
/etc/bind/named.conf instead of just using an option in /etc/init.d/bind,
since things like ndc don't know to provide the option.
-- Bdale Garbee <bdale@gag.com> Sun, 5 Sep 1999 20:31:12 -0600
bind (1:8.2.1-4) unstable; urgency=low
* remove spurious nslint.8 from the bind package. * add 0.in-addr.arpa and 255.in-addr.arpa zones ala RFC 1912, closes: #5643 * use 'ndc reload' for action in /etc/init.d/bind reload, closes: #41122 * remove the test for ancient kernels from the postinst, closes: #44160 * remove postinst query about starting named, since in all cases we are now either providing a rational leaf config or using an existing user config, closes: #26187 * rework the postinst to pause after each "observation" instead of printing as many as three which caused them to scroll off the screen. Since these will only show up after an upgrade from pre-8.2.1 to post-8.2.1, and go away once the recommended cleanups are done, this feels reasonable. * lose the mx, ns, soa, zone, and aaaa symlinks to host since they no longer work with the host client included in 8.2.1. The functionality is more or less still available with options to host, I gather. Closes: #44161
-- Bdale Garbee <bdale@gag.com> Sun, 5 Sep 1999 15:44:46 -0600
bind (1:8.2.1-3) unstable; urgency=low
* fix potential manpage conflicts with manpages and manpages-dev packages * trim log verbosity in the default named.conf, closes: #9371
-- Bdale Garbee <bdale@gag.com> Wed, 1 Sep 1999 19:58:26 -0600
bind (1:8.2.1-2) unstable; urgency=low
* fix silly mistakes in default named.conf * remove mkdep.1 from the bind package, it shouldn't be there
-- Bdale Garbee <bdale@gag.com> Mon, 23 Aug 1999 15:05:10 -0600
bind (1:8.2.1-1) unstable; urgency=low
* new upstream source
* completely repackaged from scratch, using debhelper
* daemon now includes DNSSEC functionality, based on code donated by RSA
that is under a license that does not meet the DFSG. Therefore, the
bind packages are moving to non-free. It is not trivial to build BIND
without this library, and it will get even harder at BIND 9.X...
* create a new bind-dev package to deliver libbind, et al
* build bind-doc from the bind source tree, instead of having it as a
completely separate package. This will help keep the versions in sync.
* new, much simplified configuration that "feels more like a Debian package",
and adheres to the current FHS structuring rules.
Closes: #6972, #8559, #23365, #15473, #15850, #23062, #23365, #23413.
* update rblcheck sources to use relays.orbs.org instead of the defunct
dorkslayers site. Closes: #42062, #29827.
-- Bdale Garbee <bdale@gag.com> Sun, 22 Aug 1999 21:31:43 -0600
bind (1:8.1.2-6) unstable; urgency=low
* fold in patch from Christian Meder for glibc2.1 support, closes 33064:
"the pselect function of glibc2.1 takes an additional sigmask argument;
use bind's pselect version for now until the conflict is solved upstream"
* tweak Christian's patch to keep things working on glibc2.0 systems
-- Bdale Garbee <bdale@gag.com> Sun, 21 Feb 1999 17:42:53 -0700
bind (1:8.1.2-5) frozen unstable; urgency=low
* move the chmod from clean to checkroot in rules file, closes 30784.
* update ndc.8 to reflect actual location of dump file, closes 30946, 25972,
21725.
* update rules file to use dh_gencontrol instead of dpkg-gencontrol, closes
30783.
* fix for glibc2.1 builds ala sparc from Christian Meder, closes 29584.
* update postinst to remove /usr/bin/nslookup.bind if it's a symlink, since
we no longer do things that way, closes 24971.
* fix for rblcheck.c to better handle multiple servers, closes 30660
-- Bdale Garbee <bdale@gag.com> Sun, 3 Jan 1999 22:30:50 -0700
1998
bind (1:8.1.2-4) unstable; urgency=medium
* fix errors in patch from Wichert that broke the 'ls' command in nslookup,
and some options to dig (introduced in -3). Closes 27319, 26644, 26940.
* if an existing BIND configuration is found, don't offer to examine or
modify the configuration... just use it. This decision will be reviewed
when I get time to eliminate all the BIND 4 isms, but for now this is much
safer than messing up a working hand-tweaked config. Ian, this one's
for you... closes 25090, 5726, 23538, 26187.
-- Bdale Garbee <bdale@gag.com> Fri, 2 Oct 1998 23:07:42 -0600
bind (1:8.1.2-3) stable unstable; urgency=high
* fix for buffer overflow problems in dig and nslookup, patch provided by
Wichert Akkerman. Closes 26292, 24991.
* new rblcheck version, closes 26109, 23354.
* minor rblcheck fixes from Jason Gunthorpe.
-- Bdale Garbee <bdale@gag.com> Thu, 3 Sep 1998 23:13:48 -0600
bind (1:8.1.2-2) frozen unstable; urgency=high
* new maintainer
* update to latest standards revision
* the postinst/bindconfig process need to be completely reworked to
eliminate the BIND 4.x-isms, but it's too much to undertake before
hamm goes stable. Thus, this version attempts to slightly improve
behavior without making changes likely to open new bugs.
* if /etc/named.conf already exists, give the user a chance to bail out of
bindconfig before customizations get trashed. Closes 17671 (important).
* stop providing /etc/ppp/ip-up.d and ip-down.d fragments, at least until
we come up with a better way to handle the security and performance
issues. Closes 21743 (grave), and 23091 (important).
* stop providing /usr/doc/bind/checksums.txt, since calling pgp from within
debian/rules causes fakeroot problems. It's also unclear to me why this
is an important thing to do in the bind package if we're not doing it
anywhere else... Closes 15461.
* take the netgod.net special case out of the postinst, closes 21136.
* reviewed all open bugs, closed several old ones that are no longer
relevant, deferring the remainder to slink.
* Lintian clean, except for warnings about 'mx' and 'ns' representing
possible namespace pollution.
-- Bdale Garbee <bdale@gag.com> Sun, 7 Jun 1998 21:40:57 -0600
bind (1:8.1.2-1) frozen unstable; urgency=high
* New upstream version T3B: "fix a stack overrun that could occur if
inverse query support was enabled, and a number of denial of service
attacks where malformed packets could cause the server to crash."
* The ndc command now gets no complaints from the new "ps" (#20299).
* No longer includes pages duplicated in manpages-*-dev (#18095).
* Now includes /etc/ppp up/down support contributed by "aph" (#19118,
#19132).
* Updated to Standards-Version 2.4.0.0 (additional init.d commands).
* Closes #15687, as invocation of sed in bindconfig is fixed.
* Added SHELL=/bin/bash to rules file.
* Lintian clean.
-- Johnie Ingram <johnie@debian.org> Wed, 8 Apr 1998 22:45:41 -0400
bind (1:8.1.1-8) unstable; urgency=low
* Added rblcheck to the dnsutils package, which allows the Realtime
Blackhole List to be used for spam control in procmail rules.
* Closed #15687 (sed bug, cf. 13913, 14146, 14889).
-- Johnie Ingram <johnie@debian.org> Tue, 20 Jan 1998 23:23:05 -0500
bind (1:8.1.1-7) unstable; urgency=low
* Updated named.root file from InterNIC (#15744). * Install script is now compatible with kernel flavors (#16396). * Closed Bugs #15991 and #15325.
-- Johnie Ingram <johnie@debian.org> Thu, 1 Jan 1998 00:25:47 -0500
1997
bind (1:8.1.1-6) unstable; urgency=low
* Corrected package md5sum error (#15991). * Closed #15325 (binaries not stripped).
-- Johnie Ingram <johnie@debian.org> Wed, 17 Dec 1997 23:28:55 -0500
bind (1:8.1.1-5) unstable; urgency=low
* Fixed sed coredump problem in bindconfig (#13913, #14146, #14889). * Stripped binaries in dnsutils package (#14562, #14893). * Applied bashconfig posixification patch from Herbert Xu (#15169).
-- Johnie Ingram <johnie@debian.org> Sat, 6 Dec 1997 21:33:04 -0500
bind (1:8.1.1-4) unstable; urgency=low
* Now builds named.boot before named.conf, a problem which caused it to
fail on new installations.
* Now more verbose when /etc/named.boot file to /var/named; resulting
file is no longer hidden (5726).
* Restored changelog.Debian.gz file in bind package.
* Packaging redone to use pristine source tar archive, and tweaked for
multiple architecture support.
* Closed #12462, lack of /etc/init.d/bind, fixed in 8.1.1-3.
* Updated to Standards-Version 2.3.0.0.
-- Johnie Ingram <johnie@debian.org> Tue, 9 Sep 1997 23:20:09 -0400
bind (1:8.1.1-3) unstable; urgency=low
* Restored the /etc/init.d/bind.
-- Johnie Ingram <johnie@debian.org> Tue, 5 Aug 1997 14:58:49 +0000
bind (1:8.1.1-2) unstable; urgency=low
* The dnsutils package now includes nslookup and dig (#4222, #4939,
#9229, #10476, #10477, and the recommendation of Shaya Potter), now
uses the correct name for the upstream changelog (#9614), and is
created from the bind-src source (requiring a new epoch).
* Closed Bug #10983, typo in init script, fixed by 8.1.1-1 and 4.9.6-1.
* Made bindconfig a bash script rather than a shell script (#11396).
* Location of /usr/lib/nslookup.help corrected in manpage (#9757).
* Corrected spelling of the word "Stopping" in init script (#11515), and
regularized capitalization.
* The nslookup program (being now from the bind source) has a man
page and no longer behaves oddly (#6708), plus the help page is
installed (#10903).
* Closed #10529, "bind is vulnerable", since both the new 4.9.6 and
8.1.1 address this injection issue.
* Added PGP-signed file checksums.
-- Johnie Ingram <johnie@debian.org> Wed, 30 Jul 1997 02:14:48 -0400
bind (4.9.6-1) stable; urgency=medium
* Security release.
-- Johnie Ingram <johnie@debian.org> Sat, 19 Jul 1997 16:59:03 -0400
-- unknown <johnie@debian.org> unknown
(There has been a parse error in the entry above, if some values don't make sense please check the original changelog)
bind (8.1.1-1) unstable; urgency=low
* New upstream version. * New maintainer. * Updated to Standards-Version 2.1.3.3.
-- Johnie Ingram <johnie@debian.org> Thu, 17 Jul 1997 13:49:30 -0400
bind (4.9.5-1.4) frozen unstable; urgency=low
* Fix ndc script (Bug #9167,#9036) thanx to <phil@hands.com>'s patch.
-- Vincent Renardias <vincent@waw.com> Mon, 28 Apr 1997 20:29:51 +0200
bind (4.9.5-1.3) frozen unstable; urgency=low
* Re-Upload into the 'frozen' distribution.
-- Vincent Renardias <vincent@waw.com> Mon, 21 Apr 1997 12:41:31 +0200
bind (4.9.5-1.2) unstable; urgency=low
* Fixed ungracefull message printed by flex scanner when ctrl-C is
pressed in a nslookup session (Fixes Bug #3966).
-- Vincent Renardias <vincent@waw.com> Sat, 19 Apr 1997 22:22:04 +0200
bind (4.9.5-1.1) frozen unstable; urgency=low
* Converted to new source format.
* Put documentation into /usr/doc/bind instead of /usr/doc/net/bind.
* Compress man pages (Bug #6289).
* Corrected dnsquery manpage (Bug #6659).
* Corrected postinst. (Bugs #7230, #7459, #7906, #8193, #8581, #8582,
#8608, #8825).
* Applied fix to prevent denial of service attack (Bug #8868).
* Corrected /etc/init.d/bind massages (Bug #8502).
* Updated named.root file (should fix Bug #8654 and #8655).
* Debianized '/usr/sbin/ndc' script (Bug #3505).
* Tuned compile options.
-- Vincent Renardias <vincent@waw.com> Sat, 19 Apr 1997 15:33:45 +0200