diff options
Diffstat (limited to '')
81 files changed, 6573 insertions, 0 deletions
diff --git a/debian/README.Debian b/debian/README.Debian new file mode 100644 index 0000000..e6159d7 --- /dev/null +++ b/debian/README.Debian @@ -0,0 +1,60 @@ +DNSSEC validation turned on by default as of BIND 9.8.1 +------------------------------------------------------- +As of version 9.8.1.dfsg-1, BIND ships with DNSSEC validation turned on +by default. As the keys get changed over time, this means that a fresh +install of BIND will require that the admin manually upgrade bind.keys +to account for the change, before BIND will be able to resolve hosts in +DNSSEC validated zones. + + +Configuration Schema: +-------------------- + +The Debian BIND package ships with a config that will work for the majority +of leaf servers with no user input required. + +The named configuration file named.conf is located in /etc/bind, so that all +static configuration files relating to bind are in one place. If you really +don't want named.conf in /etc/bind, then the best way to handle it is probably +to replace /etc/bind/named.conf with a symlink to the location you want to use. +You could also use an option to named in the init.d script, but that only works +for named, not for things like ndc. + +Zone data files for the root servers, and the forward and reverse localhost +zones are also provided in /etc/bind. + +The working directory for named is now /var/cache/bind. Thus, any transient +files generated by named, such as database files for zones the daemon is +secondary for, will be written to the /var filesystem, where they belong. + +To make this work, the named.conf provided uses explicitly fully-qualified +pathnames to reference the files in /etc/bind. + +Unlike previous BIND packages for Debian, the named.conf and provided db.* +files are tagged as conffiles. Thus, if you just want a "caching mostly" +server configuration for a server that does not need to be authoritative for +anything else, you can run the provided configuration as-is. If you want to +hack on named.conf, or even the init.d fragment, you can feel free to. Future +package upgrades will treat your configuration changes sanely, as all Debian +packages should. + +While you are free to craft whatever structure you wish for servers which need +to be authoritative for additional zones, what we suggest is that you put the +db files for any zones you are master for in /etc/bind (perhaps even in a +subdirectory structure depending on complexity), using full pathnames in the +named.conf file. Any zones you are secondary for should be configured in +named.conf with simple filenames (relative to /var/cache/bind), so the data +files will be stored in BIND's working directory (defaults to /var/cache/bind). +Zones subject to automatic updates (such as via DHCP and/or nsupdate) should be +stored in /var/lib/bind, and specified with full pathnames. + + +Apparmor Profile +---------------- +If your system uses apparmor, please note that the shipped enforcing profile +works with the default installation, and changes in your configuration may +require changes to the installed apparmor profile. Please see +https://wiki.ubuntu.com/DebuggingApparmor before filing a bug against this +software. + + -- Ondřej Surý <ondrej@debian.org>, Thu, 18 Jan 2018 14:02:44 +0000 diff --git a/debian/README.source b/debian/README.source new file mode 100644 index 0000000..d0e527d --- /dev/null +++ b/debian/README.source @@ -0,0 +1,12 @@ +Just a crude notes about the source handling (it needs cleanup). + +- The source has been converted to git-buildpackage structure to allow + easy team work + +- uscan can be used to download new upstream sources + +- d/copyright has been converted to machine readable format (TODO) and + has Files-Excludes section for generation upstream tarball using + mk-origtarball (via uscan) to remove contrib/ directory + + -- Ondřej Surý <ondrej@debian.org>, Fri, 8 Sep 2017 12:18:26 +0200 diff --git a/debian/bind9-dev.install b/debian/bind9-dev.install new file mode 100644 index 0000000..7614051 --- /dev/null +++ b/debian/bind9-dev.install @@ -0,0 +1,15 @@ +usr/include +usr/lib/*/libbind9.a +usr/lib/*/libbind9.so +usr/lib/*/libdns.a +usr/lib/*/libdns.so +usr/lib/*/libirs.a +usr/lib/*/libirs.so +usr/lib/*/libisc.a +usr/lib/*/libisc.so +usr/lib/*/libisccc.a +usr/lib/*/libisccc.so +usr/lib/*/libisccfg.a +usr/lib/*/libisccfg.so +usr/lib/*/libns.a +usr/lib/*/libns.so diff --git a/debian/bind9-dnsutils.install b/debian/bind9-dnsutils.install new file mode 100644 index 0000000..90e4fba --- /dev/null +++ b/debian/bind9-dnsutils.install @@ -0,0 +1,12 @@ +usr/bin/delv +usr/bin/dig +usr/bin/dnstap-read +usr/bin/mdig +usr/bin/nslookup +usr/bin/nsupdate +usr/share/man/man1/delv.1 +usr/share/man/man1/dig.1 +usr/share/man/man1/dnstap-read.1 +usr/share/man/man1/mdig.1 +usr/share/man/man1/nslookup.1 +usr/share/man/man1/nsupdate.1 diff --git a/debian/bind9-doc.dirs b/debian/bind9-doc.dirs new file mode 100644 index 0000000..3d13cf8 --- /dev/null +++ b/debian/bind9-doc.dirs @@ -0,0 +1 @@ +usr/share/doc/bind9-doc/arm diff --git a/debian/bind9-doc.docs b/debian/bind9-doc.docs new file mode 100644 index 0000000..86d3a6d --- /dev/null +++ b/debian/bind9-doc.docs @@ -0,0 +1 @@ +doc/misc diff --git a/debian/bind9-doc.install b/debian/bind9-doc.install new file mode 100644 index 0000000..7a6453e --- /dev/null +++ b/debian/bind9-doc.install @@ -0,0 +1 @@ +doc/arm/_build/html/* /usr/share/doc/bind9-doc/arm/ diff --git a/debian/bind9-host.install b/debian/bind9-host.install new file mode 100644 index 0000000..f07a04d --- /dev/null +++ b/debian/bind9-host.install @@ -0,0 +1,2 @@ +usr/bin/host +usr/share/man/man1/host.1* diff --git a/debian/bind9-libs.install b/debian/bind9-libs.install new file mode 100644 index 0000000..bf9528c --- /dev/null +++ b/debian/bind9-libs.install @@ -0,0 +1,7 @@ +usr/lib/*/libbind9-*.so +usr/lib/*/libdns-*.so +usr/lib/*/libirs-*.so +usr/lib/*/libisc-*.so +usr/lib/*/libisccc-*.so +usr/lib/*/libisccfg-*.so +usr/lib/*/libns-*.so diff --git a/debian/bind9-libs.lintian-overrides b/debian/bind9-libs.lintian-overrides new file mode 100644 index 0000000..534ea3f --- /dev/null +++ b/debian/bind9-libs.lintian-overrides @@ -0,0 +1 @@ +bind9-libs: package-name-doesnt-match-sonames * diff --git a/debian/bind9-utils.install b/debian/bind9-utils.install new file mode 100644 index 0000000..975cc26 --- /dev/null +++ b/debian/bind9-utils.install @@ -0,0 +1,33 @@ +usr/lib/python3/dist-packages/ +usr/sbin/dnssec-cds +usr/sbin/dnssec-checkds +usr/sbin/dnssec-coverage +usr/sbin/dnssec-dsfromkey +usr/sbin/dnssec-dsfromkey +usr/sbin/dnssec-keyfromlabel +usr/sbin/dnssec-keygen +usr/sbin/dnssec-keymgr +usr/sbin/dnssec-revoke +usr/sbin/dnssec-settime +usr/sbin/dnssec-signzone +usr/sbin/dnssec-verify +usr/sbin/named-checkconf +usr/sbin/named-checkzone +usr/sbin/named-compilezone +usr/sbin/rndc +usr/sbin/rndc-confgen +usr/share/man/man8/dnssec-cds.8 +usr/share/man/man8/dnssec-checkds.8 +usr/share/man/man8/dnssec-dsfromkey.8 +usr/share/man/man8/dnssec-keyfromlabel.8 +usr/share/man/man8/dnssec-keygen.8 +usr/share/man/man8/dnssec-keymgr.8 +usr/share/man/man8/dnssec-revoke.8 +usr/share/man/man8/dnssec-settime.8 +usr/share/man/man8/dnssec-signzone.8 +usr/share/man/man8/dnssec-verify.8 +usr/share/man/man8/named-checkconf.8 +usr/share/man/man8/named-checkzone.8 +usr/share/man/man8/named-compilezone.8 +usr/share/man/man8/rndc-confgen.8 +usr/share/man/man8/rndc.8 diff --git a/debian/bind9-utils.links b/debian/bind9-utils.links new file mode 100644 index 0000000..bf9daf6 --- /dev/null +++ b/debian/bind9-utils.links @@ -0,0 +1 @@ +usr/share/man/man8/named-checkzone.8 usr/share/man/man8/named-compilezone.8 diff --git a/debian/bind9.dirs b/debian/bind9.dirs new file mode 100644 index 0000000..b5256a1 --- /dev/null +++ b/debian/bind9.dirs @@ -0,0 +1,12 @@ +etc/apparmor.d/force-complain +etc/apparmor.d/local +etc/bind +etc/insserv.conf.d +etc/network/if-down.d +etc/network/if-up.d +etc/ppp/ip-down.d +etc/ppp/ip-up.d +etc/ufw/applications.d +usr/bin +usr/sbin +var/cache/bind diff --git a/debian/bind9.docs b/debian/bind9.docs new file mode 100644 index 0000000..e845566 --- /dev/null +++ b/debian/bind9.docs @@ -0,0 +1 @@ +README diff --git a/debian/bind9.install b/debian/bind9.install new file mode 100644 index 0000000..30848cf --- /dev/null +++ b/debian/bind9.install @@ -0,0 +1,32 @@ +debian/extras/apparmor.d/* /etc/apparmor.d/ +debian/extras/etc/* /etc/bind/ +debian/extras/if-reconfig.d/* /etc/network/if-down.d +debian/extras/if-reconfig.d/* /etc/network/if-up.d/ +debian/extras/if-reconfig.d/* /etc/ppp/ip-down.d/ +debian/extras/if-reconfig.d/* /etc/ppp/ip-up.d/ +debian/extras/insserv.conf.d/* /etc/insserv.conf.d/ +debian/extras/ufw/* /etc/ufw/applications.d/ +etc/bind/bind.keys +usr/bin/arpaname +usr/bin/named-rrchecker +usr/lib/*/named/filter-aaaa.so +usr/sbin/ddns-confgen +usr/sbin/dnssec-importkey +usr/sbin/named +usr/sbin/named-journalprint +usr/sbin/named-nzd2nzf +usr/sbin/nsec3hash +usr/sbin/tsig-keygen +usr/share/man/man1/arpaname.1 +usr/share/man/man1/named-rrchecker.1 +usr/share/man/man5/named.conf.5 +usr/share/man/man5/rndc.conf.5 +usr/share/man/man8/ddns-confgen.8 +usr/share/man/man8/dnssec-coverage.8 +usr/share/man/man8/dnssec-importkey.8 +usr/share/man/man8/filter-aaaa.8 +usr/share/man/man8/named-journalprint.8 +usr/share/man/man8/named-nzd2nzf.8 +usr/share/man/man8/named.8 +usr/share/man/man8/nsec3hash.8 +usr/share/man/man8/tsig-keygen.8 diff --git a/debian/bind9.links b/debian/bind9.links new file mode 100644 index 0000000..77769fa --- /dev/null +++ b/debian/bind9.links @@ -0,0 +1 @@ +usr/share/man/man8/ddns-confgen.8 usr/share/man/man8/tsig-keygen.8 diff --git a/debian/bind9.lintian-overrides b/debian/bind9.lintian-overrides new file mode 100644 index 0000000..f20096b --- /dev/null +++ b/debian/bind9.lintian-overrides @@ -0,0 +1 @@ +bind9: systemd-service-file-refers-to-unusual-wantedby-target lib/systemd/system/named-resolvconf.service diff --git a/debian/bind9.maintscript b/debian/bind9.maintscript new file mode 100644 index 0000000..1c4d964 --- /dev/null +++ b/debian/bind9.maintscript @@ -0,0 +1,4 @@ +mv_conffile /etc/default/bind /etc/default/named 1:9.13.6~ +mv_conffile /etc/default/bind9 /etc/default/named 1:9.12.0~ +mv_conffile /etc/init.d/bind /etc/init.d/named 1:9.13.6~ +mv_conffile /etc/init.d/bind9 /etc/init.d/named 1:9.12.0~ diff --git a/debian/bind9.named.default b/debian/bind9.named.default new file mode 100644 index 0000000..66352f0 --- /dev/null +++ b/debian/bind9.named.default @@ -0,0 +1,6 @@ +# +# run resolvconf? +RESOLVCONF=no + +# startup options for the server +OPTIONS="-u bind" diff --git a/debian/bind9.named.init b/debian/bind9.named.init new file mode 100644 index 0000000..44b00ca --- /dev/null +++ b/debian/bind9.named.init @@ -0,0 +1,146 @@ +#!/bin/sh -e + +### BEGIN INIT INFO +# Provides: bind bind9 +# Required-Start: $remote_fs +# Required-Stop: $remote_fs +# Should-Start: $network $syslog +# Should-Stop: $network $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Start and stop BIND 9 Domain Name Server +# Description: BIND 9 is a Domain Name Server (DNS) +# which translates ip addresses to and from internet names +### END INIT INFO + +PATH=/sbin:/bin:/usr/sbin:/usr/bin + +# for a chrooted server: "-u bind -t /var/lib/named" +# Don't modify this line, instead change or create /etc/default/named. +OPTIONS="" +RESOLVCONF=no + +test -f /etc/default/named && . /etc/default/named + +test -x /usr/sbin/rndc || exit 0 + +. /lib/lsb/init-functions +PIDFILE=/run/named/named.pid + +check_network() { + result=0 + if [ -x /usr/bin/uname ] && [ "X$(/usr/bin/uname -o)" = XSolaris ]; then + LIST_NICS_IP=$(/sbin/ifconfig -au) || result=$? + else + LIST_NICS_IP=$(/bin/ip addr) || result=$? + fi + if [ $result -ne 0 -o -z "${LIST_NICS_IP}" ]; then + #log_action_msg "No networks configured." + return 1 + fi + return 0 +} + +case "$1" in + start) + log_daemon_msg "Starting domain name service..." "named" + + modprobe capability >/dev/null 2>&1 || true + + # dirs under /run can go away on reboots. + mkdir -p /run/named + chmod 775 /run/named + chown root:bind /run/named >/dev/null 2>&1 || true + + if [ ! -x /usr/sbin/named ]; then + log_action_msg "named binary missing - not starting" + log_end_msg 1 + fi + + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if start-stop-daemon --start --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS; then + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + echo "nameserver 127.0.0.1" | /sbin/resolvconf -a lo.named + fi + log_end_msg 0 + else + log_end_msg 1 + fi + ;; + + stop) + log_daemon_msg "Stopping domain name service..." "named" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + if [ "X$RESOLVCONF" != "Xno" ] && [ -x /sbin/resolvconf ] ; then + /sbin/resolvconf -d lo.named + fi + pid=$(/usr/sbin/rndc stop -p | awk '/^pid:/ {print $2}') || true + if [ -z "$pid" ]; then # no pid found, so either not running, or error + pid=$(pgrep -f ^/usr/sbin/named) || true + start-stop-daemon --stop --oknodo --quiet --exec /usr/sbin/named \ + --pidfile ${PIDFILE} -- $OPTIONS + fi + if [ -n "$pid" ]; then + sig=0 + n=1 + while kill -$sig $pid 2>/dev/null; do + if [ $n -eq 1 ]; then + echo "waiting for pid $pid to die" + fi + if [ $n -eq 11 ]; then + echo "giving up on pid $pid with kill -0; trying -9" + sig=9 + fi + if [ $n -gt 20 ]; then + echo "giving up on pid $pid" + break + fi + n=$(($n+1)) + sleep 1 + done + fi + log_end_msg 0 + ;; + + reload|force-reload) + log_daemon_msg "Reloading domain name service..." "named" + if ! check_network; then + log_action_msg "no networks configured" + log_end_msg 1 + fi + + /usr/sbin/rndc reload >/dev/null && log_end_msg 0 || log_end_msg 1 + ;; + + restart) + if ! check_network; then + log_action_msg "no networks configured" + exit 1 + fi + + $0 stop + $0 start + ;; + + status) + ret=0 + status_of_proc -p ${PIDFILE} /usr/sbin/named bind 2>/dev/null || ret=$? + exit $ret + ;; + + *) + log_action_msg "Usage: /etc/init.d/named {start|stop|reload|restart|force-reload|status}" + exit 1 + ;; +esac + +exit 0 diff --git a/debian/bind9.named.service b/debian/bind9.named.service new file mode 100644 index 0000000..8bf0653 --- /dev/null +++ b/debian/bind9.named.service @@ -0,0 +1,17 @@ +[Unit] +Description=BIND Domain Name Server +Documentation=man:named(8) +After=network.target +Wants=nss-lookup.target +Before=nss-lookup.target + +[Service] +EnvironmentFile=-/etc/default/named +ExecStart=/usr/sbin/named -f $OPTIONS +ExecReload=/usr/sbin/rndc reload +ExecStop=/usr/sbin/rndc stop +Restart=on-failure + +[Install] +WantedBy=multi-user.target +Alias=bind9.service diff --git a/debian/bind9.named.tmpfile b/debian/bind9.named.tmpfile new file mode 100644 index 0000000..36fc91d --- /dev/null +++ b/debian/bind9.named.tmpfile @@ -0,0 +1 @@ +d /run/named 0775 root bind - - diff --git a/debian/bind9.postinst b/debian/bind9.postinst new file mode 100644 index 0000000..69333d0 --- /dev/null +++ b/debian/bind9.postinst @@ -0,0 +1,37 @@ +#!/bin/sh + +set -e + +if [ "$1" = configure ]; then + # lets give them a bind user/group in all cases. + getent group bind >/dev/null 2>&1 || addgroup --system bind + getent passwd bind >/dev/null 2>&1 || + adduser --system --home /var/cache/bind --no-create-home \ + --disabled-password --ingroup bind bind + + # create data directory on fresh install + if [ -z "$2" ]; then + mkdir -p /var/lib/bind + chown root:bind /var/lib/bind + chmod 775 /var/lib/bind + fi + + if [ ! -s /etc/bind/rndc.key ] && [ ! -s /etc/bind/rndc.conf ]; then + rndc-confgen -a + fi + + uid=$(ls -ln /etc/bind/rndc.key | awk '{print $3}') + if [ "$uid" = "0" ]; then + chown bind /etc/bind/rndc.key + chgrp bind /etc/bind + chmod g+s /etc/bind + chgrp bind /etc/bind/rndc.key /var/cache/bind + chgrp bind /etc/bind/named.conf* || true + chmod g+r /etc/bind/rndc.key /etc/bind/named.conf* || true + chmod g+rwx /var/cache/bind + fi +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/bind9.postrm b/debian/bind9.postrm new file mode 100644 index 0000000..27239c0 --- /dev/null +++ b/debian/bind9.postrm @@ -0,0 +1,18 @@ +#!/bin/sh + +set -e + +#DEBHELPER# + +if [ "$1" = "purge" ]; then + rm -f /etc/bind/rndc.key + rmdir /etc/bind >/dev/null 2>&1 || true + rm -f /etc/apparmor.d/force-complain/usr.sbin.named >/dev/null 2>&1 || true + rmdir /var/lib/bind || true + # delete bind daemon user, if it exists + if getent passwd bind > /dev/null ; then + deluser --quiet bind > /dev/null || true + fi +fi + +exit 0 diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..53e35f5 --- /dev/null +++ b/debian/changelog @@ -0,0 +1,3250 @@ +bind9 (1:9.16.44-1~deb11u1) bullseye-security; urgency=high + + * New upstream version 9.16.44 + - CVE-2023-3341: A stack exhaustion flaw in control channel code may + cause named to terminate unexpectedly + + -- Ondřej Surý <ondrej@debian.org> Thu, 21 Sep 2023 19:30:52 +0200 + +bind9 (1:9.16.42-1~deb11u1) bullseye-security; urgency=high + + * Update the upstream signing keys + * New upstream version 9.16.42 + - CVE-2023-2828: The overmem cleaning process has been improved, + to prevent the cache from significantly exceeding the configured + max-cache-size limit. + - CVE-2023-2911: A query that prioritizes stale data over lookup + triggers a fetch to refresh the stale data in cache. If the fetch + is aborted for exceeding the recursion quota, it was possible for + named to enter an infinite callback loop and crash due to stack + overflow. This has been fixed. + + -- Ondřej Surý <ondrej@debian.org> Wed, 21 Jun 2023 20:31:51 +0200 + +bind9 (1:9.16.37-1~deb11u1) bullseye-security; urgency=high + + * New upstream version 9.16.37 + - CVE-2022-3094: An UPDATE message flood could cause named + to exhaust all available memory. + - CVE-2022-3736: named could crash with an assertion failure + when an RRSIG query was received and stale-answer-client-timeout + was set to a non-zero value. + - CVE-2022-3924: named running as a resolver with the + stale-answer-client-timeout option set to any value greater + than 0 could crash with an assertion failure, when the + recursive-clients soft quota was reached. + + -- Ondřej Surý <ondrej@debian.org> Wed, 25 Jan 2023 16:22:22 +0100 + +bind9 (1:9.16.33-1~deb11u1) bullseye-security; urgency=high + + * New upstream version 9.16.33 + - CVE-2022-2795: Processing large delegations may severely degrade + resolver performance + - CVE-2022-2881: Buffer overread in statistics channel code + - CVE-2022-2906: Memory leaks in code handling Diffie-Hellman key + exchange via TKEY RRs (OpenSSL 3.0.0+ only) + - CVE-2022-3080: BIND 9 resolvers configured to answer from stale + cache with zero stale-answer-client-timeout may terminate unexpectedly + - CVE-2022-38177: Memory leak in ECDSA DNSSEC verification code + - CVE-2022-38178: Memory leaks in EdDSA DNSSEC verification code + * Drop libldap2-dev from Build-Depends (Closes: #1008021) + * Add runtime dependency on libuv1 >= 1.40.0 (Closes: #1009889) + + -- Ondřej Surý <ondrej@debian.org> Wed, 21 Sep 2022 12:40:02 +0200 + +bind9 (1:9.16.27-1~deb11u1) bullseye-security; urgency=high + + * New upstream version 9.16.27 + * CVE-2022-0396: A synchronous call to closehandle_cb() caused + isc__nm_process_sock_buffer() to be called recursively, which in turn + left TCP connections hanging in the CLOSE_WAIT state blocking + indefinitely when out-of-order processing was disabled. + * CVE-2021-25220: The rules for acceptance of records into the cache + have been tightened to prevent the possibility of poisoning if + forwarders send records outside the configured bailiwick + * Remove patch to fix sphinx-build failure (fixed upstream) + + -- Ondřej Surý <ondrej@debian.org> Mon, 14 Mar 2022 15:25:15 +0100 + +bind9 (1:9.16.22-1~deb11u1) bullseye-security; urgency=high + + * New upstream version 9.16.22 + + CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This + effectively disables the lame server cache, as it could previously be + abused by an attacker to significantly degrade resolver performance. + + -- Ondřej Surý <ondrej@debian.org> Mon, 25 Oct 2021 13:29:14 +0200 + +bind9 (1:9.16.15-1) unstable; urgency=high + + * New upstream version 9.16.15 (Closes: #987741, #987742, #987743) + + CVE-2021-25214: A malformed incoming IXFR transfer could trigger an + assertion failure in ``named``, causing it to quit abnormally. + + CVE-2021-25215: ``named`` crashed when a DNAME record placed in the + ANSWER section during DNAME chasing turned out to be the final + answer to a client query. + + CVE-2021-25216: When a server's configuration set the + ``tkey-gssapi-keytab`` or ``tkey-gssapi-credential`` option, a + specially crafted GSS-TSIG query could cause a buffer overflow in + the ISC implementation of SPNEGO (a protocol enabling negotiation of + the security mechanism used for GSSAPI authentication). + * Add patches to implement I-D draft-hardaker-dnsop-nsec3-guidance + + -- Ondřej Surý <ondrej@debian.org> Thu, 29 Apr 2021 09:11:32 +0200 + +bind9 (1:9.16.13-1) unstable; urgency=medium + + * New upstream version 9.16.13 + * Add upstream patches to fix TCP timeouts firing too early + + -- Ondřej Surý <ondrej@debian.org> Thu, 18 Mar 2021 14:23:49 +0100 + +bind9 (1:9.16.12-3) unstable; urgency=medium + + * Add most important patches from upcoming 9.16.13 release + + -- Ondřej Surý <ondrej@debian.org> Fri, 12 Mar 2021 09:59:49 +0100 + +bind9 (1:9.16.12-2) unstable; urgency=medium + + * Add patch to fix sphinx-build failure on Ubuntu Xenial + + -- Ondřej Surý <ondrej@debian.org> Thu, 18 Feb 2021 12:26:09 +0100 + +bind9 (1:9.16.12-1) unstable; urgency=high + + * New upstream version 9.16.12 + + [CVE-2020-8625]: Fix off-by-one bug in ISC SPNEGO implementation. + (Closes: #983004) + * Adjust the bind9-libs and bind9-dev packages for new upstream library + names + + -- Ondřej Surý <ondrej@debian.org> Thu, 18 Feb 2021 08:13:58 +0100 + +bind9 (1:9.16.11-3) unstable; urgency=medium + + * Split the simple validation test to separate file and mark it as flaky + (Closes: #976045) + + -- Ondřej Surý <ondrej@debian.org> Sun, 14 Feb 2021 20:04:39 +0100 + +bind9 (1:9.16.11-2) unstable; urgency=medium + + * Cherry-pick upstream commit to fix segfault with named ACLs used in + allow-update (Closes: #980786) + + -- Bernhard Schmidt <berni@debian.org> Fri, 29 Jan 2021 08:27:31 +0100 + +bind9 (1:9.16.11-1) unstable; urgency=medium + + * Add the ISC code-signing key for 2021-2022 + * New upstream version 9.16.11 + + -- Ondřej Surý <ondrej@debian.org> Thu, 21 Jan 2021 09:58:33 +0100 + +bind9 (1:9.16.10-1) unstable; urgency=medium + + * New upstream version 9.16.10 + + -- Ondřej Surý <ondrej@debian.org> Wed, 16 Dec 2020 22:22:25 +0100 + +bind9 (1:9.16.9-1) unstable; urgency=medium + + * New upstream version 9.16.9 + + -- Ondřej Surý <ondrej@debian.org> Thu, 26 Nov 2020 12:52:28 +0100 + +bind9 (1:9.16.8-1) unstable; urgency=medium + + [ Ondřej Surý ] + * New upstream version 9.16.8 + + [ Bernhard Schmidt ] + * d/t/control: + - tag autopkgtest with needs-internet (Closes: #973955) + - depend on bind9-dnsutils insead of the transitional dnsutils + * d/rules: change deprecated --with-libjson-c configure argument to + --with-json-c + + -- Bernhard Schmidt <berni@debian.org> Mon, 09 Nov 2020 23:03:53 +0100 + +bind9 (1:9.16.7-1) unstable; urgency=medium + + * New upstream version 9.16.7 + + -- Ondřej Surý <ondrej@debian.org> Thu, 17 Sep 2020 10:36:51 +0200 + +bind9 (1:9.16.6-3) unstable; urgency=medium + + [ Ondřej Surý ] + * Add upstream patches to fix some rare conditions (Closes: #969448) + + [ Bernhard Schmidt ] + * Set Restart=on-failure in systemd unit + + -- Bernhard Schmidt <berni@debian.org> Tue, 15 Sep 2020 00:26:14 +0200 + +bind9 (1:9.16.6-2) unstable; urgency=medium + + * Move Build-Depends for documentation to Build-Depends-Indep, this + should fix the arch-any build on s390x where xindy is not available. + + -- Bernhard Schmidt <berni@debian.org> Sat, 22 Aug 2020 20:06:00 +0200 + +bind9 (1:9.16.6-1) unstable; urgency=medium + + * New upstream version 9.16.6 + + -- Ondřej Surý <ondrej@debian.org> Thu, 20 Aug 2020 21:32:46 +0200 + +bind9 (1:9.16.5-1) unstable; urgency=medium + + * New upstream version 9.16.5 + * Add fonts-freefont-otf, latexmk, texlive-fonts-recommended, + texlive-latex-recommended, texlive-xetex, xindy to Build-Depends + * Install man pages for tsig-gen and named-compilezone + + -- Ondřej Surý <ondrej@debian.org> Thu, 16 Jul 2020 00:29:57 +0200 + +bind9 (1:9.16.4-1) unstable; urgency=medium + + * New upstream version 9.16.4 + * Update Debian packaging for sphinx-doc documentation + + -- Ondřej Surý <ondrej@debian.org> Wed, 17 Jun 2020 09:27:29 +0200 + +bind9 (1:9.16.3-1) unstable; urgency=medium + + * New upstream version 9.16.3 + + -- Ondřej Surý <ondrej@debian.org> Tue, 19 May 2020 14:14:35 +0200 + +bind9 (1:9.16.2-3) unstable; urgency=medium + + [ Simon Deziel ] + * apparmor: use profile name specifier + + -- Bernhard Schmidt <berni@debian.org> Thu, 23 Apr 2020 11:45:43 +0200 + +bind9 (1:9.16.2-2) unstable; urgency=medium + + * Update gbp.conf to debian/master and upstream/latest + * Reintroduce the bind9-dev package (Closes: #954906) + + -- Ondřej Surý <ondrej@debian.org> Thu, 16 Apr 2020 12:14:44 +0200 + +bind9 (1:9.16.2-1) unstable; urgency=medium + + * Update d/copyright (Closes: #947978) + * New upstream version 9.16.2 (Closes: #952946, #954919) + + -- Ondřej Surý <ondrej@debian.org> Thu, 16 Apr 2020 10:07:07 +0200 + +bind9 (1:9.16.1-2) unstable; urgency=medium + + [ Andreas Hasenack ] + * Bring back the DEP8 test from sid + * Use iproute2 instead of net-tools + * d/control: drop hardcoded python3 dependency + + [ Bernhard Schmidt ] + * Fix apparmor profile name. + Thanks to Andreas Hasenack + * Enable readline support + + [ Andreas Hasenack ] + * Update apparmor profile with what is in sid + * Create the missing transitional packages for dnsutils, bind9utils + * There is a licensing conflict with adding libreadline and we should + use libedit-dev instead. + + [ Ondřej Surý ] + * Add Breaks: freeipa, so the package doesn't migrate to testing before freeipa is fixed + + -- Ondřej Surý <ondrej@debian.org> Sun, 22 Mar 2020 09:21:21 +0100 + +bind9 (1:9.16.1-1) experimental; urgency=medium + + * New upstream version 9.16.1 + + -- Ondřej Surý <ondrej@debian.org> Fri, 20 Mar 2020 13:59:34 +0100 + +bind9 (1:9.16.0-1) experimental; urgency=medium + + * Change the branch to 9.16 + * New upstream version 9.16.0 + + -- Ondřej Surý <ondrej@debian.org> Thu, 20 Feb 2020 10:54:34 +0100 + +bind9 (1:9.15.8-1) experimental; urgency=medium + + * New upstream version 9.15.8 + + -- Ondřej Surý <ondrej@debian.org> Thu, 23 Jan 2020 14:58:01 +0100 + +bind9 (1:9.15.7-1) experimental; urgency=medium + + * Add libuv1-dev, libcmocka-dev, libedit-dev and zlib1g-dev to B-D + * Update d/watch to use tar.xz + * New upstream version 9.15.7 + + -- Ondřej Surý <ondrej@debian.org> Thu, 19 Dec 2019 09:40:52 +0100 + +bind9 (1:9.15.6-1) experimental; urgency=medium + + * Remove useless patches + * New upstream version 9.15.6 + + -- Ondřej Surý <ondrej@debian.org> Wed, 20 Nov 2019 21:58:06 +0100 + +bind9 (1:9.15.5-1) experimental; urgency=medium + + * New upstream version 9.15.5 + * Install python files to dist-packages (Courtesy of Jim Popovitch) + * Remove GPL licensed apport file until one with better license is available + * Remove debian/nslookup.1 + * Remove 4-clause BSD content from the package + + -- Ondřej Surý <ondrej@sury.org> Thu, 17 Oct 2019 08:41:55 +0200 + +bind9 (1:9.15.4-1) unstable; urgency=medium + + * New upstream version 9.15.4 + + -- Ondřej Surý <ondrej@sury.org> Mon, 23 Sep 2019 11:54:32 +0200 + +bind9 (1:9.15.3-2) unstable; urgency=medium + + * Fix the section for bind9 alias in the systemd unit [GL #1193] + + -- Ondřej Surý <ondrej@sury.org> Wed, 28 Aug 2019 21:35:44 +0200 + +bind9 (1:9.15.3-1) unstable; urgency=medium + + * New upstream version 9.15.3 + * isc-config has been removed, remove it from the debian/ + + -- Ondřej Surý <ondrej@sury.org> Mon, 26 Aug 2019 10:26:41 +0200 + +bind9 (1:9.15.2-2) unstable; urgency=medium + + * Tighten libmaxminddb-dev dependency + * Install the tmpfile for named service again + + -- Ondřej Surý <ondrej@sury.org> Wed, 07 Aug 2019 11:11:13 +0200 + +bind9 (1:9.15.2-1) unstable; urgency=medium + + * New upstream version 9.15.2 + * Disable old GeoIP and enable new GeoIP2 + + -- Ondřej Surý <ondrej@sury.org> Thu, 18 Jul 2019 10:09:29 +0200 + +bind9 (1:9.15.1-2) experimental; urgency=medium + + * Change --with-json=/usr to --with-json-c (and use pkg-config) + + -- Ondřej Surý <ondrej@sury.org> Thu, 20 Jun 2019 00:34:27 +0200 + +bind9 (1:9.15.1-1) experimental; urgency=medium + + * New upstream version 9.15.1 + * Rebase patches for 9.15.1 + + -- Ondřej Surý <ondrej@sury.org> Thu, 20 Jun 2019 00:27:55 +0200 + +bind9 (1:9.15.0-2) experimental; urgency=medium + + * Fix Debian buster armhf build + + -- Ondřej Surý <ondrej@sury.org> Tue, 21 May 2019 20:04:34 +0200 + +bind9 (1:9.15.0-1) experimental; urgency=medium + + * Update debian/ for BIND 9.15 + * New upstream version 9.15.0 + + -- Ondřej Surý <ondrej@sury.org> Tue, 21 May 2019 13:19:38 +0200 + +bind9 (1:9.14.2-1) experimental; urgency=medium + + * Make named.service to be known as bind9.service + * New upstream version 9.14.2 + + -- Ondřej Surý <ondrej@sury.org> Tue, 21 May 2019 13:08:43 +0200 + +bind9 (1:9.14.1-1) experimental; urgency=medium + + [ Ondřej Surý ] + * New upstream version 9.14.1 + * Remove the transitional packages and only keep bind9 names as the + product name is 'BIND 9' + + [ Bernhard Schmidt ] + * Update AppArmor policy for Samba AD DLZ. + Thanks to Steven Monai (Closes: #920530) + * More fixes to the AppArmor policy + * AppArmor policy: Allow access to /dev/urandom + * AppArmor: Also add /var/lib/samba/bind-dns/dns/** (Closes: #927827) + + -- Ondřej Surý <ondrej@debian.org> Fri, 26 Apr 2019 08:57:57 +0000 + +bind9 (1:9.14.0-1) experimental; urgency=medium + + * New upstream version 9.14.0 + + -- Ondřej Surý <ondrej@debian.org> Fri, 22 Mar 2019 09:17:03 +0000 + +bind9 (1:9.14.0~rc3-1) experimental; urgency=medium + + * New upstream version 9.14.0~rc3 + + -- Ondřej Surý <ondrej@debian.org> Mon, 18 Mar 2019 12:34:17 +0000 + +bind9 (1:9.14.0~rc2-1) experimental; urgency=medium + + * New upstream version 9.14.0~rc2 + * Plugins are now in /usr/lib/<triplet>/named/*.so + + -- Ondřej Surý <ondrej@debian.org> Mon, 11 Mar 2019 12:42:47 +0000 + +bind9 (1:9.14.0~rc1-1) experimental; urgency=medium + + * Update branches for DEP-14 + * Bump the d/watch from 9.13 -> 9.14 + * New upstream version 9.14.0~rc1 + + -- Ondřej Surý <ondrej@debian.org> Fri, 01 Mar 2019 10:44:30 +0000 + +bind9 (1:9.13.6-2) experimental; urgency=medium + + * Add B/R for dnsutils + + -- Ondřej Surý <ondrej@debian.org> Wed, 20 Feb 2019 12:20:08 +0000 + +bind9 (1:9.13.6-1) experimental; urgency=medium + + [ Ondřej Surý ] + * New upstream version 9.13.6 + * Add usr/share/man/man8/filter-aaaa.8 to the bind package + * Rename packages back to BIND 9 + * Rename the init scripts to named to match the name of the daemon + * Bump to debhelper compat level 12 + * Fix dh_install, dh_installinit and dh_installsystemd invocation for + debhelper-compat level 12 + * Add new upstream GPG signing-key + * Disable building in subdirectory + * Add bind-libs transitional package to cleanly remove src:bind from the + archive + * Disable subdirectory build in dh_auto_install target + * Disable dh_auto_test as neither kyua (needed for unit tests) or + setting up virtual interfaces on lo (needed for system tests) is + available in Debian builds + + [ Dominik George ] + * Support dyndb modules in apparmor. + * Also allow mapping from dyndb modules. + + [ Bernhard Schmidt ] + * apparmor-policy: permit locking of the allow-new-zones database + (Closes: #922065) + * apparmor-policy: allow access to Samba DLZ files (Closes: #920530) + + -- Ondřej Surý <ondrej@debian.org> Mon, 18 Feb 2019 20:02:55 +0000 + +bind (1:9.13.5-1) experimental; urgency=medium + + * New upstream version 9.13.5 + + -- Ondřej Surý <ondrej@debian.org> Tue, 18 Dec 2018 14:50:46 +0000 + +bind (1:9.13.4-1) experimental; urgency=medium + + * Use team+dns@tracker.debian.org as Maintainer address + * New upstream version 9.13.4 + + -- Ondřej Surý <ondrej@debian.org> Thu, 22 Nov 2018 14:56:03 +0000 + +bind (1:9.13.3-3) experimental; urgency=medium + + * Remove deprecated -r /dev/urandom option from rndc invocation + + -- Ondřej Surý <ondrej@debian.org> Thu, 22 Nov 2018 14:55:53 +0000 + +bind (1:9.13.3-2) experimental; urgency=medium + + * Remove --disable-static from the dh_auto_configure call + + -- Ondřej Surý <ondrej@debian.org> Wed, 26 Sep 2018 10:38:05 +0000 + +bind (1:9.13.3-1) experimental; urgency=medium + + * New upstream version 9.13.3 + * Rebase patches for BIND 9.13.3 + + -- Ondřej Surý <ondrej@debian.org> Mon, 10 Sep 2018 08:13:47 +0000 + +bind (1:9.13.3~400-g47066d3d01-1) experimental; urgency=medium + + * New upstream version 9.13.3~400-g47066d3d01 + + -- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2018 12:47:48 +0000 + +bind (1:9.13.3~398-g5c00162f54-1) experimental; urgency=medium + + [ Bernhard Schmidt ] + * Enable IDN support for dig+host using libidn2 (Closes: #459010) + * Use root.hints from dns-root-data (Closes: #888491) + * Adjust apparmor profile for dns-root-data + * Fix missing colon in AppArmor profile (Closes: #904983) + * d/watch: Properly deal with -P patch releases + + [ Timo Aaltonen ] + * skip-rtld-deepbind-for-dyndb.diff: Add a patch to fix named-pkcs11 crashing on startup. (LP: #1769440) + + [ Ondřej Surý ] + * New upstream version 9.13.3~398-g5c00162f54 + * Rebase patches for new upstream snapshot release + + -- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2018 11:39:51 +0000 + +bind (1:9.13.2-1~exp0) experimental; urgency=medium + + * Don't repack, all non-free files are gone from BIND 9.13 + * New upstream version 9.13.2 + * Rebase patches for BIND 9.13.2 + * Stop providing bind-dev package and checking for symbols, they are not + tightly coupled with rest of the package. + * Add docbook-xsl and docbook-xml to Build-Depends + * Add pkg-config to Build-Depends and cleanup versioned Build-Depends + * Enable dnstap support (Courtesy of Richard James Salts) + * Remove auth-nxdomain no; from named.conf.options (Closes: #896889) + + -- Ondřej Surý <ondrej@debian.org> Tue, 17 Jul 2018 11:15:07 +0000 + +bind (1:9.13.1+dfsg-1) experimental; urgency=medium + + * New upstream version 9.13.1+dfsg + * d/watch: Always package the latest version + * d/patches: Remove 0003-Add-min-cache-ttl-and-min-ncache-ttl-keywords.patch, + so we less divert from upstream + * d/patches: Refresh patches on top of BIND 9.13.1 + + -- Ondřej Surý <ondrej@debian.org> Thu, 21 Jun 2018 08:10:49 +0000 + +bind (1:9.12.0+dfsg-1~exp1) experimental; urgency=medium + + * Move to standard master/upstream/pristine-tar branching + * Add /etc/default/bind file to bind package + * Don't fail the systemd unit if /etc/default/bind doesn't exist + + -- Ondřej Surý <ondrej@debian.org> Wed, 24 Jan 2018 14:16:43 +0000 + +bind (1:9.12.0+dfsg-1~exp0) experimental; urgency=medium + + * New upstream version 9.12.0+dfsg + * Rename bind9 to just bind, and merge all shared libraries into bind-libs. + * Update Vcs-* links to salsa.d.o + * Update d/watch and d/gbp.conf for BIND 9.12 + * Remove export version of the libraries; we really need to deprecate ISC-DHCP in buster+1 + * d/patches changes: + + Convert 02_version.diff to sed rule in d/rules + + Remove the extra native-pkcs11 patch that double builds everything; a solution with OpenSSL engines is far more suitable and less intrusive + + Remove stdatomic.h patches; already merged upstream into BIND 9.12 + + Refresh all the other patches for BIND 9.12.0 + + Fix the min-(n)cache-ttl patch for BIND 9.12 + * Remove isc-hmac-fixup from bind package + * Remove man3 from bind-dev package as they are not installed + * Add dnssec-cds to bind-utils package + * Update missing and new symbols for BIND 9.12 + + -- Ondřej Surý <ondrej@debian.org> Wed, 24 Jan 2018 09:18:13 +0000 + +bind9 (1:9.11.2.P1-1) unstable; urgency=medium + + * New upstream version 9.11.2-P1 + * Refresh patches for new release + + -- Ondřej Surý <ondrej@debian.org> Wed, 17 Jan 2018 06:06:04 +0000 + +bind9 (1:9.11.2+dfsg-10) unstable; urgency=medium + + * Disable lmdb usage in export version of libraries (Closes: #887407) + + -- Ondřej Surý <ondrej@debian.org> Tue, 16 Jan 2018 05:59:31 +0000 + +bind9 (1:9.11.2+dfsg-9) unstable; urgency=medium + + * Fix various mistakes in bind9 conffiles (Closes: #887398) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 23:12:43 +0000 + +bind9 (1:9.11.2+dfsg-8) unstable; urgency=medium + + * Pull more stdatomic patch to fix builds on 32-bit architectures + * Remove extra native pkcs11 patch (it has been replaced by sed rules) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 21:02:30 +0000 + +bind9 (1:9.11.2+dfsg-7) unstable; urgency=medium + + * Pull upstream patch to use C11 stdatomic where available (Closes: #778720) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 15:59:48 +0000 + +bind9 (1:9.11.2+dfsg-6) unstable; urgency=medium + + * Add named-nzd2nzf to bind9 package + * Simplify installation rules + * Enable lmdb (to actually build named-nzd2nzf) + * Move delv from bind9 to dnsutils package (Closes: #887326) + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jan 2018 14:19:31 +0000 + +bind9 (1:9.11.2+dfsg-5) unstable; urgency=medium + + * Remove duplicate invoke-rc.d start invocation (Closes: #883575) + * Don't fail in postrm when /var/lib/bind cannot be removed (Closes: #882999) + * Use dh-apparmor for profile management + * apparmor-profile: allow changing thread name (Closes: #883228) + * Bump debhelper compat level to 10 + * Bump Standards-Version to 4.1.2, no changes necessary + + -- Bernhard Schmidt <berni@debian.org> Sun, 10 Dec 2017 20:23:12 +0100 + +bind9 (1:9.11.2+dfsg-4) unstable; urgency=medium + + * Team upload. + * Fix symlinks in libbind-export-dev to point to /lib (Closes: #883536) + + -- Bernhard Schmidt <berni@debian.org> Tue, 05 Dec 2017 00:09:25 +0100 + +bind9 (1:9.11.2+dfsg-3) unstable; urgency=medium + + * Team upload. + * Only install files into bind9:any on arch-any builds (Closes: #883448) + * Adjust dependencies for udeb packages (Closes: #883449) + + -- Bernhard Schmidt <berni@debian.org> Mon, 04 Dec 2017 10:56:58 +0100 + +bind9 (1:9.11.2+dfsg-2) unstable; urgency=medium + + * Team upload. + * Workaround for FTBFS on binary-any builds (Closes: #883159) + + -- Bernhard Schmidt <berni@debian.org> Sun, 03 Dec 2017 20:36:32 +0100 + +bind9 (1:9.11.2+dfsg-1) unstable; urgency=low + + * d/watch: Bump the BIND version to 9.11.x + * Remove 'order random_1' patch, it was a horrible deviation from standards + * Modernize d/rules using debhelper + * New upstream version 9.11.2+dfsg + * Delete dyndb patch, as dyndb is now included in upstream sources + * Rebase patches for new upstream release. + * Add python3-ply to Build-Depends + * Restore the native pkcs11 patch + * Fix the Debian version parsing + * Remove lwresd as it has been deprecated by upstream anyway + * Add new tools: mdig to dnsutils and dnssec-keymgr to bind9utils + * Update the SONAMEs of BIND libraries + * Fix python3 packaging errors + * Bump the standards version to 4.1.1.1 (no change) + * Add support for dh_missing + + -- Ondřej Surý <ondrej@debian.org> Tue, 28 Nov 2017 22:59:30 +0000 + +bind9 (1:9.10.6+dfsg-5) unstable; urgency=medium + + [ Chris Lamb ] + * Make the build reproducible (Closes: #828012) + + [ Micah Cowan ] + * Try not to be fragile to varying value of LIBS make var. (Closes: #833307) + + [ Ondřej Surý ] + * Update the softhsm2.so non-MA path (Closes: #860722) + * Enable JSON output in the statistics channel (Closes: #860722) + * Merge NMUs' changelogs (Closes: #880077) + * Use /dev/urandom to avoid blocking in the server process. (Closes: #854243) + + -- Ondřej Surý <ondrej@debian.org> Thu, 02 Nov 2017 10:31:01 +0000 + +bind9 (1:9.10.6+dfsg-4) unstable; urgency=medium + + [ Michael Biebl ] + * Improve bind9-resolvconf.service (Closes: #826353) + + [ Ondřej Surý ] + * Add insserv.conf.d configuration (Closes: #650538) + * Change bind9-resolvconf.server to Type=oneshot + RemainAfterExit=yes (Closes: #832040) + * Only add static and development symlinks for *-export.{a,so} libraries (Closes: #857522) + * Update Vcs-* fields to standard variants + * Rebuild with newer debhelper (Closes: #879542) + + -- Ondřej Surý <ondrej@debian.org> Mon, 23 Oct 2017 07:02:50 +0000 + +bind9 (1:9.10.6+dfsg-3) unstable; urgency=medium + + * Make lwresd hard depend on bind9 package (Closes: #879127) + + -- Ondřej Surý <ondrej@debian.org> Sun, 22 Oct 2017 11:08:20 +0000 + +bind9 (1:9.10.6+dfsg-2) unstable; urgency=medium + + [ Timo Aaltonen ] + * d/copyright: Add Bv9ARM.pdf to Files-Excluded. + + [ Ondřej Surý ] + * Replace lwresd with symlink instead of hard copy (Closes: #868538) + * Fix the symbols file to compensate for missing bsdcompat symbol on kFreeBSD (Closes: #879017) + * Re-enable threading support on kFreeBSD (Closes: #879018) + * Drop Multi-Arch: same header from libbind-dev (Closes: #874232) + * Remove transitional host package (Closes: #645437, #878228) + + -- Ondřej Surý <ondrej@debian.org> Thu, 19 Oct 2017 09:35:03 +0000 + +bind9 (1:9.10.6+dfsg-1) unstable; urgency=medium + + * New upstream version 9.10.6+dfsg + * Use OpenSSL 1.1.0 for crypto + * Add support for downloading upstream sources using d/watch + + Make d/copyright machine readable for Files-Excluded: support + + Update Files-Exclude: * to remove obsolete software dropped in + contrib/, but not really used + * Add initial README.source + * Limit the d/watch to 9.10.x (aka stable) for now + * Update patches for BIND 9.10.6 release + * Update PKCS11 patch + * Move under pkg-dns umbrella + * Reformat files in debian/ with wrap-and-sort -a for better maintainability + * Update the d/export.diff for BIND 9.10.6 + * Remove FAQ from d/bind9.docs + * Bump SONAME versions for BIND libraries + * Add symbols files for libraries and enable strict symbol checks + * arpaname and named-rrchecker has been moved to /usr/bin + * Install required python library into bind9utils to accompany + dnssec-checkds and dnssec-coverage + * Change Vcs-* to pkg-dns/bind9 + * Also exclude idnkit from upstream tarball + * Finish the debian/copyright update into machine readable format + * Enable Multi-Arch on libirs-export189 + * Cleanup maintainer scripts + * Add lintian override for false positive on full-path command + * Remove unnecessary complexity when generating ${Description} to d/control + + -- Ondřej Surý <ondrej@debian.org> Fri, 06 Oct 2017 06:18:21 +0000 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u3) stretch; urgency=medium + + [ Bernhard Schmidt ] + * Import upcoming DNSSEC KSK-2017 from 9.10.5 + + [ Ondřej Surý ] + * Non-maintainer upload. + + -- Ondřej Surý <ondrej@debian.org> Mon, 28 Aug 2017 09:36:28 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u2) stretch-security; urgency=high + + * Non-maintainer upload by the Security Team. + * debian/patches: + - CVE-2017-3142_regression added, fix a regression introduced in with the + correction for CVE-2017-3142. + + -- Yves-Alexis Perez <corsac@debian.org> Sat, 22 Jul 2017 21:24:54 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3+deb9u1) stretch-security; urgency=high + + * Non-maintainer upload by the Security Team. + * debian/patches: + - debian/patches/CVE-2017-3142+CVE-2017-3143 added, fix TSIG bypasses + CVE-2017-3142: error in TSIG authentication can permit unauthorized zone + transfers. An attacker may be able to circumvent TSIG authentication of + AXFR and Notify requests. + CVE-2017-3143: error in TSIG authentication can permit unauthorized + dynamic updates. An attacker may be able to forge a valid TSIG or SIG(0) + signature for a dynamic update. + + -- Yves-Alexis Perez <corsac@debian.org> Fri, 30 Jun 2017 16:20:29 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.3) unstable; urgency=high + + * Non-maintainer upload. + * Dns64 with "break-dnssec yes;" can result in a assertion failure + (CVE-2017-3136) (Closes: #860224) + * Some chaining (CNAME or DNAME) responses to upstream queries could trigger + assertion failures (CVE-2017-3137) (Closes: #860225) + * 'rndc ""' could trigger a assertion failure in named (CVE-2017-3138) + (Closes: #860226) + + -- Salvatore Bonaccorso <carnil@debian.org> Sun, 07 May 2017 15:22:46 +0200 + +bind9 (1:9.10.3.dfsg.P4-12.2) unstable; urgency=medium + + * Non-maintainer upload. + * Replace 32_mips_atomic.diff with a version that uses C11 atomics. Fixes + hangs and crashes on MIPS. (Closes: #778720) + + -- James Cowgill <jcowgill@debian.org> Tue, 18 Apr 2017 16:42:50 +0100 + +bind9 (1:9.10.3.dfsg.P4-12.1) unstable; urgency=medium + + * Non-maintainer upload. + * Use /dev/urandom to avoid blocking in the server process. + (closes: #854243) + + -- Bastian Blank <waldi@debian.org> Fri, 17 Mar 2017 19:07:16 +0100 + +bind9 (1:9.10.3.dfsg.P4-12) unstable; urgency=high + + * Merge and accept the non-maintainer upload. + * Fix regression caused by the fix for CVE-2016-8864 (closes: #855540). + * Fix CVE-2017-3135: a malicously crafted query can cause named to crash if + both DNS64 and RPZ are being used (closes: #855520). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 19 Feb 2017 22:39:32 +0000 + +bind9 (1:9.10.3.dfsg.P4-11.1) unstable; urgency=medium + + * Non-maintainer upload. + * Disable GOST to prevent ENGINE_by_id failed (crypto failure) in chroot. + Patch by Marc Haber <mh+debian-bugs@zugschlus.de> (Closes: #820974). + + -- Arturo Borrero Gonzalez <arturo@debian.org> Tue, 07 Feb 2017 10:42:00 +0100 + +bind9 (1:9.10.3.dfsg.P4-11) unstable; urgency=medium + + * Fix some lintian warnings. + * Add lsb-base dependency to lwresd (closes: #848519). + * Fix CVE-2016-2775: crash in lwresd due to a long query name + (closes: #831796). + * Fix CVE-2016-2776: maliciously crafted query can cause named to crash + (closes: #839010). + * Fix CVE-2016-8864: incorrect handling of a DNAME record can cause + named to crash (closes: #842858). + * Fix CVE-2016-9131: maliciously crafted response to an ANY query can + cause named to crash (closes: #851065). + * Fix CVE-2016-9147: query with contradictory DNSSEC information can + cause named to crash (closes: #851063). + * Fix CVE-2016-9444: maliciously formed DNSSEC Delegation Signer (DS) + record can cause named to crash (closes: #851062). + * Openssl 1.1 is not yet supported, so build with openssl 1.0 for now + (closes: #828082). + + [ LaMont Jones ] + * Update VCS fields in control. + * -DDIG_SIGCHASE got dropped by the change in hardening. + + [ Stefan Bader ] + * Use the defaults file in systemd. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Jan 2017 04:03:28 +0000 + +bind9 (1:9.10.3.dfsg.P4-10.1) unstable; urgency=medium + + * Non-maintainer upload. + * Add explicit ordering for nss-lookup.target in bind9.service, + lwresd.service. Patches by Michael Biebl <biebl@debian.org>. + (Closes: #826243, #826245) + + -- Christian Hofstaedtler <zeha@debian.org> Sat, 02 Jul 2016 14:32:50 +0200 + +bind9 (1:9.10.3.dfsg.P4-10) unstable; urgency=medium + + * Use python3 + + -- LaMont Jones <lamont@debian.org> Tue, 03 May 2016 17:39:49 -0600 + +bind9 (1:9.10.3.dfsg.P4-9) unstable; urgency=medium + + * Fix bad patch from when we switched to quilt. Closes: #820847 LP: + #1552801, #1549788, #1553460 + * freshen patch to remove fuzz. + + -- LaMont Jones <lamont@debian.org> Tue, 26 Apr 2016 15:17:58 -0600 + +bind9 (1:9.10.3.dfsg.P4-8) unstable; urgency=medium + + [Timo Aaltonen] + + * Fix bind9-resolvconf.service installation. + * Add support for native pkcs11. LP: #1565392 + + [Samuel Thibault] + + * Detect in6_pktinfo on hurd-i386. Closes: #820404 + + -- LaMont Jones <lamont@debian.org> Wed, 13 Apr 2016 13:19:37 -0600 + +bind9 (1:9.10.3.dfsg.P4-7) unstable; urgency=medium + + * Fix libisccc-export dependencies. Closes: #820043 + + -- Michael Gilbert <mgilbert@debian.org> Tue, 05 Apr 2016 02:53:22 +0000 + +bind9 (1:9.10.3.dfsg.P4-6) unstable; urgency=medium + + * Upload 9.10 to unstable. Closes: #781739 + * Add -DNO_VERSION_DATE to CFLAGS. Closes: #783885 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 04 Apr 2016 00:39:57 +0000 + +bind9 (1:9.10.3.dfsg.P4-5) experimental; urgency=medium + + * Drop dead code in bind9.preinst. + * move from /var/run to /run for policy. + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2016 19:52:04 -0600 + +bind9 (1:9.10.3.dfsg.P4-4) experimental; urgency=medium + + * use multiarch path in udebs + * Updated root cache file. Closes: #806954 + + -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 20:50:49 -0600 + +bind9 (1:9.10.3.dfsg.P4-3) experimental; urgency=medium + + * Fix vcs links + * build in debian/tmp, use bind9.install + + -- LaMont Jones <lamont@debian.org> Fri, 18 Mar 2016 14:46:30 -0600 + +bind9 (1:9.10.3.dfsg.P4-2) experimental; urgency=medium + + * updated precise_time patch + * add RT#s to some patches + * Merge ubuntu changes + * Fix debian/rules to properly remove files from bind9 that are delivered + elsewhere. LP: #1559090 + + -- LaMont Jones <lamont@canonical.com> Fri, 18 Mar 2016 10:58:07 -0600 + +bind9 (1:9.10.3.dfsg.P4-1ubuntu2) xenial; urgency=medium + + * Bump debhelper to v9 to use dh-exec. + * libbind-export-dev: Fix the libbind.so symlink. + * Move static libs to the multiarch libdir again. + + -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 13:30:03 +0100 + +bind9 (1:9.10.3.dfsg.P4-1ubuntu1) xenial; urgency=medium + + * Fix udeb dependencies. + + -- Matthias Klose <doko@ubuntu.com> Fri, 18 Mar 2016 12:47:02 +0100 + +bind9 (1:9.10.3.dfsg.P4-1) experimental; urgency=medium + + [ ISC ] + * New upstream: 9.10.3-P3 + - Specific APL data could trigger a INSIST. (CVE-2015-8704) [RT #41396] + - render_ecs errors were mishandled when printing out a OPT record + resulting in a assertion failure. (CVE-2015-8705) [RT #41397] + - Fixed a regression in resolver.c:possibly_mark() which caused + known-bogus servers to be queried anyway. [RT #41321] + * New upstream: 9.10.3-P4 + - Malformed control messages can trigger assertions in named and rndc. + (CVE-2016-1285) [RT #41666] + - Fix resolver assertion failure due to improper DNAME handling when + parsing fetch reply messages. (CVE-2016-1286) [RT #41753] + - Duplicate EDNS COOKIE options in a response could trigger an + assertion failure. (CVE-2016-2088) [RT #41809] + + [LaMont Jones] + + * Do not build -export libs for libbind90 and liblwres. Relates in part + to, and is the last fix to LP: #1551351 + * update patches for 9.10.3.dfsg.P4. Drop 50_CVE_2015-8704.diff + + [ Stefan Bader ] + + * Do not modify signal handlers for external apps. LP: #1556175 + + -- LaMont Jones <lamont@debian.org> Thu, 17 Mar 2016 14:53:36 -0600 + +bind9 (1:9.10.3.dfsg.P2-7) experimental; urgency=medium + + * Fix my bad merge of autoreconf workaround. + * Re-implement -export libraries. LP: #1556175 + * Deliver libisccc-export library. + + -- LaMont Jones <lamont@debian.org> Wed, 16 Mar 2016 15:14:48 -0600 + +bind9 (1:9.10.3.dfsg.P2-5) experimental; urgency=medium + + [Timo Aaltonen] + + * Sync 30_dynamic_db.diff from Fedora. + * rules: Backup some files which dh_autoreconf_clean would remove, restore + on clean. + + [Jamie Strandboge] + + * apparmor: use @{PROC} instead of /proc, allow read on + sys.net.ipv4.ip_local_port_range. LP: #1552441 + + [LaMont Jones] + + * Return nanosecond-precise time for files, so that we more-correctly know + when we can skip loading a zonefile. (Bug introduced 9.9.3b2) + + -- LaMont Jones <lamont@debian.org> Thu, 03 Mar 2016 18:17:06 -0700 + +bind9 (1:9.10.3.dfsg.P2-4) experimental; urgency=medium + + [Matthias Klose] + + * Fix .so symlinks. + * libbind-dev: Depend on libirs141. + * For the udeb's, use a separate build with a reduced feature set, drop the + name difference, and do both builds in a separate directory. + + [Filip Pytloun] + + * Add apparmor rules needed by freeipa-server. Closes: #814314 + + [LaMont Jones] + + * Do not deliver libraries (left in /lib) as part of bind9. LP: #1547052 + * clean up library path for libirs. + + -- LaMont Jones <lamont@debian.org> Fri, 19 Feb 2016 14:26:08 -0700 + +bind9 (1:9.10.3.dfsg.P2-3ubuntu3) xenial; urgency=medium + + * For the udeb's, use a separate build with a reduced feature set. + * Don't call the reduced build "export"; it was used by isc-dhcp as well. + * Do both builds in a separate builddir. + + -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100 + +bind9 (1:9.10.3.dfsg.P2-3~ubuntu2) xenial; urgency=medium + + * libbind-dev: Depend on libirs141. + * Ship libirs.{a,so} in libbind-dev. + * Remove obsolete debian/*.dirs files. + + -- Matthias Klose <doko@ubuntu.com> Fri, 19 Feb 2016 15:01:16 +0100 + +bind9 (1:9.10.3.dfsg.P2-3~ubuntu1) xenial; urgency=medium + + * Fix .so symlinks. + + -- Matthias Klose <doko@ubuntu.com> Thu, 18 Feb 2016 13:55:19 +0100 + +bind9 (1:9.10.3.dfsg.P2-3) experimental; urgency=medium + + [Marc Deslauriers] + + * SECURITY UPDATE: denial of service via string formatting operations. + CVE-2015-8704 + + [Matthias Klose] + + * Add multiarch support. Closes: #802584. + * Standards cleanup. + + [LaMont Jones] + + * Properly finish converting to 3.0 (quilt) format. + * Drop geoip_acl patch temporarily while we evaluate the upstream geoip + changes. + * Prechroot init appears to have been taken upstream. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2016 10:34:24 -0700 + +bind9 (1:9.10.3.dfsg.P2-1) experimental; urgency=medium + + * New upstream, no need for export packages with 9.10 + * Fix sonames + * Update how we do hardening. + * Add Robie Basak as an uploader + * Migrate quilt patches from 9.9.5 branch, and incorporate Michael Gilbert's + changes. + + -- LaMont Jones <lamont@debian.org> Thu, 31 Dec 2015 18:41:31 -0700 + +bind9 (1:9.9.5.dfsg-12.1) unstable; urgency=high + + * Non-maintainer upload. + * Add patch to fix CVE-2015-8000. + CVE-2015-8000: Insufficient testing when parsing a message allowed + records with an incorrect class to be accepted, triggering a REQUIRE + failure when those records were subsequently cached. (Closes: #808081) + + -- Salvatore Bonaccorso <carnil@debian.org> Wed, 16 Dec 2015 15:01:39 +0100 + +bind9 (1:9.9.5.dfsg-12) unstable; urgency=high + + * Fix CVE-2015-5722: maliciously crafted DNSSEC key can cause named to crash. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 03 Sep 2015 01:16:32 +0000 + +bind9 (1:9.9.5.dfsg-11) unstable; urgency=high + + * Fix CVE-2015-5477: maliciously crafted TKEY query can cause named to exit + (closes: #793903). + + -- Michael Gilbert <mgilbert@debian.org> Wed, 29 Jul 2015 23:46:48 +0000 + +bind9 (1:9.9.5.dfsg-10) unstable; urgency=high + + * Fix CVE-2015-4620: DNSSEC validation of a malicously crafted zone can + cause the resolver to crash (closes: #791715). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 09 Jul 2015 00:43:38 +0000 + +bind9 (1:9.9.5.dfsg-9) unstable; urgency=high + + * Fix CVE-2015-1349: named crash due to managed key rollover, primarily only + affecting setups using DNSSEC (closes: #778733). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 19 Feb 2015 03:42:21 +0000 + +bind9 (1:9.9.5.dfsg-8) unstable; urgency=medium + + * Launch rndc command in the background in networking scripts to avoid a + hang in named from bringing down the entire network (closes: #760555). + + -- Michael Gilbert <mgilbert@debian.org> Thu, 01 Jan 2015 17:51:52 +0000 + +bind9 (1:9.9.5.dfsg-7) unstable; urgency=medium + + * Fix CVE-2014-8500: limit recursion in order to avoid memory consuption + issues that can lead to denial-of-service (closes: #772610). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Dec 2014 05:05:48 +0000 + +bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium + + * Include dlz_dlopen.h in libbind-dev (closes: #769117). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000 + +bind9 (1:9.9.5.dfsg-6) unstable; urgency=medium + + * Include dlz_dlopen.h in libbind-dev (closes: #769117). + + -- Michael Gilbert <mgilbert@debian.org> Sun, 30 Nov 2014 22:53:50 +0000 + +bind9 (1:9.9.5.dfsg-5) unstable; urgency=medium + + * Avoid libnsl dependency on non-linux architectures. Closes: #766430 + * Install export libraries to /lib instead of /usr/lib. Closes: #766544 + * Add myself to the maintainer team with approval from LaMont and Bdale. + + -- Michael Gilbert <mgilbert@debian.org> Thu, 30 Oct 2014 02:42:17 +0000 + +bind9 (1:9.9.5.dfsg-4.3) unstable; urgency=medium + + * Non-maintainer upload. + * Mark critical section as not parallel in the makefile. Closes: #762766 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 13 Oct 2014 04:37:55 +0000 + +bind9 (1:9.9.5.dfsg-4.2) unstable; urgency=low + + * Non-maintainer upload. + * Fix intermittent parallel build failure. Closes: #762766 + * Set -fno-delete-null-pointer-checks. Closes: #750760 + * Use separate packages for the udebs. Closes: #762762 + * Don't install configuration files to /usr. Closes: #762948 + + -- Michael Gilbert <mgilbert@debian.org> Mon, 06 Oct 2014 01:23:57 +0000 + +bind9 (1:9.9.5.dfsg-4.1) unstable; urgency=low + + * Non-maintainer upload. + * Add support for hurd. Closes: #746540 + * Provide shared libraries for isc-dhcp. Closes: #656150 + + -- Michael Gilbert <mgilbert@debian.org> Sun, 14 Sep 2014 00:58:06 +0000 + +bind9 (1:9.9.5.dfsg-4) unstable; urgency=low + + [Julien Cristau] + + * FTBFS on kfreebsd. Closes: #741285 + + [LaMont Jones] + + * revert aclocal.m4 expansion from earlier merge + + -- LaMont Jones <lamont@debian.org> Tue, 29 Apr 2014 14:48:50 -0600 + +bind9 (1:9.9.5.dfsg-3) unstable; urgency=low + + * Re-enable rrl (now a configure option). Closes: #741059 LP: #1288823 + + -- LaMont Jones <lamont@debian.org> Mon, 24 Mar 2014 06:55:55 -0600 + +bind9 (1:9.9.5.dfsg-2) unstable; urgency=low + + * merge in ubuntu 1:9.9.3.dfsg.P2-4ubuntu3 + * move dnssec-coverage to bind9utils. Closes: #739994 + * dnssec-{checkds,verify} manpages in wrong package. Closes: #739995 + + -- LaMont Jones <lamont@debian.org> Wed, 26 Feb 2014 09:30:31 -0700 + +bind9 (1:9.9.5.dfsg-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream version: 9.9.5 Closes: #735190 + + [Martin Nagy] + + * dynamic loading of database backends. See: + http://pkgs.fedoraproject.org/cgit/bind.git/tree/bind-96-dyndb.patch. + Closes: #722669 + + [LaMont Jones] + + * fix sonames + * merge ubuntu changes + * Deliver dns/rrl.h. Closes: #724844 + * rules tweak to make backports to pre-dh-systemd releases easier + + -- LaMont Jones <lamont@debian.org> Tue, 11 Feb 2014 09:16:05 -0700 + +bind9 (1:9.9.4.dfsg-0.3) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * Upstream version 9.9.4 + + [LaMont Jones] + + * fix sonames + * merge ubuntu change + * Deliver dns/rrl.h. Closes: #724844 + + -- LaMont Jones <lamont@debian.org> Wed, 06 Nov 2013 13:27:37 -0700 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu3) trusty; urgency=low + + * SECURITY UPDATE: denial of service when processing NSEC3-signed zone + queries + - debian/patches/CVE-2014-0591.patch: don't call memcpy with + overlapping ranges in bin/named/query.c. + - patch backported from 9.9.4-P2. + - CVE-2014-0591 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 10 Jan 2014 09:36:55 -0500 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu2) trusty; urgency=medium + + * Use dh-autoreconf to update libtool and configure for new ports. + + -- Adam Conrad <adconrad@ubuntu.com> Wed, 18 Dec 2013 04:42:22 -0700 + +bind9 (1:9.9.3.dfsg.P2-4ubuntu1) saucy; urgency=low + + * Use dh_autotools-dev to update config.{sub,guess} for new ports. + + -- Adam Conrad <adconrad@ubuntu.com> Mon, 07 Oct 2013 23:09:45 -0600 + +bind9 (1:9.9.3.dfsg.P2-4) unstable; urgency=low + + [Peter Marschall] + + * If rndc.conf exists, skip creation of rndc.key. Closes: #620394 + + [Al Tarakanoff] + + * properly quote check of pid in bind9 init.d. LP: #1092243 + + [LaMont Jones] + + * include distro and package version in version string + * apparmor: allow GeoIP data file access. LP: #834901 + * enable filter-aaaa. Closes: #701704 LP: #1115168 + + -- LaMont Jones <lamont@debian.org> Thu, 29 Aug 2013 16:22:29 -0600 + +bind9 (1:9.9.3.dfsg.P2-3) unstable; urgency=low + + [Michael Stapelberg] + + * add systemd service file. Closes: #718212 + + [LaMont Jones] + + * deliver more dnssec-* tools in bind9utils. Closes: #713026 + * support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025 + * deliver rrl.h and stat.h Closes: #692483, #720813 + + -- LaMont Jones <lamont@debian.org> Tue, 27 Aug 2013 10:06:37 -0600 + +bind9 (1:9.9.3.dfsg.P2-2build1) saucy; urgency=low + + [Marc Deslauriers] + + * 9.9.2.dfsg.P1-2ubuntu1: fixed in 9.9.3b1 + * 9.9.2.dfsg.P1-2ubuntu3: fixed in 9.9.3-P2 + + [Robie Basak] + + * 9.9.2.dfsg.P1-2ubuntu2: fixed in 9.9.3b1 + + [LaMont Jones] + + * Merge ubuntu changes, except: autoconf files are generated as part + of the source packagee creation, not on the build host. NAK + * deliver more dnssec-* tools in bind9utils. Closes: #713026 + * support parallel=N DEB_BUILD_OPTIONS, fix -j build + + [Michael Stapelberg] + + * add systemd service file. Closes: #718212 + + -- LaMont Jones <lamont@debian.org> Thu, 22 Aug 2013 10:57:17 -0600 + +bind9 (1:9.9.3.dfsg.P2-2) unstable; urgency=low + + * ack NMUs of 9.8.4 + - upstream 9.9.3-P2 fixes: CVE-2013-4854, CVE-2012-5689, + CVE-2013-2266 + - deliver rrl.h + + [LaMont Jones] + + * Use ISC's bin/tests + * Diff cleanup and rationalization to 9.9.3 upstream + + -- LaMont Jones <lamont@debian.org> Sat, 17 Aug 2013 07:09:54 -0600 + +bind9 (1:9.9.3.dfsg.P2-1) unstable; urgency=low + + + [Internet Software Consortium, Inc] + + * 9.9.3-P2 + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + [LaMont Jones] + + * soname changes + + [Paul Vixie] + + * Reapply rpz/rrl patches from http://www.redbarn.org/dns/ratelimits + + -- LaMont Jones <lamont@debian.org> Wed, 14 Aug 2013 10:38:59 -0600 + +bind9 (1:9.9.2.dfsg.P1-3) experimental; urgency=low + + [LaMont Jones] + + * Merge 1:9.8.4.dfsg.P1-6 + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + -- LaMont Jones <lamont@debian.org> Mon, 04 Mar 2013 09:30:50 -0700 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu3) saucy; urgency=low + + * SECURITY UPDATE: denial of service via incorrect bounds checking on + private type 'keydata' + - lib/dns/rdata/generic/keydata_65533.c: check for correct length. + - Patch backported from 9.9.3-P2 + - CVE-2013-4854 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sun, 28 Jul 2013 10:13:06 -0400 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu2) raring; urgency=low + + * configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475). + * debian/control: add Build-Depends on dh-autoreconf. + * debian/rules: use dh_autoreconf and dh_autoreconf_clean. + + -- Robie Basak <robie.basak@canonical.com> Wed, 10 Apr 2013 16:50:28 +0000 + +bind9 (1:9.9.2.dfsg.P1-2ubuntu1) raring; urgency=low + + * SECURITY UPDATE: denial of service via regex syntax checking + - configure,configure.in,config.h.in: remove check for regex.h to + disable regex syntax checking. + - CVE-2013-2266 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 28 Mar 2013 15:04:57 -0400 + +bind9 (1:9.9.2.dfsg.P1-2) experimental; urgency=low + + [Michael Gilbert] + + * Use /var/lib/bind for state file. Closes: #689332 + + [LaMont Jones] + + * zone transfers now involve link(), update the apparmor profile + * Update db.root with new IP for D.root-servers.net. Closes: #697352 + * re-drop dlzexternal test + * Reduce log level for "sucessfully validated after lower casing" dnssec + based on mail from Mark Andrews. Closes: #697681 + * remove /var/lib/bind/bind9-default.md5sum in postrm + * remove /etc/bind/named.conf.options on purge. Closes: #668801 + + [Sebastian Wiesinger] + + * Build and deliver dnssec-checkds and dnssec-verify in bind9utils + + -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 10:09:40 -0700 + +bind9 (1:9.8.4.dfsg.P1-6+nmu3) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * CVE-2013-4854: A specially crafted query that includes malformed rdata can + cause named to terminate with an assertion failure while rejecting the + malformed query. (Closes: #717936). + + -- Salvatore Bonaccorso <carnil@debian.org> Sat, 27 Jul 2013 10:24:07 +0200 + +bind9 (1:9.8.4.dfsg.P1-6+nmu2) unstable; urgency=medium + + * Non-maintainer upload. + * Install /usr/include/dns/rrl.h (closes: #699834). + + -- Michael Gilbert <mgilbert@debian.org> Tue, 16 Apr 2013 01:59:05 +0000 + +bind9 (1:9.8.4.dfsg.P1-6+nmu1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix cve-2012-5689: issue in nameservers using DNS64 to perform a AAAA + lookup for a record with an A record overwrite rule in a Response Policy + Zone (closes: #699145). + * Fix cve-2013-2266: issues in regular expression handling (closes: #704174). + + -- Michael Gilbert <mgilbert@debian.org> Fri, 29 Mar 2013 00:47:25 +0000 + +bind9 (1:9.8.4.dfsg.P1-6) unstable; urgency=low + + [Ben Hutchings] + + * Initialise OpenSSL before calling chroot(). Closes: #696661 + + -- LaMont Jones <lamont@debian.org> Fri, 01 Mar 2013 08:23:27 -0700 + +bind9 (1:9.8.4.dfsg.P1-5) unstable; urgency=low + + [LaMont Jones] + + * Properly acknowledge 1:9.8.1.dfsg.P1-4.4: [Philipp Kern] + - Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing the patch. + + [Paul Vixie] + + * Include rpz/rrl patches from http://www.redbarn.org/dns/ratelimits. + Closes: #698641 + + -- LaMont Jones <lamont@debian.org> Wed, 30 Jan 2013 14:04:35 -0700 + +bind9 (1:9.8.4.dfsg.P1-4) unstable; urgency=high + + * The rest of the dnssec validation logspam removal. Closes: #697681 + + -- LaMont Jones <lamont@debian.org> Mon, 21 Jan 2013 13:18:53 -0700 + +bind9 (1:9.8.4.dfsg.P1-3) unstable; urgency=low + + [Marc Deslauriers] + + * debian/bind9.apport: Add AppArmor info and logs to apport hook. + + [LaMont Jones] + + * Reduce log level for "sucessfully validated after lower casing" dnssec + based on mail from Mark Andrews. Closes: #697681 + * remove /var/lib/bind/bind9-default.md5sum in postrm + * remove /etc/bind/named.conf.options on purge. Closes: #668801 + + -- LaMont Jones <lamont@debian.org> Wed, 09 Jan 2013 09:47:24 -0700 + +bind9 (1:9.9.2.dfsg.P1-1) experimental; urgency=low + + * Named could die on specific queries with dns64 enabled. + [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.] + CVE-2012-5688 Closes: #695192 + + -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:27:18 -0700 + +bind9 (1:9.8.4.dfsg.P1-2) unstable; urgency=low + + [Michael Gilbert] + + * Use /var/lib/bind for state file. Closes: #689332 + + [LaMont Jones] + + * Re-enable dlopen, do not build the test that fails. Closes: #692416 + * Update db.root with new IP for D.root-servers.net. Closes: #697352 + + -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2013 06:50:25 -0700 + +bind9 (1:9.8.4.dfsg.P1-1) unstable; urgency=low + + * Named could die on specific queries with dns64 enabled. + [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.] + CVE-2012-5688 Closes: #695192 + + -- LaMont Jones <lamont@debian.org> Wed, 05 Dec 2012 05:22:06 -0700 + +bind9 (1:9.9.2.dfsg-1) experimental; urgency=low + + [Matthew Grant] + + * Turn off dlopen as it was causing test compile failures. + * Add missing library .postrm files for debhelper + + [LaMont Jones] + + * New upstream version 9.9.2 + * soname fixes + + -- LaMont Jones <lamont@debian.org> Thu, 01 Nov 2012 08:59:57 -0600 + +bind9 (1:9.9.1.dfsg.P1-1) unstable; urgency=low + + [LaMont Jones] + + * New upstream 9.9.1-P1 + + -- LaMont Jones <lamont@debian.org> Wed, 13 Jun 2012 08:22:15 -0600 + +bind9 (1:9.9.0.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.9.0 release + + [Christoph Egger] + + * define _GNU_SOURCE on kfreebsd et al. Closes: #658201 + + [LaMont Jones] + + * chmod typo in postinst. LP: #980798 + * Correctly order debhelper bits in postrm. Closes: #661040 + + -- LaMont Jones <lamont@debian.org> Mon, 23 Apr 2012 09:52:51 -0600 + +bind9 (1:9.9.0.dfsg~rc4-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream release + + [LaMont Jones] + + * soname changes for new release + + -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 17:51:39 -0700 + +bind9 (1:9.8.4.dfsg-1ubuntu2) raring; urgency=low + + * SECURITY UPDATE: denial of service via DNS64 and crafted query + - bin/named/query.c: init rdataset before cleanup. + - Patch backported from 9.8.4-P1 + - CVE-2012-5688 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 05 Dec 2012 15:42:08 -0500 + +bind9 (1:9.8.4.dfsg-1ubuntu1) raring; urgency=low + + * Merge from Debian unstable. Remaining changes: + - debian/bind9.apport: Add AppArmor info and logs to apport hook. + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 23 Nov 2012 08:13:50 -0500 + +bind9 (1:9.8.4.dfsg-1) unstable; urgency=low + + [Matthew Grant] + + * Turn off dlopen as it was causing test compile failures. + * Add missing library .postrm files for debhelper + + [LaMont Jones] + + * New upstream version + * soname fixup + * Ack NMUs + + -- LaMont Jones <lamont@debian.org> Mon, 29 Oct 2012 08:37:49 -0600 + +bind9 (1:9.8.1.dfsg.P1-4.4) testing-proposed-updates; urgency=low + + * Non-maintainer upload. + * Fix CVE-2012-4244. Thanks to Moritz Mühlenhoff for providing + the patch. + + -- Philipp Kern <pkern@debian.org> Sat, 03 Nov 2012 20:43:43 +0100 + +bind9 (1:9.8.1.dfsg.P1-4.3) unstable; urgency=medium + + [ Philipp Kern ] + * Non-maintainer upload. + + [ Marc Deslauriers ] + * SECURITY UPDATE: denial of service via specific combinations of RDATA + - bin/named/query.c: fix logic + - Patch backported from 9.8.3-P4 + - CVE-2012-5166 + + -- Philipp Kern <pkern@debian.org> Sun, 28 Oct 2012 20:28:11 +0100 + +bind9 (1:9.8.1.dfsg.P1-4.2) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * Fix denial of service vulnerability triggered + through an assert because of using bad cache + (CVE-2012-3817; Closes: #683259). + + -- Nico Golde <nion@debian.org> Mon, 30 Jul 2012 20:56:10 +0200 + +bind9 (1:9.8.1.dfsg.P1-4.1) unstable; urgency=high + + * Non-maintainer upload by the Security Team. + * SECURITY UPDATE: ghost domain names attack + - lib/dns/rbtdb.c: Restrict the TTL of NS RRset to no more than that + of the old NS RRset when replacing it. + - Patch backported from 9.8.2. + - CVE-2012-1033 + * SECURITY UPDATE: denial of service via zero length rdata handling + - lib/dns/rdata.c,lib/dns/rdataslab.c: use sentinel pointer for + duplicate rdata. + - Patch backported from 9.8.3-P1. + - CVE-2012-1667 + + -- Luk Claes <luk@debian.org> Wed, 20 Jun 2012 15:26:09 -0400 + +bind9 (1:9.8.1.dfsg.P1-4) unstable; urgency=low + + [Christoph Egger] + + * define _GNU_SOURCE on kfreebsd et al. Closes: #658201 + + [LaMont Jones] + + * chmod typo in postinst. LP: #980798 + * Correctly order debhelper bits in postrm. Closes: #661040 + + -- LaMont Jones <lamont@debian.org> Fri, 13 Apr 2012 12:09:24 -0600 + +bind9 (1:9.8.1.dfsg.P1-3) unstable; urgency=low + + [Zlatan Todoric] + + * fixed Serbian latin translation of debconf template. Closes: #634951 + + [Peter Eisentraut] + + * Add support for "status" action to lwresd init script. Closes: #651540 + + [Bjørn Steensrud] + + * NB Translations. Closes: #654454 + + [LaMont Jones] + + * Default to run_resolvconf=false. LP: #933723 + * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202 + * Do not deliver /usr/share/bind9/bind9-default.md5sum in the bind9 deb. + Closes: #620007 LP: #681536 + * Deliver and use /etc/apparmor.d/local/usr.sbin.named for local overrides. + LP: #929563 + + -- LaMont Jones <lamont@debian.org> Fri, 17 Feb 2012 14:40:29 -0800 + +bind9 (1:9.8.1.dfsg.P1-2) unstable; urgency=low + + * Deliver named.conf.options on fresh install. Closes: #657042 LP: #920202 + + -- LaMont Jones <lamont@debian.org> Wed, 25 Jan 2012 03:55:21 -0700 + +bind9 (1:9.8.1.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.8.1-P1 + - Cache lookup could return RRSIG data associated with nonexistent + records, leading to an assertion failure. + + [LaMont Jones] + + * add a readme entry for DNSSEC-by-default + * Failed to install due to chgrp on non-existant directory. Closes: #647598 + * ack NMU: l10n issues + + -- LaMont Jones <lamont@debian.org> Wed, 18 Jan 2012 10:44:14 -0700 + +bind9 (1:9.8.1.dfsg-1.1) unstable; urgency=low + + * Non-maintainer upload. + * Fix pending l10n issues. Debconf translations: + - Danish (Joe Hansen). Closes: #619302 + - Korean (강민지). Closes: #632006, #632016 + - Serbian (FULL NAME). Closes: #634886 + + -- Christian Perrier <bubulle@debian.org> Sat, 03 Dec 2011 17:22:12 +0100 + +bind9 (1:9.8.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream release + + [LaMont Jones] + + * cleanup the messages around killing named + * enable dnssec validation: deliver named.conf.options outside of + conffiledom, and update if able, complain and do not update if not + Closes: #516979 + * typo in min-ncache-ttl processing + * disable dlz until we get a patch to make it build again + + [Jay Ford] + + * Fix "waiting for pid $pid to die" loop to not be infinite. Closes: #570852 + + -- LaMont Jones <lamont@debian.org> Tue, 01 Nov 2011 16:39:19 -0600 + +bind9 (1:9.8.0.dfsg.P1-0) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.8.0-P1 + + [LaMont Jones] + + * soname changes + + -- LaMont Jones <lamont@debian.org> Fri, 13 May 2011 03:46:22 -0600 + +bind9 (1:9.7.4.dfsg-0) unstable; urgency=low + + * New upstream + + -- LaMont Jones <lamont@debian.org> Sun, 21 Aug 2011 04:43:16 -0600 + +bind9 (1:9.7.3.dfsg-1ubuntu4) oneiric; urgency=low + + * debian/apparmor-profile: Allow /var/run and /run. (LP: #810270) + + -- Martin Pitt <martin.pitt@ubuntu.com> Thu, 14 Jul 2011 15:15:45 +0200 + +bind9 (1:9.7.3.dfsg-1ubuntu3) oneiric; urgency=low + + * SECURITY UPDATE: denial of service via specially crafted packet + - lib/dns/include/dns/rdataset.h, lib/dns/{masterdump,message,ncache, + nsec3,rbtdb,rdataset,resolver,validator}.c: Use an rdataset attribute + flag to indicate negative-cache records rather than using rrtype 0. + - Patch backported from 9.7.3-P3. + - CVE-2011-2464 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 05 Jul 2011 08:33:30 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu2.1) natty-security; urgency=low + + * SECURITY UPDATE: denial of service via off-by-one + - lib/dns/ncache.c: correctly validate length. + - Patch backported from 9.7.3-P1. + - CVE-2011-1910 + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 27 May 2011 12:50:40 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu2) natty; urgency=low + + * debian/rules, configure, contrib/dlz/config.dlz.in: use + DEB_HOST_MULTIARCH so we can find multiarch libraries and fix FTBFS. + (LP: #745642) + + -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 30 Mar 2011 10:19:37 -0400 + +bind9 (1:9.7.3.dfsg-1ubuntu1) natty; urgency=low + + * debian/bind9-default.md5sum: + - updated to reflect the default md5sum in maverick and natty, this + avoids a bogus /etc/default/bind9.dpkg-dist file + (LP: #556332) + + -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 29 Mar 2011 10:13:11 +0200 + +bind9 (1:9.7.3.dfsg-1) unstable; urgency=low + + [Peter Palfrader] + + * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right + db. + + [Internet Systems Consortium, Inc] + + * 9.7.3 - Closes: #612287 + + [Mahyuddin Susanto] + + * Updated Indonesian debconf templates. Closes: #608559 + + [LaMont Jones] + + * soname changes + + -- LaMont Jones <lamont@debian.org> Wed, 23 Feb 2011 09:14:36 -0700 + +bind9 (1:9.7.3.dfsg~rc1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * New upstream + + [Peter Palfrader] + + * Add db-4.6 to bdb_libnames in dlz/config.dlz.in so that it finds the right + db. + + [Mahyuddin Susanto] + + * Updated Indonesian debconf templates. Closes: #608559 + + [LaMont Jones] + + * soname changes for new upstream + + -- LaMont Jones <lamont@debian.org> Fri, 04 Feb 2011 21:20:05 -0700 + +bind9 (1:9.7.2.dfsg.P3-1) unstable; urgency=high + + [ISC] + * Fix denial of service via ncache entry and a rrsig for the + same type (CVE-2010-3613) + * answers were incorrectly marked as insecure during key algorithm + rollover (CVE-2010-3614) + * Using "allow-query" in the "options" or "view" statements to + restrict access to authoritative zones had no effect. + (CVE-2010-3615) + + [LaMont Jones] + + * Adjust indentation for dpkg change. Closes: #597171 + + -- LaMont Jones <lamont@debian.org> Wed, 01 Dec 2010 16:32:48 -0700 + +bind9 (1:9.7.2.dfsg.P2-3) unstable; urgency=low + + [LaMont Jones] + + * Adjust indentation for dpkg change. Closes: #597171 + * acknowledge and incorporate ubuntu change. + + -- LaMont Jones <lamont@debian.org> Fri, 26 Nov 2010 05:18:43 -0700 + +bind9 (1:9.7.2.dfsg.P2-2ubuntu1) natty; urgency=low + + [ Andres Rodriguez ] + * Add apport hook (LP: #533601): + - debian/bind9.apport: Added. + + [ Martin Pitt ] + * debian/rules: Install Apport hook when building on Ubuntu. + + -- Martin Pitt <martin.pitt@ubuntu.com> Fri, 26 Nov 2010 10:50:17 +0100 + +bind9 (1:9.7.2.dfsg.P2-2) unstable; urgency=low + + [Roy Jamison] + + * lib/isc/unix/resource.c was missing inttypes.h include. LP: #674199 + + -- LaMont Jones <lamont@debian.org> Fri, 12 Nov 2010 10:52:32 -0700 + +bind9 (1:9.7.2.dfsg.P2-1) unstable; urgency=low + + [Joe Dalton] + + * Add Danish translation of debconf templates. Closes: #599431 + + [Internet Software Consortium, Inc] + + * v9.7.2-P2 + + [José Figueiredo] + + * Add Brazilian Portuguese debconf templates translation. Closes: #597616 + + [LaMont Jones] + + * drop this v3 (quilt) source format idea. Closes: #589916 + + -- LaMont Jones <lamont@debian.org> Sun, 10 Oct 2010 19:01:57 -0600 + +bind9 (1:9.7.1.dfsg.P2-2) unstable; urgency=low + + * Correct conflicts for bind9-host + + -- LaMont Jones <lamont@debian.org> Fri, 16 Jul 2010 05:24:38 -0600 + +bind9 (1:9.7.1.dfsg.P2-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * Temporarily and partially disable change 2864 because it would cause + inifinite attempts of RRSIG queries. This is an urgent care fix; we'll + revisit the issue and complete the fix later. [RT #21710] + * Temporarially rollback change 2748. [RT #21594] + * Named failed to accept uncachable negative responses from insecure zones. + [RT# 21555] + + [LaMont Jones] + + * freshen copyright file + + -- LaMont Jones <lamont@debian.org> Thu, 15 Jul 2010 15:07:54 -0600 + +bind9 (1:9.7.1.dfsg.0-1) unstable; urgency=low + + * Repack to drop zkt/doc/{draft,rfc}* Closes: #588055 + + -- LaMont Jones <lamont@debian.org> Mon, 05 Jul 2010 07:21:34 -0600 + +bind9 (1:9.7.1.dfsg-2) unstable; urgency=low + + [Regid Ichira] + + * explicitly add nsupdate to dynamic updates in README.Debian. + Closes: #577398 + + [LaMont Jones] + + * Cleanup bind9-host description. Closes: #579421 + * switch to 3.0 (quilt) source format, but not to quilt. Closes: #578210 + + [Stephen Gran] + + * updated geoip patch for ipv6, based on work by John 'Warthog9' Hawley + <warthog9@eaglescrag.net>. Closes: #584603 + + -- LaMont Jones <lamont@debian.org> Fri, 02 Jul 2010 08:19:29 -0600 + +bind9 (1:9.7.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.1 + + [LaMont Jones] + + * Add freebsd support. Closes: #578447 + * soname changes + * freshen root cache. LP: #596363 + + -- LaMont Jones <lamont@debian.org> Mon, 21 Jun 2010 09:53:30 -0600 + +bind9 (1:9.7.0.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0-P1 + - 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] + + -- LaMont Jones <lamont@debian.org> Wed, 17 Mar 2010 08:06:42 -0600 + +bind9 (1:9.7.0.dfsg.1-1) unstable; urgency=low + + [Niko Tyni] + + * fix mips/mipsel startup. Closes: #516616 + + [LaMont Jones] + + * ignore failures due to a lack of /etc/bind/named.conf*. LP: #422968 + * ldap API changed regarding % sign. LP: #227344 + * Drop more rfc and draft files. Closes: #572606 + * update config.guess, config.sub. Closes: #572528 + + -- LaMont Jones <lamont@debian.org> Fri, 12 Mar 2010 14:56:08 -0700 + +bind9 (1:9.7.0.dfsg-2) unstable; urgency=low + + [Aurelien Jarno] + + * kfreebsd has linux threads. Closes: #470500 + + [LaMont Jones] + + * do not error out on initial install. Closes: #572443 + + -- LaMont Jones <lamont@debian.org> Thu, 04 Mar 2010 09:32:13 -0700 + +bind9 (1:9.7.0.dfsg-1) unstable; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Wed, 17 Feb 2010 14:53:36 -0700 + +bind9 (1:9.7.0.dfsg~rc2-1) experimental; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Thu, 28 Jan 2010 05:46:50 -0700 + +bind9 (1:9.7.0.dfsg~b3-2) experimental; urgency=low + + * merge changes from 9.6.1.dfsg.P2-1 + * meta: drop verisoned depends from library packages, for less upgrade pain + * apparmor: allow named to create /var/run/named/session.key + + -- LaMont Jones <lamont@debian.org> Sun, 06 Dec 2009 11:46:17 -0700 + +bind9 (1:9.7.0.dfsg~b3-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0b3 + + [LaMont Jones] + + * Merge remote branch 'origin/master' + * soname changes + + -- LaMont Jones <lamont@debian.org> Mon, 30 Nov 2009 21:07:58 -0700 + +bind9 (1:9.6.1.dfsg.P2-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.1-P2 + - When validating, track whether pending data was from the + additional section or not and only return it if validates + as secure. [RT #20438] CVE-2009-4022 + + [LaMont Jones] + + * prerm: do not stop named on upgrade. Closes: #542888 + * Drop some RFCs that crept into the diff. + * meta: add ${misc:Depends} + * lintian: update config.guess, config.sub in idnkit-1.0 tree + * dnsutils: remove pre-sarge dpkg-divert calls in postinst + * meta: soname changes + * l10n: missing newline in pofile. + + -- LaMont Jones <lamont@debian.org> Fri, 27 Nov 2009 10:07:10 -0700 + +bind9 (1:9.7.0.dfsg~b2-2) experimental; urgency=low + + * dnsutils: remove pre-sarge dpkg-divert calls in postinst + + -- LaMont Jones <lamont@debian.org> Tue, 17 Nov 2009 22:42:40 -0600 + +bind9 (1:9.7.0.dfsg~b2-1) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0b2 + + [LaMont Jones] + + * /etc/bind/bind.keys need not be executable. + * bind9: drop old stale code from postinst + * prerm: do not stop named on upgrade. Closes: #542888 + * Drop some RFCs that crept into the diff. + * meta: add ${misc:Depends} + * lintian: update config.guess, config.sub in idnkit-1.0 tree + * l10n: missing newline in pofile. + + -- LaMont Jones <lamont@debian.org> Mon, 16 Nov 2009 18:53:24 -0700 + +bind9 (1:9.7.0~a1.dfsg-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.7.0a1 + + -- LaMont Jones <lamont@debian.org> Wed, 24 Jun 2009 15:10:08 -0600 + +bind9 (1:9.6.1.dfsg.P1-3) unstable; urgency=low + + * Build-Depend on the fixed libgeoip-dev. Closes: #540973 + + -- LaMont Jones <lamont@debian.org> Mon, 17 Aug 2009 06:53:11 -0600 + +bind9 (1:9.6.1.dfsg.P1-2) unstable; urgency=low + + [Jamie Strandboge] + + * reload individual named profile, not all of apparmor. LP: #412751 + + [Guillaume Delacour] + + * bind9 did not purge cleanly. Closes: #497959 + + [LaMont Jones] + + * postinst: do not append a blank line to /etc/default/bind9. + Closes: #541469 + * init.d stop needs to not error out. LP: #398033 + * meta: fix build-depends. Closes: #539230 + + -- LaMont Jones <lamont@debian.org> Fri, 14 Aug 2009 17:03:31 -0600 + +bind9 (1:9.6.1.dfsg.P1-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * A specially crafted update packet will cause named to exit. + CVE-2009-0696, CERT VU#725188. Closes: #538975 + + [InterNIC] + + * Update db.root hints file. + + [LaMont Jones] + + * Move default zone definitions from named.conf to named.conf.default-zones. + Closes: #492308 + * use start-stop-daemon if rndc stop fails. Closes: #536487 + * lwresd: pidfile name was wrong in init script. Closes: #527137 + + -- LaMont Jones <lamont@debian.org> Tue, 28 Jul 2009 22:03:14 -0600 + +bind9 (1:9.6.1.dfsg-2) unstable; urgency=low + + * ia64: fix atomic.h + + -- LaMont Jones <lamont@debian.org> Tue, 23 Jun 2009 01:56:35 -0600 + +bind9 (1:9.6.1.dfsg-1) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.1 + + -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 14:33:20 -0600 + +bind9 (1:9.6.0.dfsg.P1-3) unstable; urgency=low + + [Martin Zobel-Helas] + + * GEO-IP Patch from + git://git.kernel.org/pub/scm/network/bind/bind-geodns.git. Closes: #395191 + + [LaMont Jones] + + * Remove /var/lib/bind on purge. Closes: #527613 + * Build-Depend: libdb-dev (>4.6). Closes: #527877, #528772 + * init.d: detect rndc errors better. LP: #380962 + * init.d: clean up exit status. Closes: #523454 + * Enable pkcs11 support, and then Revert - causes assertion failures + c.f.: #516552 + + -- LaMont Jones <lamont@debian.org> Mon, 22 Jun 2009 13:58:32 -0600 + +bind9 (1:9.6.0.dfsg.P1-2) unstable; urgency=low + + * random_1 broke memory usage assertions. + + -- LaMont Jones <lamont@debian.org> Thu, 23 Apr 2009 05:15:45 -0600 + +bind9 (1:9.6.0.dfsg.P1-1) experimental; urgency=low + + [Michael Milligan] + + * Add min-cache-ttl and min-ncache-ttl keywords + + [LaMont Jones] + + * Fix merge errors from 9.6.0.dfsg.P1-0 + + -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 15:50:50 -0600 + +bind9 (1:9.6.0.dfsg.P1-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.6.0-P1 + + [LaMont Jones] + + * meta: fix override disparity + * meta: soname package fixups for 9.6.0 + * meta: update Standards-Version: 3.7.3.0 + * upstream now uses a bind subdir. Closes: #212659 + + [Sven Joachim] + + * meta: pass host and build into configure for hybrid build machines. + Closes: #515110 + + -- LaMont Jones <lamont@debian.org> Fri, 20 Mar 2009 11:54:55 -0600 + +bind9 (1:9.5.1.dfsg.P1-3) unstable; urgency=low + + * package -2 for unstable + + -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 09:40:18 -0600 + +bind9 (1:9.5.1.dfsg.P1-2) stable; urgency=low + + [Juhana Helovuo] + + * fix atomic operations on alpha. Closes: #512285 + + [Dann Frazier] + + * fix atomic operations on ia64. Closes: #520179 + + [LaMont Jones] + + * build-conflict: libdb4.2-dev. Closes: #515074, #507013 + + [localization folks] + + * l10n: Basque debconf template. Closes: #516549 (Piarres Beobide) + + -- LaMont Jones <lamont@debian.org> Wed, 18 Mar 2009 05:30:22 -0600 + +bind9 (1:9.5.1.dfsg.P1-1) unstable; urgency=low + + * New upstream patch release + - supportable version of fix from 9.5.0.dfsg.P2-5.1 + - CVE-2009-0025: Closes: #511936 + - 2475: Overly agressive cache entry removal. Closes: #511768 + - other bug fixes worthy of patch-release inclusion + + -- LaMont Jones <lamont@debian.org> Mon, 26 Jan 2009 10:33:42 -0700 + +bind9 (1:9.5.0.dfsg.P2-5.1) unstable; urgency=low + + * Non-maintainer upload. + * Apply upstream ACL fixes from 9.5.1 to fix RC bug. Patch was provided + by Evan Hunt (upstream bind9 developer) after Emmanuel Bouthenot + contacted him. Closes: #496954, #501800. + * Remove obsolete dh_installmanpages invocation which was adding + unwanted manual pages to bind9. Closes: #486196. + + -- Ben Hutchings <ben@decadent.org.uk> Fri, 02 Jan 2009 16:51:42 +0000 + +bind9 (1:9.5.0.dfsg.P2-5) unstable; urgency=low + + [ISC] + + * 2463: IPv6 Advanced Socket API broken on linux. LP: #249824 + + [Jamie Strandboge] + + * apparmor: add capability sys_resource + * apparmor: add krb keytab access. LP: #277370 + + [LaMont Jones] + + * apparmor: allow proc/*/net/if_inet6 read access too. LP: #289060 + * apparmor: add /var/log/named/* entries. LP: #294935 + + [Ben Hutchings] + + * meta: Add dependency of bind9 on net-tools (ifconfig used in init script) + * meta: Fix bind9utils Depends. + * meta: fix typo in package description + + [localization folks] + + * l10n: add polish debconf translations. Closes: #506856 (L) + + -- LaMont Jones <lamont@debian.org> Sun, 07 Dec 2008 21:03:29 -0700 + +bind9 (1:9.5.0.dfsg.P2-4) unstable; urgency=low + + * meta: fix typo in Depends: lsb-base. Closes: #501365 + + -- LaMont Jones <lamont@debian.org> Tue, 07 Oct 2008 17:20:11 -0600 + +bind9 (1:9.5.0.dfsg.P2-3) unstable; urgency=low + + [LaMont Jones] + + * enable largefile support. Closes: #497040 + + [localization folks] + + * l10n: Dutch translation. Closes: #499977 (Paul Gevers) + * l10n: simplified chinese debconf template. Closes: #501103 (LI Daobing) + * l10n: Update spanish template. Closes: #493775 (Ignacio Mondino) + + -- LaMont Jones <lamont@debian.org> Sun, 05 Oct 2008 20:20:00 -0600 + +bind9 (1:9.5.0.dfsg.P2-2) unstable; urgency=low + + [Kees Cook] + + * debian/{control,rules}: enable PIE hardening (from -1ubuntu1) + + [Nicolas Valcárcel] + + * Add ufw integration (from -1ubuntu2) + + [Dustin Kirkland] + + * use pid file in init.d/bind9 status. LP: #247084 + + [LaMont Jones] + + * dig: add -DDIG_SIGCHASE to compile options. LP: #257682 + * apparmor profile: add /var/log/named + + [Nikita Ofitserov] + + * ipv6 support requires _GNU_SOURCE definition. LP: #249824 + + -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2008 23:08:36 -0600 + +bind9 (1:9.5.0.dfsg.P2-1) unstable; urgency=low + + [LaMont Jones] + + * default to using resolvconf if it is installed + * fix sonames and dependencies. Closes: #149259, #492418 + * Do not build-depend libcap2-dev on non-linux. Closes: #493392 + * drop unused query-loc manpage. Closes: #492564 + * lwresd: Deliver /etc/bind directory. Closes: #490027 + * fix query-source comment in default install + + [Internet Software Consortium, Inc] + + * 9.5.0-P2. Closes: #492949 + + [localization folks] + + * l10n: Spanish debconf translation. Closes: #492425 (Ignacio Mondino) + * l10n: Swedish debconf templates. Closes: #491369 (Martin Ågren) + * l10n: Japanese debconf translations. Closes: #492048 (Hideki Yamane + (Debian-JP)) + * l10n: Finnish translation. Closes: #490630 (Esko Arajärvi) + * l10n: Italian debconf translations. Closes: #492587 (Alessandro Vietta) + + -- LaMont Jones <lamont@debian.org> Sat, 02 Aug 2008 14:20:20 -0600 + +bind9 (1:9.5.0.dfsg.P1-2) unstable; urgency=low + + * Revert "meta: merge the mess of single-lib packages back into one large + one." - That way lies madness and pain. + * init.d/bind9: implement status function. LP: #203169 + + -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 21:56:58 -0600 + +bind9 (1:9.5.0.dfsg.P1-1) unstable; urgency=low + + * Repackage 9.5.0.dfsg-5 with the -P1 tarball. + + -- LaMont Jones <lamont@debian.org> Tue, 08 Jul 2008 15:06:07 -0600 + +bind9 (1:9.5.0.dfsg-5) unstable; urgency=low + + [Internet Software Consortium, Inc] + + * Randomize UDP query source ports to improve forgery resilience. + (CVE-2008-1447) + + [LaMont Jones] + + * add build-depends: texlive-latex-base, xsltproc, remove Bv9ARM.pdf in clean + * fix sonames + * drop unneeded build-deps, since we do not actually deliver B9vARM.pdf + * meta: cleanup libbind9-41 Provides/Conflicts + * build: fix sonames for new libraries + * postinst: really restart bind/lwresd in postinst + + -- LaMont Jones <lamont@debian.org> Sun, 06 Jul 2008 21:34:18 -0600 + +bind9 (1:9.5.0.dfsg-4) unstable; urgency=low + + [LaMont Jones] + + * control: fix dnsutils description to avoid list reformatting. + Closes: #480317 + * lwresd: restart in postinst. Closes: #486481 + * meta: merge the mess of single-lib packages back into one large one. + * apparmor: allow bind to create files in /var/{lib,cache}/bind + * build: drop .la files. Closes: #486969 + * build: drop the extra lib path from the library-package merge + * meta: liblwres40 does not conflict with the libbind9-40-provided libbind0 + + [localization folks] + + * l10n: German debconf translation. Closes: #486547 (Helge Kreutzmann) + * l10n: Indonesian debconf translations. Closes: #486503 (Arief S Fitrianto) + * l10n: Slovak po-debconf translation Closes: #488905 (helix84) + * l10n: Turkish debconf template. Closes: #486479 (Mert Dirik) + + -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:22:05 -0600 + +bind9 (1:9.4.2-12) unstable; urgency=low + + * apparmor: allow bind to create files in /var/{lib,cache}/bind + + -- LaMont Jones <lamont@debian.org> Mon, 30 Jun 2008 11:17:53 -0600 + +bind9 (1:9.4.2-11) unstable; urgency=low + + * apparmor: add dnscvsutil package files + * lwresd Depends: adduser + * control: fix dnsutils description to avoid list reformatting. + Closes: #480317 + + -- LaMont Jones <lamont@debian.org> Tue, 17 Jun 2008 21:30:12 -0600 + +bind9 (1:9.5.0.dfsg-3) unstable; urgency=low + + [LaMont Jones] + + * bind9utils Depends: libbind9-40. Closes: #486194 + * bind9 should not deliver manpages for nonexistant binaries. + Closes: #486196 + + [localization folks] + + * l10n: Vietnamese debconf templates translation update. Closes: #486185 + (Clytie Siddall) + * l10n: Russian debconf templates translation. Closes: #486191 (Yuri Kozlov) + * l10n: Galician debconf template. Closes: #486215 (Jacobo Tarrio) + * l10n: French debconf templates. Closes: #486325 (CALARESU Luc) + * l10n: Czech debconf translation. Closes: #486337 (Miroslav Kure) + * l10n: Updated Portuguese translation. Closes: #486267 (Traduz - + Portuguese Translation Team) + + -- LaMont Jones <lamont@debian.org> Sun, 15 Jun 2008 18:25:02 -0600 + +bind9 (1:9.5.0.dfsg-2) unstable; urgency=low + + [Tim Spriggs] + + * init.d: Nexenta has different ifconfig arguments + + [LaMont Jones] + + * templates rework from debian-l10n-english + * reload named when an interface goes up or down. LP: #226495 + * build: need to create the directories for interface restart triggering + * Build-Depends: libcap2-dev. Closes: #485747 + * Leave named running during update. Closes: #453765 + * Fix path to uname, cleaning up the nexenta checks. + * l10n: avoid double-question in templates. + + [localization folks] + + * l10n: Vietnamese debconf translations. Closes: #483911 (Clytie Siddall) + * l10n: Portuguese debconf translations. Closes: #483872 (Traduz - + Portuguese Translation Team) + + -- LaMont Jones <lamont@debian.org> Fri, 13 Jun 2008 16:54:42 -0600 + +bind9 (1:9.5.0.dfsg-1) unstable; urgency=low + + [LaMont Jones] + + * manpages: fix references that should say /etc/bind + * meta: build-depend libxml2-dev for statistics support + + -- LaMont Jones <lamont@debian.org> Sat, 31 May 2008 12:17:21 -0600 + +bind9 (1:9.5.0.dfsg-0) experimental; urgency=low + + [Internet Software Consortium, Inc] + + * 9.5.0 release + + [LaMont Jones] + + * Only use capabilities if they are present: reprise. Closes: #360339, #212226 + * control: fix dnsutils description to avoid list reformatting. Closes: #480317 + * build: use the correct directories in dh_shlibdeps invocation + * build: turn on dlz. No pgsql or mysql support yet. LP: #227344 + + -- LaMont Jones <lamont@debian.org> Thu, 29 May 2008 22:05:19 -0600 + +bind9 (1:9.5.0~rc1-2~0ubuntu2) intrepid; urgency=low + + * build: use the correct directories in dh_shlibdeps invocation + * build: turn on dlz. LP: #227344 + + -- LaMont Jones <lamont@ubuntu.com> Tue, 27 May 2008 21:43:06 -0600 + +bind9 (1:9.5.0~rc1-2~0ubuntu1) intrepid; urgency=low + + * Upload what will become (maybe an ancestor of) -2 to intrepid. + - Only use capabilities if they are present: reprise. Closes: #360339, #212226 + - control: fix dnsutils description to avoid list reformatting. Closes: #480317 + + -- LaMont Jones <lamont@ubuntu.com> Mon, 26 May 2008 11:46:27 -0600 + +bind9 (1:9.5.0~rc1-1) experimental; urgency=low + + [Patrick Winnertz] + + * postinst: make add debconf support. Closes: #473460 + + [Jamie Strandboge] + + * debian/bind9.preinst: Apparmor force-complain on upgrade without + existing profile. LP: #204658 + + [LaMont Jones] + + * bind9utils: fix typos in .install + * host: manpage inaccurately describes default query. LP: #203087 + * apparmor: add dnscvsutil package files + * Revert "Only use capabilities if they are present." for merge of 9.5.0rc1. + * soname: libdns41 -> 42 + * fix typos in debconf patch, #473460 + * cleanup more files in clean target + * lwresd Depends: adduser + + -- LaMont Jones <lamont@debian.org> Thu, 15 May 2008 17:59:54 -0600 + +bind9 (1:9.5.0~b2-2) experimental; urgency=low + + * meta: add bind9utils binary package, with various useful utilities. Closes: #151957, #130445, #160483 + + -- LaMont Jones <lamont@debian.org> Thu, 03 Apr 2008 07:01:42 -0600 + +bind9 (1:9.4.2-10) unstable; urgency=low + + [Jamie Strandboge] + + * debian/bind9.preinst: AA force-complain on upgrade without existing + profile. LP: #204658 + + [LaMont Jones] + + * host: manpage inaccurately describes default query. LP: #203087 + + -- LaMont Jones <lamont@debian.org> Tue, 08 Apr 2008 22:45:57 -0600 + +bind9 (1:9.4.2-9) unstable; urgency=low + + * apparmor: allow subdirs in {/etc,/var/cache,/var/lib}/bind + * apparmor: make profile match README.Debian + + -- LaMont Jones <lamont@debian.org> Tue, 01 Apr 2008 21:13:05 -0600 + +bind9 (1:9.4.2-8) unstable; urgency=low + + [ISC] + + * CVE-2008-0122: off by one error in (unused) inet_network function. + Closes: #462783 LP: #203476 + + [Michael Milligan] + + * Fix min-cache-ttl and min-ncache-ttl keywords + + [Jamie Strandboge] + + * apparmor: force complain-mode for apparmor on certain upgrades. LP: #203528 + * debian/bind9.postrm: purge /etc/apparmor.d/force-complain/usr.sbin.named + + -- LaMont Jones <lamont@debian.org> Tue, 18 Mar 2008 18:35:15 -0600 + +bind9 (1:9.4.2-7) unstable; urgency=low + + [Jamie Strandboge] + + * Allow rw access to /var/lib/bind/* in apparmor-profile. LP: #201954 + + [LaMont Jones] + + * Drop root-delegation comments from named.conf. Closes: #217829, #297219 + + -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2008 09:48:10 -0600 + +bind9 (1:9.4.2-6) unstable; urgency=low + + * Correct apparmor profile filename. LP: #200739 + + -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 14:28:01 -0600 + +bind9 (1:9.4.2-5) unstable; urgency=low + + * add "order random_1" support (return one random RR) + * Fix doc pathnames in README.Debian. Closes: #266891 + * Add AAAA ::1 entry to db.local. Closes: #230088 + + -- LaMont Jones <lamont@debian.org> Mon, 10 Mar 2008 13:51:28 -0600 + +bind9 (1:9.5.0~b2-1) experimental; urgency=low + + [Thiemo Seufer] + + * mips:atomic.h: improve implementation of atomic ops, fix mips{el,64} + + [LaMont Jones] + + * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750 + * named.conf.5: correct filename. Closes: #428015 + * manpages: fix typo errors. Closes: #395834 + * Makefile.in: be explicit about library paths + * build: Turn on GSS-TSIG support. LP: #158197 + * build: soname changes + * db.root: include AAAA RRs. Closes: #464111 + * soname: lib{dns,isc}40 -> 41 + * meta: use binary:Version instead of Source-Version + + [Andreas John] + + * Only use capabilities if they are present. Closes: #360339, #212226 + + -- LaMont Jones <lamont@debian.org> Sat, 23 Feb 2008 08:06:17 -0700 + +bind9 (1:9.4.2-4) unstable; urgency=low + + * incorporate ubuntu apparmor change from Jamie Strandboge, + with changes: + - Add apparmor profile, reload apparmor profile on config + - Add a note about apparmor to README.Debian + - conflicts/replaces old apparmor versions + * db.root: include AAAA RRs. Closes: #464111 + * Don't die when /var/lib/bind already exists. LP: #191685 + * build: turn on optimization. Closes: #435194 + + -- LaMont Jones <lamont@debian.org> Fri, 22 Feb 2008 22:05:25 -0700 + +bind9 (1:9.4.2-3ubuntu1) hardy; urgency=low + + * add AppArmor profile + + debian/apparmor-profile + + debian/bind9.postinst: Reload AA profile on configuration + * updated debian/README.Debian for note on AppArmor + * debian/control: Replaces apparmor-profiles << 2.1+1075-0ubuntu4 as we + should now take control + * debian/control: Conflicts with apparmor-profiles << 2.1+1075-0ubuntu4 + to make sure that if earlier version of apparmor-profiles gets installed + it won't overwrite our profile + * Modify Maintainer value to match the DebianMaintainerField + specification. + + -- Jamie Strandboge <jamie@ubuntu.com> Wed, 13 Feb 2008 17:30:45 +0000 + +bind9 (1:9.4.2-3) unstable; urgency=low + + * don't run rndc-confgen when it's not there. Closes: #459551 + * control: drop use of ${Source-Version} + + -- LaMont Jones <lamont@debian.org> Mon, 07 Jan 2008 10:16:06 -0700 + +bind9 (1:9.4.2-2) unstable; urgency=low + + * init.d: add --oknodo to start-stop-daemon. Closes: #411881 + * init: LSB dependency info. Closes: #459421, #448006 + * meta: bind9 Suggests: resolvconf. Closes: #252285 + * bind9: deliver /var/lib/bind directory, and document. + Closes: #248771, #200253, #202981, #209022 + * lwresd: create bind user/group and rndc key if needed, at install. + Closes: #190742 + * dnsutils: update long description. Closes: #236901 + + -- LaMont Jones <lamont@debian.org> Sun, 06 Jan 2008 12:25:31 -0700 + +bind9 (1:9.4.2-1) unstable; urgency=low + + [Mike O'Connor] + + * bind9.init: LSB compliance. Closes: #448006 + + [Internet Software Consortium, Inc] + + * New release: 9.4.2 + + [LaMont Jones] + + * soname shifts for new release + + -- LaMont Jones <lamont@debian.org> Sat, 17 Nov 2007 10:50:07 -0700 + +bind9 (1:9.4.2~rc2-1) experimental; urgency=low + + * New upstream release + + -- LaMont Jones <lamont@debian.org> Fri, 12 Oct 2007 18:33:57 -0600 + +bind9 (1:9.4.1-P1-4) unstable; urgency=low + + [Thomas Antepoth] + + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + [LaMont Jones] + + * document git repositories + * db.root: l.root-servers.net changed IP address. Closes: #449148 LP: #160176 + * init.d: if there are no networks configured, error out quickly + + -- LaMont Jones <lamont@debian.org> Thu, 08 Nov 2007 21:31:55 -0700 + +bind9 (1:9.4.1-P1-3) unstable; urgency=low + + * Only deliver upstream changes with bind9-doc + + -- LaMont Jones <lamont@debian.org> Thu, 04 Oct 2007 08:30:55 -0600 + +bind9 (1:9.4.1-P1-2) unstable; urgency=low + + * manpages: fix typo errors. Closes: #395834 + * manpages: call it /etc/bind/named.conf throughout, and typos. Closes: #419750 + * named.conf.5: correct filename. Closes: #428015 + * bind9.NEWS: update version for ACL change doc. Closes: #435225 + * build: don't have dnsutils deliver man pages that it shouldn't. LP: #82178 + * nslookup.1: some of the manpage was not visible. LP: #131415 + * document git repositories + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + -- LaMont Jones <lamont@debian.org> Wed, 03 Oct 2007 01:10:59 -0600 + +bind9 (1:9.4.1-P1-1) unstable; urgency=high + + * New upstream version, addresses CVE-2007-2926 and CVE-2007-2925 + + -- Bdale Garbee <bdale@gag.com> Thu, 26 Jul 2007 16:41:50 -0600 + +bind9 (1:9.4.1-1) unstable; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Mon, 30 Apr 2007 16:59:05 -0600 + +bind9 (1:9.4.0-2) unstable; urgency=low + + * upload to unstable + + -- LaMont Jones <lamont@debian.org> Tue, 10 Apr 2007 11:12:16 -0600 + +bind9 (1:9.4.0-1) experimental; urgency=low + + * New upstream version + * more mipsel patch. Closes: #406409 + + -- LaMont Jones <lamont@debian.org> Sun, 25 Feb 2007 11:44:11 -0700 + +bind9 (1:9.4.0~rc2-1) experimental; urgency=low + + * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494 + + -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:26:12 -0700 + +bind9 (1:9.4.0~rc1.0-3) experimental; urgency=low + + * add NEWS file talking about the change in defaults: + As of bind 9.4, allow-query-cache and allow-recursion default to the + builtin acls 'localnets' and 'localhost'. If you are setting up a + name server for a network, you will almost certainly need to change + this. + + The change in default has been done to make caching servers less + attractive as reflective amplifying targets for spoofed traffic. + This still leaves authoritative servers exposed. + + -- LaMont Jones <lamont@debian.org> Wed, 24 Jan 2007 09:35:06 -0700 + +bind9 (1:9.4.0~rc1.0-2) experimental; urgency=low + + * Fix mips64. Closes: #406409 + + -- LaMont Jones <lamont@debian.org> Sun, 21 Jan 2007 15:32:27 -0700 + +bind9 (1:9.4.0~rc1.0-1) experimental; urgency=low + + * Broken orig.tar.gz. + + -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 23:04:05 -0700 + +bind9 (1:9.4.0~rc1-1) experimental; urgency=low + + * New upstream + + -- LaMont Jones <lamont@debian.org> Thu, 28 Dec 2006 19:00:37 -0700 + +bind9 (1:9.3.4-2etch2) stable-proposed-updates; urgency=low + + [Thomas Antepoth] + + * unix/socket.c: don't send to a socket with pending_send. Closes: #430065 + + [LaMont Jones] + + * document git repositories + * db.root: l.root-servers.net changed IP address. Closes: #449148 + + -- LaMont Jones <lamont@debian.org> Mon, 05 Nov 2007 19:48:23 -0700 + +bind9 (1:9.3.4-2etch1) stable-security; urgency=high + + * Fix DNS cache poisoning through predictable query IDs. (CVE-2007-2926) + + -- Moritz Muehlenhoff <jmm@debian.org> Tue, 24 Jul 2007 22:09:35 +0000 + +bind9 (1:9.3.4-2) unstable; urgency=high + + * Actually really do the merge of 9.3.4. Sigh. Closes: #408925 + + -- LaMont Jones <lamont@debian.org> Mon, 29 Jan 2007 06:09:03 -0700 + +bind9 (1:9.3.4-1) unstable; urgency=high + + * New upstream version. Addresses CVE-2007-0493 CVE-2007-0494 + + -- LaMont Jones <lamont@debian.org> Thu, 25 Jan 2007 14:31:09 -0700 + +bind9 (1:9.3.3-1) unstable; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Tue, 12 Dec 2006 23:31:51 -0700 + +bind9 (1:9.3.2-P1.0-1) unstable; urgency=low + + * Fix README.Debian to point to the URL. Closes: #387437 + * Strip rfc's from orig.tar.gz. Closes: #393359 + + -- LaMont Jones <lamont@mmjgroup.com> Mon, 16 Oct 2006 06:38:22 -0600 + +bind9 (1:9.3.2-P1-2) unstable; urgency=low + + * Fix init script output. Closes: #354192 + Thanks to Joey Hess for the patch. + * Default install should listen on ipv6 interfaces. Closes: #382438 + + -- LaMont Jones <lamont@debian.org> Sat, 9 Sep 2006 19:01:53 -0600 + +bind9 (1:9.3.2-P1-1) unstable; urgency=high + + * New upstream, fixes CVE-2006-4095 and CVE-2006-4096. + Closes: #386237, #386245 + * Drop gcc-3.4 [powerpc] dependency. Closes: #342957, #372203 + * Add -fno-strict-aliasing for type-punned pointer aliasing issues + Closes: #386224 + * Use getent in postinst instead of chown/chgrp. Closes: #386091, #239665 + * Drop redundant update-rc.d calls. Closes: #356914 + + -- LaMont Jones <lamont@debian.org> Wed, 6 Sep 2006 08:07:13 -0600 + +bind9 (1:9.3.2-2) unstable; urgency=low + + * correct force-reload. Closes: #333841 + * Fix init.d's usage message. Closes: #331090 + * resolvconf tweaks. Closes: #252232, #275412 + + -- LaMont Jones <lamont@debian.org> Mon, 16 Jan 2006 15:17:04 -0700 + +bind9 (1:9.3.2-1) unstable; urgency=low + + * New upstream + * use lsb-base for start/stop messages in init.d. + * switch to debhelper 4 + + -- LaMont Jones <lamont@debian.org> Thu, 5 Jan 2006 12:29:28 -0700 + +bind9 (1:9.3.1-2) unstable; urgency=low + + * Getting good reports from experimental, uploading to sid. + Release team, please consider this package for sarge. Thanks. + * correct pidfile name in init.d/lwresd. Closes: #298100 + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 17:46:31 -0700 + +bind9 (1:9.3.1-1) experimental; urgency=low + + * Build with gcc-3.4 on powerpc, to work around #292958. + + -- LaMont Jones <lamont@debian.org> Sat, 19 Mar 2005 11:40:06 -0700 + +bind9 (1:9.3.1-0) experimental; urgency=low + + * New upstream version. + + -- LaMont Jones <lamont@debian.org> Sun, 13 Mar 2005 21:44:57 -0700 + +bind9 (1:9.3.0+9.3.1beta2-1) experimental; urgency=low + + * new upstream version + + -- LaMont Jones <lamont@debian.org> Tue, 25 Jan 2005 14:21:51 -0700 + +bind9 (1:9.3.0-1) experimental; urgency=low + + * New upstream version + + -- LaMont Jones <lamont@debian.org> Sat, 25 Sep 2004 21:35:46 -0600 + +bind9 (1:9.2.4-1) unstable; urgency=high + + * New upstream version. Closes: #269157 and others. + * Version debhelper build-dep. Closes: #262720 + + -- LaMont Jones <lamont@mmjgroup.com> Thu, 23 Sep 2004 09:11:37 -0600 + +bind9 (1:9.2.3+9.2.4-rc7-1) unstable; urgency=low + + * New upstream + + -- LaMont Jones <lamont@mmjgroup.com> Wed, 1 Sep 2004 00:04:55 -0600 + +bind9 (1:9.2.3+9.2.4-rc6-1) unstable; urgency=low + + * New upstream. + * Comment out delegation-only directives in named.conf + + -- LaMont Jones <lamont@debian.org> Mon, 2 Aug 2004 10:00:38 -0600 + +bind9 (1:9.2.3+9.2.4-rc5-1) unstable; urgency=low + + * New upstream release candidate + + -- LaMont Jones <lamont@debian.org> Thu, 17 Jun 2004 19:50:37 -0600 + +bind9 (1:9.2.3+9.2.4-rc2-1) unstable; urgency=low + + * New upstream release candidate + * Remove shared library symlinks in clean. Closes: #243109 + * Deal with capset being a module. Closes: #245043, #240874, #241605 + * deliver /var/run/bind/run in lwresd as well. Closes: #186569 + + -- LaMont Jones <lamont@debian.org> Thu, 22 Apr 2004 12:20:05 -0600 + +bind9 (1:9.2.3-3) unstable; urgency=low + + * new IP for b.root-servers.net. Closes: #234278 + * Fix RC linkages to match bind8. Closes: #218007 + + -- LaMont Jones <lamont@debian.org> Mon, 1 Mar 2004 15:00:44 -0700 + +bind9 (1:9.2.3-2) unstable; urgency=low + + * Rebuild autoconf files for mips. Closes: #221419 + + -- LaMont Jones <lamont@debian.org> Tue, 18 Nov 2003 06:33:34 -0700 + +bind9 (1:9.2.3-1) unstable; urgency=low + + * New upstream. + * cleanup zones.rfc1918/db.empty stuff. + * Fix Makefiles to work even if the build environment is unclean. + Closes: #211503 + * Add comments about root-delegation-only to named.conf. Closes: #212243 + * Add resolvconf support. Closes: #199255 + * more SO_BSDCOMPAT hacks for linux. Closes: #220735, #214460 + + -- LaMont Jones <lamont@debian.org> Mon, 17 Nov 2003 21:30:33 -0700 + +bind9 (1:9.2.2+9.2.3rc4-1) unstable; urgency=low + + * Yet another new upstream release. + + -- LaMont Jones <lamont@debian.org> Mon, 22 Sep 2003 09:39:50 -0600 + +bind9 (1:9.2.2+9.2.3rc3-1) unstable; urgency=low + + * New upstream. Closes: #211752. #211503. #211496, #211520 + + -- LaMont Jones <lamont@debian.org> Sat, 20 Sep 2003 12:22:59 -0600 + +bind9 (1:9.2.2+9.2.3rc2-4) unstable; urgency=low + + * Really fix versioned depends. Closes: #211590 + + -- LaMont Jones <lamont@debian.org> Thu, 18 Sep 2003 17:29:47 -0600 + +bind9 (1:9.2.2+9.2.3rc2-3) unstable; urgency=low + + * Version depends for all the libraries. sigh. Closes: #211412,#210293 + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:56:36 -0600 + +bind9 (1:9.2.2+9.2.3rc2-2) unstable; urgency=low + + * Need a versioned depend. sigh. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 10:25:35 -0600 + +bind9 (1:9.2.2+9.2.3rc2-1) unstable; urgency=low + + * New upstream release. Closes: #211373 + * Remove RFC's from package, per policy. + * Make com and net zones delegation-only by default. + + -- LaMont Jones <lamont@debian.org> Wed, 17 Sep 2003 07:15:37 -0600 + +bind9 (1:9.2.2+9.2.3rc1-3) unstable; urgency=low + + * A bit more cleanup of descriptions. + * fix package sections + * Fix b0rkage with dependencies. + + -- LaMont Jones <lamont@debian.org> Sun, 14 Sep 2003 09:05:10 -0600 + +bind9 (1:9.2.2+9.2.3rc1-2) unstable; urgency=low + + * Explicitly link libraries. Closes: #210653 + * Fix descriptions. Closes: #209563, #209853, #210063 + + -- LaMont Jones <lamont@debian.org> Sat, 13 Sep 2003 19:29:05 -0600 + +bind9 (1:9.2.2+9.2.3rc1-1) unstable; urgency=low + + * New upstream release candidate. + * Quit using SO_BSDCOMPAT (why is it still in the header files??) so + that the kernel will shut up about it's advertised, obsolete option. + Closes: #201293, #204282, #205590 + + -- LaMont Jones <lamont@debian.org> Thu, 28 Aug 2003 14:44:28 -0600 + +bind9 (1:9.2.2-2) unstable; urgency=low + + * Fix libtool.m4. Closes: #183791 + * move lib packages into Section: libs. Closes: #184788 + * make sure it's libssl0.9.7. Closes: #182363 + * Add /etc/default/lwresd. Closes: #169727 + * Add fakeroot dir to dh_shlibdeps. Closes: #169622 + * Fix rndc manpage. Closes: #179353 + * Deliver /usr/bin/isc-config.sh (in libbind-dev). Closes: #178186 + + -- LaMont Jones <lamont@debian.org> Sat, 15 Mar 2003 16:34:15 -0700 + +bind9 (1:9.2.2-1) unstable; urgency=low + + * New upstream version + * Document /etc/default/bind9 in init.d script. Closes: #170267 + + -- LaMont Jones <lamont@debian.org> Tue, 4 Mar 2003 22:43:58 -0700 + +bind9 (1:9.2.1-7) unstable; urgency=low + + * One more overrides disparity. + * Fix bashism in postinst. Closes: #169531 + + -- LaMont Jones <lamont@debian.org> Sun, 17 Nov 2002 19:22:58 -0700 + +bind9 (1:9.2.1-6) unstable; urgency=low + + * The "I give up for now" release. + * Only convert to running as bind if named.conf hasn't been modified. + * Closes: #163552, #164352 + * Fix overrides + * Cleanup README.Debian wrt non-root-by-default. + * Make sure that /var/run/bind/run exists in init.d script. Closes: #168912 + * New IP for j.root-servers.net. Closes: #167818 + * Check for 2.2.18 kernel in preinst. Closes: #164349 + * Move local options to /etc/default/bind9. Closes: #169132, #163073 + * Cleanup old bugs (fixed in -5, really). Closes: #165864 + * Add /etc/bind/named.conf.local, included from named.conf. Closes: #129576 + * Do options definitions in /etc/bind/named.conf.options, makes life + easier in the face of named.conf changes from upstream. + * Add missing Depends: adduser + + -- LaMont Jones <lamont@debian.org> Sat, 16 Nov 2002 17:05:45 -0700 + +bind9 (1:9.2.1-5) unstable; urgency=low + + * Run named a non-privileged user by default. Closes: #149059 + + -- LaMont Jones <lamont@debian.org> Thu, 12 Sep 2002 16:57:37 -0600 + +bind9 (1:9.2.1-4) unstable; urgency=low + + * swap maintainer/uploader status so LaMont is primary and Bdale is backup + * Deal with bind/bind9 collisions better. Closes: #149580 + * Fix some documentation. Closes: #151579 + + -- LaMont Jones <lamont@debian.org> Wed, 4 Sep 2002 23:25:33 -0600 + +bind9 (1:9.2.1-3) unstable; urgency=high + + * fold in lib/bind/resolv from 8.3.3 to resolve buffer overlow issue in + resolver library, closes: #151342, #151431 + + -- Bdale Garbee <bdale@gag.com> Mon, 1 Jul 2002 00:16:31 -0600 + +bind9 (1:9.2.1-1.woody.1) testing-security woody-proposed-updates; urgency=high + + * backport to woody (simple rebuild) since 9.2.1 resolves a security issue + + -- Bdale Garbee <bdale@gag.com> Tue, 4 Jun 2002 10:30:57 -0600 + +bind9 (1:9.2.1-2) unstable; urgency=low + + * don't include nslint man page, closes: #148695 + * fix typo in rndc.8, closes: #139602 + * add a section to README.Debian explaining the rndc key mode that has been + our default since 9.2.0-2, closes: #129849 + * fix paths for named.conf in named.8 to reflect our default, closes: #143443 + * upstream fixed the nsupdate man page at some point, closes: #121108 + + -- Bdale Garbee <bdale@gag.com> Mon, 3 Jun 2002 15:44:37 -0600 + +bind9 (1:9.2.1-1) unstable; urgency=medium + + * new upstream version + * have bind9-host provide host, closes: #140174 + * move bind9-host to priority standard since dnsutils depends on it or host, + and we prefer bind9-host over host. + * move libdns5 and libisc4 to priority standard since dnsutils depends on + them and is priority standard + + -- Bdale Garbee <bdale@gag.com> Thu, 30 May 2002 10:38:39 -0600 + +bind9 (1:9.2.0-6) unstable; urgency=low + + * move to US main! Yippee! Closes: #123969 + * add info to README.Debian about 2.5 kernels vs --disable-linux-caps + + -- Bdale Garbee <bdale@gag.com> Sat, 23 Mar 2002 00:18:05 -0700 + +bind9 (1:9.2.0-5) unstable; urgency=medium + + * clean up various issues in the rules file + * make bind9-host conflict/replace old dnsutils as host does, otherwise we + can have problems upgrading from potato to woody, closes: #136686 + * use /dev/urandom for rndc-confgen in postinst, it should be good enough for + this purpose, and will keep the postinst from blocking arbitrarily. + closes: #130372 + * add fresh pointers to chroot howto to README.Debian, closes: #135774 + + -- Bdale Garbee <bdale@gag.com> Sun, 3 Mar 2002 16:47:12 -0700 + +bind9 (1:9.2.0-4) unstable; urgency=low + + * bind9-host needs to conflict with host, closes: #127395 + + -- Bdale Garbee <bdale@gag.com> Tue, 1 Jan 2002 20:12:14 -0700 + +bind9 (1:9.2.0-3) unstable; urgency=low + + * force removal of old diverted files, closes: #126236 + * change priority of liblwres1 from optional to standard per ftp admins + * add a bind9-host package so that the 'host' provided with the BIND 9.X + source tree can be an alternative to the aging NIKHEF version packaged + separately. Update dnsutils dependencies to depend on one of the two, + with preference to this one since it has fewer bugs (but fewer features, + too). + + -- Bdale Garbee <bdale@gag.com> Sun, 23 Dec 2001 00:59:15 -0700 + +bind9 (1:9.2.0-2) unstable; urgency=medium + + * change rc.d links to ensure daemon starts before and stops after other + daemons that may fail if name service is not working (bug was filed + against 8.X bind packages, but is just as relevant here!) + * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935 + * add a postinst to dnsutils to remove any lingering diversions from old + dnsutils packages, closes: #122227 + * not much point in delivering zone2ldap.1 since we aren't delivering + zone2ldap right now (though we might someday?), closes: #124058 + * be more verbose with shared library descriptions, closes: #123426, #123428 + * 9.2.0 added a new rndc.key file that both named and rndc will read to + obtain a shared key, and rndc-confgen will easily create this file with + a unique-per-system key. Modify named.conf and remove rndc.conf + to take advantage of this mechanism and stop delivering a pre-determined + static key to all Debian systems (which has been a mild security risk). + Create the key in postinst if the key file doesn't already exist, and + remove the file in postrm if purging. + Closes: #86718, #87208 + + -- Bdale Garbee <bdale@gag.com> Fri, 21 Dec 2001 04:04:30 -0700 + +bind9 (1:9.2.0-1) unstable; urgency=low + + * new upstream version, closes: #108243, #112266, #114250, #119506, #120657 + * /etc/bind/rndc.conf is now a conffile + * minor hacks to the README.Debian since the chroot instructions it points + to are 8.X specific, part of addressing bug 111868. + * libomapi is gone, replaced by libisccc and libisccfg + * a few lintian-motivated cosmetic cleanups + * lose task-dns-server meta package, since tasksel doesn't need it now + * dig problem not reproducible in this version, closes: #89526 + * named-checkconf now uses $sysconfdir, closes: #107835 + * no longer deliver man pages for contributed binaries we're not including + in dnsutils, closes: #108220 + * fix section in nslookup man page, though that's the least of the man + page's problems... glitch reported is unreproducible + closes: #103630, #120946 + * update libbind-dev README.Debian, closes: #121050 + + -- Bdale Garbee <bdale@gag.com> Tue, 27 Nov 2001 01:41:00 -0700 + +bind9 (1:9.1.3-1) unstable; urgency=low + + * new upstream version, closes: #96483, #99824, #100647, #101568, #103429 + * update config.sub/guess for hppa/ia64 support + * small init.d patch from Marco d'Itri to ease adding options on invocation + * stop having bind9-doc conflict/replace bind-doc since they don't really + conflict and there's no reason to prevent having both installed at the + same time, closes: #90994 + * the CHANGES file documents fixes since 9.1.1 that probably cured the + reported assertion failure. If it turns out that I'm wrong, the bug can + be re-opened or a new one filed. I can't see any way to reproduce the bug + in a test case here. Closes: #99352 + * have libbind-dev depend on the runtime library packages it delivers + compile-time symlinks for, closes: #100898, #103855 + * fix lwres man pages to source man3/* instead of * so all the page content + can actually be found, closes: #85450, #103865 + + -- Bdale Garbee <bdale@gag.com> Mon, 9 Jul 2001 11:30:39 -0600 + +bind9 (1:9.1.1-1) unstable; urgency=low + + * new upstream release + * update build-depends for libssl-dev + * add build-depends on bison, closes: #90150, #90752, #90159 + * split up libbind0 since libdns is changing so numbers + * downgrade rblcheck from a depends to a suggests, closes: #90783 + * bind9 mkdep creates files in the current working directory, closes: #58353 + + -- Bdale Garbee <bdale@gag.com> Wed, 25 Apr 2001 22:53:21 -0600 + +bind9 (1:9.1.0-3) unstable; urgency=low + + * merge patch from Zack Weinberg that solves compilation problem, and + reduces the memory footprint of applications by making configure.in + smarter. Closes: #86776, #86910 + * the bind-doc package includes all relevant documentation from the bind9 + source tree, including HTML content in /usr/share/doc/bind9-doc/arm, + closes: #85718 + * default named.conf and rndc.conf to not world-readable. This is an + interim step towards addressing the concerns about security raised by + bugs 86718 and closes: #86836 A better long-term solution would be for + rndc.conf to allow includes, so that both named.conf and rndc.conf could + include a key file built on the fly during installation while themselves + retaining conffile status. The required functionality has been requested + of the bind9 upstream, this will limit vulnerability in the meantime. + * add replaces logic to the dnsutils package to avoid complaints about the + delivery of nsupdate.8.gz, closes: #86759 + * move a couple of man pages back from dnsutils to bind9 that really belong + there. sigh. + + -- Bdale Garbee <bdale@gag.com> Thu, 22 Feb 2001 16:39:02 -0700 + +bind9 (1:9.1.0-2) unstable; urgency=low + + * merge patch from Luca Filipozzi <lfilipoz@debian.org> - thanks! + + bind9: ships with a working rndc.conf file, closes: #84572 + + bind9: init.d calls rndc rather than ndc on reload, closes: #85481 + + bind9: named.conf ships with 'key' and 'control' sections + + bind9: correctly creates /var/cache/bind, closes: #85457 + + lwresd: lwresd is split off into its own package, closes: #85627 + * nsupdate is delivered by the dnsutils package, but the (wrong) man page + was accidentally also included in the bind9 package, closes: #85717 + * freshen config.sub and config.guess for ia64 and hppa support + + -- Bdale Garbee <bdale@gag.com> Mon, 12 Feb 2001 23:43:55 -0700 + +bind9 (1:9.1.0-1) unstable; urgency=low + + * Initial packaging of BIND 9.1.0. Must use epoch so that meta packages + retain their sequencing from the bind 8 package version stream. + * snarf a couple of man pages from the 8.X tree for now + + -- Bdale Garbee <bdale@gag.com> Thu, 1 Feb 2001 16:30:35 -0700 + diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..935a87c --- /dev/null +++ b/debian/control @@ -0,0 +1,186 @@ +Source: bind9 +Section: net +Priority: optional +Maintainer: Debian DNS Team <team+dns@tracker.debian.org> +Uploaders: Ondřej Surý <ondrej@debian.org>, + Bernhard Schmidt <berni@debian.org> +Build-Depends: bison, + debhelper-compat (= 12), + dh-apparmor, + dh-exec, + dh-python, + libcap2-dev [linux-any], + libcmocka-dev, + libdb-dev, + libedit-dev, + libfstrm-dev, + libidn2-dev, + libjson-c-dev, + libkrb5-dev, + liblmdb-dev, + libmaxminddb-dev (>= 1.3.0), + libprotobuf-c-dev, + libssl-dev, + libtool, + libuv1-dev (>= 1.40.0), + libxml2-dev, + pkg-config, + protobuf-c-compiler, + python3, + python3-ply, + zlib1g-dev +Build-Depends-Indep: fonts-freefont-otf, + latexmk, + python3-sphinx, + python3-sphinx-rtd-theme, + texlive-fonts-recommended, + texlive-latex-recommended, + texlive-xetex, + xindy +Standards-Version: 4.1.2 +Vcs-Browser: https://salsa.debian.org/dns-team/bind9 +Vcs-Git: https://salsa.debian.org/dns-team/bind9.git +Homepage: https://www.isc.org/downloads/bind/ + +Package: bind9 +Architecture: any +Pre-Depends: ${misc:Pre-Depends} +Depends: adduser, + bind9-libs (= ${binary:Version}), + bind9-utils (= ${binary:Version}), + debconf | debconf-2.0, + dns-root-data, + iproute2, + lsb-base (>= 3.2-14), + netbase, + ${misc:Depends}, + ${shlibs:Depends} +Suggests: bind-doc, + dnsutils, + resolvconf, + ufw +Breaks: bind (<< 1:9.13.6~) +Replaces: bind (<< 1:9.13.6~) +Description: Internet Domain Name Server + The Berkeley Internet Name Domain (BIND 9) implements an Internet domain + name server. BIND 9 is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package provides the server and related configuration files. + +Package: bind9utils +Architecture: all +Depends: bind9-utils, + ${misc:Depends} +Priority: optional +Section: oldlibs +Description: Transitional package for bind9-utils + This is a transitional package. It can safely be removed. + +Package: bind9-utils +Architecture: any +Depends: ${misc:Depends}, + ${python3:Depends}, + ${shlibs:Depends} +Breaks: bind-utils (<< 1:9.13.6~), + bind9utils (<< 1:9.12.0~), + freeipa +Replaces: bind-utils (<< 1:9.13.6~), + bind9utils (<< 1:9.12.0~) +Provides: bind9utils +Description: Utilities for BIND 9 + This package provides various utilities that are useful for maintaining a + working BIND 9 installation. + +Package: bind9-doc +Architecture: all +Section: doc +Depends: ${misc:Depends} +Breaks: bind-doc (<< 1:9.13.6~) +Replaces: bind-doc (<< 1:9.13.6~) +Description: Documentation for BIND 9 + This package provides various documents that are useful for maintaining a + working BIND 9 installation. + +Package: bind9-host +Priority: standard +Architecture: any +Depends: ${misc:Depends}, + ${shlibs:Depends} +Provides: host +Breaks: bind-host (<< 1:9.13.6~) +Replaces: bind-host (<< 1:9.13.6~) +Description: DNS Lookup Utility + This package provides the 'host' DNS lookup utility in the form that + is bundled with the BIND 9 sources. + +Package: bind9-libs +Section: libs +Priority: standard +Architecture: any +Multi-Arch: same +Depends: libuv1 (>= 1.40.0), + ${misc:Depends}, + ${shlibs:Depends} +Breaks: bind-libs (<< 1:9.13.6~) +Replaces: bind-libs (<< 1:9.13.6~) +Description: Shared Libraries used by BIND 9 + The Berkeley Internet Name Domain (BIND 9) implements an Internet domain + name server. BIND 9 is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package contains a bundle of shared libraries used by BIND 9. + +Package: bind9-dev +Section: devel +Priority: optional +Architecture: any +Multi-Arch: same +Depends: bind9-libs (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Breaks: libbind-dev (<< 1:9.16.0~) +Replaces: libbind-dev (<< 1:9.16.0~) +Description: Static Libraries and Headers used by BIND 9 + The Berkeley Internet Name Domain (BIND 9) implements an Internet domain + name server. BIND 9 is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package contains a bundle of static libraries and header files used by + BIND 9. + . + Please be aware that the BIND 9 libraries are considered private by upstream + developers and the API and ABI might break at any time. + +Package: dnsutils +Architecture: all +Depends: bind9-dnsutils, + ${misc:Depends} +Priority: optional +Section: oldlibs +Description: Transitional package for bind9-dnsutils + This is a transitional package. It can safely be removed. + +Package: bind9-dnsutils +Priority: standard +Architecture: any +Depends: bind9-host | host, + bind9-libs (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends} +Breaks: bind-dnsutils (<< 1:9.13.6~), + dnsutils (<< 1:9.13.6~) +Conflicts: bind-dnsutils (<< 1:9.13.6~), + dnsutils (<< 1:9.13.6~) +Provides: dnsutils +Description: Clients provided with BIND 9 + The Berkeley Internet Name Domain (BIND 9) implements an Internet domain + name server. BIND 9 is the most widely-used name server software on the + Internet, and is supported by the Internet Software Consortium, www.isc.org. + . + This package delivers various client programs related to DNS that are + derived from the BIND 9 source tree. + . + - dig - query the DNS in various ways + - nslookup - the older way to do it + - nsupdate - perform dynamic updates (See RFC2136) diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..cb8ab61 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,210 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: BIND +Upstream-Contact: Internet Systems Consortium <info@isc.org> +Source: https://ftp.isc.org/isc/bind9/ + +Files: * +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 1996-2003 Internet Software Consortium + 2013-2017 Farsight Security, Inc. + 2012 Vadim Goncharov + 2009-2012 John Eaglesham + 2009-2015 Red Hat + 2008 Damien Miller + 2004, 2008 Nominet, Ltd. + 2004 Masarykova universita + 1997-2003 Kungliga Tekniska Högskolan + 2002 Nuno M. Rodrigues. + 2002 Stichting NLnet + 2000-2002 Japan Network Information Center. + 2001 Jake Burkholder + 1996-2001 Nominum, Inc. + 1995-2000 Network Associates, Inc. + 2000 Aaron D. Gifford + 1999-2000 Nortel Networks Corporation + 1996 David Mazieres + 1995-1998 WIDE Project + 1993 Digital Equipment Corporation. + 1985, 1987, 1989, 1990, 1993, 1994 The Regents of the University of California. +License: MPL-2.0 and ISC and BSD-2-clause and BSD-3-clause +Comment: + The BIND 9 project was originally distributed under permissive + ISC licence. The license on the majority of the files has been + changed to MPL-2.0 in the BIND 9.11 release. However, while the + majority of the files are licenced under MPL-2.0, there are files + where the portions were contributed to ISC by third parties under + different license. It would serve no useful purpose to duplicate + copyright information from every file with a different licence, so + this copyright block is just amalgamate of all copyright holders + and licenses used in the BIND 9 project. You need to look at the + individual files to get the specific license that covers that file. + +Files: lib/isc/hp.c lib/isc/include/isc/hp.h +Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC") + 2014-2016, Pedro Ramalhete, Andreia Correia +License: MPL-2.0 and BSD-3-clause +Comment: + This work is based on C++ code available from: + https://github.com/pramalhe/ConcurrencyFreaks/ + +Files: lib/isc/random.c +Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC") + 1996 David Mazieres + 2008 Damien Miller +License: MPL-2.0 and ISC + +Files: lib/isc/siphash.c +Copyright: 2018-2020 Internet Systems Consortium, Inc. ("ISC") + 2012-2016 Jean-Philippe Aumasson + 2012-2014 Daniel J. Bernstein +License: MPL-2.0 and CC0-1.0 +Comment: + The SipHash in BIND 9 is based on SipHash reference C implementation. + +Files: lib/isc/include/pkcs11/pkcs11.h +Copyright: 2006-2007 g10 Code GmbH + 2006 Andreas Jellinghaus + 2017 Red Hat, Inc. +License: + This file is free software; as a special exception the author gives + unlimited permission to copy and/or distribute it, with or without + modifications, as long as this notice is preserved. + . + This file is distributed in the hope that it will be useful, but + WITHOUT ANY WARRANTY, to the extent permitted by law; without even + the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR + PURPOSE. */ +Comment: The pkcs11.h header was imported from libp11 project + +Files: lib/isc/tests/random_test.c +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 1996-2003 Internet Software Consortium + 1985, 1987, 2000 Stephen L. Moshier +License: MPL-2.0 and public-domain + +Files: contrib/dlz/modules/mysqldyn/dlz_mysqldyn_mod.c +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 2014 Maui Systems Ltd +License: MPL-2.0 and ISC + +Files: contrib/dlz/modules/perl/ +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 2009-2012 John Eaglesham + 2002 Stichting NLnet +License: MPL-2.0 and ISC + +Files: contrib/dlz/modules/wildcard/ +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 2012 Vadim Goncharov + 2002 Stichting NLnet +License: MPL-2.0 and ISC + +Files: m4/ +Copyright: 2004-2017 Internet Systems Consortium, Inc. ("ISC") + 2008 Guido U. Draheim + 2011 Maarten Bosmans + 2009, 2010 Zmanda Inc. + 2009, 2010 Dustin J. Mitchell + 2008 Steven G. Johnson + 2011 Daniel Richard G. + 2009 Filippo Giunchedi + 2011 The Board of Trustees of the Leland Stanford Junior University + 2011 Russ Allbery <rra@stanford.edu> + 2013 Bastien ROUCARIES + 2004, 2011-2015 Free Software Foundation, Inc. +License: + Copying and distribution of this file, with or without modification, are + permitted in any medium without royalty provided the copyright notice + and this notice are preserved. This file is offered as-is, without any + warranty. +Comment: + The files from m4/ directory were imported from autoconf-archive, and libtool. + +Files: debian/ +Copyright: 2007-2017 LaMont Jones + 2013-2017 Michael Gilbert + 2017-2019 Ondřej Surý + 2008-2016 Jamie Strandboge +License: ISC or MPL-2.0 + +License: MPL-2.0 + This Source Code Form is subject to the terms of the Mozilla Public + License, v. 2.0. + . + On Debian systems, the full copy of MPL-2.0 can be found at + /usr/share/common-licenses/MPL-2.0 + +License: ISC + Permission to use, copy, modify, and/or distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + . + THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH + REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY + AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, + INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM + LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE + OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR + PERFORMANCE OF THIS SOFTWARE. + +License: BSD-2-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + . + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY + WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + +License: BSD-3-clause + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions + are met: + . + 1. Redistributions of source code must retain the above copyright + notice, this list of conditions and the following disclaimer. + . + 2. Redistributions in binary form must reproduce the above copyright + notice, this list of conditions and the following disclaimer in the + documentation and/or other materials provided with the distribution. + . + 3. Neither the name of the copyright holder nor the names of its + contributors may be used to endorse or promote products derived from + this software without specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR + A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT + HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY + WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + +License: CC0-1.0 + To the extent possible under law, the author(s) have dedicated all copyright + and related and neighboring rights to this software to the public domain + worldwide. This software is distributed without any warranty. + . + On Debian systems, the full copy of CC0-1.0 can be found at + /usr/share/common-licenses/CC0-1.0 diff --git a/debian/extras/apparmor.d/usr.sbin.named b/debian/extras/apparmor.d/usr.sbin.named new file mode 100644 index 0000000..fe14850 --- /dev/null +++ b/debian/extras/apparmor.d/usr.sbin.named @@ -0,0 +1,94 @@ +# vim:syntax=apparmor +# Last Modified: Fri Jun 1 16:43:22 2007 +#include <tunables/global> + +profile named /usr/sbin/named flags=(attach_disconnected) { + #include <abstractions/base> + #include <abstractions/nameservice> + + capability net_bind_service, + capability setgid, + capability setuid, + capability sys_chroot, + capability sys_resource, + + # /etc/bind should be read-only for bind + # /var/lib/bind is for dynamically updated zone (and journal) files. + # /var/cache/bind is for slave/stub data, since we're not the origin of it. + # See /usr/share/doc/bind9/README.Debian.gz + /etc/bind/** r, + /var/lib/bind/** rw, + /var/lib/bind/ rw, + /var/cache/bind/** lrw, + /var/cache/bind/ rw, + + # Database file used by allow-new-zones + /var/cache/bind/_default.nzd-lock rwk, + + # gssapi + /etc/krb5.keytab kr, + /etc/bind/krb5.keytab kr, + + # ssl + /etc/ssl/openssl.cnf r, + + # root hints from dns-data-root + /usr/share/dns/root.* r, + + # GeoIP data files for GeoIP ACLs + /usr/share/GeoIP/** r, + + # dnscvsutil package + /var/lib/dnscvsutil/compiled/** rw, + + # Allow changing worker thread names + owner @{PROC}/@{pid}/task/@{tid}/comm rw, + + @{PROC}/net/if_inet6 r, + @{PROC}/*/net/if_inet6 r, + @{PROC}/sys/net/ipv4/ip_local_port_range r, + /usr/sbin/named mr, + /{,var/}run/named/named.pid w, + /{,var/}run/named/session.key w, + # support for resolvconf + /{,var/}run/named/named.options r, + + # some people like to put logs in /var/log/named/ instead of having + # syslog do the heavy lifting. + /var/log/named/** rw, + /var/log/named/ rw, + + # gssapi + /var/lib/sss/pubconf/krb5.include.d/** r, + /var/lib/sss/pubconf/krb5.include.d/ r, + /var/lib/sss/mc/initgroups r, + /etc/gss/mech.d/ r, + + # ldap + /etc/ldap/ldap.conf r, + /{,var/}run/slapd-*.socket rw, + + # dynamic updates + /var/tmp/DNS_* rw, + + # dyndb backends + /usr/lib/bind/*.so rm, + + # Samba DLZ + /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm, + /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm, + /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm, + /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm, + /var/lib/samba/bind-dns/dns.keytab rk, + /var/lib/samba/bind-dns/named.conf r, + /var/lib/samba/bind-dns/dns/** rwk, + /var/lib/samba/private/dns.keytab rk, + /var/lib/samba/private/named.conf r, + /var/lib/samba/private/dns/** rwk, + /etc/samba/smb.conf r, + /dev/urandom rwmk, + owner /var/tmp/krb5_* rwk, + + # Site-specific additions and overrides. See local/README for details. + #include <local/usr.sbin.named> +} diff --git a/debian/extras/etc/db.0 b/debian/extras/etc/db.0 new file mode 100644 index 0000000..e3aabdb --- /dev/null +++ b/debian/extras/etc/db.0 @@ -0,0 +1,12 @@ +; +; BIND reverse data file for broadcast zone +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.127 b/debian/extras/etc/db.127 new file mode 100644 index 0000000..cd05bef --- /dev/null +++ b/debian/extras/etc/db.127 @@ -0,0 +1,13 @@ +; +; BIND reverse data file for local loopback interface +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. +1.0.0 IN PTR localhost. diff --git a/debian/extras/etc/db.255 b/debian/extras/etc/db.255 new file mode 100644 index 0000000..e3aabdb --- /dev/null +++ b/debian/extras/etc/db.255 @@ -0,0 +1,12 @@ +; +; BIND reverse data file for broadcast zone +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.empty b/debian/extras/etc/db.empty new file mode 100644 index 0000000..8a12858 --- /dev/null +++ b/debian/extras/etc/db.empty @@ -0,0 +1,14 @@ +; BIND reverse data file for empty rfc1918 zone +; +; DO NOT EDIT THIS FILE - it is used for multiple zones. +; Instead, copy it, edit named.conf, and use that copy. +; +$TTL 86400 +@ IN SOA localhost. root.localhost. ( + 1 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 86400 ) ; Negative Cache TTL +; +@ IN NS localhost. diff --git a/debian/extras/etc/db.local b/debian/extras/etc/db.local new file mode 100644 index 0000000..2f272d4 --- /dev/null +++ b/debian/extras/etc/db.local @@ -0,0 +1,14 @@ +; +; BIND data file for local loopback interface +; +$TTL 604800 +@ IN SOA localhost. root.localhost. ( + 2 ; Serial + 604800 ; Refresh + 86400 ; Retry + 2419200 ; Expire + 604800 ) ; Negative Cache TTL +; +@ IN NS localhost. +@ IN A 127.0.0.1 +@ IN AAAA ::1 diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf new file mode 100644 index 0000000..880786a --- /dev/null +++ b/debian/extras/etc/named.conf @@ -0,0 +1,11 @@ +// This is the primary configuration file for the BIND DNS server named. +// +// Please read /usr/share/doc/bind9/README.Debian.gz for information on the +// structure of BIND configuration files in Debian, *BEFORE* you customize +// this configuration file. +// +// If you are just adding zones, please do that in /etc/bind/named.conf.local + +include "/etc/bind/named.conf.options"; +include "/etc/bind/named.conf.local"; +include "/etc/bind/named.conf.default-zones"; diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.default-zones new file mode 100644 index 0000000..1a85ad3 --- /dev/null +++ b/debian/extras/etc/named.conf.default-zones @@ -0,0 +1,30 @@ +// prime the server with knowledge of the root servers +zone "." { + type hint; + file "/usr/share/dns/root.hints"; +}; + +// be authoritative for the localhost forward and reverse zones, and for +// broadcast zones as per RFC 1912 + +zone "localhost" { + type master; + file "/etc/bind/db.local"; +}; + +zone "127.in-addr.arpa" { + type master; + file "/etc/bind/db.127"; +}; + +zone "0.in-addr.arpa" { + type master; + file "/etc/bind/db.0"; +}; + +zone "255.in-addr.arpa" { + type master; + file "/etc/bind/db.255"; +}; + + diff --git a/debian/extras/etc/named.conf.local b/debian/extras/etc/named.conf.local new file mode 100644 index 0000000..7a57b10 --- /dev/null +++ b/debian/extras/etc/named.conf.local @@ -0,0 +1,8 @@ +// +// Do any local configuration here +// + +// Consider adding the 1918 zones here, if they are not used in your +// organization +//include "/etc/bind/zones.rfc1918"; + diff --git a/debian/extras/etc/named.conf.options b/debian/extras/etc/named.conf.options new file mode 100644 index 0000000..4778d18 --- /dev/null +++ b/debian/extras/etc/named.conf.options @@ -0,0 +1,24 @@ +options { + directory "/var/cache/bind"; + + // If there is a firewall between you and nameservers you want + // to talk to, you may need to fix the firewall to allow multiple + // ports to talk. See http://www.kb.cert.org/vuls/id/800113 + + // If your ISP provided one or more IP addresses for stable + // nameservers, you probably want to use them as forwarders. + // Uncomment the following block, and insert the addresses replacing + // the all-0's placeholder. + + // forwarders { + // 0.0.0.0; + // }; + + //======================================================================== + // If BIND logs error messages about the root key being expired, + // you will need to update your keys. See https://www.isc.org/bind-keys + //======================================================================== + dnssec-validation auto; + + listen-on-v6 { any; }; +}; diff --git a/debian/extras/etc/zones.rfc1918 b/debian/extras/etc/zones.rfc1918 new file mode 100644 index 0000000..03b5546 --- /dev/null +++ b/debian/extras/etc/zones.rfc1918 @@ -0,0 +1,20 @@ +zone "10.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; + +zone "16.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "17.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "18.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "19.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "20.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "21.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "22.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "23.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "24.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "25.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "26.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "27.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "28.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "29.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "30.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; +zone "31.172.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; + +zone "168.192.in-addr.arpa" { type master; file "/etc/bind/db.empty"; }; diff --git a/debian/extras/if-reconfig.d/bind9 b/debian/extras/if-reconfig.d/bind9 new file mode 100755 index 0000000..d06965f --- /dev/null +++ b/debian/extras/if-reconfig.d/bind9 @@ -0,0 +1,15 @@ +#!/bin/sh -e +# Called when an interfaces comes up or down +# Written by LaMont Jones <lamont@debian.org> + +# kick named as needed + +# If /usr isn't mounted yet, silently bail. +if [ ! -d /usr/sbin ]; then + exit 0 +fi + +# if named is running, reconfig it. +rndc reconfig >/dev/null 2>&1 & + +exit 0 diff --git a/debian/extras/insserv.conf.d/bind9 b/debian/extras/insserv.conf.d/bind9 new file mode 100644 index 0000000..1861a99 --- /dev/null +++ b/debian/extras/insserv.conf.d/bind9 @@ -0,0 +1 @@ +$named bind9 diff --git a/debian/extras/ufw/bind9 b/debian/extras/ufw/bind9 new file mode 100644 index 0000000..6cd6fca --- /dev/null +++ b/debian/extras/ufw/bind9 @@ -0,0 +1,5 @@ +[Bind9] +title=Internet Domain Name Server +description=The Berkeley Internet Name Domain (BIND) implements an Internet domain name server. +ports=53 + diff --git a/debian/gbp.conf b/debian/gbp.conf new file mode 100644 index 0000000..1f57306 --- /dev/null +++ b/debian/gbp.conf @@ -0,0 +1,10 @@ +[DEFAULT] +debian-branch = debian/bullseye +upstream-branch = upstream/9.16 +pristine-tar = True + +[dch] +meta = 1 + +[import-orig] +filter = ['.gitignore'] diff --git a/debian/named-resolvconf.service b/debian/named-resolvconf.service new file mode 100644 index 0000000..60e3a99 --- /dev/null +++ b/debian/named-resolvconf.service @@ -0,0 +1,15 @@ +[Unit] +Description=local BIND 9 via resolvconf +Documentation=man:named(8) man:resolvconf(8) +PartOf=named.service +After=named.service +ConditionFileIsExecutable=/sbin/resolvconf + +[Service] +Type=oneshot +RemainAfterExit=yes +ExecStart=/bin/sh -c 'echo nameserver 127.0.0.1 | /sbin/resolvconf -a lo.named' +ExecStop=/sbin/resolvconf -d lo.named + +[Install] +WantedBy=named.service diff --git a/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch b/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch new file mode 100644 index 0000000..0ef8534 --- /dev/null +++ b/debian/patches/0001-Add_--install-layout=deb_to_setup.py_call.patch @@ -0,0 +1,24 @@ +From: Debian DNS Packaging <pkg-dns-devel@lists.alioth.debian.org> +Date: Fri, 24 Nov 2017 16:26:55 +0000 +Subject: Add_--install-layout=deb_to_setup.py_call + +--- + bin/python/Makefile.in | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/bin/python/Makefile.in b/bin/python/Makefile.in +index dc1af40..a87927a 100644 +--- a/bin/python/Makefile.in ++++ b/bin/python/Makefile.in +@@ -45,9 +45,9 @@ install:: ${TARGETS} installdirs + ${INSTALL_SCRIPT} dnssec-keymgr ${DESTDIR}${sbindir} + if test -n "${PYTHON}" ; then \ + if test -n "${DESTDIR}" ; then \ +- ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \ ++ ${PYTHON} ${srcdir}/setup.py install --root=${DESTDIR} --prefix=${prefix} @PYTHON_INSTALL_LIB@ --install-layout=deb ; \ + else \ +- ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ ; \ ++ ${PYTHON} ${srcdir}/setup.py install --prefix=${prefix} @PYTHON_INSTALL_LIB@ --install-layout=deb ; \ + fi ; \ + rm -rf build ; \ + fi diff --git a/debian/patches/0002-python-fix-for-dist-packages.patch b/debian/patches/0002-python-fix-for-dist-packages.patch new file mode 100644 index 0000000..971bfa0 --- /dev/null +++ b/debian/patches/0002-python-fix-for-dist-packages.patch @@ -0,0 +1,49 @@ +From: Jim Popovitch <jimpop@domainmail.org> +Date: Sat, 13 Jul 2019 17:00:35 +0000 +Subject: python fix for dist-packages + +--- + bin/python/dnssec-checkds.py.in | 2 +- + bin/python/dnssec-coverage.py.in | 2 +- + bin/python/dnssec-keymgr.py.in | 2 +- + 3 files changed, 3 insertions(+), 3 deletions(-) + +diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in +index 3ec15e2..e70d0c4 100644 +--- a/bin/python/dnssec-checkds.py.in ++++ b/bin/python/dnssec-checkds.py.in +@@ -22,7 +22,7 @@ if os.name != "nt": + sys.path.insert( + 1, + os.path.join( +- "@prefix@", "lib", "python" + sys.version[:3], "site-packages" ++ "@prefix@", "lib", "python" + sys.version[:3], "dist-packages" + ), + ) + +diff --git a/bin/python/dnssec-coverage.py.in b/bin/python/dnssec-coverage.py.in +index a82dfe3..7d4f6ba 100644 +--- a/bin/python/dnssec-coverage.py.in ++++ b/bin/python/dnssec-coverage.py.in +@@ -22,7 +22,7 @@ if os.name != "nt": + sys.path.insert( + 1, + os.path.join( +- "@prefix@", "lib", "python" + sys.version[:3], "site-packages" ++ "@prefix@", "lib", "python" + sys.version[:3], "dist-packages" + ), + ) + +diff --git a/bin/python/dnssec-keymgr.py.in b/bin/python/dnssec-keymgr.py.in +index f8ee013..3bfa02e 100644 +--- a/bin/python/dnssec-keymgr.py.in ++++ b/bin/python/dnssec-keymgr.py.in +@@ -22,7 +22,7 @@ if os.name != "nt": + sys.path.insert( + 1, + os.path.join( +- "@prefix@", "lib", "python" + sys.version[:3], "site-packages" ++ "@prefix@", "lib", "python" + sys.version[:3], "dist-packages" + ), + ) + diff --git a/debian/patches/0003-Disable-sphinx-build-strict-mode.patch b/debian/patches/0003-Disable-sphinx-build-strict-mode.patch new file mode 100644 index 0000000..e9d7406 --- /dev/null +++ b/debian/patches/0003-Disable-sphinx-build-strict-mode.patch @@ -0,0 +1,33 @@ +From: =?utf-8?b?T25kxZllaiBTdXLDvQ==?= <ondrej@debian.org> +Date: Wed, 21 Sep 2022 12:53:09 +0200 +Subject: Disable sphinx-build strict mode + +--- + doc/arm/Makefile.in | 1 - + doc/man/Makefile.in | 1 - + 2 files changed, 2 deletions(-) + +diff --git a/doc/arm/Makefile.in b/doc/arm/Makefile.in +index ce365e3..806f577 100644 +--- a/doc/arm/Makefile.in ++++ b/doc/arm/Makefile.in +@@ -29,7 +29,6 @@ SPHINXBUILD = @SPHINX_BUILD@ + SPHINXBUILDDIR = ${builddir}/_build + + common_SPHINXOPTS = \ +- -W \ + -a \ + -v \ + -c "${abs_srcdir}" +diff --git a/doc/man/Makefile.in b/doc/man/Makefile.in +index 75794f7..70b66a2 100644 +--- a/doc/man/Makefile.in ++++ b/doc/man/Makefile.in +@@ -161,7 +161,6 @@ SPHINXBUILDDIR = ${builddir}/_build + SPHINX_W = -W + + common_SPHINXOPTS = \ +- $(SPHINX_W) \ + -a \ + -v \ + -c "${abs_srcdir}" diff --git a/debian/patches/series b/debian/patches/series new file mode 100644 index 0000000..12673d3 --- /dev/null +++ b/debian/patches/series @@ -0,0 +1,3 @@ +0001-Add_--install-layout=deb_to_setup.py_call.patch +0002-python-fix-for-dist-packages.patch +0003-Disable-sphinx-build-strict-mode.patch diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in new file mode 100644 index 0000000..cef83a3 --- /dev/null +++ b/debian/po/POTFILES.in @@ -0,0 +1 @@ +[type: gettext/rfc822deb] templates diff --git a/debian/po/cs.po b/debian/po/cs.po new file mode 100644 index 0000000..0f916c8 --- /dev/null +++ b/debian/po/cs.po @@ -0,0 +1,67 @@ +# Czech translation of bind9 debconf messages. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Miroslav Kure <kurem@debian.cz>, 2008 +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-15 14:38+0200\n" +"Last-Translator: Miroslav Kure <kurem@debian.cz>\n" +"Language-Team: Czech <debian-l10n-czech@lists.debian.org>\n" +"Language: cs\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Uživatelský účet pro běh daemona BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Ve výchozím nastavení se daemon BINDu9 (named) spouští pod účtem uživatele " +"„bind“. Pro použití jiného účtu zadejte jeho jméno." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Další spouštěcí parametry pro named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Zadejte prosím případné další parametry (mimo uživatelského účtu), které se " +"mají předat daemonu BINDu9 (named) při každém spuštění." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Má se přepsat nastavení v resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Rozhodněte se, zda se má přepsat nastavení resolveru tak, aby vždy používal " +"lokální daemon BINDu9 (named) namísto serveru, který doporučí aktuální " +"připojení." diff --git a/debian/po/da.po b/debian/po/da.po new file mode 100644 index 0000000..e9a2df1 --- /dev/null +++ b/debian/po/da.po @@ -0,0 +1,67 @@ +# Danish translation bind9. +# Copyright (C) 2010 bind9 & Joe Hansen. +# This file is distributed under the same license as the bind9 package. +# Joe Hansen <joedalton2@yahoo.dk>, 2010. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2010-10-07 17:30+01:00\n" +"Last-Translator: Joe Hansen <joedalton2@yahoo.dk>\n" +"Language-Team: Danish <debian-l10n-danish@lists.debian.org> \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Brugerkonto til kørsel af BIND9-dæmonen:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standarden er at køre BIND9-dæmonen (navngivet) under brugerkontoen »bind«. " +"For at bruge en anden konto, så indtast venligst et passende brugernavn." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andre opstartsindstillinger for navngivet:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Angiv venligst eventuelle yderligere indstillinger (udover brugernavnet) som " +"skal videresendes til BIND9-dæmonen (navngivet) ved opstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Skal opsætningen af resolv.conf overskrives?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Vælg venligst hvorvidt opløseren skal tvinges til at bruge den lokale BIND9-" +"dæmon (navngivet), frem for hvad den aktuelle forbindelse anbefaler, når " +"denne maskine flytter rundt." diff --git a/debian/po/de.po b/debian/po/de.po new file mode 100644 index 0000000..b2a18df --- /dev/null +++ b/debian/po/de.po @@ -0,0 +1,84 @@ +# Translation of bind9 debconf templates to German +# (C) Helge Kreutzmann <debian@helgefjell.de>, 2008. +# This file is distributed under the same license as the bind9 package. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-16 20:22+0200\n" +"Last-Translator: Helge Kreutzmann <debian@helgefjell.de>\n" +"Language-Team: de <debian-l10n-german@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=iso-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Benutzerkonto, unter dessen Kennung der BIND9-Daemon laufen soll:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standardmig wird der BIND9-Daemon (Named) unter der Kennung des Benutzers " +"bind betrieben. Um ein anderes Benutzerkonto auszuwhlen, geben Sie bitte " +"den entsprechenden Benutzernamen ein." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Weitere Optionen fr den Start des Named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Bitte geben Sie hier die zustzlichen Optionen (auer dem Benutzernamen) " +"ein, die dem Bind9-Daemon (Named) beim Starten bergeben werden sollen." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Sollen die Einstellungen in resolv.conf ignoriert werden?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Bitte whlen Sie aus, ob der Namensauflser (Resolver) dazu gezwungen werden " +"soll, den lokalen BIND9-Daemon (Named) zu verwenden, statt den aktuellen " +"Verbindungsempfehlungen zu folgen, wenn diese Maschine bewegt wird." + +#~ msgid "Options that should be passed at startup to bind9" +#~ msgstr "Optionen, die beim Starten an Bind9 weitergegeben werden sollen" + +#~ msgid "which user should bind9 run as?" +#~ msgstr "Unter welcher Benutzerkennung soll Bind9 laufen?" + +#~ msgid "" +#~ "The default is to start bind9 as bind user, if you would like to change " +#~ "that, please give here the username as which bind9 should start as." +#~ msgstr "" +#~ "Standardmig startet Bind9 unter der Benutzerkennung bind. Falls Sie " +#~ "dies ndern mchten geben Sie hier bitte den Benutzernamen ein, unter " +#~ "dessen Kennung Bind9 starten soll." + +#~ msgid "Should resolvconf run when bind9 starts up?" +#~ msgstr "Soll Resolvconf laufen, wenn Bind9 startet?" diff --git a/debian/po/es.po b/debian/po/es.po new file mode 100644 index 0000000..c909428 --- /dev/null +++ b/debian/po/es.po @@ -0,0 +1,86 @@ +# bind9 translation to spanish +# Copyright (C) 2008 Software in the Public Interest +# This file is distributed under the same license as the bind9 package. +# Changes: +# - Initial translation +# Ignacio Mondino <ignacio.mondino@gmail.com>, 2008 +# Traductores, si no conoce el formato PO, merece la pena leer la +# documentación de gettext, especialmente las secciones dedicadas a este +# formato, por ejemplo ejecutando: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Equipo de traducción al español, por favor lean antes de traducir +# los siguientes documentos: +# - El proyecto de traducción de Debian al español +# http://www.debian.org/intl/spanish +# especialmente las notas de traducción en +# http://www.debian.org/intl/spanish/notas +# - La guía de traducción de po's de debconf: +# /usr/share/doc/po-debconf/README-trans +# o http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg-3\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-08 20:18-0300\n" +"Last-Translator: Ignacio Mondino <ignacio.mondino@gmail.com>\n" +"Language-Team: Debian Spanish team <debian-l10n-spanish@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Cuenta de usuario que ejecuta el demonio BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"La cuenta de usuario por omisión que ejecuta el demonio BIND9 («named») es " +"«bind». Para usar una cuenta diferente, por favor ingrese el nombre de " +"usuario apropiado." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Otras opciones de inicio para «named»:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Ingrese cualquier opción adicional (además del nombre de usuario) que " +"debiera pasarse como parámetro al demonio BIND9 («named») al inicio del " +"sistema." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "¿Debería sobreescribirse el archivo «resolv.conf»?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Indique si se debería forzar al cliente a utilizar el demonio BIND9 " +"(«named») local en lugar de lo que la conexión actual recomiende, cuando " +"este equipo este en movimiento." diff --git a/debian/po/eu.po b/debian/po/eu.po new file mode 100644 index 0000000..d0d0acf --- /dev/null +++ b/debian/po/eu.po @@ -0,0 +1,68 @@ +# translation of eu.po to Euskara +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Piarres Beobide <pi@beobide.net>, 2009. +msgid "" +msgstr "" +"Project-Id-Version: eu\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2009-02-22 10:36+0100\n" +"Last-Translator: Piarres Beobide <pi@beobide.net>\n" +"Language-Team: Euskara <debian-l10n-basque@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 exekutatuko duen erabiltzaile kontua:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Lehenetsia BIND9 deabrua (named) 'bind' erabiltzaile kontuarekin exekutatzea " +"da. Beste kontu bat erabiltzeko, idatzi dagokion erabiltzaile-izena" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Beste abio aukera batzuek named-rentzat:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Mesedez zehaztu BIND9 deabruari abioan pasa behar zaizkion beste aukera " +"gehigarriak (erabiltzaile-izenaz beste)." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf ezarpenak gainidatzi behar al dira?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Mesedez hautatu ebazlea nola behartu behar den BIND9 deabru kopia lokala " +"erabiltzeko ekipo hau mugitzen ari denean konexioak gomendatzen dionaren " +"ordez." diff --git a/debian/po/fi.po b/debian/po/fi.po new file mode 100644 index 0000000..ef9aae0 --- /dev/null +++ b/debian/po/fi.po @@ -0,0 +1,64 @@ +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-13 08:08-0000\n" +"Last-Translator: Esko Arajärvi <edu@iki.fi>\n" +"Language-Team: Finnish <debian-l10n-finnish@lists.debian.org>\n" +"Language: fi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Finnish\n" +"X-Poedit-Country: FINLAND\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Käyttäjätunnus, jolla BIND9-taustaohjelmaa ajetaan:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Oletuksena BIND9-taustaohjelmaa (named) ajetaan käyttäjätunnuksella ”bind”. " +"Jos halutaan käyttää jotain muuta tunnusta, syötä se tähän." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Ohjelman named muut käynnistysvalitsimet:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Anna mahdolliset muut valitsimet (muut kuin käyttäjätunnus), jotka BIND9-" +"taustaohjelmalle (named) tulisi antaa käynnistyksessä." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Tulisiko tiedoston resolv.conf asetukset jättää huomioitta?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Valitse tulisiko selvittäjä pakottaa käyttämään paikallista BIND9-" +"taustaohjelmaa (named) sen sijaan mitä nykyinen yhteys suosittelee, kun " +"konetta siirrellään eri paikkoihin." diff --git a/debian/po/fr.po b/debian/po/fr.po new file mode 100644 index 0000000..757f05d --- /dev/null +++ b/debian/po/fr.po @@ -0,0 +1,69 @@ +# Translation of bind9 debconf templates to French +# Copyright (C) 2008 CALARESU Luc <luc.calaresu@gmail.com> +# This file is distributed under the same license as the bind9 package. +# CALARESU Luc <luc.calaresu@gmail.com>, 2008. +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 14:26+0200\n" +"Last-Translator: CALARESU Luc <luc.calaresu@gmail.com>\n" +"Language-Team: French <debian-l10n-french@lists.debian.org>\n" +"Language: fr\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Identifiant pour l'exécution du démon de BIND9 :" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Par défaut, le démon de BIND9 est lancé avec les privilèges de l'identifiant " +"« bind ». Si vous souhaitez utiliser un autre identifiant, veuillez " +"l'indiquer ici." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Autres options à transmettre pour « named » :" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Veuillez indiquer toute option supplémentaire (autre que l'identifiant) qui " +"doit être transmise au démarrage du démon de BIND9 (« named »)." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Faut-il écraser les paramètres de resolv.conf ?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Veuillez choisir si la résolution de noms doit utiliser le démon BIND9 local " +"(« named ») plutôt que les paramètres recommandés pour la connexion " +"actuelle, lorsque cette machine est déplacée." diff --git a/debian/po/gl.po b/debian/po/gl.po new file mode 100644 index 0000000..f299cb3 --- /dev/null +++ b/debian/po/gl.po @@ -0,0 +1,66 @@ +# Galician translation of bind9's debconf templates +# This file is distributed under the same license as the bind9 package. +# Jacobo Tarrio <jtarrio@debian.org>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:36+0100\n" +"Last-Translator: Jacobo Tarrio <jtarrio@debian.org>\n" +"Language-Team: Galician <proxecto@trasno.net>\n" +"Language: gl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de usuario que executa o servizo de BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"A elección por defecto é executar o servizo de BIND9 (named) baixo a conta " +"de usuario \"bind\". Para empregar unha conta diferente, introduza o nome." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opcións de inicio para named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Forneza as opcións adicionais (que non sexan o nome de usuario) que se deban " +"pasar ao servizo de BIND9 (named) no inicio." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "¿Quere substituír a configuración de resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Indique se quere forzar o resolvedor a que empregue o servizo de BIND9 local " +"(named) no canto do que recomenda a conexión actual, cando esta máquina " +"estea en movemento." diff --git a/debian/po/id.po b/debian/po/id.po new file mode 100644 index 0000000..e389970 --- /dev/null +++ b/debian/po/id.po @@ -0,0 +1,51 @@ +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: \n" +"Last-Translator: Mahyuddin Susanto <udienz@gmail.com>\n" +"Language-Team: Debian Indonesia Translator <debian-l10n-indonesian@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Indonesian\n" +"X-Poedit-Country: INDONESIA\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Akun pengguna untuk menjalankan daemon BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "The default is to run the BIND9 daemon (named) under the 'bind' user account. To use a different account, please enter the appropriate username." +msgstr "Bawaan dari daemon BIND9 adalah menjalankan dengan user akun 'bind'. Untuk menggunakan akun berbeda, silakan masukkan nama pengguna yang sesuai." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Opsi lain startup untuk named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Please provide any additional options (other than username) that should be passed to the BIND9 daemon (named) on startup." +msgstr "Harap menyediakan opsi tambahan (selain nama pengguna) yang digunakan daemon BIND9 untuk startup" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "haruskah resolv.conf ditimpa?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Please choose whether the resolver should be forced to use the local BIND9 daemon (named) rather than what the current connection recommends, when this machine moves around." +msgstr "Silakan tentukan resolver mana yang akan digunakan untuk daemon lokal BIND9 (named) dari koneksi sekarang yang digunakan, ketika mesin ini berjalan" + diff --git a/debian/po/it.po b/debian/po/it.po new file mode 100644 index 0000000..2e3ef2e --- /dev/null +++ b/debian/po/it.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg.P1-2_templates.po to Italian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Alex <animainvendita@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_templates\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-27 16:10+0200\n" +"Last-Translator: Alex <animainvendita@gmail.com>\n" +"Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n" +"Language: it\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Account utente con cui eseguire il demone BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"L'opzione predefinita prevede l'esecuzione del demone BIND9 (named) " +"utilizzando l'utente 'bind'. Se si desidera utilizzare un differente account " +"utente, inserire il nome corrispondente." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Altre opzioni di avvio per named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Inserire qualsiasi opzione addizionale (differente dal nome utente) che " +"dovrebbe essere inviata al demone BIND9 (named) durante l'avvio." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Si desidera non tener conto delle impostazioni in resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Scegliere se si desidera forzare la risoluzione di tutte le query DNS con il " +"demone BIND9 locale (named) non utilizzando i server raccomandati dalla " +"connessione attiva." diff --git a/debian/po/ja.po b/debian/po/ja.po new file mode 100644 index 0000000..c931748 --- /dev/null +++ b/debian/po/ja.po @@ -0,0 +1,66 @@ +# Copyright (C) 2008 LaMont Jones <lamont@debian.org> +# This file is distributed under the same license as the bind9 package. +# Hideki Yamane <henrich@debian.or.jp>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg.P1-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-22 00:03+0900\n" +"Last-Translator: Hideki Yamane (Debian-JP) <henrich@debian.or.jp>\n" +"Language-Team: Japanese <debian-japanese@lists.debian.org>\n" +"Language: ja\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 デーモンの動作に使うユーザアカウント:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"デフォルトでは BIND9 デーモン (named) は「bind」ユーザアカウントで動作しま" +"す。異なるアカウントを使いたい場合は、適切なユーザ名を入力してください。" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "起動時に named に指定するオプション:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"BIND9 デーモン (named) の起動時に指定したい (ユーザ名以外の) 追加オプションを" +"入力してください。" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf の設定を上書きしますか?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"このマシンを移動した際、リゾルバがローカルの BIND9 デーモン (named) を使うよ" +"うにするか、現在の接続先で推奨されるネームサーバを使うようにするかを選んでく" +"ださい。" diff --git a/debian/po/ko.po b/debian/po/ko.po new file mode 100644 index 0000000..9da0f6f --- /dev/null +++ b/debian/po/ko.po @@ -0,0 +1,69 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: debconf template\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2011-06-24 18:37+0900\n" +"Last-Translator: 강민지 <justminji@gmail.com>\n" +"Language-Team: opensource <justminji@gmail.com>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Korean\n" +"X-Poedit-Country: KOREA, REPUBLIC OF\n" +"X-Poedit-SourceCharset: utf-8\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 데몬을 실행하기 위한 사용자 계정:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"기본값은 '바인드' 사용자 계정에서 BIND9 데몬(지정된 이름)을 실행합니다. 다른 " +"계정을 사용하려면 해당 사용자 이름을 입력하세요." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "지명된 다른 시작 옵션:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"BIND9 데몬(지정된 이름)이 실행으로 전달되기 위해서 추가옵션(사용자 이름 이외)" +"을 입력하세요." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "resolv.conf 설정은 재정의 되어야하는가?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"이 기계가 근처로 이동될 때 해결자는 현재의 연결을 권장하는 것보다 로컬 BIND9 " +"데몬(지정된 이름)을 사용하도록 강요해야하는지 여부를 선택하세요." diff --git a/debian/po/nb.po b/debian/po/nb.po new file mode 100644 index 0000000..2d42047 --- /dev/null +++ b/debian/po/nb.po @@ -0,0 +1,69 @@ +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Bjørn Steensrud <bjornst@skogkatt.homelinux.org>, 2012. +msgid "" +msgstr "" +"Project-Id-Version: \n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2012-01-03 21:33+0100\n" +"Last-Translator: Bjørn Steensrud <bjornst@skogkatt.homelinux.org>\n" +"Language-Team: Norwegian Bokmål <i18n-nb@lister.ping.uio.no>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Language: nb\n" +"X-Generator: Lokalize 1.2\n" +"Plural-Forms: nplurals=2; plural=n != 1;\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Brukerkonto for å kjøre BIND9-daemonen:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standard er å kjøre BIND8-daemonen (named) under brukerkontoen «bind». Skriv " +"inn et passende navn for å bruke en annen konto." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andre oppstartsvalg for named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Skriv inn flere valg (annet enn brukernavn) som skal sendes over til " +"BIND9-daemonen (named) ved oppstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Skal innstillingene i resolv.conf oveerstyres?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Velg om adresseløseren skal tvinges til å bruke den lokale BIND9-daemonen " +"(named) i stedet for det den gjeldende tilkoblingen anbefaler, når denne " +"maskinen flyttes omkring." + diff --git a/debian/po/nl.po b/debian/po/nl.po new file mode 100644 index 0000000..b710b34 --- /dev/null +++ b/debian/po/nl.po @@ -0,0 +1,72 @@ +# translation of bind9_1:9.5.0.dfsg.P2-1_nl.po to Dutch +# translation of bind9 debconf template to Dutch +# Copyright (C) 2008 THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# +# Paul Gevers <paul@climbing.nl>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P2-1_nl\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-09-17 21:15-0500\n" +"Last-Translator: Paul Gevers <paul@climbing.nl>\n" +"Language-Team: Dutch <debian-l10n-dutch@lists.debian.org>\n" +"Language: nl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "" +"Gebruikersaccount waaronder de BIND9 achtergronddienst dient te draaien:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standaard wordt 'named', de BIND9-achtergronddienst, uitgevoerd onder de " +"'bind' gebruikersaccount. Als u een andere account wilt gebruiken kunt hier " +"de geschikte gebruikersnaam invullen." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Andere opstartopties voor 'named':" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Welke aanvullende opties (anders dan de gebruikersnaam) wilt u bij het " +"opstarten meegeven aan 'named', de BIND9 achtergronddienst?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Wilt u dat de 'resolv.conf' instellingen omzeild worden?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Wilt u afdwingen dat de 'resolver' gebruik maakt van de lokale BIND9 " +"achtergronddienst (named), in plaats van de aanbevelingen van de huidige " +"connectie. Bijvoorbeeld, wanneer deze computer veel verplaatst wordt." diff --git a/debian/po/pl.po b/debian/po/pl.po new file mode 100644 index 0000000..9cc79bd --- /dev/null +++ b/debian/po/pl.po @@ -0,0 +1,68 @@ +# debconf templates for bind9 package +# Polish translation +# Copyright (C) 2008 +# This file is distributed under the same license as the bind9 package. +# Łukasz Paździora <lukpaz@gmail.com>, 2008 +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 9.5.0.dfsg.P2-4\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-11-24 18:30+0100\n" +"Last-Translator: Łukasz Paździora <lukpaz@gmail.com>\n" +"Language-Team: Polish <debian-l10n-polish@lists.debian.org>\n" +"Language: pl\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Konto użytkownika, jako który powinien działać BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Domyślnie demon BIND9 (named) działa jako użytkownik 'bind'. Aby użyć innego " +"konta podaj inną nazwę użytkownika." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Inne opcje startowe dla named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Proszę podać dodatkowe opcje (inne niż nazwa użytkownika), które powinny " +"zostać podane demonowi BIND9 (named) przy starcie." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Czy ustawienia resolv.conf mają zostać nadpisane?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Proszę wybrać czy do rozwiązywania nazw powinna być używana lokalna usługa " +"BIND9 (named), kiedy maszyna zmienia miejsce, czy też powinien korzystać z " +"zalecanych ustawień aktualnego połączenia." diff --git a/debian/po/pt.po b/debian/po/pt.po new file mode 100644 index 0000000..2d3347f --- /dev/null +++ b/debian/po/pt.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg-2_pt debconf to Portuguese +# Copyright (C) 2008 Américo Monteiro +# This file is distributed under the same license as the bind9 package. +# +# Américo Monteiro <a_monteiro@netcabo.pt>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg-2_pt\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:55+0100\n" +"Last-Translator: Américo Monteiro <a_monteiro@netcabo.pt>\n" +"Language-Team: Portuguese <traduz@debianpt.org>\n" +"Language: pt\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de utilizador para correr o deamon BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"A pré-definição é correr o deamon BIND9 (named) sob a conta de utilizador " +"'bind'. Para usar uma conta diferente, por favor indique o nome de " +"utilizador apropriado." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opções de arranque para o named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Por favor forneça quaisquer opções adicionais (além do nome de utilizador) " +"que deverão ser enviadas ao deamon BIND9 (named) durante o arranque. " + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Devem as configurações de resolv.conf ser substituidas?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Por favor escolha se a resolução de nomes deverá ser forçada a usar o deamon " +"local BIND9 (named) em vez do que a corrente ligação recomenda, quando esta " +"máquina está ligada." diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po new file mode 100644 index 0000000..f10725d --- /dev/null +++ b/debian/po/pt_BR.po @@ -0,0 +1,71 @@ +# bind9 Brazilian Portuguese translation +# Copyright (C) 2009 bind9's COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Luís Gustavo Pessoa Sales <vatsu@gmx.net>, 2009. +# José Figueiredo <deb.gnulinux@gmail.com>, 2010. +# +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2010-09-10 22:37-0300\n" +"Last-Translator: José de Figueiredo <deb.gnulinux@gmail.com>\n" +"Language-Team: Brazilian Portuguese <debian-l10n-portuguese@lists.debian." +"org>\n" +"Language: pt_BR\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"pt_BR utf-8\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Conta de usuário para execução do daemon do BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"O padrão é executar o daemon do BIND9 (named) com a conta de usuário 'bind'. " +"Para usar uma conta diferente, por favor informe o nome do usuário." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Outras opções de inicialização para o named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Por favor, forneça outras opções adicionais (além de nome de usuário), que " +"devam ser passadas ao daemon do BIND9 (named) na inicialização." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "As configurações do resolv.conf devem ser sobrescritas?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Por favor, escolha se o resolvedor de nomes deve ser forçado a usar o daemon " +"do BIND9 local (named) em vez daquele que a conexão atual recomendar, quando " +"esta máquina for movida." diff --git a/debian/po/ru.po b/debian/po/ru.po new file mode 100644 index 0000000..b182747 --- /dev/null +++ b/debian/po/ru.po @@ -0,0 +1,70 @@ +# translation of ru.po to Russian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Yuri Kozlov <kozlov.y@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 11:08+0400\n" +"Last-Translator: Yuri Kozlov <kozlov.y@gmail.com>\n" +"Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n" +"Language: ru\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" +"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Учётная запись для запуска службы BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"По умолчанию, служба BIND9 (файл named) запускается с правами учётной записи " +"'bind'. Если вы хотите использовать другую учётную запись, то введите это " +"имя здесь." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Другие параметры запуска named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Укажите любые дополнительные параметры (кроме имени учётной записи), которые " +"нужно передать службе BIND9 (файлу named) при запуске." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Переписать настройки resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Укажите, хотите ли вы, чтобы определитель имён машины использовал локальную " +"службу BIND9 (named), а не настройки имеющегося подключения." diff --git a/debian/po/sk.po b/debian/po/sk.po new file mode 100644 index 0000000..4ea69c6 --- /dev/null +++ b/debian/po/sk.po @@ -0,0 +1,67 @@ +# Slovak translation of bind9 +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind9 package. +# Ivan Masár <helix84@centrum.sk>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: \n" +"Last-Translator: Ivan Masár <helix84@centrum.sk>\n" +"Language-Team: \n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Používateľský účet démona BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Štandardne sa démon BIND9 (named) spúšťa s používateľským účtom „bind”. Ak " +"chcete použiť iný účet, prosím zadajte príslušný názov účtu." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Ďalšie spúšťacie voľby pre named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Zadajte ďalšie voľby (okrem používateľského mena), ktoré sa majú odovzdať " +"démonovi BIND9 (named) pri spustení." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Má sa nastaviť priorita pred resolv.conf?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Zvoľte, či má sa má vynútiť, aby prekladač adries používal lokálneho démona " +"BIND9 (named) namiesto toho, čo odporúča aktuálne pripojenie, keď sa " +"umiestnenie tohto počítača mení." diff --git a/debian/po/sr.po b/debian/po/sr.po new file mode 100644 index 0000000..98b67be --- /dev/null +++ b/debian/po/sr.po @@ -0,0 +1,66 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: Zlatan Todoric <zlatan.todoric@gmail.com>\n" +"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Кориснички налог за покретање BIND9 процеса у позадини:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Подразумијевано је да се BIND9 процес у позадини (Named) покреће под 'bind'" +"корисничким налогом. Да бисте користили другачији налог, унесите адекватно корисничко име." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Друге опције приликом покретања за (Named):" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Молимо вас обезбједите додатне опције (осим корисничког имена) који би требали" +"бити прослијеђени BIND9 процесу у позадини (Named) приликом покретања." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Желите ли поништити постојећа resolv.conf подешавања?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Одаберите желите ли да аутоматски помагач (Resolver) буде присиљен користити " +"локални BIND9 процес у позадини (Named) умјесто препорука тренутне мреже, када " +"ова машина буде помјерана." diff --git a/debian/po/sr@latin.po b/debian/po/sr@latin.po new file mode 100644 index 0000000..5456ba6 --- /dev/null +++ b/debian/po/sr@latin.po @@ -0,0 +1,66 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) 2011 +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <zlatan.todoric@gmail.com>, 2011. +# +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: Zlatan Todorić <zlatan.todoric@gmail.com>\n" +"Language-Team: Serbian <debian-l10n-serbian@lists.debian.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Korisnički nalog za pokretanje BIND9 procesa u pozadini:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Podrazumijevano je da se BIND9 proces u pozadini (Named) pokreće pod 'bind'" +"korisničkim nalogom. Da biste koristili drugačiji nalog, unesite adekvatno korisničko ime." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Druge opcije prilikom pokretanja za (Named):" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Molimo vas obezbjedite dodatne opcije (osim korisničkog imena) koji bi trebali" +"biti proslijeđeni BIND9 procesu u pozadini (Named) prilikom pokretanja." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Želite li poništiti postojeća resolv.conf podešavanja?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Odaberite želite li da automatski pomagač (Resolver) bude prisiljen koristiti" +"lokalni BIND9 proces u pozadini umjesto preporuka trenutne mreže, kada ova" +"mašina bude pomjerana." diff --git a/debian/po/sv.po b/debian/po/sv.po new file mode 100644 index 0000000..4dbd1e2 --- /dev/null +++ b/debian/po/sv.po @@ -0,0 +1,69 @@ +# translation of bind9_1:9.5.0.dfsg.P1-2_sv.po to Swedish +# Copyright (C) 2008 +# This file is distributed under the same license as the bind9 package. +# +# Martin Ågren <martin.agren@gmail.com>, 2008. +msgid "" +msgstr "" +"Project-Id-Version: bind9_1:9.5.0.dfsg.P1-2_sv\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-07-18 19:24+0200\n" +"Last-Translator: Martin Ågren <martin.agren@gmail.com>\n" +"Language-Team: Swedish <debian-l10n-swedish@lists.debian.org>\n" +"Language: sv\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Användarkonto att köra BIND9-demonen under:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Standardvalet är att köra BIND9-demonen (named) under användarkontot 'bind'. " +"För att använda ett annat konto, var vänlig ange användarnamnet." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Övriga uppstartsval för named:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Var vänlig ange eventuella ytterligare val (förutom användarnamn) som ska " +"skickas till BIND9-demonen (named) vid uppstart." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Ska resolv.conf-inställningar hoppas över?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Var vänlig välj huruvida uppslagaren ska tvingas använda den lokala BIND9-" +"demonen (named) snarare än vad den aktuella uppkopplingen rekommenderar när " +"den här maskinen flyttar runt." diff --git a/debian/po/templates.pot b/debian/po/templates.pot new file mode 100644 index 0000000..6001e43 --- /dev/null +++ b/debian/po/templates.pot @@ -0,0 +1,60 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" +"Language-Team: LANGUAGE <LL@li.org>\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" diff --git a/debian/po/tr.po b/debian/po/tr.po new file mode 100644 index 0000000..3d44ff8 --- /dev/null +++ b/debian/po/tr.po @@ -0,0 +1,70 @@ +# turkish translation of bind9 debconf template +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# Mert Dirik <mertdirik@gmail.com>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-15 23:31+0200\n" +"Last-Translator: Mert Dirik <mertdirik@gmail.com>\n" +"Language-Team: Debian L10n Turkish <debian-l10n-turkish@lists.debian.org>\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Poedit-Language: Turkish\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "BIND9 bekletici programının (named) kullanacağı kullanıcı hesabı:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Öntanımlı olarak BIND9 bekletici (daemon) programı 'bind' kullanıcı " +"hesabıyla çalışır. Farklı bir hesap kullanmak için kullanmak istediğiniz " +"hesabın adını girin." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "'named'in kullanacağı diğer başlatma seçenekleri:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Lütfen BIND9 bekletici programına (named) geçilmesini istediğiniz, kullanıcı " +"adı dışındaki ek seçenekleri yazın." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "'resolv.conf' ayarları ezilmeli mi (override)?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Lütfen bu makine gezerken; çözümleyicinin o anda kullanılan bağlantının " +"önerdiği sunucu yerine yerel BIND9 bekletici programını (named) kullanmaya " +"zorlanması gerekip gerekmediğini seçin." diff --git a/debian/po/vi.po b/debian/po/vi.po new file mode 100644 index 0000000..99865f7 --- /dev/null +++ b/debian/po/vi.po @@ -0,0 +1,67 @@ +# Vietnamese translation for Bind 9. +# Copyright © 2008 Free Software Foundation, Inc. +# Clytie Siddall <clytie@riverland.net.au>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind9 1:9.5.0.dfsg-2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-06-14 15:35+0930\n" +"Last-Translator: Clytie Siddall <clytie@riverland.net.au>\n" +"Language-Team: Vietnamese <vi-VN@googlegroups.com>\n" +"Language: vi\n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Generator: LocFactoryEditor 1.7b3\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "Tài khoản người dùng để chạy trình nền BIND9:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"Mặc định là chạy trình nền BIND9 (đặt tên) dưới tài khoản người dùng « bind " +"». Để sử dụng tài khoản khác, hãy nhập tên người dùng thích hợp." + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "Tùy chọn khởi chạy khác cần đặt tên:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "" +"Hãy nhập vào đây bất kỳ tùy chọn bổ sung (khác với tên người dùng) nên gửi " +"cho trình nền BIND9 vào lúc khởi chạy." + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "Co nên ghi đè lên thiết lập « resolv.conf » không?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"Hãy chọn có nên ép buộc trình giải quyết sử dụng trình nền BIND9 cục bộ (đặt " +"tên) hơn là kết nối hiện thời đề nghị gì khi máy này ở nơi khác." diff --git a/debian/po/zh_CN.po b/debian/po/zh_CN.po new file mode 100644 index 0000000..9296c1a --- /dev/null +++ b/debian/po/zh_CN.po @@ -0,0 +1,64 @@ +# Chinese translations for bind package. +# Copyright (C) 2008 THE bind'S COPYRIGHT HOLDER +# This file is distributed under the same license as the bind package. +# LI Daobing <lidaobing@gmail.com>, 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: bind 9-9.5.0.dfsg.P2\n" +"Report-Msgid-Bugs-To: Source: bind9@packages.debian.org\n" +"POT-Creation-Date: 2008-06-13 16:56-0600\n" +"PO-Revision-Date: 2008-10-04 14:36+0800\n" +"Last-Translator: LI Daobing <lidaobing@gmail.com>\n" +"Language-Team: Chinese (simplified)\n" +"Language: \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "User account for running the BIND9 daemon:" +msgstr "运行 BIND9 服务的用户账号:" + +#. Type: string +#. Description +#: ../templates:1001 +msgid "" +"The default is to run the BIND9 daemon (named) under the 'bind' user " +"account. To use a different account, please enter the appropriate username." +msgstr "" +"缺省使用 'bind' 用户来运行 BIND9 服务(named)。 想使用其他的账号, 请输入合适的" +"用户名。" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "Other startup options for named:" +msgstr "named 的其他启动选项:" + +#. Type: string +#. Description +#: ../templates:2001 +msgid "" +"Please provide any additional options (other than username) that should be " +"passed to the BIND9 daemon (named) on startup." +msgstr "请提供需要传给 BIND9 服务(named)的启动选项(用户名除外)。" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "Should resolv.conf settings be overridden?" +msgstr "是否覆盖 resolv.conf 的设置?" + +#. Type: boolean +#. Description +#: ../templates:3001 +msgid "" +"Please choose whether the resolver should be forced to use the local BIND9 " +"daemon (named) rather than what the current connection recommends, when this " +"machine moves around." +msgstr "" +"请选择是否强制使用本地 BIND9 服务(named)来做域名解析, 而不是使用当前连接所推" +"荐的域名解析服务器, 特别是当机器需要移动时。" diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..14071f2 --- /dev/null +++ b/debian/rules @@ -0,0 +1,104 @@ +#!/usr/bin/make -f +# Sample debian/rules that uses debhelper. +# GNU copyright 1997 to 1999 by Joey Hess. + +export DEB_BUILD_MAINT_OPTIONS = hardening=+all +DPKG_EXPORT_BUILDFLAGS = 1 + +export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE + +export DPKG_GENSYMBOLS_CHECK_LEVEL := 4 + +include /usr/share/dpkg/default.mk + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +COMMA = , +ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS)))) + NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS)))) +endif + +export arch = $(DEB_HOST_ARCH) + +ifeq ($(DEB_HOST_ARCH_OS),kfreebsd) +EXTRA_FEATURES=--disable-linux-caps +endif + +SED_VERSION_EXTENSIONS := \ + sed -e 's,^EXTENSIONS=,EXTENSIONS="$$(dpkg-parsechangelog --file=../debian/changelog | sed -n '/^Version/s/[^-]*//p')-$$(dpkg-vendor --query Vendor)",' + +%: + dh $@ --with python3 + +prepare_version_extensions: + if [ ! -f version.bak ]; then \ + mv version version.bak; \ + $(SED_VERSION_EXTENSIONS) < version.bak > version; \ + fi + +clean_version_extensions: + if [ -f version.bak ]; then \ + mv version.bak version; \ + fi + +override_dh_autoreconf: prepare_version_extensions + dh_autoreconf + +override_dh_auto_configure: + dh_auto_configure -- \ + --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \ + --sysconfdir=/etc/bind \ + --with-python=python3 \ + --localstatedir=/ \ + --enable-threads \ + --enable-largefile \ + --with-libtool \ + --enable-shared \ + --enable-static \ + --with-gost=no \ + --with-openssl=/usr \ + --with-gssapi=/usr \ + --with-libidn2 \ + --with-json-c \ + --with-lmdb=/usr \ + --with-gnu-ld \ + --with-maxminddb \ + --with-atf=no \ + --enable-ipv6 \ + --enable-rrl \ + --enable-filter-aaaa \ + --disable-native-pkcs11 \ + --enable-dnstap \ + $(EXTRA_FEATURES) + +override_dh_auto_build: + dh_auto_build -- all doc + +override_dh_auto_clean: clean_version_extensions + dh_auto_clean + +override_dh_auto_install: + dh_auto_install --destdir=$(CURDIR)/debian/tmp + +override_dh_auto_test: + : + +override_dh_installinit: + dh_installinit -pbind9 --name=named + dh_installinit --remaining + +override_dh_installsystemd: + dh_installsystemd -pbind9 --no-enable --name=named-resolvconf named-resolvconf.service + dh_installsystemd -pbind9 --name=named named.service + dh_installsystemd --remaining + +override_dh_install: + dh_install + # Install apparmor profile + dh_apparmor -pbind9 --profile-name=usr.sbin.named + +override_dh_missing: + dh_missing --exclude=.la --exclude=lwresd --exclude=__pycache_ --fail-missing + +.PHONY: prepare_version_extensions clean_version_extensions diff --git a/debian/source/format b/debian/source/format new file mode 100644 index 0000000..163aaf8 --- /dev/null +++ b/debian/source/format @@ -0,0 +1 @@ +3.0 (quilt) diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 0000000..21bbc87 --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,9 @@ +Tests: simpletest +Restrictions: isolation-container, needs-internet, needs-root +Depends: bind9, + bind9-dnsutils + +Tests: validation +Restrictions: isolation-container, needs-internet, needs-root, flaky +Depends: bind9, + bind9-dnsutils diff --git a/debian/tests/simpletest b/debian/tests/simpletest new file mode 100644 index 0000000..49ca351 --- /dev/null +++ b/debian/tests/simpletest @@ -0,0 +1,21 @@ +#!/bin/sh + +set -e + +setup() ( + service bind9 stop + service bind9 start +) + +run() ( + # Make a query against a local zone + dig -x 127.0.0.1 @127.0.0.1 +) + +teardown() ( + service bind9 stop +) + +setup +run +teardown diff --git a/debian/tests/validation b/debian/tests/validation new file mode 100644 index 0000000..bf10e12 --- /dev/null +++ b/debian/tests/validation @@ -0,0 +1,28 @@ +#!/bin/sh + +set -e + +setup() ( + service bind9 stop + service bind9 start +) + +run() ( + repeats=10 + while [ "${repeats}" -gt "0" ]; do + # Make a query against an external nameserver and check for DNSSEC validation + echo "Checking for DNSSEC validation status of internetsociety.org" + dig -t a internetsociety.org @127.0.0.1 | grep -E 'flags:.+ad; QUERY' && break + repeats=$((repeats-1)) + sleep 1 + done + [ "$repeats" -eq "0" ] && exit 1 +) + +teardown() ( + service bind9 stop +) + +setup +run +teardown diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 0000000..3750f41 --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,151 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGNjen4BEADDHiUVNbkFtiKPaMWjKxbKmF1nmv7XKjDhwSww6WFiGPbQyxNM +r8EHlEJx5kMT67rx0IYMhTLiXm/9C4dGYyUfFWc35CGetuzstzCNkwJs7vZAhEyk ++06CX4GFiHPOmWIupGCxFkNz1Qopz3ZePMlZRslVCHzW4dbg5NKLI0ojXlNaTDU5 +mgUXpsPi/6l6QE6q3ouvmWPF4u71cZ1+W4UkIRAXOlbVsDzGaMaoHjJd8cOM8DrZ +gKHACNPjzqOvEujXDC2vyKw6XpxR+pHz0QcrRtlKnVhPNiKcDfw2mJJ5zxi9uSDc +dh5FomMn9sS4gy2Tub2urELnPf9xnURftRGG3VO6nZc81ufQB4s1BNT2ny0Uhx5V +mXUJwefMypMBfAvWCWBCeyWYtBeo7LT3NmtLq3oVGPfl7+a0ToFAYeghspK8/nOX +6/fqF1MEtzvWjXljz6K7FSDYSY9AoaESLHGwCo6dtff5S7f1+l6PCUNo6aM/B5Ke +SIAN9Lm6z2iVuy9Lukw+5IRoRKHHV4rJauPtDeYoWnNiSd7Q4vFtotUIjRpDARpm +xWS711Q2T+knHFLEiU8QzxjLhOnTzh4n9dDLHCkOY5WM5krldVeL5EuTyPKinuSn +oE01A7I4IGJp753CshibxjNYDiEOVeK93R38Y543edlIrYxnfyMVsiqPkwARAQAB +tDRNaWNoYcWCIEvEmXBpZcWEIChDb2RlLVNpZ25pbmcgS2V5KSA8bWljaGFsQGlz +Yy5vcmc+iQJOBBMBCgA4FiEEcGtsKGIOdvkdEfffUQpkKgbFLOwFAmNjen4CGwMF +CwkIBwMFFQoJCAsFFgIDAQACHgECF4AACgkQUQpkKgbFLOwiLxAAjYuI4JQ8mPq7 +YrV9m4tu+jOKvoKfpjct2Rh02n/X3ChOgrdcXU898eH56tRk8Mv/E+cBTPN9zQn6 +rLprbYR2t2R+zgvuUZWA8In7aewoPIJw8OdlG0gTK9m3VHJIOhIX07qcFttSZw4m +4rEU5mdxi9FatBWBzqnVm4Pn577aqRXK908j+6TvgWbZ6Cq0tw3syVT4kGj+93+P +uIQQQkTYN8UDQPsAKzfzkbQC9I5YXBKUoB9CfhXig8V9N75R0gsWkJ8Vy/8wsPXT +9/EPIIzhnhSuUIjvvBPbLGrzDgbhrfUQ/QVuXDVN8xl3rAWM/tiNGOnmzoYORyM5 +ftrnCDIaO4aVKR6rtEzfdQa5Kid1StfhFien/U8jYErxkEn2HRt2gVEX5nYq31T+ +0jgVode2Dzkm4+HKHmfOYsQeC07Mu6wZw9raNYqFjTcfh0ajFpLIT3j2YqOJE2jy +KbcveJcy2NiOiUl13exIZuBkZm0wEVbvgVX1PlgL3GJqnbU/Q+maRTb8FBoQVsOd +GIm7U/phU91qR+00SkOcp2LgHCCNKrmHXgiBNYBbInNIp6ze3bFvfKTRFn8WdY9v +Z7vNfKar8rt90mpjYG9qMhmvh4E9icfp3wRUtOwyi7VVtVTTUq0iFTe2C0m0v6KW +XcDwwwaTbl79BOqOH3Gp1flS2ECBsyiZAg0EY2N8xQEQAMWcyZbpxEyefX4JTszG +ocpz8C8yqvZJQUfoDK5AecQWR7OegPkIqwJcHEH5cz+MduklXNQdra/snn6pxGig +At3xCwfzRTH/aYXdjcjnma1elzZSTgk6Maw4zR/W9wea2DcUtMCcsys0gviN/VUe +Aqt+5pmhy2PlEWfJG+Mzyrqgz3Q8hRyAJAKONAwNhs1A4ZqQX/6iuCkJbH1CBeoW ++c+5qJHYEXsx25qR1yiKOFo5b90QOcwaebUq+xKQRlnESn75FTgDjDfDm9BqrHcn +Tv79kOuIN5vhz4BCsuo5QbNu4RGrs/1VSTPvMf5AN7xs9pYNMAEde7pSF1Ps3B5p +CE6iUw9L53ytV4iJQKXpzG29LofUu65YQjIXPgK7NbBO7FUHA41YbSfoWiOAjfMh +iE025YM2+RPQh/Nrc3PqBj4h21ycT+d8eEXKfc/okbVFFE9dKS1hUwKgSrs7baOG +CBZdpiB+t3jWrr8UrteALab7v0rndco3QKOe9U3f+Gm3MdgLK1TGiRgpdyiIXEel +J7zhsdoYEvaKMgUOjhf+COdlf8b9ITg93mDKe8h0OcpirCXw4O2ma3sklabzZKZf +CPhhja6Ro5gmO5pxaLau+esQWNrjEikynNIs+GRphtcFsVVH+ww26mR0nI65Llgv +kb4+DrbDGSPP6R/C2q/LMLM1ABEBAAG0ME1pY2hhbCBOb3dhayAoQ29kZS1TaWdu +aW5nIEtleSkgPG1ub3dha0Bpc2Mub3JnPokCTgQTAQoAOBYhBNmczq+Hl0cBTwON +YxguI1eUYu+qBQJjY3zFAhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEBgu +I1eUYu+q9IAP/j/GGneuvjwbXdATiQAmkiFlOxjs+SsO/hgA/mmWcm+Kpg4cAlbP +C2xEDa6biJyZ8TmLZEqPNrRm/umiisC8JnIJpIbInn42n4aDCRDW35lrYGdnP1Ft +fexnEOWAJBDRVvh9OnfRfvf+HLFfLFl40b/15YzkTYGIfrMR9y8zalkzXxsVNsyr +9Eq2pmYR7BT2z8d/9SAVuh8D3qgUylIgcFcCFJodsrI4zJSpIMfMntwVsZxDlis8 +JVFN8/pfhuBBe6vjqX/cGJnj6OL3T12jvvniv13W3rar2Ocm6XA9j1t5TZNhKqAy +azAKu52NtdJjh25B6C/H+haXAX1eduCCE74uSarqS3F1wf6JI3p8fnWzk4hZNzxp +nZjIk3vrHNjE4jXTZosXCf5DoVRfMpNbxj3YEnXV+kNZQRYPPatUPgFYbxz91hbN +tHyCiy0GmTyf0QId8LTc0y9mPtP9QureJJ6rL8lt7pvXyrYglqhxDgRhJIGKMKdw +0bQtTEF4tyNzC4/sg4/omAGH66clhXlqMmuUjHSUiQyA4LL1mJl63Q+bwqXX4B8t +898tSUmb4Jmg3jLZ3Z9Hl7H8Sp3yYPOLzb2YUF6w3xFsUrNNzVxHFo8tAtEhtEfX +D+ypkowZq8g41WqMlOBrrzQFuExUSXckH2Cn97lV6lkBoueqxP+Zv0bbmQINBGNj +qIkBEADDw/CKszyuFKpVp4Z26rKJ3ooOlp8p9a+fmfuknPtMjJMSX8xK8pOlK739 +K83yvDRUidT4+R9IAUKM7TqGA0hoPZmZQLiK0YLlAAXufKxO9IsDZI/7DuF2d8fu +usKQfS4oJC/IbzOAVwgwodnvKhttLWutT09GxiHrnfVPu6Uf4A+GWtrcTIWhXuxE +m7+16ToxBOTLtQ3hh79/RndUuM0ldKRRzJUzASGIPmdQJDLCKgSSeaGjZAdq6gkl +qT/K/R8eoLWSOaBRq8lBE1k7Tq4nSwthMHtCQq4+vxFWH3VF9hwy6ixccROPqt9s +fNfJK3KF4KGhfejMuVn/Lxp1v+Ne2DsdnVofFakAbBMpMyauzAyXPncYSfFhzLBD +kkn7THkfRznmHD8ux89kV534EyqYLjAy8AAD6zNc3tSYgfC0UUw7yz05Sl/eV9Xc +pbezu2ipONlXko8jpCQiiHck599cy+StrjjYPwcHF5m8uUlNnzHoUj8qsoK5SA8u +RnTW2I4DFbL0+x8eL7gmNQYFdMaA4azogtaTFWgPL2jPJ3B+/bUfHDZflvR0FB5+ +OD/QHsDv4SB6uX8TOhGbFsHpt7E0scb2U9B8gQeQQJZ3jmcIRp+K18mjYh/ErDFW +23ixBe7h3tn2MGUTOhv1ibOYDE3GYBuGLQiom6yhCs8zrneuAQARAQABtDFXbG9k +ZWsgV2VuY2VsIChDb2RlLVNpZ25pbmcgS2V5KSA8d2xvZGVrQGlzYy5vcmc+iQJO +BBMBCgA4FiEEAlmjO19aOkRmzzRcel4ITKylGIQFAmNjqIkCGwMFCwkIBwMFFQoJ +CAsFFgIDAQACHgECF4AACgkQel4ITKylGIRk9g//XrvOYy9zQkpo4Dkol8yLxr99 +Dq9Ur2v8F5Ba4za4QdUxeYrlq8J827mkUqMtnlyb/+3zSMy2I6HAI8QxlDZL5K0g +Gm7iLrwVTM8nAQiNU5vAe4D6PeO5ATBEvRdAUTQGz4xeaTrUXbmNUSC1dZEPvH1z +Fa/Z1WZoy9GLeuWDXix6OXTP8FlQWUTL4/ILLtfJDsWCCX7efkyfnvad8Ye2NfU9 +tBjRX5QQ0Dpvgpr8/7El44XcmaHxPWEiq8X2p/d6j3nU/7LspUXRu3ptu5Q2RqMM +iRDZme2c8zieHETpC7m5sshzGxRtT5jWEtZ6V37On5DNTObvXCiaGV95qgiHi5VG +s3MFD3QSo1jJI951k68UM8V+OnzbJGN7TezZ3fTn5Pwdd4C4035QMl0E5NXCcXc8 +9d+3DeFmewRRGCaOKPuO/jFPLWcwMlQqp5tkNx8LpqEZfD7/t6FrSvDUsUDU8Rn0 +TQILnUZioO68HmeuJbhKaUCMuZGjBIbBqviiufFRiJuEFOVKADQ1u/P5ct/0T/gE +JAho3aubzdYMH5DLsaw03W5KfOjeTLW10zSmSK65wnR6fdwlo5l/Sg6Z63QXD+/H +/OIFgzviJkyoh6MkH55z2K8BDWbhOmaUBjNAcQEXV1KyHeLDkQ+TJfLjctv4KIpv +D7i6kNIp1b6OSdDS9W+ZAg0EY2OzdwEQAMRWPO237ohaXNpKO+dw1qkfOYYisiTQ +yfkT7BG0Xvu8jxeOdRuvUzzplgOfwWhOQkyEEXd205/PpwReeeRwhiu0BDSrzYGM +KZdw9Bw4enoaOinf5WTqM76mc5WUYfvDJIiHies+ANxj4EqTzvSif9hxvvzrbKYV +lHdaGtLm40D6yZSzDEe3X49DmEABM4g/Bs7NfVJcJ3LtLo6qbLy2tKEgNPW+VN/s +harufucxnH5HM6BUUOGZx8L04UCNJu+jvZ0zjLc5DqubNO1526kZclAo94DfTkb+ +ir9nxKn7RkdcseibeYPdeIh3le6aU6M0KhTJs3RCxaQF9At08Vrrkh+wkK2Jr5QW +bs8cHpEJ+Q7BwDuAQetFi94eq7Sswh4mjhJ6ZnFCx8v9EbQnvL76afMbhZOezpaQ +aAwXVuIio2fsJpHfxWnXb93H1QKiOQdBZZLQGowcFQCqAWg7h2FwWWbKMV1smGHr +/28tLZtk/4aSCd9cZ9+nofFPPemPLbYwnBECIZN21QKZ2oBXKxb3hchy4EBTKWtC +G/fbTsjSfTCUpMNZ57HO3rGXchjSdIf+tTGJpAqWkTcXuhWXBMWPK6/2REk/DKis +XHugHg9R9hqGs2DaMpGh5NrOLly9+0dsjU15iTQucXbCS9895bRtmDjIN8dLSo9H +6DDw4yO7SHTlABEBAAG0NE1hcmNpbiBHb2R6aW5hIChDb2RlLVNpZ25pbmcgS2V5 +KSA8bWdvZHppbmFAaXNjLm9yZz6JAk4EEwEKADgWIQQJCioHkj+SW1dngDpC5d94 +yDJx2wUCY2OzdwIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRBC5d94yDJx +29U0D/41C8WaGEphQW1N5lT/1284qiPuz3w3iSciAAoAe8iHUGBcSNpAWQmWvWXI +buKb92Gtt8JtSOHwQj8qiHjqRsUu02t/tEgQMQUq6p2jqbxODJfHR8oMFMMB0i0I +RgKtEQeq5wRJpVtH+zIFSl9PorsJtHHfhVbqxvE/axcNKa+WaqZdHuKMqADupQEw +6rD7yYVX6YPiHxMhba2AAAoHT/3VpHC0JidZ5BWGwkfnGbV1/7O91GHfJx6KN/AK +DKb5hFl4TrieDLJzphBWg0y4FJ4K7WSIKvcT2cLel9f9pHV6ysqSZWkCbkjkaVIi +LyoA0o7l263WU0D5oG2ihW6Pa2YrWHDDjfTem+kOEFsMjN+Gw74I4KWUBtldfnHK +A8TyeviKkVok1lwDAoJ3LJi/bcyCLgBZLInOU31mQ7mIXq1ENCOIvQvaG0Lwdt59 +sBI8sknHkt+54t/VCaKbWSBOzgGur6EDf9WtPHWvHNCKEleDiHCELdhRYYtENO7T +vTv6Fq6Lh26dor26LnARLPvGLAKwONJ0vlTEG8IyoD5AHz9MwdXYgzh8wIvc/HtD +/0FlQGLd0WYVI6UjZfPxHOZAzARJKXLJMqiSn8hnO8v6JZaUcOF0yRKTKtzqsjzU +v9TubCGdQAaCSCaD2fmA0BEs/FpOnZ8P1fXMpcHGEtMV0qc0wZkCDQRjY7/GARAA +ubCCHkdiMblMA9ZlcOVN1Wep7TuYxQouATTb+73iHDQRNIU7DvluHoSq5zJe1Qst +zjTmtlkr2dyI5JnBexUEKrw2X7gPXfLaXY01gLLB/Jn8tU9VxPqBybxmjmEdP58B +I7BwmCyMYNqDuvPSfTMlogH/pF35Al+c8UbOfDEQqxSO2nKPNa4T5ZoVxvMxV4gn +hEJPv8Xte/wiE+CxxbmO2we6rwJjWe7O3T0mNmqvpO8iIsLlQnwTFD5L1huywPc0 +UDHK0nl8k2lkue2buaOiancLatXt/i+L1DIimCgZwOt3DlVLURH5lz5ALXE/fn+5 +wKkp+XVyNTAEFhSGifgBDYFw3nZeRTU7unMsRssL8SjuwPWoCcRI/3VE08xCuXc+ +h6NpGfeJjLRgUSSBF+958djY320TcXaRLrqRhjcJ34dBsDYsRSC15nnq2JU6Vj5t +rJL9qOdwVAFwKeAfROUULcy/LHZ3QgKLN5jOfdqYzE2KHk1+VANttRPTG34i6uq6 +yzCFFYadwST22+QWvxh2ohYj2INvvrzRf3lVxssWyb4USB0JPajgnGeNY/hSYfDa +KArqOr9S+3q7h0v4RgoPxDRFIC8v/10W4wPC7R3wj0m/1WHkSm951Wtzq3V84uCF +LLhx2ByNpnJFRFqklonAH3WHUIeYcdXAsTeunrGU/XsAEQEAAbQuR3JlZyBDaG91 +bGVzIChDb2RlLVNpZ25pbmcgS2V5KSA8Z3JlZ0Bpc2Mub3JnPokCTgQTAQoAOBYh +BJWA1r8syA8eO7ESUt6rkdVLE8m4BQJjY7/GAhsDBQsJCAcDBRUKCQgLBRYCAwEA +Ah4BAheAAAoJEN6rkdVLE8m42PwP/RFmUzgsoM23Z/NQ2AacCFTmHweEllkmf+25 +3hP80BuSHKsdzlmllFux+xbKZEpQK0nL3fqW8yyv69WmsoKZPpZJxmQ6bwUbtXC7 +rHkt5gfOXiTaxDBmgO2dcnDsKLb+bEQ7C5hay1P8rOvf13a4UZeTP37gRGmMr38+ +LvADIspIxBdSvFa7Hb4HKG4VVDai8jaPCF0q8daEWMJxyKSfOQBtSVVAzjLcGrYR +bCPDAI1DEASyQOru52WREe4vJCwSaq9dZyGhaWcnyTVQO8bsSLxu7cUVxA3SOheQ +izYKkYNbaBDmWlZxLYFsTUf5izEYdW5BwHaowmw22hSspFod+c37BoY/ePfkR5iQ +YuEff/unyqvdHMDqIXWZqpAi5o5hW3jdCd7ZL5T0WWjz4CQ8eko1ZYYnYzZlDrge +F0veW8+lzHBLx3Ad8HyVGwtRe+VV1V0AZ0lpWMtxo02ZDRtqNDqPqVfLT5P87ZPv +r5GhKtedgrjwY2clgmCT0xgAKNxi2SC+c/vI5PRkIoqwbTiryLIYq8tl6T1k6AMY +eN1ZNQR7eNEXpIvYRD/BZw7IWKkCRaKwfDVhUHCm0ikylwdLXIfEEEA5mu2LJeZh +vCddhks0S8+lRyWR/3okurF6rlloNtM1pslceh2AMDwfs3fORhYJxFsV7O7fyRnD +NS93fq56mQINBGNj8P4BEADXK//p0lWEUNUYirsm6BUyUXqPlPrpVTdPB1tJPj1o +zgeMKFOpYRPU1IZF1G6pbKD09gL6y19LehQYx1a57PF7kCx2ZvvcFN24EHto1H1p +Ti48dZ7KyyEO1rBeLY5Zjgz6YvQZcSH3cd6cTrAo7hPIAjtgSTWp04FjtYJqf+tT +gf+9ZWY+i4nQ6/Q5Z5NUd8jsOcOoFDsmY6Fds+lzn0aZSg2yfd8fnX5QFOIwDv66 +aM25q2kvkrX0wtvSQbulC8x5g6fIB3xEL6MWbXcEBYkBMW5Cnw/Kmyj7lJwVwvEO +FFhKaOH/d2LG3rM66gl048aJYLhEJyFSyooBynXs8S/NLDgca94Bvb54FPX8LC3p +lqJRLxhdkha5NLcUYiHOq/L7LWdThh5rRAy87Ggog8TVza118K3oiYujlyVEzLhB +NVMT8x5kl15YknVgOKJAv9j28bSZihHrS7aga1BtYFD8yA9MuuDaHARV6YmThkdg +OEz/PNECjsxCLcT5Bbthzg6Jg1qo3Unyeup0UbyX4zxSphCVmerDmMYddLjJ/ydc +1uxyn4IPINBSx2sAPuUIymhVC29MB6N+SnB37/poTvSsIH15Vg264OVdaervIpuC +W3eUANr7zrdO85nc1CTWGhugFwccXv9nyxAt8zUF/ci17p1/mLpy9K3LqlStVI9j +MwARAQABtDBDYXRoeSBBbG1vbmQgKENvZGUtU2lnbmluZyBLZXkpIDxjYXRoeWFA +aXNjLm9yZz6JAk4EEwEKADgWIQT8h0w+P+hncHCscb617/asfhrd+AUCY2Pw/gIb +AwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRC17/asfhrd+HM6D/9KD/n245Fq +jVzew92lJtufAxAFkTA5WO6fXweMlUeqMOub4vpVMLPLoFe5TzWbJMtF0m/P5+aU +YbcvZBWFHsrnwTgA55c1VrhggLOxpw4EU0TvBdwrO7PFOYc2WznaMG+mJdqw+uNM +yK+G44aIaC6rvi3ILSo5HPnbgQWHs39QIRLLcUjtqvavQQeyYAl0zrvNI9Xrs/Nf +eE6PS4hIXg90A9VJRhay18w9hA+STb+xmK+3oSwP1ayLqqQ43OnV/pExSHBsjBQk +4p1nIPlRFL30lGp/o2MoBsRvQM1tELpgBTk1LaTHzuKEpOskrWU37xu0QgEtj7YE +r0X+GGBxgJuUzqSyLsaDgH1sEDqE+AthFfv2dxDadcXM2cdch9y3OyuSMo89aWGc +mEVyesjYoV40tDCG73qLtfehhV/iARDMCfnZGyGYIZdDBL+tZTNeLKVDIUi/R3x9 +OmpEl8ZuCuYltyEsJnCF/rQBVMgcTOmsMu6CMx+qT3kC8iGtHqkUT2ufpKISahTn +e329FQjClEWwBHkr0T4K80Z0REjSo6UBtio73IOCxXe0RqO37L/qgo8xKZbLxy86 +857PRWJhgbw169FJ2kR5p+M5d/g/MUeYnigvWlORW5LyrFg6RnZ1ZbULZI80QhHN +aSFf/w020HBsLCkzWA/XM6MO2ifJTSn8Ng== +=C1ed +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch new file mode 100644 index 0000000..3b54509 --- /dev/null +++ b/debian/watch @@ -0,0 +1,9 @@ +version=3 + +opts=\ +compression=xz,\ +uversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\ +dirversionmangle=s/((rc|b)\d+)$/~$1/;s/-P(\d+)$/.P$1/,\ +dversionmangle=s/\.dfsg\./-/;s/[\.\+]dfsg$//,\ +pgpsigurlmangle=s/$/.asc/ \ + https://ftp.isc.org/isc/bind9/(9\.16\.\d+(?:(?:rc|b|-P)\d)?)/ bind-@ANY_VERSION@\.tar\.xz |