[FFe] Update mantic to 9.18.18 in preparation for MRE

[Lena Voytek]

Dear Release Team,

Please accept this minor version update as a Mantic FFe.

PPA: https://launchpad.net/~lvoytek/+archive/ubuntu/bind9-update-mantic

[Rationale]

In order to update Jammy and Lunar to the latest 9.18.x version through the MRE process (LP: #2028413), mantic must also be up to date. 9.18.18 is the latest version, and contains the following changes from the current version in mantic, 9.18.16:

Updates:

Mark a primary server as temporarily unreachable when a TCP connection response to an SOA query times out, matching behavior of a refused TCP connection.
Mark dialup and heartbeat-interval options as deprecated.
Retry DNS queries without an EDNS COOKIE when the first response is FORMERR with the EDNS COOKIE that was sent originally.
Use NS records for the relaxed QNAME minimization mode to reduce the number of queries from named.

Bug Fixes:

Fix assertion failure from processing already-queued queries while server is being reconfigured or cache is being flushed.
Fix failure to load zones containing resource records with a TTL value larger than 86400 seconds when dnssec-policy is set to insecure.
Fix the ability to read HMAC-MD5 key files (LP: #2015176).
Fix stability issues with the catalog zone implementation.

For full release notes, see: https://bind9.readthedocs.io/en/v9.18.18/notes.html#notes-for-bind-9-18-18

[Tests]

Local autopkgtest output:
autopkgtest [15:50:04]: @@@@@@@@@@@@@@@@@@@@ summary
simpletest PASS
validation FLAKY non-zero exit status 1
zonetest PASS
dyndb-ldap PASS
qemu-system-x86_64: terminating on signal 15 from pid 59579 (/usr/bin/python3)

validation is known to be broken in its current state, so the failure is expected.

[Lena Voytek (lvoytek)]

Build log: https://launchpadlibrarian.net/685573462/buildlog_ubuntu-mantic-amd64.bind9_1%3A9.18.18-0ubuntu1~ppa1_BUILDING.txt.gz

Upstream changelog attached

[Łukasz Zemczak (sil2100)]

Thank you for filling in this FFe and providing all the necessary information. It's a bit late, but the feature-set changes seem sane. +1

[Launchpad Janitor (janitor)]

This bug was fixed in the package bind9 - 1:9.18.18-0ubuntu1

---------------
bind9 (1:9.18.18-0ubuntu1) mantic; urgency=medium

  * New upstream release 9.18.18 (LP: #2034367)
    - Updates:
      + Mark a primary server as temporarily unreachable when a TCP connection
        response to an SOA query times out, matching behavior of a refused TCP
        connection.
      + Mark dialup and heartbeat-interval options as deprecated.
      + Retry DNS queries without an EDNS COOKIE when the first response is
        FORMERR with the EDNS COOKIE that was sent originally.
      + Use NS records for the relaxed QNAME minimization mode to reduce the
        number of queries from named.
    - Bug Fixes:
      + Fix assertion failure from processing already-queued queries while
        server is being reconfigured or cache is being flushed.
      + Fix failure to load zones containing resource records with a TTL value
        larger than 86400 seconds when dnssec-policy is set to insecure.
      + Fix the ability to read HMAC-MD5 key files (LP: #2015176).
      + Fix stability issues with the catalog zone implementation.
    - See https://bind9.readthedocs.io/en/v9.18.18/notes.html for additional
      information.

 -- Lena Voytek <email address hidden> Tue, 05 Sep 2023 13:20:06 -0700