Please sync bind 9.7.0.dfsg.P1-1 from debian

[LaMont Jones]

Binary package hint: bind9

BIND 9.7 released shortly before functional freeze, and I was diverted by some archive issues that caused me to miss FF cutoff.

9.7 provides some vastly improved support for DNSSEC for the users, and the history of BIND, combined with Lucid being an LTS means that we really want to start with the current version of BIND rather than an old and soon to be unsupported upstream version.

The QA regression suite ran fine against the copy of bind9 in my ppa, and is working fine in my testing.

At the current moment, bind9 is NEW in Debian, so I would propose that I upload a ~build1 version of the package to get it in sooner, and then we sync -1 once Debian publishes

To highlight the checklist points:
# A description of the proposed changes, with sufficient detail to estimate their potential impact on the distribution

Upgrade bind9/lucid source to 1:9.7.0.dfsg-1 from Debian. This is a new
upstream minor release, with significant improvements in DNSSEC support,
as well as a number of SEGV and other issues being resolved.

# A rationale for the exception, explaining the benefit of the change

Supporting 9.6 in 2014 will be a much larger pain than supporting 9.7. The security team would prefer that 9.7 get in, if possible.

# Any additional information which would be helpful in considering the decision
thanks,

Not really anything additional to say.

lamont

[Marc Deslauriers (mdeslaur)]

I would like to see 9.7 get in the LTS release for maintenance purposes.

+1 from me

[Steve Langasek (vorlon)]

This is a process bug. Setting back to 'new'.

[Steve Langasek (vorlon)]

FFe granted.

[LaMont Jones (lamont)]

bind9 1:9.7.0.dfsg.P1-1 is current in sid, and addresses a DoS issue with servers pointed at a stale anchor. This should get pulled into the release.

[Marc Deslauriers (mdeslaur)]

The only change in P1 is a fix for the security issue. This needs to go in.

+1 from me.

[James Westby (james-w)]

2010-03-22 18:18:25 INFO bind9_9.7.0.dfsg.P1.orig.tar.gz: already in distro - downloading from librarian
2010-03-22 18:18:25 INFO - <bind9_9.7.0.dfsg.P1.orig.tar.gz: cached>
[Updating] bind9 (1:9.7.0.dfsg.P1-1~build1 [Ubuntu] < 1:9.7.0.dfsg.P1-1 [Debian])
 * Trying to add bind9...
2010-03-22 18:18:25 INFO - <bind9_9.7.0.dfsg.P1-1.diff.gz: downloading from http://ftp.debian.org/debian/>
2010-03-22 18:18:25 INFO - <bind9_9.7.0.dfsg.P1-1.dsc: downloading from http://ftp.debian.org/debian/>
I: bind9 [main] -> bind9_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> bind9utils_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> bind9-doc_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> bind9-host_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libbind-dev_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libbind9-60_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libdns64_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libisc60_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> liblwres60_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libisccc60_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> libisccfg60_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> dnsutils_1:9.7.0.dfsg.P1-1~build1 [main].
I: bind9 [main] -> lwresd_1:9.7.0.dfsg.P1-1~build1 [universe].