Serious validation errors in Bind 9.7.0

[Antoin Verschuren]

Binary package hint: bind9

Ubuntu 10.04 LTS still uses Bind 9.7.0-P1 which has serious validation errors.

Please read
http://www.isc.org/announcement/bind-9-dnssec-validation-fails-new-ds-record
and
http://www.verisignlabs.com/documents/BIND-DS-Servfail.pdf

and please backport bind9 in Lucid to at least 9.7.2 before March 31.
Since Lucid is a LTS version, this version is mostly used in production systems as is, with no manual upgrades.

I've writen a simular bugreport without the detailed documentation from ISC and Verisign half a year ago:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/651875

But no action was taken.
If no action is taken before March 31, a lot of validating resolvers will get very busy, and users not able to resolve .com domains.