Your message dated Sat, 05 Aug 2017 19:49:40 +0000 with message-id <e1de54u-0005vx...@fasolo.debian.org> and subject line Bug#868952: fixed in bind9 1:9.9.5.dfsg-9+deb8u13 has caused the Debian Bug report #868952, regarding bind9: regression introduced in DSA-3904-1 can cause problems with zone transfers from some non-BIND servers to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 868952: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868952 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: bind9 Version: 1:9.10.3.dfsg.P4-12.4 Severity: serious Tags: upstream fixed-upstream Justification: regression relative to DSA-3904-1 Control: affects -1 security.debian.org,release.debian.org Control: found -1 1:9.9.5.dfsg-9+deb8u12 Control: found -1 1:9.10.3.dfsg.P4-12.3+deb9u1 Hi DSA-3904-1 (and the respective DLA) introduced a regression as described in: https://lists.isc.org/pipermail/bind-announce/2017-July/001054.html "Problems may occur when transferring from another server if TSIG is used *and* the AXFR or IXFR is more than two messages in length *and* the master server does not sign every message. NSD is an example of a popular DNS product that behaves in this manner [note: NSD's behavior is in compliance with the requirements of the RFC; it is BIND that has introduced a problem here.]" Commit in master: https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=58f0fb325bbd9258d06431281eb8fdea2b126305 Commit cherry-picked to v9_9_10_P3 https://source.isc.org/cgi-bin/gitweb.cgi?p=bind9.git;a=commitdiff;h=6fcdcabc11f18eb128167f7f7eca4a244bf75c52 Regards, Salvatore
--- End Message ---
--- Begin Message ---Source: bind9 Source-Version: 1:9.9.5.dfsg-9+deb8u13 We believe that the bug you reported is fixed in the latest version of bind9, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 868...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Yves-Alexis Perez <cor...@debian.org> (supplier of updated bind9 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Jul 2017 15:15:58 +0200 Source: bind9 Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-90 libdns100 libisc95 liblwres90 libisccc90 libisccfg90 dnsutils lwresd libbind-export-dev libdns-export100 libdns-export100-udeb libisc-export95 libisc-export95-udeb libisccfg-export90 libisccfg-export90-udeb libirs-export91 libirs-export91-udeb Architecture: source all amd64 Version: 1:9.9.5.dfsg-9+deb8u13 Distribution: jessie-security Urgency: high Maintainer: LaMont Jones <lam...@debian.org> Changed-By: Yves-Alexis Perez <cor...@debian.org> Description: bind9 - Internet Domain Name Server bind9-doc - Documentation for BIND bind9-host - Version of 'host' bundled with BIND 9.X bind9utils - Utilities for BIND dnsutils - Clients provided with BIND host - Transitional package libbind-dev - Static Libraries and Headers used by BIND libbind-export-dev - Development files for the exported BIND libraries libbind9-90 - BIND9 Shared Library used by BIND libdns-export100 - Exported DNS Shared Library libdns-export100-udeb - Exported DNS library for debian-installer (udeb) libdns100 - DNS Shared Library used by BIND libirs-export91 - Exported IRS Shared Library libirs-export91-udeb - Exported IRS library for debian-installer (udeb) libisc-export95 - Exported ISC Shared Library libisc-export95-udeb - Exported ISC library for debian-installer (udeb) libisc95 - ISC Shared Library used by BIND libisccc90 - Command Channel Library used by BIND libisccfg-export90 - Exported ISC CFG Shared Library libisccfg-export90-udeb - Exported ISC CFG library for debian-installer (udeb) libisccfg90 - Config File Handling Library used by BIND liblwres90 - Lightweight Resolver Library used by BIND lwresd - Lightweight Resolver Daemon Closes: 868952 Changes: bind9 (1:9.9.5.dfsg-9+deb8u13) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Add patch to fix regression introduced by patch for CVE-2017-3042. closes: #868952 Checksums-Sha1: 536a263bf811f76c67c92465ad3adfaf02ffa37b 3120 bind9_9.9.5.dfsg-9+deb8u13.dsc d831609ac116a75bea0fcfb1e837cdd0706c9099 134768 bind9_9.9.5.dfsg-9+deb8u13.diff.gz f9b60a8de2e02a3747c027619b928794b7a12ae0 339912 bind9-doc_9.9.5.dfsg-9+deb8u13_all.deb f14bc7d3027f28adf03adefa578966a1fc35bd2d 24086 host_9.9.5.dfsg-9+deb8u13_all.deb a242d370ed309599eb59f420fb547e19d0ed9a4f 315346 bind9_9.9.5.dfsg-9+deb8u13_amd64.deb 61bb71937316ae9396594e81be50dfb95caf3c08 168224 bind9utils_9.9.5.dfsg-9+deb8u13_amd64.deb 292b0c260051bee4951c5200c5a4dd416482b6a2 68116 bind9-host_9.9.5.dfsg-9+deb8u13_amd64.deb 4527dabc24321c544ca808997a063bcae285766b 1234458 libbind-dev_9.9.5.dfsg-9+deb8u13_amd64.deb b67294461195eb766e1e3f6a3a0617b1cf79c317 43918 libbind9-90_9.9.5.dfsg-9+deb8u13_amd64.deb 59e0db95ae5985430ee6c01811e83e38a57dcbf2 681320 libdns100_9.9.5.dfsg-9+deb8u13_amd64.deb 57ef78905a141eca22c888d9201b26843ad2131a 169064 libisc95_9.9.5.dfsg-9+deb8u13_amd64.deb c6a4ec5ef97d713bb7ca17c87745f4643c52028d 53608 liblwres90_9.9.5.dfsg-9+deb8u13_amd64.deb dbb61244a53d9ddb406b656671d86af0bea8cdc8 37154 libisccc90_9.9.5.dfsg-9+deb8u13_amd64.deb 49981e381fa23069849589875bee09597e170704 57784 libisccfg90_9.9.5.dfsg-9+deb8u13_amd64.deb c24c8ee31f30798096c4214517eaa9c906cb9541 119258 dnsutils_9.9.5.dfsg-9+deb8u13_amd64.deb d062440e5dbd49aac1fb90219e6ded878d070fd9 232244 lwresd_9.9.5.dfsg-9+deb8u13_amd64.deb f0cedaef17e2893386ed91d17084b2e6db20e871 828688 libbind-export-dev_9.9.5.dfsg-9+deb8u13_amd64.deb eaf8048447b984c57c2011f4a533bfe4cf59e63f 456946 libdns-export100_9.9.5.dfsg-9+deb8u13_amd64.deb c69a69ce3284c3529b483419694dffbf9393eabf 433570 libdns-export100-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb 325ab2849a120e284667cfc94be1818939d8d73c 141142 libisc-export95_9.9.5.dfsg-9+deb8u13_amd64.deb a719474ef072582cb03c655277cf5b339f541f4f 117208 libisc-export95-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb 9bf8d818eb535ddb47b12d19b7df7129a30713b6 41456 libisccfg-export90_9.9.5.dfsg-9+deb8u13_amd64.deb 965a24d7ceeb6a2ef763ca7151bf05f613cab6ee 17560 libisccfg-export90-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb 7958d17388f61c08391db2aba320d873b2d2f576 39044 libirs-export91_9.9.5.dfsg-9+deb8u13_amd64.deb 13b037a450587f4c7e720aae47c64b66ae179f9a 15352 libirs-export91-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb Checksums-Sha256: a38e2a7cb786a3a6161feca3cf6d7e9f2f733f6cc3540e4b6a2b679ef0e8c01e 3120 bind9_9.9.5.dfsg-9+deb8u13.dsc 322344a5653a70da3496249d5c07735723a0cd44fac791a0d4958e06015393f0 134768 bind9_9.9.5.dfsg-9+deb8u13.diff.gz 2e79d48cdf5598b23163825e3ba8cb60c790149025c9d4c989c9f3b01ff82b1a 339912 bind9-doc_9.9.5.dfsg-9+deb8u13_all.deb 9309df531ffc27dfb423bc79271bf53980f339a942748a6b47aeb97013335d9c 24086 host_9.9.5.dfsg-9+deb8u13_all.deb bba7de3c222b7639b3ea91d0bf90e2ee44fd8f1c13be911f1b2c42172b72c675 315346 bind9_9.9.5.dfsg-9+deb8u13_amd64.deb 933d016174f95d1606004238f0321b1ed49cf17b993397d1feaaf74222fe7765 168224 bind9utils_9.9.5.dfsg-9+deb8u13_amd64.deb fb14363f32458edc43acc5bec197f59a2159236384c811284f0ad71c54370107 68116 bind9-host_9.9.5.dfsg-9+deb8u13_amd64.deb e23a447a8c86efebfa2a3097729865d102baeb4abe72926a7b5d3ca512624f6a 1234458 libbind-dev_9.9.5.dfsg-9+deb8u13_amd64.deb 88acab3846255eddfa0d46d6297ed9fa1b85b8398ae61ee66a2d8a4c969b7b6e 43918 libbind9-90_9.9.5.dfsg-9+deb8u13_amd64.deb 2775cf3fb998ab9e1bb2761db3cb575d294079bd6e2b91e2149329a1efd54fe7 681320 libdns100_9.9.5.dfsg-9+deb8u13_amd64.deb 8df90ccf08b3eb8bb8c276c65a9623cd417dbfea59ded97668cd68904d8d8c2d 169064 libisc95_9.9.5.dfsg-9+deb8u13_amd64.deb acf58644d395387a54158cecbf1a035d2b559c8d26f95f22abbe0470cd66f736 53608 liblwres90_9.9.5.dfsg-9+deb8u13_amd64.deb 295ac843fc921686f8c7324423775af44e55e41f52849ed28dd7c42d02062898 37154 libisccc90_9.9.5.dfsg-9+deb8u13_amd64.deb fb5998d2ed8d7543a1bbc325161087d9570d50bb8490bad76eb06be51690297f 57784 libisccfg90_9.9.5.dfsg-9+deb8u13_amd64.deb f775ee8c24d6ee9ecbab74864955380d0001c7538150f23522b5fa9de7a0d49e 119258 dnsutils_9.9.5.dfsg-9+deb8u13_amd64.deb 5b4de6103b8d22c0921db8768ff2ecf3bcd74b6dbc86d515055ed92c0461b6b6 232244 lwresd_9.9.5.dfsg-9+deb8u13_amd64.deb b4a457d3f13723a00ca4a8f24e379777cb2e07845fd65b6f41eafad046a00b1b 828688 libbind-export-dev_9.9.5.dfsg-9+deb8u13_amd64.deb f0049fde23934b2e53fd8341b9b46b7c42a6601709d01c43e60e1d372217da55 456946 libdns-export100_9.9.5.dfsg-9+deb8u13_amd64.deb 9db92c5c9e7e6b434fd9b5afe26ef09d9ae529eea078b71ac2d590a171c5878d 433570 libdns-export100-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb 94d472090643253d228d104aba5c7038367e0d951985ee622b039bca6ba84d6d 141142 libisc-export95_9.9.5.dfsg-9+deb8u13_amd64.deb 05ae714196499bb0f026efbaa2e6a4e3fc6fedee5408b9fe3383f6966885597c 117208 libisc-export95-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb c13a80a6f2745e5ab2ad3adabb5779782f446e627ccaf95b6ed0e8225eef6f51 41456 libisccfg-export90_9.9.5.dfsg-9+deb8u13_amd64.deb 20b735f48944e6a031a97b3fb4475d7bded0459a8ca7aecc4c859cea901767fc 17560 libisccfg-export90-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb d445551e28b3e79c3f2f94a54581e641f7e8b1115fd8eea75bc9e16ab38b0802 39044 libirs-export91_9.9.5.dfsg-9+deb8u13_amd64.deb 44b532294bcaf90444090b8c505588a403ea73775e25667c2e37d8b62ea9410c 15352 libirs-export91-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb Files: e0c1ad322c5c8ec59d49951f5960cd20 3120 net optional bind9_9.9.5.dfsg-9+deb8u13.dsc 6afbdf8ef815fbcb7b653ba1e19cbc70 134768 net optional bind9_9.9.5.dfsg-9+deb8u13.diff.gz 825ed48bc2fece8404692ff84d6b0786 339912 doc optional bind9-doc_9.9.5.dfsg-9+deb8u13_all.deb 28a70512f0fa7684827d1654bfbe6709 24086 net standard host_9.9.5.dfsg-9+deb8u13_all.deb 6447990a6a969dfa4931d1bdc88979bf 315346 net optional bind9_9.9.5.dfsg-9+deb8u13_amd64.deb 9d8470700e4d9b250e76793c358b4e42 168224 net optional bind9utils_9.9.5.dfsg-9+deb8u13_amd64.deb f2f9c120eda0aac403f0ede321bb6012 68116 net standard bind9-host_9.9.5.dfsg-9+deb8u13_amd64.deb 8ccccb8bf7cf893305bee65e5b0b1912 1234458 libdevel optional libbind-dev_9.9.5.dfsg-9+deb8u13_amd64.deb e5d633f8523280660752a3a32708fbef 43918 libs standard libbind9-90_9.9.5.dfsg-9+deb8u13_amd64.deb 3c24880d4a109a20dc251da534590d88 681320 libs standard libdns100_9.9.5.dfsg-9+deb8u13_amd64.deb 620598d839f0fede36df06b844b4c5f2 169064 libs standard libisc95_9.9.5.dfsg-9+deb8u13_amd64.deb 279a2ebe5373e36bd880c7eb03eb875c 53608 libs standard liblwres90_9.9.5.dfsg-9+deb8u13_amd64.deb cb3e14c0ff371a73d747a438f7f1472e 37154 libs optional libisccc90_9.9.5.dfsg-9+deb8u13_amd64.deb 4878d6c5ad0b1916fadbc0fec3c34557 57784 libs optional libisccfg90_9.9.5.dfsg-9+deb8u13_amd64.deb 9f483576a63c91a749644a67090b4d7f 119258 net standard dnsutils_9.9.5.dfsg-9+deb8u13_amd64.deb b69a1de219351ec794a3f20fd1a4d8cc 232244 net optional lwresd_9.9.5.dfsg-9+deb8u13_amd64.deb 65c74011c67c96bbeb80e93c576e161a 828688 libdevel optional libbind-export-dev_9.9.5.dfsg-9+deb8u13_amd64.deb 26e9f6477c48293f88ad178df799677f 456946 libs optional libdns-export100_9.9.5.dfsg-9+deb8u13_amd64.deb 8d30c3f964469616803f8aad70dbcd1c 433570 debian-installer optional libdns-export100-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb fe147e8865e8c7f976fe526085de76c5 141142 libs optional libisc-export95_9.9.5.dfsg-9+deb8u13_amd64.deb f51d5c5cb4c09fcc0e15d839f7b64cf9 117208 debian-installer optional libisc-export95-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb fbe869579720e977ffd72f32850385b0 41456 libs optional libisccfg-export90_9.9.5.dfsg-9+deb8u13_amd64.deb 53a1f289eb7d4da4bb4847fb28b39ca9 17560 debian-installer optional libisccfg-export90-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb 2c1c8045463f18c257a853dd122b8ebf 39044 libs optional libirs-export91_9.9.5.dfsg-9+deb8u13_amd64.deb ae63d160eb0ca6dd245edf113ad3a99a 15352 debian-installer optional libirs-export91-udeb_9.9.5.dfsg-9+deb8u13_amd64.udeb -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEl0WwInMjgf6efq/1bdtT8qZ1wKUFAll0qRoACgkQbdtT8qZ1 wKXJIwf+Lp+a8fjkjKrZOOQS0GIj9y76NDQi3dmFb0uFosXuxzEW90wqz3sOH/vr oIgZjbytobOy+oRDQjCtBvdUn0oAq0DqYa2J+Z+RIyH3OAGHyRFBIVOBq51s3TYw 5jP4RSRXg9Fb2pumUxO3pptS+e6ImindcHCA5rmogcMjNqW699w438vlKziBTXnX HOdd9Yq4AXrow6W++G9Tge9TZHjGaEnwX60FvTfPs53xOVNU/gpdbjD32+6whm6s 19q8VAZ8zr8YTnsezZxXT2HDctC3A/YPTeIZbGrt+eDbhOx1hi3Xew2ZSJ79hFEQ aLHS0FCdaqu+RKVyIKtc3TXzPv6sMA== =7j7z -----END PGP SIGNATURE-----
--- End Message ---
