bind9 (1:9.2.0-6) unstable; urgency=low * move to US main! Yippee! Closes: #123969 * add info to README.Debian about 2.5 kernels vs --disable-linux-caps -- Bdale Garbee Sat, 23 Mar 2002 00:18:05 -0700 bind9 (1:9.2.0-5) unstable; urgency=medium * clean up various issues in the rules file * make bind9-host conflict/replace old dnsutils as host does, otherwise we can have problems upgrading from potato to woody, closes: #136686 * use /dev/urandom for rndc-confgen in postinst, it should be good enough for this purpose, and will keep the postinst from blocking arbitrarily. closes: #130372 * add fresh pointers to chroot howto to README.Debian, closes: #135774 -- Bdale Garbee Sun, 3 Mar 2002 16:47:12 -0700 bind9 (1:9.2.0-4) unstable; urgency=low * bind9-host needs to conflict with host, closes: #127395 -- Bdale Garbee Tue, 1 Jan 2002 20:12:14 -0700 bind9 (1:9.2.0-3) unstable; urgency=low * force removal of old diverted files, closes: #126236 * change priority of liblwres1 from optional to standard per ftp admins * add a bind9-host package so that the 'host' provided with the BIND 9.X source tree can be an alternative to the aging NIKHEF version packaged separately. Update dnsutils dependencies to depend on one of the two, with preference to this one since it has fewer bugs (but fewer features, too). -- Bdale Garbee Sun, 23 Dec 2001 00:59:15 -0700 bind9 (1:9.2.0-2) unstable; urgency=medium * change rc.d links to ensure daemon starts before and stops after other daemons that may fail if name service is not working (bug was filed against 8.X bind packages, but is just as relevant here!) * use rndc for daemon shutdown instead of start-stop-daemon, closes: #111935 * add a postinst to dnsutils to remove any lingering diversions from old dnsutils packages, closes: #122227 * not much point in delivering zone2ldap.1 since we aren't delivering zone2ldap right now (though we might someday?), closes: #124058 * be more verbose with shared library descriptions, closes: #123426, #123428 * 9.2.0 added a new rndc.key file that both named and rndc will read to obtain a shared key, and rndc-confgen will easily create this file with a unique-per-system key. Modify named.conf and remove rndc.conf to take advantage of this mechanism and stop delivering a pre-determined static key to all Debian systems (which has been a mild security risk). Create the key in postinst if the key file doesn't already exist, and remove the file in postrm if purging. Closes: #86718, #87208 -- Bdale Garbee Fri, 21 Dec 2001 04:04:30 -0700 bind9 (1:9.2.0-1) unstable; urgency=low * new upstream version, closes: #108243, #112266, #114250, #119506, #120657 * /etc/bind/rndc.conf is now a conffile * minor hacks to the README.Debian since the chroot instructions it points to are 8.X specific, part of addressing bug 111868. * libomapi is gone, replaced by libisccc and libisccfg * a few lintian-motivated cosmetic cleanups * lose task-dns-server meta package, since tasksel doesn't need it now * dig problem not reproducible in this version, closes: #89526 * named-checkconf now uses $sysconfdir, closes: #107835 * no longer deliver man pages for contributed binaries we're not including in dnsutils, closes: #108220 * fix section in nslookup man page, though that's the least of the man page's problems... glitch reported is unreproducible closes: #103630, #120946 * update libbind-dev README.Debian, closes: #121050 -- Bdale Garbee Tue, 27 Nov 2001 01:41:00 -0700 bind9 (1:9.1.3-1) unstable; urgency=low * new upstream version, closes: #96483, #99824, #100647, #101568, #103429 * update config.sub/guess for hppa/ia64 support * small init.d patch from Marco d'Itri to ease adding options on invocation * stop having bind9-doc conflict/replace bind-doc since they don't really conflict and there's no reason to prevent having both installed at the same time, closes: #90994 * the CHANGES file documents fixes since 9.1.1 that probably cured the reported assertion failure. If it turns out that I'm wrong, the bug can be re-opened or a new one filed. I can't see any way to reproduce the bug in a test case here. Closes: #99352 * have libbind-dev depend on the runtime library packages it delivers compile-time symlinks for, closes: #100898, #103855 * fix lwres man pages to source man3/* instead of * so all the page content can actually be found, closes: #85450, #103865 -- Bdale Garbee Mon, 9 Jul 2001 11:30:39 -0600 bind9 (1:9.1.1-1) unstable; urgency=low * new upstream release * update build-depends for libssl-dev * add build-depends on bison, closes: #90150, #90752, #90159 * split up libbind0 since libdns is changing so numbers * downgrade rblcheck from a depends to a suggests, closes: #90783 * bind9 mkdep creates files in the current working directory, closes: #58353 -- Bdale Garbee Wed, 25 Apr 2001 22:53:21 -0600 bind9 (1:9.1.0-3) unstable; urgency=low * merge patch from Zack Weinberg that solves compilation problem, and reduces the memory footprint of applications by making configure.in smarter. Closes: #86776, #86910 * the bind-doc package includes all relevant documentation from the bind9 source tree, including HTML content in /usr/share/doc/bind9-doc/arm, closes: #85718 * default named.conf and rndc.conf to not world-readable. This is an interim step towards addressing the concerns about security raised by bugs 86718 and closes: #86836 A better long-term solution would be for rndc.conf to allow includes, so that both named.conf and rndc.conf could include a key file built on the fly during installation while themselves retaining conffile status. The required functionality has been requested of the bind9 upstream, this will limit vulnerability in the meantime. * add replaces logic to the dnsutils package to avoid complaints about the delivery of nsupdate.8.gz, closes: #86759 * move a couple of man pages back from dnsutils to bind9 that really belong there. sigh. -- Bdale Garbee Thu, 22 Feb 2001 16:39:02 -0700 bind9 (1:9.1.0-2) unstable; urgency=low * merge patch from Luca Filipozzi - thanks! + bind9: ships with a working rndc.conf file, closes: #84572 + bind9: init.d calls rndc rather than ndc on reload, closes: #85481 + bind9: named.conf ships with 'key' and 'control' sections + bind9: correctly creates /var/cache/bind, closes: #85457 + lwresd: lwresd is split off into its own package, closes: #85627 * nsupdate is delivered by the dnsutils package, but the (wrong) man page was accidentally also included in the bind9 package, closes: #85717 * freshen config.sub and config.guess for ia64 and hppa support -- Bdale Garbee Mon, 12 Feb 2001 23:43:55 -0700 bind9 (1:9.1.0-1) unstable; urgency=low * Initial packaging of BIND 9.1.0. Must use epoch so that meta packages retain their sequencing from the bind 8 package version stream. * snarf a couple of man pages from the 8.X tree for now -- Bdale Garbee Thu, 1 Feb 2001 16:30:35 -0700