[ubuntu/resolute-proposed] bind9 1:9.20.18-1ubuntu1 (Accepted)

[Lena Voytek]

bind9 (1:9.20.18-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2125995). Remaining changes:
    - Don't build dnstap as it depends on universe packages:
      + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
        protobuf-c-compiler
      + d/dnsutils.install: don't install dnstap
      + d/rules: don't build dnstap nor install dnstap.proto
    - Add back apport:
      + d/bind9.apport: add back old bind9 apport hook, but without calling
        attach_conffiles() since that is already done by apport itself, with
        confirmation from the user.
      + d/control, d/rules: build-depends on dh-apport and use it
    - d/NEWS: mention relevant packaging changes
  * Drop Changes:
    - d/p/CVE-2025-8677.patch
    - d/p/CVE-2025-40778.patch
    - d/p/CVE-2025-40780.patch
    [Fixed in 9.20.15]
  * Added:
    - d/e/apparmor.d/usr.sbin.named: Allow read access to
      /proc/version_signature for named (LP: #2119320).

Date: Fri, 06 Feb 2026 16:05:33 -0500
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/bind9/1:9.20.18-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 06 Feb 2026 16:05:33 -0500
Source: bind9
Built-For-Profiles: noudeb
Architecture: source
Version: 1:9.20.18-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2119320 2125995
Changes:
 bind9 (1:9.20.18-1ubuntu1) resolute; urgency=medium
 .
   * Merge with Debian unstable (LP: #2125995). Remaining changes:
     - Don't build dnstap as it depends on universe packages:
       + d/control: drop build-depends on libfstrm-dev, libprotobuf-c-dev and
         protobuf-c-compiler
       + d/dnsutils.install: don't install dnstap
       + d/rules: don't build dnstap nor install dnstap.proto
     - Add back apport:
       + d/bind9.apport: add back old bind9 apport hook, but without calling
         attach_conffiles() since that is already done by apport itself, with
         confirmation from the user.
       + d/control, d/rules: build-depends on dh-apport and use it
     - d/NEWS: mention relevant packaging changes
   * Drop Changes:
     - d/p/CVE-2025-8677.patch
     - d/p/CVE-2025-40778.patch
     - d/p/CVE-2025-40780.patch
     [Fixed in 9.20.15]
   * Added:
     - d/e/apparmor.d/usr.sbin.named: Allow read access to
       /proc/version_signature for named (LP: #2119320).
Checksums-Sha1:
 6a8ade9d1753c665d5c75d7a0ef8740b3dc64207 2881 bind9_9.20.18-1ubuntu1.dsc
 d5b414aab3a53c5523e6b46a7282dfbd7ba3c24c 5775248 bind9_9.20.18.orig.tar.xz
 fb06cc962c9576e96d9041ce2b8c0166b7ef38ef 73556 bind9_9.20.18-1ubuntu1.debian.tar.xz
 d258732096a52763b27dcf8a28c98b6e60fb83cc 8461 bind9_9.20.18-1ubuntu1_source.buildinfo
Checksums-Sha256:
 90464ad78b6de3d814e9144c9e4ff3bb6598cb5927bb4e9215bc50da31002a75 2881 bind9_9.20.18-1ubuntu1.dsc
 dfc546c990ac4515529cd45c4dd995862b18ae8a2d0cb29208e8896a5d325331 5775248 bind9_9.20.18.orig.tar.xz
 88bcac32035dcf2d1cabf88b38757e45a744deb76351269005e9d42b8c1d56ae 73556 bind9_9.20.18-1ubuntu1.debian.tar.xz
 4d46d7fa3e2ee400fdb387e10b96c330fd1fab232460620fc2e5b31e35299985 8461 bind9_9.20.18-1ubuntu1_source.buildinfo
Files:
 3aea3b1e64f63c06faae9944a46dff54 2881 net optional bind9_9.20.18-1ubuntu1.dsc
 cb5cf30e0a66d259cba3ed98cba45bbe 5775248 net optional bind9_9.20.18.orig.tar.xz
 3927318a6e0dc41ba0a9b2c92997277a 73556 net optional bind9_9.20.18-1ubuntu1.debian.tar.xz
 2538219f444d6baeeef111e5d81799a1 8461 net optional bind9_9.20.18-1ubuntu1_source.buildinfo
Original-Maintainer: Debian DNS Team <team+dns at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/bind9
Vcs-Git-Commit: 49a0c08f0ab28a882ce5911e21cccb2527f9676f
Vcs-Git-Ref: refs/heads/merge-2125995-resolute