Bug 2019573

Summary:	Rebase to 9.16.23
Product:	Red Hat Enterprise Linux 9	Reporter:	Petr Menšík <pemensik>
Component:	bind	Assignee:	Petr Menšík <pemensik>
Status:	CLOSED ERRATA	QA Contact:	Petr Sklenar <psklenar>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	9.0	CC:	psklenar
Target Milestone:	rc	Keywords:	Rebase, Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	bind-9.16.23-1.el9	Doc Type:	Rebase: Bug Fixes and Enhancements
Doc Text:	Important: if this rebase instead contains only bug fixes, or only enhancements, select the correct option from the Doc Type drop-down list. Rebase package(s) to version: 9.16.23 Highlights, important fixes, or notable enhancements: - HTTPS and SVCB records query and parsing support - deprecated map format	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-05-17 13:24:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2017638, 2019575, 2022765

Description Petr Menšík 2021-11-02 20:40:38 UTC

Description of problem:
In addition to CVE-2021-25219, new upstream releases contains new functionality and a few fixes. I would like to upgrade two minor version before RHEL 9.0.0 is out.

Version-Release number of selected component (if applicable):
bind-9.16.20-5.el9

Additional info:

New feature:
- SVCB and HTTPS resource records support. Still just parsing and printing, but they seem to be used already by browsers. [ISC GL #1132]

Changed feature:
- dnssec-signzone signs only records already expired or invalid signature. Allows  iterative resigning [ISC GL #1551]
- deprecated native pkcs11 interface, classic DLZ built-in drivers (bind-sdb variant).
- deprecated map format. [ISC GL #2882]

Also few bug fixes. Nothing should introduce regressions, but I think enough reasons for upgrade exists.

[ISC GL #1132] https://gitlab.isc.org/isc-projects/bind9/-/issues/1132
[ISC GL #1551] https://gitlab.isc.org/isc-projects/bind9/-/issues/1551
[ISC GL #2882] https://gitlab.isc.org/isc-projects/bind9/-/issues/2882

Comment 1 Petr Menšík 2021-11-02 20:50:19 UTC

Upstream release notes:
https://downloads.isc.org/isc/bind9/9.16.22/doc/arm/html/notes.html#notes-for-bind-9-16-22

Comment 3 Petr Menšík 2021-11-23 09:57:13 UTC

Additional release from upstream, fixing just one issue in catalog zones:

https://gitlab.isc.org/isc-projects/bind9/-/issues/2308
https://downloads.isc.org/isc/bind9/9.16.23/doc/arm/html/notes.html#notes-for-bind-9-16-23

Comment 14 errata-xmlrpc 2022-05-17 13:24:10 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: bind), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:2502