Package: bind9
Version: 1:9.10.3.dfsg.P4-12.3+deb9u10
Severity: important
Hello,
after today's upgrade from 1:9.10.3.dfsg.P4-12.3+deb9u10 to
1:9.10.3.dfsg.P4-12.3+deb9u11 on stretch, bind9 fails to start.
Syslog shows this:
---8<---
Mar 19 09:36:35 alf named[5522]: general: ../../../lib/dns/name.c:2487:
REQUIRE((((dest) != ((void *)0)) && (((const isc__magic_t *)(dest))->magic ==
((('D') << 24 | ('N') << 16 | ('S') << 8 | ('n')))))) failed, back trace
Mar 19 09:36:35 alf named[5522]: general: #0 0x55e34f15bd80 in ??
Mar 19 09:36:35 alf named[5522]: general: #1 0x7f9428fb39aa in ??
Mar 19 09:36:35 alf named[5522]: general: #2 0x7f942a69df36 in ??
Mar 19 09:36:35 alf named[5522]: general: #3 0x7f942a71b9ba in ??
Mar 19 09:36:35 alf named[5522]: general: #4 0x7f942a71d28e in ??
Mar 19 09:36:35 alf named[5522]: general: #5 0x7f942a71d5e1 in ??
Mar 19 09:36:35 alf named[5522]: general: #6 0x7f942a779bf5 in ??
Mar 19 09:36:35 alf named[5522]: general: #7 0x7f942a789591 in ??
Mar 19 09:36:35 alf named[5522]: general: #8 0x7f9428fd7a23 in ??
Mar 19 09:36:35 alf named[5522]: general: #9 0x7f942897e4a4 in ??
Mar 19 09:36:35 alf named[5522]: general: #10 0x7f9427dcfd0f in ??
Mar 19 09:36:35 alf named[5522]: general: exiting (due to assertion failure)
Mar 19 09:36:35 alf systemd[1]: bind9.service: Main process exited,
code=killed, status=6/ABRT
--->8---
Hi had to downgrade to 1:9.10.3.dfsg.P4-12.3+deb9u10 to have a working dns
server again (leaving the box vulnerable to CVE-2021-25220 [DLA 2955-1]).
I'm setting severity important because I have 4 stretch boxes and had to do
this downgrade on 3 of them (don't know why it failed only on 3 out of 4). Feel
free to raise it.
Please let me know if I can provide any additional information.
Thanks.
--
Kiko
-- System Information:
Debian Release: 9.13
APT prefers oldoldstable
APT policy: (500, 'oldoldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-18-amd64 (SMP w/2 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages bind9 depends on:
ii adduser 3.115
ii bind9utils 1:9.10.3.dfsg.P4-12.3+deb9u10
ii debconf [debconf-2.0] 1.5.61
ii init-system-helpers 1.48
ii libbind9-140 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libc6 2.24-11+deb9u4
ii libcap2 1:2.25-1
ii libcomerr2 1.43.4-2+deb9u2
ii libdns162 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libgeoip1 1.6.9-4
ii libgssapi-krb5-2 1.15-1+deb9u3
ii libirs141 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libisc160 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libisccc140 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libisccfg140 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libk5crypto3 1.15-1+deb9u3
ii libkrb5-3 1.15-1+deb9u3
ii liblwres141 1:9.10.3.dfsg.P4-12.3+deb9u10
ii libssl1.0.2 1.0.2u-1~deb9u7
ii libxml2 2.9.4+dfsg1-2.2+deb9u5
ii lsb-base 9.20161125
ii net-tools 1.60+git20161116.90da8a0-1
ii netbase 5.4
bind9 recommends no packages.
Versions of packages bind9 suggests:
pn bind9-doc <none>
ii dnsutils 1:9.10.3.dfsg.P4-12.3+deb9u10
pn resolvconf <none>
pn ufw <none>
-- Configuration Files:
/etc/bind/named.conf.local changed [not included]
-- debconf information:
bind9/run-resolvconf: false
bind9/start-as-user: bind
bind9/different-configuration-file:
