On Fri, Aug 02, 2024 at 10:15:38AM -0300, Eduardo M KALINOWSKI wrote: > On 02/08/2024 10:10, Brian wrote: > > We just ran the latest updates for Debian Buster on one of our DNS > > servers running bind9 and one of the slave domains is failing with this > > message: > > > > Aug 2 07:05:20 <hostname> named[76759]: transfer of '<domain name>/IN' > > from <ip address>#53: Transfer status: too many records > > > > There are about 1,400 records in that domain which has never posed a > > problem in the past. > > > > We have tried force transfers, purging journal files and nothing seems > > to work. > > > > We rolled back the update to one performed earlier in the month and now > > everything is working. > > > > Anybody have any idea what is going on with this latest update? > > Maybe related to https://kb.isc.org/docs/rrset-limits-in-zones ? > > See also > https://lists.debian.org/debian-security-announce/2024/msg00145.html (even > if it does not directly apply to buster). > That seems unlikely, as the bind9 package in buster have not yet been updated to fix the CVEs referenced in that particular DSA.
Brian, can you provide more details about what specific packages were updated and from what version to what version? You can find that information in /var/log/dpkg.log*. Regards, -Roberto -- Roberto C. Sánchez
