Merge lp://staging/~l3on/ubuntu/trusty/bind9/fix-1277205 into lp://staging/ubuntu/trusty/bind9

Unmerged revisions

64. By Leo Iannacone on 2014-02-26

New patch fix-deliver-rll-h.patch:
Deliver rrl.h in libbind-dev (LP: #1277205).

63. By Marc Deslauriers on 2014-01-10

* SECURITY UPDATE: denial of service when processing NSEC3-signed zone
  queries
  - debian/patches/CVE-2014-0591.patch: don't call memcpy with
    overlapping ranges in bin/named/query.c.
  - patch backported from 9.9.4-P2.
  - CVE-2014-0591

62. By Adam Conrad on 2013-12-18

Use dh-autoreconf to update libtool and configure for new ports.

61. By Adam Conrad on 2013-10-07

Use dh_autotools-dev to update config.{sub,guess} for new ports.

60. By LaMont Jones on 2013-08-29

[Peter Marschall]

* If rndc.conf exists, skip creation of rndc.key. Closes: #620394

[Al Tarakanoff]

* properly quote check of pid in bind9 init.d. LP: #1092243

[LaMont Jones]

* include distro and package version in version string
* apparmor: allow GeoIP data file access. LP: #834901
* enable filter-aaaa. Closes: #701704 LP: #1115168

59. By LaMont Jones on 2013-08-27

[Michael Stapelberg]

* add systemd service file. Closes: #718212

[LaMont Jones]

* deliver more dnssec-* tools in bind9utils. Closes: #713026
* support parallel=N DEB_BUILD_OPTIONS, fix -j build. Closes: #713025
* deliver rrl.h and stat.h Closes: #692483, #720813

58. By Marc Deslauriers on 2013-07-28

* SECURITY UPDATE: denial of service via incorrect bounds checking on
  private type 'keydata'
  - lib/dns/rdata/generic/keydata_65533.c: check for correct length.
  - Patch backported from 9.9.3-P2
  - CVE-2013-4854

57. By Robie Basak on 2013-04-10

* configure.in: detect libxml 2.9 as well as 2.[678] (LP: #1164475).
* debian/control: add Build-Depends on dh-autoreconf.
* debian/rules: use dh_autoreconf and dh_autoreconf_clean.

56. By Marc Deslauriers on 2013-03-28

* SECURITY UPDATE: denial of service via regex syntax checking
  - configure,configure.in,config.h.in: remove check for regex.h to
    disable regex syntax checking.
  - CVE-2013-2266

55. By LaMont Jones on 2013-01-09

[Michael Gilbert]

* Use /var/lib/bind for state file. Closes: #689332

[LaMont Jones]

* zone transfers now involve link(), update the apparmor profile
* Update db.root with new IP for D.root-servers.net. Closes: #697352
* re-drop dlzexternal test
* Reduce log level for "sucessfully validated after lower casing" dnssec
  based on mail from Mark Andrews. Closes: #697681
* remove /var/lib/bind/bind9-default.md5sum in postrm
* remove /etc/bind/named.conf.options on purge. Closes: #668801

[Sebastian Wiesinger]

* Build and deliver dnssec-checkds and dnssec-verify in bind9utils