bind-9.18.33-15.el10_2.12 RPM for s390x

From AlmaLinux 10.2 AppStream for s390x

BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

Provides

• bind
• bind(s390-64)
• config(bind)
• group(named)
• group(named)
• user(named)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/bash
• /usr/bin/sh
• bind-libs(s390-64) = 32:9.18.33-15.el10_2.12
• config(bind) = 32:9.18.33-15.el10_2.12
• coreutils
• glibc-common
• grep
• libbind9-9.18.33.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libcap.so.2()(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libdns-9.18.33.so()(64bit)
• libfstrm.so.0()(64bit)
• libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)
• libisc-9.18.33.so()(64bit)
• libisccc-9.18.33.so()(64bit)
• libisccfg-9.18.33.so()(64bit)
• libjson-c.so.5()(64bit)
• libjson-c.so.5(JSONC_0.14)(64bit)
• liblmdb.so.0.0.0()(64bit)
• libmaxminddb.so.0()(64bit)
• libnghttp2.so.14()(64bit)
• libns-9.18.33.so()(64bit)
• libprotobuf-c.so.1()(64bit)
• libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)
• libuv.so.1()(64bit)
• libxml2.so.2()(64bit)
• libxml2.so.2(LIBXML2_2.4.30)(64bit)
• libxml2.so.2(LIBXML2_2.6.0)(64bit)
• libxml2.so.2(LIBXML2_2.6.3)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)
• shadow-utils
• shadow-utils

License

MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause

Changelog

* Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.12
  - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
  - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
  - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
  - Reject oversized negative cached records early (CVE-2026-19667)
  - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.11
  - Add new root key 38696 into package files too (RHEL-252999)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.10
  - Validate NSEC3 signer matches owning zone (CVE-2026-10723)
* Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.9
  - Reject out-of-zone NSEC next owner names (CVE-2026-13321)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.7
  - Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.6
  - Fix RRSIG label count validation for wildcard cache poisoning
    (CVE-2026-11721)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.5
  - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.4
  - Fix assertion failure on malformed NSEC/NSEC3 responses
    (CVE-2026-13204)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.2
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.1
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-14
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-13
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Oct 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-11
  - Move named.* files from /var/named into /usr/share/named
  - Move named.ca into /etc/named.ca
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-10
  - Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-9
  - Decode IDN names on input in all situations in utilities (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.18.33-8
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-7
  - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-6
  - Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-5
  - Backport support for OpenSSL provider required for PKCS11 labels
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.33-4
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Thu Feb 13 2025 Thomas Woerner <twoerner@redhat.com> - 32:9.18.33-3
  - Fix upgrade of doc sub package to remove links replaced by directories
    (RHEL-48798)
* Sun Feb 02 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-2
  - Add nsupdate TLS support (RHEL-77354)
  - Include a test for nsupdate changes
* Sun Feb 02 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-1
  - Update to 9.16.33 (rhbz#2342784)
  - Make relative documentation links
  - Permanently remove DLZ parts build
* Fri Jan 17 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.32-2
  - Add sysusers named user creation (rhbz#2105415)
* Thu Dec 12 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.32-1
  - Update to 9.18.32 (RHEL-48798)
  - Remove CHANGES file from package
* Tue Oct 29 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-1
  - Update to 9.18.29 (RHEL-48798)
* Tue Oct 29 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.28-1
  - Update to 9.18.28 (RHEL-48798)
* Tue Oct 29 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.27-6
  - Update to 9.18.27 (RHEL-48798)
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 32:9.18.21-7
  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018
* Tue Oct 08 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.21-6
  - Make OpenSSL engine support optional and disabled (RHEL-22408)

Files

/etc/logrotate.d/named
/etc/named
/etc/named.ca
/etc/named.conf
/etc/named.rfc1912.zones
/etc/named.root.key
/etc/rndc.conf
/etc/rndc.key
/etc/rwtab.d/named
/etc/sysconfig/named
/run/named
/usr/bin/mdig
/usr/bin/named-checkconf
/usr/bin/named-journalprint
/usr/bin/named-rrchecker
/usr/lib/.build-id
/usr/lib/.build-id/3d
/usr/lib/.build-id/3d/9e8457fd5ce8e3e01affc8c0ea8ae93f0fa232
/usr/lib/.build-id/41
/usr/lib/.build-id/41/556de4873bcbc38979f6dc1c5a146a87e7c604
/usr/lib/.build-id/52
/usr/lib/.build-id/52/41472782d7a9d68f3a1c8622f4bc3f57000aa7
/usr/lib/.build-id/5c
/usr/lib/.build-id/5c/a9700a08f0ab5899a8c3330b987e411678b589
/usr/lib/.build-id/68
/usr/lib/.build-id/68/5082b197e391fd627ddcb84c7afc69c23ec3f2
/usr/lib/.build-id/7a
/usr/lib/.build-id/7a/dfba8310903a68a5053607b2e0a424da31db48
/usr/lib/.build-id/8c
/usr/lib/.build-id/8c/2d8ae9879e68b7f7ce98c6d1bb23d51a7852e3
/usr/lib/.build-id/ae
/usr/lib/.build-id/ae/80e5ae62c2d547f6cf00c8cd24177eb4d983c6
/usr/lib/.build-id/d5
/usr/lib/.build-id/d5/565a34ef4e7a9f71ed024fd4e39b0e15fa9737
/usr/lib/systemd/system/named-setup-rndc.service
/usr/lib/systemd/system/named.service
/usr/lib/sysusers.d/named.conf
/usr/lib/tmpfiles.d/named.conf
/usr/lib64/bind
/usr/lib64/bind/filter-a.so
/usr/lib64/bind/filter-aaaa.so
/usr/lib64/named
/usr/libexec/generate-rndc-key.sh
/usr/libexec/setup-named-softhsm.sh
/usr/sbin/named
/usr/sbin/named-checkconf
/usr/sbin/rndc
/usr/sbin/rndc-confgen
/usr/share/doc/bind
/usr/share/doc/bind/README.md
/usr/share/doc/bind/named.conf.default
/usr/share/doc/bind/sample
/usr/share/doc/bind/sample/etc
/usr/share/doc/bind/sample/etc/named.conf
/usr/share/doc/bind/sample/etc/named.rfc1912.zones
/usr/share/doc/bind/sample/var
/usr/share/doc/bind/sample/var/named
/usr/share/doc/bind/sample/var/named/data
/usr/share/doc/bind/sample/var/named/my.external.zone.db
/usr/share/doc/bind/sample/var/named/my.internal.zone.db
/usr/share/doc/bind/sample/var/named/named.ca
/usr/share/doc/bind/sample/var/named/named.empty
/usr/share/doc/bind/sample/var/named/named.localhost
/usr/share/doc/bind/sample/var/named/named.loopback
/usr/share/doc/bind/sample/var/named/slaves
/usr/share/doc/bind/sample/var/named/slaves/my.ddns.internal.zone.db
/usr/share/doc/bind/sample/var/named/slaves/my.slave.internal.zone.db
/usr/share/man/man1/mdig.1.gz
/usr/share/man/man1/named-checkconf.1.gz
/usr/share/man/man1/named-journalprint.1.gz
/usr/share/man/man1/named-rrchecker.1.gz
/usr/share/man/man5/named.conf.5.gz
/usr/share/man/man5/rndc.conf.5.gz
/usr/share/man/man8/filter-a.8.gz
/usr/share/man/man8/filter-aaaa.8.gz
/usr/share/man/man8/named.8.gz
/usr/share/man/man8/rndc-confgen.8.gz
/usr/share/man/man8/rndc.8.gz
/usr/share/named
/usr/share/named/named.empty
/usr/share/named/named.localhost
/usr/share/named/named.loopback
/var/log/named.log
/var/named
/var/named/data
/var/named/dynamic
/var/named/named.ca
/var/named/named.empty
/var/named/named.localhost
/var/named/named.loopback
/var/named/slaves

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Oct 10 17:55:56 2026