Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

bind-dnssec-utils-9.16.23-40.el9_8.10 RPM for aarch64

From AlmaLinux 9.8 AppStream for aarch64

Name: bind-dnssec-utils Distribution: AlmaLinux
Version: 9.16.23 Vendor: AlmaLinux
Release: 40.el9_8.10 Build date: Wed Oct 7 11:49:28 2026
Group: Unspecified Build host: arm64-builder01.almalinux.org
Size: 688786 Source RPM: bind-9.16.23-40.el9_8.10.src.rpm
Packager: AlmaLinux Packaging Team <packager@almalinux.org>
Url: https://www.isc.org/downloads/bind/
Summary: DNSSEC keys and zones management utilities
 
Bind-dnssec-utils contains a collection of utilities for editing
DNSSEC keys and BIND zone files. These tools provide generation,
revocation and verification of keys and DNSSEC signatures in zone files.

You should install bind-dnssec-utils if you need to sign a DNS zone
or maintain keys for it.

Provides

Requires

License

MPLv2.0

Changelog

* Thu Sep 24 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.10
  - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
  - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
  - Reject oversized negative cached records early (CVE-2026-19667)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.9
  - Add new root key 38696 into package files (RHEL-255763)
  - Update built-in anchors in delv and named
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.8
  - Fix NSEC3 signer validation (CVE-2026-10723)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.7
  - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.6
  - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.5
  - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
    (CVE-2026-13204)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.4
  - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.3
  - Prevent cache memory exhaustion under sustained attack
    (CVE-2026-11622, RHEL-213397)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.2
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.1
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
* Thu Jan 22 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-39
  - Backport fix for nameserver line processing. (RHEL-79714)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-38
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-37
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-36
  - Copy named.* files from /var/named into /usr/share/named
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34
  - Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.16.23-33
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Sep 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-32
  - Decode IDN names on input in all situations in utilities (RHEL-66172)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31
  - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-30
  - Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.23-29
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Sat Feb 15 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-28
  - Fix test backport changes
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-27
  - Limit additional section records CPU processing (CVE-2024-11187)
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-26
  - Switch to autopatch changes applying

Files

/usr/lib/.build-id
/usr/lib/.build-id/58
/usr/lib/.build-id/58/0cb66cce02d0a5417b084002212a89b81becdb
/usr/lib/.build-id/6d
/usr/lib/.build-id/6d/5f3e0b1ba496f44934e22b6e68f9ab7286c31f
/usr/lib/.build-id/87
/usr/lib/.build-id/87/bf797f75ce4e2eb2ad6ace6a24b9e0dbc2b922
/usr/lib/.build-id/8d
/usr/lib/.build-id/8d/ec03f1e4eab4b8ca7a2f950f408b0e169716d4
/usr/lib/.build-id/95
/usr/lib/.build-id/95/59f1573df3f7ae628eea3e9310e46932615f06
/usr/lib/.build-id/ba
/usr/lib/.build-id/ba/cf5ebb9808fe89367a56cd54b009d0ea58e35a
/usr/lib/.build-id/e8
/usr/lib/.build-id/e8/a27e697d7b4a2550d175872a004cbb2cc40375
/usr/lib/.build-id/f4
/usr/lib/.build-id/f4/bc367ec33fc2af2c76ba1ed8ee3012170ec5ef
/usr/lib/.build-id/fc
/usr/lib/.build-id/fc/294f2bd34d60c3ed4527a169d3a53f172a039b
/usr/sbin/dnssec-cds
/usr/sbin/dnssec-checkds
/usr/sbin/dnssec-coverage
/usr/sbin/dnssec-dsfromkey
/usr/sbin/dnssec-importkey
/usr/sbin/dnssec-keyfromlabel
/usr/sbin/dnssec-keygen
/usr/sbin/dnssec-keymgr
/usr/sbin/dnssec-revoke
/usr/sbin/dnssec-settime
/usr/sbin/dnssec-signzone
/usr/sbin/dnssec-verify

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Oct 13 08:36:25 2026