| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: bind-dnssec-utils | Distribution: AlmaLinux |
| Version: 9.16.23 | Vendor: AlmaLinux |
| Release: 40.el9_8.12 | Build date: Mon Oct 26 13:03:12 2026 |
| Group: Unspecified | Build host: arm64-builder01.almalinux.org |
| Size: 688802 | Source RPM: bind-9.16.23-40.el9_8.12.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.isc.org/downloads/bind/ | |
| Summary: DNSSEC keys and zones management utilities | |
Bind-dnssec-utils contains a collection of utilities for editing DNSSEC keys and BIND zone files. These tools provide generation, revocation and verification of keys and DNSSEC signatures in zone files. You should install bind-dnssec-utils if you need to sign a DNS zone or maintain keys for it.
MPLv2.0
* Fri Oct 16 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-40.12
- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
* Wed Oct 07 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-40.11
- Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913)
* Thu Sep 24 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.10
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.9
- Add new root key 38696 into package files (RHEL-255763)
- Update built-in anchors in delv and named
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.8
- Fix NSEC3 signer validation (CVE-2026-10723)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.7
- Fix CVE-2026-13321: reject out-of-zone NSEC next owner names
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.6
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.5
- Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
(CVE-2026-13204)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.4
- Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.3
- Prevent cache memory exhaustion under sustained attack
(CVE-2026-11622, RHEL-213397)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.2
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.1
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40
- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
* Thu Jan 22 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-39
- Backport fix for nameserver line processing. (RHEL-79714)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-38
- Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-37
- Create /var/named directories for bind-chroot (RHEL-132053)
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-36
- Copy named.* files from /var/named into /usr/share/named
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
- Replace downstream fixes with upstream changes
- Address various spoofing attacks (CVE-2025-40778)
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34
- Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.16.23-33
- logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Sep 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-32
- Decode IDN names on input in all situations in utilities (RHEL-66172)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31
- Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-30
- Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.23-29
- Prevent name.c:670 attributes assertion failed (RHEL-30407)
- Add extra checks for relative names
* Sat Feb 15 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-28
- Fix test backport changes
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-27
- Limit additional section records CPU processing (CVE-2024-11187)
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-26
- Switch to autopatch changes applying
/usr/lib/.build-id /usr/lib/.build-id/70 /usr/lib/.build-id/70/9b077dd7a4f85d29887707eb95c86e0464e8fc /usr/lib/.build-id/7d /usr/lib/.build-id/7d/c61fafc403a823701f30713faa1ed7a0a0592d /usr/lib/.build-id/88 /usr/lib/.build-id/88/d941cf60c27994bd67927b81fde0ae86ec8689 /usr/lib/.build-id/93 /usr/lib/.build-id/93/c5b11fd7a3e103422f818ca41a9a73da13b6f1 /usr/lib/.build-id/a5 /usr/lib/.build-id/a5/5612a3fba271936edd38b7362f97ce40463eb1 /usr/lib/.build-id/b1 /usr/lib/.build-id/b1/aeb629622e0e47d870b117d046221b68eec8e1 /usr/lib/.build-id/bc /usr/lib/.build-id/bc/090a99b4458530744d3d46ecfbe90f4f70d69e /usr/lib/.build-id/c0 /usr/lib/.build-id/c0/7a0e2a925b40fe6b3d274bb88b909b124937b8 /usr/lib/.build-id/e8 /usr/lib/.build-id/e8/91240c68369d302b06e5019a9f888a3931e749 /usr/sbin/dnssec-cds /usr/sbin/dnssec-checkds /usr/sbin/dnssec-coverage /usr/sbin/dnssec-dsfromkey /usr/sbin/dnssec-importkey /usr/sbin/dnssec-keyfromlabel /usr/sbin/dnssec-keygen /usr/sbin/dnssec-keymgr /usr/sbin/dnssec-revoke /usr/sbin/dnssec-settime /usr/sbin/dnssec-signzone /usr/sbin/dnssec-verify
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Nov 12 15:20:39 2026