bind9.18-dnssec-utils-9.18.29-14.el9_8.11 RPM for ppc64le

From AlmaLinux 9.8 AppStream for ppc64le

bind9.18-dnssec-utils contains a collection of utilities for editing
DNSSEC keys and BIND zone files. These tools provide generation,
revocation and verification of keys and DNSSEC signatures in zone files.

You should install bind9.18-dnssec-utils if you need to sign a DNS zone
or maintain keys for it.

Provides

• bind9.18-dnssec-utils
• bind-dnssec-utils
• bind9.18-dnssec-utils(ppc-64)

Requires

• bind9.18-libs(ppc-64) = 32:9.18.29-14.el9_8.11
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libdns-9.18.29.so()(64bit)
• libisc-9.18.29.so()(64bit)
• libisccfg-9.18.29.so()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause

Changelog

* Fri Oct 16 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-14.11
  - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
* Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.10
  - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
  - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
  - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
  - Reject oversized negative cached records early (CVE-2026-19667)
  - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.9
  - Add new root key 38696 into package files (RHEL-255223)
  - Update built-in anchors in delv and named
* Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.8
  - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)
* Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.7
  - Reject out-of-zone NSEC next owner names (CVE-2026-13321,
    RHEL-213314)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.6
  - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
    RHEL-213389)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.5
  - Reject invalid signed wildcard records (CVE-2026-11721,
    RHEL-213417)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.4
  - Fix RPZ wildcard expansion self-referential CNAME
    (CVE-2026-11331, RHEL-213495)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.3
  - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
    RHEL-213495)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.2
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Wed Apr 01 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.1
  - Correct backport issue in the patch (CVE-2026-1519)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
  - Correct changelog version of previous change
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-12
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-11
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-10
  - Add missing bind-chroot subdirectories
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-9
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-8
  - Copy named.* files from /usr/share/named into var/named
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-5
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.29-4
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Mon Feb 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)
* Mon Jan 27 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support

Files

/usr/bin/dnssec-cds
/usr/bin/dnssec-dsfromkey
/usr/bin/dnssec-importkey
/usr/bin/dnssec-keyfromlabel
/usr/bin/dnssec-keygen
/usr/bin/dnssec-revoke
/usr/bin/dnssec-settime
/usr/bin/dnssec-signzone
/usr/bin/dnssec-verify
/usr/lib/.build-id
/usr/lib/.build-id/3f
/usr/lib/.build-id/3f/4ab905d1696e9a68d7c10bec669c20b23d3ce3
/usr/lib/.build-id/47
/usr/lib/.build-id/47/1b446bdab302906978487d20099a3f0b6af383
/usr/lib/.build-id/61/2c76d22dc9147a4ad15557d4d3327bdde6f2fd
/usr/lib/.build-id/61/2c81b86153750dfd2dc7773c099273f33e3715
/usr/lib/.build-id/93
/usr/lib/.build-id/93/a0cd7aa3a943c920e8a2f39039c3001dd2b805
/usr/lib/.build-id/9f
/usr/lib/.build-id/9f/8e873ffb2a5fa270b8eb3fc4c92d37b3b4bc5a
/usr/lib/.build-id/e8
/usr/lib/.build-id/e8/ebb39bcd65094014739bffe91c1b43c5cdb889
/usr/lib/.build-id/f2
/usr/lib/.build-id/f2/88e6128518070969c7aa423a0e412ab3eae7e4
/usr/lib/.build-id/f8
/usr/lib/.build-id/f8/b0f2efc8b8bdd01a5f33d10f6de197a93320f6
/usr/share/man/man1/dnssec-cds.1.gz
/usr/share/man/man1/dnssec-dsfromkey.1.gz
/usr/share/man/man1/dnssec-importkey.1.gz
/usr/share/man/man1/dnssec-keyfromlabel.1.gz
/usr/share/man/man1/dnssec-keygen.1.gz
/usr/share/man/man1/dnssec-revoke.1.gz
/usr/share/man/man1/dnssec-settime.1.gz
/usr/share/man/man1/dnssec-signzone.1.gz
/usr/share/man/man1/dnssec-verify.1.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Nov 12 15:11:46 2026