bind-9.16.23-40.el9_8.8 RPM for x86_64

From AlmaLinux 9.8 AppStream for x86_64

BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

Provides

• bind
• bind(x86-64)
• config(bind)
• group(named)
• user(named)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/bash
• bind-libs(x86-64) = 32:9.16.23-40.el9_8.8
• config(bind) = 32:9.16.23-40.el9_8.8
• coreutils
• glibc-common
• grep
• libbind9-9.16.23-RH.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libcap.so.2()(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libdns-9.16.23-RH.so()(64bit)
• libfstrm.so.0()(64bit)
• libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)
• libisc-9.16.23-RH.so()(64bit)
• libisccc-9.16.23-RH.so()(64bit)
• libisccfg-9.16.23-RH.so()(64bit)
• libjson-c.so.5()(64bit)
• libjson-c.so.5(JSONC_0.14)(64bit)
• liblmdb.so.0.0.0()(64bit)
• libmaxminddb.so.0()(64bit)
• libns-9.16.23-RH.so()(64bit)
• libprotobuf-c.so.1()(64bit)
• libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)
• libuv.so.1()(64bit)
• libxml2.so.2()(64bit)
• libxml2.so.2(LIBXML2_2.4.30)(64bit)
• libxml2.so.2(LIBXML2_2.6.0)(64bit)
• libxml2.so.2(LIBXML2_2.6.3)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• rtld(GNU_HASH)
• shadow-utils
• shadow-utils

License

MPLv2.0

Changelog

* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.8
  - Fix NSEC3 signer validation (CVE-2026-10723)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.7
  - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.6
  - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.5
  - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3
    (CVE-2026-13204)
* Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.4
  - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.16.23-40.3
  - Prevent cache memory exhaustion under sustained attack
    (CVE-2026-11622, RHEL-213397)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.2
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40.1
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
* Thu Jan 22 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-39
  - Backport fix for nameserver line processing. (RHEL-79714)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-38
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-37
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-36
  - Copy named.* files from /var/named into /usr/share/named
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34
  - Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.16.23-33
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Sep 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-32
  - Decode IDN names on input in all situations in utilities (RHEL-66172)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31
  - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-30
  - Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.23-29
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Sat Feb 15 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-28
  - Fix test backport changes
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-27
  - Limit additional section records CPU processing (CVE-2024-11187)
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-26
  - Switch to autopatch changes applying
* Fri Sep 06 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-25
  - Bump version above RHEL 9.5
* Fri Aug 09 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-24
  - Minor fix of reclimit test backport (CVE-2024-1737)
* Wed Aug 07 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-23
  - Backport addition of max-records-per-type and max-records-per-type options

Files

/etc/logrotate.d/named
/etc/named
/etc/named.conf
/etc/named.rfc1912.zones
/etc/named.root.key
/etc/rndc.conf
/etc/rndc.key
/etc/rwtab.d/named
/etc/sysconfig/named
/run/named
/usr/bin/mdig
/usr/bin/named-rrchecker
/usr/lib/.build-id
/usr/lib/.build-id/06
/usr/lib/.build-id/06/9759c3ce5d57dcdffb715fcd92c556eef67146
/usr/lib/.build-id/63
/usr/lib/.build-id/63/810fd8377112a3d693c9d846de4f6647034261
/usr/lib/.build-id/7f
/usr/lib/.build-id/7f/ec5299d335664508d889d250b4d1a886042022
/usr/lib/.build-id/8e
/usr/lib/.build-id/8e/adbf3053f02f2b842bd493cd2d976d278addfe
/usr/lib/.build-id/a4
/usr/lib/.build-id/a4/1dfe8ec0d280eda85dd7c965270649cc6b0c1d
/usr/lib/.build-id/b0
/usr/lib/.build-id/b0/a6799d4e55d4b7a44b6e7f41a64eccbacb606b
/usr/lib/.build-id/e9
/usr/lib/.build-id/e9/de82d12107d3ef318b32200485a4c8cacccc87
/usr/lib/.build-id/f0
/usr/lib/.build-id/f0/a8ee960966d4b9f3800c54fbfb2048d73df9db
/usr/lib/systemd/system/named-setup-rndc.service
/usr/lib/systemd/system/named.service
/usr/lib/sysusers.d/named.conf
/usr/lib/tmpfiles.d/named.conf
/usr/lib64/bind
/usr/lib64/named
/usr/lib64/named/filter-aaaa.so
/usr/libexec/generate-rndc-key.sh
/usr/sbin/named
/usr/sbin/named-checkconf
/usr/sbin/named-journalprint
/usr/sbin/rndc
/usr/sbin/rndc-confgen
/usr/share/doc/bind
/usr/share/doc/bind/CHANGES
/usr/share/doc/bind/README
/usr/share/doc/bind/named.conf.default
/usr/share/doc/bind/sample
/usr/share/doc/bind/sample/etc
/usr/share/doc/bind/sample/etc/named.conf
/usr/share/doc/bind/sample/etc/named.rfc1912.zones
/usr/share/doc/bind/sample/var
/usr/share/doc/bind/sample/var/named
/usr/share/doc/bind/sample/var/named/data
/usr/share/doc/bind/sample/var/named/my.external.zone.db
/usr/share/doc/bind/sample/var/named/my.internal.zone.db
/usr/share/doc/bind/sample/var/named/named.ca
/usr/share/doc/bind/sample/var/named/named.empty
/usr/share/doc/bind/sample/var/named/named.localhost
/usr/share/doc/bind/sample/var/named/named.loopback
/usr/share/doc/bind/sample/var/named/slaves
/usr/share/doc/bind/sample/var/named/slaves/my.ddns.internal.zone.db
/usr/share/doc/bind/sample/var/named/slaves/my.slave.internal.zone.db
/usr/share/man/man1/mdig.1.gz
/usr/share/man/man1/named-rrchecker.1.gz
/usr/share/man/man5/named.conf.5.gz
/usr/share/man/man5/rndc.conf.5.gz
/usr/share/man/man8/filter-aaaa.8.gz
/usr/share/man/man8/named-checkconf.8.gz
/usr/share/man/man8/named-journalprint.8.gz
/usr/share/man/man8/named.8.gz
/usr/share/man/man8/rndc-confgen.8.gz
/usr/share/man/man8/rndc.8.gz
/usr/share/named
/usr/share/named/named.ca
/usr/share/named/named.empty
/usr/share/named/named.localhost
/usr/share/named/named.loopback
/var/log/named.log
/var/named
/var/named/data
/var/named/dynamic
/var/named/named.ca
/var/named/named.empty
/var/named/named.localhost
/var/named/named.loopback
/var/named/slaves

Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Aug 15 07:25:31 2026