Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

bind-dnssec-utils-9.16.50-8.el9 RPM for aarch64

From CentOS Stream 9 AppStream for aarch64

Name: bind-dnssec-utils Distribution: CentOS
Version: 9.16.50 Vendor: CentOS
Release: 8.el9 Build date: Fri Aug 14 14:09:35 2026
Group: Unspecified Build host: aarch64-06.stream.rdu2.redhat.com
Size: 688519 Source RPM: bind-9.16.50-8.el9.src.rpm
Packager: builder@centos.org
Url: https://www.isc.org/downloads/bind/
Summary: DNSSEC keys and zones management utilities
 
Bind-dnssec-utils contains a collection of utilities for editing
DNSSEC keys and BIND zone files. These tools provide generation,
revocation and verification of keys and DNSSEC signatures in zone files.

You should install bind-dnssec-utils if you need to sign a DNS zone
or maintain keys for it.

Provides

Requires

License

MPLv2.0

Changelog

* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-8
  - Fix amplification vulnerability via self-pointed glue records (CVE-2026-3592)
* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-7
  - Fix unbounded resend loop in resolver (CVE-2026-5950)
* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-6
  - Fix NSEC3 signer validation (CVE-2026-10723)
  - Fix reject out-of-zone NSEC next owner names (CVE-2026-13321)
  - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
  - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204)
  - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
  - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622)
* Thu Jul 23 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-5
  - Remove compile-time OpenSSL API version check that was preventing
    bind from fetching the engine for RSA algorithms. (RHEL-213788)
* Mon Jul 20 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-4
  - Fix uninitialized boolean in dig/host downstream patch that was
    leading to incorrectly canceled queries in certain scenarios. (RHEL-212648)
* Tue Jul 07 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-3
  - Added CNAME chain bugfixes from v9.18.
  - Fixed masterformat, reclimit, resolver, and qmin tests.
* Tue Jul 07 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-2
  - Use the distutils for python, for backward compatibility
* Tue Jul 07 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-1
  - Update to 9.16.50 (RHEL-6454)
  - Allow starting without inline-signing and dnssec-policy
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-44
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-43
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Thu Feb 12 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-42
  - Backport fix of dig/nslookup hanging issue (RHEL-29712)
* Thu Jan 29 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-41
  - Backport fix for manual DNSSEC key rollovers. (RHEL-12487)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
* Thu Jan 22 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-39
  - Backport fix for nameserver line processing. (RHEL-79714)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-38
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-37
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-36
  - Copy named.* files from /var/named into /usr/share/named
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34
  - Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.16.23-33
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Sep 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-32
  - Decode IDN names on input in all situations in utilities (RHEL-66172)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31
  - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-30
  - Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.23-29
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Sat Feb 15 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-28
  - Fix test backport changes
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-27
  - Limit additional section records CPU processing (CVE-2024-11187)
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-26
  - Switch to autopatch changes applying
* Fri Sep 06 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-25
  - Bump version above RHEL 9.5

Files

/usr/lib/.build-id
/usr/lib/.build-id/0f
/usr/lib/.build-id/0f/ca0354d251997fcd0f99027d5881c0e706239a
/usr/lib/.build-id/10
/usr/lib/.build-id/10/89806dc1aa61dde7abf7354e40bf490ecd41b0
/usr/lib/.build-id/53
/usr/lib/.build-id/53/d69311a97aacf8952a27c8ad2f9758c5e58986
/usr/lib/.build-id/9a
/usr/lib/.build-id/9a/bdb6dca5edab4f0607f71debe1e6088fdd265a
/usr/lib/.build-id/9f
/usr/lib/.build-id/9f/c7c21b3f04d6a309d1fd673c1a7fe78b35b971
/usr/lib/.build-id/bf
/usr/lib/.build-id/bf/c48958e43c4452695065862c614d94b207fc24
/usr/lib/.build-id/d6
/usr/lib/.build-id/d6/011f1460a466744d3f989b74c3efc6fc383f5b
/usr/lib/.build-id/d7
/usr/lib/.build-id/d7/3937d87fd1e37a2ae27854d8297f2aad2f44c5
/usr/lib/.build-id/f0
/usr/lib/.build-id/f0/a33b01d8c18dbc481be9b787dc595f67cf5e7b
/usr/sbin/dnssec-cds
/usr/sbin/dnssec-checkds
/usr/sbin/dnssec-coverage
/usr/sbin/dnssec-dsfromkey
/usr/sbin/dnssec-importkey
/usr/sbin/dnssec-keyfromlabel
/usr/sbin/dnssec-keygen
/usr/sbin/dnssec-keymgr
/usr/sbin/dnssec-revoke
/usr/sbin/dnssec-settime
/usr/sbin/dnssec-signzone
/usr/sbin/dnssec-verify

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Aug 20 05:25:38 2026