bind-libs-9.16.50-11.el9 RPM for x86_64

From CentOS Stream 9 AppStream for x86_64

Contains heavyweight version of BIND suite libraries used by both named DNS
server and utilities in bind-utils package.

Provides

• bind-libs
• bind-libs(x86-64)
• bind-libs-lite
• libbind9-9.16.50-RH.so()(64bit)
• libdns-9.16.50-RH.so()(64bit)
• libirs-9.16.50-RH.so()(64bit)
• libisc-9.16.50-RH.so()(64bit)
• libisccc-9.16.50-RH.so()(64bit)
• libisccfg-9.16.50-RH.so()(64bit)
• libns-9.16.50-RH.so()(64bit)

Requires

• bind-license = 32:9.16.50-11.el9
• ld-linux-x86-64.so.2()(64bit)
• ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.32)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libcom_err.so.2()(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.4.0)(64bit)
• libdns-9.16.50-RH.so()(64bit)
• libfstrm.so.0()(64bit)
• libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)
• libgssapi_krb5.so.2()(64bit)
• libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
• libisc-9.16.50-RH.so()(64bit)
• libisccfg-9.16.50-RH.so()(64bit)
• libjson-c.so.5()(64bit)
• libjson-c.so.5(JSONC_0.14)(64bit)
• libk5crypto.so.3()(64bit)
• libkrb5.so.3()(64bit)
• libkrb5.so.3(krb5_3_MIT)(64bit)
• liblmdb.so.0.0.0()(64bit)
• libmaxminddb.so.0()(64bit)
• libns-9.16.50-RH.so()(64bit)
• libprotobuf-c.so.1()(64bit)
• libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libuv.so.1()(64bit)
• libxml2.so.2()(64bit)
• libxml2.so.2(LIBXML2_2.6.0)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

MPLv2.0

Changelog

* Thu Sep 24 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-11
  - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
  - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
  - Reject oversized negative cached records early (CVE-2026-19667)
* Mon Sep 07 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-10
  - Rebuild to become part of regular release
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-9
  - Add new root key 38696 into package files (RHEL-131890)
  - Update built-in anchors in delv and named
* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-8
  - Fix amplification vulnerability via self-pointed glue records (CVE-2026-3592)
* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-7
  - Fix unbounded resend loop in resolver (CVE-2026-5950)
* Fri Aug 14 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-6
  - Fix NSEC3 signer validation (CVE-2026-10723)
  - Fix reject out-of-zone NSEC next owner names (CVE-2026-13321)
  - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
  - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204)
  - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721)
  - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622)
* Thu Jul 23 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-5
  - Remove compile-time OpenSSL API version check that was preventing
    bind from fetching the engine for RSA algorithms. (RHEL-213788)
* Mon Jul 20 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-4
  - Fix uninitialized boolean in dig/host downstream patch that was
    leading to incorrectly canceled queries in certain scenarios. (RHEL-212648)
* Tue Jul 07 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.50-3
  - Added CNAME chain bugfixes from v9.18.
  - Fixed masterformat, reclimit, resolver, and qmin tests.
* Tue Jul 07 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-2
  - Use the distutils for python, for backward compatibility
* Tue Jul 07 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.50-1
  - Update to 9.16.50 (RHEL-6454)
  - Allow starting without inline-signing and dnssec-policy
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-44
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-43
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
* Thu Feb 12 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-42
  - Backport fix of dig/nslookup hanging issue (RHEL-29712)
* Thu Jan 29 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-41
  - Backport fix for manual DNSSEC key rollovers. (RHEL-12487)
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-40
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629)
* Thu Jan 22 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.16.23-39
  - Backport fix for nameserver line processing. (RHEL-79714)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-38
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-37
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-36
  - Copy named.* files from /var/named into /usr/share/named
* Wed Oct 29 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)
* Tue Sep 16 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34
  - Fix failures in idna system test (RHEL-66172)
* Fri Sep 12 2025 Petr Menšík <<pemensik@redhat.com>> - 32:9.16.23-33
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Wed Sep 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-32
  - Decode IDN names on input in all situations in utilities (RHEL-66172)
* Wed Jul 09 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31
  - Add runtime tunable limit by environment NAMED_MAXADDITIONAL (RHEL-84006)
* Fri Jun 20 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-30
  - Change additional NS to be served partially (RHEL-84006)
* Tue Jun 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.23-29
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Sat Feb 15 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-28
  - Fix test backport changes
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-27
  - Limit additional section records CPU processing (CVE-2024-11187)
* Wed Feb 05 2025 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-26
  - Switch to autopatch changes applying

Files

/usr/lib/.build-id
/usr/lib/.build-id/26
/usr/lib/.build-id/26/609326747d99e8cd796a64cb9f426e2b51e1a6
/usr/lib/.build-id/42
/usr/lib/.build-id/42/f16d761d22dac2d939d600c14c6aa6cc5a83b0
/usr/lib/.build-id/54
/usr/lib/.build-id/54/7d90bf285d79f70e4e4a1c61431e13a707d0b4
/usr/lib/.build-id/72
/usr/lib/.build-id/72/7c0239832d77986f50fc8ccb82c610abd9c2b8
/usr/lib/.build-id/85
/usr/lib/.build-id/85/6d22979e2719024cac7c96690957d69eaf8000
/usr/lib/.build-id/e9
/usr/lib/.build-id/e9/6dd59d7215f243875fd70b3dc4cb7a8d2785d4
/usr/lib/.build-id/f4
/usr/lib/.build-id/f4/8b34873e8dd81f167f9e327ca1adaa8a8c89f7
/usr/lib64/libbind9-9.16.50-RH.so
/usr/lib64/libdns-9.16.50-RH.so
/usr/lib64/libirs-9.16.50-RH.so
/usr/lib64/libisc-9.16.50-RH.so
/usr/lib64/libisccc-9.16.50-RH.so
/usr/lib64/libisccfg-9.16.50-RH.so
/usr/lib64/libns-9.16.50-RH.so

Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Oct 26 08:14:02 2026