bind9.18-9.18.29-25.el9 RPM for x86_64

From CentOS Stream 9 AppStream for x86_64

BIND (Berkeley Internet Name Domain) is an implementation of the DNS
(Domain Name System) protocols. BIND includes a DNS server (named),
which resolves host names to IP addresses; a resolver library
(routines for applications to use when interfacing with DNS); and
tools for verifying that the DNS server is operating properly.

Provides

• bind9.18
• bind
• bind9.18(x86-64)
• config(bind9.18)
• group(named)
• user(named)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/bash
• /usr/bin/sh
• bind9.18-libs(x86-64) = 32:9.18.29-25.el9
• config(bind9.18) = 32:9.18.29-25.el9
• coreutils
• glibc-common
• grep
• libbind9-9.18.29.so()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.7)(64bit)
• libcap.so.2()(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libdns-9.18.29.so()(64bit)
• libfstrm.so.0()(64bit)
• libfstrm.so.0(LIBFSTRM_0.2.0)(64bit)
• libisc-9.18.29.so()(64bit)
• libisccc-9.18.29.so()(64bit)
• libisccfg-9.18.29.so()(64bit)
• libjson-c.so.5()(64bit)
• libjson-c.so.5(JSONC_0.14)(64bit)
• liblmdb.so.0.0.0()(64bit)
• libmaxminddb.so.0()(64bit)
• libnghttp2.so.14()(64bit)
• libns-9.18.29.so()(64bit)
• libprotobuf-c.so.1()(64bit)
• libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit)
• libuv.so.1()(64bit)
• libxml2.so.2()(64bit)
• libxml2.so.2(LIBXML2_2.4.30)(64bit)
• libxml2.so.2(LIBXML2_2.6.0)(64bit)
• libxml2.so.2(LIBXML2_2.6.3)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)
• shadow-utils
• shadow-utils

License

MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause

Changelog

* Thu Aug 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-25
  - Remove downstream introduced double-free (CVE-2026-5950)
* Wed Aug 19 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-24
  - Avoid unbounded recursion loop (CVE-2026-5950)
  - Limit overlapping addresses resolver usage (CVE-2026-3592)
* Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-23
  - Fix NSEC3 signer validation (CVE-2026-10723)
* Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-22
  - Reject out-of-zone NSEC next owner names (CVE-2026-13321)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-21
  - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-20
  - Reject invalid signed wildcard records (CVE-2026-11721)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-19
  - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-18
  - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
    RHEL-213495)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-17
  - Fix GSS-API resource leak (CVE-2026-3039)
  - Invalid handling of CLASS != IN (CVE-2026-5946)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-16
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
  - Correct backport issue in the patch (CVE-2026-1519)
* Thu Feb 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-15
  - Backport fixes for stale CNAME chains. (RHEL-86172)
* Fri Jan 30 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-14
  - Backport fix for manual DNSSEC key rolllovers. (RHEL-144422)
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
  - Correct changelog version of previous change
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-12
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-11
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-10
  - Add missing bind-chroot subdirectories
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-9
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-8
  - Copy named.* files from /usr/share/named into var/named
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-5
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.29-4
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Mon Feb 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)
* Mon Jan 27 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support

Files

/etc/logrotate.d/named
/etc/named
/etc/named.conf
/etc/named.rfc1912.zones
/etc/named.root.key
/etc/rndc.conf
/etc/rndc.key
/etc/rwtab.d/named
/etc/sysconfig/named
/run/named
/usr/bin/mdig
/usr/bin/named-checkconf
/usr/bin/named-journalprint
/usr/bin/named-rrchecker
/usr/lib/.build-id
/usr/lib/.build-id/0a
/usr/lib/.build-id/0a/ba2f14efb7507520e3112756c3f07ee4eb6ca8
/usr/lib/.build-id/11
/usr/lib/.build-id/11/5033cdfca1b61b91a9bb465612b643a23b197d
/usr/lib/.build-id/22
/usr/lib/.build-id/22/151b89bb742cedb34d060e6d2fbc866e212a61
/usr/lib/.build-id/36
/usr/lib/.build-id/36/7a33fc9a1d47c50669cd45bac2b26fdea12e8f
/usr/lib/.build-id/50
/usr/lib/.build-id/50/3d8e9d83c1e0196a8f31a6b52784ccb2c614c0
/usr/lib/.build-id/65
/usr/lib/.build-id/65/de6b598c7a920037bc2618b3e7a9899bdeff87
/usr/lib/.build-id/9b
/usr/lib/.build-id/9b/663d80c1c4b4d3769a1538ef4a2d0d004c683d
/usr/lib/.build-id/9f
/usr/lib/.build-id/9f/c229fb21eff2f94938fe556912cfe712cf2d8f
/usr/lib/.build-id/e9
/usr/lib/.build-id/e9/a42ce777c7a48a953b7c7a4d50b3b8670efb72
/usr/lib/systemd/system/named-setup-rndc.service
/usr/lib/systemd/system/named.service
/usr/lib/sysusers.d/bind9.18.conf
/usr/lib/tmpfiles.d/named.conf
/usr/lib64/bind
/usr/lib64/bind/filter-a.so
/usr/lib64/bind/filter-aaaa.so
/usr/lib64/named
/usr/libexec/generate-rndc-key.sh
/usr/libexec/setup-named-softhsm.sh
/usr/sbin/named
/usr/sbin/named-checkconf
/usr/sbin/rndc
/usr/sbin/rndc-confgen
/usr/share/doc/bind9.18
/usr/share/doc/bind9.18/CHANGES
/usr/share/doc/bind9.18/README.md
/usr/share/doc/bind9.18/named.conf.default
/usr/share/doc/bind9.18/sample
/usr/share/doc/bind9.18/sample/etc
/usr/share/doc/bind9.18/sample/etc/named.conf
/usr/share/doc/bind9.18/sample/etc/named.rfc1912.zones
/usr/share/doc/bind9.18/sample/var
/usr/share/doc/bind9.18/sample/var/named
/usr/share/doc/bind9.18/sample/var/named/data
/usr/share/doc/bind9.18/sample/var/named/my.external.zone.db
/usr/share/doc/bind9.18/sample/var/named/my.internal.zone.db
/usr/share/doc/bind9.18/sample/var/named/named.ca
/usr/share/doc/bind9.18/sample/var/named/named.empty
/usr/share/doc/bind9.18/sample/var/named/named.localhost
/usr/share/doc/bind9.18/sample/var/named/named.loopback
/usr/share/doc/bind9.18/sample/var/named/slaves
/usr/share/doc/bind9.18/sample/var/named/slaves/my.ddns.internal.zone.db
/usr/share/doc/bind9.18/sample/var/named/slaves/my.slave.internal.zone.db
/usr/share/man/man1/mdig.1.gz
/usr/share/man/man1/named-checkconf.1.gz
/usr/share/man/man1/named-journalprint.1.gz
/usr/share/man/man1/named-rrchecker.1.gz
/usr/share/man/man5/named.conf.5.gz
/usr/share/man/man5/rndc.conf.5.gz
/usr/share/man/man8/filter-a.8.gz
/usr/share/man/man8/filter-aaaa.8.gz
/usr/share/man/man8/named.8.gz
/usr/share/man/man8/rndc-confgen.8.gz
/usr/share/man/man8/rndc.8.gz
/usr/share/named
/usr/share/named/named.ca
/usr/share/named/named.empty
/usr/share/named/named.localhost
/usr/share/named/named.loopback
/var/log/named.log
/var/named
/var/named/data
/var/named/dynamic
/var/named/named.ca
/var/named/named.empty
/var/named/named.localhost
/var/named/named.loopback
/var/named/slaves

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Sep 3 06:05:22 2026