bind9.18-chroot-9.18.29-16.el9 RPM for x86_64

From CentOS Stream 9 AppStream for x86_64

This package contains a tree of files which can be used as a
chroot(2) jail for the named(8) program from the BIND package.
Based on the code from Jan "Yenya" Kasprzak <kas@fi.muni.cz>

Provides

• bind9.18-chroot
• bind-chroot
• bind9.18-chroot(x86-64)
• config(bind9.18-chroot)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /usr/bin/bash
• bind9.18(x86-64) = 32:9.18.29-16.el9
• config(bind9.18-chroot) = 32:9.18.29-16.el9
• grep
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause

Changelog

* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-16
  - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
    (CVE-2026-1519)
  - Correct backport issue in the patch (CVE-2026-1519)
* Thu Feb 26 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-15
  - Backport fixes for stale CNAME chains. (RHEL-86172)
* Fri Jan 30 2026 Fedor Vorobev <fvorobev@redhat.com> - 32:9.18.29-14
  - Backport fix for manual DNSSEC key rolllovers. (RHEL-144422)
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
  - Correct changelog version of previous change
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-12
  - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-11
  - Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-10
  - Add missing bind-chroot subdirectories
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-9
  - Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-8
  - Copy named.* files from /usr/share/named into var/named
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-5
  - logrotate: skip if empty and remove old variants (RHEL-113942)
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.29-4
  - Prevent name.c:670 attributes assertion failed (RHEL-30407)
  - Add extra checks for relative names
* Mon Feb 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)
* Mon Jan 27 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support
* Wed Aug 21 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-1
  - Update to 9.18.29 (RHEL-53015)
* Tue Aug 06 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.28-1
  - Update to 9.18.28 (RHEL-53015)
* Wed Jun 19 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs
* Thu May 16 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.27-1
  - Update to 9.18.27
* Mon Apr 22 2024 Petr Menšík <pemensik@redhat.com> - 32:9.18.26-1
  - Update to 9.18.26 (rhbz#2270476)
  - Rename to bind9.18 (RHEL-14898)

Files

/etc/named-chroot.files
/usr/lib/systemd/system/named-chroot-setup.service
/usr/lib/systemd/system/named-chroot.service
/usr/lib/tmpfiles.d/bind9.18-chroot.conf
/usr/libexec/setup-named-chroot.sh
/var/named/chroot
/var/named/chroot/dev
/var/named/chroot/dev/null
/var/named/chroot/dev/random
/var/named/chroot/dev/urandom
/var/named/chroot/dev/zero
/var/named/chroot/etc
/var/named/chroot/etc/crypto-policies
/var/named/chroot/etc/crypto-policies/back-ends
/var/named/chroot/etc/named
/var/named/chroot/etc/named.conf
/var/named/chroot/etc/pki
/var/named/chroot/etc/pki/dnssec-keys
/var/named/chroot/proc
/var/named/chroot/proc/sys
/var/named/chroot/proc/sys/net
/var/named/chroot/proc/sys/net/ipv4
/var/named/chroot/run
/var/named/chroot/run/named
/var/named/chroot/usr
/var/named/chroot/usr/lib64
/var/named/chroot/usr/lib64/bind
/var/named/chroot/usr/share/GeoIP
/var/named/chroot/usr/share/named
/var/named/chroot/var
/var/named/chroot/var/log
/var/named/chroot/var/named
/var/named/chroot/var/run
/var/named/chroot/var/tmp

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Jul 2 04:33:35 2026