[ol10_appstream] bind-dnssec-utils-32:9.18.33-15.0.1.el10_2.12.aarch64

Name:	bind-dnssec-utils
Epoch:	32
Version:	9.18.33
Release:	15.0.1.el10_2.12
Architecture:	aarch64
Group:	Unspecified
Size:	719887
License:	MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
RPM:	bind-dnssec-utils-9.18.33-15.0.1.el10_2.12.aarch64.rpm
Source RPM:	bind-9.18.33-15.0.1.el10_2.12.src.rpm
Build Date:	Mon Oct 05 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	DNSSEC keys and zones management utilities
Description:	bind-dnssec-utils contains a collection of utilities for editing DNSSEC keys and BIND zone files. These tools provide generation, revocation and verification of keys and DNSSEC signatures in zone files. You should install bind-dnssec-utils if you need to sign a DNS zone or maintain keys for it.

Changelog (Show File list) (Show related packages)

Mon Oct 05 2026 EL Errata <el-errata_ww@oracle.com> - 9.18.33-15.0.1.el10_2.12

- Hard require needed openssl-libs [Orabug: 38742109]
- Fix warning when changing device file permissions [Orabug: 36518580]

Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.12

- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)

Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.11
```
- Add new root key 38696 into package files too (RHEL-252999)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.10
```
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)
```
Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.9
```
- Reject out-of-zone NSEC next owner names (CVE-2026-13321)
```
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.7
```
- Fix reference-counted dns_slabheaders in cache (CVE-2026-11622)
```
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.6
```
- Fix RRSIG label count validation for wildcard cache poisoning
  (CVE-2026-11721)
```
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.5
```
- Fix RPZ name-too-long wildcard expansion (CVE-2026-11331)
```
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.33-15.4
```
- Fix assertion failure on malformed NSEC/NSEC3 responses
  (CVE-2026-13204)
```

Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.33-15.2

- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)