[ol7_latest] bind-pkcs11-32:9.11.4-26.P2.el7_9.2.aarch64

This is a version of BIND server built with native PKCS#11 functionality.
It is important to have SoftHSM v2+ installed and some token initialized.
For other supported HSM modules please check the BIND documentation.
This version of BIND binary is supported only in setup with the IPA server.

Changelog (Show File list) (Show related packages)

• Fri Oct 02 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-26.P2.2

  - Fix unsupported algorithms validation (#rh1769876)

• Wed Aug 26 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1

  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)

• Fri May 29 2020 Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-26.P2

  - Fix EDNS512 loops on broken servers

• Tue May 26 2020 Artem Egorenkov <aegorenk@redhat.com> - 32:9.11.4-25.P2

  - rebinding protection for forwarding DNS server upstream patch (#1832812)

• Fri May 22 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-24.P2

  - Add CVE tests to codebase

• Mon May 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2

  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)

• Wed Mar 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-22.P2

  - Solve often priming queries on some forwarder (#1756201)

• Mon Mar 16 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-21.P2

  - Disable atomic operations also on ppc (#1779589)

• Fri Mar 13 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-20.P2

  - Do not crash when nsupdate with GSS terminated early (#1300636)

• Wed Mar 11 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2

  - Allow conflicting zone files with a warning (#1744081)