-
Tue Apr 16 2024 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers
-
Mon Sep 25 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15
- Limit the amount of recursion possible in control channel (CVE-2023-3341)
-
Mon Jul 03 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14
- Prevent the cache going over the configured limit (CVE-2023-2828)
-
Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13
- Tighten cache protection against record from forwarders (CVE-2021-25220)
-
Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12
- Include test of forwarders (CVE-2021-25220)
-
Thu Sep 29 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11
- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
-
Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
-
Mon Jan 24 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9
- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
(#1935152)
-
Thu Oct 14 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8
- Prevent a race after zone load (#2011220)
-
Tue Jul 13 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7
- Apply again patch 172, got removed by mistake