[ol7_latest] bind-pkcs11-libs-32:9.11.4-26.P2.el7_9.16.i686

This is a set of BIND libraries (dns, isc) compiled with native PKCS#11
functionality.

Changelog (Show File list) (Show related packages)

• Tue Apr 16 2024 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16

  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Add missing design by contract tests to dns_catz*
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Do not use header_prev in expire_lru_headers

• Mon Sep 25 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.15

  - Limit the amount of recursion possible in control channel (CVE-2023-3341)

• Mon Jul 03 2023 Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.14

  - Prevent the cache going over the configured limit (CVE-2023-2828)

• Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.13

  - Tighten cache protection against record from forwarders (CVE-2021-25220)

• Wed Dec 14 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.12

  - Include test of forwarders (CVE-2021-25220)

• Thu Sep 29 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.11

  - Prevent excessive resource use while processing large delegations.
    (CVE-2022-2795)

• Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10

  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)

• Mon Jan 24 2022 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.9

  - Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
    (#1935152)

• Thu Oct 14 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.8

  - Prevent a race after zone load (#2011220)

• Tue Jul 13 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.7

  - Apply again patch 172, got removed by mistake