[ol8_appstream] bind-libs-lite-32:9.11.36-16.el8_10.16.aarch64

Name:	bind-libs-lite
Epoch:	32
Version:	9.11.36
Release:	16.el8_10.16
Architecture:	aarch64
Group:	Unspecified
Size:	3235208
License:	MPLv2.0
RPM:	bind-libs-lite-9.11.36-16.el8_10.16.aarch64.rpm
Source RPM:	bind-9.11.36-16.el8_10.16.src.rpm
Build Date:	Thu Oct 08 2026
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	Libraries for working with the DNS protocol
Description:	Contains lite version of BIND suite libraries which are used by various programs to work with DNS protocol.

Changelog (Show File list) (Show related packages)

Wed Sep 30 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.16

- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.15

- Add new root key 38696 into package files (RHEL-131891)
- Update built-in anchors in delv and named

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.14
```
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.12
```
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.11
```
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)
```

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.10

- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.9
```
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)
```

Wed May 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.8

- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.7

- Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)

Thu Oct 30 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.6
```
- Address various spoofing attacks (CVE-2025-40778)
```