[ol8_appstream] bind-sdb-32:9.11.36-16.el8_10.16.aarch64

Name:	bind-sdb
Epoch:	32
Version:	9.11.36
Release:	16.el8_10.16
Architecture:	aarch64
Group:	Unspecified
Size:	1198702
License:	MPLv2.0
RPM:	bind-sdb-9.11.36-16.el8_10.16.aarch64.rpm
Source RPM:	bind-9.11.36-16.el8_10.16.src.rpm
Build Date:	Thu Oct 08 2026
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	BIND server with database backends and DLZ support
Description:	BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named-sdb) which has compiled-in SDB (Simplified Database Backend) which includes support for using alternative Zone Databases stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), or in the filesystem (dirdb), in addition to the standard in-memory RBT (Red Black Tree) zone database. It also includes support for DLZ (Dynamic Loadable Zones)

Changelog (Show File list) (Show related packages)

Wed Sep 30 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.16

- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.15

- Add new root key 38696 into package files (RHEL-131891)
- Update built-in anchors in delv and named

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.14
```
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.12
```
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.11
```
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)
```

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.10

- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.9
```
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)
```

Wed May 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.8

- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.7

- Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)

Thu Oct 30 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.6
```
- Address various spoofing attacks (CVE-2025-40778)
```