[ol8_appstream] bind-libs-32:9.11.36-16.el8_10.16.i686

Name:	bind-libs
Epoch:	32
Version:	9.11.36
Release:	16.el8_10.16
Architecture:	i686
Group:	Unspecified
Size:	219508
License:	MPLv2.0
RPM:	bind-libs-9.11.36-16.el8_10.16.i686.rpm
Source RPM:	bind-9.11.36-16.el8_10.16.src.rpm
Build Date:	Thu Oct 08 2026
Build Host:	build-ol8-i386.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	Libraries used by the BIND DNS packages
Description:	Contains heavyweight version of BIND suite libraries used by both named DNS server and utilities in bind-utils package.

Changelog (Show File list) (Show related packages)

Wed Sep 30 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.16

- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)

Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.15

- Add new root key 38696 into package files (RHEL-131891)
- Update built-in anchors in delv and named

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.14
```
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.12
```
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.11
```
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)
```

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.10

- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.9
```
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)
```

Wed May 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.8

- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.7

- Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)

Thu Oct 30 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.6
```
- Address various spoofing attacks (CVE-2025-40778)
```