-
Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.10
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)
-
Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.9
- Add new root key 38696 into package files (RHEL-255223)
- Update built-in anchors in delv and named
-
Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.8
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)
-
Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.7
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
RHEL-213314)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.6
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
RHEL-213389)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.5
- Reject invalid signed wildcard records (CVE-2026-11721,
RHEL-213417)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.4
- Fix RPZ wildcard expansion self-referential CNAME
(CVE-2026-11331, RHEL-213495)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.3
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
RHEL-213495)
-
Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.2
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)
-
Wed Apr 01 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.1
- Correct backport issue in the patch (CVE-2026-1519)