[ol8_appstream] bind-sdb-32:9.11.36-16.el8_10.14.aarch64

Name:	bind-sdb
Epoch:	32
Version:	9.11.36
Release:	16.el8_10.14
Architecture:	aarch64
Group:	Unspecified
Size:	1200062
License:	MPLv2.0
RPM:	bind-sdb-9.11.36-16.el8_10.14.aarch64.rpm
Source RPM:	bind-9.11.36-16.el8_10.14.src.rpm
Build Date:	Thu Aug 13 2026
Build Host:	build-ol8-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	BIND server with database backends and DLZ support
Description:	BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named-sdb) which has compiled-in SDB (Simplified Database Backend) which includes support for using alternative Zone Databases stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), or in the filesystem (dirdb), in addition to the standard in-memory RBT (Red Black Tree) zone database. It also includes support for DLZ (Dynamic Loadable Zones)

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.14
```
- Validate NSEC3 signer matches owning zone (CVE-2026-10723)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.12
```
- Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204)
```
Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.11
```
- Reject out-of-zone NSEC entries in DNSSEC validation
  (CVE-2026-13321)
```

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.10

- Reject RRSIG records with invalid label counts (CVE-2026-11721)
- Add unittest check

Mon Jul 27 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.11.36-16.9
```
- Add reference counting to cache dns_slabheaders (CVE-2026-11622)
```

Wed May 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.8

- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)

Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.7

- Denial of Service via maliciously crafted DNSSEC-validated zone
  (CVE-2026-1519)

Thu Oct 30 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.6
```
- Address various spoofing attacks (CVE-2025-40778)
```

Thu Jul 10 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.5

- Add support for max-records-per-type and max-types-per-name options
  (RHEL-61936)
- Support reading of new options also in named-checkconf -z, v2

Thu Feb 06 2025 Petr Menšík <pemensik@redhat.com> - 32:9.11.36-16.4
```
- Change patches applying to use -P parameter
```