-
Thu Oct 05 2023 Alan Steinberg <alan.steinberg@oracle.com> - 32:9.16.23-14.2
- stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)
-
Mon Jul 17 2023 Kevin Lyons <kevin.x.lyons@oracle.com> - 32:9.16.23-14.1
- Improve RBT overmem cache cleaning (CVE-2023-2828)
-
Sat Feb 25 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.14
- Handle subtle difference between upstream and rhel (CVE-2022-3094)
-
Wed Feb 08 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13
- Prevent flooding with UPDATE requests (CVE-2022-3094)
- Handle RRSIG queries when server-stale is active (CVE-2022-3736)
- Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)
-
Tue Dec 20 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.12
- Include bind9.16-dnssec-utils in public repository (#2115322)
-
Tue Oct 04 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.11
- Bound the amount of work performed for delegations (CVE-2022-2795)
-
Thu Sep 22 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.10
- Fix possible serve-stale related crash (CVE-2022-3080)
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)
-
Mon Apr 11 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9
- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders
-
Fri Mar 25 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.8
- TCP connections with 'keep-response-order' are properly close in all cases
(CVE-2022-0396)
-
Thu Jan 20 2022 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.7
- Keep symlink to static data but keep them in package
- Workaround to RPM limitation