| Name: | bind-sdb |
|---|---|
| Epoch: | 32 |
| Version: | 9.11.36 |
| Release: | 16.el8_10.4 |
| Architecture: | aarch64 |
| Group: | Unspecified |
| Size: | 1200222 |
| License: | MPLv2.0 |
| RPM: | bind-sdb-9.11.36-16.el8_10.4.aarch64.rpm |
| Source RPM: | bind-9.11.36-16.el8_10.4.src.rpm |
| Build Date: | Thu Feb 20 2025 |
| Build Host: | build-ol8-aarch64.oracle.com |
| Vendor: | Oracle America |
| URL: | https://www.isc.org/downloads/bind/ |
| Summary: | BIND server with database backends and DLZ support |
| Description: | BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named-sdb) which has compiled-in SDB (Simplified Database Backend) which includes support for using alternative Zone Databases stored in an LDAP server (ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), or in the filesystem (dirdb), in addition to the standard in-memory RBT (Red Black Tree) zone database. It also includes support for DLZ (Dynamic Loadable Zones) |
- Change patches applying to use -P parameter
- Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended
- Rebuild after CI change
- Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name
- Ensure incompatible dhcp is not accepted
- Ensure incompatible bind-dyndb-ldap is not accepted
- Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers
- Update addresses of b.root-servers.net (RHEL-18449)
- Disable caching of stale records by default (RHEL-11785)
- Prevent exahustion of memory from control channel (CVE-2023-3341)