[ol8_appstream] bind9.16-32:9.16.23-0.22.el8_10.x86_64

Name:	bind9.16
Epoch:	32
Version:	9.16.23
Release:	0.22.el8_10
Architecture:	x86_64
Group:	Unspecified
Size:	1495044
License:	MPLv2.0
RPM:	bind9.16-9.16.23-0.22.el8_10.x86_64.rpm
Source RPM:	bind9.16-9.16.23-0.22.el8_10.src.rpm
Build Date:	Wed Aug 14 2024
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://www.isc.org/downloads/bind/
Summary:	The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
Description:	BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Changelog (Show File list) (Show related packages)

Fri Aug 09 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.22
```
- Minor fix of reclimit test backport (CVE-2024-1737)
```

Wed Aug 07 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.21

- Backport addition of max-records-per-type and max-records-per-type options
  (CVE-2024-1737)

Thu Jul 18 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.20

- Resolve CVE-2024-1975
- Resolve CVE-2024-1737
- Resolve CVE-2024-4076
- Add ability to change runtime limits for max types and records per name

Wed May 15 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.19
```
- Add few more explicit conflicts with bind subpackages (RHEL-2208)
```
Mon Mar 25 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.18
```
- Prevent crashing at masterformat system test (CVE-2023-6516)
```

Mon Feb 12 2024 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.17

- Prevent increased CPU load on large DNS messages (CVE-2023-4408)
- Prevent assertion failure when nxdomain-redirect is used with
 RFC 1918 reverse zones (CVE-2023-5517)
- Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
- Specific recursive query patterns may lead to an out-of-memory
  condition (CVE-2023-6516)
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
  CVE-2023-50868)
- Import tests for large DNS messages fix
- Add downstream change complementing CVE-2023-50387

Wed Sep 20 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.16

- Limit the amount of recursion possible in control channel (CVE-2023-3341)

Tue Jun 20 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.15

- Strengten cache cleaning to prevent overflowing configured limit
  (CVE-2023-2828)

Sat Feb 25 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.14
```
- Handle subtle difference between upstream and rhel (CVE-2022-3094)
```

Wed Feb 08 2023 Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.13

- Prevent flooding with UPDATE requests (CVE-2022-3094)
- Handle RRSIG queries when server-stale is active (CVE-2022-3736)
- Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)