[ol8_appstream] bind-pkcs11-32:9.11.26-6.el8.x86_64

This is a version of BIND server built with native PKCS#11 functionality.
It is important to have SoftHSM v2+ installed and some token initialized.
For other supported HSM modules please check the BIND documentation.

Changelog (Show File list) (Show related packages)

• Fri Jul 09 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-6

  - Use random entropy to generate unique TKEY identifiers (#1980916)

• Fri May 07 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-5

  - Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
    (#1953056)

• Tue Apr 27 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4

  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)

• Mon Feb 15 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-3

  - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)

• Tue Jan 05 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2

  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)

• Mon Jan 04 2021 Petr Menšík <pemensik@redhat.com> - 32:9.11.26-1

  - Update to 9.11.26

• Thu Nov 26 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1

  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)

• Fri Sep 25 2020 Tomas Korbar <tkorbar@redhat.com> - 32:9.11.20-6

  - Do not ignore RPZ wildcard passthru (#1876492)

• Tue Aug 18 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5

  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test

• Wed Jul 22 2020 Petr Menšík <pemensik@redhat.com> - 32:9.11.20-4

  - Prevent crash on dstlib initialization failure (#1859454)