-
Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.8
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)
-
Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.7
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
RHEL-213314)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.6
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
RHEL-213389)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.5
- Reject invalid signed wildcard records (CVE-2026-11721,
RHEL-213417)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.4
- Fix RPZ wildcard expansion self-referential CNAME
(CVE-2026-11331, RHEL-213495)
-
Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.3
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
RHEL-213495)
-
Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.2
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)
-
Wed Apr 01 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.1
- Correct backport issue in the patch (CVE-2026-1519)
-
Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
-
Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
- Correct changelog version of previous change