rpms/bind
9
0
Fork 1
Code Issues Pull requests Releases Activity
0 releases 107 tags
  • imports/c10s/bind-9.18.33-26.el10 7c61856b69

    [9.18] [CVE-2026-3592] sec: usr: Limit resolver server list size

    Ghost released this 2026-08-19 14:46:10 +00:00 | -1135 commits to c8 since this release

    When resolving a domain with many nameservers that share overlapping IP addresses (e.g., 10 NS records all pointing at the same set of addresses), BIND could previously waste time querying duplicate addresses and build up excessively large server lists. Deduplicate addresses in the resolver's server list so that each unique IP is only queried once per resolution attempt, regardless of how many NS records point to it and cap the number of addresses stored per nameserver name to 6 (combined A and AAAA), preventing memory and CPU overhead from domains with unusually large NS/glue sets.

    Closes isc-projects/bind9#5641

    RH:
    No tests are backported, because python tests have good enough support
    for it.

    Resolves: RHEL-189748
    CVE: CVE-2026-3592

    Downloads