The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
Go to file
Fedor Vorobev bab030378c Use the same test plans in CI as in errata testing
During errata testing we use /plans/bind/* plans because we have
multiple bind components (bind9.18, and also bind9.20 will be coming
soon).

CI was using /plans/* plans for the bind component, which is
inconsistent with what we use for errata testing.
2026-07-14 14:36:06 +02:00
.fmf ci plans for rhel9 2025-10-14 12:03:41 +02:00
tests Merged update from upstream sources 2021-01-12 20:05:29 +00:00
.gitignore Update to 9.16.50 2026-07-07 14:37:39 +02:00
bind93-rh490837.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind97-exportlib.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
bind97-rh645544.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.5-dlz-64bit.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
bind-9.5-PIE.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.9.1-P2-dlz-libdb.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
bind-9.10-dist-native-pkcs11.patch Update to 9.16.16 2021-07-22 00:31:03 +02:00
bind-9.11-fips-disable.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.11-fips-tests.patch Update to 9.16.50 2026-07-07 14:37:39 +02:00
bind-9.11-kyua-pkcs11.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.11-rh1666814.patch Remove merged changes and update changed patch 2021-11-23 11:27:00 +01:00
bind-9.11.12.tar.gz.asc RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
bind-9.14-config-pkcs11.patch Update to 9.16.13 2021-05-04 14:08:10 +02:00
bind-9.14-json-c.patch Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.14.7.tar.gz.asc Merged update from upstream sources 2021-01-22 20:42:08 +00:00
bind-9.16-CVE-2023-2828.patch Fix CVE-2023-2828 2023-07-19 18:09:09 +02:00
bind-9.16-CVE-2024-1737-records-test.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.16-CVE-2024-1737-records.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.16-CVE-2024-1737-types-test.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.16-CVE-2024-1737-types.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.16-CVE-2024-1737.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.16-CVE-2024-1975.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.16-CVE-2025-40778.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.16-CVE-2025-40780.patch Prevent cache poisoning due to weak PRNG (CVE-2025-40780) 2025-11-10 19:10:30 +01:00
bind-9.16-CVE-2026-1519.patch [9.16] [CVE-2026-1519] sec: usr: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations 2026-04-17 12:53:16 +02:00
bind-9.16-CVE-2026-3039.patch [9.16] [CVE-2026-3039] sec: usr: Fix GSS-API resource leak 2026-06-24 14:56:42 +02:00
bind-9.16-CVE-2026-5946.patch Adjust CVE-2026-5946 patch for new version of bind 2026-07-07 18:12:37 +02:00
bind-9.16-python-isc-distutils.patch Fix installability conflict on python subpackage 2026-07-07 14:38:39 +02:00
bind-9.16-redhat_doc.patch Update to 9.16.13 2021-05-04 14:08:10 +02:00
bind-9.16-RH-inline-signing.patch Still start if inline-signing and dyn. updates are not set 2026-07-07 14:37:42 +02:00
bind-9.18-configurable-additional-records.patch Add runtime tunable limit for max additional records 2025-07-09 11:36:27 +02:00
bind-9.18-CVE-2024-4076.patch Resolve CVE-2024-4076 2024-08-27 22:30:26 +02:00
bind-9.18-CVE-2024-11187-pre-test.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.18-CVE-2024-11187.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.18-dig-idn-input-always-test.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.18-dig-idn-input-always.patch Fix patches after rebase 2026-07-07 14:37:42 +02:00
bind-9.18-fix-dig-hanging-issue.patch Fix masterformat, reclimit, and resolver tests 2026-07-07 14:38:41 +02:00
bind-9.18-fix-qmin-test.patch Fix qmin upstream test suite test 2026-07-07 14:40:57 +02:00
bind-9.18-partial-additional-records.patch Change additional NS to be served partially 2025-06-20 20:57:37 +02:00
bind-9.18-query-fname-relative.patch Add extra protections to places needing absolute names 2025-06-10 20:03:10 +02:00
bind-9.20-robust-key-rollovers.patch Backport fix for manual DNSSEC key rolllovers. 2026-01-29 17:03:47 +01:00
bind-9.20-stale-cname-tests.patch Include stale CNAME chain backports from v9.18 2026-07-07 14:39:52 +02:00
bind-9.20-stale-cname.patch Include stale CNAME chain backports from v9.18 2026-07-07 14:39:52 +02:00
bind-9.21-resume-qmin-cname.patch Prevent name.c:670: REQUIRE((name1->attributes & 0x00000001) == (name2->attributes & 0x00000001)) failed 2025-06-10 20:03:10 +02:00
bind-chroot.tmpfiles.d Add forgotten _libdir/named into bind-chroot tmpfiles 2026-01-28 11:24:50 +01:00
bind.spec Adjust changelog dates to follow chronological order 2026-07-07 18:11:10 +02:00
bind.tmpfiles.d Copy named.* into /usr/share/named 2025-12-01 19:50:50 +01:00
Changes.md Merged update from upstream sources 2021-01-22 20:42:08 +00:00
ci.fmf ci plans for rhel9 2025-10-14 12:03:41 +02:00
gating.yaml ci plans for rhel9 2025-10-14 12:03:41 +02:00
generate-rndc-key.sh Merged update from upstream sources 2021-01-22 20:42:08 +00:00
isc-keyblock.asc Update to 9.16.50 2026-07-07 14:37:39 +02:00
ldap2zone.c RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
makefile-replace-libs.py RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named-chroot-setup.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named-chroot.files Copy named.* into /usr/share/named 2025-12-01 19:50:50 +01:00
named-chroot.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named-pkcs11.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named-setup-rndc.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.conf Merged update from upstream sources 2021-01-22 20:42:08 +00:00
named.conf.sample Merged update from upstream sources 2021-01-22 20:42:08 +00:00
named.empty RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.localhost RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.logrotate logrotate: skip if empty and remove old variants 2025-09-12 15:41:21 +02:00
named.loopback RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.rfc1912.zones RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.root Update addresses of b.root-servers.net 2023-12-07 15:20:38 +01:00
named.root.key Merged update from upstream sources 2021-01-22 20:42:08 +00:00
named.rwtab RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.service RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.sysconfig RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
named.sysusers Add sysusers named user creation (rhbz#2105415) 2025-12-17 14:41:57 +01:00
plans.fmf Use the same test plans in CI as in errata testing 2026-07-14 14:36:06 +02:00
README.md Merged update from upstream sources 2021-01-22 20:42:08 +00:00
setup-named-chroot.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
setup-named-softhsm.sh RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
softhsm2.conf.in RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00
sources Update to 9.16.50 2026-07-07 14:37:39 +02:00
trusted-key.key RHEL 9.0.0 Alpha bootstrap 2020-10-14 22:16:50 +02:00

BIND 9

BIND (Berkeley Internet Name Domain) is a complete, highly portable implementation of the DNS (Domain Name System) protocol.

Internet Systems Consortium (https://www.isc.org), a 501(c)(3) public benefit corporation dedicated to providing software and services in support of the Internet infrastructure, developed BIND 9 and is responsible for its ongoing maintenance and improvement.

More details about upstream project can be found on their gitlab. This repository contains only upstream sources and packaging instructions for Fedora Project.

Subpackages

The package contains several subpackages, some of them can be disabled on rebuild.

  • bind -- named daemon providing DNS server
  • bind-utils -- set of tools to analyse DNS responses or update entries (dig, host)
  • bind-doc -- documentation for current bind, BIND 9 Administrator Reference Manual.
  • bind-license -- Shared license for all packages but bind-export-libs.
  • bind-pkcs11 -- named daemon built with native PKCS#11 support. Can be disabled by --without PKCS11.
  • bind-libs and bind-libs-lite -- Shared libraries used by some others programs
  • bind-devel -- Development headers for libs.
  • bind-dlz-* -- Dynamic loadable DLZ plugins with support for external databases

Optional features

  • GSSTSIG -- Support for Kerberos authentication in BIND.
  • LMDB -- Support for dynamic database for managing runtime added zones. Provides faster removal of added zone with much less overhead. But requires lmdb linked to base libs.
  • DLZ -- Support for dynamic loaded modules providing support for features bind-sdb provides, but only small module is required.