rpms/bind9.16
7
0
Fork 0
Code Issues Pull Requests Releases Activity
The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server
40 Commits 6 Branches 28 Tags 1.3 MiB
Shell 99.5%
Makefile 0.5%
1081165d67
Go to file
RHEL Packaging Agent 1081165d67 Fix CVE-2026-11622: reference-counted DNS cache slab headers 
Backport upstream commit c57695da31 ("Make the dns_slabheaders
in the cache reference counted") to fix CVE-2026-11622, a
use-after-free vulnerability in the DNS cache.

The patch adds reference counting to dns_slabheaders so stale
headers can be safely reclaimed independently of their enclosing
node. It modifies core cache code (rbtdb.c, rdataslab.h) and
updates the reclimit system test. Four hunks required manual
conflict resolution due to downstream PKCS11-related differences.

CVE: CVE-2026-11622
Upstream patches:
 - c57695da31.patch
Resolves: RHEL-213396

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-04 17:35:53 +02:00
.fmf Fix gating and introduce recent fmf test plans 2026-04-09 12:56:46 +02:00
.gitignore Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind9.16.spec Fix CVE-2026-11622: reference-counted DNS cache slab headers 2026-08-04 17:35:53 +02:00
bind93-rh490837.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind97-rh645544.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.5-dlz-64bit.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.5-PIE.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.9.1-P2-dlz-libdb.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.10-dist-native-pkcs11.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.11-feature-test-named.patch Properly test also gsstsig upstream test 2024-08-08 00:53:50 +02:00
bind-9.11-fips-tests.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.11-kyua-pkcs11.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.11-rh1666814.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.11-tests-variants.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.14-config-pkcs11.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2021-25220-test.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2021-25220.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-0396.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-2795.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-3080.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-3094-1.patch Auto sync2gitlab import of bind9.16-9.16.23-0.14.el8.src.rpm 2023-02-28 18:12:03 +00:00
bind-9.16-CVE-2022-3094-2.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-3094-3.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-3094-test.patch Auto sync2gitlab import of bind9.16-9.16.23-0.14.el8.src.rpm 2023-02-28 18:12:03 +00:00
bind-9.16-CVE-2022-3736.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-3924.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-38177.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2022-38178.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-CVE-2023-2828.patch Fix CVE-2023-2828 2023-09-04 15:08:41 +02:00
bind-9.16-CVE-2023-3341.patch Fix CVE-2023-3341 2023-09-20 16:29:27 +02:00
bind-9.16-CVE-2023-4408-test1.patch Import tests for large DNS messages fix 2024-02-21 20:57:49 +01:00
bind-9.16-CVE-2023-4408-test2.patch Import tests for large DNS messages fix 2024-02-21 20:57:49 +01:00
bind-9.16-CVE-2023-4408.patch Prevent increased CPU load on large DNS messages 2024-02-21 20:57:27 +01:00
bind-9.16-CVE-2023-5517.patch Prevent assertion failure when nxdomain-redirect is used with 2024-02-21 20:57:48 +01:00
bind-9.16-CVE-2023-5679.patch Prevent assertion failure if DNS64 and serve-stale is used 2024-02-21 20:57:48 +01:00
bind-9.16-CVE-2023-6516-test.patch Stop crashes at masterformat system tests 2024-04-04 15:52:17 +02:00
bind-9.16-CVE-2023-6516.patch Specific recursive query patterns may lead to an out-of-memory condition 2024-02-21 20:57:48 +01:00
bind-9.16-CVE-2023-50387.patch Prevent increased CPU consumption in DNSSEC validator 2024-02-21 20:57:49 +01:00
bind-9.16-CVE-2024-1737-records-test2.patch Minor fix of reclimit test backport 2024-08-09 12:42:08 +02:00
bind-9.16-CVE-2024-1737-records-test.patch [9.16] chg: usr: Backport max-records-per-type to BIND 9.16 2024-08-08 00:53:33 +02:00
bind-9.16-CVE-2024-1737-records.patch [9.16] chg: usr: Backport max-records-per-type to BIND 9.16 2024-08-08 00:53:33 +02:00
bind-9.16-CVE-2024-1737-types-test.patch [9.16] chg: usr: Backport max-types-per-name to BIND 9.16 2024-08-08 00:53:41 +02:00
bind-9.16-CVE-2024-1737-types.patch [9.16] chg: usr: Backport max-types-per-name to BIND 9.16 2024-08-08 00:53:41 +02:00
bind-9.16-CVE-2024-1737.patch Resolve CVE-2024-1737 2024-08-08 00:50:22 +02:00
bind-9.16-CVE-2024-1975.patch Resolve CVE-2024-1975 2024-08-08 00:42:13 +02:00
bind-9.16-CVE-2025-40778.patch Replace our downstream backports with upstream patches 2025-10-31 11:26:08 +01:00
bind-9.16-CVE-2025-40780.patch Replace our downstream backports with upstream patches 2025-10-31 11:26:08 +01:00
bind-9.16-CVE-2026-1519.patch [9.16] [CVE-2026-1519] sec: usr: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations 2026-03-31 12:38:53 +02:00
bind-9.16-CVE-2026-3039.patch [9.16] [CVE-2026-3039] sec: usr: Fix GSS-API resource leak 2026-05-27 18:30:19 +02:00
bind-9.16-CVE-2026-5946.patch [9.16] [CVE-2026-5946] sec: usr: Disable recursion, UPDATE, and NOTIFY for non-IN views 2026-06-02 10:49:12 +02:00
bind-9.16-CVE-2026-11331.patch Fix RPZ name-too-long wildcard expansion in bind9.16 (CVE-2026-11331) 2026-08-04 17:34:36 +02:00
bind-9.16-CVE-2026-11622.patch Fix CVE-2026-11622: reference-counted DNS cache slab headers 2026-08-04 17:35:53 +02:00
bind-9.16-CVE-2026-11721.patch Fix CVE-2026-11721: RRSIG labels validation and out-of-zone signing 2026-08-04 17:35:24 +02:00
bind-9.16-CVE-2026-13204.patch Fix CVE-2026-13204: ensure NSEC/NSEC3 has matching RRSIG 2026-08-04 17:32:38 +02:00
bind-9.16-isc_hp-CVE-2023-50387.patch Downstream specific changes related to KeyTrap 2024-02-21 20:57:49 +01:00
bind-9.16-isc-mempool-attach.patch Add mctx attach/detach when creating/destroying a memory pool 2024-02-21 20:57:49 +01:00
bind-9.16-redhat_doc.patch Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.16-system-test-cds.patch Define variables used for test variants 2024-02-21 20:57:49 +01:00
bind-9.16-update-b.root-servers.net.patch Update addresses of b.root-servers.net 2025-08-13 18:40:01 +02:00
bind-9.16.23.tar.xz.asc Import rpm: c8s 2023-02-27 12:22:46 -05:00
bind-9.18-CVE-2024-4076.patch Resolve CVE-2024-4076 2024-08-08 00:51:50 +02:00
bind-9.18-CVE-2024-11187-pre-test.patch Limit the additional processing for large RDATA sets 2025-02-15 01:34:49 +01:00
bind-9.18-CVE-2024-11187.patch Limit the additional processing for large RDATA sets 2025-02-15 01:34:49 +01:00
bind.tmpfiles.d Import rpm: c8s 2023-02-27 12:22:46 -05:00
codesign2021.txt Import rpm: c8s 2023-02-27 12:22:46 -05:00
gating.yaml Fix gating and introduce recent fmf test plans 2026-04-09 12:56:46 +02:00
generate-rndc-key.sh Import rpm: c8s 2023-02-27 12:22:46 -05:00
named-chroot-setup.service Import rpm: c8s 2023-02-27 12:22:46 -05:00
named-chroot.files Import rpm: c8s 2023-02-27 12:22:46 -05:00
named-chroot.service Import rpm: c8s 2023-02-27 12:22:46 -05:00
named-pkcs11.service Import rpm: c8s 2023-02-27 12:22:46 -05:00
named-setup-rndc.service Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.conf Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.conf.sample Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.empty Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.localhost Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.logrotate Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.loopback Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.rfc1912.zones Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.root Update addresses of b.root-servers.net 2025-08-13 18:40:01 +02:00
named.root.key Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.rwtab Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.service Import rpm: c8s 2023-02-27 12:22:46 -05:00
named.sysconfig Import rpm: c8s 2023-02-27 12:22:46 -05:00
plans.fmf Fix gating and introduce recent fmf test plans 2026-04-09 12:56:46 +02:00
setup-named-chroot.sh Import rpm: c8s 2023-02-27 12:22:46 -05:00
setup-named-softhsm.sh Import rpm: c8s 2023-02-27 12:22:46 -05:00
sources Import rpm: c8s 2023-02-27 12:22:46 -05:00
trusted-key.key Import rpm: c8s 2023-02-27 12:22:46 -05:00