bind-pkcs11 - Bind with native PKCS#11 functionality for crypto
| Website: | http://www.isc.org/products/BIND/ |
|---|---|
| License: | MPLv2.0 |
| Vendor: | Virtuozzo |
- Description:
This is a version of BIND server built with native PKCS#11 functionality. It is important to have SoftHSM v2+ installed and some token initialized. For other supported HSM modules please check the BIND documentation. This version of BIND binary is supported only in setup with the IPA server.
Packages
| bind-pkcs11-9.11.4-26.P2.vl7.16.x86_64 [362 KiB] |
Changelog
by Stepan Broz (2024-04-16):
- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Add missing design by contract tests to dns_catz* - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Do not use header_prev in expire_lru_headers |
| bind-pkcs11-9.11.4-26.P2.vl7.13.x86_64 [362 KiB] |
Changelog
by Petr Menšík (2022-12-14):
- Tighten cache protection against record from forwarders (CVE-2021-25220) |
| bind-pkcs11-9.11.4-26.P2.vl7.10.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2022-09-22):
- Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) |
| bind-pkcs11-9.11.4-26.P2.vl7.9.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2022-01-24):
- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) |
| bind-pkcs11-9.11.4-26.P2.vl7.8.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2021-10-14):
- Prevent a race after zone load (#2011220) |
| bind-pkcs11-9.11.4-26.P2.vl7.7.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2021-07-13):
- Apply again patch 172, got removed by mistake |
| bind-pkcs11-9.11.4-26.P2.vl7.5.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2021-04-27):
- Possible assertion failure on DNAME processing (CVE-2021-25215) |
| bind-pkcs11-9.11.4-26.P2.vl7.4.x86_64 [361 KiB] |
Changelog
by Petr Menšík (2021-02-15):
- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) |
| bind-pkcs11-9.11.4-26.P2.vl7.3.x86_64 [361 KiB] |
Changelog
by Tomas Korbar (2020-11-06):
- Fix inline re-signing (#rh1889902) |
| bind-pkcs11-9.11.4-26.P2.vl7.2.x86_64 [361 KiB] |
Changelog
by Tomas Korbar (2020-10-02):
- Fix unsupported algorithms validation (#rh1769876) |
| bind-pkcs11-9.11.4-26.P2.vl7.x86_64 [360 KiB] |
Changelog
by Artem Egorenkov (2020-05-29):
- Fix EDNS512 loops on broken servers |
| bind-pkcs11-9.11.4-16.P2.vl7.6.x86_64 [360 KiB] |
Changelog
by Petr Menšík (2020-05-27):
- Fix EDNS512 loops on broken servers |
| bind-pkcs11-9.11.4-16.P2.vl7.3.x86_64 [359 KiB] |
Changelog
by Miroslav Lichvar (2020-03-04):
- Disable atomic operations on ppc64, ppc64le, aarch64, ppc (#1779589) |
| bind-pkcs11-9.11.4-16.P2.vl7.2.x86_64 [359 KiB] |
Changelog
by Tomas Korbar (2020-02-22):
- Disable unit test timer_test on ppc64le because of its instability |
| bind-pkcs11-9.11.4-9.P2.vl7.x86_64 [358 KiB] |
Changelog
by Petr Menšík (2019-06-19):
- Fix CVE-2019-6471 |
| bind-pkcs11-9.9.4-74.vl7.2.x86_64 [301 KiB] |
Changelog
by Petr Menšík (2019-06-21):
- Fix unstable zone transfers (#1724071) - Understand keep-response-order for backward compatibility |