Limit the amount of recursion possible in control channel (CVE-2023-3341)

Prevent possible endless loop when refreshing stale data (CVE-2023-2911)

Strengten cache cleaning to prevent overflowing configured limit
2023-2828)

Correct backport issue in statistics rendering fix (#2126912)

Handle subtle difference between upstream and rhel (CVE-2022-3094)

Prevent flooding with UPDATE requests (CVE-2022-3094)
Handle RRSIG queries when server-stale is active (CVE-2022-3736)
Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)

Correct regression preventing bind-dyndb-ldap build (#2162795)

Prevent freeing zone during statistics rendering (#2101712)

Bound the amount of work performed for delegations (CVE-2022-2795)
Add /usr/lib64/named to bind-chroot (#2129466)

Fix possible serve-stale related crash (CVE-2022-3080)
Fix memory leak in ECDSA verify processing (CVE-2022-38177)
Fix memory leak in EdDSA verify processing (CVE-2022-38178)

Export bind-doc package (#2104863)

Tighten cache protection against record from forwarders (CVE-2021-25220)
Include test of forwarders

TCP connections with 'keep-response-order' are properly close in all cases
2022-0396)

Update to 9.16.23 (#2024210)

Propagate ephemeral port ranges to chroot (#2013595)

Fixes listening on TCP in some race conditions (#1999691)