-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: riscv64
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 88be7a695d2496bfd7b74d14167b87eba569f59e 670168 bind9-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 624beb57967851b0479503f3f162b99433b43d0d 296376 bind9-dev_9.20.26-1~deb13u1_riscv64.deb
 caf8781391fbb313739acfb2a886574e781f3d11 425664 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 680140cb8baf95388f73346b17d36c3d6126c902 167488 bind9-dnsutils_9.20.26-1~deb13u1_riscv64.deb
 1a0b03d5e893e1ef01ee832c7863eb47c1a43b01 103196 bind9-host-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 b1915918a2ae2b9b0c4b1f4fb32bb1b0d8a9832b 56648 bind9-host_9.20.26-1~deb13u1_riscv64.deb
 50f4bb572f71ba4371942ae895bb164f0a0706ee 4013424 bind9-libs-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 f17b53a5dd8806ab89907c7ffe87c3b062f031c9 1269968 bind9-libs_9.20.26-1~deb13u1_riscv64.deb
 375c635492bb461fb26ec04bc5d3f0987706709f 489776 bind9-utils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 eded02b20ecaa8b808efe43aa83404f963d86cd0 181532 bind9-utils_9.20.26-1~deb13u1_riscv64.deb
 72cf97a9fc3652cbacb170695df378c3dba3a784 10587 bind9_9.20.26-1~deb13u1_riscv64-buildd.buildinfo
 13089a9693f0901524df29b07b89e8248a20a51a 253796 bind9_9.20.26-1~deb13u1_riscv64.deb
Checksums-Sha256:
 c9bc39b3a9a02fd58f7c216b164b658d8d7e4cfa196507fb6b1cf0a78c918d27 670168 bind9-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 130ffaefe4009627d3f51b6bf5eec6fbfc613b287094cfdc34d16c66944e1622 296376 bind9-dev_9.20.26-1~deb13u1_riscv64.deb
 c194580462edf9fe4e3b62b13746dd42e39681e33dddc901c430a6049ffa2a3d 425664 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 0bb4149b23313c35eef5b072bfeff233669647324b78d9b7c9aba1ddad6550a8 167488 bind9-dnsutils_9.20.26-1~deb13u1_riscv64.deb
 2d5cd85232c4a0d39091f026a92e0c20e8d6e1337751c9a55587a08b8e44e025 103196 bind9-host-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 c74436ae47768494f0bfc68c02b9bce14bece003f1e8c783281c64bed05f82a5 56648 bind9-host_9.20.26-1~deb13u1_riscv64.deb
 e71900a69717485c0b67033bd85cb740b41b4ab9376ff09a2f05b47281b80041 4013424 bind9-libs-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 33fa39c45085e04389a68badc874ac466cb46fea244a59dc6b221dc6d1e0b17c 1269968 bind9-libs_9.20.26-1~deb13u1_riscv64.deb
 57ce118c04c56982f13a7c0059bf5def9cd0fc34dfc2f60c86a54468f8213967 489776 bind9-utils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 c861b19905ae0bf063e7b60a8281d2a89e07a13c00f0f854cbe042d71f42dd20 181532 bind9-utils_9.20.26-1~deb13u1_riscv64.deb
 ac90b9a0e21746b181352471e0a9c2f46fa28f47d80a0b6a5cbfa907c98d4e60 10587 bind9_9.20.26-1~deb13u1_riscv64-buildd.buildinfo
 29c388486e1305135c5a397d82a8e0663ec2b7c8d64461a46c029eb5845cda0d 253796 bind9_9.20.26-1~deb13u1_riscv64.deb
Files:
 7a91f67e04409888cd7482fbd4fa8a1d 670168 debug optional bind9-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 0a1bce035dd12e061e9bbfa0ec38dd9f 296376 devel optional bind9-dev_9.20.26-1~deb13u1_riscv64.deb
 ff35eb4d43df8be73d3a2c51c17b8c50 425664 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 0e5fc12b6322dd739cad3424481ba213 167488 net standard bind9-dnsutils_9.20.26-1~deb13u1_riscv64.deb
 ccfa1e3a779ed294ffec753d42ff70f4 103196 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 8439a9d13f71d5625727e5c266dee49d 56648 net standard bind9-host_9.20.26-1~deb13u1_riscv64.deb
 256066e2d660d45e88a8897c6ea82c57 4013424 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 8c634b77b6c53fa2364cde050c666a4e 1269968 libs standard bind9-libs_9.20.26-1~deb13u1_riscv64.deb
 d3bd04b926e0d43568b036e1fe1ff570 489776 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_riscv64.deb
 927dfc2230567017e71299ed58e73b11 181532 net optional bind9-utils_9.20.26-1~deb13u1_riscv64.deb
 51fe6ec90a778a1c5fa83d24334c5cf7 10587 net optional bind9_9.20.26-1~deb13u1_riscv64-buildd.buildinfo
 b1b18743d3c0531265acf14dab2a8af2 253796 net optional bind9_9.20.26-1~deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=yHTu
-----END PGP SIGNATURE-----