-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: arm64
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 82d1aed71291ad077f4530e2db8bc12d76347812 689840 bind9-dbgsym_9.20.26-1~deb13u1_arm64.deb
 f31d25913f36f194a7478a912deeda616df8bed6 296372 bind9-dev_9.20.26-1~deb13u1_arm64.deb
 b215f74fc3024deb26b61e4d77cb777bbfa23b79 434048 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 dd943d7bda4fb2daeeb3172668bfaa31fa864da3 159260 bind9-dnsutils_9.20.26-1~deb13u1_arm64.deb
 2544381cbd68ad442b7309816e8a6963b8a5a215 104720 bind9-host-dbgsym_9.20.26-1~deb13u1_arm64.deb
 639cbc219b58be0f155dfb0653d5d9e7aa791279 53536 bind9-host_9.20.26-1~deb13u1_arm64.deb
 5465f3884dafae0be56413818e7a03b2d70c584a 4158580 bind9-libs-dbgsym_9.20.26-1~deb13u1_arm64.deb
 d5513dc876674b78bacb0a3097db040a83740913 1111280 bind9-libs_9.20.26-1~deb13u1_arm64.deb
 09a20a89c06d6f672d506facdf2e1d24edfd8fec 502056 bind9-utils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 ff6fbfafd30faef9a4be4d57d32610c898876a15 174892 bind9-utils_9.20.26-1~deb13u1_arm64.deb
 f643e876c82459b917c9a6ecb18db0c1665842c5 10576 bind9_9.20.26-1~deb13u1_arm64-buildd.buildinfo
 861beda105caec72fe5b9fdbe637553fe48432e5 238824 bind9_9.20.26-1~deb13u1_arm64.deb
Checksums-Sha256:
 613a79188dbbb2189205a0b6cbbc9851f88e8205f7305a3942ad51f974ebd07c 689840 bind9-dbgsym_9.20.26-1~deb13u1_arm64.deb
 cf2b1012f193dd257845605c6117dc3535453483ef28a052838a6cfa0a5c3c1b 296372 bind9-dev_9.20.26-1~deb13u1_arm64.deb
 4eabd4f0ffd0e918c797905cd512acd882b5cf8470ca563edff06cd25f39bc27 434048 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 d8e2f9daccdea6a478afa3234a2d2fdbd8c23e3460b98a2c1cca75b94351970d 159260 bind9-dnsutils_9.20.26-1~deb13u1_arm64.deb
 8fdf69174bb9685608cfcd5966e2549266f70528f076f121e0a97ae1b17f1b2b 104720 bind9-host-dbgsym_9.20.26-1~deb13u1_arm64.deb
 a85759994ba772fa3efb5a34b0644c7f9c7b611ddc6023d20989a81f80e906a8 53536 bind9-host_9.20.26-1~deb13u1_arm64.deb
 b9c8bbd869fd37457243323aab62afd57d62083f1c82ccb71b5ce37633902863 4158580 bind9-libs-dbgsym_9.20.26-1~deb13u1_arm64.deb
 551bef8f640fd5357f9b851e90dcef8069814c66274311e2329ae9f65de45c49 1111280 bind9-libs_9.20.26-1~deb13u1_arm64.deb
 3cb31191ee0e51bcd3dda2134c8245c486bf0635be8899b05c3e55772667831c 502056 bind9-utils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 6e5aee129f7dd408fecbc337c91c09c0550b62a879fb5bd282ea456a86345958 174892 bind9-utils_9.20.26-1~deb13u1_arm64.deb
 346eeb4e88f79ae14da39324315553b92ba25c24b2d6668d5a65f782314daf90 10576 bind9_9.20.26-1~deb13u1_arm64-buildd.buildinfo
 b10b5358c87b25b3881271a623c5f14a1af4bf786f579d26ffb46a5a16fa092c 238824 bind9_9.20.26-1~deb13u1_arm64.deb
Files:
 af666edfe4808cec051264dd4a76bd3e 689840 debug optional bind9-dbgsym_9.20.26-1~deb13u1_arm64.deb
 f0135a1046ebd36a11dfb3de61b292fa 296372 devel optional bind9-dev_9.20.26-1~deb13u1_arm64.deb
 9e898c7238427d3bcb062a47cd3a6729 434048 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 d191f59d59ee17bc96a981d5ec15f981 159260 net standard bind9-dnsutils_9.20.26-1~deb13u1_arm64.deb
 20d6e2568651e56e090e48182df96071 104720 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_arm64.deb
 b3a88d3920ef748a1a4b072c079b2272 53536 net standard bind9-host_9.20.26-1~deb13u1_arm64.deb
 cdfc4f1d882243af1a34fdc08d30d946 4158580 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_arm64.deb
 c7a440ea09c9071a420950a08b8bcd26 1111280 libs standard bind9-libs_9.20.26-1~deb13u1_arm64.deb
 6fdf458a38cefd9d5f93f530dc0cf9a4 502056 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_arm64.deb
 08f88284df26f1ab22fc51a070a72966 174892 net optional bind9-utils_9.20.26-1~deb13u1_arm64.deb
 b9799d65040845ecd86c7f6a9ea196cb 10576 net optional bind9_9.20.26-1~deb13u1_arm64-buildd.buildinfo
 47a368818873dbd069e83ca5032d78b5 238824 net optional bind9_9.20.26-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=O2TV
-----END PGP SIGNATURE-----