-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 fea6bea7a2ab5a4d35fe0ccd0726e79be2d980f5 691804 bind9-dbgsym_9.20.26-1~deb13u1_amd64.deb
 3a67f7195c6eee622b7f216a872c691b2760684f 296372 bind9-dev_9.20.26-1~deb13u1_amd64.deb
 7d4c4d56cf0079119e15e471d13a266a2f129aa7 436024 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 e11d3996cc3c7c83e65da8476e5904212a75928d 166072 bind9-dnsutils_9.20.26-1~deb13u1_amd64.deb
 52772b53eaaf4e9d03d5b554fbdd44b9cb769044 107068 bind9-host-dbgsym_9.20.26-1~deb13u1_amd64.deb
 e559f7867d3fa20e365abf9f5eb5be03721ed9d9 56072 bind9-host_9.20.26-1~deb13u1_amd64.deb
 9538cb425e53f55aca4a7c9340dc5320b2c6a4d8 4214720 bind9-libs-dbgsym_9.20.26-1~deb13u1_amd64.deb
 c7f831e34f33f10ec6b5c97918f79816bc12ee57 1247476 bind9-libs_9.20.26-1~deb13u1_amd64.deb
 1815e5565865be4637eb9cc302b87e298bf4b045 496836 bind9-utils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 8a612a8f9b335f82f054cdf3a2ee98fa70ac03ff 186072 bind9-utils_9.20.26-1~deb13u1_amd64.deb
 cbccc6ba6597995b3b6be8ce4efe532a895874a7 10589 bind9_9.20.26-1~deb13u1_amd64-buildd.buildinfo
 f6463950d3b0b2ff458e6614bcc024429ec9f086 256556 bind9_9.20.26-1~deb13u1_amd64.deb
Checksums-Sha256:
 0b364381bbb6294f0cb2adabd353e91304d97d8274852ddf5d8558b4745776bb 691804 bind9-dbgsym_9.20.26-1~deb13u1_amd64.deb
 d847893ba9ed9423b5fc967992422a7679672abb30ee57a390efb501bb6bb356 296372 bind9-dev_9.20.26-1~deb13u1_amd64.deb
 891c6e0ae336f549349f62ae3d1f19d35302a9a0eee87ddad594d7729083ae74 436024 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 392dfff92c865ff149eb40dc395a48d9d297da1633b1000ac2c4efee4c725db8 166072 bind9-dnsutils_9.20.26-1~deb13u1_amd64.deb
 6d168046bb67e2ad945af3c81daf13b925852deda2f524eb4bf140417e046985 107068 bind9-host-dbgsym_9.20.26-1~deb13u1_amd64.deb
 776f45ba445ea865d914ebd7ea8d1d9c43cc57f4471a18a7b1703522dde31f40 56072 bind9-host_9.20.26-1~deb13u1_amd64.deb
 8e7a4f6fd90ebee5ace0113a288aef635ff8bfec26cc6b1deffefed6df87517d 4214720 bind9-libs-dbgsym_9.20.26-1~deb13u1_amd64.deb
 989f407ea08bc6e42fd891c607f2403bc8279c58fbf5b489244328d985ef8190 1247476 bind9-libs_9.20.26-1~deb13u1_amd64.deb
 43e755fa4d8376102a3118c9f4dd455e2656cd0063f53dbe94d2825f29e4aff2 496836 bind9-utils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 aa0886f8c67c4f9feafb19e7b422e8a3254528e3790e76ce36c8e9121b501f2f 186072 bind9-utils_9.20.26-1~deb13u1_amd64.deb
 383f930df45de713b5b4a895cf72f6a18819bd387e6945958a4c510231a1eec0 10589 bind9_9.20.26-1~deb13u1_amd64-buildd.buildinfo
 cbf9a19a436d019c424bfe31ec0950cdfdbf6a28e5c82d122e5b6f45ea210f81 256556 bind9_9.20.26-1~deb13u1_amd64.deb
Files:
 e9e3e1a51fc9ad27f2ff04375041c43e 691804 debug optional bind9-dbgsym_9.20.26-1~deb13u1_amd64.deb
 79b2593123a0c6d12cfd82506a2250ae 296372 devel optional bind9-dev_9.20.26-1~deb13u1_amd64.deb
 f390862130e6232d1b4cd23df36c7d9b 436024 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 fafea0f0c724a0451f5f4fe1eda4d873 166072 net standard bind9-dnsutils_9.20.26-1~deb13u1_amd64.deb
 4fbfc635bdb7f31f478f3fb96020d0c7 107068 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_amd64.deb
 5a2624df47e9b5ed94e8f1a3067d0ea8 56072 net standard bind9-host_9.20.26-1~deb13u1_amd64.deb
 76283fae6525ed7385f162d5944e09de 4214720 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_amd64.deb
 04e4cf207a44800c65b9cdb379f8dcba 1247476 libs standard bind9-libs_9.20.26-1~deb13u1_amd64.deb
 5833990ac78741f44eba857d9f667b23 496836 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_amd64.deb
 0a14c9e4666af3a0c5a3646a8c792f8c 186072 net optional bind9-utils_9.20.26-1~deb13u1_amd64.deb
 d4dbae2b7d3cdc159830ef4b40ba16fb 10589 net optional bind9_9.20.26-1~deb13u1_amd64-buildd.buildinfo
 c58ff5a0df77320bb10e33ddec1563c4 256556 net optional bind9_9.20.26-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=VxGH
-----END PGP SIGNATURE-----