-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armel
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 b7b9101e2eb1c48bf1f8e6961ab66a46d73ecc8c 645216 bind9-dbgsym_9.20.26-1~deb13u1_armel.deb
 0a0dc3bdf9ec30a66bb28b1fd4f941e0b4f4045f 296372 bind9-dev_9.20.26-1~deb13u1_armel.deb
 bc8faccf300d4ef69878c80988f8cb63604fb5ac 393076 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armel.deb
 168de4ced50b219a7f65ae4080e555e8337390e7 155804 bind9-dnsutils_9.20.26-1~deb13u1_armel.deb
 5b6f0744e39cd91741aacbadcd84a231511de251 103588 bind9-host-dbgsym_9.20.26-1~deb13u1_armel.deb
 cb74654997c65ebb01c4970c16cca4429bd656de 53004 bind9-host_9.20.26-1~deb13u1_armel.deb
 c59964e745ba51d34c93e60fdd60cedacd16a2fc 4086556 bind9-libs-dbgsym_9.20.26-1~deb13u1_armel.deb
 a76c7ce0eb188bea2ebc5996176bdab21423784f 1086088 bind9-libs_9.20.26-1~deb13u1_armel.deb
 c203f0a81c687b60e48f9be498a62965ee0bc309 376168 bind9-utils-dbgsym_9.20.26-1~deb13u1_armel.deb
 eb849329e31c5bb5377b706541b0f81a7c4d4bde 173040 bind9-utils_9.20.26-1~deb13u1_armel.deb
 3aef530592d7707496643cee15637e40f0808d1f 10441 bind9_9.20.26-1~deb13u1_armel-buildd.buildinfo
 2099be0d65b67deaa5e1d1e0a3fd9d988fcdb630 239140 bind9_9.20.26-1~deb13u1_armel.deb
Checksums-Sha256:
 fd4b0c3294fdc73ae034b0cddefa528a54fc06aeedaab17e1087703c6c1c1e7d 645216 bind9-dbgsym_9.20.26-1~deb13u1_armel.deb
 d53b2d0628f03e7fd981ee3a20277ce962057184fd7a4faa3a541fc8f767e99c 296372 bind9-dev_9.20.26-1~deb13u1_armel.deb
 6cfde2a6cc7926e8fb9f4996ae2ee784cdce5e389a76ed8edbce8a76cf2e3549 393076 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armel.deb
 848d43491ab5a328deaf3f19f699739fa208ef28859ba7a3e0ef4dfd8716b10a 155804 bind9-dnsutils_9.20.26-1~deb13u1_armel.deb
 48d67c69c8185b85355c1ddf19b2f43fe6da62719aea731cd8038335e3f9da1c 103588 bind9-host-dbgsym_9.20.26-1~deb13u1_armel.deb
 0560aa8ea6fdc40b4fc9015f6346e2bc0db9e7fabb82cb2c67228f6199dddb68 53004 bind9-host_9.20.26-1~deb13u1_armel.deb
 e833219771192f36ae90ad08462696b790d99fab07a5a0492546730ac8b6cb83 4086556 bind9-libs-dbgsym_9.20.26-1~deb13u1_armel.deb
 03fcfcded115d7c052168d52bcc12dad2391162faf628ffd157c920844120d83 1086088 bind9-libs_9.20.26-1~deb13u1_armel.deb
 14e8db24a3ebf8a43f5bc8c5172674325c9f95f716f591c76593ee593141d9f0 376168 bind9-utils-dbgsym_9.20.26-1~deb13u1_armel.deb
 b22abd7addf0117d6b34033977df9534aed4f92a4cbda1e5e7eb8402556bb6bc 173040 bind9-utils_9.20.26-1~deb13u1_armel.deb
 ac9b8ff04f2d5a706198f55b198b02ff13a949cdc2c5c405985c7d9d392b4c5e 10441 bind9_9.20.26-1~deb13u1_armel-buildd.buildinfo
 326d93e09f829b595b1f883cfa6e798e00107d947afe371e5c965ca27fcbe08c 239140 bind9_9.20.26-1~deb13u1_armel.deb
Files:
 1856d319dd75e7a2345f4fe20483f1e7 645216 debug optional bind9-dbgsym_9.20.26-1~deb13u1_armel.deb
 747ce7230d761826bec6dabbe9b7498c 296372 devel optional bind9-dev_9.20.26-1~deb13u1_armel.deb
 26cd83aff8b51f90c906d187d77fc556 393076 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armel.deb
 a399783f513e81db530a200f14d79c3b 155804 net standard bind9-dnsutils_9.20.26-1~deb13u1_armel.deb
 fad6a3321b74325db8b15b5a377a5f2e 103588 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_armel.deb
 92e97cb5a98b535524e0dd6025a1b635 53004 net standard bind9-host_9.20.26-1~deb13u1_armel.deb
 0f42487510adf9857c91440043f57ed5 4086556 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_armel.deb
 ecc105d9edf234c12af8013fee5be381 1086088 libs standard bind9-libs_9.20.26-1~deb13u1_armel.deb
 ccf74b56c1f7709bf983345edc36f364 376168 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_armel.deb
 eb83de4af49a49a47bdaed926098ff7b 173040 net optional bind9-utils_9.20.26-1~deb13u1_armel.deb
 8b520ffc814bb00741554c06c5304353 10441 net optional bind9_9.20.26-1~deb13u1_armel-buildd.buildinfo
 9647ddd3c004e2398d56e3a391dcf9a0 239140 net optional bind9_9.20.26-1~deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=d0A8
-----END PGP SIGNATURE-----