-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armhf
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 b443729f88bdb5ac5f88d413661d46cc59e9fcb1 651360 bind9-dbgsym_9.20.26-1~deb13u1_armhf.deb
 6bacdff57ece817b00a608334ddf05307811b039 296380 bind9-dev_9.20.26-1~deb13u1_armhf.deb
 f99c739344a9c8ff5e640f6167aaa8062bcd1685 396120 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 f193bbbdb2255d31723f7a2d5b1201ccde29686c 157136 bind9-dnsutils_9.20.26-1~deb13u1_armhf.deb
 f3037f5f5c0f53eb5e9a3f12053d1f2203504048 103716 bind9-host-dbgsym_9.20.26-1~deb13u1_armhf.deb
 6dcc5f64cc92bf0800dbc1e028c3f01bdba6a10e 52380 bind9-host_9.20.26-1~deb13u1_armhf.deb
 9be26e0ccca424118cb29dc89f455e734ec25292 4130008 bind9-libs-dbgsym_9.20.26-1~deb13u1_armhf.deb
 7092e7e8ae26bf53c765af223d43942166c39d1c 1110896 bind9-libs_9.20.26-1~deb13u1_armhf.deb
 9d21403fcbbfa92b1473f49ea208b02b43dbb886 380888 bind9-utils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 54e6678cfb21d87fda6c6956e89c14df6f9360d7 175632 bind9-utils_9.20.26-1~deb13u1_armhf.deb
 5529fd0e4b629eb3993a415ac5ad8a5f686b992f 10455 bind9_9.20.26-1~deb13u1_armhf-buildd.buildinfo
 333e946513293fb52431dec23efe409d81d9d61e 243752 bind9_9.20.26-1~deb13u1_armhf.deb
Checksums-Sha256:
 56b5771691f597218525b305b04a4ec6fc6cc72f3c173d287308716942e5ff45 651360 bind9-dbgsym_9.20.26-1~deb13u1_armhf.deb
 c6457279f21986231674629322306c13e4d2b278b7c1caf5ffc3e44af006b28a 296380 bind9-dev_9.20.26-1~deb13u1_armhf.deb
 30f1012c1d335075389983c45173f96f0237e1b6f81bc3c604a9d67aca6ac235 396120 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 f2926730e60525cb37ba05c1df39a082e407443dba83120a8a8d85fea121c131 157136 bind9-dnsutils_9.20.26-1~deb13u1_armhf.deb
 8d8943bda5f2441abfc588a0148d2fdd6966c02453161e2d10369bf78b733276 103716 bind9-host-dbgsym_9.20.26-1~deb13u1_armhf.deb
 f524c3698d18e41fc310aa0d1ae23c481ea865c34eabbd6cc866874fb87b98f1 52380 bind9-host_9.20.26-1~deb13u1_armhf.deb
 f35eb5820972266daa9885c6c07b4a89f9023e38356fbf3a743a207aa90050db 4130008 bind9-libs-dbgsym_9.20.26-1~deb13u1_armhf.deb
 69ed87ea8e9034d61d783defeb2145d63bf07e62c20bd60378daa7d94dff4b0f 1110896 bind9-libs_9.20.26-1~deb13u1_armhf.deb
 29f91e58da93389e4a59f9d485583ae78ec6d6deca527a304787a7bc4118ce6d 380888 bind9-utils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 f48c8ef796e796c7ee2c9c567e40b078f20eca0e4aa1c11f938ae03f2e1ba7b6 175632 bind9-utils_9.20.26-1~deb13u1_armhf.deb
 433b1b6beb797331789a60e22e595dc34afce07f135279151a4a11bf2b17a7ae 10455 bind9_9.20.26-1~deb13u1_armhf-buildd.buildinfo
 7a582c57d63759b93ce550ca89aa3d1dfec41f7155cbe4e1e0e42ce0cc46c53a 243752 bind9_9.20.26-1~deb13u1_armhf.deb
Files:
 58e16abc24f4d0151ebe3f8fdb73e071 651360 debug optional bind9-dbgsym_9.20.26-1~deb13u1_armhf.deb
 76d3edacc9dd09084778974d548ba8b0 296380 devel optional bind9-dev_9.20.26-1~deb13u1_armhf.deb
 09a6d23e45e0be796a8ec040a063e708 396120 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 8487340b957eed65d5d4889f35379623 157136 net standard bind9-dnsutils_9.20.26-1~deb13u1_armhf.deb
 42bf120e55bed685d87babe3d8fcdda4 103716 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_armhf.deb
 9a3143f015266da203b5dd9978e94185 52380 net standard bind9-host_9.20.26-1~deb13u1_armhf.deb
 7256e5cec316226225692c188ae01c3a 4130008 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_armhf.deb
 d4a0e0d23c43da98376b5e48c661583c 1110896 libs standard bind9-libs_9.20.26-1~deb13u1_armhf.deb
 2154a9ed45db951a667cbe836cbd0810 380888 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_armhf.deb
 511683ea0659618904a3699f1ce8e834 175632 net optional bind9-utils_9.20.26-1~deb13u1_armhf.deb
 016e1434cafd6658bb682022b5e128ce 10455 net optional bind9_9.20.26-1~deb13u1_armhf-buildd.buildinfo
 20f152b0914e89b3c9b377b931d5d80e 243752 net optional bind9_9.20.26-1~deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=zHE9
-----END PGP SIGNATURE-----