-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 21 Jul 2026 15:09:54 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: ppc64el
Version: 1:9.20.26-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.26-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.26
    + [CVE-2026-10723]: Correct verification of NSEC3 signer name.
    + [CVE-2026-10822]: Malformed DNSKEY records could trigger an
      assertion.
    + [CVE-2026-11331]: Fix handling of RPZ CNAME expansion that returns
      too-long name.
    + [CVE-2026-11605]: Prevent excessive validation work from crafted
      negative responses.
    + [CVE-2026-11622]: Prevent cache exhaustion under sustained attack.
    + [CVE-2026-11721]: Stop accepting invalid signed wildcard records.
    + [CVE-2026-12617]: Do not assert for some specific CNAME and DNAME
      queries.
    + [CVE-2026-13204]: Prevent crash from malformed NSEC/NSEC3 response.
    + [CVE-2026-13321]: Fix DNSSEC validation bypass via out-of-zone NSEC
      Next Field.
Checksums-Sha1:
 230d64df3b2ca4fed3ba057c24a060de7c3a8fa5 671124 bind9-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 5c084ee589ce91ba454f118adc692a156cccbccb 296372 bind9-dev_9.20.26-1~deb13u1_ppc64el.deb
 77adc4eb10f2cd6db4f7117cc015517b29c900f0 408668 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 e984005b5851cfa0f1f6218211ac8c61edb823a5 167264 bind9-dnsutils_9.20.26-1~deb13u1_ppc64el.deb
 44f8258415eddd565ad24592c4c1ddd61d216446 107800 bind9-host-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 7df9933f79640f7cec6930ac16e98d5918ec06fc 58028 bind9-host_9.20.26-1~deb13u1_ppc64el.deb
 798fb60c09b76fd79c5046f665ee8b7547c1a767 4293320 bind9-libs-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 0b53115f3b8b3fd89dc90ce262f0d27ce0b2d820 1296080 bind9-libs_9.20.26-1~deb13u1_ppc64el.deb
 b63344bdee58af8b9bf349fe30457774ee57f584 391404 bind9-utils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 931e55343d0d32532618d659006205fe0a7ba55a 185980 bind9-utils_9.20.26-1~deb13u1_ppc64el.deb
 cffa8230051716264e0b5922e0676d25ecb2e46d 10642 bind9_9.20.26-1~deb13u1_ppc64el-buildd.buildinfo
 06947b181fcc879802ea382e2ec8315555903d5b 265888 bind9_9.20.26-1~deb13u1_ppc64el.deb
Checksums-Sha256:
 4a5175ce2a4cca7f2b13abb858a9299cc68fb4e1af836feb427b97121c9e955a 671124 bind9-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 33a7eb0178262a85c37a055d1732d86aa25cc416250e0a28703e4211dd036eac 296372 bind9-dev_9.20.26-1~deb13u1_ppc64el.deb
 78a62b60a0322ca215722a122a75e2e8420241ee0aa1dce5bcc321cea73a2aa7 408668 bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 e309c8cb366cd4d0968c93c65fe96cf776480e5ff0737c404aacd92e16c1bbe5 167264 bind9-dnsutils_9.20.26-1~deb13u1_ppc64el.deb
 795841a89019057a2d569b73609943bc6234b42685ee9b762fb279fae120466e 107800 bind9-host-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 16bb6bf536c24ef64cebf47ad263c8bcce4cb90a247c4237db9398720f114e7f 58028 bind9-host_9.20.26-1~deb13u1_ppc64el.deb
 702d1df73678d03aca7e2f89a26fc7fc1f8aab2a841f8f3476638ba2eda36a0e 4293320 bind9-libs-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 bd048b47f30d0af6c7bdf3ba83a8f8aa311268503b293e5f72969935fc431bb3 1296080 bind9-libs_9.20.26-1~deb13u1_ppc64el.deb
 77ea8ad552f124af7e6eccc9cba72df3a779be6ab8988fbc13e3c495cd6e622e 391404 bind9-utils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 a473c15f809375a861c18f939a01a7eff916d41a448e1ea8414a3a81d90ee1b9 185980 bind9-utils_9.20.26-1~deb13u1_ppc64el.deb
 b9d4577bbe3efdacac7ab46680171b5e907f2e33490e38dfa1e6deff954bf829 10642 bind9_9.20.26-1~deb13u1_ppc64el-buildd.buildinfo
 f59f395bf73ed19424e150e407ac5e4caa95545b8731292f04452f041ec105b0 265888 bind9_9.20.26-1~deb13u1_ppc64el.deb
Files:
 513eefb70eb5ca1e7f966a1649e5cb4d 671124 debug optional bind9-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 0a6281b5abd59c73d990b81ec5ec8580 296372 devel optional bind9-dev_9.20.26-1~deb13u1_ppc64el.deb
 842a6dadc222caba75e435db4de674fc 408668 debug optional bind9-dnsutils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 a58b7952c6b1b8862e4b4930496256ae 167264 net standard bind9-dnsutils_9.20.26-1~deb13u1_ppc64el.deb
 67191145562f4bead415e9c51fc34609 107800 debug optional bind9-host-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 00d20535048f74bb277d30b93a9f535b 58028 net standard bind9-host_9.20.26-1~deb13u1_ppc64el.deb
 190d2abc09b86bf21bb890806c41bfa0 4293320 debug optional bind9-libs-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 079f754d5e1b20d37ef8548d938d11f4 1296080 libs standard bind9-libs_9.20.26-1~deb13u1_ppc64el.deb
 51518d325ab3164678d85d5727b6bb8c 391404 debug optional bind9-utils-dbgsym_9.20.26-1~deb13u1_ppc64el.deb
 fb39ec8a202693b9db7d00d033ac5a38 185980 net optional bind9-utils_9.20.26-1~deb13u1_ppc64el.deb
 419d220bc5951471936b435a89207d6d 10642 net optional bind9_9.20.26-1~deb13u1_ppc64el-buildd.buildinfo
 732ff531961bc3e9f2e5831723a4f5a4 265888 net optional bind9_9.20.26-1~deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmpfdv0ACgkQNINNphgy
m2Sr9RAAmtV2rkMuRCpVk3aOgV/49q2wLRC7hDin5884hQ7WtVkmCu7TUWha9B64
n4vO7a/OHtV3jd1bH0HO4QUUzqi2182zTVgWGeWhObu92umT4rsfvoryrf8KbSHb
G5m+9NUQTLlQ+O8HSoKfeFArNqzeU6TC21b1oBtiVkaaQ4uW/ld6Ou6LnWbt9/t9
wJI9F+zebWBfDEMEiwfWaXRyJyAMHHHkQjNqklcTgNt5Jx2KBT4dKmqcfemJumoh
d3PMy7ytmikfzChuSDC466usSo/iz/RhLgdlQdT28zxdhpj5DOvDszSJw9pOdsOi
/EcKGdnCAtgGuFBZGAlwe+DEnbkPQ9K4x1BZzxoz+Zklfd7iuxi3FVleMG2aqIyg
4IbtNR3KdOFDehS3T0NWMxjZEA5uHwWktCmNPB/AkyOieNkmmD2Ar9Ouv93Uj3CE
kZzDL+nwQWWE1YSjaK6895f3TcQNfDnXQ5tWeyOa8lEWvYOnoNHEP6x+buZ54LNl
enQUU/ksPtANoYNXLcibN48Okk46miAWpuVxfzJm6BET2Vxg3N+i1eFp6boxG7cc
lA4g/X2FNuxZzUZR5vWs5XgpFz5F1xaQddI5JLMyvm8RWKmnLT5e3H+W7kILLhet
gQi/5CnnofYeidCOAtbz30rPeZDd5jpVE/ABqo+bdGIj4vlTFvM=
=LToL
-----END PGP SIGNATURE-----