Noah Meyerhans 81d81033e6 bind: bump to 9.20.26 ...

Fixes several security issues:
 - CVE-2026-11331 Fix handling of rpz CNAME expansion that returns name too long.
 - CVE-2026-11721 Invalid signed wildcard records were being accepted.
 - CVE-2026-13321 Fix DNSSEC validation bypass via out-of-zone NSEC Next Field.
 - CVE-2026-10723 Correct verification of NSEC3 signer name.
 - CVE-2026-12617 Do no assert for some specifics CNAME and DNAME queries.
 - CVE-2026-10822 Malformed DNSKEY records could trigger an assertion.
 - CVE-2026-11605 Prevent excessive validation work from crafted negative responses.
 - CVE-2026-11622 Prevent cache exhaustion under sustained attack.

Full release notes are available upstream at
https://ftp.isc.org/isc/bind9/9.20.26/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

2026-07-24 10:50:58 +02:00

..

files

bind: manual fix for IPv6 server unreachable noise

2025-12-12 18:06:44 -07:00

patches

bind: bump to 9.20.26

2026-07-24 10:50:58 +02:00

Config.in

bind: update wording in Config.in

2025-09-13 13:36:41 -07:00

Makefile

bind: bump to 9.20.26

2026-07-24 10:50:58 +02:00

test-version.sh

bind: add version check override

2026-05-29 09:25:01 -04:00