Noah Meyerhans 1e02e8d8f1 bind: bump to 9.20.26 ...

Fixes several security issues:
 - CVE-2026-11331 Fix handling of rpz CNAME expansion that returns name too long.
 - CVE-2026-11721 Invalid signed wildcard records were being accepted.
 - CVE-2026-13321 Fix DNSSEC validation bypass via out-of-zone NSEC Next Field.
 - CVE-2026-10723 Correct verification of NSEC3 signer name.
 - CVE-2026-12617 Do no assert for some specifics CNAME and DNAME queries.
 - CVE-2026-10822 Malformed DNSKEY records could trigger an assertion.
 - CVE-2026-11605 Prevent excessive validation work from crafted negative responses.
 - CVE-2026-11622 Prevent cache exhaustion under sustained attack.

Full release notes are available upstream at
https://ftp.isc.org/isc/bind9/9.20.26/doc/arm/html/changelog.html

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 81d81033e6)

2026-07-24 09:11:52 -04:00

..

files

bind: save out served domains on service stop

2025-12-06 14:05:05 -07:00

patches

bind: bump to 9.20.26

2026-07-24 09:11:52 -04:00

Config.in

bind: update wording in Config.in

2025-09-13 13:36:41 -07:00

Makefile

bind: bump to 9.20.26

2026-07-24 09:11:52 -04:00