[Git][security-tracker-team/security-tracker][master] Add new bind9 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9c9a01a7 by Salvatore Bonaccorso at 2026-07-22T18:32:35+02:00
Add new bind9 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,30 @@
+CVE-2026-10723 [Incorrect acceptance of NSEC3 records]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-10723
+CVE-2026-10822 [Key Record using PRIVATEDNS algorithm may lead to unexpected exit]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-10822
+CVE-2026-11331 [Potential wildcard CNAME RPZ policy bypass]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-11331
+CVE-2026-11605 [Unnecessary validation of DNSSEC signed records]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-11605
+CVE-2026-11622 [Potential memory usage beyond configured limits]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-11622
+CVE-2026-11721 [Cache poisoning possible with label count discrepancy, RRSIG, and wildcards]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-11721
+CVE-2026-12617 [Record ordering based unexpected exit with CNAME or DNAME]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-12617
+CVE-2026-13204 [Unexpected exit in certain situations with NSEC and NSEC3 both present]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-13204
+CVE-2026-13321 [DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field]
+	- bind9 <unfixed>
+	NOTE: https://kb.isc.org/docs/cve-2026-13321
 CVE-2026-52688
 	- pdns-recursor <unfixed>
 	[bookworm] - pdns-recursor <end-of-life> (see DSA 6045)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c9a01a73c73d6d8c8413c721c4b943dcc734af3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c9a01a73c73d6d8c8413c721c4b943dcc734af3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260722/7ebf3ca8/attachment.htm>