Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
9c9a01a7 by Salvatore Bonaccorso at 2026-07-22T18:32:35+02:00
Add new bind9 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,30 @@
+CVE-2026-10723 [Incorrect acceptance of NSEC3 records]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-10723
+CVE-2026-10822 [Key Record using PRIVATEDNS algorithm may lead to unexpected 
exit]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-10822
+CVE-2026-11331 [Potential wildcard CNAME RPZ policy bypass]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-11331
+CVE-2026-11605 [Unnecessary validation of DNSSEC signed records]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-11605
+CVE-2026-11622 [Potential memory usage beyond configured limits]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-11622
+CVE-2026-11721 [Cache poisoning possible with label count discrepancy, RRSIG, 
and wildcards]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-11721
+CVE-2026-12617 [Record ordering based unexpected exit with CNAME or DNAME]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-12617
+CVE-2026-13204 [Unexpected exit in certain situations with NSEC and NSEC3 both 
present]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-13204
+CVE-2026-13321 [DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field]
+       - bind9 <unfixed>
+       NOTE: https://kb.isc.org/docs/cve-2026-13321
 CVE-2026-52688
        - pdns-recursor <unfixed>
        [bookworm] - pdns-recursor <end-of-life> (see DSA 6045)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c9a01a73c73d6d8c8413c721c4b943dcc734af3

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c9a01a73c73d6d8c8413c721c4b943dcc734af3
You're receiving this email because of your account on salsa.debian.org. Manage 
all notifications: https://salsa.debian.org/-/profile/notifications | Help: 
https://salsa.debian.org/help


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to