{"id":"CVE-2026-11622","aliases":["ALPINE-CVE-2026-11622","ALSA-2026:54509","ALSA-2026:54510","ALSA-2026:54654","ALSA-2026:55437","ALSA-2026:55442","AZL-93135","BELL-CVE-2026-11622","CLSA-2026-1785489780","CLSA-2026-1785562289","CLSA-2026-1785835455","CLSA-2026-1785845701","CLSA-2026-1786033455","CLSA-2026-1786551486","CLSA-2026-1786551745","CLSA-2026-1787734642","CLSA-2026-1787754092","CLSA-2026-1792540155","DEBIAN-CVE-2026-11622","EUVD-2026-47708","GHSA-g5c7-92qw-5486","OESA-2026-3290","OESA-2026-3329","OESA-2026-3330","OESA-2026-3331","OESA-2026-3332","RHSA-2026:54071","RHSA-2026:54509","RHSA-2026:54510","RHSA-2026:54654","RHSA-2026:55437","RHSA-2026:55441","RHSA-2026:55442","RHSA-2026:57189","RHSA-2026:60383","RHSA-2026:79160","RHSA-2026:80501","RLSA-2026:54509","RLSA-2026:54510","RLSA-2026:54654","RLSA-2026:55437","RLSA-2026:55442","SUSE-SU-2026:3426-1","SUSE-SU-2026:3452-1","SUSE-SU-2026:3476-1","SUSE-SU-2026:3477-1","SUSE-SU-2026:3484-1","SUSE-SU-2026:3517-1","SUSE-SU-2026:3554-1","UBUNTU-CVE-2026-11622","USN-8648-1","USN-8929-1","openSUSE-SU-2026:11375-1","openSUSE-SU-2026:21489-1"],"status":"published","title":"Potential memory usage beyond configured limits","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00542,"percentile":0.45871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2026-07-22T14:12:19Z","modified":"2026-11-04T02:47:24Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bind","fixed_in":["9.20.26-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"bind","fixed_in":["9.20.26-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-chroot","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-devel","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-devel","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-libs","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs-lite","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-license","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-lite-devel","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-devel","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-libs","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-utils","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb-chroot","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"bind-utils","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"python3-bind","fixed_in":["32:9.11.26-6.el8.tuxcare.els18","32:9.11.26-6.el8.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-chroot","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-devel","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-devel","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-libs","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs-lite","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-license","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-lite-devel","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-devel","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-libs","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-utils","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb-chroot","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-utils","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-bind","fixed_in":["32:9.11.36-13.el8.tuxcare.els12"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-chroot","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-devel","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-devel","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-libs","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs-lite","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-license","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-lite-devel","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-devel","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-libs","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-utils","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb-chroot","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"bind-utils","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"python3-bind","fixed_in":["32:9.11.26-4.el8.4.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-export-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-export-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-libs-lite","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-license","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-lite-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-sdb","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-sdb-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-export-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-export-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-libs-lite","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-license","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-lite-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-sdb","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-sdb-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els16"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.49-1~deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.20.26-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.20.26-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"bind","fixed_in":["9.18.21-12.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"bind","fixed_in":["9.18.21-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.22.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.24.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"bind9","fixed_in":["1:9.20.24-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.11.3"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.11.3"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.11.3"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.11-r0"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.20.9-r0"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.16-r0"},{"fixed":"9.20.26-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els5"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els18"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els12"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els16"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els14"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.8.2-0.68.rc1.el6.11.tuxcare.els13"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.49-1~deb12u2"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1","1:9.18.24-1~bpo11+1","1:9.18.28-1~deb12u1","1:9.18.28-1~deb12u2","1:9.18.33-1~deb12u2","1:9.18.41-1~deb12u1","1:9.18.44-1~deb12u1","1:9.18.47-1~deb12u1","1:9.18.49-1~deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.26-1~deb13u1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1","1:9.20.15-1~deb13u1","1:9.20.15-1~deb13u1~bpo12+1","1:9.20.15-2","1:9.20.18-1","1:9.20.18-1~deb13u1","1:9.20.18-1~deb13u1~bpo12+1","1:9.20.19-1","1:9.20.19-1~bpo12+1","1:9.20.20-1","1:9.20.20-1~bpo12+1","1:9.20.21-1","1:9.20.21-1~deb13u1","1:9.20.21-1~deb13u1~bpo12+1","1:9.20.22-1","1:9.20.23-1","1:9.20.23-1~deb13u1","1:9.20.23-1~deb13u1~bpo12+1","1:9.20.24-1","1:9.20.26-1~deb13u1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.26-1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1","1:9.20.15-1~deb13u1","1:9.20.15-1~deb13u1~bpo12+1","1:9.20.15-2","1:9.20.18-1","1:9.20.18-1~deb13u1","1:9.20.18-1~deb13u1~bpo12+1","1:9.20.19-1","1:9.20.19-1~bpo12+1","1:9.20.20-1","1:9.20.20-1~bpo12+1","1:9.20.21-1","1:9.20.21-1~deb13u1","1:9.20.21-1~deb13u1~bpo12+1","1:9.20.22-1","1:9.20.23-1","1:9.20.23-1~deb13u1","1:9.20.23-1~deb13u1~bpo12+1","1:9.20.24-1","1:9.20.26-1~deb13u1","1:9.20.26-1~deb13u1~bpo12+1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.21-4.oe2403sp4"}]}],"bundled":9},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-12.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.21-25.oe2003sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-31.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.26-0.1.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-export-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-libs-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-sdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.12"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.4-26.P2.el7_9.21"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.9"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.11"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.11"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-0.22.el8_10.12"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-40.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.11.36-16.el8_10.14"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.33-15.el10_2.10"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.29-14.el9_8.8"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-150700.3.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-150700.3.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.50-150600.3.32.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.50-150600.3.32.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.65.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.65.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.65.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.65.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.41.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.22-3.74.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.22-3.74.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150000.12.91.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150000.12.91.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.62.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.62.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.62.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14","1:9.9.5.dfsg-3ubuntu0.19+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10","1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5","1:9.11.3+dfsg-1ubuntu1.19+esm6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4","4.3.5-3ubuntu5","4.3.5-3ubuntu6","4.3.5-3ubuntu7","4.3.5-3ubuntu7.1","4.3.5-3ubuntu7.2","4.3.5-3ubuntu7.3","4.3.5-3ubuntu7.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm3"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2","1:9.18.30-0ubuntu0.20.04.2+esm1","1:9.18.30-0ubuntu0.20.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.16+dfsg-3~build1","1:9.11.16+dfsg-3~ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.5"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.19+dfsg-2.1ubuntu1","1:9.11.19+dfsg-2.1ubuntu2","1:9.11.19+dfsg-2.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.6"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-2ubuntu5","4.4.3-P1-4ubuntu1","4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.2"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.5"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.6"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.2"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.19+esm15"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.19+esm6"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm3"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2","1:9.18.30-0ubuntu0.20.04.2+esm1","1:9.18.30-0ubuntu0.20.04.2+esm2"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.7"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4","1:9.18.39-0ubuntu0.22.04.5","1:9.18.39-0ubuntu0.22.04.6"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.8"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5","1:9.18.39-0ubuntu0.24.04.6","1:9.18.39-0ubuntu0.24.04.7"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.4"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1","1:9.20.24-1ubuntu0.2","1:9.20.24-1ubuntu0.3"],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-1.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-160000.1.1"}]}],"bundled":9}],"products":[{"vendor":"isc","product":"bind"},{"vendor":"isc","product":"bind 9"}],"references":[{"url":"https://kb.isc.org/docs/cve-2026-11622","tags":["vendor-advisory","Vendor Advisory","advisory","report"]},{"url":"https://downloads.isc.org/isc/bind9/9.20.26","tags":["patch","Product","web"]},{"url":"https://downloads.isc.org/isc/bind9/9.21.24","tags":["patch","Product","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11622","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g5c7-92qw-5486"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-11622","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54509","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10723","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11331","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11622","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-11721","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-13204","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-13321","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503721","tags":["report"]},{"url":"https://bugzilla.redhat.com/2504166","tags":["report"]},{"url":"https://bugzilla.redhat.com/2504298","tags":["report"]},{"url":"https://bugzilla.redhat.com/2504338","tags":["report"]},{"url":"https://bugzilla.redhat.com/2504447","tags":["report"]},{"url":"https://bugzilla.redhat.com/2504560","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-54509.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54510","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-54510.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54654","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-54654.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55437","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-55437.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55442","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-55442.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-11622","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1785489780.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13321","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1785562289.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1785835455.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1785845701.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1786033455.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1786551486.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1786551745.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787734642.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1787754092.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792540155.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-11622","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3290","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10822","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12617","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3329","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3330","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3331","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3332","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54071","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10822","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-12617","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54071.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10723","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10822","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11331","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504298","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11622","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-11721","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12617","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13204","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504166","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-13321","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54509.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54510.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54654.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55437.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:55441","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2479771","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55441.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-3039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-5946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-5946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5946","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55442.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57189","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57189.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60383","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60383.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79160","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79160.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:80501","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80501.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54509","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54510","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54654","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:55437","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:55442","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263426-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271982","tags":["report"]},{"url":"https://bugzilla.suse.com/1271983","tags":["report"]},{"url":"https://bugzilla.suse.com/1271984","tags":["report"]},{"url":"https://bugzilla.suse.com/1271985","tags":["report"]},{"url":"https://bugzilla.suse.com/1271986","tags":["report"]},{"url":"https://bugzilla.suse.com/1271987","tags":["report"]},{"url":"https://bugzilla.suse.com/1271988","tags":["report"]},{"url":"https://bugzilla.suse.com/1271989","tags":["report"]},{"url":"https://bugzilla.suse.com/1271990","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-10822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-12617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13321","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263452-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263476-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263484-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263517-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207471","tags":["report"]},{"url":"https://bugzilla.suse.com/1265591","tags":["report"]},{"url":"https://bugzilla.suse.com/1265592","tags":["report"]},{"url":"https://bugzilla.suse.com/1265594","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-5946","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263554-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-11622","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8648-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8929-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-10822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-12617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-8677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-75029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-76163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-78301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-80274","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81736","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-11622","title":"Potential memory usage beyond configured limits","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T14:12:19.564Z","modified":"2026-07-22T18:53:14.635Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:20:04.463704Z"}],"euvd":[{"id":"EUVD-2026-47708","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T14:12:19Z","modified":"2026-07-22T18:53:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:44.868793Z"}],"ghsa":[{"id":"GHSA-g5c7-92qw-5486","title":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone...","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:31:26Z","modified":"2026-07-22T15:31:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:09:39.270941Z"}],"nvd":[{"id":"CVE-2026-11622","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:51.703Z","modified":"2026-11-02T17:42:50.153Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T20:51:40.125089Z"}],"osv":[{"id":"ALPINE-CVE-2026-11622","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:51.703Z","modified":"2026-11-03T09:30:02.869394026Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T09:56:52.729801Z"},{"id":"BELL-CVE-2026-11622","status":"published","published":"2026-07-23T06:03:32.589363Z","modified":"2026-07-30T07:15:08.501820898Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:23.037038Z"},{"id":"CVE-2026-11622","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:51.703Z","modified":"2026-11-04T02:47:24.160056139Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T02:53:45.692342Z"},{"id":"DEBIAN-CVE-2026-11622","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:51.703Z","modified":"2026-11-03T09:47:33.718417545Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T10:27:58.933618Z"},{"id":"OESA-2026-3290","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\n\nBIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10723)\n\nIf BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.\n\nBIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm identifier, improperly give a length longer than the actual identifier data. The invalid identifier will be stored. If BIND later needs to render that record to text, it will use the invalid length during processing, leading to a consistency check failing.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10822)\n\nAn attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11331)\n\nThe issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to waste disproportionate CPU time.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11605)\n\nA DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11622)\n\nIt is possible for an attacker\u0026apos;s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker\u0026apos;s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11721)\n\nThe issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, `named` may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-12617)\n\nIf a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13204)\n\nThe BIND resolver accepts validly-signed NSEC records where the \u0026quot;Next Domain Name\u0026quot; field points outside the signer\u0026apos;s zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13321)","status":"published","published":"2026-08-07T02:44:23Z","modified":"2026-08-07T03:00:56.735017697Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3329","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\n\nA DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11622)","status":"published","published":"2026-08-13T13:57:56Z","modified":"2026-08-16T01:45:16.279909233Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3330","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\n\nBIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10723)\n\nA DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11622)\n\nIt is possible for an attacker\u0026apos;s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker\u0026apos;s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11721)\n\nIf a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13204)\n\nThe BIND resolver accepts validly-signed NSEC records where the \u0026quot;Next Domain Name\u0026quot; field points outside the signer\u0026apos;s zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13321)","status":"published","published":"2026-08-13T13:58:00Z","modified":"2026-08-16T01:45:16.37195018Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3331","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\n\nBIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-10723)\n\nAn attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11331)\n\nA DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11622)\n\nIt is possible for an attacker\u0026apos;s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker\u0026apos;s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11721)\n\nIf a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13204)\n\nThe BIND resolver accepts validly-signed NSEC records where the \u0026quot;Next Domain Name\u0026quot; field points outside the signer\u0026apos;s zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-13321)","status":"published","published":"2026-08-13T13:59:18Z","modified":"2026-08-16T01:45:16.376955502Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3332","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\n\nA DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.(CVE-2026-11622)","status":"published","published":"2026-08-13T13:59:20Z","modified":"2026-08-16T01:45:10.77942413Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:54071","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-08-12T10:16:43Z","modified":"2026-10-17T10:15:40Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54509","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2026-08-14T10:16:45Z","modified":"2026-10-17T10:15:46Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54510","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-14T10:16:46Z","modified":"2026-10-17T10:15:47Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54654","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-14T10:17:02Z","modified":"2026-10-12T10:06:27Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:55437","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-17T10:16:57Z","modified":"2026-10-17T10:15:55Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:55441","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-17T10:16:59Z","modified":"2026-10-17T10:15:56Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:55442","title":"Red Hat Security Advisory: bind9.18 security update","status":"published","published":"2026-08-17T10:16:59Z","modified":"2026-10-17T10:15:56Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57189","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-20T10:20:08Z","modified":"2026-10-17T10:16:05Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:60383","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-08-27T10:16:14Z","modified":"2026-10-12T10:06:49Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:79160","title":"Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update","status":"published","published":"2026-10-10T10:22:46Z","modified":"2026-10-17T10:20:31Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:80501","title":"Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update","status":"published","published":"2026-10-14T10:31:43Z","modified":"2026-10-17T10:20:36Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:54509","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-14T06:01:12.756713Z","modified":"2026-08-14T06:30:03.229594534Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:54510","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-14T12:03:50.499163Z","modified":"2026-08-14T12:30:04.702029695Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:54654","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-15T06:00:52.662894Z","modified":"2026-08-15T06:30:20.945505994Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:55437","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-17T18:06:54.076078Z","modified":"2026-08-17T18:30:03.359399003Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:55442","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\n\nSecurity Fix(es):\n\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-17T18:03:57.407277Z","modified":"2026-08-17T18:30:04.700497631Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-11622","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:00Z","modified":"2026-10-17T13:11:54.639408558Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:00.081948Z"},{"id":"ALSA-2026:54509","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:02:28.855314579Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:54510","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:32:24.737804994Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:54654","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:02:29.026200649Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:55437","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-17T00:00:00Z","modified":"2026-10-29T11:30:34.734044528Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:55442","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n  * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n  * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n  * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n  * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n  * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-17T00:00:00Z","modified":"2026-10-29T11:32:24.138147009Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"AZL-93135","title":"CVE-2026-11622 affecting package bind for versions less than 9.20.26-1","description":"A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.","status":"published","published":"2026-07-22T15:16:51Z","modified":"2026-08-28T17:56:44.308204Z","updated_at":"2026-11-02T15:28:11.723718Z"},{"id":"CLSA-2026-1785489780","title":"bind: Fix of 6 CVEs","description":"- CVE-2026-11331: return from RPZ wildcard CNAME expansion when the resulting\n  name is too long instead of continuing with an invalid name\n- CVE-2026-11721: reject RRSIG records whose Labels field is smaller than the\n  signer's label count, and skip out-of-zone nodes in dnssec-signzone\n- CVE-2026-13321: reject NSEC RRsets containing a record whose Next Domain Name\n  points outside the signer's zone\n- CVE-2026-10723: require the NSEC3 signer name to equal the zone apex derived\n  from the NSEC3 owner name\n- CVE-2026-13204: only accept an NSEC/NSEC3 denial record that has a matching\n  RRSIG, and propagate the failure instead of asserting\n- CVE-2026-11622: reference count cache RRset headers so superseded generations\n  are reclaimed without waiting for the owning node to become unreferenced","status":"published","published":"2026-07-31T09:23:14Z","modified":"2026-10-26T09:43:24.399223489Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785562289","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under\n  a random subdomain attack; superseded generations of a cached RRset stayed\n  linked while validation kept the node referenced, so the cache grew far\n  past max-cache-size\n- CVE-2026-11622: also reference-count the DNAME zone cut headers and\n  initialise the counter for headers faulted in from a 'map' file, two gaps\n  the upstream 9.11 fix leaves open","status":"published","published":"2026-08-01T05:31:40Z","modified":"2026-10-26T09:31:51.226187286Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785835455","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under\n  a random subdomain attack; superseded generations of a cached RRset stayed\n  linked while validation kept the node referenced, so the cache grew far\n  past max-cache-size\n- CVE-2026-11622: also reference-count the DNAME zone cut headers and\n  initialise the counter for headers faulted in from a 'map' file, two gaps\n  the upstream 9.11 fix leaves open","status":"published","published":"2026-08-04T09:24:26Z","modified":"2026-10-26T09:31:38.402960139Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785845701","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under\n  a random subdomain attack; superseded generations of a cached RRset stayed\n  linked while validation kept the node referenced, so the cache grew far\n  past max-cache-size\n- CVE-2026-11622: also reference-count the DNAME zone cut headers and\n  initialise the counter for headers faulted in from a 'map' file, two gaps\n  the upstream 9.11 fix leaves open","status":"published","published":"2026-08-04T12:15:13Z","modified":"2026-10-26T09:31:50.61915612Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786033455","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: keep 'map' format master files readable on 32-bit builds;\n  the reference counter added in els18 fits the padding of rdatasetheader_t\n  only on 64-bit targets, so on i686 it grew the structure and shifted every\n  member, and nothing rejected an image written by an earlier build","status":"published","published":"2026-08-06T16:24:25Z","modified":"2026-10-26T09:31:50.90692318Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786551486","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under\n  a random subdomain attack; superseded generations of a cached RRset stayed\n  linked while validation kept the node referenced, so the cache grew far\n  past max-cache-size\n- CVE-2026-11622: also reference-count the DNAME zone cut headers and\n  initialise the counter for headers faulted in from a 'map' file, two gaps\n  the upstream 9.11 fix leaves open","status":"published","published":"2026-08-14T11:21:25Z","modified":"2026-10-26T09:31:42.611159516Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1786551745","title":"bind: Fix of CVE-2026-11622","description":"- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under\n  a random subdomain attack; superseded generations of a cached RRset stayed\n  linked while validation kept the node referenced, so the cache grew far\n  past max-cache-size\n- CVE-2026-11622: also reference-count the DNAME zone cut headers and\n  initialise the counter for headers faulted in from a 'map' file, two gaps\n  the upstream 9.11 fix leaves open","status":"published","published":"2026-08-12T16:22:35Z","modified":"2026-10-26T09:31:58.329811737Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787734642","title":"bind: Fix of 6 CVEs","description":"- CVE-2026-11331: return from RPZ wildcard CNAME expansion when the resulting\n  name is too long instead of continuing with an invalid name\n- CVE-2026-11721: reject RRSIG records whose Labels field is smaller than the\n  signer's label count, and skip out-of-zone nodes in dnssec-signzone\n- CVE-2026-13321: reject NSEC RRsets containing a record whose Next Domain Name\n  points outside the signer's zone\n- CVE-2026-10723: require the NSEC3 signer name to equal the zone apex derived\n  from the NSEC3 owner name\n- CVE-2026-13204: only accept an NSEC/NSEC3 denial record that has a matching\n  RRSIG, and propagate the failure instead of asserting\n- CVE-2026-11622: reference count cache RRset headers so superseded generations\n  are reclaimed without waiting for the owning node to become unreferenced","status":"published","published":"2026-08-26T08:57:44Z","modified":"2026-10-26T09:43:35.398564211Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1787754092","title":"bind: Fix of 2 CVEs","description":"- CVE-2026-13321: Reject NSEC records whose next owner name points outside\n  the signer's zone, which let a signed zone forge proofs of non-existence\n  for other zones\n- CVE-2026-11622: Reference count the cache rdataset headers so a superseded\n  generation is freed as soon as nothing holds it, instead of growing the\n  node's down chain until the node itself becomes unreferenced","status":"published","published":"2026-08-27T16:22:44Z","modified":"2026-10-26T09:43:38.460502732Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792540155","title":"bind: Fix of 2 CVEs","description":"- CVE-2026-13321: Reject NSEC records whose next owner name points outside\n  the signer's zone, which let a signed zone forge proofs of non-existence\n  for other zones\n- CVE-2026-11622: Reference count the cache rdataset headers so a superseded\n  generation is freed as soon as nothing holds it, instead of growing the\n  node's down chain until the node itself becomes unreferenced","status":"published","published":"2026-10-20T23:49:26Z","modified":"2026-10-26T09:43:43.673876189Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"openSUSE-SU-2026:11375-1","title":"bind-9.20.26-1.1 on GA media","description":"These are all security issues fixed in the bind-9.20.26-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-26T00:00:00Z","modified":"2026-07-27T09:00:09.887122119Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21489-1","title":"Security update for bind","description":"This update for bind fixes the following issues\n\n- Upgrade to release 9.20.26\n- CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982).\n- CVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exit (bsc#1271983).\n- CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984).\n- CVE-2026-11605: Unnecessary validation of DNSSEC signed records (bsc#1271985).\n- CVE-2026-11622: Potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-12617: Record ordering based unexpected exit with CNAME or DNAME (bsc#1271988).\n- CVE-2026-13204: Unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (bsc#1271990).\n","status":"published","published":"2026-07-30T10:43:08Z","modified":"2026-07-31T18:24:10.645481001Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:3426-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\nUpgrade to release 9.20.26.\n\nSecurity issues fixed:\n\n- CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982).\n- CVE-2026-10822: key record using PRIVATEDNS algorithm may lead to unexpected exit (bsc#1271983).\n- CVE-2026-11331: potential wildcard CNAME RPZ policy bypass (bsc#1271984).\n- CVE-2026-11605: unnecessary validation of DNSSEC signed records (bsc#1271985).\n- CVE-2026-11622: potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-12617: record ordering based unexpected exit with CNAME or DNAME (bsc#1271988).\n- CVE-2026-13204: unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC validation bypass via out-of-zone NSEC Next field (bsc#1271990).\n\nOther updates and bugfixes:\n\n- Release 9.20.26:\n  * Reclaim memory promptly when DNSSEC validations are canceled.\n  * Removed Features:\n    * Remove the secondary validator in query.c.\n    * Remove ineffective TCP fallback after repeated UDP timeouts.\n  * Feature Changes:\n    * Fall back to TCP on receipt of a UDP response with a mismatched\n      query ID.\n    * Limit the number of glue records cached from a referral.\n    * Fix a resolver stall on a CNAME response to a DS query.\n  * Bug Fixes:\n    * Fix a bug in DNS UPDATE processing with inline-signing enabled.\n    * Properly detect private records before copying.\n    * Tighten referral DS acceptance.\n    * Don't synthesize negative responses with pending NSEC.\n    * Check that an NSEC signer is at or above the name to be\n      validated.\n    * Don't evict DNSSEC-validated cache data on a CD=1 NXDOMAIN.\n    * Fix a deny-answer-aliases configuration bypass issue.\n    * Reject external referrals from forwarders.\n    * Fix a zone transfer over TLS (XoT) issue when using the\n      opportunistic TLS mode.\n    * Unvalidated opt-out NSEC3 could be accepted in insecurity\n      proof.\n    * Check wildcard signer and NOQNAME signer match.\n    * Fix CNAME resolution failure caused by a cached SERVFAIL\n      response.\n    * Reject unsupported RSA DNSKEY shapes during DNSSEC validation.\n    * Fix a bug in GeoIP2 string matching.\n    * Fix DNS-over-HTTPS (DoH) quota configuration issue.\n    * Truncated reply to a TSIG query no longer stalls the resolver.\n    * Ignore updates removing DNSKEY RRset with class ANY.\n    * Ignore 0-byte reads in the TCP read callback.\n    * Only print per-zone glue stats when zone-statistics is set to\n      full.\n    * CDS/CDNSKEY records were not removed when re-configuring the\n      server.\n    * Fix a crash when querying an empty non-terminal in a wildcard\n      zone in RBTDB.\n    * Stop reusing outgoing TCP connections the peer has already\n      closed.\n    * Fix DNSSEC validation failures for names under an apex DNAME.\n      * The resolver now removes other RRsets at the same name when\n        caching a CNAME.\n    * Fix nxdomain-redirect combined with dns64.\n    * Fix DNS64 owner case after DNAME restart.\n    * Clear REDIRECT flag when it isn't needed.\n    * Disable output escaping in bind9.xsl.\n    * Fix crash on badly configured secondary signer.\n    * Fix a possible crash on concurrent TKEY DELETE for the same\n      key.\n    * Reject RRSIG records covering meta-types.\n","status":"published","published":"2026-07-30T11:12:12Z","modified":"2026-07-31T09:15:07.882845988Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3452-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated\n  NXDOMAIN responses for sibling zones (bsc#1271982).\n- CVE-2026-10822: storing a DNS key record with an invalid PRIVATEDNS algorithm identifier length can trigger a\n  consistency check failure (bsc#1271983).\n- CVE-2026-11331: handling NAMETOOLONG error conditions incorrectly during RPZ wildcard CNAME processing can allow\n  bypassing RPZ rules or triggering process exits (bsc#1271984).\n- CVE-2026-11622: DNSSEC validating resolver under a random subdomain attack can suffer from runaway memory usage\n  exceeding max-cache-size and affecting response rate (bsc#1271986).\n- CVE-2026-11721: RRSIG with fewer labels than its containing zone when synth-from-dnssec is enabled can lead to\n  wildcard generation (bsc#1271987).\n- CVE-2026-12617: delayed or specific CNAME/DNAME query responses combined with positive A record responses can trigger\n  an assertion failure (bsc#1271988).\n- CVE-2026-13204: validating a domain covered by both NSEC and NSEC3 with an RRSIG for only one type can trigger an\n  assertion failure (bsc#1271989).\n- CVE-2026-13321: NSEC records with a `Next Domain Name` pointing outside the signer's zone can allow cross-zone cache\n  poisoning and authenticated denial-of-service responses (bsc#1271990).\n\n- Update to release 9.18.50:\n\n * Remove ineffective TCP fallback after repeated UDP timeouts.\n * Fall back to TCP on receipt of a UDP response with a mismatched query ID.\n * Fix DNS64 owner case after DNAME restart.\n * Clear REDIRECT flag when it isn't needed.\n","status":"published","published":"2026-08-03T11:34:55Z","modified":"2026-08-04T11:45:06.336072676Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3476-1","title":"Security update for bind","description":"This update for bind fixes the following issues\n\n- CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982).\n- CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984).\n- CVE-2026-11622: Potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-13204: Unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (bsc#1271990).\n","status":"published","published":"2026-08-03T16:58:14Z","modified":"2026-08-04T11:45:04.978754059Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3477-1","title":"Security update for bind","description":"This update for bind fixes the following issues\n\n- CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982).\n- CVE-2026-11331: Potential wildcard CNAME RPZ policy bypass (bsc#1271984).\n- CVE-2026-11622: Potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-13204: Unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (bsc#1271990).\n","status":"published","published":"2026-08-03T16:58:44Z","modified":"2026-08-04T11:45:07.534359203Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3484-1","title":"Security update for bind","description":"This update for bind fixes the following issues\n\n- CVE-2026-11622: Potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-13204: Unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (bsc#1271990).\n","status":"published","published":"2026-08-04T11:52:44Z","modified":"2026-08-04T18:30:06.535693807Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3517-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2022-3094: UPDATE message flood may cause `named` to exhaust all available memory (bsc#1207471).\n- CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591).\n- CVE-2026-3592: amplification vulnerabilities via self-pointed glue records (bsc#1265592).\n- CVE-2026-5946: invalid handling of `CLASS != IN` (bsc#1265594).\n- CVE-2026-10723: incorrect acceptance of NSEC3 records (bsc#1271982).\n- CVE-2026-11331: potential wildcard CNAME RPZ policy bypass (bsc#1271984).\n- CVE-2026-11622: potential memory usage beyond configured limits (bsc#1271986).\n- CVE-2026-11721: cache poisoning possible with label count discrepancy, RRSIG, and wildcards (bsc#1271987).\n- CVE-2026-13204: unexpected exit in certain situations with NSEC and NSEC3 both present (bsc#1271989).\n- CVE-2026-13321: DNSSEC validation bypass via out-of-zone NSEC Next field (bsc#1271990).\n","status":"published","published":"2026-08-06T11:20:04Z","modified":"2026-08-07T10:00:42.636669905Z","updated_at":"2026-11-02T15:54:04.987808Z"}]},"sources_more":{"osv":3}}
