{"id":"CVE-2026-80274","aliases":["ALPINE-CVE-2026-80274","ALSA-2026:75577","ALSA-2026:75578","ALSA-2026:75767","ALSA-2026:79113","ALSA-2026:79162","AZL-103335","BELL-CVE-2026-80274","CLSA-2026-1790003616","CLSA-2026-1790090221","CLSA-2026-1790326860","CLSA-2026-1790328589","CLSA-2026-1790583590","CLSA-2026-1790905625","CLSA-2026-1791197965","CLSA-2026-1791226662","CLSA-2026-1792083184","CLSA-2026-1792089817","DEBIAN-CVE-2026-80274","EUVD-2026-80778","GHSA-m66j-g9q7-jxjg","MGASA-2026-0422","OESA-2026-4190","OESA-2026-4191","OESA-2026-4192","OESA-2026-4193","RHSA-2026:68279","RHSA-2026:75577","RHSA-2026:75578","RHSA-2026:75767","RHSA-2026:79113","RHSA-2026:79162","RLSA-2026:75577","RLSA-2026:75578","RLSA-2026:75767","RLSA-2026:79113","RLSA-2026:79162","SUSE-SU-2026:24157-1","SUSE-SU-2026:4285-1","SUSE-SU-2026:4597-1","SUSE-SU-2026:4608-1","SUSE-SU-2026:4635-1","SUSE-SU-2026:4657-1","SUSE-SU-2026:4664-1","SUSE-SU-2026:4772-1","UBUNTU-CVE-2026-80274","USN-8929-1","USN-8969-1","openSUSE-SU-2026:11916-1","openSUSE-SU-2026:22049-1"],"status":"published","title":"Validating resolver can abort while caching a mismatched NOQNAME proof","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00569,"percentile":0.47393,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2026-09-16T14:07:20Z","modified":"2026-11-06T14:16:27Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bind","fixed_in":["9.20.30-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"bind","fixed_in":["9.20.29-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-export-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-export-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-libs-lite","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-license","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-lite-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-sdb","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-sdb-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"bind-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-export-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-export-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-libs-lite","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-license","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-lite-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-devel","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-libs","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-sdb","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-sdb-chroot","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"bind-utils","fixed_in":["33:9.11.4-26.P2.el7_9.16.tuxcare.els19"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.49-1~deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.20.29-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.20.29-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"bind","fixed_in":["9.16.23-32.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","fixed_in":["1:9.9.5.dfsg-3ubuntu0.19+esm15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","fixed_in":["1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","fixed_in":["1:9.11.3+dfsg-1ubuntu1.19+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","fixed_in":["1:9.18.30-0ubuntu0.20.04.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.22.04.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"bind9","fixed_in":["1:9.18.39-0ubuntu0.24.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"bind9","fixed_in":["1:9.20.24-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"bind9","fixed_in":["1:9.20.24-1ubuntu0.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:10","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.30-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.11-r0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.20.9-r0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.16-r0"},{"fixed":"9.20.29-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-4.el8.4.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.26-6.el8.tuxcare.els21"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els15"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-31.el9_6.2.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-13.el8.tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libbind-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libbind-export-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libbind9-161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libdns-export1104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libdns1104","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libirs-export161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libirs161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisc-export1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisc1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisccc-export161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisccc161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisccfg-export163","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libisccfg163","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"liblwres161","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.5.P4+dfsg-5.1+deb10u11+tuxcare.els6"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"33:9.11.4-26.P2.el7_9.16.tuxcare.els19"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libbind-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libbind-export-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libbind9-140","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libdns-export162","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libdns162","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libirs-export141","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libirs141","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisc-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisc160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisccc-export140","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisccc140","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisccfg-export140","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libisccfg140","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"liblwres141","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"lwresd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els14"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"bind9utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"dnsutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind-export-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libbind9-160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libdns-export1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libdns1100","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libirs-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libirs160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisc-export169","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisc169","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccc-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccc160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccfg-export160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libisccfg160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblwres160","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18+tuxcare.els12"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.49-1~deb12u3"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1","1:9.18.24-1~bpo11+1","1:9.18.28-1~deb12u1","1:9.18.28-1~deb12u2","1:9.18.33-1~deb12u2","1:9.18.41-1~deb12u1","1:9.18.44-1~deb12u1","1:9.18.47-1~deb12u1","1:9.18.49-1~deb12u1","1:9.18.49-1~deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.29-1~deb13u1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1","1:9.20.15-1~deb13u1","1:9.20.15-1~deb13u1~bpo12+1","1:9.20.15-2","1:9.20.18-1","1:9.20.18-1~deb13u1","1:9.20.18-1~deb13u1~bpo12+1","1:9.20.19-1","1:9.20.19-1~bpo12+1","1:9.20.20-1","1:9.20.20-1~bpo12+1","1:9.20.21-1","1:9.20.21-1~deb13u1","1:9.20.21-1~deb13u1~bpo12+1","1:9.20.22-1","1:9.20.23-1","1:9.20.23-1~deb13u1","1:9.20.23-1~deb13u1~bpo12+1","1:9.20.24-1","1:9.20.26-1","1:9.20.26-1~deb13u1","1:9.20.26-1~deb13u1~bpo12+1","1:9.20.27-1","1:9.20.27-2"]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.29-1"}]}],"versions":["1:9.20.11-4","1:9.20.15-1","1:9.20.15-1~deb13u1","1:9.20.15-1~deb13u1~bpo12+1","1:9.20.15-2","1:9.20.18-1","1:9.20.18-1~deb13u1","1:9.20.18-1~deb13u1~bpo12+1","1:9.20.19-1","1:9.20.19-1~bpo12+1","1:9.20.20-1","1:9.20.20-1~bpo12+1","1:9.20.21-1","1:9.20.21-1~deb13u1","1:9.20.21-1~deb13u1~bpo12+1","1:9.20.22-1","1:9.20.23-1","1:9.20.23-1~deb13u1","1:9.20.23-1~deb13u1~bpo12+1","1:9.20.24-1","1:9.20.26-1","1:9.20.26-1~deb13u1","1:9.20.26-1~deb13u1~bpo12+1","1:9.20.27-1","1:9.20.27-2","1:9.20.29-1~deb13u1"]},{"source":"osv","ecosystem":"Mageia:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-1.mga10"}]}],"bundled":14},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-32.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-14.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.21-14.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.21-5.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.20.29-0.1.hum1"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind9.18-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-export-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-libs-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-lite-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-pkcs11-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-sdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-export-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-libs-lite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-pkcs11-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-sdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:10","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.33-15.el10_2.12"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind9.18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.18.29-14.el9_8.10"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-40.el9_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-0.22.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.11.36-16.el8_10.16"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-160000.1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-160000.1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-150700.3.32.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-150700.3.32.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150000.12.94.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.50-150600.3.35.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.50-150600.3.35.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.22-3.77.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.11.22-3.77.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.65.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.65.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.6-150300.22.65.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.70.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.70.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.70.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150400.5.70.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.46.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.46.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.46.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.46.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.50-150500.8.46.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.19+esm15"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.19+esm6"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.5-3ubuntu2","4.3.5-3ubuntu3","4.3.5-3ubuntu4","4.3.5-3ubuntu5","4.3.5-3ubuntu6","4.3.5-3ubuntu7","4.3.5-3ubuntu7.1","4.3.5-3ubuntu7.2","4.3.5-3ubuntu7.3","4.3.5-3ubuntu7.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm3"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2","1:9.18.30-0ubuntu0.20.04.2+esm1","1:9.18.30-0ubuntu0.20.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.16+dfsg-3~build1","1:9.11.16+dfsg-3~ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.7"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4","1:9.18.39-0ubuntu0.22.04.5","1:9.18.39-0ubuntu0.22.04.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:9.11.19+dfsg-2.1ubuntu1","1:9.11.19+dfsg-2.1ubuntu2","1:9.11.19+dfsg-2.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.8"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5","1:9.18.39-0ubuntu0.24.04.6","1:9.18.39-0ubuntu0.24.04.7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-2ubuntu5","4.4.3-P1-4ubuntu1","4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu3.1"}]}],"versions":["1:9.20.18-1ubuntu2","1:9.20.23-1ubuntu1","1:9.20.24-1ubuntu2","1:9.20.24-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.4"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1","1:9.20.24-1ubuntu0.2","1:9.20.24-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"isc-dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.3-P1-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.9.5.dfsg-3ubuntu0.19+esm15"}]}],"versions":["1:9.9.3.dfsg.P2-4ubuntu1","1:9.9.3.dfsg.P2-4ubuntu2","1:9.9.3.dfsg.P2-4ubuntu3","1:9.9.5.dfsg-2","1:9.9.5.dfsg-3","1:9.9.5.dfsg-3ubuntu0.1","1:9.9.5.dfsg-3ubuntu0.2","1:9.9.5.dfsg-3ubuntu0.3","1:9.9.5.dfsg-3ubuntu0.4","1:9.9.5.dfsg-3ubuntu0.5","1:9.9.5.dfsg-3ubuntu0.6","1:9.9.5.dfsg-3ubuntu0.7","1:9.9.5.dfsg-3ubuntu0.8","1:9.9.5.dfsg-3ubuntu0.9","1:9.9.5.dfsg-3ubuntu0.10","1:9.9.5.dfsg-3ubuntu0.11","1:9.9.5.dfsg-3ubuntu0.12","1:9.9.5.dfsg-3ubuntu0.13","1:9.9.5.dfsg-3ubuntu0.14","1:9.9.5.dfsg-3ubuntu0.15","1:9.9.5.dfsg-3ubuntu0.16","1:9.9.5.dfsg-3ubuntu0.17","1:9.9.5.dfsg-3ubuntu0.18","1:9.9.5.dfsg-3ubuntu0.19","1:9.9.5.dfsg-3ubuntu0.19+esm1","1:9.9.5.dfsg-3ubuntu0.19+esm2","1:9.9.5.dfsg-3ubuntu0.19+esm3","1:9.9.5.dfsg-3ubuntu0.19+esm4","1:9.9.5.dfsg-3ubuntu0.19+esm5","1:9.9.5.dfsg-3ubuntu0.19+esm6","1:9.9.5.dfsg-3ubuntu0.19+esm7","1:9.9.5.dfsg-3ubuntu0.19+esm9","1:9.9.5.dfsg-3ubuntu0.19+esm10","1:9.9.5.dfsg-3ubuntu0.19+esm11","1:9.9.5.dfsg-3ubuntu0.19+esm12","1:9.9.5.dfsg-3ubuntu0.19+esm13","1:9.9.5.dfsg-3ubuntu0.19+esm14"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.10.3.dfsg.P4-8ubuntu1.19+esm11"}]}],"versions":["1:9.9.5.dfsg-11ubuntu1","1:9.9.5.dfsg-12","1:9.9.5.dfsg-12.1","1:9.9.5.dfsg-12.1ubuntu1","1:9.10.3.dfsg.P2-4","1:9.10.3.dfsg.P2-5","1:9.10.3.dfsg.P4-3","1:9.10.3.dfsg.P4-4","1:9.10.3.dfsg.P4-5","1:9.10.3.dfsg.P4-8","1:9.10.3.dfsg.P4-8ubuntu1","1:9.10.3.dfsg.P4-8ubuntu1.1","1:9.10.3.dfsg.P4-8ubuntu1.2","1:9.10.3.dfsg.P4-8ubuntu1.3","1:9.10.3.dfsg.P4-8ubuntu1.4","1:9.10.3.dfsg.P4-8ubuntu1.5","1:9.10.3.dfsg.P4-8ubuntu1.6","1:9.10.3.dfsg.P4-8ubuntu1.7","1:9.10.3.dfsg.P4-8ubuntu1.8","1:9.10.3.dfsg.P4-8ubuntu1.9","1:9.10.3.dfsg.P4-8ubuntu1.10","1:9.10.3.dfsg.P4-8ubuntu1.11","1:9.10.3.dfsg.P4-8ubuntu1.12","1:9.10.3.dfsg.P4-8ubuntu1.14","1:9.10.3.dfsg.P4-8ubuntu1.15","1:9.10.3.dfsg.P4-8ubuntu1.16","1:9.10.3.dfsg.P4-8ubuntu1.17","1:9.10.3.dfsg.P4-8ubuntu1.18","1:9.10.3.dfsg.P4-8ubuntu1.19","1:9.10.3.dfsg.P4-8ubuntu1.19+esm1","1:9.10.3.dfsg.P4-8ubuntu1.19+esm2","1:9.10.3.dfsg.P4-8ubuntu1.19+esm3","1:9.10.3.dfsg.P4-8ubuntu1.19+esm5","1:9.10.3.dfsg.P4-8ubuntu1.19+esm6","1:9.10.3.dfsg.P4-8ubuntu1.19+esm7","1:9.10.3.dfsg.P4-8ubuntu1.19+esm8","1:9.10.3.dfsg.P4-8ubuntu1.19+esm9","1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.19+esm6"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17","1:9.11.3+dfsg-1ubuntu1.18","1:9.11.3+dfsg-1ubuntu1.19+esm1","1:9.11.3+dfsg-1ubuntu1.19+esm2","1:9.11.3+dfsg-1ubuntu1.19+esm3","1:9.11.3+dfsg-1ubuntu1.19+esm4","1:9.11.3+dfsg-1ubuntu1.19+esm5"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.30-0ubuntu0.20.04.2+esm3"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10","1:9.16.1-0ubuntu2.11","1:9.16.1-0ubuntu2.12","1:9.16.1-0ubuntu2.14","1:9.16.1-0ubuntu2.15","1:9.16.1-0ubuntu2.16","1:9.16.48-0ubuntu0.20.04.1","1:9.18.28-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.1","1:9.18.30-0ubuntu0.20.04.2","1:9.18.30-0ubuntu0.20.04.2+esm1","1:9.18.30-0ubuntu0.20.04.2+esm2"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.7"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4","1:9.18.39-0ubuntu0.22.04.5","1:9.18.39-0ubuntu0.22.04.6"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.8"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5","1:9.18.39-0ubuntu0.24.04.6","1:9.18.39-0ubuntu0.24.04.7"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.4"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1","1:9.20.24-1ubuntu0.2","1:9.20.24-1ubuntu0.3"],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.22.04.8"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1","1:9.18.18-0ubuntu0.22.04.2","1:9.18.24-0ubuntu0.22.04.1","1:9.18.28-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.1","1:9.18.30-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.1","1:9.18.39-0ubuntu0.22.04.2","1:9.18.39-0ubuntu0.22.04.3","1:9.18.39-0ubuntu0.22.04.4","1:9.18.39-0ubuntu0.22.04.5","1:9.18.39-0ubuntu0.22.04.6","1:9.18.39-0ubuntu0.22.04.7"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.39-0ubuntu0.24.04.9"}]}],"versions":["1:9.18.18-0ubuntu2","1:9.18.21-0ubuntu1","1:9.18.24-0ubuntu3","1:9.18.24-0ubuntu4","1:9.18.24-0ubuntu5","1:9.18.28-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.1","1:9.18.30-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.1","1:9.18.39-0ubuntu0.24.04.2","1:9.18.39-0ubuntu0.24.04.3","1:9.18.39-0ubuntu0.24.04.5","1:9.18.39-0ubuntu0.24.04.6","1:9.18.39-0ubuntu0.24.04.7","1:9.18.39-0ubuntu0.24.04.8"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu3.1"}]}],"versions":["1:9.20.18-1ubuntu2","1:9.20.23-1ubuntu1","1:9.20.24-1ubuntu2","1:9.20.24-1ubuntu3"],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.20.24-1ubuntu0.5"}]}],"versions":["1:9.20.11-1ubuntu2","1:9.20.11-1ubuntu3","1:9.20.18-1ubuntu1","1:9.20.18-1ubuntu2","1:9.20.18-1ubuntu2.1","1:9.20.24-1ubuntu0.1","1:9.20.24-1ubuntu0.2","1:9.20.24-1ubuntu0.3","1:9.20.24-1ubuntu0.4"],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-1.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-160000.1.1"}]}],"bundled":14}],"products":[{"vendor":"isc","product":"bind 9"}],"references":[{"url":"https://kb.isc.org/docs/cve-2026-80274","tags":["vendor-advisory","web","article","report"]},{"url":"https://downloads.isc.org/isc/bind9/9.20.29","tags":["patch","article"]},{"url":"https://downloads.isc.org/isc/bind9/9.21.26","tags":["patch","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m66j-g9q7-jxjg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-80274","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75577","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19666","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19667","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80274","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81563","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81736","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535432","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535435","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535461","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535466","tags":["report"]},{"url":"https://bugzilla.redhat.com/2535477","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-75577.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75578","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-75578.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75767","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-75767.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79113","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-79113.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79162","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-79162.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-80274","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1790003616.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19667","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790090221.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1790326860.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790328589.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1790583590.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790905625.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13204","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1791197965.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1791226662.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1792083184.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13321","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1792089817.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-80274","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0422.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36326","tags":["report"]},{"url":"https://kb.isc.org/docs/cve-2026-19033","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-19662","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-19666","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-19667","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-19668","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-19941","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-75029","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-76163","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-77119","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-77692","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-78301","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-81563","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2026-81736","tags":["web","article"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4190","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81736","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4192","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4193","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68279","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-76163","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-78301","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-75029","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77692","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19668","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19033","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19662","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-19941","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77119","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68279.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19033","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19662","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19666","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19667","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535476","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19668","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535457","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-19941","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19941","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535468","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-75029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75029","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76163","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77119","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77692","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-78301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78301","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80274","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535461","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81563","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81736","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75577.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75578.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75767.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-273294","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79113.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79162.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75577","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75578","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:75767","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:79113","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:79162","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624157-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1280430","tags":["report"]},{"url":"https://bugzilla.suse.com/1280432","tags":["report"]},{"url":"https://bugzilla.suse.com/1280433","tags":["report"]},{"url":"https://bugzilla.suse.com/1280435","tags":["report"]},{"url":"https://bugzilla.suse.com/1280436","tags":["report"]},{"url":"https://bugzilla.suse.com/1280437","tags":["report"]},{"url":"https://bugzilla.suse.com/1280438","tags":["report"]},{"url":"https://bugzilla.suse.com/1280439","tags":["report"]},{"url":"https://bugzilla.suse.com/1280440","tags":["report"]},{"url":"https://bugzilla.suse.com/1280441","tags":["report"]},{"url":"https://bugzilla.suse.com/1280442","tags":["report"]},{"url":"https://bugzilla.suse.com/1280443","tags":["report"]},{"url":"https://bugzilla.suse.com/1280444","tags":["report"]},{"url":"https://bugzilla.suse.com/1280445","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-75029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-76163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-77119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-77692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-80274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81736","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264285-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264597-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264608-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264635-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264657-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264664-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264772-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-80274","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8929-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8969-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-8677","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-40778","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-1519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-10723","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-10822","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11622","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-11721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13204","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-13321","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19941","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-75029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-76163","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-77692","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-78301","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81563","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-81736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-19630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-94300","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-96888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-97313","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-80274","title":"Validating resolver can abort while caching a mismatched NOQNAME proof","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T14:07:20.058Z","modified":"2026-09-17T17:37:27.082Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T13:45:25.313702Z"}],"euvd":[{"id":"EUVD-2026-80778","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T14:07:20Z","modified":"2026-09-17T17:37:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:28:10.833571Z"}],"ghsa":[{"id":"GHSA-m66j-g9q7-jxjg","title":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative...","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:31:13Z","modified":"2026-09-16T15:31:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:11:59.582427Z"}],"nvd":[{"id":"CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:17:52.69Z","modified":"2026-10-26T21:10:00.17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:12:48.630594Z"}],"osv":[{"id":"ALPINE-CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:17:52.69Z","modified":"2026-10-01T02:17:49.414283585Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-80274","status":"published","published":"2026-09-18T06:05:44.130524Z","modified":"2026-09-30T07:15:04.434393474Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:26.041478Z"},{"id":"DEBIAN-CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:17:52.69Z","modified":"2026-10-28T00:00:12.527672609Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:04.001673Z"},{"id":"OESA-2026-4190","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nIf a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-80274)","status":"published","published":"2026-09-30T13:47:27Z","modified":"2026-10-01T02:00:06.772501572Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4191","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nIf a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-80274)\n\nA BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81563)\n\nIf a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81736)","status":"published","published":"2026-09-30T13:47:28Z","modified":"2026-10-01T02:00:07.327516755Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4192","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nIf a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-80274)\n\nA BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81563)\n\nIf a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81736)","status":"published","published":"2026-09-30T13:47:28Z","modified":"2026-10-01T02:00:06.77215973Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4193","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\n\nIf a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-80274)\n\nA BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81563)\n\nIf a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.(CVE-2026-81736)","status":"published","published":"2026-09-30T13:47:29Z","modified":"2026-10-01T02:00:07.829067388Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:68279","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-09-22T10:19:09Z","modified":"2026-10-17T10:18:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:75577","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-10-06T10:18:56Z","modified":"2026-10-14T10:30:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:75578","title":"Red Hat Security Advisory: bind9.18 security update","status":"published","published":"2026-10-06T10:18:57Z","modified":"2026-10-14T10:30:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:75767","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-10-06T10:19:04Z","modified":"2026-10-14T10:30:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:79113","title":"Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update","status":"published","published":"2026-10-10T10:22:41Z","modified":"2026-10-14T10:31:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:79162","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2026-10-10T10:22:46Z","modified":"2026-10-14T10:31:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:75577","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T12:10:42.614631Z","modified":"2026-10-06T12:45:02.583595534Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:75578","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\n\nSecurity Fix(es):\n\n* bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T06:05:20.701291Z","modified":"2026-10-06T06:45:03.521313978Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:75767","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-06T06:05:20.701291Z","modified":"2026-10-06T06:45:02.557647941Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:79113","title":"Important: bind9.16 security, bug fix, and enhancement update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\nBug Fix(es) and Enhancement(s):\n\n* bind 9.16 crash with SIGSEGV (JIRA:Rocky Linux-273294)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-09T06:04:06.775914Z","modified":"2026-10-09T06:45:02.629936253Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:79162","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-09T06:03:38.053729Z","modified":"2026-10-09T06:45:02.646233984Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:17:00Z","modified":"2026-11-03T21:20:44.406035625Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T21:41:09.830881Z"},{"id":"ALSA-2026:75577","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)\n  * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n  * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)\n  * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n  * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:30:50.834718214Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:75578","title":"Important: bind9.18 security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.  \n\nSecurity Fix(es):  \n\n  * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)\n  * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n  * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)\n  * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n  * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:32:37.759759405Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:75767","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n  * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n  * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:32:37.814979444Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:79113","title":"Important: bind9.16 security, bug fix, and enhancement update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n  * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n  * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * bind 9.16 crash with SIGSEGV (JIRA:AlmaLinux-273294)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-08T00:00:00Z","modified":"2026-10-29T11:00:51.46941037Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:79162","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.  \n\nSecurity Fix(es):  \n\n  * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n  * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n  * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-08T00:00:00Z","modified":"2026-10-29T11:02:29.728489695Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-103335","title":"CVE-2026-80274 affecting package bind for versions less than 9.20.30-1","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.","status":"published","published":"2026-09-16T15:17:52Z","modified":"2026-11-06T14:16:27.859389018Z","updated_at":"2026-11-06T14:57:15.495576Z"},{"id":"CLSA-2026-1790003616","title":"bind: Fix of 3 CVEs","description":"- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in\n  query_find(), so query_addnoqnameproof() no longer dereferences the rdataset\n  that query_filter64() had already returned to the message rdataset pool\n- CVE-2026-19667: reject negative cache records that do not fit in a\n  dns_rdata_t; a record filling the 64 KiB assembly buffer exactly was stored\n  with a 16-bit-truncated length of zero and every later reader of it aborted\n- CVE-2026-80274: record the denial type (NSEC or NSEC3) alongside the NOQNAME\n  proof owner so that isc__rdatalist_addnoqname() caches and serves the same\n  denial record the validator accepted","status":"published","published":"2026-09-21T15:13:49Z","modified":"2026-10-26T09:31:44.313399387Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790090221","title":"bind: Fix of 3 CVEs","description":"- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in\n  query_find(), so query_addnoqnameproof() no longer dereferences the rdataset\n  that query_filter64() had already returned to the message rdataset pool\n- CVE-2026-19667: reject negative cache records that do not fit in a\n  dns_rdata_t; a record filling the 64 KiB assembly buffer exactly was stored\n  with a 16-bit-truncated length of zero and every later reader of it aborted\n- CVE-2026-80274: record the denial type (NSEC or NSEC3) alongside the NOQNAME\n  proof owner so that isc__rdatalist_addnoqname() caches and serves the same\n  denial record the validator accepted","status":"published","published":"2026-09-22T15:17:18Z","modified":"2026-10-26T09:31:51.373798092Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790326860","title":"bind: Fix of 3 CVEs","description":"- CVE-2026-19666: clear the aliased noqname pointer in query_addanswer() on the\n  DNS64 filter64 path before the rdataset is returned to the message pool\n- CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t,\n  and report a repeated singleton or a second SOA RRset as DNS_R_TOOMANYRECORDS\n- CVE-2026-80274: record the accepted denial type with the rdataset so that\n  dns_rdataset_addnoqname() and dns_rdataset_getnoqname() select the same\n  NSEC/NSEC3 and RRSIG pair","status":"published","published":"2026-09-25T09:01:15Z","modified":"2026-10-26T09:30:51.512255643Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"CLSA-2026-1790328589","title":"bind: Fix of 3 CVEs","description":"- CVE-2026-19666: clear the aliased noqname pointer in query_addanswer() on the\n  DNS64 filter64 path before the rdataset is returned to the message pool\n- CVE-2026-19667: reject negative cache records that do not fit in a dns_rdata_t,\n  and report a repeated singleton or a second SOA RRset as DNS_R_TOOMANYRECORDS\n- CVE-2026-80274: record the accepted denial type with the rdataset so that\n  dns_rdataset_addnoqname() and dns_rdataset_getnoqname() select the same\n  NSEC/NSEC3 and RRSIG pair","status":"published","published":"2026-09-25T09:30:04Z","modified":"2026-10-26T09:31:35.750245708Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790583590","title":"bind: Fix of 3 CVEs","description":"- CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in\n  query_find(), so query_addnoqnameproof() no longer dereferences the rdataset\n  that query_filter64() has already returned to the message rdataset pool\n- CVE-2026-19667: reject negative cache records that do not fit in a\n  dns_rdata_t; copy_rdataset()/addoptout() now bound the assembled record by\n  DNS_RDATA_MAXLENGTH instead of letting a 64 KiB record reach\n  dns_rdataslab_fromrdataset(), where it trips INSIST(length \u003c= 0xffff) and\n  aborts named\n- CVE-2026-80274: record the denial type (NSEC or NSEC3) next to the NOQNAME\n  proof owner so isc__rdatalist_getnoqname() returns the same denial record\n  isc__rdatalist_addnoqname() selected, instead of the first one in wire order","status":"published","published":"2026-09-28T08:20:02Z","modified":"2026-10-26T09:30:55.768088625Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790905625","title":"bind: Fix of 2 CVEs","description":"- CVE-2026-80274: fix an assertion failure in a validating resolver when\n  a wildcard answer carries a signed NSEC3 proof and an unsigned NSEC (or\n  a signed NSEC and an unsigned NSEC3) at the same owner name; the NOQNAME\n  proof type accepted by the validator is now recorded and used both when\n  caching and when serving the proof","status":"published","published":"2026-10-15T23:58:34Z","modified":"2026-10-26T09:31:59.142012495Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1791197965","title":"Fix CVE(s): CVE-2026-19666, CVE-2026-80274","description":"   * SECURITY UPDATE: a resolver using dns64 with break-dnssec yes could abort when a partially excluded AAAA RRset had been cached with a NOQNAME proof (use-after-free on the filter64 path)\n     - debian/patches/CVE-2026-19666.patch: clear the NOQNAME proof alias on the DNS64 filter64 path (upstream c185a0d8c5)\n     - CVE-2026-19666\n   * SECURITY UPDATE: a resolver could abort on a wildcard answer whose NOQNAME proof owner carries both a signed NSEC3 and an unsigned NSEC, because the proof was selected by wire position when caching and when serving\n     - debian/patches/CVE-2026-80274.patch: record the denial type the validator accepted and use it when caching and serving the NOQNAME proof (upstream 2db650ce4e); adds dns_rdataset_addnoqnametype() rather than changing the dns_rdataset_addnoqname() ABI\n     - debian/libdns1104.symbols: record dns_rdataset_addnoqnametype(), added so\n       dns_rdataset_addnoqname() keeps its signature\n     - CVE-2026-80274","status":"published","published":"2026-10-05T10:59:39Z","modified":"2026-10-26T09:31:53.737996906Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791226662","title":"bind: Fix of 2 CVEs","description":"- CVE-2026-80274: fix an assertion failure in a validating resolver when\n  a wildcard answer carries a signed NSEC3 proof and an unsigned NSEC (or\n  a signed NSEC and an unsigned NSEC3) at the same owner name; the NOQNAME\n  proof type accepted by the validator is now recorded and used both when\n  caching and when serving the proof","status":"published","published":"2026-10-16T00:26:11Z","modified":"2026-10-26T09:31:49.615096194Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1792083184","title":"Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274","description":"   * SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC\n     Next Domain Name\n     - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next\n       owner name is not a subdomain of the RRSIG signer name in\n       dns_dnssec_verify3() in lib/dns/dnssec.c.\n     - CVE-2026-13321\n   * SECURITY UPDATE: assertion failure with dns64 and break-dnssec\n     - debian/patches/CVE-2026-19666.patch: clear the noqname alias on the\n       DNS64 filter64 path in query_find() in bin/named/query.c; add the\n       upstream dns64 system test for a partially excluded wildcard AAAA.\n     - CVE-2026-19666\n   * SECURITY UPDATE: crash on wildcard answers carrying both NSEC and NSEC3\n     proofs\n     - debian/patches/CVE-2026-80274.patch: record the denial type the\n       validator accepted and use it when caching and serving the NOQNAME\n       proof in lib/dns/validator.c, lib/dns/resolver.c and\n       lib/dns/rdatalist.c; adds dns_rdataset_addnoqnametype() so\n       dns_rdataset_addnoqname() keeps its signature.\n     - CVE-2026-80274\n   * Add root KSK-2024 (key tag 38696) trust anchor to bind.keys; fresh\n     installs could not validate the root zone after the 2026-10-11 rollover\n     - debian/patches/update_keys.patch: add the 38696 initial-key to\n       bind.keys and the generated bind.keys.h next to the existing 20326\n       entry (upstream 609bf35075, carried as initial-key because 9.10 has no\n       initial-ds).","status":"published","published":"2026-10-15T16:53:16Z","modified":"2026-10-26T09:32:03.018030406Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"CLSA-2026-1792089817","title":"Fix CVE(s): CVE-2026-13321, CVE-2026-19666, CVE-2026-80274","description":"   * SECURITY UPDATE: DNSSEC validation bypass via an out-of-zone NSEC\n     Next Domain Name\n     - debian/patches/CVE-2026-13321.patch: reject an NSEC RRset whose next\n       owner name is not a subdomain of the RRSIG signer name in\n       dns_dnssec_verify3() in lib/dns/dnssec.c.\n     - CVE-2026-13321\n   * SECURITY UPDATE: assertion failure with dns64 and break-dnssec\n     - debian/patches/CVE-2026-19666.patch: clear the noqname alias on the\n       DNS64 filter64 path in query_find() in bin/named/query.c.\n     - CVE-2026-19666\n   * SECURITY UPDATE: crash on wildcard answers carrying both NSEC and NSEC3\n     proofs\n     - debian/patches/CVE-2026-80274.patch: record the denial type the\n       validator accepted and use it when caching and serving the NOQNAME\n       proof in lib/dns/validator.c, lib/dns/resolver.c and\n       lib/dns/rdatalist.c; adds dns_rdataset_addnoqnametype() so\n       dns_rdataset_addnoqname() keeps its signature.\n     - debian/libdns1100.symbols: add dns_rdataset_addnoqnametype.\n     - CVE-2026-80274\n   * Add root KSK-2024 (key tag 38696) trust anchor to bind.keys; fresh\n     installs could not validate the root zone after the 2026-10-11 rollover\n     - debian/patches/update-root-ksk-38696.patch: add the 38696 initial-key\n       to bind.keys and the generated bind.keys.h (upstream 609bf35075,\n       carried as initial-key because 9.11 has no initial-ds).","status":"published","published":"2026-10-15T18:43:49Z","modified":"2026-10-26T09:32:04.778613811Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"MGASA-2026-0422","title":"Updated bind package fixes security vulnerabilities","description":"Unauthenticated IXFR deltas are applied to the live zone before TSIG\nverification (CVE-2026-19033).\nqpcache NOQNAME proof use-after-free crashes recursive resolver\n(CVE-2026-19662).\nUse-after-free in query_addnoqnameproof() via the DNS64 filter64 path\n(CVE-2026-19666).\nRemote assertion failure via 16-bit length truncation in\ndns_ncache_add() (CVE-2026-19667).\nResource Exhaustion via Excessive DNSSEC Cryptographic Material Matching\n(CVE-2026-19668).\ncheckwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence\nproof (CVE-2026-19941).\nMessage parser retains every identical singleton RDATA, enabling\nwire-to-work amplification (CVE-2026-75029).\nnamed aborts on a TKEY query when the user configuration has no global\noptions statement (CVE-2026-76163).\nNSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets\n(CVE-2026-77119).\nUnauthenticated remote crash of named via a single DoH SIG(0) request\n(CVE-2026-77692).\nOut-of-zone database nodes can become authoritative zone cuts\n(CVE-2026-78301).\nValidating resolver can abort while caching a mismatched NOQNAME proof\n(CVE-2026-80274).\nSVCB AliasMode additional-data error leaks qpcache references\n(CVE-2026-81563).\nRemote CPU denial of service through cached SVCB/HTTPS AliasMode trees\n(CVE-2026-81736).\n","status":"published","published":"2026-09-20T04:25:32Z","modified":"2026-09-20T04:30:03.02064766Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11916-1","title":"bind-9.20.29-1.1 on GA media","description":"These are all security issues fixed in the bind-9.20.29-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-09-30T18:23:13.922956675Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:22049-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement\n  (bsc#1280439).\n- CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440).\n- CVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) request (bsc#1280441).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n- CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444).\n- CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445).\n\nChanges for bind:\n\n- Upgrade to release 9.20.29\n Feature Changes:\n * Reject oversized and malformed DNSKEY records up front.\n * Speed up RPZ policy zone updates.\n Bug Fixes:\n * Prevent a crash when using both dns64 and filter-a.\n * Stop passing UDP client addresses to update-policy external\n helpers.\n * Missing required NSEC3 for delegation not detected.\n * Tighten EUI48 and EUI64 text parsing.\n * GeoIP ACL state could be stale or wrong after reload.\n * Honor DNSSEC policy key tag ranges.\n * Fix a double free in mdig when EDNS options are specified.\n * Fix a crash when an IXFR falls back to AXFR with updates still\n pending.\n * Fix DS requests to parental agents over TLS.\n * Fix the rndc-confgen -q (quiet) option.\n * Enforce query ACLs for redirect zones and searched DLZs.\n * Check asnum validity in GeoIP ACLs.\n * Fix a crash on remote-servers lists that reference themselves.\n * A record from outside a response policy zone could crash named.\n * Invalid key-store configuration could abort the DNSSEC tools.\n * NSEC signature set could bypass the secure-delegation check.\n * Fix a possible nsupdate issue when using GSS-TSIG.\n * Fix a crash with a single-element geoip sortlist.\n * Prevent out-of-bailiwick CNAMEs from evicting cached records.\n * Restore periodic cleanup of stale resolver address data.\n * Fix named-checkconf/named crash with malformed key name.\n * Prevent resolver crashes while processing DNS over TCP.\n * Ensure NSEC authority does not cross zonecut boundary.\n * Treat an unusable NSEC3 chain as a verification failure.\n * Treat non-canonical RPZ prefixes as any other failure.\n * Negative caching stopped working with\n stale-answer-client-timeout set to 0.\n * An unterminated OpenSSL private-key Label: field could be read\n past its parser buffer.\n * Restore SMF support on Solaris and illumos.\n * Fix compilation on GNU/Hurd.\n * dig +yaml was producing invalid YAML when a lookup failed.\n * Properly prevent TSIG generation command line injection\n attacks.\n * Fix a potential heap bounds overflow write in dnssec-signzone.\n * Fix crashes on invalid DNSTAP input in dnstap-read.\n","status":"published","published":"2026-10-07T09:32:20Z","modified":"2026-10-19T17:23:10.642945355Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:24157-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement\n  (bsc#1280439).\n- CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440).\n- CVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) request (bsc#1280441).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n- CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444).\n- CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445).\n\nChanges for bind:\n\n- Upgrade to release 9.20.29\n Feature Changes:\n * Reject oversized and malformed DNSKEY records up front.\n * Speed up RPZ policy zone updates.\n Bug Fixes:\n * Prevent a crash when using both dns64 and filter-a.\n * Stop passing UDP client addresses to update-policy external\n helpers.\n * Missing required NSEC3 for delegation not detected.\n * Tighten EUI48 and EUI64 text parsing.\n * GeoIP ACL state could be stale or wrong after reload.\n * Honor DNSSEC policy key tag ranges.\n * Fix a double free in mdig when EDNS options are specified.\n * Fix a crash when an IXFR falls back to AXFR with updates still\n pending.\n * Fix DS requests to parental agents over TLS.\n * Fix the rndc-confgen -q (quiet) option.\n * Enforce query ACLs for redirect zones and searched DLZs.\n * Check asnum validity in GeoIP ACLs.\n * Fix a crash on remote-servers lists that reference themselves.\n * A record from outside a response policy zone could crash named.\n * Invalid key-store configuration could abort the DNSSEC tools.\n * NSEC signature set could bypass the secure-delegation check.\n * Fix a possible nsupdate issue when using GSS-TSIG.\n * Fix a crash with a single-element geoip sortlist.\n * Prevent out-of-bailiwick CNAMEs from evicting cached records.\n * Restore periodic cleanup of stale resolver address data.\n * Fix named-checkconf/named crash with malformed key name.\n * Prevent resolver crashes while processing DNS over TCP.\n * Ensure NSEC authority does not cross zonecut boundary.\n * Treat an unusable NSEC3 chain as a verification failure.\n * Treat non-canonical RPZ prefixes as any other failure.\n * Negative caching stopped working with\n stale-answer-client-timeout set to 0.\n * An unterminated OpenSSL private-key Label: field could be read\n past its parser buffer.\n * Restore SMF support on Solaris and illumos.\n * Fix compilation on GNU/Hurd.\n * dig +yaml was producing invalid YAML when a lookup failed.\n * Properly prevent TSIG generation command line injection\n attacks.\n * Fix a potential heap bounds overflow write in dnssec-signzone.\n * Fix crashes on invalid DNSTAP input in dnstap-read.\n","status":"published","published":"2026-10-07T09:32:27Z","modified":"2026-10-16T17:23:11.550202292Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:4285-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement\n  (bsc#1280439).\n- CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440).\n- CVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) request (bsc#1280441).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n- CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444).\n- CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445).\n\nChanges for bind:\n\nUpgrade to release 9.20.29\n  \n New Features:\n * Disclose active Negative Trust Anchors with Extended DNS Error\n 33.\n Feature Changes:\n * Reject oversized and malformed DNSKEY records up front.\n * Speed up RPZ policy zone updates.\n Bug Fixes:\n * Prevent a crash when using both dns64 and filter-a.\n * Stop passing UDP client addresses to update-policy external\n helpers.\n * Missing required NSEC3 for delegation not detected.\n * Tighten EUI48 and EUI64 text parsing.\n * GeoIP ACL state could be stale or wrong after reload.\n * Honor DNSSEC policy key tag ranges.\n * Fix a double free in mdig when EDNS options are specified.\n * Fix a crash when an IXFR falls back to AXFR with updates still\n pending.\n * Fix DS requests to parental agents over TLS.\n * Fix the rndc-confgen -q (quiet) option.\n * Enforce query ACLs for redirect zones and searched DLZs.\n * Check asnum validity in GeoIP ACLs.\n * Fix a crash on remote-servers lists that reference themselves.\n * A record from outside a response policy zone could crash named.\n * Invalid key-store configuration could abort the DNSSEC tools.\n * NSEC signature set could bypass the secure-delegation check.\n * Fix a possible nsupdate issue when using GSS-TSIG.\n * Fix a crash with a single-element geoip sortlist.\n * Prevent out-of-bailiwick CNAMEs from evicting cached records.\n * Restore periodic cleanup of stale resolver address data.\n * Fix named-checkconf/named crash with malformed key name.\n * Prevent resolver crashes while processing DNS over TCP.\n * Ensure NSEC authority does not cross zonecut boundary.\n * Treat an unusable NSEC3 chain as a verification failure.\n * Treat non-canonical RPZ prefixes as any other failure.\n * Negative caching stopped working with\n stale-answer-client-timeout set to 0.\n * An unterminated OpenSSL private-key Label: field could be read\n past its parser buffer.\n * Restore SMF support on Solaris and illumos.\n * Fix compilation on GNU/Hurd.\n * dig +yaml was producing invalid YAML when a lookup failed.\n * Properly prevent TSIG generation command line injection\n attacks.\n * Fix a potential heap bounds overflow write in dnssec-signzone.\n * Fix crashes on invalid DNSTAP input in dnstap-read.\n","status":"published","published":"2026-09-22T16:08:33Z","modified":"2026-09-23T09:15:05.451835744Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4597-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n","status":"published","published":"2026-10-08T22:03:13Z","modified":"2026-10-09T18:15:03.737503711Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4608-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n- CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444).\n- CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445).\n","status":"published","published":"2026-10-09T15:54:44Z","modified":"2026-10-10T09:30:06.431763532Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4635-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n","status":"published","published":"2026-10-13T07:42:52Z","modified":"2026-10-13T17:23:10.181963096Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4657-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n","status":"published","published":"2026-10-14T07:49:40Z","modified":"2026-10-14T17:30:07.59830886Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4664-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n","status":"published","published":"2026-10-14T12:53:16Z","modified":"2026-10-15T10:30:33.42639486Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4772-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).\n- CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432).\n- CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433).\n- CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435).\n- CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436).\n- CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof (bsc#1280437).\n- CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification\n  (bsc#1280438).\n- CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440).\n- CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442).\n- CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443).\n","status":"published","published":"2026-10-20T17:58:10Z","modified":"2026-10-21T13:00:04.827405136Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"USN-8929-1","title":"bind9 vulnerabilities","description":"Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain\nmalformed DNSKEY records. A remote attacker could possibly use this issue\nto cause Bind to consume resources, resulting in a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04\nLTS. (CVE-2025-8677)\n\nYuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind\nincorrectly accepted certain records from answers. A remote attacker could\npossibly use this issue to perform a cache poisoning attack. This issue\nonly affected Ubuntu 18.04 LTS. (CVE-2025-40778)\n\nSamy Medjahed discovered that Bind incorrectly handled insecure delegation\nvalidation. A remote attacker could possibly use this issue to cause\nexcessive NSEC3 iterations, consuming CPU resources, and leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-1519)\n\nIt was discovered that Bind incorrectly accepted NSEC3 records whose signer\nname did not match the owning zone. A remote attacker could possibly use\nthis issue to perform NSEC3 impersonation attacks, bypassing DNSSEC\nvalidation. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-10723)\n\nIt was discovered that Bind incorrectly handled Key Records using the\nPRIVATEDNS algorithm. A remote attacker could possibly use this issue to\ncause Bind to crash, resulting in a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2026-10822)\n\nIt was discovered that Bind incorrectly handled wildcard CNAME expansion in\nResponse Policy Zones. A remote attacker could possibly use this issue to\nbypass configured RPZ policies. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2026-11331)\n\nIt was discovered that Bind incorrectly tracked memory usage in the DNS\ncache. A remote attacker could possibly use this issue to cause Bind to use\nmemory beyond configured limits, leading to a denial of service. This issue\nonly affected Ubuntu 20.04 LTS. (CVE-2026-11622)\n\nIt was discovered that Bind incorrectly handled signed wildcard records\nwith label count discrepancies and RRSIG validation. A remote attacker\ncould possibly use this issue to perform cache poisoning attacks. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nand Ubuntu 20.04 LTS. (CVE-2026-11721)\n\nIt was discovered that Bind incorrectly handled DNSSEC validation when a\ndomain was covered by both NSEC and NSEC3 records with only one type having\nan RRSIG. A remote attacker could possibly use this issue to cause Bind to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-13204)\n\nIt was discovered that Bind incorrectly validated out-of-zone NSEC next\nowner names during DNSSEC validation. A remote attacker could possibly use\nthis issue to bypass DNSSEC validation. This issue only affected Ubuntu\n14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n(CVE-2026-13321)\n\nIt was discovered that Bind incorrectly served zone transfer data before\nverifying the TSIG signature on multi-message transfers. A remote attacker\ncould possibly use this issue to send unauthorized zone contents to a\nsecondary server. (CVE-2026-19033)\n\nIt was discovered that Bind incorrectly handled the lifetime of cached\nDNSSEC proofs, leading to a use-after-free. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-19662)\n\nIt was discovered that Bind incorrectly handled certain malformed answers\nwhen configured to use DNS64. A remote attacker could possibly use this\nissue to cause Bind to crash, resulting in a denial of service.\n(CVE-2026-19666)\n\nIt was discovered that Bind incorrectly handled oversized negative answers\nwhen storing them in the negative cache. A remote attacker could possibly\nuse this issue to cause Bind to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04\nLTS, and Ubuntu 26.04 LTS. (CVE-2026-19667)\n\nIt was discovered that Bind incorrectly handled large numbers of certain\ninvalid DNSSEC records during validation. A remote attacker could possibly\nuse this issue to cause Bind to use excessive resources, leading to a\ndenial of service. This issue only affected Ubuntu 26.04 LTS.\n(CVE-2026-19668)\n\nIt was discovered that Bind incorrectly accepted inapplicable NSEC records\nas proof that no wildcard existed. A remote attacker could possibly use\nthis issue to forge NXDOMAIN responses, masking the existence of wildcard\nrecords. (CVE-2026-19941)\n\nIt was discovered that Bind incorrectly handled repeated copies of records\nthat should only appear once, such as SOA, CNAME, or DNAME records. A\nremote attacker could possibly use this issue to cause Bind to use\nexcessive memory, leading to a denial of service. (CVE-2026-75029)\n\nIt was discovered that Bind incorrectly handled TKEY queries when the\nconfiguration did not contain a global options block. A remote attacker\ncould possibly use this issue to cause Bind to crash, resulting in a denial\nof service. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-76163)\n\nIt was discovered that Bind incorrectly accepted NSEC3 records from\nunrelated sibling zones as proof of an insecure delegation. A remote\nattacker could possibly use this issue to bypass DNSSEC validation and\ninject forged unsigned answers. (CVE-2026-77119)\n\nIt was discovered that Bind incorrectly handled DNS-over-HTTPS requests\ncontaining invalid SIG(0) records when the connection was closed\nprematurely. A remote attacker could possibly use this issue to cause Bind\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n26.04 LTS. (CVE-2026-77692)\n\nIt was discovered that Bind incorrectly treated NS or DNAME records above\nthe zone origin as zone cuts. An attacker could possibly use this issue to\ncause Bind to serve or cache out-of-zone data, resulting in cache\npoisoning. (CVE-2026-78301)\n\nIt was discovered that Bind incorrectly handled wildcard answers with both\nNSEC3 and NSEC proofs at the same owner name. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial of\nservice. (CVE-2026-80274)\n\nIt was discovered that Bind incorrectly released resources when processing\nSVCB and HTTPS AliasMode records. A remote attacker could possibly use this\nissue to cause Bind to exhaust resources, leading to a denial of service.\nThis issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04\nLTS, and Ubuntu 26.04 LTS. (CVE-2026-81563)\n\nIt was discovered that Bind incorrectly limited additional processing for\ncached SVCB and HTTPS AliasMode records. A remote attacker could possibly\nuse this issue to cause Bind to use excessive CPU resources, leading to a\ndenial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-81736)","status":"published","published":"2026-10-14T13:00:49Z","modified":"2026-10-17T13:11:54.621775565Z","updated_at":"2026-11-02T16:58:26.907654Z"},{"id":"USN-8969-1","title":"bind9 vulnerabilities","description":"It was discovered that Bind incorrectly handled certain DNS messages\nwith repeated singleton records such as SOA, CNAME, or DNAME records.\nA remote attacker could possibly use this issue to cause Bind to use\nexcessive memory, leading to a denial of service. This issue only affected\nUbuntu 26.10. (CVE-2026-75029)\n\nIt was discovered that Bind incorrectly handled cached DNSSEC proofs.\nA remote attacker could possibly use this issue to cause Bind to crash,\nresulting in a denial of service. This issue only affected\nUbuntu 26.10. (CVE-2026-19662)\n\nIt was discovered that Bind incorrectly handled certain invalid DNSSEC\nrecords. A remote attacker could possibly use this issue to cause Bind\nto use excessive CPU resources, leading to a denial of service. This issue only affected\nUbuntu 26.10.\n(CVE-2026-19668)\n\nIt was discovered that Bind incorrectly handled malformed answers on\nresolvers configured to use DNS64. A remote attacker could possibly use\nthis issue to cause Bind to crash, resulting in a denial of service. This issue only affected\nUbuntu 26.10.\n(CVE-2026-19666)\n\nIt was discovered that Bind incorrectly handled TKEY queries when no\nglobal options block was present. A remote attacker could possibly use\nthis issue to cause Bind to crash, resulting in a denial of service.\nThis issue only affected\nUbuntu 26.10.\n(CVE-2026-76163)\n\nIt was discovered that Bind incorrectly verified TSIG signatures during\nzone transfers. A remote attacker could possibly use this issue to inject\nunauthorized zone contents into a secondary server. This issue only affected\nUbuntu 26.10. (CVE-2026-19033)\n\nIt was discovered that Bind incorrectly handled certain NSEC wildcard\nproofs. A remote attacker could possibly use this issue to forge NXDOMAIN\nresponses and hide the existence of wildcard records. This issue only affected\nUbuntu 26.10. (CVE-2026-19941)\n\nIt was discovered that Bind incorrectly handled DNS-over-HTTPS requests\nwith invalid SIG(0) records. A remote attacker could possibly use this\nissue to cause Bind to crash, resulting in a denial of service. This issue only affected\nUbuntu 26.10. (CVE-2026-77692)\n\nIt was discovered that Bind incorrectly handled malformed zones\ncontaining NS or DNAME nodes above the zone origin. An attacker could\npossibly use this issue to cause Bind to serve out-of-zone records as\nauthoritative, leading to cache poisoning. This issue only affected\nUbuntu 26.10. (CVE-2026-78301)\n\nIt was discovered that Bind incorrectly handled SVCB/HTTPS AliasMode\nrecords referencing large numbers of ServiceMode records. A remote\nattacker could possibly use this issue to cause Bind to exhaust\nresources, leading to a denial of service. This issue only affected\nUbuntu 26.10. (CVE-2026-81563)\n\nIt was discovered that Bind incorrectly validated NSEC3 records from\nunrelated sibling zones. A remote attacker could possibly use this issue\nto perform a DNSSEC downgrade attack and have forged unsigned answers\naccepted. This issue only affected\nUbuntu 26.10. (CVE-2026-77119)\n\nIt was discovered that Bind incorrectly handled wildcard answers with\nmixed NSEC and NSEC3 proofs. A remote attacker could possibly use this\nissue to cause Bind to crash, resulting in a denial of service. This issue only affected\nUbuntu 26.10.\n(CVE-2026-80274)\n\nIt was discovered that Bind incorrectly handled oversized negative\ncache records. A remote attacker could possibly use this issue to cause\nBind to crash, resulting in a denial of service. This issue only affected\nUbuntu 26.10. (CVE-2026-19667)\n\nIt was discovered that Bind incorrectly handled cached trees of\nSVCB/HTTPS AliasMode records. A remote attacker could possibly use this\nissue to cause Bind to use excessive CPU resources, leading to a denial\nof service. This issue only affected\nUbuntu 26.10. (CVE-2026-81736)\n\nIt was discovered that Bind incorrectly limited the processing of\ncompression pointers in inbound DNS messages. A remote attacker could\npossibly use this issue to cause Bind to use excessive CPU and memory\nresources, leading to a denial of service. (CVE-2026-19630)\n\nIt was discovered that Bind incorrectly serialized access to shared\nGSS-TSIG security contexts. A remote attacker could possibly use this\nissue to corrupt memory and execute arbitrary code. (CVE-2026-94300)\n\nIt was discovered that Bind incorrectly handled redirect zones when\nused together with strict QNAME minimization. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial\nof service. (CVE-2026-96888)\n\nIt was discovered that Bind incorrectly handled certain RPZ\nconfigurations when processing queries with and without recursion. A\nremote attacker could possibly use this issue to cause Bind to crash,\nresulting in a denial of service. (CVE-2026-97313)","status":"published","published":"2026-11-03T13:45:46Z","modified":"2026-11-03T21:34:46.680070301Z","updated_at":"2026-11-03T22:59:46.019912Z"}]}}