Version in base suite: 9.20.23-1~deb13u1 Base version: bind9_9.20.23-1~deb13u1 Target version: bind9_9.20.26-1~deb13u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/b/bind9/bind9_9.20.23-1~deb13u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/b/bind9/bind9_9.20.26-1~deb13u1.dsc /srv/release.debian.org/tmp/mmSShKTOhC/bind9-9.20.26/bin/tests/system/geoip2/data/GeoIP2-Domain.mmdb |binary bind9-9.20.26/ChangeLog | 3 bind9-9.20.26/NEWS | 3 bind9-9.20.26/SECURITY.md | 5 bind9-9.20.26/bin/dig/nslookup.c | 9 bind9-9.20.26/bin/dnssec/dnssec-cds.c | 2 bind9-9.20.26/bin/dnssec/dnssec-keygen.c | 2 bind9-9.20.26/bin/dnssec/dnssec-signzone.c | 12 bind9-9.20.26/bin/named/bind9.xsl | 4 bind9-9.20.26/bin/named/config.c | 1 bind9-9.20.26/bin/named/include/named/globals.h | 4 bind9-9.20.26/bin/named/os.c | 51 bind9-9.20.26/bin/named/server.c | 19 bind9-9.20.26/bin/named/statschannel.c | 37 bind9-9.20.26/bin/nsupdate/nsupdate.c | 2 bind9-9.20.26/bin/tests/system/COOKBOOK.md | 314 ++++ bind9-9.20.26/bin/tests/system/README.md | 726 +++++++--- bind9-9.20.26/bin/tests/system/_common/controls.conf.in | 9 bind9-9.20.26/bin/tests/system/_common/controls.conf.j2 | 4 bind9-9.20.26/bin/tests/system/_common/root.hint.conf | 4 bind9-9.20.26/bin/tests/system/_common/zones.conf.j2 | 14 bind9-9.20.26/bin/tests/system/_common/zones/delegations.partial.db.j2 | 5 bind9-9.20.26/bin/tests/system/_common/zones/ns.partial.db.j2 | 2 bind9-9.20.26/bin/tests/system/_common/zones/root.db.j2.manual | 13 bind9-9.20.26/bin/tests/system/_common/zones/soa.partial.db.j2 | 11 bind9-9.20.26/bin/tests/system/_common/zones/template.db.j2.manual | 7 bind9-9.20.26/bin/tests/system/allow_query/ns2/controls.conf.j2 | 9 bind9-9.20.26/bin/tests/system/allow_query/ns2/named.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named02.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named03.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named04.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named05.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named06.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named07.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named08.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named09.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named10.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named11.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named12.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named21.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named22.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named23.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named24.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named25.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named26.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named27.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named28.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named29.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named30.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named31.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named32.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named33.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named34.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named40.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named53.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named54.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named55.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named56.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/ns2/named57.conf.j2 | 2 bind9-9.20.26/bin/tests/system/allow_query/tests_sh_allow_query.py | 1 bind9-9.20.26/bin/tests/system/cap_glues/ns1/named.conf.j2 | 15 bind9-9.20.26/bin/tests/system/cap_glues/ns1/root.db | 13 bind9-9.20.26/bin/tests/system/cap_glues/ns2/named.conf.j2 | 15 bind9-9.20.26/bin/tests/system/cap_glues/ns2/tld.db | 63 bind9-9.20.26/bin/tests/system/cap_glues/ns3/named.conf.j2 | 31 bind9-9.20.26/bin/tests/system/cap_glues/ns3/root.hint | 3 bind9-9.20.26/bin/tests/system/cap_glues/tests_cap_glues.py | 33 bind9-9.20.26/bin/tests/system/cdnxdomain/ns1/named.conf.j2 | 39 bind9-9.20.26/bin/tests/system/cdnxdomain/ns1/trusted.conf.j2 | 5 bind9-9.20.26/bin/tests/system/cdnxdomain/ns2/named.conf.j2 | 28 bind9-9.20.26/bin/tests/system/cdnxdomain/tests_cdnxdomain.py | 173 ++ bind9-9.20.26/bin/tests/system/cds/setup.sh | 3 bind9-9.20.26/bin/tests/system/checkconf/inline-inherit.conf | 8 bind9-9.20.26/bin/tests/system/checkconf/tests.sh | 3 bind9-9.20.26/bin/tests/system/checkds/tests_checkds.py | 22 bind9-9.20.26/bin/tests/system/cipher_suites/tests_cipher_suites.py | 6 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ans2/ans.py | 148 ++ bind9-9.20.26/bin/tests/system/cname_dname_negcache/common.py | 45 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ns1/bar.test.db | 5 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ns1/named.conf.j2 | 24 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ns1/root.db | 6 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ns1/test.db | 8 bind9-9.20.26/bin/tests/system/cname_dname_negcache/ns3/named.conf.j2 | 11 bind9-9.20.26/bin/tests/system/cname_dname_negcache/tests_cname_negcache.py | 16 bind9-9.20.26/bin/tests/system/cname_dname_negcache/tests_dname_negcache.py | 16 bind9-9.20.26/bin/tests/system/conftest.py | 153 +- bind9-9.20.26/bin/tests/system/cookie/cookie_ans.py | 8 bind9-9.20.26/bin/tests/system/cookie/tests.sh | 12 bind9-9.20.26/bin/tests/system/dialup/tests_dialup_zone_transfer.py | 4 bind9-9.20.26/bin/tests/system/dispatch/ans4/ans.py | 42 bind9-9.20.26/bin/tests/system/dispatch/ans4/tcp-only.db | 15 bind9-9.20.26/bin/tests/system/dispatch/ns1/root.db | 2 bind9-9.20.26/bin/tests/system/dispatch/tests_tcponly.py | 33 bind9-9.20.26/bin/tests/system/dns64_dname/ns1/hack.db | 8 bind9-9.20.26/bin/tests/system/dns64_dname/ns1/named.conf.j2 | 21 bind9-9.20.26/bin/tests/system/dns64_dname/ns1/root.db | 6 bind9-9.20.26/bin/tests/system/dns64_dname/ns2/named.conf.j2 | 20 bind9-9.20.26/bin/tests/system/dns64_dname/ns2/root.hint | 2 bind9-9.20.26/bin/tests/system/dns64_dname/tests_dns64_dname.py | 55 bind9-9.20.26/bin/tests/system/dnssec/tests.sh | 90 - bind9-9.20.26/bin/tests/system/dnssec/tests_sh_dnssec.py | 1 bind9-9.20.26/bin/tests/system/dnssec/tests_validation.py | 59 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns1/named.conf.j2 | 31 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns1/root.db | 19 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns1/test.db | 23 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns2/named.conf.j2 | 26 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns2/victim.db | 18 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns3/evil.db | 23 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns3/named.conf.j2 | 26 bind9-9.20.26/bin/tests/system/dnssec_bypass/ns4/named.conf.j2 | 35 bind9-9.20.26/bin/tests/system/dnssec_bypass/tests_bypass.py | 154 ++ bind9-9.20.26/bin/tests/system/dnssec_cname_response/ans2/ans.py | 239 +++ bind9-9.20.26/bin/tests/system/dnssec_cname_response/ans2/example.db.in | 11 bind9-9.20.26/bin/tests/system/dnssec_cname_response/ans2/secure.db.in | 10 bind9-9.20.26/bin/tests/system/dnssec_cname_response/ans2/stuffed.db.in | 34 bind9-9.20.26/bin/tests/system/dnssec_cname_response/ns3/named.conf.j2 | 29 bind9-9.20.26/bin/tests/system/dnssec_cname_response/ns3/trusted.conf.j2 | 5 bind9-9.20.26/bin/tests/system/dnssec_cname_response/tests_cname_rejection.py | 210 ++ bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns2/example.db.in | 128 - bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns2/named.conf.j2 | 47 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns2/truncated-active.selfsigned.db.signed | 34 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns2/truncated-revoked.selfsigned.db.signed | 40 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns2/trusted.conf.j2 | 30 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns3/named.conf.j2 | 44 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/ns3/trusted.conf.j2 | 30 bind9-9.20.26/bin/tests/system/dnssec_malformed_dnskey/tests_malformed_dnskey.py | 201 -- bind9-9.20.26/bin/tests/system/dnssec_nsec3/ans1/ans.py | 20 bind9-9.20.26/bin/tests/system/dnssec_nsec3/ans1/common.py | 111 + bind9-9.20.26/bin/tests/system/dnssec_nsec3/ans1/f025.py | 217 ++ bind9-9.20.26/bin/tests/system/dnssec_nsec3/ans1/f055.py | 217 ++ bind9-9.20.26/bin/tests/system/dnssec_nsec3/ns2/named.conf.j2 | 41 bind9-9.20.26/bin/tests/system/dnssec_nsec3/tests_dnssec_nsec3_delegation.py | 140 + bind9-9.20.26/bin/tests/system/dnssec_nsec3/tests_nsec3_wrong_zone.py | 148 ++ bind9-9.20.26/bin/tests/system/dnssec_parent_rrsig/ans1/ans.py | 189 ++ bind9-9.20.26/bin/tests/system/dnssec_parent_rrsig/ns2/named.conf.j2 | 37 bind9-9.20.26/bin/tests/system/dnssec_parent_rrsig/tests_parent_rrsig.py | 132 + bind9-9.20.26/bin/tests/system/dnssec_py/ans4/ans.py | 37 bind9-9.20.26/bin/tests/system/dnssec_py/ans4/noqname_mismatch.py | 197 ++ bind9-9.20.26/bin/tests/system/dnssec_py/ans4/rrsig_labels_signer_ans.py | 254 +++ bind9-9.20.26/bin/tests/system/dnssec_py/ans4/sibling_ds_ans.py | 53 bind9-9.20.26/bin/tests/system/dnssec_py/common.py | 24 bind9-9.20.26/bin/tests/system/dnssec_py/ns1/named.conf.j2 | 24 bind9-9.20.26/bin/tests/system/dnssec_py/ns2/named.conf.j2 | 34 bind9-9.20.26/bin/tests/system/dnssec_py/ns2/zones/dnskey-malformed.db.j2.manual | 110 + bind9-9.20.26/bin/tests/system/dnssec_py/ns2/zones/nsec3-answer.db | 47 bind9-9.20.26/bin/tests/system/dnssec_py/ns2/zones/truncated-active.selfsigned.db.signed.j2 | 25 bind9-9.20.26/bin/tests/system/dnssec_py/ns2/zones/truncated-revoked.selfsigned.db.signed.j2 | 31 bind9-9.20.26/bin/tests/system/dnssec_py/ns3/named.conf.j2 | 25 bind9-9.20.26/bin/tests/system/dnssec_py/ns9/named.conf.j2 | 25 bind9-9.20.26/bin/tests/system/dnssec_py/tests_dnskey_malformed.py | 213 ++ bind9-9.20.26/bin/tests/system/dnssec_py/tests_dnskey_truncated_selfsigned.py | 64 bind9-9.20.26/bin/tests/system/dnssec_py/tests_findnoqname_mismatch.py | 128 + bind9-9.20.26/bin/tests/system/dnssec_py/tests_mixed_ds.py | 72 bind9-9.20.26/bin/tests/system/dnssec_py/tests_nsec3_answer.py | 450 ++++++ bind9-9.20.26/bin/tests/system/dnssec_py/tests_nsec3_iter_too_many.py | 52 bind9-9.20.26/bin/tests/system/dnssec_py/tests_rrsig_labels_signer.py | 125 + bind9-9.20.26/bin/tests/system/dnssec_py/tests_rrsigs_extra_expired.py | 107 + bind9-9.20.26/bin/tests/system/dnssec_py/tests_sibling_ds.py | 70 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns1/named.conf.j2 | 38 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns1/sign.sh | 37 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns1/zones/root.db.in | 16 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns2/named.conf.j2 | 47 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns2/sign.sh | 35 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns2/zones/example.db.in | 16 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns3/named.conf.j2 | 47 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns3/sign.sh | 32 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns3/zones/child.example.db.in | 18 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/ns4/named.conf.j2 | 42 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/setup.sh | 32 bind9-9.20.26/bin/tests/system/dnssec_unsupported_ds/tests_mixed_ds.py | 36 bind9-9.20.26/bin/tests/system/dnssec_wildcard/ans1/ans.py | 20 bind9-9.20.26/bin/tests/system/dnssec_wildcard/ans1/common.py | 102 + bind9-9.20.26/bin/tests/system/dnssec_wildcard/ans1/f043.py | 80 + bind9-9.20.26/bin/tests/system/dnssec_wildcard/ans1/f045.py | 120 + bind9-9.20.26/bin/tests/system/dnssec_wildcard/ns2/named.conf.j2 | 46 bind9-9.20.26/bin/tests/system/dnssec_wildcard/tests_dnssec_wildcard_additional.py | 129 + bind9-9.20.26/bin/tests/system/dnssec_wildcard/tests_replayed_parent_wildcard.py | 174 ++ bind9-9.20.26/bin/tests/system/dnstap/tests.sh | 2 bind9-9.20.26/bin/tests/system/doth/ns2/named.conf.j2 | 9 bind9-9.20.26/bin/tests/system/feature-test.c | 9 bind9-9.20.26/bin/tests/system/formerr/badnsec3owner | 7 bind9-9.20.26/bin/tests/system/formerr/badrecordname | 21 bind9-9.20.26/bin/tests/system/formerr/dupans | 8 bind9-9.20.26/bin/tests/system/formerr/dupquestion | 10 bind9-9.20.26/bin/tests/system/formerr/formerr.pl | 97 - bind9-9.20.26/bin/tests/system/formerr/keyclass | 7 bind9-9.20.26/bin/tests/system/formerr/malformeddeltype | 5 bind9-9.20.26/bin/tests/system/formerr/malformedrrsig | 5 bind9-9.20.26/bin/tests/system/formerr/nametoolong | 19 bind9-9.20.26/bin/tests/system/formerr/noquestions | 1 bind9-9.20.26/bin/tests/system/formerr/optwrongname | 5 bind9-9.20.26/bin/tests/system/formerr/qtypeasanswer | 5 bind9-9.20.26/bin/tests/system/formerr/questionclass | 7 bind9-9.20.26/bin/tests/system/formerr/shortquestion | 5 bind9-9.20.26/bin/tests/system/formerr/shortrecord | 5 bind9-9.20.26/bin/tests/system/formerr/tests.sh | 177 -- bind9-9.20.26/bin/tests/system/formerr/tests_formerr.py | 516 +++++++ bind9-9.20.26/bin/tests/system/formerr/tests_sh_formerr.py | 40 bind9-9.20.26/bin/tests/system/formerr/tsignotlast | 8 bind9-9.20.26/bin/tests/system/formerr/tsigwrongclass | 5 bind9-9.20.26/bin/tests/system/formerr/twoquestionnames | 11 bind9-9.20.26/bin/tests/system/formerr/twoquestiontypes | 10 bind9-9.20.26/bin/tests/system/formerr/wrongclass | 7 bind9-9.20.26/bin/tests/system/fwdfirst/ans1/ans.py | 22 bind9-9.20.26/bin/tests/system/fwdfirst/ans1/hack.db | 7 bind9-9.20.26/bin/tests/system/fwdfirst/ans1/root.db | 8 bind9-9.20.26/bin/tests/system/fwdfirst/ans1/sibling.hack.db | 5 bind9-9.20.26/bin/tests/system/fwdfirst/ans2/ans.py | 45 bind9-9.20.26/bin/tests/system/fwdfirst/ans3/ans.py | 50 bind9-9.20.26/bin/tests/system/fwdfirst/ns4/named.conf.j2 | 31 bind9-9.20.26/bin/tests/system/fwdfirst/ns5/named.conf.j2 | 27 bind9-9.20.26/bin/tests/system/fwdfirst/tests_fwdfirst.py | 49 bind9-9.20.26/bin/tests/system/geoip2/data/GeoIP2-Domain.json | 10 bind9-9.20.26/bin/tests/system/geoip2/ns2/named11.conf.j2 | 8 bind9-9.20.26/bin/tests/system/geoip2/setup.sh | 2 bind9-9.20.26/bin/tests/system/geoip2/tests.sh | 4 bind9-9.20.26/bin/tests/system/inline/ns3/named.conf.j2 | 9 bind9-9.20.26/bin/tests/system/inline/setup.sh | 1 bind9-9.20.26/bin/tests/system/inline/tests.sh | 39 bind9-9.20.26/bin/tests/system/inline/tests_inline_incremental_updates.py | 65 bind9-9.20.26/bin/tests/system/isctest/__init__.py | 6 bind9-9.20.26/bin/tests/system/isctest/algorithms.py | 51 bind9-9.20.26/bin/tests/system/isctest/asyncserver.py | 6 bind9-9.20.26/bin/tests/system/isctest/check.py | 8 bind9-9.20.26/bin/tests/system/isctest/instance.py | 197 +- bind9-9.20.26/bin/tests/system/isctest/kasp.py | 82 - bind9-9.20.26/bin/tests/system/isctest/mark.py | 18 bind9-9.20.26/bin/tests/system/isctest/query.py | 15 bind9-9.20.26/bin/tests/system/isctest/run.py | 5 bind9-9.20.26/bin/tests/system/isctest/template.py | 97 + bind9-9.20.26/bin/tests/system/isctest/transfer.py | 47 bind9-9.20.26/bin/tests/system/isctest/vars/algorithms.py | 44 bind9-9.20.26/bin/tests/system/isctest/vars/features.py | 3 bind9-9.20.26/bin/tests/system/isctest/zone.py | 536 +++++++ bind9-9.20.26/bin/tests/system/kasp/ns1/named.conf.j2 | 21 bind9-9.20.26/bin/tests/system/kasp/ns1/root.db.j2 | 10 bind9-9.20.26/bin/tests/system/kasp/ns1/setup.sh | 31 bind9-9.20.26/bin/tests/system/kasp/ns3/named-reconfig.conf.j2 | 6 bind9-9.20.26/bin/tests/system/kasp/ns3/named-reconfig2.conf.j2 | 6 bind9-9.20.26/bin/tests/system/kasp/ns3/named-reconfig3.conf.j2 | 6 bind9-9.20.26/bin/tests/system/kasp/ns3/named.conf.j2 | 1 bind9-9.20.26/bin/tests/system/kasp/ns3/policies/kasp-fips.conf.j2 | 33 bind9-9.20.26/bin/tests/system/kasp/ns3/setup.sh | 13 bind9-9.20.26/bin/tests/system/kasp/setup.sh | 4 bind9-9.20.26/bin/tests/system/kasp/tests_kasp.py | 95 + bind9-9.20.26/bin/tests/system/ksr/tests_ksr.py | 13 bind9-9.20.26/bin/tests/system/migrate2kasp/tests_migrate2kasp.py | 2 bind9-9.20.26/bin/tests/system/mirror_root_zone/tests_mirror_root_zone.py | 6 bind9-9.20.26/bin/tests/system/mismatchtcp/ans2/ans.py | 66 bind9-9.20.26/bin/tests/system/mismatchtcp/ans2/example.db | 16 bind9-9.20.26/bin/tests/system/mismatchtcp/ns1/named.conf.j2 | 33 bind9-9.20.26/bin/tests/system/mismatchtcp/ns1/root.db | 17 bind9-9.20.26/bin/tests/system/mismatchtcp/tests_mismatchtcp.py | 88 + bind9-9.20.26/bin/tests/system/multisigner/ns3/model2.update-any.db | 16 bind9-9.20.26/bin/tests/system/multisigner/ns3/named.conf.j2 | 8 bind9-9.20.26/bin/tests/system/multisigner/ns3/setup.sh | 9 bind9-9.20.26/bin/tests/system/multisigner/ns4/model2.update-any.db | 15 bind9-9.20.26/bin/tests/system/multisigner/ns4/named.conf.j2 | 8 bind9-9.20.26/bin/tests/system/multisigner/ns4/setup.sh | 9 bind9-9.20.26/bin/tests/system/multisigner/tests_multisigner.py | 202 ++ bind9-9.20.26/bin/tests/system/nsec3/tests_nsec3_change.py | 2 bind9-9.20.26/bin/tests/system/nsec3/tests_nsec3_initial.py | 2 bind9-9.20.26/bin/tests/system/nsec3/tests_nsec3_reconfig.py | 2 bind9-9.20.26/bin/tests/system/nsec3/tests_nsec3_restart.py | 2 bind9-9.20.26/bin/tests/system/nsec3/tests_nsec3_retransfer.py | 2 bind9-9.20.26/bin/tests/system/nsec3_answer/ns1/named.conf.j2 | 31 bind9-9.20.26/bin/tests/system/nsec3_answer/ns1/root.db.in | 51 bind9-9.20.26/bin/tests/system/nsec3_answer/ns1/sign.sh | 34 bind9-9.20.26/bin/tests/system/nsec3_answer/ns2/named.conf.j2 | 39 bind9-9.20.26/bin/tests/system/nsec3_answer/setup.sh | 22 bind9-9.20.26/bin/tests/system/nsec3_answer/tests_nsec3.py | 425 ----- bind9-9.20.26/bin/tests/system/nsec3_delegation/ns1/named.conf.j2 | 35 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns1/root.db | 25 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns2/iter-too-many.db.j2.manual | 31 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns2/named.conf.j2 | 40 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns2/sub.iter-too-many.db | 24 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns3/named.conf.j2 | 37 bind9-9.20.26/bin/tests/system/nsec3_delegation/ns3/trusted.conf.j2 | 5 bind9-9.20.26/bin/tests/system/nsec3_delegation/tests_excessive_nsec3_iterations.py | 61 bind9-9.20.26/bin/tests/system/nsec3_impersonation/ans1/ans.py | 280 +++ bind9-9.20.26/bin/tests/system/nsec3_impersonation/ns2/named.conf.j2 | 33 bind9-9.20.26/bin/tests/system/nsec3_impersonation/tests_nsec3_impersonation.py | 152 ++ bind9-9.20.26/bin/tests/system/nsec_piggyback/ans1/ans.py | 230 +++ bind9-9.20.26/bin/tests/system/nsec_piggyback/ns2/c.p22.hack.db | 12 bind9-9.20.26/bin/tests/system/nsec_piggyback/ns2/named.conf.j2 | 30 bind9-9.20.26/bin/tests/system/nsec_piggyback/ns3/named.conf.j2 | 34 bind9-9.20.26/bin/tests/system/nsec_piggyback/tests_nsec_piggyback.py | 181 ++ bind9-9.20.26/bin/tests/system/nsec_synthesis/ans1/ans.py | 20 bind9-9.20.26/bin/tests/system/nsec_synthesis/ans1/common.py | 100 + bind9-9.20.26/bin/tests/system/nsec_synthesis/ans1/f004.py | 132 + bind9-9.20.26/bin/tests/system/nsec_synthesis/ans1/f023.py | 124 + bind9-9.20.26/bin/tests/system/nsec_synthesis/ns2/named.conf.j2 | 51 bind9-9.20.26/bin/tests/system/nsec_synthesis/ns3/named.conf.j2 | 34 bind9-9.20.26/bin/tests/system/nsec_synthesis/tests_nsec_child_next.py | 144 + bind9-9.20.26/bin/tests/system/nsec_synthesis/tests_nsec_exact_nodata.py | 149 ++ bind9-9.20.26/bin/tests/system/nsec_synthesis/tests_nsec_pending_cd.py | 152 ++ bind9-9.20.26/bin/tests/system/nsec_synthesis/tests_nsec_selfloop.py | 147 ++ bind9-9.20.26/bin/tests/system/optout/ns2/controls.conf.j2 | 9 bind9-9.20.26/bin/tests/system/optout/ns2/named.conf.j2 | 2 bind9-9.20.26/bin/tests/system/optout/tests_optout.py | 5 bind9-9.20.26/bin/tests/system/pipelined/tests.sh | 27 bind9-9.20.26/bin/tests/system/pipelined/tests_sh_pipelined.py | 1 bind9-9.20.26/bin/tests/system/qpcache_rrsig_any/ans3/ans.py | 63 bind9-9.20.26/bin/tests/system/qpcache_rrsig_any/ns2/named.args | 1 bind9-9.20.26/bin/tests/system/qpcache_rrsig_any/ns2/named.conf.j2 | 39 bind9-9.20.26/bin/tests/system/qpcache_rrsig_any/tests_qpcache_rrsig_any.py | 72 bind9-9.20.26/bin/tests/system/reclimit/tests.sh | 10 bind9-9.20.26/bin/tests/system/redirect/ns10/named.conf.j2 | 29 bind9-9.20.26/bin/tests/system/redirect/ns10/redirect.db | 5 bind9-9.20.26/bin/tests/system/redirect/ns10/root.hints | 2 bind9-9.20.26/bin/tests/system/redirect/ns7/named.conf.j2 | 24 bind9-9.20.26/bin/tests/system/redirect/ns7/redirect.db | 5 bind9-9.20.26/bin/tests/system/redirect/ns7/root.db | 3 bind9-9.20.26/bin/tests/system/redirect/ns8/named.conf.j2 | 19 bind9-9.20.26/bin/tests/system/redirect/ns8/root.hints | 2 bind9-9.20.26/bin/tests/system/redirect/ns9/named.conf.j2 | 20 bind9-9.20.26/bin/tests/system/redirect/ns9/redirect.db | 5 bind9-9.20.26/bin/tests/system/redirect/ns9/root.db.in | 3 bind9-9.20.26/bin/tests/system/redirect/ns9/sign.sh | 27 bind9-9.20.26/bin/tests/system/redirect/setup.sh | 1 bind9-9.20.26/bin/tests/system/redirect/tests_redirect_dns64.py | 102 + bind9-9.20.26/bin/tests/system/redirect/tests_sh_redirect.py | 6 bind9-9.20.26/bin/tests/system/requirements.txt | 4 bind9-9.20.26/bin/tests/system/resend_loop/ans3/ans.py | 128 - bind9-9.20.26/bin/tests/system/resolver/ans2/ans.py | 1 bind9-9.20.26/bin/tests/system/resolver/ans3/ans.py | 30 bind9-9.20.26/bin/tests/system/resolver/tests_resolver.py | 45 bind9-9.20.26/bin/tests/system/rollover/ns3/named.conf.j2 | 1 bind9-9.20.26/bin/tests/system/rollover/ns4/kasp.conf.j2 | 21 bind9-9.20.26/bin/tests/system/rollover/ns4/named.common.conf.j2 | 39 bind9-9.20.26/bin/tests/system/rollover/ns4/named.conf.j2 | 22 bind9-9.20.26/bin/tests/system/rollover/setup.py | 110 - bind9-9.20.26/bin/tests/system/rollover/tests_rollover_manual.py | 158 +- bind9-9.20.26/bin/tests/system/rpz/ns2/tld2.db | 2 bind9-9.20.26/bin/tests/system/rpz/ns4/tld4.db | 2 bind9-9.20.26/bin/tests/system/rpz/tests.sh | 44 bind9-9.20.26/bin/tests/system/selfpointedglue/tests_selfpointedglue.py | 7 bind9-9.20.26/bin/tests/system/serve_stale/ns1/named.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns1/named4.conf.in | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named1.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named2.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named3.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named4.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named5.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named6.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named7.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/ns3/named9.conf.j2 | 1 bind9-9.20.26/bin/tests/system/serve_stale/tests.sh | 98 + bind9-9.20.26/bin/tests/system/serve_stale/tests_sh_serve_stale.py | 1 bind9-9.20.26/bin/tests/system/sfcache_cname/ns1/named.conf.j2 | 16 bind9-9.20.26/bin/tests/system/sfcache_cname/ns1/root.db | 6 bind9-9.20.26/bin/tests/system/sfcache_cname/ns2/named.conf.j2 | 22 bind9-9.20.26/bin/tests/system/sfcache_cname/tests_sfcache_cname.py | 34 bind9-9.20.26/bin/tests/system/statistics/tests.sh | 8 bind9-9.20.26/bin/tests/system/statschannel/generic.py | 26 bind9-9.20.26/bin/tests/system/statschannel/tests_json.py | 20 bind9-9.20.26/bin/tests/system/timeouts/tests_tcp_timeouts.py | 16 bind9-9.20.26/bin/tests/system/wildcard/ns1/entwild.db.in | 26 bind9-9.20.26/bin/tests/system/wildcard/ns1/named.conf.j2 | 10 bind9-9.20.26/bin/tests/system/wildcard/ns1/sign.sh | 14 bind9-9.20.26/bin/tests/system/wildcard/tests_nonterminal_wildcard.py | 89 + bind9-9.20.26/bin/tests/system/wildcard/tests_sh_wildcard.py | 1 bind9-9.20.26/bin/tests/system/wildcard/tests_wildcard.py | 1 bind9-9.20.26/bin/tests/system/xfer/ans5/ans.py | 2 bind9-9.20.26/bin/tests/system/xfer/ans9/ans.py | 31 bind9-9.20.26/bin/tests/system/xfer/ns6/named.conf.j2 | 9 bind9-9.20.26/bin/tests/system/xfer/ns8/small.db.j2 | 2 bind9-9.20.26/bin/tests/system/xfer/tests_retransfer_with_force.py | 22 bind9-9.20.26/bin/tests/system/xfer/tests_xfer.py | 114 + bind9-9.20.26/bin/tests/system/xfer_servers_list/tests_xfer_servers_list.py | 38 bind9-9.20.26/bin/tests/system/xferquota/tests_xferquota.py | 5 bind9-9.20.26/bin/tools/dnstap-read.c | 1 bind9-9.20.26/bin/tools/nsec3hash.c | 32 bind9-9.20.26/config.h.in | 13 bind9-9.20.26/configure | 105 + bind9-9.20.26/configure.ac | 11 bind9-9.20.26/debian/changelog | 20 bind9-9.20.26/doc/arm/changelog.rst | 3 bind9-9.20.26/doc/arm/conf.py | 1 bind9-9.20.26/doc/arm/notes.rst | 3 bind9-9.20.26/doc/arm/platforms.inc.rst | 6 bind9-9.20.26/doc/arm/reference.rst | 14 bind9-9.20.26/doc/arm/security.inc.rst | 5 bind9-9.20.26/doc/changelog/changelog-9.20.24.rst | 212 ++ bind9-9.20.26/doc/changelog/changelog-9.20.25.rst | 18 bind9-9.20.26/doc/changelog/changelog-9.20.26.rst | 532 +++++++ bind9-9.20.26/doc/man/named.conf.5in | 1 bind9-9.20.26/doc/misc/options | 1 bind9-9.20.26/doc/notes/notes-9.20.23.rst | 7 bind9-9.20.26/doc/notes/notes-9.20.24.rst | 113 + bind9-9.20.26/doc/notes/notes-9.20.25.rst | 18 bind9-9.20.26/doc/notes/notes-9.20.26.rst | 315 ++++ bind9-9.20.26/lib/dns/badcache.c | 131 - bind9-9.20.26/lib/dns/catz.c | 11 bind9-9.20.26/lib/dns/diff.c | 13 bind9-9.20.26/lib/dns/dispatch.c | 167 +- bind9-9.20.26/lib/dns/dns64.c | 2 bind9-9.20.26/lib/dns/dnssec.c | 236 ++- bind9-9.20.26/lib/dns/dst_api.c | 1 bind9-9.20.26/lib/dns/dst_internal.h | 2 bind9-9.20.26/lib/dns/geoip2.c | 2 bind9-9.20.26/lib/dns/include/dns/adb.h | 2 bind9-9.20.26/lib/dns/include/dns/badcache.h | 2 bind9-9.20.26/lib/dns/include/dns/compress.h | 2 bind9-9.20.26/lib/dns/include/dns/db.h | 4 bind9-9.20.26/lib/dns/include/dns/diff.h | 10 bind9-9.20.26/lib/dns/include/dns/dispatch.h | 11 bind9-9.20.26/lib/dns/include/dns/dnssec.h | 16 bind9-9.20.26/lib/dns/include/dns/ds.h | 1 bind9-9.20.26/lib/dns/include/dns/nametree.h | 4 bind9-9.20.26/lib/dns/include/dns/nsec.h | 18 bind9-9.20.26/lib/dns/include/dns/private.h | 7 bind9-9.20.26/lib/dns/include/dns/qp.h | 2 bind9-9.20.26/lib/dns/include/dns/rdata.h | 1 bind9-9.20.26/lib/dns/include/dns/rdataslab.h | 3 bind9-9.20.26/lib/dns/include/dns/sdlz.h | 4 bind9-9.20.26/lib/dns/include/dns/ssu.h | 2 bind9-9.20.26/lib/dns/include/dns/stats.h | 3 bind9-9.20.26/lib/dns/include/dns/tsig.h | 28 bind9-9.20.26/lib/dns/include/dns/update.h | 5 bind9-9.20.26/lib/dns/include/dns/validator.h | 4 bind9-9.20.26/lib/dns/include/dns/zone.h | 2 bind9-9.20.26/lib/dns/master.c | 39 bind9-9.20.26/lib/dns/masterdump.c | 55 bind9-9.20.26/lib/dns/message.c | 18 bind9-9.20.26/lib/dns/name.c | 4 bind9-9.20.26/lib/dns/nsec.c | 30 bind9-9.20.26/lib/dns/nsec3.c | 28 bind9-9.20.26/lib/dns/openssl_shim.h | 7 bind9-9.20.26/lib/dns/opensslrsa_link.c | 141 + bind9-9.20.26/lib/dns/qp.c | 2 bind9-9.20.26/lib/dns/qp_p.h | 4 bind9-9.20.26/lib/dns/qpcache.c | 146 +- bind9-9.20.26/lib/dns/qpzone.c | 27 bind9-9.20.26/lib/dns/rbt-cachedb.c | 20 bind9-9.20.26/lib/dns/rbt-zonedb.c | 6 bind9-9.20.26/lib/dns/rbtdb.c | 118 + bind9-9.20.26/lib/dns/rbtdb_p.h | 5 bind9-9.20.26/lib/dns/rdata.c | 2 bind9-9.20.26/lib/dns/rdata/generic/key_25.c | 2 bind9-9.20.26/lib/dns/rdata/generic/l32_105.c | 2 bind9-9.20.26/lib/dns/rdata/generic/l64_106.c | 2 bind9-9.20.26/lib/dns/rdata/generic/nid_104.c | 2 bind9-9.20.26/lib/dns/rdata/generic/rrsig_46.c | 32 bind9-9.20.26/lib/dns/rdata/in_1/a_1.c | 2 bind9-9.20.26/lib/dns/rdatalist.c | 34 bind9-9.20.26/lib/dns/rdataslab.c | 35 bind9-9.20.26/lib/dns/resolver.c | 629 +++++--- bind9-9.20.26/lib/dns/rpz.c | 7 bind9-9.20.26/lib/dns/rrl.c | 2 bind9-9.20.26/lib/dns/tkey.c | 2 bind9-9.20.26/lib/dns/tsig.c | 83 - bind9-9.20.26/lib/dns/update.c | 57 bind9-9.20.26/lib/dns/validator.c | 354 +++- bind9-9.20.26/lib/dns/view.c | 4 bind9-9.20.26/lib/dns/xfrin.c | 41 bind9-9.20.26/lib/dns/zone.c | 209 +- bind9-9.20.26/lib/dns/zoneverify.c | 2 bind9-9.20.26/lib/isc/Makefile.am | 2 bind9-9.20.26/lib/isc/Makefile.in | 28 bind9-9.20.26/lib/isc/helper.c | 68 bind9-9.20.26/lib/isc/histo.c | 2 bind9-9.20.26/lib/isc/ht.c | 4 bind9-9.20.26/lib/isc/httpd.c | 11 bind9-9.20.26/lib/isc/include/isc/attributes.h | 6 bind9-9.20.26/lib/isc/include/isc/helper.h | 45 bind9-9.20.26/lib/isc/include/isc/hmac.h | 2 bind9-9.20.26/lib/isc/include/isc/loop.h | 3 bind9-9.20.26/lib/isc/include/isc/mem.h | 9 bind9-9.20.26/lib/isc/include/isc/queue.h | 2 bind9-9.20.26/lib/isc/include/isc/result.h | 1 bind9-9.20.26/lib/isc/include/isc/stdio.h | 2 bind9-9.20.26/lib/isc/include/isc/tls.h | 4 bind9-9.20.26/lib/isc/include/isc/urcu.h | 28 bind9-9.20.26/lib/isc/include/isc/url.h | 2 bind9-9.20.26/lib/isc/include/isc/work.h | 113 + bind9-9.20.26/lib/isc/loop.c | 131 - bind9-9.20.26/lib/isc/loop_p.h | 23 bind9-9.20.26/lib/isc/mem.c | 21 bind9-9.20.26/lib/isc/netmgr/http.c | 20 bind9-9.20.26/lib/isc/netmgr/tcp.c | 9 bind9-9.20.26/lib/isc/openssl_shim.c | 1 bind9-9.20.26/lib/isc/picohttpparser.c | 52 bind9-9.20.26/lib/isc/result.c | 4 bind9-9.20.26/lib/isc/rwlock.c | 46 bind9-9.20.26/lib/isc/tid.c | 5 bind9-9.20.26/lib/isc/tls.c | 3 bind9-9.20.26/lib/isc/url.c | 13 bind9-9.20.26/lib/isc/work.c | 431 +++++ bind9-9.20.26/lib/isccfg/check.c | 6 bind9-9.20.26/lib/isccfg/include/isccfg/aclconf.h | 2 bind9-9.20.26/lib/isccfg/namedconf.c | 1 bind9-9.20.26/lib/ns/client.c | 39 bind9-9.20.26/lib/ns/include/ns/client.h | 22 bind9-9.20.26/lib/ns/query.c | 408 +---- bind9-9.20.26/lib/ns/update.c | 152 +- bind9-9.20.26/srcid | 2 bind9-9.20.26/tests/dns/Makefile.am | 1 bind9-9.20.26/tests/dns/Makefile.in | 41 bind9-9.20.26/tests/dns/badcache_test.c | 15 bind9-9.20.26/tests/dns/dispatch_test.c | 238 +++ bind9-9.20.26/tests/dns/dnstap_test.c | 2 bind9-9.20.26/tests/dns/name_test.c | 27 bind9-9.20.26/tests/dns/private_test.c | 14 bind9-9.20.26/tests/dns/qpdb_test.c | 252 +++ bind9-9.20.26/tests/dns/rbtdb_test.c | 186 ++ bind9-9.20.26/tests/dns/rdata_test.c | 229 +++ bind9-9.20.26/tests/dns/rsa_test.c | 127 + bind9-9.20.26/tests/dns/tsig_test.c | 40 bind9-9.20.26/tests/dns/update_test.c | 140 + bind9-9.20.26/tests/isc/Makefile.am | 1 bind9-9.20.26/tests/isc/Makefile.in | 31 bind9-9.20.26/tests/isc/time_test.c | 9 bind9-9.20.26/tests/isc/url_test.c | 277 +++ bind9-9.20.26/tests/isc/work_test.c | 7 516 files changed, 19098 insertions(+), 4907 deletions(-) dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp28xqtbao/bind9_9.20.23-1~deb13u1.dsc: no acceptable signature found dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp28xqtbao/bind9_9.20.26-1~deb13u1.dsc: no acceptable signature found diff -Nru bind9-9.20.23/ChangeLog bind9-9.20.26/ChangeLog --- bind9-9.20.23/ChangeLog 2026-05-08 14:50:58.426501417 +0000 +++ bind9-9.20.26/ChangeLog 2026-07-20 14:47:53.944848109 +0000 @@ -18,6 +18,9 @@ development. Regular users should refer to :ref:`Release Notes ` for changes relevant to them. +.. include:: ../changelog/changelog-9.20.26.rst +.. include:: ../changelog/changelog-9.20.25.rst +.. include:: ../changelog/changelog-9.20.24.rst .. include:: ../changelog/changelog-9.20.23.rst .. include:: ../changelog/changelog-9.20.22.rst .. include:: ../changelog/changelog-9.20.21.rst diff -Nru bind9-9.20.23/NEWS bind9-9.20.26/NEWS --- bind9-9.20.23/NEWS 2026-05-08 14:50:58.426501417 +0000 +++ bind9-9.20.26/NEWS 2026-07-20 14:47:53.944848109 +0000 @@ -18,6 +18,9 @@ development. Regular users should refer to :ref:`Release Notes ` for changes relevant to them. +.. include:: ../changelog/changelog-9.20.26.rst +.. include:: ../changelog/changelog-9.20.25.rst +.. include:: ../changelog/changelog-9.20.24.rst .. include:: ../changelog/changelog-9.20.23.rst .. include:: ../changelog/changelog-9.20.22.rst .. include:: ../changelog/changelog-9.20.21.rst diff -Nru bind9-9.20.23/SECURITY.md bind9-9.20.26/SECURITY.md --- bind9-9.20.23/SECURITY.md 2026-05-08 14:50:58.111494329 +0000 +++ bind9-9.20.26/SECURITY.md 2026-07-20 14:47:53.565840640 +0000 @@ -19,10 +19,7 @@ If you think you may be seeing a potential security vulnerability in BIND (for example, a crash with a REQUIRE, INSIST, or ASSERT failure), please report it -immediately by [opening a confidential GitLab issue][2]. If a GitLab issue is -not an option, please use the template from the file -.gitlab/issue_templates/Security_issue.mde-mail and send it to -bind-security@isc.org. +immediately by [opening a confidential GitLab issue][2]. Please do not discuss undisclosed security vulnerabilities on any public mailing list. ISC has a long history of handling reported diff -Nru bind9-9.20.23/bin/dig/nslookup.c bind9-9.20.26/bin/dig/nslookup.c --- bind9-9.20.23/bin/dig/nslookup.c 2026-05-08 14:50:58.117494464 +0000 +++ bind9-9.20.26/bin/dig/nslookup.c 2026-07-20 14:47:53.570840765 +0000 @@ -889,7 +889,8 @@ start_next_command(void); static void -process_next_command(void *arg ISC_ATTR_UNUSED) { +process_next_command(void *arg ISC_ATTR_UNUSED, + isc_result_t result ISC_ATTR_UNUSED) { isc_loop_t *loop = isc_loop_main(loopmgr); if (cmdline == NULL) { in_use = false; @@ -916,11 +917,11 @@ isc_loopmgr_pause(loopmgr); if (interactive) { - isc_work_enqueue(loop, readline_next_command, + isc_work_enqueue(loop, ISC_WORKLANE_FAST, readline_next_command, process_next_command, loop); } else { - isc_work_enqueue(loop, fgets_next_command, process_next_command, - loop); + isc_work_enqueue(loop, ISC_WORKLANE_FAST, fgets_next_command, + process_next_command, loop); } isc_loopmgr_resume(loopmgr); } diff -Nru bind9-9.20.23/bin/dnssec/dnssec-cds.c bind9-9.20.26/bin/dnssec/dnssec-cds.c --- bind9-9.20.23/bin/dnssec/dnssec-cds.c 2026-05-08 14:50:58.117494464 +0000 +++ bind9-9.20.26/bin/dnssec/dnssec-cds.c 2026-07-20 14:47:53.571840790 +0000 @@ -653,7 +653,7 @@ result = dns_dnssec_verify(name, rdataset, ki->dst, false, 0, mctx, &sigrdata, - NULL); + NULL, NULL); if (result != ISC_R_SUCCESS && result != DNS_R_FROMWILDCARD) diff -Nru bind9-9.20.23/bin/dnssec/dnssec-keygen.c bind9-9.20.26/bin/dnssec/dnssec-keygen.c --- bind9-9.20.23/bin/dnssec/dnssec-keygen.c 2026-05-08 14:50:58.118494486 +0000 +++ bind9-9.20.26/bin/dnssec/dnssec-keygen.c 2026-07-20 14:47:53.572840815 +0000 @@ -66,7 +66,7 @@ const char *program = "dnssec-keygen"; /* - * These are are set here for backwards compatibility. They are + * These are set here for backwards compatibility. They are * raised to 2048 in FIPS mode. */ static int min_rsa = 1024; diff -Nru bind9-9.20.23/bin/dnssec/dnssec-signzone.c bind9-9.20.26/bin/dnssec/dnssec-signzone.c --- bind9-9.20.23/bin/dnssec/dnssec-signzone.c 2026-05-08 14:50:58.120494531 +0000 +++ bind9-9.20.26/bin/dnssec/dnssec-signzone.c 2026-07-20 14:47:53.574840865 +0000 @@ -308,7 +308,7 @@ if (tryverify) { result = dns_dnssec_verify(name, rdataset, key, true, 0, mctx, - &trdata, NULL); + &trdata, NULL, NULL); if (result == ISC_R_SUCCESS || result == DNS_R_FROMWILDCARD) { vbprintf(3, "\tsignature verified\n"); INCSTAT(nverified); @@ -469,7 +469,8 @@ setverifies(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, dns_rdata_t *rrsig) { isc_result_t result; - result = dns_dnssec_verify(name, set, key, false, 0, mctx, rrsig, NULL); + result = dns_dnssec_verify(name, set, key, false, 0, mctx, rrsig, NULL, + NULL); if (result == ISC_R_SUCCESS || result == DNS_R_FROMWILDCARD) { INCSTAT(nverified); return true; @@ -1622,6 +1623,11 @@ dns_db_detachnode(gdb, &node); goto next; } + if (!dns_name_issubdomain(name, gorigin)) { + dumpnode(name, node); + dns_db_detachnode(gdb, &node); + goto next; + } /* * Sort the zone data from the glue and out-of-zone data. * For NSEC zones nodes with zone data have NSEC records. @@ -2882,7 +2888,7 @@ dns_diff_init(mctx, &diff); /* - * Update keylist with information from from the key repository. + * Update keylist with information from the key repository. */ dns_dnssec_updatekeys(&keylist, &matchkeys, NULL, gorigin, keyttl, &diff, mctx, report); diff -Nru bind9-9.20.23/bin/named/bind9.xsl bind9-9.20.26/bin/named/bind9.xsl --- bind9-9.20.23/bin/named/bind9.xsl 2026-05-08 14:50:58.121494554 +0000 +++ bind9-9.20.26/bin/named/bind9.xsl 2026-07-20 14:47:53.575840890 +0000 @@ -22,7 +22,7 @@