-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 17:22:56 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: i386 Version: 1:9.20.30-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.20.30-1~deb13u1) trixie-security; urgency=high . * New upstream version 9.20.30 + [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS messages. + [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from terminating named. + [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME minimization. + [CVE-2026-97313]: Fix a crash when resuming from a query initiated by RPZ. Checksums-Sha1: 31185227266abbb0b6c7cc84bffaeba6e0ca4a87 615768 bind9-dbgsym_9.20.30-1~deb13u1_i386.deb e7c71a6b7992572019b8a7ab951ab9dc1eab341b 298916 bind9-dev_9.20.30-1~deb13u1_i386.deb fcae899af47de553d0d4d5bf7ae104fb2b933f1d 398676 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_i386.deb c9a5aaa4ee385bf49802195cbb487f01bdda5fb5 171520 bind9-dnsutils_9.20.30-1~deb13u1_i386.deb 963c975dc2ad945097aecd5c5fe06ca9d52dbfad 95308 bind9-host-dbgsym_9.20.30-1~deb13u1_i386.deb 2cbd45d3f48829a9ca3e0a5dbf31b74f045a82b2 58432 bind9-host_9.20.30-1~deb13u1_i386.deb d37db670488bec6b63c4919de85d0097f26050c2 3574440 bind9-libs-dbgsym_9.20.30-1~deb13u1_i386.deb 00ca2331bbb4778bac730cdde0ad6957065631d7 1331816 bind9-libs_9.20.30-1~deb13u1_i386.deb e115a6a9ea967c2428a783923d1bb06ce2103132 457316 bind9-utils-dbgsym_9.20.30-1~deb13u1_i386.deb 79f862d2ad1c3333c1899ad71232a019bcc05763 187680 bind9-utils_9.20.30-1~deb13u1_i386.deb c8edd751a2f67fe869c91d022376ae0fb4b30655 10515 bind9_9.20.30-1~deb13u1_i386-buildd.buildinfo b2d1fecbc0e38f6069a7bb8c4334df0ff3101e63 271368 bind9_9.20.30-1~deb13u1_i386.deb Checksums-Sha256: 08a481e205c8578ebcb2d66f8b12f474c083e34bd43e0c1ec72bf8afedb87842 615768 bind9-dbgsym_9.20.30-1~deb13u1_i386.deb 58dce6c8c5771bdf2efd2fb684410f3c8e9e6650afbc53a9f83bffd938559f6e 298916 bind9-dev_9.20.30-1~deb13u1_i386.deb 2d222686521116be6b5f4a284fe9f47520311562cc0555dca7c1f8016f89b64b 398676 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_i386.deb 4a7b6082be63166ca579869f444a18f6265b103678e3097eae00c5f00d87ab5c 171520 bind9-dnsutils_9.20.30-1~deb13u1_i386.deb fd42e6a1ca95fc0d02c80d842179f687739fa5bacbbdff23f32fc60feb34dc7c 95308 bind9-host-dbgsym_9.20.30-1~deb13u1_i386.deb 6e997fb432b1c995ad7e731dbce321d4db564efe73623e489d0edc9dbd76eb63 58432 bind9-host_9.20.30-1~deb13u1_i386.deb 403b34ebf2602069e0d5978d4ad8f22f47e05ffdb5c882997e4811150d2eb972 3574440 bind9-libs-dbgsym_9.20.30-1~deb13u1_i386.deb 1654a39db210ed5290966ae1bcb67b22c0a59678395c2d4d474f7d69190694de 1331816 bind9-libs_9.20.30-1~deb13u1_i386.deb e221a0b187273e361aa9a3af55a914374f6a2559e718c5981cd57c633ecffb42 457316 bind9-utils-dbgsym_9.20.30-1~deb13u1_i386.deb 969f716b55d50811371310c881cd73339c08255640504b286b06b59a58920c1c 187680 bind9-utils_9.20.30-1~deb13u1_i386.deb 5af88af27cc8c3553f296a6f90f0ad19842ab4bb9dc6ebff8b5b466e8515d99a 10515 bind9_9.20.30-1~deb13u1_i386-buildd.buildinfo e5ee1408fb052ca71be8c5bff0e2bde65dc6f413890e1e71f2956f188cbac185 271368 bind9_9.20.30-1~deb13u1_i386.deb Files: 7817a2a705429dc4262b7480e63f715d 615768 debug optional bind9-dbgsym_9.20.30-1~deb13u1_i386.deb 52293c29d790637c072b0bc6b7b8a125 298916 devel optional bind9-dev_9.20.30-1~deb13u1_i386.deb 6687226fbbaf1422ca53deca9b0ad6a6 398676 debug optional bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_i386.deb 98068f2e6c466c1132bf3981dfb5a6ed 171520 net standard bind9-dnsutils_9.20.30-1~deb13u1_i386.deb b67bda56b572b0edeb2f97964ff5c9e2 95308 debug optional bind9-host-dbgsym_9.20.30-1~deb13u1_i386.deb f1ce7e9a7646299f24377ee7cd7aa9c0 58432 net standard bind9-host_9.20.30-1~deb13u1_i386.deb 436313fdd6e44c294b6c4f61ef073034 3574440 debug optional bind9-libs-dbgsym_9.20.30-1~deb13u1_i386.deb 10e2c78c223a74070f4e949ed5474278 1331816 libs standard bind9-libs_9.20.30-1~deb13u1_i386.deb ebc54b7e9357eec127f62de145ec0c89 457316 debug optional bind9-utils-dbgsym_9.20.30-1~deb13u1_i386.deb 70ff0609e894d84ea6a5835b310dcb2d 187680 net optional bind9-utils_9.20.30-1~deb13u1_i386.deb 9a1f63f6559176179d72fcbc92cd4fd7 10515 net optional bind9_9.20.30-1~deb13u1_i386-buildd.buildinfo 35809608a129a8c21fa563d1957fb58e 271368 net optional bind9_9.20.30-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmrXrQYACgkQf2INRiCd aWKY2Q//ccjKImWJDdA2P/fU6zsLcHTUrB4rzqtFTytLP6sCfvS1lPoxrM1hD8+p Zyot3kGWc896PHGIt2NTPvNn07IO+bqgoPupvx5L7o05eiDy7gQ9siyWaZoHCqCD Rd31yPIRjE1mCE2rNJ0sE3EYfW3tTccwChxYT0f6c3TioD7/kzme0hPlrQ6WeQUe mwL2YgBNyWUhDTJ1CfEZnJKnveddBcf4pu6K7VD1tCq1nc21SEoySDPW23eJAC4O Hg6DTl+kj4uw5MgycBqsbVi/l1oNiIsco1OJA+On+VnnDX0khkawxRRSYGs3ZCrr kHUuQOmtrLntPufjZvXHEyDF04qc2c3SLdLZn1dt7AKhzoK/jz3BOM5O2Pfr59PL FEf4y0yb1jlbMGoM2InHulFt5keVhkpyYbUaGokoM+HUSZfUPjr2L4TmpmuEcdcu a1uKRJkMBRH82ipfRTps2GtkpL4mM+ln6ysqT+UYgnGO/Ym8OQD/L0LKwCRPD40L cgd4NECdy4e4yMTWrBsJ1AVWPXIZUm6EzyEw6xybjkfNGd+qP6rwi8OE1R7NwJ1N qV59+663sF//7AKxgJMdzCgIyec9xi/JGpoSHKW2IrPBOFuhmqcIl8ViLlZVhFhN tqOQ9GFSFelSropwO4P9f9ikFJNf8QkUT4/RZAVME0La6bOtXq8= =QdLO -----END PGP SIGNATURE-----