-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 17:22:56 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: arm64 Version: 1:9.20.30-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.20.30-1~deb13u1) trixie-security; urgency=high . * New upstream version 9.20.30 + [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS messages. + [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from terminating named. + [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME minimization. + [CVE-2026-97313]: Fix a crash when resuming from a query initiated by RPZ. Checksums-Sha1: b569ceae5245c49cffb4623469c44ea0eaa80674 694584 bind9-dbgsym_9.20.30-1~deb13u1_arm64.deb d3706f41f59aa0fb4eb9fba4ff6daf6da1ab26be 298912 bind9-dev_9.20.30-1~deb13u1_arm64.deb 2679193b2734d805fc38cd9f976df522392a62da 441040 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_arm64.deb bfc54b9547aa83a6c482ac87fb9670390223bc44 159352 bind9-dnsutils_9.20.30-1~deb13u1_arm64.deb 6ff677d0bfb1a1330617fc7ec15cb54e2e42b7ef 106052 bind9-host-dbgsym_9.20.30-1~deb13u1_arm64.deb d838cb0f922088144dfeb21219fa2e5f5c8c2b75 53912 bind9-host_9.20.30-1~deb13u1_arm64.deb c044b9493acd87f7a3a3542f9ced69c4d9e576a8 4179120 bind9-libs-dbgsym_9.20.30-1~deb13u1_arm64.deb f5b6df013af85e9bd35a74b6490d920dc5f9bc71 1112404 bind9-libs_9.20.30-1~deb13u1_arm64.deb bf235e349fc1a90ac75130f70a781bc996c38001 511532 bind9-utils-dbgsym_9.20.30-1~deb13u1_arm64.deb f1a3ef893f22b2eb23e1a8d9d71bee1b18d11548 176588 bind9-utils_9.20.30-1~deb13u1_arm64.deb fafca34730c002b4f59cb5a993590428b99a7890 10631 bind9_9.20.30-1~deb13u1_arm64-buildd.buildinfo c3d6057449e19a3a1172a956b4841fe11bec9bd1 239832 bind9_9.20.30-1~deb13u1_arm64.deb Checksums-Sha256: 3e26f2a20353907ec928e3359d287274d32a86c92a84d9b2da0a4c6ae6328124 694584 bind9-dbgsym_9.20.30-1~deb13u1_arm64.deb b7d6727a6bf847e6281413bcdad31683c8dbee0f71ea5c2cf943b13c18c57878 298912 bind9-dev_9.20.30-1~deb13u1_arm64.deb 5481b125f069c38df62254719171cc79e57c14f429e7c3ca4ac9d270016f6d78 441040 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_arm64.deb 3e1973316c59913ae789cbeaa63195f22a6530a2c4bd8cdfde46face34ea1c0f 159352 bind9-dnsutils_9.20.30-1~deb13u1_arm64.deb a48e7a9b6dd1e9f055d4bc2870af787118c207dadcbf9fe04c5a4a867a9dcfaf 106052 bind9-host-dbgsym_9.20.30-1~deb13u1_arm64.deb dc250b4ef29dae91d95daf2a595784433b50687df5dd9cc47ce056468c82508c 53912 bind9-host_9.20.30-1~deb13u1_arm64.deb 2859b505e0ff8beb51238113a7108c1bc17c614ad75cebc5d8c8bd1cdc636252 4179120 bind9-libs-dbgsym_9.20.30-1~deb13u1_arm64.deb fba5eb05302863072b115509bc35499f1264764317a2f15c7f0255f83b1b20e8 1112404 bind9-libs_9.20.30-1~deb13u1_arm64.deb 4a90a79e601a7e48ab1be9770bc2b80b403065a76359b5f22cf555e47035eb7a 511532 bind9-utils-dbgsym_9.20.30-1~deb13u1_arm64.deb 594455028a828f4688d33a746e90d2cadb4a6f58de8a17c872802580f759eaf6 176588 bind9-utils_9.20.30-1~deb13u1_arm64.deb 74b8aadb8b854fa026e3cf6cbcbcecd6e3880cf38eacddc89eaa5ecc43dfa295 10631 bind9_9.20.30-1~deb13u1_arm64-buildd.buildinfo 247d43d20241aff7e0b8b66a76c5221bdd9f892d064f5de048b0ac8e4e0476e5 239832 bind9_9.20.30-1~deb13u1_arm64.deb Files: 453ec98c0768a06a2e80efbc4e75d0ab 694584 debug optional bind9-dbgsym_9.20.30-1~deb13u1_arm64.deb e43d7fb1fb41f45ef8470cbcb6a46d28 298912 devel optional bind9-dev_9.20.30-1~deb13u1_arm64.deb 63109c59494ae898de7bc5b63fb01a85 441040 debug optional bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_arm64.deb bd53707b0a43be71b23df79835304476 159352 net standard bind9-dnsutils_9.20.30-1~deb13u1_arm64.deb b5455f0bd5e38f0fc77b8371025a9c54 106052 debug optional bind9-host-dbgsym_9.20.30-1~deb13u1_arm64.deb 3b116e308a8a06a1f47356defb0dcdf4 53912 net standard bind9-host_9.20.30-1~deb13u1_arm64.deb 95293f10b2f31c7b7d5b3838e2e63cbb 4179120 debug optional bind9-libs-dbgsym_9.20.30-1~deb13u1_arm64.deb 72ae8fca09bcdd37077f7174e77b75bb 1112404 libs standard bind9-libs_9.20.30-1~deb13u1_arm64.deb 167eef054cc09ccf6b702d7f42e53d2d 511532 debug optional bind9-utils-dbgsym_9.20.30-1~deb13u1_arm64.deb 885927983a4f92d6b6b8c39142264c61 176588 net optional bind9-utils_9.20.30-1~deb13u1_arm64.deb 58a684dc22e03bba9bcf0c5c05e3ea17 10631 net optional bind9_9.20.30-1~deb13u1_arm64-buildd.buildinfo 49f0ae82192588c901b25bc97300a588 239832 net optional bind9_9.20.30-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmrXrBoACgkQPMAxAOQQ pztRAA//Tu6w66iapjWdmowSrdRxUXlJfGgsN3eJgrVhdpcojOu4tCsEpiaqj2VY qLfsFM1wa9IbdLAXQPmwtUy4adS338fO9ZBH1HV3lBoz0xLq8nYEFn73VTLmz+Jt JLEqZ2EvgZjZ9QkDzH/den7qlExfncZiSK/4g5/gzXNxHSDjwIVIP4b1KigzL/Bg eE/W9DtEUrRxtS/qqvEdLxRrFDJIqoKOIEfpMX9SQbYQ4QO8yHPKeGuwmlu18OTM 6QI4Gp1K7/mRqI+b8vTgyGIG9pEV8NsZXgwZwiMifX2dtwCP6w9sB251qlvtdl0E V54nEV1JbPJN87nFBxpmjvQs2YLSlM/ptWBcgE4GGSPyMvsSH7ZnqwuFVr3hV1jh 75UhA0Vvd7J1MSulviYib7jl3mpyTLxapjz/l93XaQWQJI9J3rdzLHQEe0u29XMN EVpU+VH6OrfAk1V07a4Gu7K+opUSrIkRrQesgWpj4XpIy1LadYaICGakk11TQHtm 70tBEF1XVawk31hSZ0FC5MaoanA1EvVfqmrnY0nx0L29R/U5jvI9sn4/NJMYXomz 74v9YF3AamhUElEjHVd7gk8yvTXh+7rpY25ZumUNf37U2OB0BOKzcAxXZZ7FFrzF KPlK5g1co5bl6ghSnzmm8EzQfeTkmsmVxmxdDqhnTvK6KtQQNfg= =KZ+5 -----END PGP SIGNATURE-----