-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 17:22:56 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: riscv64 Version: 1:9.20.30-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.20.30-1~deb13u1) trixie-security; urgency=high . * New upstream version 9.20.30 + [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS messages. + [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from terminating named. + [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME minimization. + [CVE-2026-97313]: Fix a crash when resuming from a query initiated by RPZ. Checksums-Sha1: a6c081a1bc3c72f0dc15fb27f25cc1f77629ec6a 674992 bind9-dbgsym_9.20.30-1~deb13u1_riscv64.deb 1bdbff76f6d8ffb16747610082fedead824ca3d8 298912 bind9-dev_9.20.30-1~deb13u1_riscv64.deb 6a8a80c9eea77229727ce41e2152cc2f5929b286 429920 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_riscv64.deb 700d6cc9307279799ca93548023e5047e76d6bac 168544 bind9-dnsutils_9.20.30-1~deb13u1_riscv64.deb b355f3f463920a5c6ab99788409dcf424fa0dcd3 104244 bind9-host-dbgsym_9.20.30-1~deb13u1_riscv64.deb 5121a880d092258902bcda7ffc92b975a600947c 57156 bind9-host_9.20.30-1~deb13u1_riscv64.deb c77bdf1e9c88686fc4bd094a5c2c01beb3ea7e58 4039992 bind9-libs-dbgsym_9.20.30-1~deb13u1_riscv64.deb ad219e7afa32cf86a80e57487bd9aa96639f5fe8 1273688 bind9-libs_9.20.30-1~deb13u1_riscv64.deb 4b9a3e58a4a52a65feed874da08b6905002f70de 499948 bind9-utils-dbgsym_9.20.30-1~deb13u1_riscv64.deb 298eb191b265507d07d8ac94c1e903bc8ff1f74e 183152 bind9-utils_9.20.30-1~deb13u1_riscv64.deb a8b7e6c6ae30fb925e7988ebab665c22bda86569 10642 bind9_9.20.30-1~deb13u1_riscv64-buildd.buildinfo ff9d0b6d9b6a79d7b74516f79dec12cecc313d53 254776 bind9_9.20.30-1~deb13u1_riscv64.deb Checksums-Sha256: 26de4b65491bf285b2ddb80e3bcf3296a0a796d0ffb195fb034a35410acf312a 674992 bind9-dbgsym_9.20.30-1~deb13u1_riscv64.deb 847be9b292fda02cc12c9e2abf1f4619af90246447de74de346f8aca9183b033 298912 bind9-dev_9.20.30-1~deb13u1_riscv64.deb 15e1b2ade0fad6b35dd6800d85eb87cdad66e7f3d7792314d5d29faac25b3b31 429920 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_riscv64.deb bd7a8c7a12547231bac3e96ee3cf4f7135c16f6786458a7d4237eceac4afecae 168544 bind9-dnsutils_9.20.30-1~deb13u1_riscv64.deb 6cf26b7ffaea1be71695b29cb7603866d01d8f99030e61b1aa1101e741a4ed09 104244 bind9-host-dbgsym_9.20.30-1~deb13u1_riscv64.deb d40127db9e35bbb2d1fc4de6282d557a1206a6c8b3476c2cf4c6379234a5f9ba 57156 bind9-host_9.20.30-1~deb13u1_riscv64.deb 66a3d8842302e99fdf374e428c19581263f90268ffb0ec45f5515047bdcf5f27 4039992 bind9-libs-dbgsym_9.20.30-1~deb13u1_riscv64.deb cf99d9aa9182e3bf483bc6beea8759a6c417165737443890732fdcbe28531ff0 1273688 bind9-libs_9.20.30-1~deb13u1_riscv64.deb 7fbf48826a60346c6ab1740a36d073a036c3819c915a3126308edae824e8b58d 499948 bind9-utils-dbgsym_9.20.30-1~deb13u1_riscv64.deb fd4fcc09ebb41ed7863fad42bb990dd98720c5720009cef11165eea6f4ac51b6 183152 bind9-utils_9.20.30-1~deb13u1_riscv64.deb a8418a025057cab500c45734ee1fa681bd85ceeddd233cb1261ffd7f2b19975d 10642 bind9_9.20.30-1~deb13u1_riscv64-buildd.buildinfo 121bf3f567787e3b3d663ed8b9c2661083b745e6a90ba38708d2cd2b27453ea6 254776 bind9_9.20.30-1~deb13u1_riscv64.deb Files: cfc1e11611ba2461a30751cce505a5ff 674992 debug optional bind9-dbgsym_9.20.30-1~deb13u1_riscv64.deb 4dce7756ecefcd3af1fea753f042b8b8 298912 devel optional bind9-dev_9.20.30-1~deb13u1_riscv64.deb 898fa08484b49cdc3895bef06b793644 429920 debug optional bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_riscv64.deb 15fde24cd6a6d6702c5045e7a58d0386 168544 net standard bind9-dnsutils_9.20.30-1~deb13u1_riscv64.deb cdecce474093c983d6d87108f3406dee 104244 debug optional bind9-host-dbgsym_9.20.30-1~deb13u1_riscv64.deb 55b4428c137bfd0e6f63d4583f0b27eb 57156 net standard bind9-host_9.20.30-1~deb13u1_riscv64.deb 9b99a9501a46c5194aa1920485bacaf5 4039992 debug optional bind9-libs-dbgsym_9.20.30-1~deb13u1_riscv64.deb b04189117b030db5773f4b9a0a833131 1273688 libs standard bind9-libs_9.20.30-1~deb13u1_riscv64.deb b21026a70c674daf43025ed8e60e8aff 499948 debug optional bind9-utils-dbgsym_9.20.30-1~deb13u1_riscv64.deb deb490e5fa22cd8bd6f578134a5e1cc6 183152 net optional bind9-utils_9.20.30-1~deb13u1_riscv64.deb f7010d2c6098d425ed6a3d5304080730 10642 net optional bind9_9.20.30-1~deb13u1_riscv64-buildd.buildinfo 2ebe7007a043f060236aa396d42c9890 254776 net optional bind9_9.20.30-1~deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEckWcgW/UYsXlW9tIY8xd4TxhvSAFAmrXslIACgkQY8xd4Txh vSC4Xw/+IfoDcWJ8Kh/mtHebZUHu30Go4mVhO4r/uK7LX698EzzJp/GnmVZQsdUQ WmKtjFqnoE0bI4byrIr0kw35YQckYAM8DZBmFoQMJX1xaU3d+bwonSBoylZ3zuRZ EWqgO1XcTiwuiJmqXt1EBxEVAblOfRhtuvQmBeYwBWr7Vm701CPeJUU6pbvKiqG4 Tv0NLWG7MvSF5qNwYJT6SbvdB/UlBertir6tiZ0GUtx+dz6C7dCNLfp0fNdoz7eZ NfZcOw9mnKZGhvc90LMrJWd6mKpylaIxx9p8Fu7967qXa/acqZx6TQjZArrxgFKP uBOVc8m3n2eNFj+yeUpqlUlJXjQSDXMlrj1s4DANmkseGBVJGNiEBn3GHQNoPc9S 9zrHqCIv7OaXzKJQL2QhvJ+rvodmEtgKmR09U1MwLrmWHMOnlSDhogUzrv2qoDPG IgZF7yotFRc+6JNT/9xco3qdrGROUgK4C+Rk/ioXjdO3p0EP9OXlf1RNJd5dKtrk 1unYyaUZp5T7dnMwYQet0E5NVL0+HF9Wl8KWsPA/u6jTgkMnFn9K1dJaEJZGMJJa jl7ccncVHM1gOCv0RA57GoavHJAYBpF2SOCFLR8ZkmRgTqCt97lvndSSZiQW+kJT ECPk6uHoZ14ihVUZcLrFm+mK9RMNShEwdsh/9xYjzMC1vf5oUl4= =STFg -----END PGP SIGNATURE-----