-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 12:21:44 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: armhf Version: 1:9.20.23-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.20.23-1~deb13u1) trixie-security; urgency=high . * New upstream version 9.20.23 + [CVE-2026-3592]: Limit resolver server list size. + [CVE-2026-3039]: Fix GSS-API resource leak. + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN views. + [CVE-2026-5950]: Avoid unbounded recursion loop. + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses are received under load. + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2 SETTINGS frames. Checksums-Sha1: 90e5c9151e00505eb567fc8dd60c4169f7d50b6b 650668 bind9-dbgsym_9.20.23-1~deb13u1_armhf.deb 6022ddbadd7a4911e123ca790866decfe3d83528 294772 bind9-dev_9.20.23-1~deb13u1_armhf.deb b08bc243cf80dc5fda02b3b9fc28849039736f93 396204 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armhf.deb 92de33ccfa73fe68c595c14dcb2fde87ffd4921d 157036 bind9-dnsutils_9.20.23-1~deb13u1_armhf.deb 334984d6c5bfb502fa11e128846250b40e90f9d8 103704 bind9-host-dbgsym_9.20.23-1~deb13u1_armhf.deb c02bed8607870ae1e6e72ffd30dbc6a5ed0e3faf 52100 bind9-host_9.20.23-1~deb13u1_armhf.deb 31fab3480290a040639c4bd4eeae13347c2a2e7b 4129064 bind9-libs-dbgsym_9.20.23-1~deb13u1_armhf.deb 2d41abd1c6683af41b9604bc31588d2286a9351d 1107184 bind9-libs_9.20.23-1~deb13u1_armhf.deb 9b23435d909414b287abe9444dbb0f8804c9b666 380816 bind9-utils-dbgsym_9.20.23-1~deb13u1_armhf.deb 65c7513065972f0a78f7c676e86cf45e9275f03d 175348 bind9-utils_9.20.23-1~deb13u1_armhf.deb 3329716e1eb51bfb165195a05c7ffc3b9ceaa1cc 10343 bind9_9.20.23-1~deb13u1_armhf-buildd.buildinfo d33caa0e0e0bac69f93c53572b831959b0191c55 242828 bind9_9.20.23-1~deb13u1_armhf.deb Checksums-Sha256: 84d743ba2c1ce1c4486b25b0e2e1a00f8c03dd3d7dc73f55fae3fc92097d2702 650668 bind9-dbgsym_9.20.23-1~deb13u1_armhf.deb ec6a3c4d052abd6168a5641baa0786ceb61b3aeed5f132492c1572ac0b824bd4 294772 bind9-dev_9.20.23-1~deb13u1_armhf.deb e12b3b44dee34c2d4532defb5fdb303e67c7a2eea66606572c9bf17067ebba0c 396204 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armhf.deb 7fc40138d086d35b2c5154e5e18ee5fa2c934383189f7ce4d70d2f551f747ebe 157036 bind9-dnsutils_9.20.23-1~deb13u1_armhf.deb 6a8b029dd02a659d2ee9d298695ab65af43a7712c23c8ef422815973ebffe98b 103704 bind9-host-dbgsym_9.20.23-1~deb13u1_armhf.deb 55e6ad80d1b674a47149e582f97d7bd86cdf8476d2f48fdc0c64fddca0a1309d 52100 bind9-host_9.20.23-1~deb13u1_armhf.deb 098c17de48d047c998feb2e5bfda7dde69e1ecd29d48735d8fd28635646e758d 4129064 bind9-libs-dbgsym_9.20.23-1~deb13u1_armhf.deb 2df37fc380f9dfad73ab0b6d604ae97a0f332fc3f123c4bf897fc7f5dad05f25 1107184 bind9-libs_9.20.23-1~deb13u1_armhf.deb f05d68397c9ceebae442794a02d11247d31c34402c75a9606508cc48575d40a6 380816 bind9-utils-dbgsym_9.20.23-1~deb13u1_armhf.deb 47dd5907291e511db326c082b77c308e0a7b9a3211fef8d732f7e7b4c6f09f5d 175348 bind9-utils_9.20.23-1~deb13u1_armhf.deb 05ae94f0c751bc4ff6631a25c0d44a882282d6ab9093a658c94120411a9f89b0 10343 bind9_9.20.23-1~deb13u1_armhf-buildd.buildinfo ac3bc77fd17b85f9dd05e802b7fcabf9f8a0c686fc022573166f5e927073cc6a 242828 bind9_9.20.23-1~deb13u1_armhf.deb Files: 6c2e0e48eb0138b7a1048ab5d7e20be5 650668 debug optional bind9-dbgsym_9.20.23-1~deb13u1_armhf.deb 03659e167d2ce9c373a46eae70956e05 294772 devel optional bind9-dev_9.20.23-1~deb13u1_armhf.deb 8eed8d84edc0aad96af98647ad2f61ba 396204 debug optional bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armhf.deb 8238b4309839bb7723dbf9d0afddb5a1 157036 net standard bind9-dnsutils_9.20.23-1~deb13u1_armhf.deb 19c2b845c9a1a3e2f208b78ec1b6e7a9 103704 debug optional bind9-host-dbgsym_9.20.23-1~deb13u1_armhf.deb 206206ba0652f62058fe1111db3b14e2 52100 net standard bind9-host_9.20.23-1~deb13u1_armhf.deb fb5b452cd2a4b951af7fa9dfd54996b2 4129064 debug optional bind9-libs-dbgsym_9.20.23-1~deb13u1_armhf.deb 60b87dc84725f720bec09604d4542aa0 1107184 libs standard bind9-libs_9.20.23-1~deb13u1_armhf.deb 3fc05b89e4f8a315a83e3901b1fa268a 380816 debug optional bind9-utils-dbgsym_9.20.23-1~deb13u1_armhf.deb 7ec7bc8fae4ff7a97802c03e85a41770 175348 net optional bind9-utils_9.20.23-1~deb13u1_armhf.deb 6a31584e063a6e59d11fd517185116ca 10343 net optional bind9_9.20.23-1~deb13u1_armhf-buildd.buildinfo 7aa993f1a6d05ae0df5262232e8b823d 242828 net optional bind9_9.20.23-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmoNlNoACgkQutMAkCxK bL3JhhAAiKbMFInxj71jDB4HtY54L1/AC7uTTi4HA2ZFKFmwrHLrv4Bu0KqLCgVw r0ZLZDfVwVgg5BQhvl3wNaWGoGII+bv22vrSgknNF5HTqmOVH5VrdKpQ5a0ULtWt k52zlsFjpavrV2ZwJvbtzT7I1JOz6TDQIIqY781BJJnqY9j8LTqDWV0982Pjdps7 SgQMu5uaOuLlVNF/V8rpai8xyvKeIoJJWM3WpOohCYrWJCwGxtypZs7yfasMpLQv a+Ift2OrApENYizwhp4Xm1KcqLZX4NjqwHnDTTCryEso6qaUAhJdPLZt5kuzceDk 1YutIcXDaLXNLuQLtswCFbEpfA8teYVIoAwQKkX3t8ERQGTyfNlFJh3UXHOoc9Fk 91mLmxv2pkE+VNJBthrleacsScnualt+ZKSGhQTftA2ZEXa6rBrxeFseXp0qwyso eQ3x+Upb4LQiWqFmsTnTs7r1ss5YTDiPCBTQij0dB53PXlEPHhqcVRjYO2NtoRrM kFquXbEgjxEBuho2HwxGIG6sfo11H4q170+0vyNlwYXoXE8RTx4Jt9wza+gNdbdz h74P+IMNFUjrdVGcJBCTVQxmavVbXUpX058L20JjnvHXu5Grc/+z2OOYJv8E2au1 Ph4zQoZVQT5CUcVrnMdfwJK3Ji6FeoQK+Ex/Ee22EuRHn7fAVKI= =Brjy -----END PGP SIGNATURE-----