-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 12:21:44 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.20.23-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.23-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.23
    + [CVE-2026-3592]: Limit resolver server list size.
    + [CVE-2026-3039]: Fix GSS-API resource leak.
    + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN
      views.
    + [CVE-2026-5950]: Avoid unbounded recursion loop.
    + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses
      are received under load.
    + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when
      processing HTTP/2 SETTINGS frames.
Checksums-Sha1:
 973639a602b70e1c7796015ff22cb7885e0eeb24 690908 bind9-dbgsym_9.20.23-1~deb13u1_amd64.deb
 70d0cb63f83351b4c65631ce5320fdc1f17d3b3d 294760 bind9-dev_9.20.23-1~deb13u1_amd64.deb
 fad3e8d64f09d848abe8a35f2093e6d615c902d8 435608 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 d1460dce2b30477fa20cc6519488f756845f7191 165864 bind9-dnsutils_9.20.23-1~deb13u1_amd64.deb
 625dbdaac2efabde49014c6ed1364b34e4f0e82f 107132 bind9-host-dbgsym_9.20.23-1~deb13u1_amd64.deb
 2bd177da85608c5a9b791896796a45a171bc7880 55992 bind9-host_9.20.23-1~deb13u1_amd64.deb
 5b246b5e12647e754293329d1c31a936765d9f09 4206268 bind9-libs-dbgsym_9.20.23-1~deb13u1_amd64.deb
 229a7e79ddb341b18b82f9a84c971730df1698b1 1242132 bind9-libs_9.20.23-1~deb13u1_amd64.deb
 d8ef934f975ff7a6995da6b6bd5ea2a61aa9d7a9 496264 bind9-utils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 3379b9df59b61e91705cff7b680a46a195838d11 185168 bind9-utils_9.20.23-1~deb13u1_amd64.deb
 d57e3a843a503a270195318d407d998fcaffee07 10477 bind9_9.20.23-1~deb13u1_amd64-buildd.buildinfo
 6aae375be775f30536479f7a72557ebe4780b486 255144 bind9_9.20.23-1~deb13u1_amd64.deb
Checksums-Sha256:
 fca3012b96d0b0fb76b23ef25d8939f99583dfb8278346b7dbaddc7553177352 690908 bind9-dbgsym_9.20.23-1~deb13u1_amd64.deb
 b6ddd5ce452d6101d0d3e250bda528f06f016f527bf4d16e486c246792f798aa 294760 bind9-dev_9.20.23-1~deb13u1_amd64.deb
 0212633e62d9f66a9fa35be6e909881bf4fe13039235bfc05036905804e49549 435608 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 75f3120f4811354e72481033652787867f9e2bbd04e19a4fae885e8ad97ded63 165864 bind9-dnsutils_9.20.23-1~deb13u1_amd64.deb
 17c06694c39a5d3a0fa653d169d9e070034f3455f6b7f32a9d96bb5e8d801daa 107132 bind9-host-dbgsym_9.20.23-1~deb13u1_amd64.deb
 ecf2910833b1c369bbc71039f7eb16f34565ce9d60015aeeafd2ff6872c18860 55992 bind9-host_9.20.23-1~deb13u1_amd64.deb
 1b21bfba1ffb4aeee75ba848c4df84b8cd215f1f20daa9a6f221ef530298b52a 4206268 bind9-libs-dbgsym_9.20.23-1~deb13u1_amd64.deb
 fe98c3e3591da8593cd2c8ab585ad9100b35e780a4b768f1b8180b547a1b4035 1242132 bind9-libs_9.20.23-1~deb13u1_amd64.deb
 1d6ec9504b8587ba2118012200f8010efa7f4f4663500b2d21a697e85477e836 496264 bind9-utils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 a86b7f22247f592fdff7b1d10c83e6fa3aa19b15faabffdb8eccac86d8beeec9 185168 bind9-utils_9.20.23-1~deb13u1_amd64.deb
 307a638857b8d8ddb0b47b29825170d4e04895917d8e6b84f2bc8d40478bf5bd 10477 bind9_9.20.23-1~deb13u1_amd64-buildd.buildinfo
 cef77df0a8bc5a82b35b3fb369232b1f2a703c9b9ce82e57fbd6d2d14e773d20 255144 bind9_9.20.23-1~deb13u1_amd64.deb
Files:
 824d1a9cfd7177dffef3f0bda225de45 690908 debug optional bind9-dbgsym_9.20.23-1~deb13u1_amd64.deb
 d33f37a7d8b3d1faa6c5e1a95920c715 294760 devel optional bind9-dev_9.20.23-1~deb13u1_amd64.deb
 8205b143f018b3124da2f1d942670b35 435608 debug optional bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 f0e811fba3162e34209ef7ff8fa4737b 165864 net standard bind9-dnsutils_9.20.23-1~deb13u1_amd64.deb
 88b39e1856ab7e3c6f66fee0c1766a30 107132 debug optional bind9-host-dbgsym_9.20.23-1~deb13u1_amd64.deb
 e3427b6d24fd0a06a42203eb32acb307 55992 net standard bind9-host_9.20.23-1~deb13u1_amd64.deb
 2bc079b6d35310e53c98c4a52479a55c 4206268 debug optional bind9-libs-dbgsym_9.20.23-1~deb13u1_amd64.deb
 7bcd6321121937e41d1f3ed2b037d6ae 1242132 libs standard bind9-libs_9.20.23-1~deb13u1_amd64.deb
 2d1dd26cb70d892d75e4f5d3d60c7c3f 496264 debug optional bind9-utils-dbgsym_9.20.23-1~deb13u1_amd64.deb
 c88a3134602d3a2c7ad907ae875098f7 185168 net optional bind9-utils_9.20.23-1~deb13u1_amd64.deb
 b1a611c4bf82adaa99e77e4456f12ca2 10477 net optional bind9_9.20.23-1~deb13u1_amd64-buildd.buildinfo
 11e9da2f14b8bc792ba57bb463a9eaf0 255144 net optional bind9_9.20.23-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=pwCC
-----END PGP SIGNATURE-----