-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 12:21:44 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: arm64
Version: 1:9.20.23-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.23-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.23
    + [CVE-2026-3592]: Limit resolver server list size.
    + [CVE-2026-3039]: Fix GSS-API resource leak.
    + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN
      views.
    + [CVE-2026-5950]: Avoid unbounded recursion loop.
    + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses
      are received under load.
    + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when
      processing HTTP/2 SETTINGS frames.
Checksums-Sha1:
 72752b43ebe90f1aa3e69fb967f44a86782de5de 687888 bind9-dbgsym_9.20.23-1~deb13u1_arm64.deb
 8c836c77904bbd1b8d48587c4d310c815f89013c 294764 bind9-dev_9.20.23-1~deb13u1_arm64.deb
 8e2c592f40b22435ddeca0044d3e403d5f5ac28c 433872 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 3fafe1e8d6e727ab9e8d4e78e29d8aeaf7a4461a 158748 bind9-dnsutils_9.20.23-1~deb13u1_arm64.deb
 2f31413621863b76ffad0b8469578511a15b197c 104720 bind9-host-dbgsym_9.20.23-1~deb13u1_arm64.deb
 47b081398af1f4b0d98423038a5fd708551ea8ee 53204 bind9-host_9.20.23-1~deb13u1_arm64.deb
 a50cbed0dc90f4ed74e672f36427a98b48c3d6b4 4151172 bind9-libs-dbgsym_9.20.23-1~deb13u1_arm64.deb
 64adbf30ca017b8d30b836ab8f8d694fa8e90c4b 1106132 bind9-libs_9.20.23-1~deb13u1_arm64.deb
 38e3a8de7fbe29d381dc8a8b22712aab8dde346e 501964 bind9-utils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 dca134088fe90c823d9fab6b75cbf9a92ef72be2 174564 bind9-utils_9.20.23-1~deb13u1_arm64.deb
 fd979808134693462643ee79225f12a0090b9c8d 10464 bind9_9.20.23-1~deb13u1_arm64-buildd.buildinfo
 29f3449f8874349aba723e271e759f4308f7969d 237948 bind9_9.20.23-1~deb13u1_arm64.deb
Checksums-Sha256:
 044bc4e1401ea003067d85f13f121acc769e50a397ace61c8e5d85b298aa6df7 687888 bind9-dbgsym_9.20.23-1~deb13u1_arm64.deb
 42d326cc432b135b143c3ab04f0338ed108956cf30212eaba2211eb6026dd056 294764 bind9-dev_9.20.23-1~deb13u1_arm64.deb
 0c6a4eb60c3ae9366878d7138f2c79217f52feb17b50d0df610e3fe2e6128a85 433872 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 ff3eccc9802a53d3757b8eda99daef3d19ca6fba899064ad49a7f046cc849cf2 158748 bind9-dnsutils_9.20.23-1~deb13u1_arm64.deb
 bf4fa3639a7d63a1b8788bd317360e6b260de34ec6d165431ef22f2fda3bfe90 104720 bind9-host-dbgsym_9.20.23-1~deb13u1_arm64.deb
 163da91435cedb9d9f7bf5bce0346e7f45fc2576087a1a0ea8c34c68acf2cc08 53204 bind9-host_9.20.23-1~deb13u1_arm64.deb
 abbb2bc567f7f16b33e34c7d2a044d9625106f47794bf1d0682c832c838d68b9 4151172 bind9-libs-dbgsym_9.20.23-1~deb13u1_arm64.deb
 b7a2c7fcbb5cae658c37b42cec25ab607d451f0ee0b917b93319938d68071130 1106132 bind9-libs_9.20.23-1~deb13u1_arm64.deb
 1da5df636738c18bf5bafe22aa843e207349f6b34819c0c6b25ab34dd813be9c 501964 bind9-utils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 bd24844ab4c4198d1fff1d42b4e2cb9729c40bb28ec58444a7b11e9f74a0851d 174564 bind9-utils_9.20.23-1~deb13u1_arm64.deb
 cd76ec2dff90b926455d076bc0f06da2e9441ac24b3dd50340571bd79a6358f0 10464 bind9_9.20.23-1~deb13u1_arm64-buildd.buildinfo
 3bc146fea4ba92fcd0c2c8e99ffbbe4dcf5122d4ba4f0e1fdbe30a182c475bd8 237948 bind9_9.20.23-1~deb13u1_arm64.deb
Files:
 51588ee802a9f38fe4e814d2a93d8cdc 687888 debug optional bind9-dbgsym_9.20.23-1~deb13u1_arm64.deb
 93d085380ad0c6ee146045d2eb3798d9 294764 devel optional bind9-dev_9.20.23-1~deb13u1_arm64.deb
 cf2b4025c20f5de8595abd787a8595f1 433872 debug optional bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 02ed3b29643296f82e7848766adbc705 158748 net standard bind9-dnsutils_9.20.23-1~deb13u1_arm64.deb
 317181fc072c3fb1e865738293468756 104720 debug optional bind9-host-dbgsym_9.20.23-1~deb13u1_arm64.deb
 3e9285ed0daecd10c6af5033a87ff709 53204 net standard bind9-host_9.20.23-1~deb13u1_arm64.deb
 e4751e7a5f741ea617aa17719adc51eb 4151172 debug optional bind9-libs-dbgsym_9.20.23-1~deb13u1_arm64.deb
 7ed7d42d7a1ac631b65861c21d74e483 1106132 libs standard bind9-libs_9.20.23-1~deb13u1_arm64.deb
 fe923c094aab196d438560660ab57ffb 501964 debug optional bind9-utils-dbgsym_9.20.23-1~deb13u1_arm64.deb
 ef6a4e0ab59ca5241f471960d75f2286 174564 net optional bind9-utils_9.20.23-1~deb13u1_arm64.deb
 89aa5394be8ba5dd3eac5935d23867e7 10464 net optional bind9_9.20.23-1~deb13u1_arm64-buildd.buildinfo
 de3296c00ec9ca3ce972192b8d39b766 237948 net optional bind9_9.20.23-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=CHRn
-----END PGP SIGNATURE-----