-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 May 2026 11:42:43 +0200
Source: bind9
Architecture: source
Version: 1:9.20.23-1
Distribution: unstable
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
bind9 (1:9.20.23-1) unstable; urgency=high
.
* New upstream version 9.20.23
+ [CVE-2026-3592]: Limit resolver server list size.
+ [CVE-2026-3039]: Fix GSS-API resource leak.
+ [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN
views.
+ [CVE-2026-5950]: Avoid unbounded recursion loop.
+ [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses
are received under load.
+ [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when
processing HTTP/2 SETTINGS frames.
Checksums-Sha1:
b4acd28e5285f781f992b2903a7022d17e37232d 3154 bind9_9.20.23-1.dsc
8689881a59644ce236cabe885c6a4c04544eac50 5837532 bind9_9.20.23.orig.tar.xz
7c309a6bdc3e90ed99e0099d3b6de1ec56451e2d 833 bind9_9.20.23.orig.tar.xz.asc
79acfa4aacb0a0672705e5e2899600bf79f45afb 62328 bind9_9.20.23-1.debian.tar.xz
547e1ccdd4e10545ef8c7c8e81506ae36495e81e 14363 bind9_9.20.23-1_amd64.buildinfo
Checksums-Sha256:
f59f1d359c797fdd462e86be3a583caf5b2d5806a70a459a8ffcbe1a9b241319 3154 bind9_9.20.23-1.dsc
5d4475aed3f9e500ef554b2b14d972bdb83d33de214a9b3be92918ea46908371 5837532 bind9_9.20.23.orig.tar.xz
db7a5ba95b4c313014b182638c050f28fc081f5bbf7ac0ba2a88306fec33ee24 833 bind9_9.20.23.orig.tar.xz.asc
2520bc28eb16be5f52f698d5d66c673c41722e70b95e80b47d997c8f1a5d94cc 62328 bind9_9.20.23-1.debian.tar.xz
5f40bab22b57f9068c7633ff724f266e9fc25a6194537d20b771a386a9e81531 14363 bind9_9.20.23-1_amd64.buildinfo
Files:
a7d8119d321cc2b2d6ac039157a345a4 3154 net optional bind9_9.20.23-1.dsc
cd1b3abd06b03b2db33a9a843e8cbab1 5837532 net optional bind9_9.20.23.orig.tar.xz
ffa65fa1cdca09f823e463deecfaeb54 833 net optional bind9_9.20.23.orig.tar.xz.asc
b2151e7efd7e50c586b62e82a141b760 62328 net optional bind9_9.20.23-1.debian.tar.xz
7879aab2d87615464b45633b0d09e193 14363 net optional bind9_9.20.23-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=2/Ls
-----END PGP SIGNATURE-----
