-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 20 Oct 2026 17:16:11 +0200
Source: bind9
Architecture: source
Version: 1:9.20.30-1
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
bind9 (1:9.20.30-1) unstable; urgency=medium
.
* d/README.Debian: Remove obsolete note about DNSSEC validation
* New upstream version 9.20.30
+ [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS
messages.
+ [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from
terminating named.
+ [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME
minimization.
+ [CVE-2026-97313]: Fix a crash when resuming from a query initiated by
RPZ.
Checksums-Sha1:
fff806ce1bbbd40be6c1ed14efbaf9d453c1fe9e 3015 bind9_9.20.30-1.dsc
ac1636ef1540db3d2dfa37844da843e239806d7d 6004232 bind9_9.20.30.orig.tar.xz
5ab0c25f2ee89578f8209b103f4db92509c95930 62748 bind9_9.20.30-1.debian.tar.xz
379d8e400d2c5b45caba5066176c14b247aa2e30 14544 bind9_9.20.30-1_amd64.buildinfo
Checksums-Sha256:
d8d3ca0c9e892baeb8f1dfc19a09052e1697c10895ca698028a37ce637589d42 3015 bind9_9.20.30-1.dsc
9e1443a40a72a30272cbc3196d020a6b2e26937111c83e59e101e82e1e3b4fef 6004232 bind9_9.20.30.orig.tar.xz
25677541a8cc694e5036ef411e47b62d8c5e5471e64329eee32da15501723c94 62748 bind9_9.20.30-1.debian.tar.xz
fbf5634ac7a8c4e30101f5395a8a4c1a1b84d74caa0754699bf926327494e83e 14544 bind9_9.20.30-1_amd64.buildinfo
Files:
f777acd3b66aca393bd7be3fd4424058 3015 net optional bind9_9.20.30-1.dsc
c94a2934cd033905143aa0c26acad79a 6004232 net optional bind9_9.20.30.orig.tar.xz
bded0186f892e034936fa8a74eabcba6 62748 net optional bind9_9.20.30-1.debian.tar.xz
3643a58ca5731accd0bd59fa3270a619 14544 net optional bind9_9.20.30-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmrZwSlfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz
NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u
WcI5cw/+MgOWzB2ZvKc+TOnG5IujZxGdQ+7kgZwfvunM/Mfh+9u1AQYJJqbbK4+N
oFZ91bphxp6NatNrygoYmZKPOXnRWLEP/uz8lfOO0svWjYlxbXBra6Mzp95tVfTI
apIAUO0xsKgJsHjbJXC4qf3jV7Y0QX2F6vPRAs4ixbE3ZFbRbm/IhPBbGUx15vsK
Nb8l7w5ul7LuIh33eQIGtMwW0OBgi645yVzia73WTiY4tbExJzKtJzsNXCE3AbHj
nZeeMPm3lybhILtxKO/DJoiZak3OfqIvbTNHY/ypBBSIN/Ybj/L9xTPwdwgWjtcT
uQjhCtf8nyozcp494jxP1DwiYCVzHhNqI/PvxxfVWFzJZgXKX5rFogXhg+sQ5JhS
Qli4D3aaT32lmUkgIOujb6vE2RfXjrVz5LIMm4X9U+bZP3uCNmd00+HCuQDfaKE3
qhJa1MeGKMzsBizai7LovnLta2hBk7jp0rlB0lAV4QLRxoKZUVO4c0O/+AMfZSbj
HHWJkumyMebhXXgFQj8B0ZcZ0aL8XAfD6Lgk7Wp91/CdRBFlWDWp0rLGhVsejKTV
q02WcGuoAqYZY+3TF8SzDk5GaF3ERa61/L3v0muGICiJ3miZVyvuheavrROq8iBL
8DEgpeYneSjbeJmgfzJcqGRgeXSBxdu9XsKJVaH50kA4TKlcTTY=
=KJ5F
-----END PGP SIGNATURE-----
