-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 20 Oct 2026 17:22:56 +0200
Source: bind9
Architecture: source
Version: 1:9.20.30-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
bind9 (1:9.20.30-1~deb13u1) trixie-security; urgency=high
.
* New upstream version 9.20.30
+ [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS
messages.
+ [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from
terminating named.
+ [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME
minimization.
+ [CVE-2026-97313]: Fix a crash when resuming from a query initiated by
RPZ.
Checksums-Sha1:
5df77dc26b12e7a638e236ee39eaa60bf63cc577 2953 bind9_9.20.30-1~deb13u1.dsc
ac1636ef1540db3d2dfa37844da843e239806d7d 6004232 bind9_9.20.30.orig.tar.xz
fafca79e475b20faf79974876fb70c5bbc3e7a55 62852 bind9_9.20.30-1~deb13u1.debian.tar.xz
ca928ecad11aa55849343bcc2d8fc1db90a27f29 15181 bind9_9.20.30-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
6a25251ddfc51bd8c23606615fb1e705d1c8cf5a641b8533c8035e7663c92f8e 2953 bind9_9.20.30-1~deb13u1.dsc
9e1443a40a72a30272cbc3196d020a6b2e26937111c83e59e101e82e1e3b4fef 6004232 bind9_9.20.30.orig.tar.xz
32dbfae3ec72ac2f4d64a624bfb650e3d7bd1b4e35dba67ff9d3026d252ed34d 62852 bind9_9.20.30-1~deb13u1.debian.tar.xz
a62c24f086ad36f5a4280e44cfb3f446b8200bd54d446ea60441154c6c2c289c 15181 bind9_9.20.30-1~deb13u1_amd64.buildinfo
Files:
6b3c2138127ba65d601b913db8e675c7 2953 net optional bind9_9.20.30-1~deb13u1.dsc
c94a2934cd033905143aa0c26acad79a 6004232 net optional bind9_9.20.30.orig.tar.xz
459e5419dcde2f019af264c2f57b39ba 62852 net optional bind9_9.20.30-1~deb13u1.debian.tar.xz
df29434f6d38e08fded592a4112692ca 15181 net optional bind9_9.20.30-1~deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=OBiA
-----END PGP SIGNATURE-----
