-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 12:21:44 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: armel Version: 1:9.20.23-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.20.23-1~deb13u1) trixie-security; urgency=high . * New upstream version 9.20.23 + [CVE-2026-3592]: Limit resolver server list size. + [CVE-2026-3039]: Fix GSS-API resource leak. + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN views. + [CVE-2026-5950]: Avoid unbounded recursion loop. + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses are received under load. + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2 SETTINGS frames. Checksums-Sha1: f395df7251d36a7d466c2685ae4fa52c9978f76b 644520 bind9-dbgsym_9.20.23-1~deb13u1_armel.deb c9feb3fb07212c6c374f6428a9a33b210866f5f9 294764 bind9-dev_9.20.23-1~deb13u1_armel.deb 66d65008951d1556aef3ba84ecfb73a8c5162490 392964 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armel.deb d530c9a21e6fe9551a6984c3d4c9acc028679bb6 155884 bind9-dnsutils_9.20.23-1~deb13u1_armel.deb beb4f464ad13643dba6245bd57ed65ea5e4492ad 103620 bind9-host-dbgsym_9.20.23-1~deb13u1_armel.deb ab2f11e0a58bf342d85e4c21a127082288b7fc11 52732 bind9-host_9.20.23-1~deb13u1_armel.deb 92a4a1375d8dc2f38175eab561893350a8cb76f7 4085176 bind9-libs-dbgsym_9.20.23-1~deb13u1_armel.deb fd6738ae4634dd46ee1c5f16ef526dcc1bfc227b 1078868 bind9-libs_9.20.23-1~deb13u1_armel.deb ce3f555dde08f202a4f75293baf6a7f9a6c6fbc7 376624 bind9-utils-dbgsym_9.20.23-1~deb13u1_armel.deb 9949f67db10629d6d9e8e3d2a4b7bdbcd273c38e 172540 bind9-utils_9.20.23-1~deb13u1_armel.deb 883cd237da9444c7a09e5f5b8add5728d706dca6 10329 bind9_9.20.23-1~deb13u1_armel-buildd.buildinfo aa4cc66393c5afc1bcfb0e1a678ff57a46ab2d8c 238368 bind9_9.20.23-1~deb13u1_armel.deb Checksums-Sha256: a0b66e7b7c4385ac8c3d844b77ef2d7095c894bb34c1c4f3cadb02848d7e40be 644520 bind9-dbgsym_9.20.23-1~deb13u1_armel.deb fe59741197af4b51390f3a44532e8e0b9bb890bf0e38a28b53f58b7838a7df93 294764 bind9-dev_9.20.23-1~deb13u1_armel.deb 7579e7d6ec17086e3983ddc0930d56d05aba35559b27c1791af3d3a881ae54bc 392964 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armel.deb a807020ca03795ce3229de6088906132321c2e68b4760bf248515f4a04678bf0 155884 bind9-dnsutils_9.20.23-1~deb13u1_armel.deb 41b3ef852c4ce36ab289e119c17da11260fdc67e474893d1659ee609fae701e9 103620 bind9-host-dbgsym_9.20.23-1~deb13u1_armel.deb 4974f5523f274564c1420773c4c7fa4975da0799a42fde377b0eb2f58ed87276 52732 bind9-host_9.20.23-1~deb13u1_armel.deb f1ec3ed6969425df43b0b6902b72914133092ca00433534a71d9f3e68492b4cd 4085176 bind9-libs-dbgsym_9.20.23-1~deb13u1_armel.deb 71fb88f75984ea6979531df4e897d5c3b3bddbbc588e883be8e3650babca7f63 1078868 bind9-libs_9.20.23-1~deb13u1_armel.deb f1c14353873fca3d729f1121214fa159ffcebda717a2b1456594ad0988c99032 376624 bind9-utils-dbgsym_9.20.23-1~deb13u1_armel.deb 3bd06542732cfd0d94e836adb35bd3353efda2dc121921ea31bac295372deee1 172540 bind9-utils_9.20.23-1~deb13u1_armel.deb 97b6e2eb4eb53338e82815b8627022c21e66c6accc0923f4d705e4fbb0b50698 10329 bind9_9.20.23-1~deb13u1_armel-buildd.buildinfo b300a36cecc1e86a5db60a8cc42cee8b0935947e794f21b445d777730674016e 238368 bind9_9.20.23-1~deb13u1_armel.deb Files: 434598fc0bde41d23bced14327cdd5b6 644520 debug optional bind9-dbgsym_9.20.23-1~deb13u1_armel.deb 96e62f3a1915bbac66e4b2a3a1baa266 294764 devel optional bind9-dev_9.20.23-1~deb13u1_armel.deb ba1412ab03f0a8bf3df993929a9b7034 392964 debug optional bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_armel.deb bb4c66024871bcb2bc6c5e948bcac0a1 155884 net standard bind9-dnsutils_9.20.23-1~deb13u1_armel.deb fe93b7fa43a2817c72af64af32f0a714 103620 debug optional bind9-host-dbgsym_9.20.23-1~deb13u1_armel.deb e552e45c5da99b8892f30e4c6669c50c 52732 net standard bind9-host_9.20.23-1~deb13u1_armel.deb 793b5e560a27f9299f81de8283dd3b60 4085176 debug optional bind9-libs-dbgsym_9.20.23-1~deb13u1_armel.deb 81b4d31aced78328f3b837d85ceb43e3 1078868 libs standard bind9-libs_9.20.23-1~deb13u1_armel.deb 3d0030017eccc5758b2f5b7fe84a326f 376624 debug optional bind9-utils-dbgsym_9.20.23-1~deb13u1_armel.deb b622369c73a2ceba3cda48a201202c46 172540 net optional bind9-utils_9.20.23-1~deb13u1_armel.deb 864c47db4aece508dbbf55f2846aea1e 10329 net optional bind9_9.20.23-1~deb13u1_armel-buildd.buildinfo 8c031dea0e29e35def57b06a0049adb9 238368 net optional bind9_9.20.23-1~deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmoNlLYACgkQOQKMdMnE H5NWRw/8CNziblJEWwANpLBBzvE65t3qX4A6TqcQDfAL2z1EfbufIYcbIBqoHEZV +63o1sXS2q8XuFVen/E5rTyiZdkKCQSQNiW1MBW05X1E7DMu7WosvJQU9RJ2CG90 S6YpXP6Ta+O+uyPa3Gw4l/krk2IgxXRBiJrDGPFNdS+/wk16/SDSCDYcnn19vhG6 iJG61g8puqUgC7pN6az9RZaXNHh8AFWzimGdgabNAvC/SgttB9nYgK3+yXlRR5fz MTWUl43+GYMI1LGb+NONnUOa4Q/oind3Ed3bQiYZFShtt/M98G0rgr2wTxnij1MJ Cn7Y2W0Xv/OWE9GugS8sZ5g3XaATnzOMsUicB/SG0ZUtXpPdTF74cmNE46MOU4MH zKpLoochlbT9yZIT0NRy1y4iRpQ7p6qFBhB/WE519dgFAhutpoRtYzLhl9MwVdzk 4rAXwmth2Ard5/WssrGKGRoBHmDljnqIiQ9HLjlFiFQYNkbu0ksWI8mgYy6UYoIF 3N71KEXLHxhGh8BEbgh86D/GRHZlii0i7pqBhEn7+272vuopgfWuHOkQc4Ik7Jeh v9pdKcMl7S7J8ByOAw/v5zzHKP62J2B/om2msmk6ZGi5fr/8NdNRwT5DrZxE7ySD yAYLzxDxHAF0RJVF4TEyggnDr2Uzy0lCYTGR01Y48XJNab6xdXo= =t+3M -----END PGP SIGNATURE-----