Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bind for openSUSE:Factory checked in at 2026-10-23 20:22:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bind (Old) and /work/SRC/openSUSE:Factory/.bind.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "bind" Fri Oct 23 20:22:00 2026 rev:238 rq:1387069 version:9.20.30 Changes: -------- --- /work/SRC/openSUSE:Factory/bind/bind.changes 2026-10-03 20:13:13.952846154 +0200 +++ /work/SRC/openSUSE:Factory/.bind.new.2252680/bind.changes 2026-10-23 20:22:24.752791298 +0200 @@ -1,0 +2,43 @@ +Thu Oct 22 10:04:03 UTC 2026 - Jorik Cronenberg <[email protected]> + +- Upgrade to release 9.20.30 + Security Fixes: + * Prevent exhaustion of CPU while parsing crafted DNS messages. + (CVE-2026-19630) + [bsc#1286575] + * Prevent concurrent GSS-TSIG traffic from terminating named. + (CVE-2026-94300) + [bsc#1286578] + * Fix a crash with redirect zones and strict QNAME minimization. + (CVE-2026-96888) + [bsc#1286579] + * Fix a crash when resuming from a query initiated by RPZ. + (CVE-2026-97313) + [bsc#1286580] + + Bug Fixes: + * Remove a spurious root trust anchor warning and recognize the + new root key. + * Do not accept HMAC keys and signatures for SIG(0) or DNSSEC. + * Fix DNSSEC tool dates being read one hour late during Daylight + Saving Time. + * Reject URI records with an empty target. + * Fix a crash when loading a zone in raw format. + * Prevent dynamic update prerequisites from probing zones that + refuse queries. + * Fix a named-journalprint crash when using the -x option. + * Honor server settings for keyed NOTIFY and DS queries. + * Fix a catalog zone update bug. + * Fix an out-of-bounds read in dig +dns64prefix. + * Prevent excessive RRL table scans under load. + * Make named-checkconf fail on invalid command-line arguments. + * Remove the temporary file when saving a zone file fails. + * Prevent the statistics channel from serving data on + unregistered URL prefixes. + * Fix a crash on OpenBSD when a signal reached an idle worker + thread. + * Resolve names in insecure zones whose apex answers with a + CNAME. + * Set GSS-TSIG keys to last as long as the negotiated context. + +------------------------------------------------------------------- Old: ---- bind-9.20.29.tar.xz bind-9.20.29.tar.xz.asc New: ---- bind-9.20.30.tar.xz bind-9.20.30.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bind.spec ++++++ --- /var/tmp/diff_new_pack.PYFyYI/_old 2026-10-23 20:22:25.663829129 +0200 +++ /var/tmp/diff_new_pack.PYFyYI/_new 2026-10-23 20:22:25.664829171 +0200 @@ -34,7 +34,7 @@ %define dlz_modules_hash 5923650 Name: bind -Version: 9.20.29 +Version: 9.20.30 Release: 0 Summary: Domain Name System (DNS) Server (named) License: MPL-2.0 ++++++ bind-9.20.29.tar.xz -> bind-9.20.30.tar.xz ++++++ ++++ 40150 lines of diff (skipped) ++++++ named.root ++++++ --- /var/tmp/diff_new_pack.PYFyYI/_old 2026-10-23 20:22:27.532906744 +0200 +++ /var/tmp/diff_new_pack.PYFyYI/_new 2026-10-23 20:22:27.536906910 +0200 @@ -9,8 +9,8 @@ ; on server FTP.INTERNIC.NET ; -OR- RS.INTERNIC.NET ; -; last update: September 30, 2026 -; related version of root zone: 2026093001 +; last update: October 21, 2026 +; related version of root zone: 2026102101 ; ; FORMERLY NS.INTERNIC.NET ;
