-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 17:16:11 +0200 Source: bind9 Architecture: source Version: 1:9.20.30-1 Distribution: unstable Urgency: medium Maintainer: Debian DNS Team <[email protected]> Changed-By: Ondřej Surý <[email protected]> Changes: bind9 (1:9.20.30-1) unstable; urgency=medium . * d/README.Debian: Remove obsolete note about DNSSEC validation * New upstream version 9.20.30 + [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS messages. + [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from terminating named. + [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME minimization. + [CVE-2026-97313]: Fix a crash when resuming from a query initiated by RPZ. Checksums-Sha1: fff806ce1bbbd40be6c1ed14efbaf9d453c1fe9e 3015 bind9_9.20.30-1.dsc ac1636ef1540db3d2dfa37844da843e239806d7d 6004232 bind9_9.20.30.orig.tar.xz 5ab0c25f2ee89578f8209b103f4db92509c95930 62748 bind9_9.20.30-1.debian.tar.xz 379d8e400d2c5b45caba5066176c14b247aa2e30 14544 bind9_9.20.30-1_amd64.buildinfo Checksums-Sha256: d8d3ca0c9e892baeb8f1dfc19a09052e1697c10895ca698028a37ce637589d42 3015 bind9_9.20.30-1.dsc 9e1443a40a72a30272cbc3196d020a6b2e26937111c83e59e101e82e1e3b4fef 6004232 bind9_9.20.30.orig.tar.xz 25677541a8cc694e5036ef411e47b62d8c5e5471e64329eee32da15501723c94 62748 bind9_9.20.30-1.debian.tar.xz fbf5634ac7a8c4e30101f5395a8a4c1a1b84d74caa0754699bf926327494e83e 14544 bind9_9.20.30-1_amd64.buildinfo Files: f777acd3b66aca393bd7be3fd4424058 3015 net optional bind9_9.20.30-1.dsc c94a2934cd033905143aa0c26acad79a 6004232 net optional bind9_9.20.30.orig.tar.xz bded0186f892e034936fa8a74eabcba6 62748 net optional bind9_9.20.30-1.debian.tar.xz 3643a58ca5731accd0bd59fa3270a619 14544 net optional bind9_9.20.30-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmrZwSlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcI5cw/+MgOWzB2ZvKc+TOnG5IujZxGdQ+7kgZwfvunM/Mfh+9u1AQYJJqbbK4+N oFZ91bphxp6NatNrygoYmZKPOXnRWLEP/uz8lfOO0svWjYlxbXBra6Mzp95tVfTI apIAUO0xsKgJsHjbJXC4qf3jV7Y0QX2F6vPRAs4ixbE3ZFbRbm/IhPBbGUx15vsK Nb8l7w5ul7LuIh33eQIGtMwW0OBgi645yVzia73WTiY4tbExJzKtJzsNXCE3AbHj nZeeMPm3lybhILtxKO/DJoiZak3OfqIvbTNHY/ypBBSIN/Ybj/L9xTPwdwgWjtcT uQjhCtf8nyozcp494jxP1DwiYCVzHhNqI/PvxxfVWFzJZgXKX5rFogXhg+sQ5JhS Qli4D3aaT32lmUkgIOujb6vE2RfXjrVz5LIMm4X9U+bZP3uCNmd00+HCuQDfaKE3 qhJa1MeGKMzsBizai7LovnLta2hBk7jp0rlB0lAV4QLRxoKZUVO4c0O/+AMfZSbj HHWJkumyMebhXXgFQj8B0ZcZ0aL8XAfD6Lgk7Wp91/CdRBFlWDWp0rLGhVsejKTV q02WcGuoAqYZY+3TF8SzDk5GaF3ERa61/L3v0muGICiJ3miZVyvuheavrROq8iBL 8DEgpeYneSjbeJmgfzJcqGRgeXSBxdu9XsKJVaH50kA4TKlcTTY= =KJ5F -----END PGP SIGNATURE-----
pgphRDCPJsS_G.pgp
Description: PGP signature

