-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 12:45:38 +0200 Source: bind9 Architecture: source Version: 1:9.21.22-1 Distribution: experimental Urgency: high Maintainer: Debian DNS Team <[email protected]> Changed-By: Ondřej Surý <[email protected]> Changes: bind9 (1:9.21.22-1) experimental; urgency=high . * New upstream version 9.21.22 + [CVE-2026-3592]: Limit resolver server list size. + [CVE-2026-3039]: Fix GSS-API resource leak. + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN views. + [CVE-2026-5950]: Avoid unbounded recursion loop. + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses are received under load. + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2 SETTINGS frames. * Add missing synthrecord.8 man page * Add deleg test to flaky test suite Checksums-Sha1: 5c404ed97313513f5c5e190b97ec317c894bb14d 3099 bind9_9.21.22-1.dsc 0f449972abc4437b02342aef14dba4c0d3ec7fbb 5383844 bind9_9.21.22.orig.tar.xz a999d63d2384b3dbb3a58d29f4bf59b95df3202a 833 bind9_9.21.22.orig.tar.xz.asc f031047e94f47267dfcaedeb3db53796fdf15cf3 63172 bind9_9.21.22-1.debian.tar.xz fbf08a11793f9681c4fc33dee2acc31335191666 14513 bind9_9.21.22-1_amd64.buildinfo Checksums-Sha256: 7062091d90919fefc05cce6130fdc0b459b97f141388a77b3c33d3efdbf46861 3099 bind9_9.21.22-1.dsc 305dd3fa3f86fccc4a15b4a9423132ce1f394a89949f6577b4d0e2b3fbd52f3b 5383844 bind9_9.21.22.orig.tar.xz 079df68a8c1de16473ad0cb3ef6a3229259a5605ba485bf4e181282a76933f50 833 bind9_9.21.22.orig.tar.xz.asc 4659702ad5e94a75c0895c1fe5b5a2acf0f8d0c4fd532280a0c61913bf7c35d1 63172 bind9_9.21.22-1.debian.tar.xz a3cbc4a60d0fa2ea59c1935e293fd93794fca3610469d83006bb46c21b3214ee 14513 bind9_9.21.22-1_amd64.buildinfo Files: 5cb6d75a82236b853688d918fb3ed1e5 3099 net optional bind9_9.21.22-1.dsc 520e51fae650a6870c17423ea3c50b39 5383844 net optional bind9_9.21.22.orig.tar.xz 023416c01d5655cd1930c907fcdc01b6 833 net optional bind9_9.21.22.orig.tar.xz.asc 993ed1a0e2a691459cfb3ebbe3a4e629 63172 net optional bind9_9.21.22-1.debian.tar.xz 6300402953592a4b123f5cadd837ee51 14513 net optional bind9_9.21.22-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmoOKJZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u WcJuKg/6Azo9vvJ1kYksGlf9BdqurnLK+3FLVPUy6cV3iYsXuFy6DCz/PftQiuIy nrZDWNvbD2HnTxJOOx6pCOTncLDKMKNyvZ9zZGiHPspbDwezjojdYfinl40Jub4Z 59JX4FQOVfe+nIBwp4+H8tk4R5OiNX8UChQu1DzLu2obQF4ddTdcizZGMwaIGszx RT50LHNDDYooo88/B1GMkcCQlvClNT6naHoQ0g2SlAFb9Sg0PAxfjpHyMGhCmUyg vCnAMSfcOrCoZB8zmOBCHOjEkh0/vyNNJSRbflAZBR/nr8moPXbpETmQroocjSb5 sl97zmxnTFA+axJcV5lNwtWlyii2MqsMg8xf4Zw/X6NAoByXwGsO9YLJYlYhKtOp ic0OYju0x5UMM8VJdHSUq1Rlv6Hd7QudN/baxUn2rRrZzrUMLzWq1CwTVa2ZJ4iU LdwUJIhDRVGr6IfvP6TMQ/PQ3jVz2tjptW+EqwupfhXnEUyT9GWEELyvAvwpk3zG BnNsdGvrFGhulndj9joE4CP/0ePM4uRqcki/7hyBm0hXpUQfENeKVf//0ucXSLbi 3Gmq+NIk4WqagHhOzPcvyFHUL3PVmddOwHWkwV2JAKKMpl+2joY/KQLWMBjZUbI1 zbhS38f1TzaXreD1JDZHob6RmGRmUBZ79ihfnZU9K0VfdmFZnnE= =6l4K -----END PGP SIGNATURE-----
pgpHoMSb9wagA.pgp
Description: PGP signature
