-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 20 Oct 2026 17:22:56 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.20.30-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.30-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.30
    + [CVE-2026-19630]: Prevent exhaustion of CPU while parsing crafted DNS
      messages.
    + [CVE-2026-94300]: Prevent concurrent GSS-TSIG traffic from
      terminating named.
    + [CVE-2026-96888]: Fix a crash with redirect zones and strict QNAME
      minimization.
    + [CVE-2026-97313]: Fix a crash when resuming from a query initiated by
      RPZ.
Checksums-Sha1:
 24b3a004fb192f3d7b708409a698781c4a9b2638 696336 bind9-dbgsym_9.20.30-1~deb13u1_amd64.deb
 6948df39a19e59b895bdddd9153e805e83c12c26 298912 bind9-dev_9.20.30-1~deb13u1_amd64.deb
 a2de614447402fffd7393d11f4166f252949e975 441992 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 b9397c16017462814895520f048cb4ff72c0028a 167084 bind9-dnsutils_9.20.30-1~deb13u1_amd64.deb
 684e10c623bf0478524b5579331be9dda70508be 108300 bind9-host-dbgsym_9.20.30-1~deb13u1_amd64.deb
 5ee3e13275233dbae5ccb7975b1530990d7c80f3 56596 bind9-host_9.20.30-1~deb13u1_amd64.deb
 72f212617b589fd6eafb9e5bdaed09f8328633b4 4255660 bind9-libs-dbgsym_9.20.30-1~deb13u1_amd64.deb
 c0cdb52257ddbd0ae39f068aa444ce0d51b0ee6a 1250200 bind9-libs_9.20.30-1~deb13u1_amd64.deb
 fa39ca9408d2d0aeaed451f3bc9773de756addbc 506212 bind9-utils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 4fccc3472e110cb9185053460fd3751d9ea46efc 186900 bind9-utils_9.20.30-1~deb13u1_amd64.deb
 385909d5f9910be42b5672392119ae9fa34a441b 10644 bind9_9.20.30-1~deb13u1_amd64-buildd.buildinfo
 dbd3fa5317701aadf87c38f42f42ebde468350e8 257712 bind9_9.20.30-1~deb13u1_amd64.deb
Checksums-Sha256:
 8118560440b6dd6105aecd9a0a26c9842c41a14f123a5fee5950e93a429c7b6a 696336 bind9-dbgsym_9.20.30-1~deb13u1_amd64.deb
 d764b0615aadc56a4bceaf7d792ad8d2a870080e13626b57d5057c5c1d62eec3 298912 bind9-dev_9.20.30-1~deb13u1_amd64.deb
 fc7b290b9d01dc6e81c34dde7798a4c10d43ec567c2fc76fc716db301b155caa 441992 bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 4748611a32351e9300f11d63cb1d1f5572e1d65a7d8a536ef43237005ed14800 167084 bind9-dnsutils_9.20.30-1~deb13u1_amd64.deb
 66a92155ee91d0e146c4d765a551c5aa8fbc4ee9c84e6f8de7863afaf71c29c7 108300 bind9-host-dbgsym_9.20.30-1~deb13u1_amd64.deb
 12ccd8cb02d44d588f9f90066caf9943686487e4ab57b16dcecf5824f8b25530 56596 bind9-host_9.20.30-1~deb13u1_amd64.deb
 b8ad9369d1533351a7c513548a49143e22977895c1c4d727a6a7b649cd89d2f2 4255660 bind9-libs-dbgsym_9.20.30-1~deb13u1_amd64.deb
 a119e1495ee0499e04fb893a19252c1e6e36c2b19f0a1818d3b7175776433679 1250200 bind9-libs_9.20.30-1~deb13u1_amd64.deb
 f6079ec76627efbdd3d7056c683eab870d12fe788dc7affcb6a8ac188d5ea4ab 506212 bind9-utils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 5e72f469849318f558cd97f5a8a9be3e4736ae21a46f898d647fc3d9b8f959b7 186900 bind9-utils_9.20.30-1~deb13u1_amd64.deb
 06430d54b2e3378c3299bd2c531c2fc09d95a97ac73fdb378579591bd0868cfc 10644 bind9_9.20.30-1~deb13u1_amd64-buildd.buildinfo
 4954573893452b56c65fceebb76d54ec07209419e8c0ce26367fa23d8cb1778d 257712 bind9_9.20.30-1~deb13u1_amd64.deb
Files:
 f861fb21edd7843d5d89f73fe51d4a87 696336 debug optional bind9-dbgsym_9.20.30-1~deb13u1_amd64.deb
 4c08f26b2dc78e735a0f503aa775c838 298912 devel optional bind9-dev_9.20.30-1~deb13u1_amd64.deb
 0da93a0ebee11a5a27ef00dce73844de 441992 debug optional bind9-dnsutils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 ba0cedf54899c114aa8d571df63342c8 167084 net standard bind9-dnsutils_9.20.30-1~deb13u1_amd64.deb
 8ca1dd94a1be8d6912a6b6a7f8fe6e2f 108300 debug optional bind9-host-dbgsym_9.20.30-1~deb13u1_amd64.deb
 a2b91788b4694473ff290624e5b565f1 56596 net standard bind9-host_9.20.30-1~deb13u1_amd64.deb
 171565d3ec3de4d0daa543cc85ce02f3 4255660 debug optional bind9-libs-dbgsym_9.20.30-1~deb13u1_amd64.deb
 579526ed641f9f277b0e9d22f4239558 1250200 libs standard bind9-libs_9.20.30-1~deb13u1_amd64.deb
 8f91f5286bb18e8783d54cb39eaa2b47 506212 debug optional bind9-utils-dbgsym_9.20.30-1~deb13u1_amd64.deb
 0cadd77b84356e8a3f7ca45025acaa25 186900 net optional bind9-utils_9.20.30-1~deb13u1_amd64.deb
 aba3e7c6e9e63e9ab92d5e002dd4b623 10644 net optional bind9_9.20.30-1~deb13u1_amd64-buildd.buildinfo
 d9ff35de0337588193d8f464f5090e17 257712 net optional bind9_9.20.30-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmrXrF0ACgkQYg9P9sm2
dfFULQ/+I5rwK1cr5T3IuUi0LNJioLCkysiLbIf0bGxYwkMUPfoV89fO10Kk54Rl
i/MXLZrzp8GvoB2mPmHH8K/WIkoh/K2DS/RoZD8G/PqpgCk4pjXzXL3qM9DVSjJg
i2hNVWbRaXknY14KTbGf68h/3LGx13qRL0HyySjnkKd0APTJuL6Y5AJrGBVkedZM
hQ/t3ShS2kvPc0Eizuuo4P8FPIzXwc/4pocungZeWVIbY7eYJxgcTXW+HSqeWi8P
vyVU5BzlC15ZVLGH9jMAMTIbfQxWxD8++3PZ+6vqK3i/p1hiOYkANd7y8uar+MS+
KdpSVwKINPGZ9SM76Og8li57DR5oyYzTdEF+3xioUXbWvTXwcJ4OBNAf1yaeynnQ
mnIlyiRo34hHsyQLQHFQOARHVdWyH9Ln3YCAsM5+NPi6fNp3yiRyC/VPbO/Sd58q
gnEoZ/A9YkWSL6T8raaTqRmZG9jowq4Ex40bY0yg2RywCIyRJpNYIp1aLePWw9gq
5Ft/Bc7rfJV+YczLCbJ+DNcMxxOZGFngcQMYQX3cyDIJxClI8dxFs+zD6RHE8llg
XM2UaNAaEaihRQeRNOyFtGsvfWqZCB8GPF4KVIeLi95UzetFVEwKt6FFcfm/7GeM
xZxn2rixVnKdoU3L4WhPCZRanSMuSHf6A2jXnThdrbErNnIoVoo=
=5J56
-----END PGP SIGNATURE-----