-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 12:21:44 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: s390x
Version: 1:9.20.23-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.23-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.23
    + [CVE-2026-3592]: Limit resolver server list size.
    + [CVE-2026-3039]: Fix GSS-API resource leak.
    + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN
      views.
    + [CVE-2026-5950]: Avoid unbounded recursion loop.
    + [CVE-2026-5947]: Fix crash in resolver when SIG(0)-signed responses
      are received under load.
    + [CVE-2026-3593]: Fix use-after-free error in DNS-over-HTTPS when
      processing HTTP/2 SETTINGS frames.
Checksums-Sha1:
 c6b38e96f5afe9e681236877a639405517027d04 651120 bind9-dbgsym_9.20.23-1~deb13u1_s390x.deb
 36375f311d105ceb2cd6bf136acc5515ae3dcee0 294764 bind9-dev_9.20.23-1~deb13u1_s390x.deb
 a0eb1857f8ed8dea77ed686f865bc88c8014b1ea 399732 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 b88a9b9b6cfbd73a5c73d182fc7134c0154cad49 159688 bind9-dnsutils_9.20.23-1~deb13u1_s390x.deb
 18b36420b3e8d754190dffe25764aaa61204a658 104584 bind9-host-dbgsym_9.20.23-1~deb13u1_s390x.deb
 71d7e1c9cc8d2ec413298bc87f7c5e410b8262be 53376 bind9-host_9.20.23-1~deb13u1_s390x.deb
 83ff59e4fe761e9d37146fb62af4a1b1313d0f82 4163608 bind9-libs-dbgsym_9.20.23-1~deb13u1_s390x.deb
 d587f9b27ba133d90fb757253c4c8accb7d5fc31 1152728 bind9-libs_9.20.23-1~deb13u1_s390x.deb
 f14248d44ddc3c16e1c742f9fe4ee37ff7d6afee 388104 bind9-utils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 36317205dae319bee47a9435396b6021cbec1c4e 177484 bind9-utils_9.20.23-1~deb13u1_s390x.deb
 7076bac126e344b8b558cb9cecd0bbb1550471cc 10339 bind9_9.20.23-1~deb13u1_s390x-buildd.buildinfo
 9e421e0cc1a4989dd08844d47f50353518e7cf6a 243376 bind9_9.20.23-1~deb13u1_s390x.deb
Checksums-Sha256:
 f9901c8c7da870203c372117aa5d1e7c801a95f57a650754c8702bebef4fe706 651120 bind9-dbgsym_9.20.23-1~deb13u1_s390x.deb
 f22ed302355d15517227279fb99f0ea6eeaca1b0d97a259abfa593186527f198 294764 bind9-dev_9.20.23-1~deb13u1_s390x.deb
 d16f6c57d3242b53bd630d8283ac08f2c6abf89a66b5137d8d4253e5c4631c8d 399732 bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 621bcc7a2e926fd51852af355f088022d355ce69b6fec3f32c5219340c1cd773 159688 bind9-dnsutils_9.20.23-1~deb13u1_s390x.deb
 d09dbcbcd8560f4d610012ac03eb9b775d10cd91f9c268fcd61e16a6f864858f 104584 bind9-host-dbgsym_9.20.23-1~deb13u1_s390x.deb
 ecf934094cd6f9ee89c9f3d2034fca51224c61535e2f310442f757ce20100910 53376 bind9-host_9.20.23-1~deb13u1_s390x.deb
 9dfa212052b6b2cda43f7936f079560159fb5daaf43b728d335004c5557d9d90 4163608 bind9-libs-dbgsym_9.20.23-1~deb13u1_s390x.deb
 bb6e9c5884350d0d59a876e57eef9f94dd9deb49637af35b0371b24cdd483842 1152728 bind9-libs_9.20.23-1~deb13u1_s390x.deb
 d1c95df64f6be88fce1c47f645990b3991b7e04f40d1c9f8212d6d720dfdc558 388104 bind9-utils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 1ab53e6f7c134ecd494dc6561de3babc56e01415cc31b2c6274543760a86ee69 177484 bind9-utils_9.20.23-1~deb13u1_s390x.deb
 d884682bc0160d666512933180637cd2af635a7405dc6e2efa1711c894250248 10339 bind9_9.20.23-1~deb13u1_s390x-buildd.buildinfo
 b0ba8263312364b26a42f80004e66ac3546ad5597d5a2bcf5d2cd91b14a85334 243376 bind9_9.20.23-1~deb13u1_s390x.deb
Files:
 0f0db3ade81ba7e7100a6b7b80139702 651120 debug optional bind9-dbgsym_9.20.23-1~deb13u1_s390x.deb
 ffba71baaef20d586a60204691c6d098 294764 devel optional bind9-dev_9.20.23-1~deb13u1_s390x.deb
 d1bf1e7a0d50fb7eaf3c5cc096e603f1 399732 debug optional bind9-dnsutils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 b8b401cad269d7498eb8420f88c16d4b 159688 net standard bind9-dnsutils_9.20.23-1~deb13u1_s390x.deb
 8cce623742701e913937049f8c5acb08 104584 debug optional bind9-host-dbgsym_9.20.23-1~deb13u1_s390x.deb
 ca5ca7dda96113557dfb1533886620c1 53376 net standard bind9-host_9.20.23-1~deb13u1_s390x.deb
 cc8b0055fa9f1503861a525167e32fca 4163608 debug optional bind9-libs-dbgsym_9.20.23-1~deb13u1_s390x.deb
 3a929176246052949cda31cdbc541aeb 1152728 libs standard bind9-libs_9.20.23-1~deb13u1_s390x.deb
 253ff28e64a2d5be94cb918c4d5c63b3 388104 debug optional bind9-utils-dbgsym_9.20.23-1~deb13u1_s390x.deb
 b9f527f6fa2eed58e02c3ab4e6920566 177484 net optional bind9-utils_9.20.23-1~deb13u1_s390x.deb
 30c9f1054c5c44eba4b2d488e6031423 10339 net optional bind9_9.20.23-1~deb13u1_s390x-buildd.buildinfo
 95e3517b13a58a1a6d8ecca8844ec9cf 243376 net optional bind9_9.20.23-1~deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=kAXS
-----END PGP SIGNATURE-----