-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 12:35:53 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: amd64 Version: 1:9.18.49-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.18.49-1~deb12u1) bookworm-security; urgency=high . * New upstream version 9.18.49 + [CVE-2026-3592]: Limit resolver server list size. + [CVE-2026-3039]: Fix GSS-API resource leak. + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN views. + [CVE-2026-5950]: Avoid unbounded recursion loop. Checksums-Sha1: b7e945e373f61c773a014bd264e96e2d4f02b33c 646792 bind9-dbgsym_9.18.49-1~deb12u1_amd64.deb 7512241e4ffabd140769d3ea9a8790626c138c09 267780 bind9-dev_9.18.49-1~deb12u1_amd64.deb 62104b8dc5e46d9ef4534017c34029bac5e9dc78 390940 bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_amd64.deb 66520c92814f300fb810867b80a1370d688a4163 155600 bind9-dnsutils_9.18.49-1~deb12u1_amd64.deb ceed1aea12fe21bcb1cd1189ff2c6676662aaaaa 103940 bind9-host-dbgsym_9.18.49-1~deb12u1_amd64.deb 028888cdfb0f3da8c11e0c765c028cf678ac2dd7 54980 bind9-host_9.18.49-1~deb12u1_amd64.deb dbaff0d6035165868f5a9e1cfefaa58430ef584d 3742732 bind9-libs-dbgsym_9.18.49-1~deb12u1_amd64.deb 5383fa35e71e91f13b0e6050cd4bbe0d15ce0b44 1182056 bind9-libs_9.18.49-1~deb12u1_amd64.deb 03157ce357e6f6bef5471d304d10a4909a379d05 387704 bind9-utils-dbgsym_9.18.49-1~deb12u1_amd64.deb f1cf2dfb7e5b5d07952922d196fb0b1de3614603 160724 bind9-utils_9.18.49-1~deb12u1_amd64.deb a0bcd9f63966561b13321c4dd1f53a193086578a 11147 bind9_9.18.49-1~deb12u1_amd64-buildd.buildinfo 3c64c7c22d42197b4f4834cc2d46f333f8b385b6 251316 bind9_9.18.49-1~deb12u1_amd64.deb Checksums-Sha256: f207ea061e75ea9916ca2c7fda0bb045df44641ada93fefddb4bd1d3c3e85399 646792 bind9-dbgsym_9.18.49-1~deb12u1_amd64.deb 9a9b557664e207ff32eab8e4bae064a5cdf4cf9f0385d6ce3d329a3946bf041a 267780 bind9-dev_9.18.49-1~deb12u1_amd64.deb 5b6103fb550fda0add9e649f887ae8941ae7c0243e375ba0eb9861dfd45bc9f7 390940 bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_amd64.deb a862e14b56474e9ad6fe24f210d6cf8105777a63681bce239620f74a0456a16f 155600 bind9-dnsutils_9.18.49-1~deb12u1_amd64.deb 5d91589d5f54d91f48de60d549460c3d42d0fcccc0ad850a41bd79357919079b 103940 bind9-host-dbgsym_9.18.49-1~deb12u1_amd64.deb 70903d775aafdece2bb595513417d819d325245131638bcd898d46ce09f462d4 54980 bind9-host_9.18.49-1~deb12u1_amd64.deb 6553c6d5782cf88d3648f1bae54ca720514023c7ba2dcbf9fe30e80e600ca91f 3742732 bind9-libs-dbgsym_9.18.49-1~deb12u1_amd64.deb de791b89f1a542f82be7ee1f3f80a8c9bf55763ae9566b28f564d8ecb27a5c2b 1182056 bind9-libs_9.18.49-1~deb12u1_amd64.deb 480af7fbcc2a9b2c5a1088baf393f016d49a269b11600344722e41d3502f5259 387704 bind9-utils-dbgsym_9.18.49-1~deb12u1_amd64.deb 34042ce3b4f4122aa8e877e6d6ac3b58f2eda7e67d7723d224821d5991550601 160724 bind9-utils_9.18.49-1~deb12u1_amd64.deb 08503e4c2669470bca65a5569978e47e1bbbf47f1d3a4070d931d7afb2004de7 11147 bind9_9.18.49-1~deb12u1_amd64-buildd.buildinfo 47b924d18017cdd72f161b7fa437629c6e2ca798d597f51e3a91c0ee2f003402 251316 bind9_9.18.49-1~deb12u1_amd64.deb Files: a3ec178673a8fdc19d8384c239e7f11e 646792 debug optional bind9-dbgsym_9.18.49-1~deb12u1_amd64.deb 28e9610dc694eae1812e79aae0731918 267780 devel optional bind9-dev_9.18.49-1~deb12u1_amd64.deb ead8fada36be282d585c1444ca34fd20 390940 debug optional bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_amd64.deb 568275ee2e2446eea785e72aa5b683c2 155600 net standard bind9-dnsutils_9.18.49-1~deb12u1_amd64.deb 8f9e428f51a78e19adfdfa9133e557f6 103940 debug optional bind9-host-dbgsym_9.18.49-1~deb12u1_amd64.deb fc4479cd6a71ea76d9d286c0e2896760 54980 net standard bind9-host_9.18.49-1~deb12u1_amd64.deb 450d08722453c353674be855f6624119 3742732 debug optional bind9-libs-dbgsym_9.18.49-1~deb12u1_amd64.deb 3e73239dcb625c1b0f9fb39ca8e2f96f 1182056 libs standard bind9-libs_9.18.49-1~deb12u1_amd64.deb 78652d67a09203b065057acd4d4c8e98 387704 debug optional bind9-utils-dbgsym_9.18.49-1~deb12u1_amd64.deb 4604eb31fed2061a090d3579be729f80 160724 net optional bind9-utils_9.18.49-1~deb12u1_amd64.deb b8578ed1b4f42454e6d16f0eecb40199 11147 net optional bind9_9.18.49-1~deb12u1_amd64-buildd.buildinfo da3dd0c8969b752c2757e8435958878b 251316 net optional bind9_9.18.49-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmoNlj0ACgkQTwt/65ON 6zeUQBAAujhKi+okS4aL1KDRUxBMdeEzIUqC/N9kaG6d+Y/Q458jj5h36BBoHzyh p51Ph3emPWKokuTYlSPj8R+i3ObTyuPX2gd/slpgJ1Htsz350t12gGti87zp4Al0 /lR6CnCVxDQXmq3b/62a679/FMxO2YP/pHU4CxqP2YxCzFY4NEIV9dHgPRGXuyJd pxOY9CwCJrRElB/VwcAQrcCn4KLWWAfoINZv0/9Zaocp5bwo5dz0BqS2GEmZ1/5N 299eDmPkVkLZPRLYBQq55vA0Dh66Dk/XM3F9r2cX+odj4p0A1jr77Hf0IzOE59SC h+H/Y8zEvNwUD6AXPnSh8b0II6TrC3jv4/k3edXjMgju2TwcOR58Pn0Ww8ytNQiZ XkuyPT3g4EJFKoIBxxczfDzZhpJCy4upfWv0G3+4Lr8QQto2KXsHMMfxKzAeHyc9 j40Un0NAzPK2S8kK1ttzYDTkJ8AZ+9dQYw7bIYrp3WkUQ6BSg7pTnse3NJvtLa45 8f/gmEUwaADzqxXRwbAUj/alYCgnnxb89BNKcakTXOc4cjcwSAB38AP1XE8nW65g xA0haxRWDxrESVSb+XhSj48v0aSpgIdY6GzAlm/rtRLz6H2w3pgIW2EE1hRqNNCR +hULcnlzZVWCwdktvXpJA5K4HjgaL8AbmQlOqCyFbHfNucCh2yo= =oT6H -----END PGP SIGNATURE-----