-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 12:35:53 +0200 Source: bind9 Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym Architecture: arm64 Version: 1:9.18.49-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Ondřej Surý Description: bind9 - Internet Domain Name Server bind9-dev - Static Libraries and Headers used by BIND 9 bind9-dnsutils - Clients provided with BIND 9 bind9-host - DNS Lookup Utility bind9-libs - Shared Libraries used by BIND 9 bind9-utils - Utilities for BIND 9 Changes: bind9 (1:9.18.49-1~deb12u1) bookworm-security; urgency=high . * New upstream version 9.18.49 + [CVE-2026-3592]: Limit resolver server list size. + [CVE-2026-3039]: Fix GSS-API resource leak. + [CVE-2026-5946]: Disable recursion, UPDATE, and NOTIFY for non-IN views. + [CVE-2026-5950]: Avoid unbounded recursion loop. Checksums-Sha1: 928937951c689167302baf5d0d8fac6281797c80 646452 bind9-dbgsym_9.18.49-1~deb12u1_arm64.deb 5b0c3d328a8cc7a356a0b3b86af94960ab951c82 267780 bind9-dev_9.18.49-1~deb12u1_arm64.deb 6300dd2e2f0e7dabfa7df1f734503c6af122881b 390304 bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_arm64.deb a23c592e7e731ab2c3dfb70291fb2bbb4f0e5cf0 148332 bind9-dnsutils_9.18.49-1~deb12u1_arm64.deb c35f1838547999135011eb5048bf22a8cefda800 102628 bind9-host-dbgsym_9.18.49-1~deb12u1_arm64.deb 299ac2f4838f1f6146fedce5bb5dba36a8e89c53 52728 bind9-host_9.18.49-1~deb12u1_arm64.deb cc245cd741c0cb11007aabf413fc57695d96a8d4 3670688 bind9-libs-dbgsym_9.18.49-1~deb12u1_arm64.deb 14450f74d240aaa5593e6ef08f99f86d58070b2a 1052908 bind9-libs_9.18.49-1~deb12u1_arm64.deb 0c842c6827cedc10e35dedf38e5e4b675f68942b 390972 bind9-utils-dbgsym_9.18.49-1~deb12u1_arm64.deb 4939fc6713dd9d2d77773f0bd4b572142f249e25 152056 bind9-utils_9.18.49-1~deb12u1_arm64.deb de4ba09be2874fc2c6942a81320f76cd73253eab 11162 bind9_9.18.49-1~deb12u1_arm64-buildd.buildinfo ecb7a1fab6e7c773fa1eb87165dfb499c947fcbc 232784 bind9_9.18.49-1~deb12u1_arm64.deb Checksums-Sha256: 0dcd5fb8614745e61e0a86c734cf02f15c871123aca1b5f249c2d90ece475f18 646452 bind9-dbgsym_9.18.49-1~deb12u1_arm64.deb 0c9ec6ba38efcbf93c74e6d282fda3fc9d36794ca5fc7ff89c22e63db115aae0 267780 bind9-dev_9.18.49-1~deb12u1_arm64.deb a7746ad53b886d28275bb4de42265413812d83243eeaaf3dd532f5d4c5714188 390304 bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_arm64.deb 3d1d6796e1c2a9c0accf6f42f0d799920531a823099276d8236d892e8caf3d9c 148332 bind9-dnsutils_9.18.49-1~deb12u1_arm64.deb a75dd4c2edbcbed47b676c9cd13b4cde7b96569dee8405b087e4366856484041 102628 bind9-host-dbgsym_9.18.49-1~deb12u1_arm64.deb e790f6b64d98c92a1cba3b6091708c7222dd906e181362badbc4c4808aad5580 52728 bind9-host_9.18.49-1~deb12u1_arm64.deb 769a6e4a80201151facc158c01377e6128e4d2db44c294f442cec761bebec7b9 3670688 bind9-libs-dbgsym_9.18.49-1~deb12u1_arm64.deb c52d3231792f489fafa63d7e60a7ce3801889505b107f3ee56ef5fab206311bd 1052908 bind9-libs_9.18.49-1~deb12u1_arm64.deb c50ed106f3d3caf5d0a6056ba9961c3e1b3f5adce67538cc3db41512ecc4f50e 390972 bind9-utils-dbgsym_9.18.49-1~deb12u1_arm64.deb e4b2b4b10441ffe6abb397716cf9a40466be19585835e8c6b09dcdb3a0e80f9e 152056 bind9-utils_9.18.49-1~deb12u1_arm64.deb 21aa12d547d316712c4259d75d3931fcba95359df88fb2fea3612ce643a9f784 11162 bind9_9.18.49-1~deb12u1_arm64-buildd.buildinfo 1c99ce108bc7a6e23faf9c98723be00aca81d545a32dc643f04c51bedd3cbf00 232784 bind9_9.18.49-1~deb12u1_arm64.deb Files: 563f4616ef9be97166910c6d99968a4d 646452 debug optional bind9-dbgsym_9.18.49-1~deb12u1_arm64.deb 9ea477cb332e6a10130ac7391263b209 267780 devel optional bind9-dev_9.18.49-1~deb12u1_arm64.deb b5c9ec057bbe782c7a2d529dea7e3b51 390304 debug optional bind9-dnsutils-dbgsym_9.18.49-1~deb12u1_arm64.deb 1809871094660a1d82cb41f8776614a6 148332 net standard bind9-dnsutils_9.18.49-1~deb12u1_arm64.deb d7beb1f4645b11a6799910429d6a6645 102628 debug optional bind9-host-dbgsym_9.18.49-1~deb12u1_arm64.deb 6e55b26451a764d6df69a5d66630d441 52728 net standard bind9-host_9.18.49-1~deb12u1_arm64.deb 0150196c89d8d9b9f201bd866759a48a 3670688 debug optional bind9-libs-dbgsym_9.18.49-1~deb12u1_arm64.deb de966f35c4e02a59fead7bd7c7b4d198 1052908 libs standard bind9-libs_9.18.49-1~deb12u1_arm64.deb ac366ccff6e110ff273dc834db846ff1 390972 debug optional bind9-utils-dbgsym_9.18.49-1~deb12u1_arm64.deb 4e27e461598f8b1de32551ecddc7c3ce 152056 net optional bind9-utils_9.18.49-1~deb12u1_arm64.deb f7e2137ee5bda4eecc72244c815246be 11162 net optional bind9_9.18.49-1~deb12u1_arm64-buildd.buildinfo e232cdd48c77000108cd4e48b80b6fc8 232784 net optional bind9_9.18.49-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmoNliIACgkQxqCFmsOW goYcVw/+MuO4IABxch+CoCkIfAHybMkXFnE/diyc1X3vQ0SZ+Qi11gu1u9yCAVA5 aU2DvvYUaQjdLmpE2d+Oy5+X9Q+bFWKQOQ7Q4f8sKAu/BX09U6wG9agSSDiakYmd +aoI/6UtEJojuu19QPTfhDNC4ohG7l1s6s+Vo0znXpnqT2AetbpqaRV1bZUHdFhV GGHCF0vRf2a2qU/W6tf4y5SCMKSR8NWiOTVrM8diiflxOi8igM1GYefPPLOMxyxg pXnQljtZf2oJi8C/qGRLf/YjiaBrwV7YQhHeKn9tU0IVKPVomnyXC1rvw5h4gxhl d8cu+uVybD79Da4FS11QTrFPeoLI5d25f1B7vOBkwrVXpS71IF5eDFRCd3mE9pff KjWJTxH1+TJ0mzujqQcHv+6qp96936P8cxhOzLk+HnlWNLsNo6uAKeI1Yx83T/Zb AxvytdiU8MLy9uMCyz8tmDDn73NRZDRcmTx+3pylDHInsQRvt/VLk3ESF9PfgIok TP6seWzAOcLD9M61WOZXYKQLKyjwg/wWzwF2iv8kADm5AdtM3DOLFo2BMLrTYxJQ 2egyN/6l+/q4wyHtVcwR3kg3ZJQOK6W3tXIAacJmVZvMb82q1zHKfzp5qolBURVC uXbFS9WFSPktfGXLCnNLGtkkxgJMWq3HwtcUAob4/Nw4Av7Ec2E= =BrO6 -----END PGP SIGNATURE-----