-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 a71829fcadb7dda79f26bab99f7aa6ae39f9450d 691864 bind9-dbgsym_9.20.21-1~deb13u1_amd64.deb
 f318bb1204b9b0010174f0ad01ddcd59f05b3435 294600 bind9-dev_9.20.21-1~deb13u1_amd64.deb
 65cb6efcac6b45d1113b3833517d11441fc98947 435052 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 6ef6cfbf5b51a1638eeeda616f6d662e171e1bd2 165984 bind9-dnsutils_9.20.21-1~deb13u1_amd64.deb
 ffbb1423d5a423852a887fd6cda86e6f1ab633a7 107136 bind9-host-dbgsym_9.20.21-1~deb13u1_amd64.deb
 48823d1f7243409ec72f944eecbd9bc81e78ba6b 55640 bind9-host_9.20.21-1~deb13u1_amd64.deb
 a90205c4bf803e22053c430c8cd5b2d39b623c2f 4202048 bind9-libs-dbgsym_9.20.21-1~deb13u1_amd64.deb
 46b5366b77f1b67fe1e64d3c0bf621b609066400 1243432 bind9-libs_9.20.21-1~deb13u1_amd64.deb
 2ba1f005b18e6ebcdd8e86b34f0f5b2a32d46cc4 495664 bind9-utils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 c28a52af84ec76e5db43e5f320df2136fbdeeaba 184228 bind9-utils_9.20.21-1~deb13u1_amd64.deb
 1474ce3d0b686bc00ab99feeef9a4ab496117332 10354 bind9_9.20.21-1~deb13u1_amd64-buildd.buildinfo
 9c4525791d19afad0468d7ee79c3c7cc04c7078d 255176 bind9_9.20.21-1~deb13u1_amd64.deb
Checksums-Sha256:
 bc129c970e60ed127a824064a02b279f17dd09885b526fce00c02425ab4156e6 691864 bind9-dbgsym_9.20.21-1~deb13u1_amd64.deb
 8a51c6ff1355d5d84ce963a4f3744c84f4fc0058be1f9390e379e81b8ff340a2 294600 bind9-dev_9.20.21-1~deb13u1_amd64.deb
 0b297ec0c5c9d9f8eaa190409e3de33eb902f5540264baff0c5ed1b8aff9c110 435052 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 059eae7216b25ba790e298d257c3f34f006091179deb091c0520f35238523545 165984 bind9-dnsutils_9.20.21-1~deb13u1_amd64.deb
 ebb40b1ace776f163610d7f82701a259081e1c46d6e06ab236278153593b9a77 107136 bind9-host-dbgsym_9.20.21-1~deb13u1_amd64.deb
 6ac680b696b0d8531ab32318797c0f912afa40a6915720f30c556bd16c287ced 55640 bind9-host_9.20.21-1~deb13u1_amd64.deb
 1b36cf76f772a512723bd8e2c0149f1996d3ee1ec6663102261bb0eb63db7390 4202048 bind9-libs-dbgsym_9.20.21-1~deb13u1_amd64.deb
 4d65742ea2d371b6ffbb04d5dc386a7e58202a6080091fe117948f3fcc10ed0d 1243432 bind9-libs_9.20.21-1~deb13u1_amd64.deb
 1f64c3f305f37f2bcae5eb32dfa192167b80019240dd7d94cd05155b7461d6d7 495664 bind9-utils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 c1e81d6c154c1003d95c9812191ec3abb978f91fd11d23877a7450483bf6c556 184228 bind9-utils_9.20.21-1~deb13u1_amd64.deb
 bd49e60ba0bfc6424d38e786ec23f2a8a3fd275011321372e89bdcb3394dba82 10354 bind9_9.20.21-1~deb13u1_amd64-buildd.buildinfo
 c5a3bc7eab181b08484e462af7ed07c72f487230a7bf6148f79da69c982001dc 255176 bind9_9.20.21-1~deb13u1_amd64.deb
Files:
 0954ff3fc58d370b440d008cce58cd38 691864 debug optional bind9-dbgsym_9.20.21-1~deb13u1_amd64.deb
 7e6d21ff60294c250c255979a30580bf 294600 devel optional bind9-dev_9.20.21-1~deb13u1_amd64.deb
 b3a497c5f85e6b41f2f75bc6e0333460 435052 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 709eee43328f967a75dca83b0697a575 165984 net standard bind9-dnsutils_9.20.21-1~deb13u1_amd64.deb
 9acc3362fad524b7a962f758d50921ee 107136 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_amd64.deb
 b819ed24c5fc289a274e5bae19421e4f 55640 net standard bind9-host_9.20.21-1~deb13u1_amd64.deb
 fd21a101015d828f59cc3b8d2c5679a9 4202048 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_amd64.deb
 1dd9afa8f87b14017b40d6d99950770a 1243432 libs standard bind9-libs_9.20.21-1~deb13u1_amd64.deb
 9cc8c42fc430d6093915d790d5e14128 495664 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_amd64.deb
 6f109a319e6c38db26d4797561f45c61 184228 net optional bind9-utils_9.20.21-1~deb13u1_amd64.deb
 2b1edf914806d3453db23808eb63a75e 10354 net optional bind9_9.20.21-1~deb13u1_amd64-buildd.buildinfo
 d0d00374fa299d001a68a5e99a4c0f1f 255176 net optional bind9_9.20.21-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=QJt1
-----END PGP SIGNATURE-----