-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armel
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 43db8ebf0d677e1c3d5d53f9f92696e626208ebb 646852 bind9-dbgsym_9.20.21-1~deb13u1_armel.deb
 f7b368c5aa06a622faf4f4fc2303278b4c6184f1 294596 bind9-dev_9.20.21-1~deb13u1_armel.deb
 c89a8dd54d689899d043e72e242a59cf3cbece0a 392768 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armel.deb
 10803ad14d974da73db0a841dc14669f20a90893 155716 bind9-dnsutils_9.20.21-1~deb13u1_armel.deb
 c20c6eaaeb8f67f3d86068ad60cbc4e41e5cde66 103568 bind9-host-dbgsym_9.20.21-1~deb13u1_armel.deb
 603cd36bc9835027401da3ae0dfaffeb2a21e015 52536 bind9-host_9.20.21-1~deb13u1_armel.deb
 f3e7eb17affe1418d3c684c0b0147f98519d91ef 4083644 bind9-libs-dbgsym_9.20.21-1~deb13u1_armel.deb
 62adb2d149963c413e50420fe47a69d8af8c5eeb 1077992 bind9-libs_9.20.21-1~deb13u1_armel.deb
 ebbae64035da178a9cfe3f98fecec06d047a7f74 376124 bind9-utils-dbgsym_9.20.21-1~deb13u1_armel.deb
 0c9ea9f73fde804f37c3edd6683fab5824f16901 172740 bind9-utils_9.20.21-1~deb13u1_armel.deb
 f95a64b14afa713dc436466ae5cd9f9ca4604d92 10206 bind9_9.20.21-1~deb13u1_armel-buildd.buildinfo
 1b880448e51c4d601f3995c4e6fa8b955fba0bd7 238140 bind9_9.20.21-1~deb13u1_armel.deb
Checksums-Sha256:
 453681adc1da1bb44a2c3bac344014728c68efe245d2d3cc10b0dfd3aa0b3119 646852 bind9-dbgsym_9.20.21-1~deb13u1_armel.deb
 b8f70e2f4fe8cbb38ad0c0dc3782387cba67b4b9b9deb2445edec267be06d44c 294596 bind9-dev_9.20.21-1~deb13u1_armel.deb
 391e4523d2acf803c9a9a4070f9466e3f64828e60d2edbd2c87acf814b48c80b 392768 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armel.deb
 6c80faaa07d1d0b604ddf8907099b8a880a0b50dcad739e7be7aeb370a5d417c 155716 bind9-dnsutils_9.20.21-1~deb13u1_armel.deb
 5e92c8e20c81bd128108a3b9f7c3fcfe08fa1d75f6590a011c08b822a4c33455 103568 bind9-host-dbgsym_9.20.21-1~deb13u1_armel.deb
 a5d51c4fc3c1a50841a8bf616cd368e48550b9dd52e8304f4b0e9bb0ab75f0ea 52536 bind9-host_9.20.21-1~deb13u1_armel.deb
 eb5ea4dba708a87ba27ebfb6083ae574c76a708ca7481dae26e92fa94f299317 4083644 bind9-libs-dbgsym_9.20.21-1~deb13u1_armel.deb
 51b588a79554c925aaec10f9f5760640ec6b00a543bfc22e57e7f7b52e55c256 1077992 bind9-libs_9.20.21-1~deb13u1_armel.deb
 586fc512b7575903f3c75c517ade3daa4f5df8b1811c37c55626dfc4f0f41bee 376124 bind9-utils-dbgsym_9.20.21-1~deb13u1_armel.deb
 c71709f16514125e078e6566b452958e44f5022badde104d6c98f669f3be15ec 172740 bind9-utils_9.20.21-1~deb13u1_armel.deb
 1c440e4a8938e34d6979def833a23211fde6ee27e3297ea8389355840b505a85 10206 bind9_9.20.21-1~deb13u1_armel-buildd.buildinfo
 b3e5eaaccdb4211421de553bb5f2962ac0876193d814032c1da913311fda49cd 238140 bind9_9.20.21-1~deb13u1_armel.deb
Files:
 7014c66e8225c1369701370e813b5ae9 646852 debug optional bind9-dbgsym_9.20.21-1~deb13u1_armel.deb
 84b5f5c101c6bd2a9e865c9c014ad182 294596 devel optional bind9-dev_9.20.21-1~deb13u1_armel.deb
 7085797c318819c063275c36077e6116 392768 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armel.deb
 62cffad37f433f5fa7417ad8016bd07c 155716 net standard bind9-dnsutils_9.20.21-1~deb13u1_armel.deb
 496ba775dcd0bc718736b82e2ceb4f0f 103568 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_armel.deb
 33b9d6fe0264cb2e6946e0081b65335a 52536 net standard bind9-host_9.20.21-1~deb13u1_armel.deb
 6e7f5916d595ef24808890824aa1c0c4 4083644 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_armel.deb
 29d43427a77ff10f0090d59ab3b171d3 1077992 libs standard bind9-libs_9.20.21-1~deb13u1_armel.deb
 a7170411e472597aba6982761c5b0a94 376124 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_armel.deb
 d6c6406d1609bcc21d2d440888e4bc2e 172740 net optional bind9-utils_9.20.21-1~deb13u1_armel.deb
 7e5e894f8aceeb98f9e2727090b00b07 10206 net optional bind9_9.20.21-1~deb13u1_armel-buildd.buildinfo
 29cc29d796d08139d5ee0dda18ce9289 238140 net optional bind9_9.20.21-1~deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=6kI3
-----END PGP SIGNATURE-----