-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: s390x
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 f3573ae9c1ec9e0d5ae439c91496f5070309bf9d 653312 bind9-dbgsym_9.20.21-1~deb13u1_s390x.deb
 fe02226967c3a115f374a8cde2e47570aa5cb89a 294604 bind9-dev_9.20.21-1~deb13u1_s390x.deb
 7ce02b34b0a597f6c47307948e25e68ee34852e7 399984 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 78003b2bc571f802a89257a3ff5dc09478022fe1 159200 bind9-dnsutils_9.20.21-1~deb13u1_s390x.deb
 bb87c93d6e7dbeb75723b9cdec714d9100ee38d2 104676 bind9-host-dbgsym_9.20.21-1~deb13u1_s390x.deb
 a6d49e5b8e981f5e0943650f10852f26e3473cda 53380 bind9-host_9.20.21-1~deb13u1_s390x.deb
 da5c7388dc2c0ca8c7564c37bf6a2f896b653bcc 4165004 bind9-libs-dbgsym_9.20.21-1~deb13u1_s390x.deb
 90fc01f5b7e8ddee9ffb6fff2eb906352db170ad 1151976 bind9-libs_9.20.21-1~deb13u1_s390x.deb
 41ceff9bfb26e3878c123fd4a4801370fb072a0c 386880 bind9-utils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 d7886c2dbedda11d3532fe95de95c297ad1f36b3 177360 bind9-utils_9.20.21-1~deb13u1_s390x.deb
 83946f2e2e1cee94fd72aa4c6a4f5221a5edb41d 10216 bind9_9.20.21-1~deb13u1_s390x-buildd.buildinfo
 e107d28dd3938f806b1c981d6affb06a68e1579d 243172 bind9_9.20.21-1~deb13u1_s390x.deb
Checksums-Sha256:
 397fb266b4cc1a40fe4210537ea92b5074f3e27c24f5df1d890b66e37e8d21aa 653312 bind9-dbgsym_9.20.21-1~deb13u1_s390x.deb
 7af3efeeb3152839b6b40726b3127e73acb319de60b1e6197e27ba03d54ad0d7 294604 bind9-dev_9.20.21-1~deb13u1_s390x.deb
 abf000d91538274188326674ade5e3c13a010bcce4ae2a2a5bdf0be7092e14db 399984 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 f40a83b59c18a6522e2dd2e77132af3fcfec59892cee70a2d90280388b507522 159200 bind9-dnsutils_9.20.21-1~deb13u1_s390x.deb
 90e9c4b7bfe797c66c8ddec38ce6093570f6bf287be527717322a1bd2399440b 104676 bind9-host-dbgsym_9.20.21-1~deb13u1_s390x.deb
 7c12c2a267b563c8b2e01a1a1f1938f1aea7a484ccdd71a353c99de8ceb454ff 53380 bind9-host_9.20.21-1~deb13u1_s390x.deb
 2115a8e16fa7492d682e23429a1c324d1499e1ab7bc3077c01632c0a85d03f44 4165004 bind9-libs-dbgsym_9.20.21-1~deb13u1_s390x.deb
 28feff91f08dfe39faee9e51084aa437fdd0465279c740f204171bd4f0b38396 1151976 bind9-libs_9.20.21-1~deb13u1_s390x.deb
 9a716724bf072eeb778cab561f45053204d650a3b8fbd13d16b08f872ca6b66f 386880 bind9-utils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 1d727553f2b44c2010cdb05f3eea771fb6d645bf8a5ecfb9bd3890a518575cc0 177360 bind9-utils_9.20.21-1~deb13u1_s390x.deb
 a247be0ba187438b4cd0e829203fe14047dd2fc6fd8d336fd41aed641a825943 10216 bind9_9.20.21-1~deb13u1_s390x-buildd.buildinfo
 4011c3ee2501ed538dd0c9bdda82799a46f3d2dcb2ed1901fedaed4939093a50 243172 bind9_9.20.21-1~deb13u1_s390x.deb
Files:
 4259355c8ff868cce1cb447f0e7991ef 653312 debug optional bind9-dbgsym_9.20.21-1~deb13u1_s390x.deb
 39aa2c3b9ecec9c28be9901774fff3c6 294604 devel optional bind9-dev_9.20.21-1~deb13u1_s390x.deb
 d0c4cbc1ffcbad6d4c5260a2a85c0c02 399984 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 a92d6720f25ab4427772844589910ef8 159200 net standard bind9-dnsutils_9.20.21-1~deb13u1_s390x.deb
 2099e35d36a3e24ffe40241cf8e8e9d8 104676 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_s390x.deb
 09a62fcab2a486268a33316055579fd5 53380 net standard bind9-host_9.20.21-1~deb13u1_s390x.deb
 02183716582ead75cdb3291e927efb85 4165004 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_s390x.deb
 f83bec4ade1e99c68d1021a56b6bfeae 1151976 libs standard bind9-libs_9.20.21-1~deb13u1_s390x.deb
 8beb1d1e8c6e15f2dbca0b5375f7a311 386880 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_s390x.deb
 12501a2af068e29f3823d19de3c341e4 177360 net optional bind9-utils_9.20.21-1~deb13u1_s390x.deb
 d1f487a7964b6c09a6911a487f840029 10216 net optional bind9_9.20.21-1~deb13u1_s390x-buildd.buildinfo
 a1b74ca1ef0281087d67df1e288241d0 243172 net optional bind9_9.20.21-1~deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=Lqna
-----END PGP SIGNATURE-----