-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Architecture: source
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 8ceb389211d7d055250027e5ede74601f5151cbf 3197 bind9_9.20.21-1~deb13u1.dsc
 c0cb690b194041de2deb760dfb23658a06b409d4 5808576 bind9_9.20.21.orig.tar.xz
 b94c74cbf263c588970053c534c2c2b45609cd85 833 bind9_9.20.21.orig.tar.xz.asc
 bb219fb2e3e2f42e4282c9b2e1aa5edab1bffefa 62100 bind9_9.20.21-1~deb13u1.debian.tar.xz
 c9568018a4d3a1262163ede9a09f7713ee90a02d 14828 bind9_9.20.21-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
 72eac2084f3e365f4ea2c8346cd4449053e07b5eb3c893dd15af4f0dd89fdd6e 3197 bind9_9.20.21-1~deb13u1.dsc
 15e1b5a227d2890f7c4e823a6ea018de70ee2f3a0e859cbff3d82aad8590de03 5808576 bind9_9.20.21.orig.tar.xz
 95b2b9ac3b6f216d69a086d97da7feabb68e25d2ed264dc4049de7c6be61de5c 833 bind9_9.20.21.orig.tar.xz.asc
 fd83209c4aed3e66f8164cbee11e648c48504a399e87491b28207f3bf803a223 62100 bind9_9.20.21-1~deb13u1.debian.tar.xz
 788e7da5c4d02cb9fdd9bb8188a2637fdadddc80def6e6924836956c98a4567d 14828 bind9_9.20.21-1~deb13u1_amd64.buildinfo
Files:
 13d4c3260c4c1a7825b387ea60ab6244 3197 net optional bind9_9.20.21-1~deb13u1.dsc
 b571adbe3bf1c5d1352a68ee29fa383d 5808576 net optional bind9_9.20.21.orig.tar.xz
 00fb797da3782eca399bc1ffe36038c2 833 net optional bind9_9.20.21.orig.tar.xz.asc
 9bee059326fe1533b6c1f1c5e7c7b8bb 62100 net optional bind9_9.20.21-1~deb13u1.debian.tar.xz
 e3ac2fd638fbe66580fbbd0c9dbc4287 14828 net optional bind9_9.20.21-1~deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=07ez
-----END PGP SIGNATURE-----