-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: arm64
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 768e33c9abb6752449dc37bf384a69ff3913aea8 691440 bind9-dbgsym_9.20.21-1~deb13u1_arm64.deb
 bf78279b99757ca93701510a542ec5da05654e2a 294596 bind9-dev_9.20.21-1~deb13u1_arm64.deb
 9affcbfe8fa77cac871a9b0920caa6a9c41e54ef 433684 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 3f06d0d8d609eaf5c7f56f021f1f30dfc4a003d2 157904 bind9-dnsutils_9.20.21-1~deb13u1_arm64.deb
 001d54b94b7acc3fa40d72b880541134fa17f18c 104660 bind9-host-dbgsym_9.20.21-1~deb13u1_arm64.deb
 f0e2d018f92ad10e4d33a4567efe2f8cb07d890d 53172 bind9-host_9.20.21-1~deb13u1_arm64.deb
 e1833ba33ba32709e1bafb580466e793d93793b8 4152160 bind9-libs-dbgsym_9.20.21-1~deb13u1_arm64.deb
 8a806df801d9a7a798a1bd5d144ad078bf551dca 1105184 bind9-libs_9.20.21-1~deb13u1_arm64.deb
 8cdf55fe3d8908ee75ad5f6cfad247d6c32b2fa9 500900 bind9-utils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 62ab5419a40c14f64ab382a8cf93d29b5f0e0ecd 174072 bind9-utils_9.20.21-1~deb13u1_arm64.deb
 259b7111889912a4fd8a3506240fc2b0823e9519 10344 bind9_9.20.21-1~deb13u1_arm64-buildd.buildinfo
 ce0e39d5376092a4d9e832cfd2544988b7c930ca 237684 bind9_9.20.21-1~deb13u1_arm64.deb
Checksums-Sha256:
 4e1062e9a6f2428f636e9c4c48eb5c929a137665e0df85fb89093c82e813f93c 691440 bind9-dbgsym_9.20.21-1~deb13u1_arm64.deb
 89eb44ba5eb244333774ff918c82fa811511a0f3b42a0ef1965dd816d4a31461 294596 bind9-dev_9.20.21-1~deb13u1_arm64.deb
 a7601fe772914337ca4aa18b8820cf2bf8b89774865e97415d6e02084ec94c8f 433684 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 42182fbfd9e9840f754f2ceed3d3b1faca9d56af05471f62ec007dc7d61db6f9 157904 bind9-dnsutils_9.20.21-1~deb13u1_arm64.deb
 e6ca2a07e4cd196fd7f4a1696faa15194a625eae574e818d8256701824b1d646 104660 bind9-host-dbgsym_9.20.21-1~deb13u1_arm64.deb
 e0af53674170fa43ad13edd899282ddcb2961e3a0330015fc246dc7cfe342c35 53172 bind9-host_9.20.21-1~deb13u1_arm64.deb
 75852440edb88b50ee455a563dd380d109562d26858e424cf8206dd6a2c89e5f 4152160 bind9-libs-dbgsym_9.20.21-1~deb13u1_arm64.deb
 921e1b4d916665a4662f469ef66a8f901af92f70d8d6fdab78672cb28f21ec8d 1105184 bind9-libs_9.20.21-1~deb13u1_arm64.deb
 6076786e2cb8ff27e612d39d48d3e866b895485bed7679bd05f0f8a9a2b35a5a 500900 bind9-utils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 db74b8e20f9f6f3d10f40a079216469615376e5561ac78957a9331872a98fa8d 174072 bind9-utils_9.20.21-1~deb13u1_arm64.deb
 4f926b862b5bc632db7a9394912cc070dd90ca81116ebc0bfa1ef707779e9270 10344 bind9_9.20.21-1~deb13u1_arm64-buildd.buildinfo
 a5e5b6a9acab4818feee4af80168ec73c4e553905516534878dfb1e75aa729ed 237684 bind9_9.20.21-1~deb13u1_arm64.deb
Files:
 d19202bc43e62a86c9a5a72a523a483b 691440 debug optional bind9-dbgsym_9.20.21-1~deb13u1_arm64.deb
 42a510dbdd4a332004920cbddb65a7b3 294596 devel optional bind9-dev_9.20.21-1~deb13u1_arm64.deb
 4a39c6a5c01eb306dd0b0e40df3e0f6e 433684 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 c18f3084a95202c3ad138ba8ce78c2a8 157904 net standard bind9-dnsutils_9.20.21-1~deb13u1_arm64.deb
 033cf70d802068217bebdedf6db8885d 104660 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_arm64.deb
 45961280b8c0ce6fbac77eb2a9ad536a 53172 net standard bind9-host_9.20.21-1~deb13u1_arm64.deb
 6bc5c70d315e4e6a0df09c70c7564d9c 4152160 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_arm64.deb
 c312f6e31823b420a81c4258643c3fc9 1105184 libs standard bind9-libs_9.20.21-1~deb13u1_arm64.deb
 e2ac8d9a480216acf0b390b43aacecba 500900 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_arm64.deb
 c0b2ab5faf9b3cd15dc8defa336e4281 174072 net optional bind9-utils_9.20.21-1~deb13u1_arm64.deb
 6f3e0a909e30474d2d819d431deb083e 10344 net optional bind9_9.20.21-1~deb13u1_arm64-buildd.buildinfo
 edf6056f25c270bc31f58eee75b31d12 237684 net optional bind9_9.20.21-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=FuGb
-----END PGP SIGNATURE-----