-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9-doc
Architecture: all
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9-doc  - Documentation for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 222b9f068b11d82b6f27ac644a1d46c4522118f4 3649276 bind9-doc_9.20.29-1~deb13u1_all.deb
 626cc1d32f43f64429061c41ac5352284de8e79f 11456 bind9_9.20.29-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 338360e381edb5ded77a306213045ac23ad59f265ebbe1da5ca52b71212b2d11 3649276 bind9-doc_9.20.29-1~deb13u1_all.deb
 b1a4c5e0efabc5235529287aeb060e642454128bfec3a5a33e572df7355d38b5 11456 bind9_9.20.29-1~deb13u1_all-buildd.buildinfo
Files:
 8c5cab5c736e26cd21b1d2b98f2fcf8d 3649276 doc optional bind9-doc_9.20.29-1~deb13u1_all.deb
 963c790b8b654518d49778dec04639e1 11456 net optional bind9_9.20.29-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=2U8t
-----END PGP SIGNATURE-----