-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: arm64
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 453c3c2377a7e833b930fe22deac15ea4793bb4b 691364 bind9-dbgsym_9.20.29-1~deb13u1_arm64.deb
 60394a708fd7c8799866cb9ca5a4c4cd0d68eaa4 297296 bind9-dev_9.20.29-1~deb13u1_arm64.deb
 11408a854f3dde02323f5fc2b011633451cfadfb 436400 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 aa4b119419875acb93cb09b345241154f08fd98b 159508 bind9-dnsutils_9.20.29-1~deb13u1_arm64.deb
 d397210c2523e41609b9cd52d2855896f03a5981 105312 bind9-host-dbgsym_9.20.29-1~deb13u1_arm64.deb
 6c57f945be87b7c3b7128b20b517761fde7878b8 53784 bind9-host_9.20.29-1~deb13u1_arm64.deb
 36f9e58cec67bad6007066ab502713adfcd7968c 4175796 bind9-libs-dbgsym_9.20.29-1~deb13u1_arm64.deb
 e5915b41d6407e4120ca066eb021c5e11c32726e 1113892 bind9-libs_9.20.29-1~deb13u1_arm64.deb
 bddded149aea552899ca7ae4d5a1922135b78640 507484 bind9-utils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 cf5cd0277f15f89454fac0d58e07dcfffe36cf34 175908 bind9-utils_9.20.29-1~deb13u1_arm64.deb
 b0ab82d8ede77bf4336d1392655e8df7ded8a773 10631 bind9_9.20.29-1~deb13u1_arm64-buildd.buildinfo
 b9e625df313f88f2b176c92bc72aeeeb61cfb4e6 239052 bind9_9.20.29-1~deb13u1_arm64.deb
Checksums-Sha256:
 d150e740872b2f4461fccc2b69a6f358230b51415b0cb919367a4037e9869d8c 691364 bind9-dbgsym_9.20.29-1~deb13u1_arm64.deb
 a884d7d50d02b6c48b24fb9ad3326ae74a0898b1f51958a79a2c893df19fb58b 297296 bind9-dev_9.20.29-1~deb13u1_arm64.deb
 5f9a58ef23fc562292a43bbd50f840cf59c0b8332ce6ac9f942147111b971304 436400 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 57566ff215207ea0f6dad1261f6e73b07cf7cfcc8c2a1564836384d46718815b 159508 bind9-dnsutils_9.20.29-1~deb13u1_arm64.deb
 592a230ac3d6bac20143ba180786ae82f86118d6ae1db0e8bbc55b450e26cc63 105312 bind9-host-dbgsym_9.20.29-1~deb13u1_arm64.deb
 03937b1c88147062cd2ae0d24dd0abba81c99b8ee6ea885e5322bf5953415920 53784 bind9-host_9.20.29-1~deb13u1_arm64.deb
 46b713f0a374e8a0b78bab5c19ad139d72b6ab348622fc159537a4bde6a44b4f 4175796 bind9-libs-dbgsym_9.20.29-1~deb13u1_arm64.deb
 990bfa085e893f3881c63c7802ffbc4c0a92395e0e420262e93c3febc9243d6c 1113892 bind9-libs_9.20.29-1~deb13u1_arm64.deb
 9b226601ed11d955243e24aa5a534ff39923eece707c8f70c474c5a8be82d85b 507484 bind9-utils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 4e1ca305eeabe3d9e6bac03bd7afcef5ec9be8c15f6bfab968ad9a797ecddceb 175908 bind9-utils_9.20.29-1~deb13u1_arm64.deb
 084984b1462b119044748312fa11e15c23ce1621d41a13af023e24bfa4b9f556 10631 bind9_9.20.29-1~deb13u1_arm64-buildd.buildinfo
 6e81f774d5f906aefb2020c32ce788f1fb63ae8b50cae04fc989892ed2d563f4 239052 bind9_9.20.29-1~deb13u1_arm64.deb
Files:
 92cc6b68a94a91d213bbd7c3c5970b9b 691364 debug optional bind9-dbgsym_9.20.29-1~deb13u1_arm64.deb
 eca2ef04feaf5e6e121f7e712c02fb54 297296 devel optional bind9-dev_9.20.29-1~deb13u1_arm64.deb
 e5b22c28fbf84605a8855cbaabb6fe27 436400 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 b2e4e429a75dfab85c1b3faf2a2cefbe 159508 net standard bind9-dnsutils_9.20.29-1~deb13u1_arm64.deb
 d602fe5c366e9e96d6303e345969a9aa 105312 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_arm64.deb
 f0112dae911c2e6cd3507ce362978b43 53784 net standard bind9-host_9.20.29-1~deb13u1_arm64.deb
 6ad7411ec78dfae6111c9565efc19047 4175796 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_arm64.deb
 06383686659de61f625e9bbbad23b0cf 1113892 libs standard bind9-libs_9.20.29-1~deb13u1_arm64.deb
 9afd51908b4f266d2bf3bd36a6f2cce3 507484 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_arm64.deb
 3577266d18eb013e3e64d38fe5f8d986 175908 net optional bind9-utils_9.20.29-1~deb13u1_arm64.deb
 b9c8b9c54d478308f947df1ba3ecefdb 10631 net optional bind9_9.20.29-1~deb13u1_arm64-buildd.buildinfo
 f120a842494c5e84a5b3c6fbff8427fc 239052 net optional bind9_9.20.29-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=O0l4
-----END PGP SIGNATURE-----