-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armhf
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 cde7cd218c709fe6eb89374cd119b6324a02e51b 653852 bind9-dbgsym_9.20.29-1~deb13u1_armhf.deb
 edd76d1ff53d083e82becc913705d7bc6971aec3 297304 bind9-dev_9.20.29-1~deb13u1_armhf.deb
 d92566ea55018a812ed4ea6a8f249f8c5abd174b 397112 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 0ab76b63487ce5e62f899a55bd3126dc2360eb1c 157784 bind9-dnsutils_9.20.29-1~deb13u1_armhf.deb
 4cebead1b870d07d2cac89219876a38cfc0a2fc4 104112 bind9-host-dbgsym_9.20.29-1~deb13u1_armhf.deb
 d243d76cf35ac63564f08ceb92e9bf16d3c82483 52744 bind9-host_9.20.29-1~deb13u1_armhf.deb
 0bf5a4861f5afd18f0a272ac9149a8e3ad57f571 4144072 bind9-libs-dbgsym_9.20.29-1~deb13u1_armhf.deb
 429a863907892529bc3e7fc2e4d278d5a61506af 1114316 bind9-libs_9.20.29-1~deb13u1_armhf.deb
 4cfcfced028352544c76c6825bfa80f59de3edb2 382932 bind9-utils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 bf581377d1285b48c1819d09326173969a74377f 176820 bind9-utils_9.20.29-1~deb13u1_armhf.deb
 6f9bb62c4aefd8a23071190bfce9d9efa9ce2bc8 10510 bind9_9.20.29-1~deb13u1_armhf-buildd.buildinfo
 2871af908f852da23a2071304c1513ef89f37e24 244692 bind9_9.20.29-1~deb13u1_armhf.deb
Checksums-Sha256:
 43134c9b64136dd305b31964510f500f6296a5bdb9e970fec3b5bc238f5d7219 653852 bind9-dbgsym_9.20.29-1~deb13u1_armhf.deb
 9bccf1ee5b29fa1701aaddb0ae0b0678a0e417420da4420ccec4d00a7084ccce 297304 bind9-dev_9.20.29-1~deb13u1_armhf.deb
 c4d6426f796358df6079d04f9424643287aadfc0793d204758a3ce3139d5c4c0 397112 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 0c7cb480424407bf7acaae4d37c6c75a02c1480a1cda17bee81e15f9cf6e8a45 157784 bind9-dnsutils_9.20.29-1~deb13u1_armhf.deb
 2b56dd46b3ca8863952ead0c50ab6b2e5c0c36d8add511cf8bdaa55a6e696257 104112 bind9-host-dbgsym_9.20.29-1~deb13u1_armhf.deb
 9609db6bd503e57fcab9ed85473c7405f98ebbc305f71a5364072b22163d6e6e 52744 bind9-host_9.20.29-1~deb13u1_armhf.deb
 c36438be72777494bcca4e94400467c148a509301abe6e63329acf2347df3cc2 4144072 bind9-libs-dbgsym_9.20.29-1~deb13u1_armhf.deb
 8bab936b74135568a2e32d12cd0b4e324aa495bf186d69958f9fe127b9ad655c 1114316 bind9-libs_9.20.29-1~deb13u1_armhf.deb
 ff4eddaef000a06bb63c426c138d70d13fe281ae1d6de097f216a25f3b16ebec 382932 bind9-utils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 8a47e9ce07dbf72c99ef4fbc5ff9515e6fa305574f00ae49a7e4de087e43d69a 176820 bind9-utils_9.20.29-1~deb13u1_armhf.deb
 abf201e5ea6f5ef7732e551362b77b7c83032fad2999358778b979c342dcc8ff 10510 bind9_9.20.29-1~deb13u1_armhf-buildd.buildinfo
 c593379f77ebf2defde9a4280cd3eede20332cf68e5adab96df7356800aa2795 244692 bind9_9.20.29-1~deb13u1_armhf.deb
Files:
 c7d130c9e822ad05b2a8e1554a9bb1a8 653852 debug optional bind9-dbgsym_9.20.29-1~deb13u1_armhf.deb
 55567bc88dc04aaec9659a4cb4227954 297304 devel optional bind9-dev_9.20.29-1~deb13u1_armhf.deb
 f3a95febc099f2a78c9d1663f1364e16 397112 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 b448584912a6269017b2e4f22e91dc2a 157784 net standard bind9-dnsutils_9.20.29-1~deb13u1_armhf.deb
 51116fa5ec210f89ceec857b7f35a587 104112 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_armhf.deb
 b6785319a01517539c33fbfe3146570f 52744 net standard bind9-host_9.20.29-1~deb13u1_armhf.deb
 ded9b7bcdbb73961a336b8fe39bb5473 4144072 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_armhf.deb
 ad88cf8377fc44e577b223b3083e47a5 1114316 libs standard bind9-libs_9.20.29-1~deb13u1_armhf.deb
 f59b8f461656ab4bffa2fdc465a14963 382932 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_armhf.deb
 7e91174effe2392ec2f352ae8f7ba920 176820 net optional bind9-utils_9.20.29-1~deb13u1_armhf.deb
 9a58d0e3bfb7eb759c5d736450140d45 10510 net optional bind9_9.20.29-1~deb13u1_armhf-buildd.buildinfo
 83dbef500fbbaae90961695deedaaed7 244692 net optional bind9_9.20.29-1~deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=Z9Im
-----END PGP SIGNATURE-----