-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: i386
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 6b7f9b82b9d82e54815887ab18c0fbe75cae9209 613592 bind9-dbgsym_9.20.29-1~deb13u1_i386.deb
 7f803fd966c2643948dd2b6521ff24479d57738f 297300 bind9-dev_9.20.29-1~deb13u1_i386.deb
 0161113865c576edc26848bc0cc8e0306a17ed4e 393880 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_i386.deb
 50ba0584e2641d6b4cf56e726d86df269b90ae12 171552 bind9-dnsutils_9.20.29-1~deb13u1_i386.deb
 32c3acacdded2fae35d6d233f0998d2610729d6a 94440 bind9-host-dbgsym_9.20.29-1~deb13u1_i386.deb
 39ba3b308e48809358025653675c8e0c28c7d768 58288 bind9-host_9.20.29-1~deb13u1_i386.deb
 7901d728abe12bffcc3100539f5186cfcd381304 3557804 bind9-libs-dbgsym_9.20.29-1~deb13u1_i386.deb
 49a40590ff61b86f43cc5cd368a0050f7afe90ec 1331244 bind9-libs_9.20.29-1~deb13u1_i386.deb
 de5215c82734a3313660fc81d564fd238822b6ca 453148 bind9-utils-dbgsym_9.20.29-1~deb13u1_i386.deb
 1406b8c0fe99194a59f96b29bae02447d5953b57 187424 bind9-utils_9.20.29-1~deb13u1_i386.deb
 7d9b5011d8b5684a0b73acb5393734ea34adf357 10515 bind9_9.20.29-1~deb13u1_i386-buildd.buildinfo
 81ffb04a2ce52f7e949ab96c836a5b8a8e00172f 271064 bind9_9.20.29-1~deb13u1_i386.deb
Checksums-Sha256:
 a6df1551c59ef7dafab8412f376b7e331dd88359e2819367e343bed4b0b15d5c 613592 bind9-dbgsym_9.20.29-1~deb13u1_i386.deb
 cadf47335ad4ead33d6b6d15bcff1742e63a4b6f958a4be39e5b25025c33ee4d 297300 bind9-dev_9.20.29-1~deb13u1_i386.deb
 d0d2afe3b2b5fb4fc12458d3393a2da09a3cf1ac5e0838d04ff58d85c5904fab 393880 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_i386.deb
 b457dd87efdcee2b4e63768fdab6279a4612ede52d8d9e64fe07a8d38476c2b5 171552 bind9-dnsutils_9.20.29-1~deb13u1_i386.deb
 16f0b3b334f7aff065b3f6c231ca0556490e8d25fd0d675bd51c2616890478b5 94440 bind9-host-dbgsym_9.20.29-1~deb13u1_i386.deb
 017f4d17f621b0707f41ee2c2bd01b173ff765ee228f23823008acf31e9f009c 58288 bind9-host_9.20.29-1~deb13u1_i386.deb
 3b0c6ca06b9d19f4be3dc960b83898f6d8170db74d6293e0ce976c5313f904f1 3557804 bind9-libs-dbgsym_9.20.29-1~deb13u1_i386.deb
 b3fdd9f9d457c02412ede622d8071f1e009085b64abbf7505718ad09405c1b8a 1331244 bind9-libs_9.20.29-1~deb13u1_i386.deb
 7308d1b9b91faae70928702d605ce7cc5b12850e9a0f0c3e32d8ea061aa79b28 453148 bind9-utils-dbgsym_9.20.29-1~deb13u1_i386.deb
 eb895b69fed20fd49e06b542c67fb54cdb44919e5922c905e297b59d7f9c8bee 187424 bind9-utils_9.20.29-1~deb13u1_i386.deb
 cf369b51809e940f74ce452be3e8069f41a7a2496d53d141fa9951ef54f776ed 10515 bind9_9.20.29-1~deb13u1_i386-buildd.buildinfo
 9b2857df5a79858b41670558e74a0d80578cfc74d4c16ec2883bc425eb16343e 271064 bind9_9.20.29-1~deb13u1_i386.deb
Files:
 a76daae3019db02300c1b349ee3034b2 613592 debug optional bind9-dbgsym_9.20.29-1~deb13u1_i386.deb
 47b9c363c41e7200eb4662606ebb80d8 297300 devel optional bind9-dev_9.20.29-1~deb13u1_i386.deb
 443dc0a96fdc6429a9e7b405e3e4e778 393880 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_i386.deb
 aaaba77ba99d023cc307aab891bcc31f 171552 net standard bind9-dnsutils_9.20.29-1~deb13u1_i386.deb
 283beaed72ce502a13578537ff422fcc 94440 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_i386.deb
 3a67941bf10bb2b30cac0e3e0e3589a2 58288 net standard bind9-host_9.20.29-1~deb13u1_i386.deb
 86988e227fe0617e4d8096243b5dfa83 3557804 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_i386.deb
 58299108d424f6bba02ad90b7e63e761 1331244 libs standard bind9-libs_9.20.29-1~deb13u1_i386.deb
 4245bd1dda386e233a90f9a2b0a1af87 453148 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_i386.deb
 ee763da73e3d67f9bd1bf62a5e19077c 187424 net optional bind9-utils_9.20.29-1~deb13u1_i386.deb
 fb5eec0a853f412fc0621837cbaa8bdb 10515 net optional bind9_9.20.29-1~deb13u1_i386-buildd.buildinfo
 11fd4aa995edd6413b0645c6090c6e6d 271064 net optional bind9_9.20.29-1~deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=1yMx
-----END PGP SIGNATURE-----