-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: riscv64
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 cc01e7986298623a502402bca6c7efa2e65ce736 672728 bind9-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 cca5f1930bea477d5dd2285d82ad8bc727ab3bef 297296 bind9-dev_9.20.29-1~deb13u1_riscv64.deb
 b7cd57ea94c660d914b4609bf7710dc1f5182f55 426960 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 710d7d024729408492b3476478e7dab21d5c9bf2 168200 bind9-dnsutils_9.20.29-1~deb13u1_riscv64.deb
 6b12ed0f4ee717a7f88976b1b99e3a96a742462d 103412 bind9-host-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 2f56ce936ba531835de3390a65944f4ef6fd568a 56984 bind9-host_9.20.29-1~deb13u1_riscv64.deb
 5593d338f08af079eea490fe6d81e69a56c34628 4026200 bind9-libs-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 398a9488bf6ccc73b285fc5369fcccb01a3d7de1 1272340 bind9-libs_9.20.29-1~deb13u1_riscv64.deb
 8e874d12920192aa293d1ab1eb9eafb2991d9969 495784 bind9-utils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 3c97e7005b4e7a40be4f9747a7fe6a000ef319d3 182880 bind9-utils_9.20.29-1~deb13u1_riscv64.deb
 8d4a670d68724a8dc65c502127b6e1578632c591 10642 bind9_9.20.29-1~deb13u1_riscv64-buildd.buildinfo
 1f37797f3eb31753d72830c0d5677c07dd886019 254800 bind9_9.20.29-1~deb13u1_riscv64.deb
Checksums-Sha256:
 ea11c21c4f5f8bb4c870587b5364ffcb6fd0524279c74eb5a92b3fcf22fef1f3 672728 bind9-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 a017b02376c1ac86ed6ba036444fd9900a62b2cbb733f33f136c8cadbe548304 297296 bind9-dev_9.20.29-1~deb13u1_riscv64.deb
 2ae2ccc4accfe96e8c476138e72c14eeb527ae3440504d07effeebbea324091c 426960 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 0fbb55401798fdb0d2b0af987438b401b343c137bcc88a80303cb8d92ee9ecb8 168200 bind9-dnsutils_9.20.29-1~deb13u1_riscv64.deb
 89baedd42b81540a9b4cde654b39e4c11df94353e464206e922e559397e22374 103412 bind9-host-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 4cdbe7760b5cf7e3a716042946a53b1c3269e82cb2421880057e22338be00145 56984 bind9-host_9.20.29-1~deb13u1_riscv64.deb
 82e0cdb9142cce0003bb2e8c62716afd808d2ce03f2ddd2cc001a61cf01658d5 4026200 bind9-libs-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 b4f90c60aef9d25fa5b22b099480c2d2807c80cca20156266dd422e52252f324 1272340 bind9-libs_9.20.29-1~deb13u1_riscv64.deb
 ae20ce4860398caf57a500974bb31336463a027cb37780074e735d0e96572d1e 495784 bind9-utils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 64a10c78daef14156a445956340dd201e038b1df2b9d2a4b0566f8de75fe29f2 182880 bind9-utils_9.20.29-1~deb13u1_riscv64.deb
 b7fbf92d812665b8ea927820d0e0118b33fa7c9960fe415f864e4a2a158566c4 10642 bind9_9.20.29-1~deb13u1_riscv64-buildd.buildinfo
 dc055af5812b09ce0d94d1ba3edea166a3d8ae1c2c05f335b69a194c60e70557 254800 bind9_9.20.29-1~deb13u1_riscv64.deb
Files:
 a3adebf0e528d3968dc47749f5529af2 672728 debug optional bind9-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 e6b0f9808024bbe1f37d1dbb66a5c5b6 297296 devel optional bind9-dev_9.20.29-1~deb13u1_riscv64.deb
 216e6e9389fa40d03815f27baadf4d0e 426960 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 289ca643554e270f93af1f7b568d3b52 168200 net standard bind9-dnsutils_9.20.29-1~deb13u1_riscv64.deb
 7eabaf2919e611da5149500afae8c927 103412 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 f6a78bc0f5086c5c68f3c656f170eb0b 56984 net standard bind9-host_9.20.29-1~deb13u1_riscv64.deb
 fd4345508814ca4da91f2bcc933877db 4026200 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 f6ffb968cc00fd8e2dcf2b40b2440af1 1272340 libs standard bind9-libs_9.20.29-1~deb13u1_riscv64.deb
 772ad188a61820d26b742e431bd03735 495784 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_riscv64.deb
 955a9ba46336cad629053398ea4b1483 182880 net optional bind9-utils_9.20.29-1~deb13u1_riscv64.deb
 b2e6951a8aef6c790b6fa8f1805f60b7 10642 net optional bind9_9.20.29-1~deb13u1_riscv64-buildd.buildinfo
 c52feea5b51a6a980a6b10a316a714f6 254800 net optional bind9_9.20.29-1~deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmqqtqwACgkQIhSPlPtg
qxmAaQ/+IIbrolPIPJ6A8IQufUKijtI7EDGmg22u4UTLt71mo1OLsnPnYdE3gJBX
Q4XvYpGtVZmVVZxorbgfdl8phnH9881zMu6kMFmoOs3UE7vFeESCf/cb2cnRL8nP
qA6rA5K/uyNPgkMW52UCd87T2Hws14+GUw2N2sFvftbYPm6TkZIDr5Oc7W8Ia7Xg
D9bxtxNUaRIWWs6hRKgguJ/1r1uXtMpqiq2pfiqk0o5QEddsh+NNDfrx+NySsN4x
AcKzLLD0Sy/4YuoJ4NDTVPI51kzbhdGhw0go4RfQWQemn652qtIKtFFcJXIzpYML
V8nTvtzi1tF+OJWTCzM5Ul1r0VIc23xOwxut3IrLuEscDLCG66ff1DNJymLKcbQr
PWgbaLyAbpSXSRERN3zXgrOvqIG9AgmbUsKOOAuh5Gt9LhbcYkXp16nyEa0+pUZN
1y6tSraYP32Ua+CpjVIBoSYGP/kySMxJWVwZzQOwVwBKWFg7LHgH4evdLaTg0jt1
B41+du55oB/UQ02RI6TsLsfkSbHUGfYWAtt2avUeVx7n9HBlMe9UgSrToeh7t/zg
vmZNnAovO/Ux+/OjH55TfxY272pBD9YZf9niyTF/4UV+R2EHVi6O/cAjmzHZLp8t
aEE9mueP4CtCSrEDjQRsFQJiJsseE40SZx1W9LjdSdnEjJyWoDo=
=iIFa
-----END PGP SIGNATURE-----