-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: ppc64el
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 074944fb4a616bd7e3251b353cb79d0bf8162e5f 673088 bind9-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 6114383314087e77980c59806097fed6a092c99a 297296 bind9-dev_9.20.29-1~deb13u1_ppc64el.deb
 f6144c74095cd6a6d03e640bf5b45d913c04b2eb 410384 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 42572edda67e4d8249e31d2ab7e7f133c1b1e841 168476 bind9-dnsutils_9.20.29-1~deb13u1_ppc64el.deb
 e356229f4e2b0463d291a57dd24bb54b89fba250 108300 bind9-host-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 0472be8cf7ffbc66b7c5ea2a28d8432c8fdf39f0 58444 bind9-host_9.20.29-1~deb13u1_ppc64el.deb
 7e8ba2db5741dfc59a8667221c0bddd374bae512 4307544 bind9-libs-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 0a98b610c6668f7409e4359b8bdabc3611bd1f30 1299116 bind9-libs_9.20.29-1~deb13u1_ppc64el.deb
 6572c48065837bf37eb5b99c3450d385d3ca0bd2 394860 bind9-utils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 17594eb5e561ba4b16fb37d24167fef753410b45 187148 bind9-utils_9.20.29-1~deb13u1_ppc64el.deb
 a3b9d23652ef3fea110b0d77a80d4eb5289c6c4d 10697 bind9_9.20.29-1~deb13u1_ppc64el-buildd.buildinfo
 a776188ab6b397d994c186920d91ae3497680472 266508 bind9_9.20.29-1~deb13u1_ppc64el.deb
Checksums-Sha256:
 d4ce01dd7d259fd51d4460d75f98b1a45604fa7d8c6be028d5cb7802d4c3f475 673088 bind9-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 d830f628f76a504dbbf123555a71cd12a9ec27b4db172743e8142c089280e7c6 297296 bind9-dev_9.20.29-1~deb13u1_ppc64el.deb
 7d161562e33df5a302bbd1f6f0fd76dde489b714489c7fbd59bb5f5863dd5b0f 410384 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 582af9244808f84886da970bd500a4f13df65d7930d3f4539d51fbbe0f59ccc5 168476 bind9-dnsutils_9.20.29-1~deb13u1_ppc64el.deb
 b0219135f2157c15d6bbc497a2cff2405c9c2479aee649cbfb8e4dc825672a53 108300 bind9-host-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 b3ad07a5fba093b33fc8e49d8a30dafdb1ab53cbddfde81636110127881dae2a 58444 bind9-host_9.20.29-1~deb13u1_ppc64el.deb
 c6e6e0cc9e686be7d674551ab8cf1543bda0cf5a1f3f8511b6e19945a56f44d3 4307544 bind9-libs-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 511108cc16762bced2c070fdb83e4fd6efe48584f37363feff7c672ebe4d7cd8 1299116 bind9-libs_9.20.29-1~deb13u1_ppc64el.deb
 5561e28eef2a62440634c7419b9d83768661b5249fce08376396f4abec21c821 394860 bind9-utils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 d1b54f63f329149b1b157c0fb21418c8a51b8587c46356296e91310f8929de58 187148 bind9-utils_9.20.29-1~deb13u1_ppc64el.deb
 6a81cb924bf026913bd322a92fb44326698525fead6652842366ff1cbf5c6b99 10697 bind9_9.20.29-1~deb13u1_ppc64el-buildd.buildinfo
 d46c9378da6af22f7dea93ee39f9231681f8ad75a8856fadb3e09a7c84335ea0 266508 bind9_9.20.29-1~deb13u1_ppc64el.deb
Files:
 6a8cc972f56fc38430317bae0f3321b3 673088 debug optional bind9-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 779f33c32602d89c5b21c3b6fda27c31 297296 devel optional bind9-dev_9.20.29-1~deb13u1_ppc64el.deb
 620f9b4f0f1f315e03e7740bad4897ee 410384 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 1c2b0a30c144287dfdb33c2318b88ca3 168476 net standard bind9-dnsutils_9.20.29-1~deb13u1_ppc64el.deb
 3eb5a24cda4068baa69c154649227065 108300 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 3d850059e717544e8f95f80705b5fe0e 58444 net standard bind9-host_9.20.29-1~deb13u1_ppc64el.deb
 c1b4767002ed395e00b811894bcbed74 4307544 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 e166953282ae5957a71e9b738f617bcc 1299116 libs standard bind9-libs_9.20.29-1~deb13u1_ppc64el.deb
 442a974b54e1526b428073cdbda822b1 394860 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_ppc64el.deb
 33af56542fbb97b475162191cd4a1756 187148 net optional bind9-utils_9.20.29-1~deb13u1_ppc64el.deb
 41a651a9cc185c7a5d7f925b28eaf76d 10697 net optional bind9_9.20.29-1~deb13u1_ppc64el-buildd.buildinfo
 6a434a3eb30aa442f902a053259a51f9 266508 net optional bind9_9.20.29-1~deb13u1_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=rrkJ
-----END PGP SIGNATURE-----